Process Monitor – File Activity does automatic grouping of reads and writes.

First and only time in Theater Room 411, great room and it is too bad the other rooms aren’t this nice.  Only downside is no wi-fi in the room.

Really crowded room, almost full at this point.

70% of crashes due to 3rd party drivers
13% is Microsoft code
11% Unknown
6% Hardware Error

Have to get this presenter’s other slide deck, more info on RDS in general.

10 Gb/s x .1% = 10 Mb/s

Lots of Q&A time (30 mins almost), may have been a bit too much but still good.

MinWin is built, huge shift in striping out lots of old stuff and dependencies.  MinWin is bootable today by itself, ASCII art windows logo on boot.

Managed Service Account is like a System account for services with managed password but has separate security context.

Great demo on the entire process for setting up live migration.

World’s greatest make-up case full of hardware key loggers and sniffers

Nmap / Zenmap
(Net Witness) Investigator
iPerf
Cain and Abel
inSSIDer
Snort

You can use VLC to play captured and re-assembled video streams from wireshark.

Laura’s Lab Kit v10

Cace (Pilot, AirPcap)

www.netscantools.com/teched2009/ 40% off.

www.domaintools.com

Windows Scaling XP

TCP1323Opts

TCPWindowSize

Some stuff from other sections, but condensed into core goodness.

Dell did 1000 VM in 16-node cluster on one 16.5 TB CSV, wow.

Coalescing of timers allow for longer sleep states of CPUs.  Cool feature.

SLAT (MS) = EPT (Intel) = NPT (AMD) = RVI (AMD)

So much good info, now to attempt to retain it.

Operations Manager can make VMM do lots via management packs for keeping your VM’s and host working as best as possible.

Lots of PowerShell scripting possibilities via VMM and Hyper-V in general.  Lots of cmdlets for VM management.

The session was a little dry but so good pointers on what can be done.

sc qprivs servicename
sc qsidtype servicename

Hyper-V has had zero security patches since release.  Total isolation of VM and Parent partition as well in between VM.  Some choices made for security are annoying in little ways like no copy and paste via shared memory but done for VERY good reasons.  Avoids some of the security flaws that VMWare has allowed.

If you are using W2K8R2 Server Core check out sconfig, allows for much easier initial management and setup of server core.

Don’t put anything other than Hyper-V VHD files on CSV, it is not a tested or supported scenario.  CSV will most likely be expanded to support other things like SQL / Exchange / File services in future.

In a cluster one node can send IO to another node if storage connection is lost.

Refresh Failover Cluster Manager if changes are made in Hyper-V manager, or just make the change in FCM.

Current backup solutions such as DPM do not support CSV.  They need to be made CSV aware using new APIs.

You can rename the folder portion of VolumeX to something more useful.

WAIK 2.0
WinPE 3.0
DISM

Under Task Sequence –> Install –> Install Operating System to change image without recreating the whole task sequence

Change drivers attempt to inject via selection profiles

Great session and insight into MDT 2010.  Can’t wait to get Beta 2 and start trying it out.

VMM PRO requires Operations Manager.  Have to investigate if we need it and it is worth it.

Networking diagram is awesome.