A First Look at Windows Live™ OneCare™ 2.0 November 2007 For more information, press only: Rapid Response Team Waggener Edstrom Worldwide (503) 443-7070 rrt@waggeneredstrom.com Abstract This reviewers guide provides a first look at the features of Windows Live OneCare 2.0 and how it benefits nontechnical PC users. OneCare is an end-to-end PC care service that simplifies PC security, backup and performance tune-ups across multiple PCs in a home or small-business network. The information contained in this document represents the current view of Microsoft Corp. on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. This reviewers guide is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in, or introduced into a retrieval system, or transmitted in any form, by any means (electronic, mechanical, photocopying, recording or otherwise), or for any purpose, without the express written permission of Microsoft. Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights or other intellectual property. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. © 2007 Microsoft Corp. All rights reserved. CONTENTS Introduction .............................................................................................. 1 Windows Live OneCare 2.0 ................................................................... 2 A Simple and Easy-to-Understand Solution ......................................... 4 Protection Plus: All-in-One Security and Protection Service ............. 9 Performance Plus: Maintaining PC Performance and Reliability ..... 16 Data Protection ...................................................................................... 20 Multi-PC and Home Network Management ......................................... 23 Things to Try .......................................................................................... 25 System Requirements, Availability, Pricing and Licensing .............. 26 Appendix: Comparison to Other Microsoft Offerings ....................... 27 INTRODUCTION For proper PC care, most consumers need more than just anti-virus software. Although such protection is clearly a must-have, electronic assets such as digital photos, music and financial data must also be protected. Furthermore, today people are putting more “miles” on their PCs, which can lead to system clutter and performance degradation. And with multi-PC homes and wireless networks becoming mainstream, consumers must deal with the additional complexity of things such as printer sharing and network security. For the typical consumer this can present a huge challenge. But consumers do not want to deal with a disparate mix of products that must be purchased, installed and maintained; instead, they just want their PCs to work, which means they want the following: Software to help protect them from viruses and other threats. A PC that consistently runs quickly and efficiently. Protection of valuable data, regardless of its format or location. Simple instructions when user action is required. These issues have reached a new level of complexity now that many homes — and virtually all small businesses — have more than one PC, as well as some sort of network. This added complexity poses entirely new challenges, prompting questions such as “How do I consistently manage all my PCs?” and “How do I make sure my wireless network is properly secured?” Designed for the nontechnical home, home office or small-business user, Windows Live™ OneCare™ 2.0 is an end-to-end PC care service that goes beyond comprehensive malware protection to eliminate the complexity in backing up files, tuning up PCs and managing a network. Some of the features that differentiate OneCare are: Multi-PC and home network management. This includes the ability to remotely trigger OneCare actions on other PCs, centrally backup multiple PCs and enable security on a wireless network. (See pages 7 and 24 for more on these features.) Proactive fixes and recommendations and start time optimization. OneCare goes beyond basic tune-up tasks by examining the user’s specific system and software and using that information to optimize the computing experience, as well as helping the user remove startup applications that are unnecessarily taking up system resources. (See pages 17-19 for more on these features.) First Look: Windows Live OneCare 2.0 1 WINDOWS LIVE ONECARE 2.0 Windows Live OneCare 2.0 is a comprehensive, always-on PC care service for Windows® XP and Windows Vista® — designed for people who don’t want to worry about protecting and maintaining their PCs. Key features of Windows Live OneCare 2.0 include the following: Security and Protection Technologies Wi-Fi connection security (New) Real-time and scheduled anti-malware scanning Two-way managed firewall with automatic policy updates Internet Explorer® 7 Phishing Filter integration Microsoft Update integration OneCare advisories PC Performance Tuning and Optimization Proactive fixes and recommendations for PC health (New) Start-time optimizer/turn off unused programs (New) Automatic disk defragmentation and hard drive cleanup Data Backup and Restore Centralized backup for multiple local networked PCs (New) Online backup for photos (available at added cost) (New) Full and differential backups for key file types, including music, photos and financial documents Backs up to CD, DVD, external hard drive, local network drive and USBconnected devices Network and Multi-PC Management Multi-PC management and monitoring (New) Automatic printer-sharing configuration (New) Firewall Connection Wizard for complex connections Reporting, Licensing and Support Monthly report of service and results (New) Free version upgrades over the course of the 12-month subscription Telephone, chat and e-mail support Freedom to install OneCare on up to three PCs First Look: Windows Live OneCare 2.0 2 Building on Windows Currently, many competitive products require or recommend turning off features in Windows Vista for those products to run their AV solutions and work correctly. In contrast, OneCare simplifies the user experience by building on top of Windows Vista and Windows XP features whenever possible, taking over their configuration and management so that users don’t need to. Furthermore, OneCare is designed to take into account the varying feature set between Windows XP and Windows Vista, while providing a consistent user experience across both operating systems — a benefit for multi-PC environments in which both Windows XP and Windows Vista are used. Many of the technologies and utilities in Windows XP and Windows Vista were designed to meet a broad set of user needs. As such, they are highly configurable, and expose those options for the benefit of technical users. OneCare acts as the user’s “personal IT professional,” making sure that relevant Windows features are configured correctly. Some cases in which OneCare integrates with technologies in the Windows operating system include the following: Activating the Phishing Filter in Internet Explorer 7. Activating the Microsoft Update service. Configuring printer-sharing for all PCs in a OneCare circle.1 After initial configuration, OneCare monitors the user’s system to ensure that configuration settings stay that way — in essence acting as a “trusted technical advisor” who is always working on the user’s behalf to help initially configure their systems and keep them configured correctly. Ongoing Service and Updates As a subscription service, OneCare adapts to new technologies and changing user needs. It constantly works to keep itself up-to-date, using the OneCare service to retrieve information on new Internet-based threats, new programs that should be allowed to access the Internet, and even newly released home-networking hardware. At the other end of the OneCare Service, OneCare client software is complemented by a team of Microsoft IT professionals, who use the OneCare service as a channel to reach out to OneCare subscribers, keep a watchful eye over their PCs, deliver new features and constantly make adjustments to help keep user PCs running safely, quickly and reliably — in other words, to help make sure that user PCs “just work.” 1 All PCs running OneCare on a network are said to be part of the user’s OneCare circle. First Look: Windows Live OneCare 2.0 3 A SIMPLE AND EASY-TOUNDERSTAND SOLUTION Get Green, Stay Green Windows Live OneCare constantly monitors and cares for user PCs, communicating status with one easy-to-understand indicator of success: a color-coded icon that tells users at a glance that their PC is protected, backed up and tuned up. Located in the notification area of the Windows taskbar, the presence of the icon indicates that Windows Live OneCare is running in the background, while its specific color indicates the level of PC health and whether any user attention is required. A green icon means that status is Good, with Windows Live OneCare running in the background to help protect against malware. Protectionrelated features are up to date, and the PC is not due for a tune-up or backup. A yellow icon means that status is Fair. Usually, this means that the user has some action to take, such as scheduling or running a tune-up or backup or downloading a noncritical update. There is no immediate threat to the system, but the yellow icon indicates that the user should take action as soon as possible to return the system to green. A red icon means the PC is at risk and that immediate attention is required, such as might happen if Windows Live OneCare is unable to update itself with the latest virus definitions, or if the OneCare Firewall is turned off. Single Place for Status, On-Demand Tasks Windows Live OneCare doesn’t require surfing through complex instructions, navigating multiple layers of menus or deciphering confusing dialog boxes. Furthermore, because OneCare is automated, users should not need to interact with it very often. When they do, the user interface is a convenient First Look: Windows Live OneCare 2.0 4 single pane — a one-stop location for resolving any Yellow or Red conditions and performing on-demand tasks such as scanning for viruses, checking for updates, running tune-ups and backing up or restoring files. Clicking on the OneCare icon in the Windows taskbar displays the OneCare main console, which displays the following items: Status meter (No. 1 in the screenshot below) is a color-coded indicator of system health that corresponds to the OneCare Windows taskbar icon. If this area is not green, OneCare will display what actions need to be taken and, whenever possible, provide a convenient one-click solution. Status area (No. 2 in the screenshot below) provides additional information on the status of OneCare features, including the last time a task was completed, when that task is scheduled to run next, and links to take on-demand actions or view more information on various features. Quick links area (No. 3 in the screenshot below) may provide links to initiate virus and spyware scans, back up or restore data, change OneCare settings or get help with OneCare. This also links to the OneCare Help Center, which provides answers to common “how do I...?” questions, and instructions on how to get technical support. First Look: Windows Live OneCare 2.0 5 Automated, Straightforward and Intuitive Windows Live OneCare is simple and automated, helping to reduce the “work and worry” of PC care and safety concerns by completely automating such tasks whenever possible. However, when user intervention is required, clear instructions are provided immediately adjacent to the status meter. In keeping with the traffic light analogy for the taskbar icon, a green status meter signifies a Good status. No button is visible next to the status meter when it is green because no action is needed. A yellow status meter indicates that OneCare has detected a noncritical issue that needs the user’s attention, such as when OneCare is attempting to run an automated backup and detecting that a media swap is first required. In such cases, simple instructions and any applicable action buttons are displayed under “Actions to Take” to restore the status to green. A red status meter indicates a critical At Risk condition, such as when antivirus monitoring is turned off. In such cases, instructions and any applicable action buttons to restore the status to green are displayed. Such red-flagged situations represent the largest potential threats to overall PC care and should be addressed as quickly as possible. Easy to Stay Protected, Hard to Become Vulnerable OneCare was designed to make it easy for users to help protect and maintain their PCs, and to make it difficult to place PCs in a potentially unsafe state. If Windows Live OneCare detects anything that should be done to improve system health, it notifies the user and, whenever possible, provides a one-click solution. Alternatively, if a user is trying to perform a task that is not advised, such as turning off virus scanning, OneCare makes it more difficult to do so. Disabling safety-related or maintenance-related features typically requires clicking through several screens, thereby making it harder to place the user’s PC in an at risk state. First Look: Windows Live OneCare 2.0 6 Manage All PCs in One Place According to IDC’s 2006 U.S. Consumer PC Survey, Part 1 (Doc #205737, March 2007), more than one-third of respondents have two or more PCs in the home. Furthermore, 86 percent of survey respondents reported using some form of home networking, with 64 percent of that number using wireless networks.2 Clearly, multi-PC networks and the issues they introduce are becoming relevant to mainstream PC users more and more frequently. OneCare helps take the complexity out of managing — and getting the most out of — such an environment with a multi-PC architecture in which all PCs running OneCare on a network are part of the user’s OneCare circle. Within that circle, users can centrally monitor and manage the OneCare service across multiple PCs, back up multiple PCs to a central location, configure printer sharing and configure wireless security for home networks. 2 IDC, IDC's 2006 U.S. Consumer PC Survey, Part 1," Doc # 205737, March 2007. First Look: Windows Live OneCare 2.0 7 Comprehensive Monthly Reports OneCare handles many things in the background so that users don’t need to deal with the complexity of managing and protecting their PCs. However, it also keeps users informed through comprehensive monthly reports. Note: Monthly reports begin appearing a month after OneCare is initially installed, so reviewers may not see them unless they wait for this period of time. First Look: Windows Live OneCare 2.0 8 PROTECTION PLUS: ALLIN-ONE SECURITY AND PROTECTION SERVICE Although consumers are using their PCs for increasingly diverse and critical tasks, the majority of them do not have sufficient protection. Microsoft research shows that only about 33 percent of consumers have effective antivirus protection, while the other two-thirds are at risk due to reasons such as not having an anti-virus product installed, having an expired trial product or having outdated virus signatures.3 And even fewer consumers are wellprotected against other forms of malware, such as spyware or adware. Most Internet-based threats are targeted at these vulnerabilities, that is, consumers without the knowledge or technologies to protect themselves. OneCare Protection Plus is a comprehensive set of features designed to help protect PCs from common forms of malware and other Internet-based threats. Such features include the following: Malware monitoring and protection, with automatic definition updates Managed two-way firewall with automatic policy updates Internet Explorer 7 Phishing Filter integration Microsoft Update activation OneCare advisories Wi-Fi connection security The following sections explore these capabilities further to show how OneCare provides a comprehensive, managed protection offering. Protection Plus Status and On-Demand Actions The OneCare main console provides a brief overview of the status of all Protection Plus automated features, as well as quick links for initiating common on-demand tasks. Virus and Spyware Scanning and Monitoring Windows Live OneCare helps protect users by automatically scanning for malware in two ways: 3 Scanning files for known viruses as they are used, and using heuristics to detect if they try to perform an operation outside their expected behavior. Microsoft internal data First Look: Windows Live OneCare 2.0 9 Performing regularly scheduled scans of PC files for viruses or spyware. When OneCare virus and spyware monitoring finds a potentially infected file, it first places restrictions on the file to help prevent it from doing harm. It then takes the appropriate action, which, depending on the circumstances, may include displaying a dialog box asking the user what to do with the file, automatically trying to clean the file, placing the file in quarantine or preventing the file from opening. OneCare also makes it easy to perform on-demand scans, which users can do from the main OneCare console. Alternatively, users can initiate ondemand scans using right-click functionality in Windows Explorer or from locations such as the My Computer icon. Windows Live OneCare has been certified by ICSA Labs, a leading authority on Internet-based threats, as an effective solution to combat viruses and other forms of malicious code, as well as providing a quality firewall service. In addition, OneCare has achieved West Coast Labs’ Checkmark certification, meeting the organization’s criteria for protection against viruses and Trojans. OneCare also has achieved VB100 certification from Virus Bulletin. First Look: Windows Live OneCare 2.0 10 Note: In addition to checking files against specific malware definitions, the scanning engine in OneCare uses heuristics to check if an application behaves like malware by trying to perform an operation outside its expected behavior — for example, such as writing and deleting files, or accessing SMTP or e-mail functions. If an application exhibits such behavior while running, OneCare can detect it and take the appropriate action, thereby giving the user added protection against new forms of malware for which specific definitions have not yet been created and/or downloaded to the PC. Managed, Two-Way Firewall The Windows Live OneCare managed two-way firewall helps protect PCs and user data by monitoring and, if necessary, blocking both incoming and outgoing network traffic: Incoming traffic. By default, all unsolicited inbound traffic is blocked. Outgoing traffic. When any program on the PC tries to make outgoing contact with the Internet, behavior depends on whether OneCare recognizes the program and whether it is on the “approved” list. Note: Unlike the OneCare firewall, the Windows XP firewall does not have the capability to block outbound traffic. The Windows Vista firewall does have this capability; however, the user is required to configure it, because by default it only blocks selected known system services. In contrast, the OneCare firewall is configured by default to block all applications unless OneCare or the user decides to allow them. (Section continues on next page.) First Look: Windows Live OneCare 2.0 11 Known Programs For outgoing traffic, OneCare ships with a list of known and approved programs, such as Internet Explorer, Windows Media® Player and popular third-party software. If a program is known and on the “approved” list, OneCare allows the program to communicate with the Internet and notifies the user. Furthermore, as a subscription service, OneCare regularly updates its own firewall policies to add new “safe” programs to that list as they are introduced by Microsoft or other software providers. The OneCare firewall uses a cryptographic hash of the executable program to identify it. Unknown Programs By default, if a program attempting to send information is not known to OneCare, OneCare will display a firewall alert requesting that the customer determine whether the application should be allowed or denied access to the Internet. The alert provides the name, publisher, location, company and version of the file to aid the user in making an informed decision. After customers choose to allow a program to access the Internet, they will not be prompted again for permission, and the program will appear in the Allowed Programs List, located in the OneCare Firewall Advanced Settings. Network Awareness The OneCare firewall is “network aware.” It asks the user to identify his or her home or small-business network, and allows typical home-networking traffic (such as required to share files or printers) when the user is connected to that network. In contrast, when the user is connected to a public or unknown network, such as at an airport or hotel, OneCare provides additional protection by being more restrictive about which network traffic is allowed. Note: The Windows XP firewall is not network-aware. The Windows Vista firewall is; however, there are two key differences between it and the OneCare firewall: The OneCare firewall tries to determine when a user has a direct connection to the Internet, such as a dial-up connection or a single PC connected directly to a broadband modem, and automatically classifies it as “public” to help protect users from misclassifying their networks. The OneCare firewall automatically allows common home-networking traffic when the user is in a “private” zone to help ensure application compatibility. Changing Firewall Settings Microsoft recommends that customers keep their firewall setting at Automatic so they are notified when an unknown program attempts to access the Internet, but known and approved programs are automatically provided with access to the Internet to help minimize customer interruptions. The firewall in First Look: Windows Live OneCare 2.0 12 OneCare provides four settings for customers, which are accessible through the OneCare settings and the Firewall tab. Automatic. This is the default setting. OneCare automatically allows known and approved programs to access the Internet, but asks the customer for permission when an unknown application attempts to do the same. Ask first. OneCare prompts customers to approve a program the first time it attempts to access the Internet. After the program is approved, it is added to the firewall settings. Public place. This is the recommended setting for public networks. OneCare disables certain features, such as discovery and sharing, and closes some open ports that are otherwise allowed. Off. OneCare provides an option for completely turning off the firewall, although it is highly advised that customers do not do so. Firewall Connection Tool Try it out! See the Things to Try section near the end of the document for instructions on trying out this feature. Users often turn off PC firewalls because they are experiencing trouble with a blocked application, such as when trying to share files or printers with other computers on the network or connect to a PC with Windows Media Center. To minimize the situations when a user should need to disable the OneCare firewall, users who attempt to do so are instead prompted with the option to run the Firewall Connection Tool. The Firewall Connection Tool is also accessible from the Firewall Settings tab. (Section continues on next page.) First Look: Windows Live OneCare 2.0 13 The Firewall Connection Tool provides helpful information, including applications that can be provided with access, descriptions of them, and the specific ports and protocols to which the applications will be given access if enabled. Wireless Connection Security (New) Configuring and securing wireless networks is still one of the most difficult problems that home PC users face. In fact, Microsoft research shows that 40 percent of home wireless networks are not properly secured. First Look: Windows Live OneCare 2.0 14 OneCare extends its promise of comprehensive PC care to the management of home wireless networks, enabling users to easily do the following: Detect an unsecure wireless network. Secure a wireless network (for supported routers) using 128-bit WEP. Add a PC to a secure or unsecure wireless network. Note: The Wireless Connection Security feature is only accessible if OneCare detects a supported wireless router. OneCare supports popular models from leading manufacturers, including Linksys, NETGEAR, D-Link, Buffalo, Belkin and others. The list of supported routers is constantly being updated and expanded, with software updates to support those new routers automatically pushed down to the OneCare client. To support the broadest range of hardware, OneCare will turn on 128-bit Wired Equivalent Privacy (WEP) security. Internet Explorer 7 Phishing Filter Integration Windows Live OneCare activates the Microsoft Phishing Filter in Windows Internet Explorer 7 to help detect and block known online ID scams and theft sites. The status of the Phishing Filter is shown in the OneCare main console, and turning it off will put OneCare in a yellow state with a message indicating why. Turning on the Phishing Filter protection in Internet Explorer 7 across all PCs in a OneCare circle is simply a matter of clicking the Turn on button in the OneCare console. Microsoft Update Integration Windows Live OneCare integrates with the Microsoft Update service to help ensure that the latest Microsoft critical security updates for the operating system and other applications are installed promptly and efficiently. Once installed, OneCare checks to make sure the PC is set to automatically download and install updates for all the products supported by Microsoft Update, including Windows and the Microsoft Office system. OneCare Advisories When new worms, viruses and other security threats are identified, Windows Live OneCare displays advisories that inform customers of a new or changed security threat. The content of an advisory will vary depending on the type of threat, and may contain steps to take to guard against the threat or a link to a newly released security update for immediate installation. First Look: Windows Live OneCare 2.0 15 PERFORMANCE PLUS: MAINTAINING PC PERFORMANCE AND RELIABILITY Protecting, maintaining and backing up one or more PCs involves multiple tasks that, if performed separately, would be complex, time-consuming and hard to track. Windows Live OneCare Performance Plus is a PC tune-up service that automates a variety of tasks that typically are accomplished manually, using a number of different applications or utilities. Performance Plus Status The OneCare main console provides a brief overview of the status of all Performance Plus automated features, as well as quick links for viewing the last tune-up report and starting a new tune-up. Tune-Up “Batches” On-Demand Tasks Windows Live OneCare “batches” common on-demand tasks into regularly scheduled tune-ups, making them easy to manage and saving time for the customer. The tasks that Windows Live OneCare performs as part of a tune-up include these: Remove unnecessary files. OneCare helps free up hard disk space by deleting files that are no longer needed and compressing files that have not been recently used. This task is turned off by default and must be turned on in the OneCare settings. By default, when this task is turned on, Tune-up removes unnecessary program installation files, ActiveX ® controls, and Java applets downloaded from the Internet. It also removes temporary Windows, Internet, Microsoft Office, Microsoft Error Reporting, and offline files. Through such cleanup, OneCare will typically free up 5 to 10 MB of disk space. First Look: Windows Live OneCare 2.0 16 Defragment the hard disk. OneCare consolidates fragmented files and folders on the PC’s hard disk, so that each file occupies a single contiguous space on the disk. If the disk is highly fragmented, OneCare will defragment it over several tune-ups. Scan for viruses and unwanted software. This task activates a full scan of the user’s hard disk, as described under Protection Plus. Check for files to back up. This task checks for files that are new or have changed since the last backup. If files are found, a new item appears in the “Actions to Take” list. If a customer chooses to back up files to an external hard drive, Tune-up will back up the files automatically during this task. Check for missing critical updates. This task integrates with Microsoft Update to check that the PC is up to date with all critical updates. If it is not current, customers will receive an “action-to-take” message with a shortcut to the Microsoft Update Web site to install the needed updates. Note: When Windows Live OneCare is installed, the PC is set to download and install updates from Microsoft as soon as they become available. This happens automatically, whether or not Tune-up runs. The Check for missing updates from Microsoft task in Tune-up is a secondary check, in case any high-priority updates have since become available, were previously missed or failed to install. Proactive Fixes and Recommendations (New) As part of the tune-up process, OneCare also looks at the configuration of the user’s specific system and makes proactive fixes and recommendations to improve the computing experience. OneCare currently examines many areas and settings — including installed versions of some third-party software and drivers — to help improve PC performance, reliability and security. Among other things, OneCare does the following: Turns on Internet Explorer 7 pop-up blocker. Adjusts Internet Explorer security and privacy settings to default levels of Medium High. (No action is taken if current level is higher than default.) Restores Internet Explorer host file (to prevent browser hijacking). Adjusts Microsoft Office Word, Excel® and PowerPoint® macro security settings to default High levels. Deactivates remote registry service, which enables remote users to change registry settings on a computer. (This service is turned off in Windows Vista by default. OneCare turns it off in Windows XP as well.) Removes broken entries from Startup. Limits Internet Explorer cache size for broadband connections. (For broadband connections, it is often faster to fetch content from a Web site than to search through a large local cache.) Cleans up temporary Windows and Internet Explorer files. First Look: Windows Live OneCare 2.0 17 Enables and/or optimizes the size of virtual memory. (Virtual memory is enabled, if disabled, and size is set based on amount of RAM and available disk space.) Clears failed jobs in printer queue. Restores printer spooling. Prevents installation failures on 32-bit systems due to 64-bit flag set by some installers. Turns on User Account Control (UAC) installation detection for Windows Vista. (When enabled, this feature prompts the user for consent or credentials when Windows Vista detects an installer. If disabled, applications may fail silently or in a nondeterministic manner.) Examines Winsock DLL and restores if missing or corrupted. Enables transport layer security (TLS) and secure sockets layer (SSL) protocols (e.g., Windows Live Messenger may not work). Restores XPS and WPF document-viewing capability. Sets a screen saver to prevent monitor burn-in. Enables System Restore. OneCare also can scans the user’s system for version information on common software and provides links to upgrade to the latest recommended version. Examples include the Flash player, Java Runtime, Adobe Acrobat Reader, DVD-burner software, and printer, display and graphics adapter drivers.* At this time, these third-party functionality are still in beta testing and may not be released with the service. As time goes on, the scope of proactive fixes and recommendations will be enhanced and expanded based on anonymous feedback collected through the OneCare service. Note: Proactive fixes and recommendations are generated through silent daily and monthly scans. Based on the type and severity of the issue, OneCare may do the following: Fix the issue silently and report that it did so in the OneCare monthly report. Recommend the fix as an action item in the monthly report Recommend the fix as an action item in the main OneCare user interface. First Look: Windows Live OneCare 2.0 18 Start Time Optimizer (New) Try it out! See the Things to Try section near the end of the document for instructions on trying out this feature. Many people notice that their PCs seem to start up more slowly over time — the result of an ever-increasing number of start-up applications as people continue to install new programs. Although many such applications are unnecessary, some others are useful, especially if they support functionality that people use all the time. OneCare helps users decide which startup applications to keep and helps them get rid of the rest. It does so by monitoring startup applications and detecting which are infrequently used, presenting that list to the user along with the ability to choose which of those programs to disable. Depending on which startup applications are disabled, having fewer such programs running may improve runtime performance as well as startup times. Notes: OneCare monitors the list of active windows, list of running processes and list of browser add-ons to detect if the primary functionality of an application is being used. In cases where OneCare cannot discern such information, it errs on the side of caution and makes no recommendation. First Look: Windows Live OneCare 2.0 19 DATA PROTECTION Home and small-business users are storing more and more important data solely on their PCs, including digital photos, financial data and more. However, backing up such data traditionally has been a manual process that is often overlooked or neglected. Even when backups are done, the process can be a hit-or-miss exercise, requiring consumers to navigate complex directories to find the files they want to protect. Windows Live OneCare provides several features designed to automate and simplify the backup process, including the following: Automated and on-demand backup and restore Centralized backup for multiple local networked PCs Online photo backup (optional, at an additional charge) Backup Status The OneCare main console provides a brief overview of backup status, as well as a quick link for initiating an on-demand backup. Automated and On-Demand Backup and Restore Windows Live OneCare works to eliminate the hassle and uncertainty of the backup process. The first time a backup is run, OneCare helps the user specify the target device for the backup, with options that include shiny media such as CDs or DVDs, an externally connected hard drive, a local network share, and USB-connected storage devices. First Look: Windows Live OneCare 2.0 20 Next, OneCare asks the user which types of files to back up, presenting the options in familiar terms such as Picture files or Music files, with OneCare handling the mapping of these terms to the appropriate file extensions. Users can also specify other directories and/or files to back up. After an initial backup has been done, OneCare performs regularly scheduled incremental backups, copying only files that are new or have been changed, to save disk space and speed the process. Backups will run automatically if the appropriate backup media is present. If the backup media is not present, the user is prompted to make it available. Users can also initiate on-demand backups, upon which they are asked if they would like to use current settings or perform a custom backup, in which case they can change the files and directories to back up, modify the target location for the backup, or complete a full backup of all files. Files are backed up in a .zip format for easy extraction and maintenance of the original folder structure, and restored using the same folder structure captured in the last backup. Users can also restore individual files. Online Photo Backup (New) As an added safeguard for irreplaceable digital photos, for which the only copies often reside on a PC, OneCare provides the option to back up such files to an online repository. Through such added safety, digital photos can be protected from perils such as theft, catastrophic hardware failure, fire or floods. This is a premium feature and includes 10 GB of storage space for an additional cost. Note: The online space for backing up photos is meant to support off-site backup of data only. It cannot be used for sharing files and can only be accessed through the backup functionality of OneCare. Beta support for this feature has ended and it cannot be accessed until the OneCare 2.0 launch date. First Look: Windows Live OneCare 2.0 21 Centralized Backup for Multi-PC Environments (New) OneCare eliminates the need to configure backups for each PC separately, instead enabling the user to centrally configure and monitor backups for all PCs covered under the same OneCare subscription, with the data from all PCs backed up to a central location. OneCare detects USB-connected storage on any PCs in the user’s OneCare circle, and allows the user to designate that device as a centralized backup location. To further simplify backup configuration for the consumer, any new PCs added to the user’s OneCare circle automatically inherit the centralized backup settings and back up to the same central location. (See the screen shot on the next page.) First Look: Windows Live OneCare 2.0 22 MULTI-PC AND HOME NETWORK MANAGEMENT In addition to the aforementioned multi-PC features — centralized backups and adding a second PC to a wireless network — OneCare provides other features designed to simplify the management and use of multi-PC environments. Such features include these: Multi-PC management and monitoring Automatic printer sharing Multi-PC Management and Monitoring (New) OneCare enables users to monitor and take actions on other PCs running OneCare on the same home network — called the user’s OneCare circle. For example, if the firewall on Junior’s PC has been turned off, the OneCare console running on Dad’s PC will show that the status of Junior’s PC is Red and enable Dad to turn on the firewall on Junior’s PC from his own. Similarly, Dad can remotely turn on automatic updates or initiate a backup if those steps are necessary to return OneCare to green status. First Look: Windows Live OneCare 2.0 23 Automatic Printer Sharing (New) Both Windows XP and Windows Vista provide built-in functionality called Windows Point and Print, which can be configured to allow printing from one machine to another. However, many users are unaware of this feature or may find it challenging to configure. OneCare uses its multi-PC infrastructure to automatically configure all PCs in the user’s OneCare circle so that users can easily print from any PC to a USB printer attached to any other PC in the same circle. In setting this up, OneCare handles the complexity of installing the necessary printer drivers on the PCs and configuring printer sharing. By default, this functionality is enabled to share all printers. However, users can change settings so that no printers attached to a particular machine are shared, or can select a particular printer and prevent it from being shared. Note: For this feature to work the following conditions must be met: Both source and destination systems must have the same architecture (e.g. 32bit or 64-bit). Both PCs must be part of the same OneCare circle and subscription, and the subscription must be active. Both PCs must be turned on and be on the same local network. Printers must be supported and must use “user mode” drivers. (Most printers released in the past three to four years satisfy these conditions.) First Look: Windows Live OneCare 2.0 24 THINGS TO TRY Note: These instructions were accurate at the time of publication. However, updates to the service may occur at any time and these steps may no longer match the user experience. If you have questions or things just aren’t looking right, please contact Waggener Edstrom (see the title page of this document for contact information) for help. Start Time Optimizer 1. Open the OneCare main console by clicking on the tool tray icon or by clicking on the OneCare entry in the Start, Programs menu. 2. Select Change my Startup Settings from the Performance Plus section of the page. 3. If you are running Windows Vista, you will be presented with a UAC prompt. Choose Continue, or enter your administrative credentials as appropriate. If you are running Windows XP you will need to be signed in as an administrator. 4. Review the list of unused programs. Click on the arrow next to a program name to get more information on the program. 5. Choose the appropriate radio button to turn a program on or off. 6. Click on OK. Firewall Connection Tool 1. Open the OneCare main console by clicking on the tool tray icon or by clicking on the OneCare entry in the Start, Programs menu. 2. Select Change OneCare Settings from the left-hand side of the screen under Common Tasks. 3. If you are running Windows Vista, you will be presented with a UAC prompt. Choose continue or enter your administrative credentials as appropriate. If you are running Windows XP you will need to be signed in as an administrator. 4. Go to the Firewall tab. 5. Move the slider all the way down. Click on Apply. 6. Answer “Yes” to the dialog asking if you want to run the Firewall Connection Tool instead of turning off the Firewall. 7. Choose any item from the list. Note the detailed description listed below it that explains what this setting means and which ports and protocols are used. 8. Click on OK. 9. Note that the slider on the firewall tab has been reset to the original level and that the firewall is still on. First Look: Windows Live OneCare 2.0 25 SYSTEM REQUIREMENTS, AVAILABILITY, PRICING AND LICENSING Customers can obtain OneCare through various means, including from retail stores and as a download from http://onecare.live.com. System Requirements PC with 300 MHz or faster CPU speed Windows XP (Home Edition, Professional Edition, Media Center Edition or Tablet PC Edition) with Service Pack 2 (SP2) or Windows Vista (Home Basic Edition, Home Premium Edition, Business Edition and Ultimate Edition). (Note: Windows Vista x64 is supported, but Windows XP x64 is not.) Internet Explorer 6 or higher for Windows XP SP2 (Phishing Filter activation requires Internet Explorer 7) 256 MB of RAM and 600 MB of available hard disk space 56 Kbps or faster Internet connection (broadband recommended) Readable CD or DVD drive (required only for installation from physical media) CD or DVD burner, external hard drive, locally networked PCs, or USBconnected storage device required for Backup and Restore functionality Notes: Windows Live OneCare includes automated assistance with uninstalling products that conflict with Windows Live OneCare. The beta version of OneCare 2.0 will be available in U.S. English, German and Japanese only. When OneCare 2.0 formally ships, it will support all the same languages as version 1.5. Pricing and Licensing The pricing of OneCare is straightforward: $49.95 ERP in the United States for a one-year subscription (prices within each market will likely be comparable). As part of the subscription price, up to three active PCs are licensed and associated with customers’ unique Microsoft Passport ID. Customers who have more than three PCs to protect and maintain with Windows Live OneCare would simply acquire another license, which would cover up to an additional three PCs. Major version upgrades are provided automatically and at no additional charge during the subscription period. Customers using OneCare 1.5 who have an active subscription will get the upgrade to OneCare 2.0 at no additional charge. 90-Day Free Trial To take the worry out of trying OneCare, customers can try it for 90 days free of charge at http://onecare.live.com. First Look: Windows Live OneCare 2.0 26 APPENDIX: COMPARISON TO OTHER MICROSOFT OFFERINGS The following table shows the differences between Windows Live OneCare 2.0 and other Microsoft anti-malware related offerings. For individuals or home (No IT) Malicious Software Removal Tool Remove most-prevalent viruses Windows Defender Windows Live OneCare Safety Scanner Remove known viruses Real-time anti-virus Remove known spyware Real-time anti-spyware Additional offerings for target audience: For enterprises Windows Live OneCare Forefront™ Client Security + Managed Firewall + IT Infrastructure Integration and Customization + PC Performance Tuning + Centralized Management and Reporting + Data Backup and Restore + Home Environment Support First Look: Windows Live OneCare 2.0 27