Executive Summary:
In Windows Vista, most event IDs are the old event ID number + 4,096. Guest virtual machines (VMs) are typically insulated from one another, but they are still vulnerable to rogue host administrators. Tombstones include the name of the user or group, the object type, and the SID. Microsoft Office Isolated Conversion Environment (MOICE) automatically converts documents in old binary Office file formats to the XML-based format before opening the file.

Every month, Randy Franklin Smith answers your questions about Windows security. Click the links above to see individual Q&As from this month's column. Send your questions to Randy at rsmith@ultimatewindowssecurity.com.