本帖最后由 zdshsls 于 2011-3-22 11:11 编辑
跟本人之前说的一样,MFEP的动作要来了,可惜是大动作,不是小动作,嘻嘻。
让我们一起期待Microsoft Forefront Endpoint Protection 2012的Beta版本发布吧!
MFEP2012隐私声明【帅帅,翻译一下重点吧,机器翻译的太差】
MFEP2012隐私声明文档
Microsoft Forefront Endpoint Protection 2012 CTP Privacy Statement
Last updated: February 2011
Microsoft is committed to protecting your privacy, while delivering software that brings you the performance, power, and convenience you desire in your personal computing. This privacy statement explains many of the data collection and use practices of Microsoft Forefront Endpoint Protection 2012 (“FEP”). This is a preliminary disclosure that focuses on features that communicate with the Internet and is not intended to be an exhaustive list. It does not apply to other online or offline Microsoft sites, products, or services.
Collection and Use of Your Information
The information we collect from you will be used by Microsoft and its controlled subsidiaries and affiliates to enable the features you are using and provide the service(s) or carry out the transaction(s) you have requested or authorized. It may also be used to analyze and improve Microsoft products and services.
In order to offer you a more consistent and personalized experience in your interactions with Microsoft, information collected through one Microsoft service may be combined with information obtained through other Microsoft services. We may also supplement the information we collect with information obtained from other companies. For example, we may use services from other companies that enable us to derive a general geographic area based on your IP address in order to customize certain services to your geographic area.
Except as described in this statement, personal information you provide will not be transferred to third parties without your consent. We occasionally hire other companies to provide limited services on our behalf, such as packaging, sending and delivering purchases and other mailings, answering customer questions about products or services, processing event registration, or performing statistical analysis of our services. We will only provide those companies the personal information they need to deliver the service, and they are prohibited from using that information for any other purpose.
Microsoft may access or disclose information about you, including the content of your communications, in order to: (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the services; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers, or the public. We may also disclose personal information as part of a corporate transaction such as a merger or sale of assets.
Information that is collected by or sent to Microsoft by FEP may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union, the European Economic Area, and Switzerland.
Collection and Use of Information about Your Computer
When you use software with Internet-enabled features, information about your computer ("standard computer information") is sent to the Web sites you visit and online services you use. Microsoft uses standard computer information to provide you Internet-enabled services, to help improve our products and services, and for statistical analysis. Standard computer information typically includes information such as your IP address, operating system version, browser version, and regional and language settings. In some cases, standard computer information may also include hardware ID, which indicates the device manufacturer, device name, and version. If a particular feature or service sends information to Microsoft, standard computer information will be sent as well.
The privacy details for each FEP feature, software or service listed in this privacy statement describe what additional information is collected and how it is used.
Security of your information
Microsoft is committed to helping protect the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure. For example, we store the information you provide on computer systems with limited access, which are located in controlled facilities.
Changes to this privacy statement
We will occasionally update this privacy statement to reflect changes in our products, services, and customer feedback. When we post changes, we will revise the "last updated" date at the top of this statement. If there are material changes to this statement or in how Microsoft will use your personal information, we will notify you either by posting a notice of such changes prior to implementing the change or by directly sending you a notification. We encourage you to periodically review this statement to be informed of how Microsoft is protecting your information.
For More Information
Microsoft welcomes your comments regarding this privacy statement. If you have questions about this statement or believe that we have not adhered to it, please contact us at .
Microsoft Privacy, Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 USA • 425-882-8080
Specific features
The remainder of this document will address the following specific features:
Customer Experience Improvement Program
What This Feature Does:
The Customer Experience Improvement Program (CEIP) collects basic information about your hardware configuration and how you use our software and services in order to identify trends and usage patterns. CEIP also collects the type and number of errors you encounter, software and hardware performance, and the speed of services. We will not collect your name, address, or other contact information.
Information Collected, Processed, or Transmitted:
For more information about the information collected, processed, or transmitted by CEIP, see the CEIP privacy statement at http://go.microsoft.com/fwlink/?linkid=52097
Use of Information:
We use this information to improve the quality, reliability, and performance of Microsoft software and services.
Choice/Control:
Forefront Endpoint Protection clients deployed through Configuration Manager receive the same setting for CEIP as was selected during the setup of Forefront Endpoint Protection 2012 on the Configuration Manager server.
If you choose to participate and later change your mind, you can modify the CEIP setting at any time using the following procedures.
For Client Machines
From the Forefront Endpoint Protection client UI- To change the CEIP settings on the client, from the Help menu, click the link Customer experience improvement program and select I don't want to join the Customer Experience Improvement program or I want to join the Customer Experience Improvement program.
Registry setting- The administrator cannot control the CEIP settings through a Forefront Endpoint Protection policy created in the Configuration Manager console. To configure the CEIP setting, create the following registry value on the Forefront Endpoint Protection client computer.
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft AntiMalware\Miscellaneous Configuration\SqmConsentApprove
· Setting this value to 1 will join the CEIP (default).
· Setting this value to 0 will not join the CEIP.
You should restart your computer for this change to take effect.
After the registry value has been created the user can no longer change this setting from the Forefront Endpoint Protection client Help menu.
For Forefront Endpoint Protection on Configuration Manager
After installing Forefront Endpoint Protection on your Configuration Manager server, you cannot change your membership in CEIP through the UI.
To manually configure the CEIP setting, modify the following registry value on the Forefront Endpoint Protection server: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Forefront\Forefront Endpoint Protection 2010\config\SqmEnabled
· Setting this value to 1 will join the CEIP.
· Setting this value to 0 will not join the CEIP.
You should restart your computer for this change to take effect.
Microsoft Error Reporting
What This Feature Does:
Microsoft Error Reporting provides a service that allows you to report problems you may be having with FEP to Microsoft and to receive information that may help you avoid or solve such problems.
Information collected, processed, or transmitted:
Error reports might unintentionally contain personal information. For example, reports might contain the names of folders on your computer that could include the name of your Windows user account. Microsoft does not use this information to identify you or contact you. To learn more about error reports, see http://go.microsoft.com/fwlink/?linkid=50293.
Use of Information:
We use the error reporting data to solve customer problems and improve our software and services.
Choice/Control:
Microsoft Error Reporting is turned on by default so that we can automatically collect information about the errors you encounter while using FEP in order to improve the commercially released software. When Microsoft needs additional data to analyze the problem, you will be prompted to review the data and choose whether or not to send it. You can change your Microsoft Error Reporting settings at any time by:
For Client Machines
You can disable the automatic reporting of errors that may contain the names of folders on your computer by creating
1)a registry value named "DisableGenericReports" with any type or value under "HKLM\Software\Microsoft\Microsoft Security Essentials."
2) a registry REG_DWORD value named "DisableGenericReports" with value ‘1’ under "HKLM\Software\Microsoft\Microsoft Antimalware\Reporting"
This setting will be applied to ANY Windows Error Reporting for the client system.
For Servers
You can disable the automatic reporting of errors that may contain the names of folders on your computer by changing the value for the following registry key::
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Forefront\Forefront Endpoint Protection\config\ReportError”
If the value is set to 1, error reporting is enabled (default). If it is 0, reporting is disabled.
CAUTION: Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. You can also use the Last Known Good Configuration startup option if you encounter problems after manual changes have been applied.
Important Information:
Enterprise customers can use Group Policy to configure how Microsoft Error Reporting behaves on their computers. Configuration options include the ability to turn off Microsoft Error Reporting. If you are an administrator and wish to configure Group Policy for Microsoft Error Reporting, technical details are available at http://technet.microsoft.com/en-us/library/cc709644.aspx.
Microsoft Update
What This Feature Does:
Microsoft update is a service that provides Windows updates as well as updates for other Microsoft software, including FEP. For details about what information is collected, how it is used and how to change your settings, see the Update Services Privacy Statement at http://go.microsoft.com/fwlink/?linkid=50142.
Choice/Control: For details about controlling this feature, see the Update Services Privacy Statement at http://go.microsoft.com/fwlink/?linkid=50142
Spynet
What This Feature Does:
The Microsoft SpyNet antimalware community is a voluntary, worldwide community that includes Microsoft FEP users. Through Microsoft SpyNet, users can report malware and other forms of potentially unwanted software to Microsoft. Through Microsoft SpyNet, reports about malware and potentially unwanted software are sent to Microsoft. The type of information that is sent in reports depends on your level of Microsoft SpyNet membership.
Information Collected, Processed, or Transmitted:
Microsoft SpyNet reports include information about the files or programs in question, such as file names, cryptographic hash, vendor, size, and date stamps. In addition, Microsoft SpyNet might collect full URLs to indicate the origin of the file, which might occasionally contain personal information such as search terms or data entered in forms. Reports might also include the actions that you applied when Microsoft FEP notified you that software was detected. Microsoft SpyNet reports include this information to help Microsoft gauge the effectiveness of Microsoft FEP ability to detect and remove malicious and potentially unwanted software.
Reports are automatically sent to Microsoft when:
· Microsoft FEP detects software or changes to your computer by software that have not yet been analyzed for risks.
· You apply actions to software that Microsoft FEP has detected.
· Microsoft FEP completes a scheduled scan and automatically applies actions to software that it detects, according to your settings.
Reports might unintentionally contain personal information. To the extent that any personal information is included in a report, Microsoft does not use the information to identify you or contact you.
You can join Microsoft SpyNet with a basic or an advanced membership. If you choose the recommended settings during Microsoft FEP setup, you join with a basic membership. Basic member reports contain the information described above. Advanced member reports are more comprehensive and might occasionally contain personal information from, for example, file paths and partial memory dumps. These reports, along with reports from other Microsoft FEP users who are participating in Microsoft SpyNet, help Microsoft researchers discover new threats more rapidly. Malware definitions are then created for programs that meet the analysis criteria, and the updated definitions are made available to all users through Microsoft Update.
Occasionally, Microsoft might request a Sample Submission report. This report contains specific files from your computer that Microsoft suspects might be potentially unwanted software. The report is used for further analysis. You will be asked each time if you want to send this Sample Submission report to Microsoft.
To help protect your privacy, reports sent to Microsoft over an encrypted connection.
Use of Information:
Microsoft SpyNet reports are used to improve Microsoft software and services. The reports might also be used for statistical or other testing or analytical purposes, and for generating definitions. Only Microsoft employees, contractors, partners, and vendors who have a business need to use the reports are provided access to them.
Choice/Control:
Running Microsoft FEP recommends you to be a member of Microsoft SpyNet at the Basic level of membership. You can decide not to be a member of Microsoft SpyNet or you can extend your membership to an advanced membership. If you choose an advanced membership, you will be asked if you want to permit or deny changes made by software that has not yet been classified for risks. Basic members will not be asked to review changes by this software and the changes will be permitted.
To change your Microsoft SpyNet membership
For Client Machines
In case organizational policy allows you to configure Microsoft SpyNet settings, use the options provided in the Microsoft FEP Settings.
For Servers
Use the FEP Policy for applying the SpyNet membership configuration to managed computers collections. You can decide whether you allow to the end users to override your SpyNet settings on their computers through FEP SpyNet Policy configuration.
Support Tool
What this feature does: When you call Customer Support with a technical issue, a support technician may ask you to run a support tool. The tool collects technical information required for the support staff to better understand and resolve the issue. You send the information collected by the tool to the support technician by email. The information is not sent automatically.
Information collected, processed, or transmitted: The tool collects:
Product-specific log files, System Center Configuration Manager logs (if applicable) and recent event log entries of your computer and Windows Update
Product Registry settings
System Data (OS and drivers data, computer data, applications and processes)
Files sent to the support technician will be automatically deleted 90 days after the Service Request has closed.
Choice and control: The user fully controls the collection of the information and its transmission to Microsoft by manually running the tool and manually sending the collected information by email to the support technician.
Antimalware-related data collected from your computer
Microsoft FEP collects antimalware-related data from your computer to help protect it. The following table explains about the types of data collected and how we use this data.
Virus and spyware protection
· Version of virus and spyware definitions
· Virus and spyware protection version Whenever Microsoft FEP updates your virus and spyware protection or definition files Microsoft FEP uses this information to ensure that the latest virus and spyware updates are present on your computer. If the latest updates are not present, Microsoft FEP will update itself automatically so that your computer's protection stays up-to-date.
Virus and spyware protection
· Name of potentially harmful or unwanted software
· How the software was found
· Any actions that Microsoft FEP has taken to deal with the software
· Files affected by the software
· Information about your computer from the manufacturer (Sysco fig, SysModel, SysMarker) If Microsoft FEP finds potentially harmful or unwanted software on your computer Microsoft FEP uses this information to determine the type and severity level of potentially unwanted software on your computer, and to determine the best action to take. We also use this information to help improve the accuracy of Microsoft FEP virus and spyware protection.
Note that we collect only the names of affected files, not the contents of the files themselves.
This information helps determine what systems are especially vulnerable to specific threats.
Virus and spyware protection
· Virus and spyware definition update status
· Status of real-time virus and spyware monitoring (on or off) Once a month Microsoft FEP uses this information to verify that your computer has the latest Microsoft FEP virus and spyware protection version, and has the most recent virus and spyware definitions. We also want to make sure that real-time virus and spyware monitoring is turned on, which is a critical part of helping protect your computer from potentially harmful or unwanted software.
Virus and spyware protection
· List of running processes in your computer's memory During installation, or whenever you manually perform a virus and spyware scan of your computer To identify any processes that might have been compromised by potentially harmful software.
|