Windows Vista one year on

1
Windows Vista one year on

• Is it time to deploy?
• Roger Burnett
• BCS Kent Branch
• 6th May 2008
• The opinions expressed herein are those of the
  author, and not the BCS

2
Release Dates

• 30th November 2006 (volume licence customers
  only)
• 30th January 2007 (retail)
• Service Pack 1 released in February 2008

3
Versions

• Six versions
• Starter
• Home Basic (130 / 70)
• Home Premium (160 / 90)
• Business (220 / 190)
• Enterprise (volume licence only)
• Ultimate (400 / 210)
• Only Business, Enterprise and Ultimate versions
  can join an Active Directory domain
• See Windows Vista Product Guide for details of
  the content of each version
• 64-bit availability all except Starter

4
Benefits

• There are a number of new features in Vista.
  These are in the areas of
• Productivity
• Security
• Mobile use and collaboration
• Manageability
• All leading to reduced TCO, according to
  Microsoft
• Too many features to cover here the Windows
  Vista Product Guide covers them in detail

5
Organisation and Search

• Far more powerful searching than available
  natively with Windows XP
• Fast and efficient indexed search
• Integration with Office
• Searches can be saved for future use
• Explorer enhancements
• Previous Versions feature
• Windows Desktop Search for XP provides useful
  search extensions. See http//www.microsoft.com/
  windows/products/winfamily/desktopsearch/getitnow.
  mspx

6
Some More Productivity Features

• Windows Sidebar fast access to useful features
  via Gadgets
• Windows MeetingSpace add hoc peer-to-peer
  collaboration tool for up to 10 users.
  NetMeeting is available for Vista.
• Aero Interface
• Ultimate Extras
• Sync Center
• There may be user training required for many of
  these features

7
Security and User Account Control

• Applications are run with limited privileges by
  default
• Internet Explorer runs in Protected Mode. Does
  offer protection against malware
• Some application compatibility issues.
  Application Compatibility Toolkit (ACT v5) can
  help address these.
• UAC may prove to not be the best solution in some
  cases

8
Security and User Account Control

• Runas feature is different under Vista, which may
  have support implications. See Sysinternals
  utility http//technet.microsoft.com/en-us/sysint
  ernals/cc300361.aspx
• Note that the XP Power User permission has gone
  the Power Users group remains for compatibility
• Recommendations
• Test User Account Control to see if it is
  appropriate in your environment
• Probably better to run users as users and not
  administrators, and centrally control access to
  some options via Group Policy

9
Security (Continued)

• Improved Firewall - inbound and outbound
  filtering. Can be controlled via Group Policy
• Control of allowable USB devices, again
  controlled by Group Policy
• Enhancements to EFS encryption keys can be
  stored on smart cards, paging file can be
  encrypted, more group policy control
• Windows Defender spyware protection
• May reduce the need for third-party protection
  utilities

10
BitLocker

• Only with Enterprise and Ultimate SKUs
• RTM version encrypts only Windows volume (i.e.
  Drive C). Multi-volume encryption added with
  SP1
• Runs best with TPM v1.2 chip. Can be used with a
  USB pen drive but these can be lost
• Integrates with Active Directory schema
  extension required.
• BitLocker Drive Preparation Tool
• Very easy to install both manually and with
  automation
• Limited central management capabilities
• A number of encryption products exist for XP
  but some are expensive. In a mixed XP/Vista
  environment, the issues around using differing
  encryption tools must be considered

11
Group Policy

• Around 800 new Group Policy settings for Vista.
  Some key new features
• Power management
• Device installation (e.g. USB drive control)
• User Account Control settings
• Printer deployment non-admins can install local
  printers. Printer connection can be deployed to
  a user based on location.
• Firewall.
• New ADMX templates
• Group Policy Preferences feature allows more
  granular management of client settings. Supports
  XP, Vista, Server 2003/2008

12
Wireless Networking

• There are a number of enhancements to wireless,
  including
• Wireless single sign-on. 802.1x authentication
  can take place prior to Windows logon, via native
  wireless client
• Broad support for wireless security protocols
  (e.g. WPA, WPA2, EAP, PEAP-TLS, WEP). This could
  negate the need for third-party wireless clients
• Wireless configuration settings can be applied by
  Group Policy BUT WEP and WPA pre-shared keys
  cannot be provisioned in this way
• It may still be beneficial to use a third party
  wireless client (consistency across XP and Vista,
  better support of switching between wired,
  wireless, 3G etc.)

13
Network Performance

• Complete redesign of Vista networking components,
  including
• TCP/IP stack enhancements (self-tuning receive
  buffer, improved error handling/faster recovery)
• New CIFS implementation (SMB 2.0). Multiple
  commands in a packet, larger buffer size, more
  tolerant of network interruptions
• Needs Vista/2008 at each end
• Applications must be coded to support SMB 2.0
• This may have an impact on usage of WAN
  accelerators
• Note that VPN clients typically need to be
  upgraded to work with Vista http//support.micros
  oft.com/kb/929490

14
Network Performance

• Improved performance when copying files...

15
Language

• With Enterprise SKU, single image can be deployed
  globally with language packs for each language
  required
• Language packs for Ultimate SKU can be downloaded
  via Ultimate Extras
• Language Interface Packs (LIPs). Free download
  for Vista, XP and Office 2003/7.
  http//www.microsoft.com/unlimitedpotential/locall
  anguageprogram/default.mspx

16
Power Saving

• Energy costs are rising. A typical desktop PC
  can cost 50 or more per year if powered on
  continuously
• Power consumption of Vista is similar to XP
• Many power management improvements
• Sleep is improved over XPs standby-faster resume
  and more accurate idle detection
• Sleep may not be appropriate in all situations
• Power settings can be controlled through Group
  Policy
• Hybrid sleep feature. Users dont need to know
  the difference between Sleep and Hibernate
• Shutdown/power off will save more energy still
• Green credentials of Vista have been promoted.
  Are power management features alone a reason for
  upgrading?
• Look at third-party options some are free

17
Easier to Deploy

• Single image no HAL issues. Single image
  deployment certainly easier than with XP
• Image rather than file-based deployment. ImageX
  imaging tool may remove the need for third party
  products. Can also be used for deploying XP
• Windows Automated Installation Kit (WAIK) is used
  to create images. Includes WinPE v2
• Application Compatibility Toolkit (ACT)
• Microsoft Deployment Toolkit (formerly BDD)

18
System Requirements

• Microsoft recommends
• 1GB of RAM for Business, Enterprise and Ultimate
  versions (512MB for consumer editions)
• 1GHz processor
• DirectX 9 graphics support
• 40GB disk.
• A modern dual-core processor with 2GB of RAM will
  provide noticeably improved performance.
• 4GB maximum for 32-bit operating systems.
  Typically 3.1GB . See http//support.microsoft.c
  om/default.aspx/kb/929605.
• Tablet PC features integrated. No longer a
  separate version of OS for tablets

19
The Business Case

• Microsoft claims reduced TCO with Windows Vista
  14 lower than Windows XP. See Reducing TCO
  with Windows Vista http//download.microsoft.com/
  download/f/7/e/f7ef20ff-6bcc-4348-897b-94b22911f2d
  c/WIP_GCR_TCOMobilityWP_v9a.pdf
• Five reasons from Microsoft for deploying Windows
  Vista http//www.microsoft.at/admp/3BFB18C5-A557-
  416F-8211-1952864FAFFA/Business_Case_forWindows_V
  istaWhite_Paper.pdf. This covers security,
  mobility, productivity, support/management costs
  and new deployment tools.

20
What are organisations doing with Vista today?

• 100 million licences shipped. Source Microsoft
  (30-Jan-08). Link.
• By mid-2008, Vista will power one-quarter of
  Enterprise PCs. Source Forrester (12-Nov-07).
  Link
• Adoption of Windows XP held fairly steady,
  hovering around 90 percent of enterprises.
  Windows Vista ended the year at 6.3 percent.
  Source eWeek/Forrester (31-Mar-08). Link
• Gartner Explains Why Windows Is Broken,
  Source PCWorld.com (10-Apr-08). Link

21
Roadmap

• XP will get mainstream support for two years
  after Vista release, and five years of extended
  support following this
• Availability of pre-Vista operating systems
  http//www.microsoft.com/windows/lifecycle/default
  .mspx
• Microsoft Support Lifecycle http//support.micros
  oft.com/gp/lifecycle
• Note that XP stops being shipped by OEMs on new
  hardware on 30th June 2008

22
Roadmap
Windows 2000
Vendor support declines
Windows XP
Windows Vista
Windows 7 (forecast ship date)
Reasonable vendor support approx. one year
after release
Windows 7 (one year late)
Period of risk limited or no vendor support
23
Windows 7

• Probably will be released in 2010
• We can only guess what will be included. This is
  what I would expect to see
• A less significant release than Vista over XP
• Performance improvements
• Some improvements/changes to the security model
  (in particular UAC)
• Use of the ribbon interface included with Office
  2007
• 32-bit support to remain
• User interface changes gesture and
  speech-based input perhaps?
• Inclusion of WinFS (see http//en.wikipedia.org/w
  iki/WinFS)

24
Service Pack 1

• Wait for first service pack strategy
• Whats in SP1?
• No major new features
• Security patches and hot-fixes released since RTM
• A number of performance and reliability fixes
  some not previously distributed
• Support for emerging hardware standards e.g.
  802.11N wireless, exFAT file system (for flash
  drives)
• BitLocker now supports encryption of multiple
  volumes
• More control over defrag of multiple volumes
• Hot-patching. Allows running components to be
  patched, reducing reboots
• UAC prompt without secure desktop useful for
  remote assistance
• Increased hardware support many drivers have
  been added
• Some pre-requisite patches needed before
  installing SP1

25
What about 64-bit?

• Why consider 64-bit?
• Memory. 128 GB addressable in pro versions
• Performance improvements
• Security (Data Execution Prevention, Kernel Patch
  Protection).
• 32-bit applications are fully supported
• But...
• Hardware support
• Application support 16-bit applications cannot
  be run. Many legacy installers are 16-bit
• Driver availability. 64-bit signed drivers are
  required. Unsigned drivers cannot be installed
• Cannot upgrade 32-bit to 64-bit
• Today use in specialist areas running memory
  intensive applications (e.g. database,
  transaction processing, molecular modelling, CAD)
• Not expected to be mainstream technology for
  several years on the desktop. Not the case for
  servers though

26
Recommendations

• Not If, but When...
• Be careful with any strategy to skip Vista
  completely a number of exposures may occur
• Ensure new machines purchased today have
  sufficient memory (i.e. 2GB) and TPM module
• Start testing, even if no immediate deployment
  plans. This could take 18 months.
• Test your existing applications against Vista.
  Plan to upgrade/retire as necessary
• Test new applications against Vista as well as
  the OS you are deploying currently
• Use this as an opportunity to catalogue and
  rationalise the applications in use in your
  organisation

27
Recommendations

• Plan for a mixed environment. Major fork lift
  upgrades are probably not cost-effective, except
  possibly in very small organisations
• Dont deploy Vista on older/underpowered
  hardware. Performance will disappoint
• Design your infrastructure such that Vista and XP
  clients are treated as consistently as possible
• Evaluate the new deployment and support tools.
  May be some value in using these with XP
• Test your deployment and support tools. Can
  you
• Deploy machines?
• Distribute software?
• Apply patches?
• Remotely control clients?
• Support clients over VPN?
• If not, start to plan for upgrading

28
Recommendations

• Will your existing third-party tools support
  Vista? Will you still need them? Are there
  potential cost savings to be made?
• In an Active Directory environment, do examine
  Group Policy (and new GPO preferences), and how
  settings can be used to manage clients. Try and
  manage XP and Vista clients consistently
• Look at your security model remove admin users
  wherever possible
• Probably too early for 64-bit, except in
  specialist areas. However, start to remove
  16-bit applications from your environment.
  Remember some installers utilise 16-bit code

29
Reference Material
30
Some Useful Tools

• Windows Automated Installation Kit (WAIK)
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyID94BB6E34-D890-4932-81A5-5B50C657DE08displa
  ylangen
• Application Compatibility Toolkit (ACT)
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyID24DA89E9-B581-47B0-B45E-492DD6DA2971displa
  ylangen
• Microsoft Deployment Toolkit 2008 (formerly BDD
  2007) http//www.microsoft.com/downloads/details.
  aspx?FamilyID3BD8561F-77AC-4400-A0C1-FE871C461A89
  displaylangen
• Windows Vista Upgrade Advisor http//www.microsof
  t.com/downloads/details.aspx?FamilyID42B5AC83-C24
  F-4863-A389-3FFC194924F8displaylangen

31
Useful Links

• Windows Vista Product Guide http//www.microsoft.
  com/downloads/details.aspx?FamilyIDbbc16ebf-4823-
  4a12-afe1-5b40b2ad3725DisplayLangen
• Windows vista technical library
  http//technet2.microsoft.com/WindowsVista/en/libr
  ary/90a564b9-34af-4a6b-937f-324e1862244b1033.mspx
  
• Group Policy settings guide (Vista SP1 and Server
  2008)
• http//www.microsoft.com/downloads/details.aspx?Fa
  milyID2043b94e-66cd-4b91-9e0f-68363245c495Displa
  yLangen
• Group Policy Preferences overview
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyID42e30e3f-6f01-4610-9d6e-f6e0fb7a0790Displa
  yLangen

32
Useful Links

• BitLocker Step-by-Step Guide http//technet2.micr
  osoft.com/windowsserver2008/en/library/c61f2a12-8a
  e6-4957-b031-97b4d762cf311033.mspx?mfrtrue
• BitLocker Drive Preparation Tool
  http//support.microsoft.com/kb/930063
• Everything you need to know about SP1
  http//technet2.microsoft.com/WindowsVista/en/libr
  ary/005f921e-f706-401e-abb5-eec42ea0a03e1033.mspx?
  mfrtrue
• SP1 Prerequisite patches http//support.microsoft
  .com/kb/935509 . http//support.microsoft.com/kb/9
  37287 http//support.microsoft.com/kb/938371

33
Power Management

• http//regmedia.co.uk/2008/01/30/power_management_
  vista.ppt
• http//download.microsoft.com/documents/uk/busines
  s/PC20Pro20Labs20White20Paper20Mar202007.pdf
  
• http//www.1e.com/SoftwareProducts/powermanagement
  .aspx
• http//www.verdiem.com/
• http//www.localcooling.com/

34
64-Bit

• 64 Bit Editions http//www.microsoft.com/windows/
  products/windowsvista/editions/64bit.mspx.
• Article on Kernel Patch Protection
  http//blogs.msdn.com/windowsvistasecurity/archive
  /2006/08/11/695993.aspx.
• Microsoft article on the differences between
  32-bit and 64-bit Vista http//support.microsoft.
  com/kb/946765/en-us

35
Is it time to deploy?