Monday, April 27, 2009

Revealing Windows XP Mode for Windows 7

Many people have already got their hands on the Windows 7 Release Candidate, and it comes with a new feature allowing you run in Windows XP mode. Friendly Computers has more info below…

Over a month ago, we were briefed about a secret Microsoft technology that we were told would be announced alongside the Windows 7 Release Candidate (RC) and would ship in final form simultaneously with the final version of Windows 7. This technology, dubbed Windows XP Mode (XPM, formerly Virtual Windows XP or Virtual XP, VXP), dramatically changes the compatibility story for Windows 7 and, we believe, has serious implications for Windows development going forward. Here's what's happening.

XPM is built on the next generation Microsoft Virtual PC 7 product line, which requires processor-based virtualization support (Intel and AMD) to be present and enabled on the underlying PC, much like Hyper-V, Microsoft's server-side virtualization platform. However, XPM is not Hyper-V for the client. It is instead a host-based virtualization solution like Virtual PC; the hardware assistance requirement suggests this will be the logical conclusion of this product line from a technological standpoint. That is, we fully expect future client versions of Windows to include a Hyper-V-based hypervisor.

XP Mode consists of the Virtual PC-based virtual environment and a fully licensed copy of Windows XP with Service Pack 3 (SP3). It will be made available, for free, to users of Windows 7 Professional, Enterprise, and Ultimate editions via a download from the Microsoft web site. (That is, it will not be included in the box with Windows 7, but is considered an out-of-band update, like Windows Live Essentials.) XPM works much like today's Virtual PC products, but with one important exception: As with the enterprise-based MED-V (Microsoft Enterprise Desktop Virtualization) product, XPM does not require you to run the virtual environment as a separate Windows desktop. Instead, as you install applications inside the virtual XP environment, they are published to the host (Windows 7) OS as well. (With shortcuts placed in the Start Menu.) That way, users can run Windows XP-based applications (like IE 6) alongside Windows 7 applications under a single desktop.

Obviously, XPM has huge ramifications for Windows going forward. By removing the onus of legacy application compatibility from the OS, Microsoft can strip away deadwood technology from future versions of Windows at a speedier clip, because customers who need to run older applications can simply do so with XPM. For Windows 7 specifically, XPM is a huge convenience, especially for Microsoft's corporate customers, who can of course control XPM behavior via standard Microsoft administration and management technologies like Active Directory (AD) and Group Policy (GP). And it significantly recasts the Windows 7 compatibility picture. Before, Microsoft could claim that Windows 7 would be at least as compatible as Windows Vista. Now, they can claim almost complete Windows XP compatibility, or almost 100 percent compatibility with all currently running Windows applications.

Source: http://community.winsupersite.com/blogs/paul/archive/2009/04/24/secret-no-more-revealing-virtual-windows-xp-for-windows-7.aspx

Friday, April 24, 2009

Windows 7 security enhancements

Friendly Computers found an article describing some of the new security features in Windows 7. Read more below…

Windows 7 makes remote connectivity to corporate networks seamless, protects data on thumb drives, and offers fewer user account control prompts to bug users compared to Vista, Microsoft said on Monday.

The software giant began an education blitz about the security features of the newest version of its operating system at the start of the RSA 2009 security conference.

Windows 7, which was released in public beta in January, will have 29 percent fewer user account control (UAC) prompts than Windows Vista has, and fewer prompts in general, according to Paul Cooke, director of Windows Client Enterprise Security.

"We've put users in control and allowed them the ability to tune the level of prompting" using a slider bar, he said in an interview.

Other new security features in Windows 7 are DirectAccess and BitLocker To Go.

DirectAccess offers remote workers the same level of seamless and secure connectivity as they have in the office. The system automatically creates a secure tunnel to the corporate network and workers don't have to manually substantiate a connection, Cooke said.

DirectAccess also allows IT administrators to patch systems whenever a remote worker is on the network, he said.

BitLocker To Go extends the data encryption features introduced in Vista to removable storage devices like USB thumb drives and flash drives. A password or a smart card with a digital certificate stored on it can be used to unlock the data. The devices can be used on any other Windows 7-based machine with the correct password. On XP and Vista machines the data on the drives can be read but not modified, Cooke said.

Smart-card provider Gemalto is offering multifactor authentication for Windows 7 for even more secure access to machines accessing the network, said Ray Wizbowski, director of marketing and communications at Gemalto. Now, a user can insert a card into a smart-card reader built into a laptop and either enter a personal identification number or use a fingerprint to access the data, he said.

Windows 7 also includes AppLocker technology that allows administrators to control the software that runs in the corporate network to ensure that only authorized scripts, installers, and dynamic load libraries are accessed. It also can be used to keep unlicensed software off machines, according to Cooke.

Source: http://news.cnet.com/8301-1009_3-10223548-83.html