Howard Chow Microsoft MVP. Microsoft Preliminary Information Subject To Change

Transcription

1 Howard Chow Microsoft MVP

2 Fast and Reliable Compatible Mobile Simplify Tasks Easier Networking Device Experience Improved Data Security Better Protect Your PC Solve Problems Quickly Safer Online

3 Small Business users demand fast performance and high reliability, regardless of hardware configuration Small Business users want computers that start and stop on demand Dramatically reduced startup, resume, and shut down times ReadyBoost improves system responsiveness

4 Memory Consumption (MB) Works The Way You Want Memory Consumption Comparison (Lower bars are better) Windows 7 Pre Beta Windows Vista Preliminary data gathered on Windows 7 pre-release builds Number of Windows Open Windows 7 memory consumption is independent of number of open windows

5 Just Works Windows Vista improved security at a fundamental level, but the cost was some legacy software and device compatibility Windows Vista SP 1 solves many compatibility problems, but customer perception of compatibility has not recovered Closer partnership with ISVs and IHVs on compatibility to continue to have the broadest ecosystem available for customer choice in hardware and software Investments in compatibility testing tools for partners and customers Partner outreach to remediate problems quickly

6 Microsoft Confidential

7 Just Works Laptop battery life varies widely, even on scenario enhanced PCs Mobile productivity can suffer when solutions are complex Difficult to connect other portable wireless devices together Reduced Power consumption delivers longer battery life Easily connect to wireless, VPN, and cellular networks Simple Bluetooth pairing

8 Everyday Tasks are Easier and Faster Good solutions exist today for desktop and portal search, but the solutions are not integrated Users need to take different steps to find data on PC and data on networks or other PCs Consistent user experience for finding data across multiple locations, including local network Windows 7 Libraries let users consolidate similar information that are stored in multiple places

9 Microsoft Confidential

10 Everyday Tasks are Faster and Easier Different interfaces and programs exist for using each type of device, which can be complex Difficult process for installing devices and drivers, especially Bluetooth Photo-realistic image of device on taskbar Access device details and tasks directly from the icon Sync data effortlessly between media

11 Improved Device Experience I am not really familiar with all the capabilities my devices have Devices & Printers A single place to access all of your connected & wireless gear. Device Stage Get more from your devices with a single, intuitive interface providing easy access to status, options, & tasks.

12 Safeguard Your Business Small businesses want to use their IT partner s time for value-added services, not basic support. Users want to customize security and system prompts IT partners want to be able to offer value-added services instead of basic support. Get help faster with one place to find, diagnose and solve PC problems Fewer interruptions from system prompts, notifications, and warnings Consolidated view of maintenance tasks

13 Windows Vista Foundation Streamlined User Account Control Enhanced Auditing Security Development Lifecycle process Kernel Patch Protection Windows Service Hardening DEP & ASLR IE 8 inclusive Mandatory Integrity Controls Make the system work well for standard users Administrators use full privilege only for administrative tasks File and registry virtualization helps applications that are not UAC compliant XML based Granular audit categories Detailed collection of audit results Simplified compliance management

14 Windows Vista Windows 7 System Works for Standard User All users, including administrators, run as Standard User by default Administrators use full privilege only for administrative tasks or applications User provides explicit consent before using elevated privilege Disabling UAC removes protections, not just consent prompt Streamlined UAC Reduce the number of OS applications and tasks that require elevation Refactor applications into elevated/non-elevated pieces Flexible prompt behavior for administrators Users can do even more as a standard user Administrators will see fewer UAC Elevation Prompts

15 Windows Vista Windows 7 New XML based events Fine grained support for audit of administrative privilege Simplified filtering of noise to find the event you re looking for Tasks tied to events Granular auditing complex to configure Auditing access and privilege use for a group of users Enhanced Auditing Simplified configuration results in lower TCO Demonstrate why a person has access to specific information Understand why a person has been denied access to specific information Track all changes made by specific people or groups

16 Microsoft Confidential

17 Situation Today Windows 7 Solution AppLocker Users can install and run nonstandard applications Even standard users can install some types of software Unauthorized applications may: Introduce malware Increase helpdesk calls Reduce user productivity Undermine compliance efforts Eliminate unwanted/unknown applications in your network Enforce application standardization within your organization Easily create and manage flexible rules using Group Policy

18 Technical Details Simple Rule Structure: Allow, Exception & Deny Publisher Rules Product Publisher, Name, Filename & Version Multiple Policies Executables, installers, scripts & DLLs Rule creation tools & wizard Audit only mode SKU Availability AppLocker TM Enterprise Legacy SRP Business & Enterprise

19 Microsoft Confidential

20 Building on IE7 and addressing the evolving threat landscape Freedom from intrusion Social Engineering & Exploits Reduce unwanted communications International Domain Names Pop-up Blocker in IE7 Increased usability Protection from harm Browser & Web Server Exploits Protection from deceptive websites, malicious code, online fraud, identity theft Secure Development Lifecycle Extended Validation (EV) SSL certs SmartScreen Filter Domain Highlighting XSS Filter/ DEP/NX ActiveX Controls Control of information Choice and control Clear notice of information use Provide only what is needed User-friendly, discoverable notices P3P-enabled cookie controls Delete Browsing History InPrivate Browsing & Blocking

21 Situation Today Windows 7 Solution BitLocker To Go Worldwide Shipments (000s) Removable Solid-State Storage Shipments PC Shipments Gartner Forecast: USB Flash Drives, Worldwide, September 2007, Joseph Unsworth Gartner Dataquest Insight: PC Forecast Analysis, Worldwide, 1H08 18 April 2008, Mikako Kitagawa, George Shiffler III Extend BitLocker drive encryption to removable devices Create group policies to mandate the use of encryption and block unencrypted drives Simplify BitLocker setup and configuration of primary hard drive

22 Technical Details BitLocker Enhancements Automatic 200 Mb hidden boot partition New Key Protectors Domain Recovery Agent (DRA) Smart card data volumes only BitLocker To Go Support for FAT* Protectors: DRA, passphrase, smart card and/or auto-unlock Management: protector configuration, encryption enforcement SKU Availability Encrypting Enterprise Unlocking All

23 Microsoft Confidential

24

25 Supporting IT Professionals Secure & Flexible Infrastructure DirectAccess VPN Reconnect & Mobile Broadband DNS Security Reduce Costs BranchCache & SMB Enhancements URL based QoS Support for Green IT Addressing User Needs Work Anywhere Infrastructure DirectAccess VPN Reconnect Mobile Broadband Fast Access BranchCache SMB Enhancements

26 Situation Today Windows 7 Solution DirectAccess Office Home Office Challenging for IT to manage, update, patch mobile PCs while disconnected from company network Difficult for users to access corporate resources from outside the office Home Corporate network boundary includes managed assets no matter where they are on the Internet Easy to service mobile PCs and distribute updates and polices New network paradigm increases mobile user productivity by providing same experience inside & outside the office

27 IT Pro Benefits Improved manageability of remote users IT simplification and cost reduction Consistent security for all access scenarios End User Benefits Seamless & secure access to corporate resources Consistent connectivity experience in / out office Combined with other Windows 7 features enhances the end to end IW experience

28 Technical Details Internet NAP / NPS Servers Compliant Client Compliant Client Tunnel over IPv4 UDP, TLS, etc. DirectAccess Server Intranet User Data Center and Business Critical Resources Enterprise Network Intranet User Assume the underlying network is always insecure Redefine enterprise network edge to insulate the datacenter and business critical resources

29 Situation Today Windows 7 Solution VPN used frequently for remote access to corporate resources Mobile workers reconnect to VPN on every network outage The client maintains persistent VPN connection across network outages VPN Client can connect to any VPN Server of choice Benefits Better end user experience: seamless and consistent VPN connectivity Reduced support costs

30 Windows 7 Solution Caches content downloaded from file and Web servers Users in the branch can quickly open files stored in the cache Frees up network bandwidth for other uses Technical Details Authenticates current state of data and access rights of the user against the server Supports commonly used protocols: HTTP(S), SMB Support network security protocols (SSL, IPsec) Requires Windows Server 2008 R2 in the data center and hosted cache

31 Data ID Data

32 Data ID ID ID Search Data ID Data ID

33 Enterprise Distributed Cache Data cached in cache pool Recommended for branches without a branch server Easy to deploy: Enabled on clients through Group Policy Cache availability decreases with laptops that go offline Hosted Cache Data cached at the host server Cache stored centrally: existing Windows Server 2008 R2 in the branch Cache availability is high Enables branch-wide caching Increased reliability

34 Use Group Policy to enable Windows BranchCache on Windows 7 clients Install the optional Windows BranchCache component on a Windows 2008 R2 web or file server Hosted Cache File Server IIS Group Policy Management Optionally, install a hosted cache in your branch. Configure clients to use it with Group Policy

35 Deployment Image Servicing and Management (DISM) Improved manageability of images IT simplification and cost reduction Simple to use Windows Deployment Services Built-in with Windows Server 2008 R2 Low cost yet powerful deployment PXE Service

36 Technical Overview Replaces pkgmgr, PEImg, and IntlConfg tools Allows offline and online image servicing Support both Windows Imaging (WIM) and Virtual Hard Disk (VHD) formats Improved diagnostics, error reporting, and messaging Provides cross-architecture, cross-version, crossedition, and cross-technology support

37 Microsoft Confidential

38 PXE boot TFTP download of Windows PE OS Image download (SMB / Multicast) OS Image apply Offline Servicing

39 Microsoft Confidential

40 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.