News

Microsoft Touts Security in Windows 7

Microsoft last week described improved security features in its upcoming Windows 7 operating system, currently in beta release.

Microsoft last week described improved security features in its upcoming Windows 7 operating system, currently in beta release.

Those security features include a revised User Account Control (UAC) feature, an enhanced BitLocker encryption solution, Authentication Profiles and a new Windows Biometric Framework. Most of these features were first introduced in Windows Vista.

"Vista was a concerted effort to focus on security," said Michael Cherry, research vice president for operating systems at Directions on Microsoft. "However, some of the new features, such as UAC, were a little too in-your-face."

The UAC annoyed Vista users with too many unclear dialog boxes about security. Microsoft has since announced a plan to tweak the UAC in the release candidate version of Windows 7.

"[The UAC] caused a lot of aggravation for users," Cherry said. "But, make no mistake, Microsoft was and is doing the absolute right thing in regards to privileges. The fundamental premise of business computing is that a user should be doing his or her job with the least privileges possible."

One way that Windows 7 limits privileges is by setting up most users as "standard users" who are not part of the administrative group. They only get notified by UAC when programs try to make changes to their computers, and not for common administrative tasks, according to a Windows 7 security blog.

Windows 7 will also include BitLocker, an encryption solution designed to protect data on laptops, desktops and servers. With Windows 7, group policy settings can integrate with smart cards on non-OS drives. In addition, the partitioning of drives has also been simplified, according to the blog.

BitLocker To Go is a new feature introduced with Windows 7. It provides strong encryption to protect data on removable drives.

"BitLocker To Go is an excellent encryption solution for those devices that is simple and easy to use, and it contains a reader that can be transferred to an XP machine," Cherry said.

Authentication Protocols in Windows 7 allows users to share data between home and office machines using an online ID. It uses a new protocol called Public Key-based User to User (PKU2U). It eliminates choosing between Kerberos and NTLM (Windows challenge/response) protocols, according to the blog.

Windows 7 also introduces a new Windows Biometric Framework to support biometric authentication devices, such as fingerprint readers. The framework contains two options for configuring biometric devices that can be managed from the Control Panel or Group Policy.

Overall, Cherry said that the security improvements in Windows 7 are "incremental" since Vista. He added that "the beta is incredibly solid and they took so much heat on Vista that I am very optimistic that Windows 7 will ship on time or maybe even ahead of time."

Microsoft recently announced that the release candidate version of Windows 7 will be available for download on April 30 by MSDN and TechNet subscribers, with public availability scheduled for May 5.

About the Author

Herb Torrens is an award-winning freelance writer based in Southern California. He managed the MCSP program for a leading computer telephony integrator for more than five years and has worked with numerous solution providers including HP/Compaq, Nortel, and Microsoft in all forms of media.

Featured

  • Microsoft Appoints Althoff as New CEO for Commercial Business

    Microsoft CEO and chairman Satya Nadella on Wednesday announced the promotion of Judson Althoff to CEO of the company's commercial business, presenting the move as a response to the dramatic industrywide shifts caused by AI.

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.