Windows 7 - What's New in Windows Search, Browse, and Organization

Windows 7 introduces a number of new features and enhancements that can help IT professionals deploy and maintain desktop search, browse, and organization functionality:

· Improvements in the performance and stability of the indexer.

· Improvements in the performance and relevance of the search experience.

· The introduction of federated search and search connectors.

· The introduction of aggregation and visualizations to improve the organization of search results.

· The introduction of libraries to help with organization.

· Improvements in the performance and user interface of Windows Explorer.

· Additional Group Policy settings, available on all supported operating systems.

· Reduced impact on the server running Microsoft Exchange Server when indexing uncached (classic online) e-mail.

· The ability to index delegate mailboxes for e-mail.

· Support for indexing encrypted documents of local file systems.

· Support for indexing digitally signed e-mail of MAPI-enabled e-mail clients such as Microsoft Outlook®.

· An expanded ability to do fast remote queries of file shares, including on Windows Vista®, Windows Server® 2008, Windows® XP with Windows Search 4.0 installed, and earlier versions.

The Windows Search Service enables you to perform fast file searches on a server from computers running Windows® 7 or Windows Server® 2008 R2, or from computers that have Windows Desktop Search installed and running Windows Vista, Windows Server 2008, Windows XP, Windows Server® 2003 R2, or Windows Server® 2003.

Note

Indexing of uncached e-mail is also known as classic online e-mail. In Windows® 7 there is less impact on Microsoft Exchange Server when indexing uncached e-mail. In contrast to uncached or classic online e-mail, cached e-mail uses a local Offline Folder file (.ost) to keep a local copy of your Exchange Server mailbox on your computer, which permits indexing of e-mail locally.

Who will want to use Windows Search, Browse, and Organization?

This feature is intended for IT professionals. Improvements in search are also relevant to home users.

Before deploying Windows Search, Browse, and Organization in Windows 7, administrators should consider several factors, including the following:

· The role of desktop search within your enterprise search strategy.

· Which data stores or services you want to publish for direct client access in Windows Explorer by using the OpenSearch standard.

· Current document storage practices and how they relate to libraries.

· The importance of file storage encryption to your organization.

· The importance of e-mail encryption and signing to your organization.

What are the benefits of the new and changed features?

A brief overview of the major new features and capabilities for Windows Search, Browse, and Organization in Windows 7 is provided in the following table.

Feature	New in Windows 7
Improvements in the performance and user interface of Windows Explorer	The navigation is better organized and more intuitive, everyday tasks are easier to access, and there are numerous improvements in the presentation of end user content.
The introduction of libraries to help with organization	Libraries make it quicker and easier to find files. Built on the existing My Documents experience, libraries work like folders do but have additional functionality. In addition to browsing files by using the hierarchical folder structure, you can also browse metadata such as date, type, author, and tags. Users can include files from multiple storage locations in their libraries without having to move or copy the files from original storage locations.
Improvements in the search experience	The search experience is integrated into everyday tasks through Windows Explorer, the Start menu, and the introduction of new libraries. Search results take relevance into account, making it faster to find what you are looking for. Other improvements to the experience include the introduction of highlighted matches in the searched document, a search builder to construct advanced queries, and arrangement views. Arrangement views allow you pivot search results, list the most recent searches, and provide broader Start menu scope including Control Panel tasks.
The introduction of federated search and search connectors	Windows 7 enables searching for content on remote indices. Integrating federated search into Windows gives users the benefits of using familiar tools and workflows to search remote data. This enhanced integration provides the added benefit of highlighting matches within the searched document. Windows 7 enables federated search via the public OpenSearch standard. Other improvements are the consistent UI for remote search results within Windows Explorer and the ability to drag and drop files listed in the search results between different locations.
Indexing of uncached (classic online) e-mail	Before users can search for e-mail, the Windows indexing service must index the e-mail store, which involves collecting the properties and content of e-mail items within the store. This initial indexing is later followed by smaller incremental indexing (as e-mail arrives, is read, and deleted, and so on) to keep the index current. Windows 7 minimizes the impact on the server running Exchange Server by reducing the number of remote procedure calls (RPC) required to index e-mail messages and attachments. Because e-mail messages are indexed in native formats (HTML, RTF, and text) there is no load on the server to convert mail types. Windows indexes public folders only when they are cached locally.
Remote query	Windows 7 extends the ability to search across remote desktops. Windows 7 or Windows Search 4.0 (available on Windows Vista and Windows XP) enables users to query remote computers running on supported operating systems; Windows Vista allows users to search remote computers only if they are running Windows Vista.
Support for indexing encrypted files	Windows 7 fully supports indexing encrypted files on local file systems, allowing users to index and search the properties and contents of encrypted files. Users can manually configure Windows to include encrypted files in indexing, or administrators can configure this by using Group Policy.
Support for indexing digitally signed e-mail	Windows 7 allows users to search all content in digitally signed e-mail messages. This includes the message body and any attachments. A computer that is running Windows Vista Service Pack 1 (SP1) and Windows Search 4.0 functions as follows: · Users can search all digitally signed e-mail messages that they have sent. This search includes all message content. · Users can search all digitally signed e-mail messages that they have received. However, these searches are limited to certain properties, such as subject, sender, or recipients. Users cannot search the message body or attachment contents.

What's the impact of these changes on Windows Search, Browse, and Organization?

There are significant improvements in how you use Windows Search, Browse, and Organization in Windows 7:

· Closer integration with everyday workflows.

· More relevant search results.

· Highlighted search terms to easily identify results.

· An integrated advanced query builder.

In Windows 7, there is a new emphasis on organization with the introduction of libraries and the multiple improvements in the arrangement views and visualization of data.

Windows 7 - What's New in Windows PowerShell

Windows PowerShell™ is a command-line shell and scripting language designed especially for system administration. Built on the Microsoft .NET Framework, Windows PowerShell helps IT professionals control and automate the administration of Windows operating systems and of applications that run on Windows.

The simple command tools in Windows PowerShell, called cmdlets, let you manage the computers in your enterprise from the command line. Windows PowerShell providers let you access data stores, such as the registry and the certificate store, as easily as you access the file system. In addition, Windows PowerShell has full support for all Windows Management Instrumentation (WMI) classes.

Windows PowerShell is fully extensible. You can write your own cmdlets, providers, functions, and scripts, and you can package them in modules to share with other users.

Windows® 7 includes Windows PowerShell 2.0. It also includes other cmdlets, providers, and tools that you can add to Windows PowerShell so that you can use and manage other Windows technologies such as Active Directory® Domain Services, Windows® BitLocker™ Drive Encryption, the DHCP Server service, Group Policy, Remote Desktop Services, and Windows Server Backup.

What's new in Windows PowerShell?

The following changes are available in Windows PowerShell in Windows 7:

· New cmdlets. Windows PowerShell includes more than 100 new cmdlets, including Get-Hotfix, Send-MailMessage, Get-ComputerRestorePoint, New-WebServiceProxy, Debug-Process, Add-Computer, Rename-Computer, Reset-ComputerMachinePassword, and Get-Random.

· Remote management. You can run commands on one computer or hundreds of computers with a single command. You can establish an interactive session with a single computer. And, you can establish a session that can receive remote commands from multiple computers.

· Windows PowerShell Integrated Scripting Environment (ISE). Windows PowerShell ISE is a graphical user interface for Windows PowerShell that lets you run commands, and write, edit, run, test, and debug scripts in the same window. It offers up to eight independent execution environments and includes a built-in debugger, multiline editing, selective execution, syntax colors, line and column numbers, and context-sensitive Help.

· Background jobs. With Windows PowerShell background jobs, you can run commands asynchronously and "in the background" so you can continue to work in your session. You can run background jobs on a local or remote computer, and you can store the results locally or remotely.

· Debugger. The Windows PowerShell debugger can help you debug functions and scripts. You can set and remove breakpoints, step through code, check the values of variables, and display a call-stack trace.

· Modules. Windows PowerShell modules let you organize your Windows PowerShell scripts and functions into independent, self-contained units. You can package your cmdlets, providers, scripts, functions, and other files into modules that you can distribute to other users. Modules are easier for users to install and use than Windows PowerShell snap-ins. Modules can include any type of file, including audio files, images, Help files, and icons. Modules run in a separate session to avoid name conflicts.

· Transactions. Windows PowerShell now supports transactions, which let you manage a set of commands as a logical unit. A transaction can be committed, or it can be completely undone so that the affected data is not changed by the transaction.

· Events. Windows PowerShell includes a new event infrastructure that lets you create events, subscribe to system and application events, and then listen, forward, and act on the events synchronously and asynchronously.

· Advanced functions. Advanced functions behave just like cmdlets, but they are written in the Windows PowerShell scripting language instead of in C#.

· Script internationalization. Scripts and functions can display messages and Help text to users in multiple languages.

· Online Help. In addition to Help at the command line, the Get-Help cmdlet has a new Online parameter that opens a complete and updated version of each Help topic on Microsoft TechNet.

Who will want to use Windows PowerShell?

The following groups might be interested in these changes:

· IT professionals who want to manage Windows at the command line and automate administrative tasks.

· Developers who want to use the extensive Windows PowerShell scripting language to build .NET Framework applications and extend Windows PowerShell.

· All users who want to learn Windows PowerShell to manage their system, write scripts to automate their tasks, and create new tools without having to learn a programming language.

What are the benefits of the new and changed features?

Windows PowerShell provides these new management features, among many others.

Remote Management

Windows PowerShell remote management lets users connect to and run Windows PowerShell commands on all of their computers. IT professionals can use it to monitor and maintain computers, distribute updates, run scripts and background jobs, collect data, and make uniform, optimized changes to one computer or to hundreds of computers.

Windows PowerShell ISE

Windows PowerShell ISE makes it easier and more efficient to use Windows PowerShell. Beginners will appreciate the syntax colors and the context-sensitive Help. Multiline editing makes it easy to try the examples that you copy from the Help topics and from other sources. Advanced users will appreciate the availability of multiple execution environments, the built-in debugger, and the extensibility of the Windows PowerShell ISE object model.

Modules

Windows PowerShell modules make it easier for cmdlet and provider authors to organize and distribute tools and solutions. And, they make it easier for users to install the tools and add them to their Windows PowerShell sessions. IT professionals can use modules to distribute tested and approved solutions throughout their enterprise and share them with other professionals in the community.

Transactions

Windows PowerShell transactions let you use Windows PowerShell to make changes that might have to be rolled back or committed as a unit, such as database updates and changes to the registry.

What's the impact of these changes on Windows PowerShell?

Windows PowerShell has the following system and feature requirements:

· Windows PowerShell requires the Microsoft .NET Framework 2.0.

· Windows PowerShell ISE, the graphical user interface program for Windows PowerShell, requires the Microsoft .NET Framework 3.5 with Service Pack 1.

· The Out-GridView cmdlet requires the Microsoft .NET Framework 3.5 with Service Pack 1.

· The Get-WinEvent cmdlet requires Windows Vista or later versions of Windows and the Microsoft .NET Framework 3.5.

· The Export-Counter cmdlet runs only on Windows 7 and later versions of Windows.

· The WMI-based remoting features of Windows PowerShell require no configuration and run on all versions of Windows that support Windows PowerShell. The WS-Management-based remoting features require both the local and remote computers to run Windows Vista or a later version of Windows. Also, you must enable and configure WS-Management on all participating computers. For more information, see About_Remote.

· Several cmdlets work only when the current user is a member of the Administrators group on the computer or when the current user can provide the credentials of a member of the Administrators group. This requirement is explained in the Help topics for the affected cmdlets.

Windows 7 - What's New in Virtual Hard Disks

The Microsoft Virtual Hard Disk file format (.vhd) is a publicly available format specification that specifies a virtual hard disk encapsulated in a single file, capable of hosting native file systems and supporting standard disk operations. VHD files are used by Microsoft Windows Server 2008 Hyper-V, Microsoft Virtual Server and Microsoft Virtual PC for virtual disks connected to a virtual machine. VHDs are useful containers and the .vhd file format is also used by Microsoft Data Protection Manager, Windows Server Backup as well as many other Microsoft and Non-Microsoft solutions.

What's new in Virtual Hard Disks?

In Windows® 7, a virtual hard disk can be used as the running operating system on designated hardware without any other parent operating system, virtual machine, or hypervisor. Windows 7 disk-management tools, the DiskPart command line tool and the Disk Management Microsoft Management Console can be used to create a VHD file. A Windows 7 image (.wim format) file can be deployed to the VHD and the .vhd file can be copied to multiple systems. The Windows 7 boot manager can be configured for native, or physical boot of the Windows image contained in the VHD. The .vhd file can also be connected to a virtual machine for use with the Hyper-V Role in Windows Server® 2008 R2. Native-boot VHD files are not designed or intended to replace full image deployment on all client or server systems. Previous Windows releases do not support native boot from a VHD and require a hypervisor and virtual machine in order to boot from a VHD file.

For more information about using Virtual Hard Disks for Native Boot in Windows 7, see the Walkthrough: Deploy a Virtual Hard Disk for Native Boot topic in the Windows Automated Installation Kit for Windows 7 Beta.

Who will want to use Virtual Hard Disks?

Enterprise environments already managing and using .vhd files for virtual machine deployment will find the most benefit from the disk management support for VHD files and native-boot VHD capabilities. Many of our data center customers are transitioning to Hyper-V virtual machines (VMs) for server consolidation and lower energy costs. Native VHD support in the disk management utilities and core storage system simplify creation and image management in VHD files.

While moving an increasing number of applications to virtual machines, Enterprise environments still operate a significant part of the data center on physical machines. IT administrators have to maintain two sets of images: one set based on the .wim format for physical machines, another set based on the .vhd format for virtual machines. The common image format supporting both physical and virtual machines provides flexibility in image deployment while simplifying the process of image management.

Developers and testers are using virtual machines to test new system and application software. Virtual machines provide a convenient, isolated test environment and reduce the need for dedicated test hardware. But sometimes you need to run tests on a physical machine to access a specific hardware device, like the graphics card, or to get accurate performance profiling. A common image format that runs on both virtual and physical machines also benefits developers and testers. Native boot from VHD enables booting a Windows 7 image from a file without creating a separate physical disk partition in which to install Windows.

What are the benefits of the new and changed features?

Native support for VHDs makes image management simpler and reduces the number of images to catalog and maintain. To create a VHD on Windows Server 2008, you install the Hyper-V Server role and use the Hyper-V Manager to create a VHD file, and then started the virtual machine to install a version of Windows from the CD/DVD onto a partition in the VHD. In Windows 7, the native support for the VHD format means that VHD files can be created and modified without installing the Hyper-V Server role. VHD files can be attached using the disk management tools, and the Windows image inside the VHD is available for servicing. The Windows Deployment tools in the Windows Automated Installation Kit (Windows AIK) can be used to apply a Windows image to the VHD, and to apply updates to the system image in the VHD file.

The Windows image applied to a VHD file can boot in either a Hyper-V virtual machine, or boot natively on a physical machine without the use of a hypervisor. In order to boot the Windows system in either a virtual or physical machine, the boot environment must be initialized correctly for each scenario.

What are the dependencies?

The steps for deploying a Windows 7 or Windows Server 2008 R2 image to a VHD file depends on the Windows deployment tools, including imagex.exe. Imagex.exe is used to capture a Windows operating system partition into a Windows Image (.wim) file format, and to apply a .wim file to a file system partition, which may reside inside a VHD file.

The imagex.exe deployment tool is one of the tools distributed in the Windows Automated Installation Kit (Windows AIK). The Windows 7 Beta version of the Windows AIK must be installed to get the deployment tools and is available for download from the Windows Automated Installation Kit for Windows 7 Beta.

The Windows AIK download is an ISO image that you burn to a DVD and then install on your system. After installing the Windows AIK, the ImageX command line tool is located in the Windows AIK\PE Tools directory.

Native boot of Windows 7 from a VHD file also requires the Windows 7 boot environment. The Windows 7 boot environment is initialized during a full operating system installation and includes the Windows Boot Manager and Boot Configuration Data (BCD) and other supporting files.

What's the impact of these changes on Virtual Hard Disks?

The support for VHD as a native format targets key scenarios in the enterprise where the IT staff is well versed with different imaging technologies and tools to manage their client and servers. A managed enterprise environment also employs technologies like folder redirection and roaming profiles to manage the user’s data outside the deployed VHD images. There are recommendations and limitations for virtual hard disks in the Frequently Asked Questions: Virtual Hard Disks topic.

Windows 7 - What's New in User Account Control

Before the introduction of User Account Control (UAC), when a user was logged on as an administrator, that user was automatically granted full access to all system resources. While running as an administrator enabled a user to install legitimate software, the user could also unintentionally or intentionally install a malicious program. A malicious program installed by an administrator can fully compromise the computer and affect all users.

With the introduction of UAC, the access control model changed to help mitigate the impact of a malicious program. When a user attempts to start an administrator task or service, the User Account Control dialog box asks the user to click either Yes or No before the user's full administrator access token can be used. If the user is not an administrator, the user must provide an administrator's credentials to run the program. Because UAC requires an administrator to approve application installations, unauthorized applications cannot be installed automatically or without the explicit consent of an administrator.

In Windows® 7 and Windows Server® 2008 R2, UAC functionality is improved to:

· Increase the number of tasks that the standard user can perform that do not prompt for administrator approval.

· Allow a user with administrator privileges to configure the UAC experience in the Control Panel.

· Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for local administrators in Admin Approval Mode.

· Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for standard users.

Who will want to use UAC?

UAC helps standard users and administrators protect their computers by preventing programs that may be malicious from running. The improved user experience makes it easier for users to perform daily tasks while protecting their computers.

UAC helps enterprise administrators protect their network by preventing users from running malicious software.

What are the benefits of the new and changed features?

By default, standard users and administrators access resources and run applications in the security context of standard users. When a user logs on to a computer, the system creates an access token for that user. The access token contains information about the level of access that the user is granted, including specific security identifiers (SIDs) and Windows privileges.

When an administrator logs on, two separate access tokens are created for the user: a standard user access token and an administrator access token. The standard user access token contains the same user-specific information as the administrator access token, but the administrative Windows privileges and SIDs have been removed. The standard user access token is used to start applications that do not perform administrative tasks (standard user applications).

When the user runs applications that perform administrative tasks (administrator applications), the user is prompted to change or "elevate" the security context from a standard user to an administrator, called Admin Approval Mode. In this mode, the administrator must provide approval for applications to run on the secure desktop with administrative privileges. The improvements to UAC in Windows 7 and Windows Server 2008 R2 result in an improved user experience when configuring and troubleshooting your computer.

Reduced number of UAC prompts

Windows 7 and Windows Server 2008 R2 reduce the number of UAC prompts that local administrators and standard users must respond to.

To reduce the number of prompts that a local administrator must respond to:

· File operation prompts are merged.

· Internet Explorer prompts for running application installers are merged.

· Internet Explorer prompts for installing ActiveX® controls are merged.

The default UAC setting allows a standard user to perform the following tasks without receiving a UAC prompt:

· Install updates from Windows Update.

· Install drivers that are downloaded from Windows Update or included with the operating system.

· View Windows settings. (However, a standard user is prompted for elevated privileges when changing Windows settings.)

· Pair Bluetooth devices to the computer.

· Reset the network adapter and perform other network diagnostic and repair tasks.

Configure UAC experience in Control Panel

Windows Vista® offers two levels of UAC protection to the user: on or off. Windows 7 and Windows Server 2008 R2 introduce additional prompt levels that are similar to the Internet Explorer security zone model. If you are logged on as a local administrator, you can enable or disable UAC prompts, or choose when to be notified about changes to the computer. There are four levels of notification to choose from:

· Never notify me. You are not notified of any changes made to Windows settings or when software is installed.

· Only notify me when programs try to make changes to my computer. You are not notified when you make changes to Windows settings, but you do receive notification when a program attempts to make changes to the computer.

· Always notify me. You are notified when you make changes to Windows settings and when programs attempt to make changes to the computer.

· Always notify me and wait for my response. You are prompted for all administrator tasks on the secure desktop. This choice is similar to the current Windows Vista behavior.

The following table compares the number of UAC prompts for user actions in Windows 7 and Windows Server 2008 R2 with the number of UAC prompts in Windows Vista Service Pack 1.

Actions	Only notify me when programs try to make changes to my computer	Always notify me
Change personalization settings	No prompts	Fewer prompts
Manage your desktop	No prompts	Fewer prompts
Set up and troubleshoot your network	No prompts	Fewer prompts
Use Windows Easy Transfer	Fewer prompts	Same number of prompts
Install ActiveX controls through Internet Explorer	Fewer prompts	Fewer prompts
Connect devices	No prompts	No prompts if drivers are on Windows Update, or similar number of prompts if drivers are not on Windows Update
Use Windows Update	No prompts	No prompts
Set up backups	No prompts	Same number of prompts
Install or remove software	No prompts	Fewer prompts

Change the behavior of UAC messages for local administrators

If you are logged on as a local administrator, you can change the behavior of UAC prompts in the local security policies for local administrators in Admin Approval Mode.

· Elevate without prompting. Applications that are marked as administrator applications and applications that are detected as setup applications are run automatically with the full administrator access token. All other applications are automatically run with the standard user token.

· Prompt for credentials on the secure desktop. The User Account Control dialog box is displayed on the secure desktop. To give consent for an application to run with the full administrator access token, the user must enter administrative credentials. This setting supports compliance with Common Criteria or corporate policies.

· Prompt for consent on the secure desktop. The User Account Control dialog box is displayed on the secure desktop. To give consent for an application to run with the full administrator access token, the user must click Yes or No on the User Account Control dialog box. If the user is not a member of the local Administrators group, the user is prompted for administrative credentials. This setting supports compliance with Common Criteria or corporate policies.

· Prompt for credentials. This setting is similar to Prompt for credentials on the secure desktop, but the User Account Control dialog box is displayed on the desktop instead.

· Prompt for consent. This setting is similar to Prompt for consent on the secure desktop, but the User Account Control dialog box is displayed on the desktop instead.

· Prompt for consent for non-Windows binaries. The User Account Control dialog box is displayed on the desktop for all files that are not digitally signed with the Windows digital certificate.

Change the behavior of UAC messages for standard users

If you are logged on as a local administrator, you can change the behavior of UAC prompts in the local security policies for standard users.

· Automatically deny elevation requests. Administrator applications cannot run. The user receives an error message that indicates a policy is preventing the application from running.

· Prompt for credentials. This is the default setting. For an application to run with the full administrator access token, the user must enter administrative credentials in the User Account Control dialog box that is displayed on the desktop.

· Prompt for credentials on the secure desktop. For an application to run with the full administrator access token, the user must enter administrative credentials in the User Account Control dialog box that is displayed on the secure desktop.

What's the impact of these changes on UAC?

In response to customer requests, the improved UAC allows users to perform their daily tasks with fewer prompts and gives administrators more control over how UAC prompts users.

Windows 7 - What's New in Smart Cards

Windows® 7 includes new features that make smart cards easier to use and to deploy, and makes it possible to use smart cards to complete a greater variety of tasks. The new smart card features are available in all versions of Windows 7.

What's new in smart cards?

Windows 7 features enhanced support for smart card–related Plug and Play and the Personal Identity Verification (PIV) standard from the National Institute of Standards and Technology (NIST).

This means that users of Windows 7 can use smart cards from vendors who have published their drivers through Windows Update without needing special middleware. These drivers are downloaded in the same way as drivers for other devices in Windows.

When a PIV-compliant smart card is inserted into a smart card reader, Windows attempts to download the driver from Windows Update. If an appropriate driver is not available from Windows Update, a PIV-compliant minidriver that is included with Windows 7 is used for the card.

Who will want to use smart cards?

Network administrators who want to enhance the security of the organization's computers, particularly portable computers used by remote users, will appreciate the simplified deployment and use scenarios made possible by smart card Plug and Play PIV support. Users will appreciate the ability to use smart cards to perform critical business tasks in a secure manner.

What are the benefits of the new and changed features?

The new smart card support options in Windows 7 include:

· Encrypting drives with BitLocker Drive Encryption. In the Windows 7 Enterprise and Windows 7 Ultimate operating systems, users can choose to encrypt their removable media by turning on BitLocker and then choosing the smart card option to unlock the drive. At run time, Windows retrieves the correct minidriver for the smart card and allows the operation to complete.

· Smart card domain logon by using the PKINIT protocol. In Windows 7, the correct minidriver for a smart card is retrieved automatically, enabling a new smart card to authenticate to the domain without requiring the user to install or configure additional middleware.

· Document and e-mail signing. Windows 7 users can rely on Windows to retrieve the correct minidriver for a smart card at run time to sign an e-mail or document. In addition, XML Paper Specification (XPS) documents can be signed without the need for additional software.

· Use with line-of-business applications. In Windows 7, any application that uses Cryptography Next Generation (CNG) or CryptoAPI to enable the application to use certificates can rely on Windows to retrieve the correct minidriver for a smart card at run time so that no additional middleware is needed.

What's the impact of these changes on smart card usage?

Smart card usage is expanding rapidly. To encourage more organizations and users to adopt smart cards for enhanced security, the process to provision and use new smart cards is simplified and supports more end user scenarios.

Windows 7 – What's New in Service Accounts

One of the security challenges for critical network applications such as Exchange and IIS is selecting the appropriate type of account for the application to use.

On a local computer, an administrator can configure the application to run as Local Service, Network Service, or Local System. These service accounts are simple to configure and use but are typically shared among multiple applications and services and cannot be managed on a domain level.

If you configure the application to use a domain account, you can isolate the privileges for the application, but you need to manually manage passwords or create a custom solution for managing these passwords. Many SQL Server and IIS applications use this strategy to enhance security, but at a cost of additional administration and complexity.

In these deployments, service administrators spend a considerable amount of time in maintenance tasks such as managing service passwords and service principal names (SPNs), which are required for Kerberos authentication. In addition, these maintenance tasks can disrupt service.

What's new in service accounts?

Two new types of service account available in Windows Server 2008 R2 and Windows 7—the managed service account and the virtual account. The managed service account is designed to provide crucial applications such as SQL Server and Internet Information Services (IIS) with the isolation of their own domain accounts, while eliminating the need for an administrator to manually administer the service principal name (SPN) and credentials for these accounts.

Virtual accounts in Windows Server 2008 R2 and Windows7 are “managed local accounts” that can use a computer’s credentials to access network resources.

Who will want to use managed service accounts?

The managed service account and the virtual account are designed to provide crucial applications such as SQL Server or IIS with the isolation of their own accounts, while eliminating the need for an administrator to manually administer the SPN and credentials for these accounts.

Administrators will want to use managed service accounts to enhance security while simplifying or eliminating the following service administration tasks:

· Password management

· SPN management

Virtual accounts provide the following features that simplify service administration by:

· Eliminating password management

· Allowing services to access the network with the computer’s account credentials in a domain environment

What are the benefits of new managed service accounts?

In addition to the enhanced security that is provided by having individual accounts for critical services, there are four important administrative benefits associated with managed service accounts:

· Managed service accounts allow administrators to create a class of domain accounts that can be used to manage and maintain services on local computers.

· Unlike with regular domain accounts, the network passwords for these accounts will be reset automatically, freeing the administrator from having to reset these passwords manually.

· Unlike with normal local computer and user accounts, the administrator does not have to complete complex SPN management tasks to use managed service accounts.

· Administrative tasks for managed service accounts can be delegated to non-administrators.

What's the impact of these changes on account management?

Managed service accounts can reduce the amount of account management needed for critical services and applications.

Are there any special considerations for using the new service account options?

To use managed service accounts and virtual accounts, the client computer on which the application or service is installed must be running Windows Server 2008 R2 or Windows 7. In Windows Server 2008 R2 and Windows 7, one managed service account can be used for services on a single computer. Managed service accounts cannot be shared between multiple computers and cannot be used in server clusters where a service is replicated on multiple cluster nodes.

Windows Server 2008 R2 domains provide native support for both automatic password management and SPN management. If the domain is running in Windows Server 2003 mode or Windows Server 2008 mode, additional configuration steps will be needed to support managed service accounts. This means that:

· If the domain controller is running Windows Server 2008 R2 and the schema has been upgraded to support managed service accounts, both automatic password and SPN management are available.

· If the domain controller is on a computer running Windows Server 2008 or Windows Server 2003 and the Active Directory schema has been upgraded to support this feature, managed service accounts can be used and service account passwords will be managed automatically. However, the domain administrator using these server operating systems will still need to manually configure SPN data for managed service accounts.

To use managed service accounts in Windows Server 2008, Windows Server 2003, or mixed-mode domain environments, the following schema changes must be applied:

· The service account schema must be applied at the forest level.

· The schema must be changed at the domain level to create the default Managed Service Account container.

For more information, see Extending the Schema.

For more information about managing SPNs, see Service Principal Names.

Windows 7 - What's New in Networking

 

What are the major changes?

The Windows Server® 2008 R2 and Windows® 7 operating systems include networking enhancements that make it easier for users to get connected and stay connected regardless of their location or type of network. These enhancements also enable IT professionals to meet the needs of their business in a secure, reliable, and flexible way.

New networking features covered in this topic include:

· DirectAccess, which enables users to access an enterprise network without the extra step of initiating a virtual private network (VPN) connection.

· VPN Reconnect, which automatically re-establishes a VPN connection as soon as Internet connectivity is restored, saving users from re-entering their credentials and re-creating the VPN connection.

· BranchCache™, which enables updated content from file and Web servers on a wide area network (WAN) to be cached on computers at a local branch office, increasing application response time and reducing WAN traffic.

· URL-based Quality of Service (QoS), which enables you to assign a priority level to traffic based on the URL from which the traffic originates.

· Mobile broadband device support, which provides a driver-based model for devices that are used to access a mobile broadband network.

· Multiple active firewall profiles, which enable the firewall rules most appropriate for each network adapter based on the network to which it is connected.

Who will be interested in these features?

The following groups might be interested in these features:

· IT managers

· System architects and administrators

· Network architects and administrators

· Security architects and administrators

· Application architects and administrators

· Web architects and administrators

What does DirectAccess do?

With the DirectAccess feature introduced in Windows Server 2008 R2, domain member computers running Windows 7 can connect to enterprise network resources whenever they connect to the Internet. During access to network resources, a user connected to the Internet has virtually the same experience as if connected directly to an organization's local area network (LAN). Furthermore, DirectAccess enables IT professionals to manage mobile computers outside of the office. Each time a domain member computer connects to the Internet, before the user logs on, DirectAccess establishes a bi-directional connection that enables the client computer to stay up to date with company policies and receive software updates.

Security and performance features of DirectAccess include authentication, encryption, and access control. IT professionals can configure the network resources to which each user can connect, granting unlimited access or allowing access only to specific servers or networks. DirectAccess also offers a feature that sends only the traffic destined for the enterprise network through the DirectAccess server. Other Internet traffic is routed through the Internet gateway that the client computer uses. This feature is optional, and DirectAccess can be configured to send all traffic through the enterprise network.

Are there any special considerations?

The DirectAccess server must be running Windows Server 2008 R2, must be a domain member, and must have two physical network adapters installed. Dedicate the DirectAccess server only to DirectAccess and do not have it host any other primary functions. DirectAccess clients must be domain members running Windows 7. Use the Add Features Wizard in Server Manager to install the DirectAccess Management console, which enables you to set up the DirectAccess server and monitor DirectAccess operations after setup.

Infrastructure considerations include the following:

· Active Directory Domain Services (AD DS). At least one Active Directory® domain must be deployed. Workgroups are not supported.

· Group Policy. Group Policy is recommended for deployment of client settings.

· Domain controller. At least one domain controller in the domain containing user accounts must be running Windows Server 2008 or later.

· Public key infrastructure (PKI). A PKI is required to issue certificates. External certificates are not required. All SSL certificates must have a certificate revocation list (CRL) distribution point that is reachable via a publicly resolvable fully qualified domain name (FQDN) while either local or remote.

· IPsec policies. DirectAccess uses IPsec to provide authentication and encryption for communications across the Internet. It is recommended that administrators be familiar with IPsec.

· IPv6. IPv6 provides the end-to-end addressing necessary for clients to maintain constant connectivity to the enterprise network. Organizations that are not yet ready to fully deploy IPv6 can use IPv6 transition technologies such as Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), Teredo, and 6to4 to connect across the IPv4 Internet and to access IPv4 resources on the enterprise network. IPv6 or transition technologies must be available on the DirectAccess server and allowed to pass through the perimeter network firewall.

What does VPN Reconnect do?

VPN Reconnect is a new feature of Routing and Remote Access service (RRAS) that provides users with seamless and consistent VPN connectivity, automatically reestablishing a VPN when users temporarily lose their Internet connection. Users who connect using wireless mobile broadband will benefit most from this capability. With VPN Reconnect, Windows 7 automatically reestablishes active VPN connections when Internet connectivity is reestablished. Although the reconnection might take several seconds, it is transparent to users.

VPN Reconnect uses IPsec tunnel-mode with Internet Key Exchange version 2 (IKEv2), which is described in RFC 4306, specifically taking advantage of the IKEv2 mobility and multihoming extension (MOBIKE) described in RFC 4555.

Are there any special considerations?

VPN Reconnect is implemented in the RRAS role service of the Network Policy and Access Services (NPAS) role of a computer running Windows Server 2008 R2. Infrastructure considerations include those for NPAS and RRAS. Client computers must be running Windows 7 to take advantage of VPN Reconnect.

What does BranchCache do?

With BranchCache, content from Web and file servers on the enterprise WAN is stored on the local branch office network to improve response time and reduce WAN traffic. When another client at the same branch office requests the same content, the client can access it directly from the local network without obtaining the entire file across the WAN. BranchCache can be set up to operate in either a distributed cache mode or a hosted cache mode. Distributed cache mode uses a peer-to-peer architecture. Content is cached at the branch office on the client computer that firsts requests it. The client computer subsequently makes the cached content available to other local clients. Hosted cache mode uses a client/server architecture. Content requested by a client at the branch office is subsequently cached to a local server (called the hosted cache server), where it is made available to other local clients. In either mode, before a client retrieves content, the server where the content originates authorizes access to the content, and content is verified to be current and accurate using a hash mechanism.

Are there any special considerations?

BranchCache supports HTTP, including HTTPS, and Server Message Block (SMB), including signed SMB. Content servers and the hosted cache server must be running Windows Server 2008 R2, and client computers must be running Windows 7.

What does URL-based QoS do?

QoS marks IP packets with a Differentiated Services Code Point (DSCP) number that routers then examine to determine the priority of the packet. If packets are queued at the router, higher priority packets are sent before lower priority packets. With URL-based QoS, IT professionals can prioritize network traffic based on the source URL, in addition to prioritization based on IP address and ports. This gives IT professionals more control over network traffic, ensuring that important Web traffic is processed before less-important traffic, even when that traffic originates at the same server. This can improve performance on busy networks. For example, you can assign Web traffic for critical internal Web sites a higher priority than external Web sites. Similarly non-work-related Web sites that can consume network bandwidth can be assigned a lower priority so that other traffic is not affected.

What does mobile broadband device support do?

The Windows 7 operating system provides a driver-based model for mobile broadband devices. Earlier versions of Windows require users of mobile broadband devices to install third-party software, which is difficult for IT professionals to manage because each mobile broadband device and provider has different software. Users also have to be trained to use the software and must have administrative access to install it, preventing standard users from easily adding a mobile broadband device. Now, users can simply connect a mobile broadband device and immediately begin using it. The interface in Windows 7 is the same regardless of the mobile broadband provider, reducing the need for training and management efforts.

What do multiple active firewall profiles do?

Windows Firewall settings are determined by the profile that you are using. In previous versions of Windows, only one firewall profile can be active at a time. Therefore, if you have multiple network adapters connected to different network types, you still have only one active profile—the profile providing the most restrictive rules. In Windows Server 2008 R2 and Windows 7, each network adapter applies the firewall profile that is most appropriate for the type of network to which it is connected: Private, Public, or Domain. This means that if you are at a coffee shop with a wireless hotspot and connect to your corporate domain network by using a VPN connection, then the Public profile continues to protect the network traffic that does not go through the tunnel, and the Domain profile protects the network traffic that goes through the tunnel. This also addresses the issue of a network adapter that is not connected to a network. In Windows 7 and Windows Server 2008 R2, this unidentified network will be assigned the Public profile, and other network adapters on the computer will continue to use the profile that is appropriate for the network to which they are attached.

Windows 7 - What's New in Handwriting Recognition

Windows® 7 provides many Tablet PC improvements for handwriting recognition, including:

· Support for handwriting recognition, personalization, and text prediction in new languages.

· Support for handwritten math expressions.

· Personalized custom dictionaries for handwriting recognition.

· New integration capabilities for software developers.

In Windows Vista, handwriting recognition is supported for eight Latin languages: English (United States and United Kingdom), German, French, Spanish, Italian, Dutch, and Brazilian Portuguese, and four East Asian languages: Japanese, Chinese (Simplified and Traditional), and Korean. For Windows 7, 14 additional languages are supported: Norwegian (Bokmål and Nynorsk), Swedish, Finnish, Danish, Polish, Portuguese (Portugal), Romanian, Serbian (Cyrillic and Latin), Catalan, Russian, Czech, and Croatian. Windows 7 users can launch the Tablet Input Panel (TIP), write in their desired language for which a recognizer is available, and insert the converted, recognized text into applications such as Microsoft Outlook® or Word.

In Windows Vista, personalization for handwriting recognition is supported only for United States English and United Kingdom English for the Latin languages. For Windows 7, six additional Latin languages for which base recognizers shipped in Windows Vista will receive the benefits of the Personalization features. Additionally, personalization will be included for all 14 new languages in Windows 7. Personalization improves a user's handwriting experience significantly as the recognizer learns how and what a user writes.

When using the soft (on-screen) keyboard in Windows 7, Text Prediction helps you enter text more efficiently. Users typing a few letters will be offered a list of words that match. Based on the words users input frequently and the corrections that they make, Windows 7 will become even better at predicting what a user types over time. When using the soft keyboard, Windows 7 supported languages for Text Prediction are expanded beyond the support of United States English and United Kingdom English in Windows Vista to include the following: French, German, Italian, Korean, Simplified Chinese, Traditional Chinese, and Japanese. New languages supported for Text Prediction with pen input include Simplified Chinese and Traditional Chinese. Text Prediction for Simplified Chinese and Traditional Chinese offers both word completion and next word prediction. Users will benefit from this feature as it significantly speeds up handwriting input for these languages.

Windows 7 enables users who work with math expressions to use handwriting recognition to input math expressions via the Math Input Panel, a new accessory. The Math Input Panel recognizes handwritten math expressions, provides a rich correction experience, and inserts math expressions into target programs. Math Input Control, which offers the same recognition and correction functionality, enables developers to integrate math handwriting recognition into programs directly for a higher degree of control and customization.

In Windows Vista, the ability of users to add a new word to the built-in dictionaries is limited. Windows 7 allows users to create custom dictionaries, enabling them to replace or augment the built-in vocabulary by using their own specialized wordlists.

Windows 7 exposes many Tablet PC enhancements for access by software developers, so they can make their applications more useful. For example, updated Ink Analysis APIs in Windows 7 enhance and accelerate the development of ink-enabled applications—and make it easier to integrate basic shape recognition features. Through these capabilities, users will benefit from more options in programs that can use the unique capabilities of a Tablet PC.

Windows 7 - What's New in Group Policy

 

What are the major changes?

The following changes are available in Windows Server® 2008 R2 and in Windows® 7 with Remote Server Administration Tools (RSAT):

· Windows PowerShell Cmdlets for Group Policy: Ability to manage Group Policy from the Windows PowerShell™ command line and to run PowerShell scripts during logon and startup

· Group Policy Preferences: Additional types of preference items

· Starter Group Policy Objects: Improvements to Starter GPOs

· Administrative Template Settings: Improved user interface and additional policy settings

What does Group Policy do?

Group Policy provides an infrastructure for centralized configuration management of the operating system and applications that run on the operating system.

Who will be interested in this feature?

The following groups might be interested in these changes:

· IT professionals who have to manage users and computers in a domain environment

· Dedicated Group Policy administrators

· IT generalists

· Support personnel

Are there any special considerations?

You can manage local and domain Group Policy by using domain-based versions of Windows Server 2008 R2. Although the Group Policy Management Console (GPMC) is distributed with Windows Server 2008 R2, you must install Group Policy Management as a feature through Server Manager.

You can also manage local and domain Group Policy by using Windows 7. For managing local Group Policy, the Group Policy Object Editor has been replaced by the Local Group Policy Editor. To manage domain Group Policy, you must first install the GPMC. The GPMC is included with RSAT, which is available for download:

· Windows Server 2008 R2 Remote Server Administration Tools for Windows 7

· Windows Server 2008 Remote Server Administration Tools for Windows Vista with SP1

RSAT enables IT administrators to remotely manage roles and features in Windows Server 2008 R2 from a computer that is running Windows 7. RSAT includes support for the remote management of computers that are running either a Server Core installation or the full installation option of Windows Server 2008 R2. The functionality RSAT provides is similar to Windows Server 2003 Administration Tools Pack.

Installing RSAT does not automatically install the GPMC. To install the GPMC after you install RSAT, click Programs in Control Panel, click Turn Windows features on or off, expand Remote Server Administration Tools, expand Feature Administration Tools, and select the Feature Administration Tools and Group Policy Management Tools check boxes.

Which editions include this feature?

Group Policy is available in all editions of Windows Server 2008 R2 and Windows 7. Both local and domain-based Group Policy can be managed by using any version of Windows Server 2008 R2 and any version of Windows 7 that supports RSAT.

Does it function differently in some editions?

Without RSAT, only local Group Policy can be managed using Windows 7. With RSAT, both local and domain-based Group Policy can be managed using any edition of Windows 7 that supports RSAT.

Is it available in both 32-bit and 64-bit versions?

Group Policy is available in both 32-bit and 64-bit versions of Windows Server 2008 R2. The choice of a 32-bit or 64-bit version does not affect interoperability, scalability, security, or manageability for Group Policy.

Windows 7 – What’s New in Biometrics

For enhanced convenience, Windows® 7 enables administrators and users to use fingerprint biometric devices to log on to computers, grant elevation privileges through User Account Control (UAC), and perform basic management of the fingerprint devices. Administrators can manage fingerprint biometric devices in Group Policy settings by enabling, limiting, or blocking their use.

What's new in biometrics?

A growing number of computers, particularly portable computers, include embedded fingerprint readers. Fingerprint readers can be used for identification and authentication of users in Windows. Until now, there has been no standard support for biometric devices or for biometric-enabled applications in Windows. Computer manufacturers had to provide software to support biometric devices in their products. This made it more difficult for users to use the devices and administrators to manage the use of biometric devices.

Windows 7 includes the Windows Biometric Framework that exposes fingerprint readers and other biometric devices to higher-level applications in a uniform way, and offers a consistent user experience for discovering and launching fingerprint applications. It does this by providing the following:

· A Biometric Devices Control Panel item that allows users to control the availability of biometric devices and whether they can be used to log on to a local computer or domain.

· Device Manager support for managing drivers for biometric devices.

· Credential provider support to enable and configure the use of biometric data to log on to a local computer and perform UAC elevation.

· Group Policy settings to enable, disable, or limit the use of biometric data for a local computer or domain. Group Policy settings can also prevent installation of biometric device driver software or force the biometric device driver software to be uninstalled.

· Biometric device driver software available from Windows Update.

Who will want to use biometric devices?

Fingerprint biometric devices offer a convenient way for users to log on to computers and grant elevation through UAC.

What are the benefits of the new biometric features?

The new biometric features provide a consistent way to implement fingerprint biometric–enabled applications and manage fingerprint biometric devices on stand-alone computers or on a network. The Windows Biometric Framework makes biometric devices easier for users and for administrators to configure and control on a local computer or in a domain.

What's the impact of these changes on biometrics?

The introduction of the Windows Biometric Framework allows the integration of fingerprint biometric devices in Windows. It offers a consistent user experience for logging on to Windows and performing UAC elevation. In addition, it provides a common set of discovery and integration points that offers a more consistent user experience across devices and applications. The Windows Biometric Framework also includes management functions that allow administrators to control the deployment of biometric fingerprint devices in the enterprise.

Windows 7 – What’s New – APPLOCKER

What are the major changes?

Windows AppLocker is a new feature in Windows® 7 and Windows Server® 2008 R2 that replaces the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help administrators control how users can access and use files, such as .exe files, scripts, Windows Installer files (.msi and .msp files), and DLLs.

What does AppLocker do?

Using AppLocker, you can:

· Define rules based on file attributes derived from the digital signature, including the publisher, product name, file name, and file version. For example, you can create rules based on the publisher and file version attributes that are persistent through updates, or you can create rules that target a specific version of a file.

Important

AppLocker rules specify which files are allowed to run. Files that are not included in rules are not allowed to run.

· Assign a rule to a security group or an individual user.

Note

You cannot assign AppLocker rules to Internet zones, individual computers, or registry paths.

· Create exceptions for .exe files. For example, you can create a rule that allows all Windows processes to run except Regedit.exe.

· Use audit-only mode to identify files that would not be allowed to run if the policy were in effect.

· Import and export rules.

Who will be interested in this feature?

AppLocker can help organizations that want to:

· Limit the number and type of files that are allowed to run by preventing unlicensed or malicious software from running and by restricting the ActiveX controls that are installed.

· Reduce the total cost of ownership by ensuring that workstations are homogeneous across their enterprise and that users are running only the software and applications that are approved by the enterprise.

· Reduce the possibility of information leaks from unauthorized software.

AppLocker may also be of interest to organizations that currently use Group Policy objects (GPOs) to manage Windows-based computers or have per-user application installations.

Are there any special considerations?

· By default, AppLocker rules do not allow users to open or run any files that are not specifically allowed. Administrators should maintain an up-to-date list of allowed applications.

· Expect an increase in the number of help desk calls initially because of blocked applications. As users begin to understand that they cannot run applications that are not allowed, the help desk calls may decrease.

· There is minimal performance degradation because of the runtime checks.

· Because AppLocker is similar to the Group Policy mechanism, administrators should understand Group Policy creation and deployment.

· AppLocker rules cannot be used to manage computers running a Windows operating system earlier than Windows 7.

· If AppLocker rules are defined in a GPO, only those rules are applied. To ensure interoperability between Software Restriction Policies rules and AppLocker rules, define Software Restriction Policies rules and AppLocker rules in different GPOs.

· When an AppLocker rule is set to Audit only, the rule is not enforced. When a user runs an application that is included in the rule, the application is opened and runs normally, and information about that application is added to the AppLocker event log.

Which editions include AppLocker?

AppLocker is available in all editions of Windows Server 2008 R2 and in some editions of Windows 7.

Note

At least one Windows Server 2008 R2 domain controller is required to host the AppLocker rules.

7 Good Reasons to Switch to Windows 7

 

When scanning our list, we politely encourage you to ask yourself, “Do I really want to continue using an eight-year-old operating system?” Followed by “Don’t I deserve better?” Because no matter how comfortable you are with XP, you do deserve an OS that’s both newer and better, and Windows 7 will deliver. Not convinced? Then read on.

You Asked for This
Remember Vista? We know most of you don’t want to, and that’s because the OS fell short of many consumers’ expectations. As a result, many — especially power users — elected to skip Vista entirely, and have continued running Windows XP. Hence Microsoft’s attempt at a redo with Windows 7. This time around, the software giant made an effort to crowdsource feedback from Microsoft enthusiasts by distributing a free beta version of Windows 7 in January.

You complained, you demanded, and in response Microsoft slapped something together to ship October 22. The result? The overall presentation of Windows 7 is familiar enough to welcome XP users, but fundamentally it’s different enough to make you change the way you think of Microsoft.

Upgrading Won’t Screw You Over
Microsoft has its loyal fans in mind, including those clinging for dear life to XP. The tech giant promises that Windows 7 has been coded to support almost every piece of software that runs on your XP system. If, in the rare case one of your XP programs doesn’t work on Windows 7, you can still run it in a virtual environment called XP Mode. What’s especially cool about this mode is you won’t have to toggle between an XP emulator and Windows 7. The apps running in XP Mode appear like ordinary windows that are part of Windows 7.

Also, the Windows 7 upgrade chart may appear intimidating and confusing, but prior to release Microsoft plans to release a compatibility checker that will automatically scan your system to tell you which version of Windows 7 is for you.

Automatically Installed Device Drivers
This is only a minor improvement, but it addresses a major pain in the ass in earlier versions of Windows. Who has time to scour the internet for a device driver to work with hardware such as a video card or an external hard drive? Life is too short for that garbage work, and fortunately Windows 7 does this chore for you. Plug in a new piece of hardware, and the OS will find and install the driver for you. XP has this feature, sort of, but it works better in Vista and much better in Windows 7. No more of those annoying yellow question marks. Good riddance.

Piracy
Yarr! We know there are plenty of you out there downloading pirated digital booty, especially in Windows land. But it’s never been convenient to be a pirate compared with being a paying customer. For example, if you’re a legitimate buyer purchasing movies off iTunes, you can easily stream your media to your legitimately purchased Apple TV. If you’re a pirate, you’d have to go through roundabout programs and hardware to re-create the experience.

Windows 7 is an OS practically made for pirates. Want to display your movies, photos or music on your TV? Bam! Windows Media Player will do that out of the box if you have a Wi-Fi enabled TV, or an Xbox. No extra programs to install: Windows Media Player seamlessly communicates with your Wi-Fi device to display your illegal content in all its glory on your fancy HD TV.

And sharing media is easy, too. Want to download all of your brother’s music? Bam! HomeGroup, an easy networking feature included in Windows 7, will make that super easy between computers running the OS. Immediately upon plugging in to your network with Ethernet or Wi-Fi, HomeGroup will ask if you wish to join the group on the network, allowing you to set up easy file sharing in minutes.

A Better Interface
The new Aero features, which we covered in our Windows 7 first look, will change the way you interact with your computer. Aero Peek will prove the most useful: The feature displays outlines of all your open windows behind your active window. Each outlined box contains a thumbnail previewing its corresponding window to help you choose.

“It breaks the instinct to maximize windows as you’re using them; instead, you simply let windows hang out, since it’s much easier to juggle them.” Makes sense, doesn’t it, for a generation of multitaskers? Aren’t you tired of Alt-Tabbing over and over and over?

Another feature, Aero Snap, makes it easier to resize and tile windows to fit the available space. (Read more about Aero Snap and Aero Peek.)

Words aren’t enough. You really have to try the OS to understand why these UI enhancements are a big deal. We get the idea that the people dismissing Windows 7 haven’t yet tinkered with it, and we highly encourage you to download the release candidate and give it a test drive. But do it now: The download is only available until August 20.

More Advanced Hardware Support
Technology evolves faster than living organisms, and Windows 7 is also designed to work well with upcoming hardware. Touchscreens are getting more popular in the mainstream (thanks largely to the iPhone), and sure enough Windows 7 includes multitouch support. (Check out a video demoing how it works.) If 2010 is indeed the year of the tablet, as we predict, then Windows 7 just might be the winning OS in that new landscape.

If you’re not interested in touchscreens, think multiple processor cores. At some point when multicore computers are more widely available, affordable and energy efficient, an eight-year-old OS like Windows XP isn’t going to know what to do with all that extra processing power. Microsoft has already hinted that Windows 7 will scale to 256 processors. That’s more than enough, but you get the picture: This is a new operating system designed for newer systems. You’re going to need to upgrade eventually, so why not do it now, so you can get a good feel for the OS, rather than later?

The 64-bit version of Windows 7 can handle bigger system memory, too, scaling up to 192 GB of RAM, compared to the 4-GB limit for the 32-bit versions of Windows XP and Windows 7, and 128 GB for the less common 64-bit edition of Windows XP.

Oh, yeah, speaking of new devices — Windows 7 is tweaked to better suit those trendy netbooks, too. These puny devices are low-powered and thus limited in performance, and Windows 7 will run better on them thanks to its improved memory management. For example, Windows XP allocated video memory for unseen windows, but Windows 7 does not. It uses video memory only for visible windows. That equates to a more responsive netbook with longer battery life.

It Looks Sexier
A superficial reason, we know, but we’ve become so intimate with our gadgets that their looks are important, too. Windows 7 will make your new PC look new, unlike the boring-as-vanilla UI of Windows XP. Extra detail, polish, gradients and a UI that will clear your desktop of clutter should all make Windows 7 a more attractive choice.

How to Enable the Quick Launch Bar in Windows 7

It is a surprising to see that the Quick Launch Bar has not been enlisted in the easy to enable list. Here’s what you gotta to do to enable the Quick Launch Bar.

• Step 1:Right-click on the Taskbar and select Toolbars > New Toolbar from the menu.
• Step 2: Copy and paste the address provided below into the Address bar ‘%SystemDrive%Users%username%AppDataRoamingMicrosoftInternet Explorer‘ then click the arrow to the right of the Address bar to navigate to the folder.
• Step 3: Select the Quick Launch folder listed and click the Select Folder button

How to Enable the Windows Aero in Windows 7

If you were looking for the best designed and most transparent Microsoft user interface then you can’t escape Windpws Aero. Here’s a hack to enable Windows Aero in Windows 7. But before you proceed with the steps keep a backup of your registry.

• Step 1. Click on the Start Menu and type ‘regedit’ into the search box. When the program appears click to open the regedit.exe icon.
• Step 2. Locate the Key below HKEY_CURRENT_USERSoftwareMicrosoftWindowsDWM
• Step 3. Look to the pane on the right of the key hierarchy. Right click on the white area and select New > DWORD (32 bit) Value.
• Step 4. As the value appears name it UseMachineCheck.
• Step 5. Repeat and create 2 more DWORD Values, Blur and Animations
• Step 6. First double-click the value just created with the UseMachineCheck and enter 0 in the Value Data box. Do the same for Values Blur and Animations. Then click OK.
• Step 7. Now close the Registry Editor.
• Step 8. Open the Start Menu and type ‘cmd’ into the search box, right-click on cmd.exe when the program appears in the search results. Now, select Run as Administrator from the drop-down.
• Step 9. As the Command Prompt opens type the commands below
  • i) Net Stop uxsms? this command will stop the Desktop Windows Manager Session Manager
  • ii) Net Start uxsms this command will restart it
• Step 10. Once you close the Command Prompt. Right click on the desktop and click on Personalize from the menu.
• Step 11. Click on the Window Color and Appearance in the Personalization Windows Aero the Color Scheme menu.

Windows 7 Transfers Your Wireless Settings Easily

 

After discovering how easily WEP can be cracked and creating a long, secure WPA2 key, you’ve probably noticed it’s a pain to get friends connected to your Wi-Fi network when they stop by. Windows 7 makes this process easy.

the quick and easy process of transferring your wireless network settings from your Windows 7 PC to any other machine running XP, Vista, or Windows 7. To transfer the settings for yourself, head into the Network and Sharing Center, click on Manage Wireless Networks, and then in the properties for your wireless network you’ll find the link to open the wizard that will copy all your settings onto a flash drive.

Once you’ve got the settings backed up, you can use the bundled setupSNK.exe file on the flash drive to restore the settings onto another computer. Sure, you can always save the key to a text file, but having this feature built into the OS is very useful, especially since you don’t have to mess around with wireless settings.

Windows 7: What about the Gamers?

With all of the excitement surrounding the testing and launch of Windows 7, it seems that one demographic of PC users have been left out…the gamers. While I have read a few articles on gaming in the new OS, very little has been said as to how Windows 7 will improve this experience. This is also one of the few areas that pertains to users of both PC and Mac users, because whether Mac users like to admit it or not, they probably use Windows for PC gaming. Many will contest that the PC gaming market is dying, but that’s perception of the few. There are a few popular titles that will probably never be written for a console, not to mention, a PC is able to constantly push the threshold of graphics because graphics cards are developed and upgraded more often than gaming consoles. So, what are the advantages of gaming in Windows 7 versus Vista or XP?

DirectX 11 – DirectX 11 is perhaps the largest improvement in Windows 7 gaming. PC game developers have already begun taking advantage of the improvements that DirectX 11 will allow. Stage Select claims that, “The power of DirectX 11 also claims to improve in-game details without sacrificing gameplay”.

Per Microsoft, DirectX 11 features include:

• Tessellation – Tessellation is implemented on the GPU to calculate a smoother curved surface resulting in more graphically detailed images, including more lifelike characters in the gaming worlds that you explore.
• Multi-Threading – The ability to scale across multi-core CPUs will enable developers to take greater advantage of the power within multi-core CPUs. This results in faster framerates for games, while still supporting the increased visual detailing.
• DirectCompute – Developers can utilize the power of discrete graphics cards to accelerate both gaming and non-gaming applications. This improves graphics, while also enabling players to accelerate everyday tasks, like video editing, on their Windows 7 PC.

Games for Windows- This didn’t quite take off in previous Windows, but a growing catalogue and more support should help turn the corner for Games for Windows. Microsoft touts that Games for Windows guarentees: Quality, Compatibility, Saftey Features and games are Easy to Play.

Games in Windows 7- While this feature was not always consistent in Windows Vista, I have found that every game I have installed in Windows 7 has found its way to the Games folder where it has been catalogued properly. This gives the user one place to store and keep track of all their games. Another feature that has made its way from Vista is the ability for Parents to control their kids gaming experiences using the Parental Control feature.

The Drawback to Windows 7 Gaming- Some games which are not designed to run on Windows 7 may have difficulty installing on the new OS. Compatibility Mode and patches may fix these hiccups, but it may be time to trash some old favorite titles. I haven’t had any major problems with games installing and running under Windows 7, except for Need For Speed: Undercover. Some users have been able to get this game to work, but I have visited every forum and tried pretty much everything and it’s a no go.

While this is certainly not a benchmark test to compare across the board, my own personal experience on Windows 7 has been great. Crysis, the quintessential measuring stick for graphics-intensive games has produced a higher frame rate and seems to run smoother on my installation of Windows 7 than Vista or XP (all on the same hardware). So, there you have it gamers, Microsoft hasn’t forgotten about you. In fact, with the promise of DirectX 11 and some impressive game titles in the pipeline…the best may be yet to come.

Sound off in the comments about your experiences with Windows 7 gaming. Also, if anybody has a sure-fire way to get NFS: Undercover to work for me, I’d appreciate any suggestions.

Windows 7 Compatibility Centre

Microsoft have launched the compatibility centre for Windows 7.  A website simply containing a database of software and hardware that is known to work fine with their new operating system.

The database is by no means exhaustive.  The first software package I searched for, Microsoft’s own Photodraw v2.0 failed to appear in the database even though I know it works fine in Windows 7.  The website does give you the opportunity though to add additional hardware and software yourself if you know it to work, which is a nice touch.

With hardware you’re always better first visiting the manufacturer’s website and downloading any Windows 7 drivers, at the same time checking whether those drivers will support both 64 bit and 32 bit versions of Windows 7.

For seeing if some of your older software will work though, this is a useful tool when you’re considering upgrading.