Lock Down Those Apps

In the age of application overload, features such as AppLocker may be key in some enterprises. Admins can prevent users from downloading harmful or memory-hogging applications, using the three rule system to label applications with “allow,” “deny,” and “exception.” AppLocker’s more honed capabilities include restrictions on certain applications based upon version number or department, allowing division of applications based on business-need.

Protect that Data

Vista’s data protections – Encrypting File System and Active Directory Rights Management Services support – are still supported in Windows 7 with minor updates. The major enhancement is with BitLocker drive encryption and BitLocker To Go, which encrypts data on removable media. Admins are given more flexibility with how much encryption removable media requires, and authorized IT admins always have access to BitLocker protected drives with the new Data Recovery Agent (DRA).

After partitioning your drive, you can view which drives are being protected by BitLocker. These drives will automatically be divided into fixed drives and removable drives. Upon turning on BitLocker, you will be prompted to enter a password or a smartcard. You will be provided with a BitLocker Recovery Key, in case of a lost password or failed authentication. You will be given the option to either print the recovery key or save it as a text file. BitLocker can encrypt in the background of Windows 7, and even run without a Trusted Platform Module. In order to do so – if your computer does not come with a TPM chip – you must change the group policy settings, as outlined by Tony Bradley:

1. Click the Windows logo at the bottom left (the Start button).

2. In the ‘Search Programs and Files’ field at the bottom of the Start menu, type gpedit.msc and press Enter.

3. Under Computer Configuration, navigate to Administrative Templates, Windows Components, BitLocker Drive Encryption, Operating System Drives.

4. Double-click on the Require additional authentication at startup option.

5. Select the Enabled radio button at the top and check the Allow BitLocker without a compatible TPM check box.

6. Click OK.

Despite being the bane of every IT departments’ existence, removable drives are still widely used in the enterprise. Windows 7 confronts this glaring vulnerability with an extension of BitLocker. With BitLocker to Go, administrators have a lot of control regarding the use of removable storage devices. Simply changing Group Policy can make unencrypted drives read-only, enforcing that BitLocker to Go be applied before saving data to a removable drive.

And the community says…

Tell us what you like or desire from Windows 7 security capabilities, and see what other members of the community had to say.

For more information on Windows 7 Security Enhancements, check out the Microsoft TechNet Library.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

From little-known tricks to big picture planning, there is plenty of valuable information on Windows 7 in the blog world. Check out some of our favorites from this past month:

• Ed Tittel’s Windows Enterprise Desktop blog offers insight into the world of Windows OS setup and configuration, migration, virtualization, and more in the context of those who work with Windows on large networks.
• Tony Bradley’s Windows 7: Through the Looking Glass has timely updates on the goings-on related to Windows 7 and general tech subjects.
• Nathan Simon writes a blog about general IT-related subjects, but he’s got a great tutorial on how to disable Windows 7 automatic update restart for newer end users.
• Of course, we’ve got plenty of Windows 7 coverage at the Enterprise IT Watch blog, from why or why you shouldn’t upgrade to Windows 7, how 7 companies are making the migration to Windows 7, and the sad but necessary retirement of Windows XP.
• Check out where members of the IT Knowledge Exchange community catches up on their Windows 7 information.

Open IT Forums: Windows 7 Style

One of the perks of community style learning is getting a plethora of perspectives and shared experiences in the form of Open IT Forum questions. We employed this benefit during Windows 7 month in hopes that Windows 7 veterans would be able to ease the migration for Windows 7 newbies.

• Tips for Windows 7 use
• What are your favorite Windows 7 blogs?
• What’s your impression of Windows 7?
• Windows 7 Security – Differences? Shortcomings?
  
• Reactions to IE9?

Windows 7 Questions

And last but not least, we had some great questions posted in the forums this month asking all about Windows 7, which gave some of our members a chance to share their knowledge and earn knowledge points, badges, and prizes. Check them out:

Oh, and this…

SearchWinIT.com has a whole section dedicated to Windows Operating System Management, which turns all of your what-ifs and what-nows into planning guides and expert advice.

Do Tell!

Did you enjoy Windows 7 month? Share one thing you learned in the comments section, and we’ll share 25 knowledge points!

Next month on IT Knowledge Exchange…

April’s theme is Storage Virtualization at IT Knowledge Exchange! Bring your questions, ideas, and suggestions to the forums and the blogs. Learn something, teach something, and earn great prizes!

Are there other topics you would be interested in seeing explored around IT Knowledge Exchange in the future? Let us know in the comments section or send me an email at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

Since there’s been a lot of discussion about Windows 7 this month, it only seemed fitting to get the community’s impressions of Internet Explorer 9 from Microsoft, compatible with Windows 7 and Vista. We polled the IT Knowledge Exchange members and got some interesting and varied responses.

Despite reading reviews where Internet Explorer 9 came out on top, Jinteik is still going to wait a few months before trying IE9. User and fan of the Opera browser, Sixball shies away from jumping right onto the Microsoft bandwagon, and CharlieBrowne would second his decision:

I just have a hard time rushing to use anything new coming out of Microsoft. I’ve been burned in the past and like to wait for a bit of time to see how clean a release is.

Rakei, like many I’m sure, is stuck with IE8 because IE9 is not compatible with Windows XP, but with Windows Vista and Windows 7. TomLiotta is in a similar boat, having accepted Windows XP as his company’s standard. His active dislike of Windows 7, which is on his compatibility testing laptop, doesn’t bode well for his future run in with IE9.

Valmsmith believes IE9 is just another way that Microsoft is trying to usher Windows XP out of the picture. If that is indeed the intent, it seems to be backfiring, such as in the case of Batye’s clients who recently received new machines preloaded with Windows XP. In general, Windows XP fans seem to be holding their ground.

Chippy088 doesn’t use any version of IE, mainly because of the memory-hogging add ins that IE requires. The last version of IE he used – IE7 – was uninstalled because of behavioral problems and bottle-necking. Though he has access to IE through various outlets in his professional life, he uses it primarily for web site testing rather than personal use.

BobBeechey had the opposite reaction: “I have been using IE9 as my main browser for a few days. It seems to be responsive and well designed. Good competition for Chrome at least.” Rich Jaroslovsky of Bloomberg also had good things to say about the browser. He highlight the new privacy features of the browser – along with their implications – in IE9 in this great, short video review.
[kml_flashembed movie="http://www.youtube.com/v/1MSwncp3XRM" width="425" height="350" wmode="transparent" /]
If you’re not a fan of IE, we’d love to hear some other browsers you’d recommend. Do you think IE9 is a worthy opponent of Chrome? Let us know in the comments section or email me directly at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

SCCM 2012 brings in new support for managing and configuring mobile devices including, as Mary Jo Foley reports, Android, Apple iOS and even Symbian devices. It’s a surprisingly agnostic move with interesting implications, as Foley notes:

My first thought when I heard that SCCM 2012 will enable management of iPads is that Microsoft may be undercutting its own argument that Windows-based slates and tablets are inherently better because IT managers can’t manage iPads as easily and well as they can Windows-based PCs and devices. If Microsoft makes enterprise management of iPads a key selling point, won’t the company be removing one of the advantages it claims for Windows slates?

Possibly, but maybe it’s also just responding to market demands, particularly since Windows Phone 7 OS will probably be a laggard in the field for a few years, at least (although it does also support Windows Phone 7 management), despite whatever catchy advertising campaigns they run.

Hat tip to Ron Miller.

Michael Morisy is the editorial director for ITKnowledgeExchange. He can be followed on Twitter or you can reach him at Michael@ITKnowledgeExchange.com.

Standing up for its enterprise-popular OS, Windows 7, Microsoft has begun promoting Windows 7 tablets, starting with a slew of commercials for the Asus Eee Slate. According to the ads’ messages, the Eee is for everyone, from artists to bloggers to working mothers. Rather than taking the route of Apple’s show-not-tell ads that let the iPad do all of the talking, Microsoft lets its customers do the talking. But they’re not just saying anything: From the street artist to the mom/freelance musician, the predominant message is that Windows 7 tablets are computers, simplified. Run your usual programs without having to deal with an app store or change the way you think of computing; that’s a pretty tempting message for an enterprise audience that doesn’t have the time or the budget to incorporate training or program overhauls.

So what do you think? Is the “next PC” approach from Microsoft tantalizing enough for enterprise IT to bite? Check out the commercials below the jump and let us know in the comments section or email me directly at Melanie@ITKnowledgeExchange.com.

[kml_flashembed movie="http://www.youtube.com/v/cj0ASzo-Pxg" width="425" height="350" wmode="transparent" /]
[kml_flashembed movie="http://www.youtube.com/v/YIyExhWlNik" width="425" height="350" wmode="transparent" /]

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

According to many who have made the switch, Windows 7′s interface changes are fairly intuitive and user-friendly. Other changes, such as to the notification area in an attempt to make Windows less intrusive, may require workarounds or additional education for staff. IT Knowledge Exchange member IceCubbe points out that many of the systems settings can be difficult to find, despite the updated search function. His suggestion? Take advantage of Microsoft’s “little trick dubbed ‘GodMode’”:

Create a folder and name it:GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

The next time you open the folder you will find links to all control panel settings listed….The GodMode folder becomes a motorway to your system settings.

Windows 7′s compatibility does not come without a learning curve; administrators must figure out how to ensure that applications will continue to run after the changeover. Deciphering and choosing one of Windows 7′s options for compatibility is key to a smooth transition. The Register’s Tim Anderson points out some of the key changes to administrative features between XP and Windows 7:

Microsoft’s tools for Windows 7 administration are better than those for Windows XP, but many techniques are different. Key areas include changes to group policy, which lets administrators customise and lock down Windows 7 desktops centrally, and the new Microsoft Deployment Toolkit including the Windows Deployment Services, the Windows Automated Installation Kit and the User State Migration Tool. Backup and restore is different than in Windows XP, being image-based and designed to work with backup drives or Microsoft’s Data Protection Server rather than with tape, though third-party backup systems are also available.

There are also significant new administrative features in Windows 7 such as Direct Access, which enables remote access to file shares without a VPN, and Bitlocker file encryption. Encryption is not to be taken lightly: get it wrong, and users can lose data.

Anderson also mentions Microsoft’s Software Assurance subscription, which now allows VDI use rights through the use of Windows Thin PC. The subscription also includes the Desktop Optimization Pack chock full of management features worth learning and utilizing.

The learning curve doesn’t end with administrators. Your help desk and software developers will also have to do a little catching up in order to understand and take full advantage of additional features like new troubleshooting tools and improved application performance in Windows 7.

If you have additional tips for a Windows 7 ease-of-use, share them in the comments section, in the forums, or email me directly at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

• Hardware compatibility
• Application compatibility
• Migrating user settings and data

However, it is important to note that Windows 7 is the first version of Windows to run better on the hardware than its predecessor. According to Microsoft, Windows 7 requires 1 GB RAM and 1.4 GHz processors.

Anderson brings up another great point about moving to Windows 7 that may deter many enterprises from migrating everyone right away:

Figuring out how to retain user documents and settings is another key issue. There is no in-place upgrade from Windows XP to Windows 7, and there is no in-place upgrade from 32-bit to 64-bit Windows. Many administrators dislike in-place upgrades anyway, because there is more that could go wrong.

This means most Windows 7 deployments will be new installations, not upgrades, potentially wiping user data.

The smoothest transition for users is the zero-touch automated option with PCs managed by the System Center Configuration Manager. Starting with the Microsoft Deployment Toolkit, which includes documentation and links for download such as the Windows Automated Installation Kit, can ensure that you are better-prepared and informed as to the proper specs for your endeavor. Another plus of using the Windows Automated Installation Kit is the included User State Migration Tool, which allows the retention of user profiles and data that might be lost in the case of a new installation rather than an upgrade to Windows 7.

Like with any major upgrade or migration, it is in your best interest to create a plan before beginning deployment, complete with a backup plan as well as backups of all computers. Another perk of deploying Windows 7? If you’re running Vista or 7, you can take advantage of Internet Explorer 9, released today.

Keep us updated on your migration progress, hangups, and successes in the comments section or send me an email at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

Saturno suggested GlobalKnowledgeBlog for its section on Windows 7 that is always being updated with new materials. Engineering Windows and the Windows 7 Team Blog are also great stops on your way to a better understanding of the operating system. Johnstockman enjoys the Microsoft Springboard Windows 7 blog for help in Windows 7 deployment.

Slack400 recommends Windows Networking and SearchEnterpriseDesktop for more in-depth information. Some of his favorite guides on SearchEnterpriseDesktop:

• A guide to Windows 7 migration tools
  
• Windows 7′s XP Mode can help with compatibility, as a last resort
• The basics of planning an enterprise desktop migration to Windows 7

The Windows 7 Blog is another compilation of developments in Windows 7 and Windows in general. Check out IT Knowledge Exchange’s options for Windows 7-related blogs as well: Windows Enterprise Desktop by Ed Tittel, Windows 7: Through the Looking Glass by Tony Bradley, and The ranting of an IT professional by Jason Tramer highlights Windows 7 on a pretty regular basis. Of course, there are always the Enterprise IT Watch Blog and the answer forums for those questions or quirks that you can’t find anywhere else.

Add your own picks in the comments section, the forums, or email me directly at Melanie@ITKnowledgeExchange.com.

The company is migrating 250,000 managed seats to the new OS, in an effort to standardize desktop deployment. T-Systems isn’t the only company making the migration or singing Windows 7′s praises, so it’s looking good for the OS, whose first service pack was recently released.

Have a different take on Windows 7 or its new service pack? Let us know in the comments section or send me an email at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.

Whereas other users have to pay an extra cost for Windows Virtual Desktop Access subscriptions to use thin-client devices, future users of WinTPC won’t have to buy a VDA license, as explained by Gavriella Schuster, General Manager for the Windows Commercial business, in the Windows Team blog:

WinTPC is a smaller footprint, locked down version of Windows 7, designed to allow customers to repurpose their existing PCs as thin clients. PCs with WinTPC will not require the VDA license that regular thin clients will need to access VDI desktops. WinTPC is expected to be available for download from the Microsoft Connect Site in Q1 2011.

This benefit approach is Microsoft’s way of helping companies maximize technology investments by lowering or eliminating the up-front costs of thin clients to be used for VDI as well as the cost of licensing. Another concern for Microsoft, as outlined by Karri Alexion-Tiernan in a blog post, is to address the shrinking budgets for new devices. Allowing customers to utilize existing PCs frees up some of that budget to be spent “towards devices that offer more functionality and flexibility, such as new Windows 7 PCs, tablets, or slates.” While there is much skepticism from the experts, WinTPC is nonetheless slated to be released this month. More announcements are to be made tomorrow, so we’ll update you on any news.

Is Microsoft going to be too late to the tablet party?

While the iPad infiltrated the consumer market before sneaking its way into the enterprise – to many people’s chagrin and still only with a sliver of enterprise users – perhaps Microsoft is taking the backwards approach: Enter the enterprise market with Windows-equipped tablets after the market is full-fledged and saturated. Hey, it worked with their mobile timeline, right?

What do you think of WinTPC? Not impressed by Microsoft’s unending attempts to lock users in? Let us know in the comments section or send me an email at Melanie@ITKnowledgeExchange.com.

Melanie Yarbrough is the assistant community editor at ITKnowledgeExchange.com. Follow her on Twitter or send her an email at Melanie@ITKnowledgeExchange.com.