10 best features in Windows 7 for IT professionals

10 best features in Windows 7 for IT professionals

By JONATHAN HASSELL, IDG

Tuesday, Microsoft unveiled its work on Windows 7, the successor to Vista, to a crowd at the Professional Developers Conference that was salivating for information on what's new in the updated operating system. A lot of sites will take you through the whiz-bang consumer-friendly features, but you might be wondering as an IT professional what Windows 7 has to offer you.

In this piece, I'll give you a tour through what I think are potentially the 10 most popular professional-oriented features in Windows 7. (One caveat: some of these features are present in builds later than the M3-based release given to attendees at Microsoft's PDC conference Tuesday, so if you have your hands on a build, you may not be able to try all of these just yet.)

Federated search and enterprise search scopes

One of the big themes in Windows 7 for the corporate user is allowing easier access to information no matter where it's located. The big push here is for a unified interface for any given search, with results brought in from a variety of locations into one convenient window. Out of the box, Windows 7 allows users to search beyond their own computers.

Some of the nice features here include one-click auto preview, the ability to search within specific "libraries" of information (libraries being a defined set of resources or locations to narrow the scope of a search) and integrated results presentation from SharePoint sites and beyond.

DirectAccess

In my humble opinion, this is one of the coolest features of Windows 7 with Windows Server 2008 R2 (also known as "Windows 7 Server" in some circles). Imagine the virtues of being connected to a VPN: access to your corporate network, file shares, intranet, seamless authentication with company resources and so on. Now imagine not having to create that expensive, giant tunnel through with these resources are accessed. That's DirectAccess.

It requires deploying IPv6 and IPsec -- no small tasks by any means, though they should be on your radar already. The advantages? With DirectAccess, you can have essentially an "always managed" infrastructure, so you as the administrator can ensure updates are distributed, Group Policy is applied and that your known machines are trusted, anywhere, all the time. That's powerful.

BranchCache

BranchCache extends some of the improvements made in Windows Server 2003 R2 and Windows Server 2008 by caching downloaded information from the Web and intranets sites within a branch office the first time it is requested. Since branch offices often operate on lower-speed Internet links, user productivity is improved as the day goes on since more and more files are present within the cache. In a demo, a document was downloaded over a 512 KB connection, taking about 30 to 45 seconds. After the cache, when another user in the same site requested that information, the transfer was nearly instantaneous. BranchCache works not only with a branch office server but also on a peer-to-peer basis among Windows 7 clients in the same location.

BitLocker to Go

Quick poll: how many USB thumb drives do you think exist within the four walls (or eight, or sixteen, or however many pertain to you) of your organization? I run a small company and I am confident the number is over 100; frankly, I couldn't attempt to remember what kind of information is on each one, or even if I have lost one at some point in time. Consider the security risk that this tiny device represents. With BitLocker to Go, you as the administrator can set policies that require removable drives to be encrypted prior to allowing write access to them. You protect from the beginning, thereby reducing the risk of data loss or theft. The encryption process in most cases seems to take less than a minute and the process can alert the user automatically when she plugs in a not-yet-encrypted drive.

AppLocker

You might recall software restriction policies from Windows XP, a good-hearted but clumsy way for administrators to restrict certain binaries from running on the network. Enter AppLocker, which is exactly what it sounds like: a Group Policy-based way to identify applications that are permitted to run on your infrastructure. You can filter by publisher, which identifies a program's digital signature -- a much easier and more reliable method than a checksum or binary file name. You also get more granular control on the strength of the rule, allowing certain versions or groups of versions (i.e., version 9 or above) to run, much more easily than having to create rules over and over again.

DNSSEC Support

Many security pundits have decried that the next big plague facing the Internet is the inherent insecurity of the Domain Name System (DNS). Now DNSSEC comes to the rescue as a set of extensions to DNS that prevent spoofing address information. Windows 7 comes with DNSSEC support out of the box.

VHD Boot

VHD Boot is another eponymous feature which works with a virtualized desktop infrastructure to ensure image consistency among client computers. If you have an environment employing strong Group Policy configuration, folder redirection, roaming profiles and the like, then you can feasibly boot from a virtual image. It could be one, for example, used by a telesales or customer support team that works remotely -- which is the same image used on physical PCs for those users that require access to discrete hardware.

Windows Troubleshooting Platform

The Windows Troubleshooting Platform is a new, comprehensive approach to solving end user problems via troubleshooting packs, which address problems and can be applied to PCs throughout the environment to rectify those issues; and the Windows Troubleshooting Toolkit, which allows you as the administrator to create your own troubleshooting packs when you identify specific issues within your own infrastructure. Also, but separately, a new Problem Steps Recorder allows an end user to record the steps he takes leading up to a problem, capture those steps into automatically created screen grabs, and e-mail that to an administrator or help desk representative for easier problem resolution.

Windows PowerShell Integrated Scripting Environment

With PowerShell's popularity, Microsoft has introduced into Windows 7 a graphical interface for PowerShell that makes it very easy to learn the scripting language and use it in a color-coded, easy-to-read environment. Developing, debugging and running the scripts in this new environment is much easier than the previous single-command-prompt method.

PowerShell Remoting

Also new to PowerShell is support for the WS-Management protocol that allows you to remotely run commands on client PCs. You can use this capability on a one-to-one basis, say for specific requests in response to help desk calls, or you can fan out with one-to-many remoting and run cmdlets on multiple PCs from within the Windows PowerShell Integrated Scripting Environment.

Jonathan Hassell is an author, consultant and speaker on a variety of IT topics. His published works include RADIUS , Hardening Windows, Using Windows Small Business Server 2003 and Learning Windows Server 2003. His work appears regularly in such periodicals as Windows IT Pro magazine, PC Pro and TechNet Magazine. He also speaks worldwide on topics ranging from networking and security to Windows administration. He is currently an editor for Apress, Inc., a publishing company specializing in books for programmers and IT professionals.

Copyright 2008 IDG. All Rights Reserved.