Microsoft is back on its game with Windows 7 after a shocking wrong turn with Vista. In no doubt, Windows 7 has annoyances – such as touting gorgeous features, but production most of them accessible only to those who pay more for Ultimate. But Windows 7 Ultimate delivers a overabundance of improvements to justify the cost and pain of migration. The security profit you could gather by upgrading to Windows 7 Ultimate includes the following:

1. Improved in platform security:
Windows 7 picks up where XP SP2 and Vista gone off, extending Data Execution security and Address Space Layout Randomization to discourage malware, even when browsing. Kernel Patch Protection stops malware from hooking 64-bit kernel events, and Windows Service Hardening can impose resource access profiles for included Microsoft services. Unfortunately, not all applications use DEP and ASLR and only services can use WSH, but Windows 7 starts with a more solid base from which to fend off attackers.

2. Safe for browsing:
IE 8, supplied with all versions of Windows 7, incorporates riches of security enhancements, including Smart Screen filtering, trusted domain highlighting, type 1 cross-site script attack filters, and In Private browsing. IE8 takes benefit of ASLR and DEP and can apply more granular ActiveX settings—for example, letting admin allow riskier ActiveX controls, but only by trusted sites or users. IE8 can also be installed on XP SP3 and Vista, but upgrading to Windows 7 makes the most of some IE8 features and provides further incentive to retire older, less protected browsers.

3. Secure protocol support:
Network protocols may not "WoooW" end users or system admin, but they are a very important part of building a more protected foundation. Windows 7 includes local support for IPv6 and DNSSEC. These more protected protocols make it harder for attackers to spoof IP packets and addresses by providing cryptographic verification and integrity checks. Enterprise networks must master other hurdles to actually use these protocols, but embedding protocol maintain in all of your endpoints satisfies one big prerequisite. .

4. Location aware connection security:
Windows 7 includes policy based network segmentation, letting admin apply different Windows Firewall rules to each adapter based on location. The Windows 7 Firewall itself has developed from outbound only packet filtering into a full bidirectional TCP/IP firewall, enforcing rules that can now be centrally configured with Active Directory GPOs. Windows 7 still does not have the best personal firewall around, but this is an important improvement. .

5. Quick-and-easy file recovery:
Windows XP creates System Restore points to roll a damage PC back to know good earlier state. Windows 7 and Vista complain this up with Volume Shadow Copy – a service that backs up entire volumes, including Windows system files, program files, settings, and user files. By default, shadow copies are created weekly on a Windows 7 PC with idle time. On the go workers can use VSC to recover a single lost certificate or a ruined DLL in minutes, without connectivity or help. However, because shadow copies are stored on the same disk, they are not a alternate for routine data backup to archive.

Take a hard look at these and other Windows 7 security features to conclude how you can get the major hit for your money during your OS migration. Some of these features necessitate additional infrastructure – most notably Direct Access. Several are only available when upgrading to Windows 7 Ultimate. Most necessitate careful planning and testing prior to broad crush. However, if used wisely, Windows 7 can help many organizations support their security postures.

View all Online Technician's articles

---

About the Author:
Onlinetechnician.net website writes about online technical support for your home or office.

More Computer Security & Online Safety articles