So Many Questions
I haven't received a copy of the XPM beta code, yet, so I find myself full
of even more questions beyond these already sticky issues. Does the XPM
instance itself need to be joined to the domain, and what does that mean for
Client Access Licenses? Do the host and virtual instances need to be managed
separately via Group Policy? Will security patches for XPM instances stop
coming in five years, even though Windows 7 is protected for much longer than
that?
With XPM, Microsoft has thrown up its hands and effectively proclaimed, "We
can't support these applications going forward, nor do we want to try." I
understand that perspective-everyone wants to move forward unencumbered-I just
can't grasp the approach.
Two years ago, Microsoft bought not one but two companies with solutions
that worked to solve application permission problems in environments where
users don't have administrative credentials-Winternals and Desktop Standard.
Although Microsoft did not actually acquire the pertinent technology in the
latter case-that technology evolved into the company BeyondTrust-the Winternals
technology could have made its way into Windows 7 but seemingly hasn't.
In my tests of the Winternals
technology three ago, I found the underlying privilege escalation worked
well but needed to be integrated into Group Policy. With the product now
two years in-house at Microsoft, I held out a lot of hope that work could have
been done and that the technology would be mainstreamed within a business-class
operating system. But instead, we get XPM and a potential security and
administrative nightmare.
In truth, I hate the approach Microsoft is taking with Windows 7 and legacy
software. On the surface, I feel it levels the playing field with every
other operating system out there, which can also run Windows XP in a virtual
instance. So if I need to manage a second desktop-albeit virtually-to run
applications that help me do what I need to today, why do I need to pay for a
new base OS in the first place?
If I need something modern, is now the right time to look elsewhere, since
the backward compatibility story will be largely the same in either
case? Or do I simply stick with what works-Windows XP and all its inherent
problems-especially since we know that security patches for the older OS will
keep coming through 2014?
It is here that Microsoft needs to convince IT implementers that the new
features native to Windows 7 will be worth all of the costs that would come
with an upgrade-for licensing, hardware, management and the resulting labor to
get there-proving that Windows 7 will deliver things other operating systems
can't.
Microsoft has gone to great lengths to point out Windows 7 represents the
first time since Windows 2000 that the company has been able to develop a
client and server iteration (Windows Server 2008 R2) in tandem, and the company
has promised great things from this team development, with hopes that it will
spark a similar level of uptake from its business customers. Features such
as DirectAccess always-on remote connectivity and BranchCache local caching are
the immediate fruit of this collaboration.
The tight integration with Windows Server 2008 R2, however, could present
those testing Windows 7 with complications beyond simply loading the new OS on
a laptop. To test DirectAccess or BranchCache within a production
environment, testers will need to look closely at their server hardware, or
consider testing the server side entirely in virtual instances. This is
because the new server iteration will be available only as a 64-bit platform.
Those most likely to be considering an upgrade to the new
platforms-organizations still running Windows 2000, which will expire from Extended
Support next summer-will probably need to consider a server hardware
upgrade. And even those companies that already have 64-bit server
platforms in their data center need to look at whether they are currently
running 32-bit iterations of Windows Server on those machines because there is
not a direct upgrade path from there to the 64-bit R2
iteration.
Just to be clear, as a user, I really enjoy using Windows 7. I think
the new OS represents a vast improvement over Vista or
XP, and the RC has already found its way into my day-to-day computing
life. I suspect many consumers who spend any time thinking about their OS
will feel the same.
But, given the terrible economy, I suspect Microsoft asks too much of its
business customers because it's not just about the cost of the Windows 7
license and the costs to perform the upgrade. It's about the hardware
costs to bring both the client and server fleet up to spec with the new
versions, the 2x licensing costs for third-party management and security solutions,
and the spiraling headaches that will come from having to support two desktops
where there once was one. And most of all, it's about trying to stomach these
costs when every company is being forced to make cutbacks across the board.
If the gold code of Windows 7 is to come in 2009-and it certainly looks like
that will be the case-I don't think most businesses will have the stomach for
it.








