Please wait while the page is being loaded Skip this advertisement >
Saturday | 6 December, 2008
Long-winded Longhorn aims at server security
Rodney Gedda 24/08/2006 09:51:33

While not due for general release until this time next year, Microsoft's next-generation server platform, codenamed Longhorn, will be a more secure, manageable, and modular operating system, according to the company.

During his presentation at this year's Tech.Ed conference in Sydney yesterday, Microsoft server division senior product manager David Lowe said security, reliability and performance are the prime concern of people running servers and the company has focused its development efforts on those areas.

"We looked at the way services work in the operating system and reduced the surface area of those services," Lowe said, adding that the right services now run under the right privileges.

Other security enhancements include the Bitlocker volume encryption tool and ability to selectively block new device installations.

While Vista and Longhorn is a shared development project with 70 to 80 percent common code, Lowe said Microsoft has not yet announced the official name for the server, but will do so "soon".

Conceding the company's TCP/IP stack hasn't changed since Windows 95, Lowe said Longhorn's stack is a complete redesign and supports IPv4 and IPv6 natively.

"No additional configuration needs to be done and Longhorn has expanded IPSec integration," he said.

"TCP can now auto-tune packet size based on the network, and the enterprise QoS allows us to mark packets at the protocol level and prioritize traffic, for example with VoIP."

The new Windows Firewall with advanced security supports three different profiles and additional configuration options down to the IP address, computer, and user levels.

Also new is Network Access Protection (NAP) which can be used to provide a statement of health that is checked against a preconfigured policy. NAP supports DHCP, VLAN, 802.1x, and IPSec.

Windows servers have long been tethered by the requirement of a GUI, but this all changes with Longhorn's new "Server Core" architecture.

"People use servers for certain roles and configurations [and] if you don't need any graphical applications you don't need a GUI," Lowe said. "You can run your server in a headless scenario increasing the reliability and security."

The core server roles are DNS, DHCP, File and Active Directory but if you need anything else you need a full installation.

Other new features include a server monitoring and management tool, a re-built Active Directory, and Terminal Services that support end-to-end encryption and smartcards.

Longhorn will ship with version 7.0 of the IIS Web server which now sports a modular architecture with 40 installation components.

IIS 7.0 has a built-in management console running over HTTP, but will be integrated into Server Manager by the time it is released.

Regarding virtualization, Lowe said Longhorn won't ship with the new hypervisor, but the Windows Server Virtualization will be available within six months of Longhorn's release. This means it may not appear until 2008.

Computerworld Buyer's Guide - Vendors Matched to this Article
Computerworld Buyer's Guide - Vendors Matched to this Article
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Sign up for our Computerworld newsletters!
RSS Feeds
Market Place

 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
Whitepaper

Taking On Demand CRM Integration to the Next Level

Discover the current integration challenges facing businesses attempting to deploy on demand CRM systems. Learn how to create comprehensive integration of your data, user interface and business process levels and transform a portfolio of disparate applications into a unified, virtual application suite.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links