Better living through Active Directory

Active Directory and group policy are another area where users say even incremental improvements are welcome. Overall, however, the improvements in Active Directory, such as the new read-only domain controller and improved logging for change events, are minimal, says Gartner's Enck. More important improvements, including better integration with Lightweight Directory Services or non-Windows Kerberos implementations, aren't there yet.

Microsoft's Ralston counters that WS '08 includes more than 1,800 group policy settings that used to require the creation of custom scripts. "We closed the loop on all of those group policy features that were missing," he says. Microsoft also rolled in tools from its Desktop Standard acquisition, now called Group Policy Preferences, to automate the creation of group policies.

Woods & Aitken deployed a single instance of WS '08 for an Active Directory domain controller in a remote office that needed a new server. Mawson says the system is working fine, but he acknowledges that the deployment was a gamble. "It's more of a test in active use," he says. The enhanced group-policy management features are a step up, and Mawson intends to take full advantage of those features. He'll begin moving to WS '08 immediately but will only migrate as servers come up for their regular replacement, he says.

SEI Investments found the new Active Directory features sufficient to upgrade some servers. "The improvements in the Active Directory services [and] fine-grained password policies are really compelling," says Michael Lebiedzinski, director of infrastructure for the company s Global Wealth Platform. "In the past, different password policies were a driver to separate domains," he says. While the ability to fine-tune password policies drove the firm's adoption of WS '08, enabling domain consolidation was a secondary benefit, he says.

Others say they like the improvements but are in no rush to upgrade servers. "We've had talks about upgrading our Active Directory, but what do we actually gain from it? The risk is higher to go to 2008 than to just stay with 2003 at this point," Okuma says.

Stripping down to the core

Server 2008 offers 19 role-based installations that strip down the operating system to only the components needed to perform a given function, such as DNS. "We removed everything that wasn't needed for those roles. No .Net Framework, no Media Player, not even a GUI," says Microsoft's Ralston.

Redman thinks that the Server Core roles such as Active Directory and DNS server configurations will be particularly useful for remote sites. "A stripped-down operating system has less of a footprint for viruses, etc.," he says. Still, he's not going to put them in ahead of the normal refresh cycle.

Some of the Server Core roles fall in areas where Linux has been a popular alternative, but Gartner's Enck doesn't think WS '08 is a Linux-killer. Server Core is limited to a few specific roles, making it less flexible than Linux, he says. And while Server Core versions are easier to administer and are more secure than full-blown Windows Server installations because of the smaller footprint, there's no clear cost benefit to moving off of Linux. However, Server Core could blunt further advances by Linux into the enterprise for those role-based services it does support, he says.