Windows® 7 Enhanced Security and ControlPresenter nameTitledate

Addressing Security Challenges and Solutions Protecting Users on their Desktops and OnlineExtending Data Protection to Laptops and Removable MediaAgenda

IT Security ChallengesBusinessInfrastructureUsersFlexible work stylesDigital nativesCost versus agilityComplianceAnywhere accessDesktop control

Flexible work styles

Digital natives

Cost versus agility

Compliance

Anywhere access

Desktop control

WindowsOptimized DesktopEnhanced Security and Control with Windows 7Manage risks through enhanced security and controlReduce costs by streamlining PC managementMake peopleproductive anywhereEnable more secure Web browsingProtect desktop andmobile resourcesEnforce compliance• User Account Control• AppLocker™• Internet Explorer® 8• BitLocker™• BitLocker To Go™

ProtectDataProtect Data from Unauthorized ViewingActive Directory® Rights Management Services (RMS)Policy definition and enforcementProtection for information wherever it travelsIntegrated RMS clientBitLocker and BitLocker To GoEase of configuration and deploymentAbility to share data with coworkers, clients, partners, and othersSupport for compliance and data securityEncrypting File System (EFS)User-based file and folder encryption Ability to store EFS keys on a smart card

Policy definition and enforcement

Protection for information wherever it travels

Integrated RMS client

Ease of configuration and deployment

Ability to share data with coworkers, clients, partners, and others

Support for compliance and data security

User-based file and folder encryption

Ability to store EFS keys on a smart card

BitLocker and BitLocker To GoIncreased Data ProtectionExtend BitLocker drive encryption to removable devicesCreate group policies to mandate the use of encryption and block unencrypted drivesSimplify BitLocker setup and configuration of primary hard drive+

BitLocker To GoOverviewdemo

Internet Explorer 8 SecurityFreedom from IntrusionProtection from HarmControl of InformationSafeguards against browser and Web server exploitsProtection from deceptive web sites, malicious code, online fraud, identity theftChoice and controlClear notice of information use—provide only what is neededLimitation of social engineering and exploitsReduction of unwanted communications

Safeguards against browser and Web server exploits

Protection from deceptive web sites, malicious code, online fraud, identity theft

Choice and control

Clear notice of information use—provide only what is needed

Limitation of social engineering and exploits

Reduction of unwanted communications

Introduction of UACAll users, including administrators, run as standard user by defaultAdministrators use full privilege only for administrative tasks or applicationsEcosystem is influenced to write software requiring no admin rightsChallengesUser provides explicit consentDisabling UAC removes protectionsSimplified UACReduce number of applications that require elevationRe-factor applications into elevated and non-elevated piecesProvide flexible, prompt behaviorCustomer ValueStandard users can do moreAdministrators see fewer UAC elevation promptsUser Account ControlWindows VistaWindows 7

Introduction of UAC

All users, including administrators, run as standard user by default

Administrators use full privilege only for administrative tasks or applications

Ecosystem is influenced to write software requiring no admin rights

Challenges

User provides explicit consent

Disabling UAC removes protections

Simplified UAC

Reduce number of applications that require elevation

Re-factor applications into elevated and non-elevated pieces

Provide flexible, prompt behavior

Customer Value

Standard users can do more

Administrators see fewer UAC elevation prompts

AppLockerChallengesUsers can install and run non-standard applicationsEven standard users can install some types of softwareSolutionEliminate unwanted, unknown applications in your networkEnforce application standardization within your organizationEasily create and manage flexible rules using Group Policy

AppLockerOverviewdemo

Session SummaryProvide a fundamentally secure platformProtect desktop and mobile resourcesProvide more secure Web browsingEnforce compliance

Learn More About Windows 7Community ResourcesTechnical ResourcesGet Hands on TrainingWindows Team BlogTalking About WindowsWindows Client ForumsThe New Efficiency Virtual Launch Experience Windows7 Springboard Windows 7 Webcasts and Podcasts www.thenewefficiency.comwww.microsoft.com/springboardhttp://go.microsoft.com/?linkid=9681312Training Offers—Exclusive for Launch Attendees www.microsoft.com/learning/careerofferswww.windowsteamblog.comwww.talkingaboutwindows.comhttp://go.microsoft.com/?linkid=9681314.5

Windows Team Blog

Talking About Windows

Windows Client Forums

The New Efficiency Virtual Launch Experience

Windows7 Springboard

Windows 7 Webcasts and Podcasts

Training Offers—Exclusive for Launch Attendees

© 2009 Microsoft Corporation. All rights reserved. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.