The latest version of the Windowsâ„¢ OS for both desktops and servers are on their way from Microsoftâ„¢. As always this news is met with equal shares of excitement and trepidation. Every company has its share of missteps sprinkled in with its successes. Even Microsoft admits that Vista was not the runaway success that they had anticipated. (This is evident by the fact that Windows XP is still the most popular operating system in use. People are even paying extra to have newly shipped systems downgraded to XP instead of Vista.)
Microsoft promised to learn from its mistakes. Windows 7 combined with Windows Server R2 boasts many new features that are specifically designed to address issues that have plagued businesses and consumers who upgraded to Vista.
Microsoft Learns from Past Windows Mistakes
One of the most glaring and annoying issues with Vista was the compatibility between software, hardware and the Windows operating system. Upon Vista’s release, drivers were simply not available for Windows Vista. There were fewer than 20,000 included drivers packaged with the original release and there were over 75,000 included with Windows Vista Service Pack 1.
Remote Connectivity, VPN for Mobile Users: Microsoft DirectAccess
One common problem facing many organizations is remote connectivity for their mobile and off-site users. One of the most widely used solutions for connecting remote users is a virtual private network (VPN) . Depending on the type of VPN, users may need to install VPN client software on their mobile computer and then establish the VPN connection over the Internet.
As most network engineers will tell you, managing a VPN has its own unique set of challenges and these challenges tend to be amplified when you take into account that the majority of your end users are people with limited technical experience with computers beyond the applications that are required for their jobs.
Microsoft has introduced the DirectAccess feature in Windows 7 and Windows Server 2008 R2 which allows Windows 7 client computers to directly connect to intranet-based resources without the complexity of establishing a VPN connection. The user has the same connectivity experience both in and outside of the office.
Advantages of Microsoft DirectAccess for Remote Access
The primary advantage of the DirectAccess feature in Windows 7/Server 2008 R2 is that it allows for a seamless, always-on remote access solution that removes user involvement and complexity without any security compromises. DirectAccess achieves this through authentication, encryption, access control, integration with NAP (Network Access Protection) and the separation of internet from intranet traffic.
First, DirectAccess authenticates the computer, enabling the computer to connect to the intranet before the user logs on. DirectAccess can also authenticate the user and supports dual authentication using a smart card along with the user’s login.
Second, DirectAccess uses internet protocol security (IPsec) for encrypted communications.
Third, network administrators and IT departments can configure which intranet resources different users can access using DirectAccess. It is possible to DirectAccess users unlimited access to the intranet, or only allow them to access specific servers or subnets. Additionally, you can apply custom security policies to specific applications. For example, you can require an application sending and receiving sensitive data to use IPsec encryption, while requiring that other applications are available with no IPsec protection.
Network Access Protection (NAP) with Windows Server 2008
Network Access Protection (NAP), built into Windows Server 2008 R2 and Windows 7, can be used with DirectAccess to verify that client computers meet your system minimum security requirements, such as having installed security updates and anti-malware definitions, before allowing them to make a DirectAccess connection.
Finally by keeping a separation of intranet and Internet traffic, only traffic destined for your intranet is sent through the DirectAccess server. With a traditional VPN, Internet traffic is typically also sent through your intranet, slowing Internet access for users. You can also change this default behavior to match that of a typical VPN.
DirectAccess Connections Established Before User Login
DirectAccess connections are established before the user is logged on as opposed to a VPN connection which requires handles security upon and after logon. This allows for your IT department to manage a remote computer connected by DirectAccess even if the user is not logged on; for example, to apply Group Policy settings. However, for the user to access any intranet resources, they must be logged on.
When running a network with Windows 7 and Windows Server 2008 R2 with DirectAccess, your organization should see improved performance and management through the seamless connectivity – DirectAccess is on whenever the user has an Internet connection, giving users access to internal network resources whether they are traveling, at the local coffee shop, or at home.
Best Microsoft Windows 7 Features for Network Administrators
- Enhanced remote management – IT administrators can connect directly to DirectAccess client computers to monitor them, manage them, and deploy updates, even when the user is not logged on. This can reduce the cost of managing remote computers by keeping them up-to-date with critical updates and configuration changes.
- And Enhanced Network security through IPsec – DirectAccess uses IPsec for authentication and encryption. Optionally, you can require smart cards for user authentication. DirectAccess integrates with NAP to perform compliance checking on client computers before allowing them to connect to internal resources. IT administrators can configure the DirectAccess server to restrict the servers that users and individual applications can access.
Ready for Your Windows 7 or Server 2008 Deployment?
DedicatedIT is your South Florida Microsoft Gold Certified Partner. Less than 3% of all Microsoft Partners reach the gold standard. Not only is DedicatedIT Microsoft Gold Certified, we have special endorsements for Microsoft Security and Microsoft Networking. Please contact us today: 561-491-5725.