2.4 Windows 7 and Vista

Vista and Windows 7 Basics

Windows 95 was an exciting evolution for operating systems in a large part because of its exciting new Graphical User Interface (GUI) environment called the desktop. Each subsequent operating system released by Microsoft has improved upon the desktop by either adding more features or by improving features that already existed. Vista's Desktop is no exception and has been improved by adding new visual features and improved functionality with Windows Aero, a Sidebar with gadgets feature, an improved Control Panel, an Instant Search feature, along with a reconfigured Taskbar and Start menu.

The new visual aspects of Windows Aero such as Windows Glass transparency, increased visual controls, and more visual previews is infused in every aspect and feature of Vista's desktop and remains a staple in Windows 7. These aspects can be personalized by reconfiguring the desktop to fit a user's needs.


Windows Vista Flip



Windows Vista Taskbar Thumbnails

Windows Vista Sidebar

Windows 7 includes the same Windows Sidebar functions in Windows Desktop Gadgets although the sidebar no longer is present.

Previous run commands can be displayed and chosen when the Run dialog box is called by pressing the key and the R key along with the \ key.

Quick Launch commands can be activated by pressing the key and the 1 key for the left most Quick Launch icon, the key and the 2 key for the second left most icon, etc.



Taskbar and Start Menu

Vista's taskbar and Start menu control the programs and activities that a computer is working on. Understanding the functions of and being able to customize the taskbar and Start menu are essential skills for all computer users.


Windows Vista Flip 3D



Windows7 Aero Peak and Snap


Vista's Taskbar thumbnails can be cycled through by pressing the key and the T key.

Vista's Start menu, along with many of Vista's other visual features and tools, can be added to Windows XP by downloading these tools from a variety of sites on the Internet.

Main Features

Striving to offer a more secure environment for users and better graphical interface and media experience for Internet users, Windows Vista contains a vast number of changes and new features while Windows 7 seeks to upgrade these in more user friendly fashion.

With a large choice of media features, some may opt out of features that don't suit their needs. In order to turn features on or off, go to:

Start Control Panel Uninstall a program (Under the Programs heading) Turn Windows features on or off.


Windows Vista Features


Windows 7 Features


Turning features off will not remove files from the hard drive, but any features or programs that run in the background use resources and should be disabled if it is not used. Some features can be security risks.If they are not needed, they should be disabled. A variety of features can be enabled or disabled:

Many of the features are complex networking features that must be understood before turning them on or off, but others are simple features such as games, printing, faxing and scanning, and Windows Meeting Space. The more complex features require an understanding of networking protocols and technologies to discuss while the simpler features of Windows Vista is discussed in this lesson.

Communication

Windows Vista's communication tools have been improved in a number of different areas. Vista has improved Internet Explorer version 7.0, created a new email program that replaces Outlook Express, a new calendar tool, a new collaboration tool that replaces NetMeeting, and an updated messenger that replaces MSN Messenger.


Media

Windows Vista has created or updated a number of media tools and features such as Windows Media Player 11, Windows Photo Gallery, and Windows DVD Maker. Vista also introduces a new technology called Windows XPS and an upgrade to video technology with DirectX version 10.




Microsoft Management Console

First introduced in Windows Vista, the Microsoft Management Console (MMC) tool provides a shell that allows you to insert various tools to administer networks, computers, services, and other system components. This tool is also available in Windows 7 and Windows Server 2008 R2. Version 3.0 provides a number of improvements that make it easier to use:

To access the MMC tool:

Click Start, click in the Start Search text box, type mmc, and then press ENTER.


Managing Snap-ins
in Windows Vista


Managing Snap-ins
in Windows 7


Snap-Ins
Snap-ins are the basic components of Microsoft's Management Console (MMC). MMC snap-ins are the actual management tools. The console, sometimes referred to as a "tools host," is simply a framework into which snap-ins are added. MMC snap-ins are made by Microsoft and other companies.



Account Options

Windows user accounts allow multiple users to access one computer or any computer in a network situation. Security is an important aspect for any network or individual computer, so it is important to set up user accounts properly. The first account that is set up during installation is an administrator account. This account should be used to set up computer features and programs and to make administrative changes.

All other accounts that will be used for everyday computing should be set up as standard accounts. The third account option is for a guest account, which is created for users who will only require temporary access to a computer.

Windows requires at least one administrator account on a computer. If you have only one account on your computer, you can't change it to a standard account.

Adding and Removing Users

In order to add or remove user accounts for a workgroup or single computer, follow these steps:

Users / Security Groups

A user group is a collection of users who have all been assigned the same security permissions. Security permissions control access to system resources, programs installation and removal, and system tasks, User groups are also called security groups. The two most common groups are administrator and standard users, however there are other options:



Only Vista Business or Ultimate - Windows 7 Professional and Ultimate can perform these steps.
Assigning user groups beyond the basic standard or administrator accounts is not an option for Vista Home Basic or Premium nor is this available on Windows Home Basic or Home Premium.



One of Windows XP's security flaws was the fact that it made all users that were created administrator level accounts by default. This was exploited by hackers because a user with administrator rights has permissions to install programs. Some users with administrator rights unknowingly allowed and continue to allow malware to be installed.

UAC Elevation Prompt

Vista has changed the user setup process to protect computers and networks from malware that exploited the default administrator rights that were applied to each new user. Vista assigns administrator rights to the first user that is set up. Every user after this is given standard rights by default, which do not contain permissions to install programs or change settings that effect all users.

Standard users will need to be manually changed to either an administrator level account or assigned one of the security group settings discussed above. Even administrators will have to deal with User Account Controls when a program is trying to be installed on a computer, or when settings that effect all users are being changed such as Windows firewall or Windows Updates.


User Account Control Panel

The UAC checks a users security token, which is assigned to each user during logon. The security token contains the users privileges and security group membership, and determines what the user can and cannot do. Events that cannot be accomplished with a standard account can be carried out if an administrator level account password is entered. Even if an administrator level user attempts to change certain settings, the UAC will display an Elevation Prompt message that will inform the user that the action is being requested, provide details, and the user can either click on the Continue or Cancel buttons.

This occurs because an administrator's token is actually a split token. One half includes standard user permissions and is used during logon and while using the computer. When higher level permissions are required, the administrator half of the token is accessed by clicking Continue on the UAC Administrator Approval Mode Elevation Prompt window. This provides another layer of security.

Permissions that standard and administrative users have by default include:

Standard 

Administrator

Changing time zones Installing and uninstalling programs
Changing power management settings Installing a device driver
Creating and configuring Virtual Private Network (VPN) connections Installing Windows updates
Establishing a Local Area Network connection Installing an ActiveX control
Adding printers Changing firewall settings
Establishing and configuring a wireless connection Changing the date and time
Establishing and configuring a Bluetooth device Changing Parental Control settings
Restoring backed-up files Adding, removing, and changing a user's account type
Synchronization with a mobile device Changing Automatic Updates settings
Modifying display settings and desktop background Changing UAC setttings with the Security Policy Editor
Playing and burning of CD or DVD media Changing Remote Desktop access settings
Configuring battery power options for laptops Schedule Automated Tasks
Configuring Accessibility options Restore backed-up system files
Changing own password Working with system files
Set up and use the Remote Desktop feature Working with audit logs

The UAC Elevation Prompt can be disabled by following the steps in the simulations below.

 


Turning off UAC
in Windows Vista


Turning off UAC
in Windows 7

Events that prompt the UAC to display the Elevation Prompt can be changed from their default settings by using the local Security Policy Editor tool (secpol.msc) found by using the path: Local Security Settings-->Local Policies-->Security Options. Administrators Access Mode can even be changed to have to input their password for the Elevation Prompt.

Events that prompt an Elevation Prompt are color coded to be application specific. If the application publisher is blocked by a policy or Windows, a red window bar appears. A splash background bar signifies a Vista published application, while a Microsoft verified publisher prompts a grey bar window. An unsigned program prompts an orange bar window.