Windows Vista in a Nutshell

Chapter 8. Security

One of Microsoft’s primary goals for Windows Vista was to make it more secure than previous versions of Windows, so not surprisingly, Microsoft made many changes and additions in the name of security. For example, Windows Vista includes a two-way firewall, built-in antispyware, hardware-based encryption, Parental Control features, antiphishing tools, a pop-up killer, and User Account Control (UAC), which forces you to confront pop-up warnings before you take certain actions.

This chapter covers these changes and more. But Microsoft has done at least as much work under the hood to make sure Windows Vista is as secure as possible. You won’t see these changes, because they take place without you having to take any action, and there’s no way for you to turn them off or customize them. Here are some of the new built-in security features you don’t see, but that protect you every time you use your PC:

Windows Service Hardening

This prevents malicious software from doing damage by stopping abnormal activity from taking place in the filesystem, Registry, and network to which the PC is attached.

Network Access Protection (NAP)

This stops an infected computer from making a connection to a network so that it cannot spread its infection to other computers.

File and Registry virtualization

In some instances, Windows Vista creates virtual folders and Registry keys so that when changes are made or new software is installed, changes are not made to the actual system but instead ...