SP1 Improvements to Windows Vista

SP1 uses signed RDP files for Server 2008’s RemoteApp feature, which lets users run terminal-based applications with locally installed applications. Prior to Vista SP1, client OSs couldn’t use signed RDP files to connect to remote programs. SP1’s support of signed RDP files increases security because it prevents users from altering the RDP file after the administrator publishes it. In addition, Vista SP1’s new RDP client software, which is needed for RemoteApp, lets administrators more easily manage saved credentials and provides a streamlined process for providing credentials to remote servers.

Windows Vista Ultimate and Windows Vista Enterprise offer some Windows Bit- Locker Drive Encryption enhancements. First, BitLocker can now encrypt all system volumes, not just the volume that contains the OS (as in Vista). Second, BitLocker security is improved by implementing a multi-factor authentication method that combines a key protected by the Trusted Platform Module (TPM) with a startup key stored on a USB storage device and a user-generated PIN. This two-factor authentication benefits systems with high security requirements. To take advantage of this kind of authentication, your computer must have a TPM chip installed.

Windows Security Center now allows only authenticated applications to report themselves as valid for updating a system’s security state. Because Windows Security Center is the central security point for the whole system, it’s important to prevent malicious code from altering the system security state. Moreover, because Server 2008’s Network Access Protection (NAP) technology relies on Windows Security Center from the client side, having reliable Windows Security Center data is additionally important.

Vista SP1 includes new and stronger encryption algorithms for IPsec. For ESP and AH you can now use SHA-256, AES-GCM, and AES-GMAC. For IKE and AuthIP, available algorithms include ECDSA, SHA-256, and SHA-384. These updates are to align Vista with Server 2008’s IPsec, as well as to support the new Suite B set of algorithms.

In Vista SP1, Microsoft also improved Online Certificate Status Protocol (OCSP) support, added support for smart card biometric authentication, and improved data execution prevention (DEP) by implementing a new set of APIs to control DEP policies. In addition, SP1 users with standard privileges can run the Complete PC Backup application—unlike in Vista, which limited the application to administrators. Finally, Vista SP1 offers full support for 802.11n wireless networking.

Performance and Reliability Enhancements
Most user complaints about Vista have focused on performance problems. Although Microsoft promoted Vista as the fastest OS ever, the reality was often different. In some situations, Vista performs noticeably slower than XP. Vista’s reliability and application compatibility are equally troublesome, and are further complicated because of UAC technology. SP1 addresses many performance and reliability problems.

The performance of file copy operations is greatly enhanced in Vista SP1. Vista suffers from extremely slow file copying in several situations. According to Microsoft, Vista SP1’s improvements include

• 25 percent faster when copying files locally on the same disk on a machine
• 45 percent faster when copying files from a remote non-Vista system to a Vista SP1 system
• 50 percent faster when copying files from a remote SP1 system to a local SP1 system

In addition, SP1’s estimation of the time remaining to finish a copy process is much more precise than in Vista.

SP1 improves the performance of offline domain-joined clients. In Vista, if you connect a domain-joined computer (e.g., a notebook) to another network (e.g., your home network), Windows Explorer and all the operations that depend on it will perform much slower than usual. This problem occurs because Vista tries to locate the domain controller (DC) and authenticate to the resource you’re opening. For simple operations such as saving a Microsoft Word file, you’ll experience a 7- to 10-second delay. SP1 eliminates this delay. In addition, users can now rename or delete folders while working offline with redirected folders. Although this functionality is disabled by default, you can enable it via a registry setting.

Power consumption on mobile computers is reduced in Vista SP1. Many Vista users have complained that the OS drains a notebook battery much faster than XP did— which has certainly been my experience. Microsoft implemented several fixes in SP1 to reduce unnecessary power consumption. For example, the CPU now remains in sleep state if nothing is changing on the display, the hard disk will always spin down if it’s configured to do so (which didn’t always happen), and the video chipset that prevented a computer from remaining in sleep mode has been fixed. These enhancements improve the battery life more than 20 percent in SP1 versus Vista.

Browsing the network in SP1 consumes much less bandwidth than in Vista. Because of the new Network Discovery service, Vista uses excessive bandwidth to locate and browse network resources. SP1 optimizes this service to reduce bandwidth consumption. In addition, SP1 is capable of choosing the optimal network connection, if several are available (e.g., in the case of a wired or wireless connection to the same network). Finally, RDP usage is improved by implementing a new algorithm for compression of bitmap images traveling over an RDP channel. This feature must be enabled through Group Policy.

Reading large image files is as much as 50 percent faster in Vista SP1. In addition, moving directories that contain a large number of files is faster, as is copying files immediately after deleting files. Finally, file operation performance is further enhanced when you use Background Intelligent Transfer Service (BITS) or ReadyBoost drives.

Better Than Great
Vista SP1 delivers numerous updates and improvements that will make existing Vista users happy, as well as encourage XP users to upgrade. Most of SP1’s enhancements focus on security, performance, and reliability. For a full list of SP1’s hotfixes and security updates, go to Microsoft’s Vista SP1 hotfixes and security updates Web page (technet2.microsoft.com/windowsvista/en/library/20184cb6-7038-4e82-a32c-4bc10ffe56ab1033.mspx).