Microsoft today will deliver the public beta version of Microsoft Security Essentials (MSE), previously code-named "Morro," its Windows Live OneCare replacement. Like OneCare, MSE provides anti-malware protection to individual PCs. But unlike OneCare, it doesn't include the ancillary functionality that graced the previous product, such as multi-PC management, a two-way, managed firewall, and online photo backup.
Instead, MSE tackles malware with a laser-like intensity, filling the one security hole in Windows that Microsoft hasn’t plugged. MSE will be made free to all genuine users of Windows XP, Vista, and 7. It's a small, lightweight application that's decidedly less "chatty" than OneCare. In other words, it doesn't constantly pester you with pop-up notifications about absolutely nothing.
Sounds fantastic, right?
It is fantastic, but only for individuals or, potentially, very small businesses. Microsoft freely licenses MSE for use on any number of genuine installations of Windows, so you're able to install it on as many PCs as you'd like. But it's not an enterprise tool. MSE comes with no central deployment or management functionality, for example.
The reason for this is simple: Microsoft already offers a managed anti-malware solution for businesses, and it's based on the same anti-malware engine used in MSE. It's called Forefront Client Security (FCS), and Microsoft has already announced that the 2.0 version (code-named "Stirling") will work with Windows 7.
If you're not familiar with FCS, it seems to answer all the issues managed environments would have with MSE. That is, you use policy to deploy a malware protection agent to clients via the FCS Management Console. And you use that console to manage the security of your environment in a highly granular fashion. If you're familiar with Microsoft's management consoles, you'll be right at home in the FCS Management Console, and you can take advantage of its reporting functionality to keep up with the ongoing health of your environment.
The problem with FCS is that it's not free. According to Microsoft's current price list, FCS costs $12.72 per PC or user per year, plus $2,468 per server, per year, for the FCS Management Console. (One server can typically handle up to 12,000 clients, according to Microsoft.)
Maybe it's me, but it seems like there's a big gulf between free and unmanaged on the one hand (MSE) and expensive but managed on the other (FCS). In keeping with the theme of last week's commentary, I think Microsoft is going to have to adapt its pricing strategy to meet the pricing of competitors like Google.
That's particularly true with security, where the cynical might argue against the need to pay Microsoft to fix problems that are, essentially, in their other products. I don't think it's that black and white, but I would argue that pervasive security should simply be a benefit--no, a feature--of the Microsoft ecosystem. And that would point the way to a much less expensive, possibly even free, version of FCS.
Could it happen? I don't think Microsoft is there yet. But it should be heading in that direction.
In the meantime, be sure to check out MSE on your own desktops. You can find out more on the SuperSite for Windows.
It's too bad the 2-way firewall wasn't included in the XP edition. Also surprised [but just a bit] that there is a version for XP since it's gone into extended support [MS usually doesn't deliver new products or major revisions to OSs in extended support]. Unsure also why a photo backup was in OneCare to start off with. after all, it was a security suite. Last i checked, photo backup wasn't a security issue.
ebraiter -June 23, 2009
Just a note for @ebraiter. OneCare provides simple & reasonably comprehensive automated backup of *all* data to CD/DVD/tape/disk/central PC, the online photo backup is simply an extension to this. I think most people would consider the security of their data important regardless of whether its being protected from malicious attack or a disk failure. Furthermore, as the name implies OneCare is supposedly about *everything* you need to do to take care of your PC, not just security, so it also includes automated tune-up (defrag, deletion of unnecessary files), and checks for updates that haven't been applied. As a user of OneCare on my small home network I'm naturally disappointed that Microsoft hasn't simply made OneCare free, but the release of MSE has to be a step in the right direction. (Just so long as they don't bundle it with the OS and end up with an anti-virus-vendor-led anit-trust lawsuit).
duncan_priest -June 23, 2009
No option to opt-out of the dubiously named Microsoft Spynet? You've got to be kidding! I'm glad I checked all the settings immediately after installing this, so I could immediately uninstall it! I understand the concept here, but products such as AVG do give an opt out option. Microsoft does not, and even says that personal information may sometimes be sent to Microsoft. Thanks, but No thanks. I'll stick with AVG because they don't force me to send information to them. MSE isn't free at all, and in fact it comes at a very high price....the price of some privacy.
Free CDs Offer Fundamental Content for IT Pros Are you up to speed on the latest technologies and solutions? Don't miss out on your chance to get up to speed quickly on fundamental, in-depth information on some of the hottest topics in our library of content.
Let Your Users Reset Their Own Passwords: Free Download Try a 30 day free trial of Desktop Authority Password Self-Service – it provides an easy-to-use, robust system for allowing users to reset their own forgotten passwords or locked accounts.
Get Windows IT Pro & Mark Minasi’s Favorite Power Tools Guide Order Windows IT Pro now and get "More of Mark Minasi's Favorite Power Tools"--a in-depth guide to the most useful Windows commands --FREE with your paid order! Subscribe today, and save 58% off the cover price!
Deep Dive into VMware vSphere, eLearning Series Join John Savill to explore the major functionality capabilities of the vSphere virtualization platform, including identification of the changes from ESX 3.5.