S 2.440 Selection of a suitable Windows Vista and Windows 7 version

Initiation responsibility: IT Security Officer, Administrator

Implementation responsibility: Administrator

Microsoft Windows Vista and Windows 7 are available in various versions for private users as well as for companies, government agencies, and other institutions. The versions differ in terms of the functionality they offer, their price, and the license models supported.

Microsoft has designed the following versions of Windows Vista and Windows 7 for private users:

For use in companies, government agencies, and other institutions, Microsoft recommends one of the following versions of Windows Vista and Windows 7:

In Europe, there are other versions available that are referred to as Windows Vista and Windows 7 N versions. These versions do not include the Microsoft Media Player. The Microsoft Media Player can be used to show or play digital media such as images, audio, and video.

Windows Vista and Windows 7 Starter:

This version is not available individually in Germany. The version is intended for use in developing or emerging countries or is supplied with performance-reduced notebooks referred to as netbooks. The range of functions provided is greatly reduced and only basic functions are included. These editions only support a 32-bit operating system architecture.

Windows Vista and Windows 7 Home Basic:

This version is designed for private users. Windows Vista and Windows 7 Home Basic have a smaller range of functions than Windows Vista and Windows 7 Home Premium. Private users have to go without the Aero Glass interface and the Windows Media Center as well as integrated backup functions, among others. Both editions can not join a domain and are not available on the German market.

Windows Vista and Windows 7 Home Premium:

This version is designed for private users. The extended versions of Windows Vista and Windows 7 offer the full range of functions of the Aero Glass interface as well as a wide range of multimedia functions. The Windows Media Center, for example, is fully integrated. Operation of the system in a domain is not available in this version.

Windows Vista and Windows 7 Ultimate:

This version is designed for private users as well as for use in government agencies and companies. This version offers all functionality offered by all other Windows Vista and Windows 7 versions, for example hard drive encryption using BitLocker and extensive network support. In contrast to Windows Vista and Windows 7 Enterprise, the Windows Vista and Windows 7 Ultimate licenses are not available as volume licences.

Windows Vista and Windows 7 Business / Windows 7 Professional:

This version is designed for use in companies, government agencies, and other institutions. It supports Windows domains, for example. Windows Vista and Windows 7 Business / Windows 7 Professional offer a wide range of functions for networking, backups, and security. Windows Vista and Windows 7 Business only offer limited multimedia functionality. Some application functions as well as the security functions BitLocker Drive Encryption and AppLocker Application Control (in Windows 7 and higher) are not integrated.

Windows Vista and Windows 7 Enterprise:

This version is designed for use in government agencies and companies. Windows Vista and Windows 7 Enterprise can only be purchased through the volume licence contract offered by the manufacturer Microsoft. Furthermore, the range of functions offered by Windows Vista and Windows 7 Enterprise also differs from that offered by Windows Vista Business, Windows 7 Business and Windows 7 Professional. Windows Vista and 7 Enterprise provide functions for hard drive encryption, virtualisation, and support for Unix-based applications (SUA) and a Multilingual User Interface (MUI).

One or more suitable Windows Vista or Windows 7 versions which contain all functions required for the intended environment must be selected from the list above for use in the institution. This decision must be documented and reasons provided for the decision.

The Microsoft "Windows Anytime Upgrade" license model offers subsequent upgrades between the various Windows editions. It is possible to upgrade from the Windows Vista / Windows 7 edition Home Basic to Home Premium as well as from Home Premium, Professional and Business to Windows Vista / Windows 7 Ultimate. It is not possible to upgrade from 32-bit editions to 64-bit editions.

32-bit or 64-bit

The 64-bit versions offer higher protection against malicious software because only signed drivers can be loaded by default. The Kernel Patch Protection of the 64-bit version offers additional protection against manipulation of the Windows core. Nowadays, computers are equipped with 4 Gigabytes of memory or more, which can also only be fully exploited in the 64-bit versions. Therefore, the 64-bit version should be used in Windows 7 and higher. Due to the high number of compatibility problems, the 64-bit versions of Vista are not suitable for global use.

When purchasing new systems, it must be checked in line with the hardware and software planning, whether licences for 32-bit, 64-bit or combination licences are the most economical. In particular, older specialist applications and special hardware must be taken into account which may not be supported by the manufacturer under Windows Vista and Windows 7 64-bit.

Review questions:

© Federal Office for Information Security. All rights reserved.