Windows XP vs Vista: What you need to know

With Microsoft due to release Windows XP Service Pack 3 at the end of the month and then effectively kill one of its best liked operating systems in June. It will do so despite the fact that there has been a huge backlash against Windows Vista, one that's led many people to plan to skip the upgrade cycle and wait for Vista's successor before dumping XP

Will Windows XP still be properly supported by Microsoft and, as a primary development target, by third parties? Is there something XP die-hards have missed, some hidden gotcha that's going to trip them up 12, 18, or 24 months from now?

Of course, there's no universal answer to the Vista upgrade question. Yes, in all likelihood you'll be just fine sticking with Windows XP - at least until Windows 7 ships in 2009 or 2010. But let's not rush to universal judgement. Let's take a close, measured look at the key considerations, and compare Vista's merits against the state of XP on the essential points that IT organisations and end-users care about. And if we can't solve this calmly and objectively, like fair-minded professionals, then let's at least have a good fight.

Are you ready to rumble? Okay, then. Operating systems, return to your corners, and come out swinging.

Round 1: Security

Security is one of the first areas to come to mind when considering a Vista migration. Features such as UAC (User Account Control) and Internet Explorer Protected Mode have been making headlines for more than a year - but not always in the context Microsoft would have wanted. UAC, in particular, has been savaged by critics who balk at its many annoying confirmation dialogs. Just try enabling or disabling multiple network connections quickly or moving a file into a protected folder.

However, even with UAC - which is really just a more visible, 'in your face' implementation of the user account controls that have been built into Windows NT since day one - Vista still isn't fully secure. There are documented ways around UAC involving Internet Explorer, security token privilege escalation, and the exploitation of the 'deprecated administrator' status of the default Vista account model.

More importantly, however, is the fact that most IT shops have already implemented a form of UAC under Windows XP by not allowing domain users to run as local administrators and, in some cases, writing their own 'elevation' utilities to make it all work seamlessly. In practice, these 'locked down' XP systems are in some ways more secure than a UAC-protected Vista system, because they're immune to the aforementioned privilege elevation exploit. To bring Vista systems on par with XP, you need to force users to work with a true non-admin account, as opposed to Vista's 'deprecated admin' account, which puts you right back at square one (that is, where XP is today).

Other security features, such as the updated firewall and more esoteric, internal fixes such as Address Space Layout Randomisation, are interesting but by no means compelling. Most IT shops have implemented a proper hardware firewall solution or third-party software for mobile/remote users, and address-based code exploits usually require some degree of social engineering to get them to work - a phenomenon even Vista can't thwart.

Decision: From a security standpoint, there's just not a lot to compel XP shops to upgrade. Many of the issues addressed by Vista have already been resolved under Windows XP using in-house applications or third-party tools.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Randall C. Kennedy

Computerworld UK
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?