5.1 Window Security Architecture

Windows Operating Systems

Window is old… comes from a time we did not think about security

3 classes of operating systems:
Client
desktops, workstations, very 1st OS was client based


Server
Moved into server OS later

when some1 built a server it is purpose built and once its operational, if it isnt broken why fix it? dont plan to reconfigure the server
should be easy to switch OS.. ease of use.. always = reduction in security
When window server was installed, the vast majority of services were predominantly enabled by default…..
Services will be turned on by default made it easier to switch to and much easier to compromise (server i wish i was a file server… done.. i wish i was a web server.. done)

The attack surface is too large..
Microsoft learned that was a bad idea.. nowadays services are predominantly turned off by default lol

Embedded
built in to make a device usable, refrigerator, light bulb, IOT
CPU, Memory (RAM), storage → need an OS to make all of that usable
That OS is predominantly linux LOL
Centrally managing security is easy on windows
Linux not so much because it has wide distribution set

Client Operating Systems

desktops, laptops, workstations

WIndow XP - 2001.. End of life in 2014
Window Vista - 2006
Window 7 - EOL (End of Life)
window 8.1 - EOL
Window 10
window 11

Editions:
Home (personal)
Business, Pro, Enterprise (Organizations)

Platforms:
AMD or Intel
ARM (Apple)

Server Operating Systems

Naming is base on year of release
Window server 2000
window server 2003
^^ppl knew ppl are still using above versions so nobody complained about these being on the slide but when it came to client OS, ppl complained about window XP and vista being on the slide but they werent aware ppl still used them as well

One thing when client base OS expires and another thing if server base OS expires
Server we have data thats confidential, data thats valauble, important applications
…
Window server 2016, Window server 2019, Window server 2022, etc
Sometimes accompanied by “R2” release

Server Editions
- Standard
- Enterprise
- Datacenter

Installation OPtions
Full instllation w/ GUI
Core
Nano

Refer to server services as server roles.. primarily server roles are disabled by default out of the box
When u go to enable a server role to provide addiotnal functionality..micrsosft tries to protect us today and install with minimal installation (minimal install, not all possible features of that role.. protects us to maintain principle of least privilege (doesnt apply just to end user, adminsitrators, it apples to everything we do, never have what u dont need, what u have is all u should have and thats all u need to secure)

Windows Embedded

Window IOT OS

FOr a long period of time, MS with their OS, did not support anything other than x86 style architecture (Intel & AMD CPUs).. they do now

IOT device do not tend to run x86 style architecture, they tend to be ARM