Linked by Thom Holwerda on Thu 12th Oct 2006 15:09 UTC, submitted by Dolphin
Windows 'The most secure Windows ever' may be very secure from hackers and malware - but what do you do when Longhorn Server let's you install the OS, set up Active Directory, and initialize the domain without once asking you to even create an administrator password? "What happened to Windows Server? Where did all of the stringent security checks and ultra-protection of Windows Server 2003 go? Windows Server 2000 was quite insecure, and Windows Server 2003 turned over a new leaf... But it seems Microsoft is more than willing to flip that page back - even Windows Server 2000 required an Administrator password at the very least."
Thread beginning with comment 171124
To read all comments associated with this story, please click here.
in development
by evert on Thu 12th Oct 2006 16:31 UTC
evert
Member since:
2005-07-06

i don't see why setting an admin password is important for installations that will last for a week, installations that will never be used in a production enviromnent.

come on, longhorn server is still in development, the programmers have better things to do than to remember passwords. enabling passwords and complexity rules is trivial as soon as longhorn server leaves the alpha stage and becomes beta.

RE: in development
by linux-it on Thu 12th Oct 2006 16:38 in reply to "in development"
linux-it Member since:
2006-07-13

ok, so 'in development' means that you can skip the security ? Interesting thought. If programmers already have trouble in remembering passwords and enabling them, how would the rest of the product be ?

I even know alpha quality code that works better and is more safe than production code of MS.

Security is something that should be written from ground up, not as an aftermarket item that may be purchased separately.

Reply Parent Bookmark Score: 3

RE[2]: in development
by Dolphin on Thu 12th Oct 2006 16:51 in reply to "RE: in development"
Dolphin Member since:
2006-05-01

The sad thing is, Microsoft claimed they 'learned' from their mistake with XP.
In XP, security was an afterthought (not just with MS - in 2001 no one gave a damn about security really).

They <em>did</em> do right with Vista... But I mean, you would expect the server OS to be even <em>more</em> secure, wouldn't you?

Yet, it isn't... Sad.

Reply Parent Bookmark Score: 1

RE: in development
by shiny on Thu 12th Oct 2006 16:49 in reply to "in development"
shiny Member since:
2005-08-09

From Wikipedia:

"The term release candidate refers to a final product, ready to release unless fatal bugs emerge. In this stage, the product features all designed functionalities and no known showstopper class bugs."

So no, not still in development.

Reply Parent Bookmark Score: 2

RE[2]: in development
by sappyvcv on Thu 12th Oct 2006 17:11 in reply to "RE: in development"
sappyvcv Member since:
2005-07-06

There is still a deployment process and part of that deployment process could be switching a flag to enables asking for an admin password during install.

Reply Parent Bookmark Score: 1

RE[2]: in development
by eMagius on Thu 12th Oct 2006 18:21 in reply to "RE: in development"
eMagius Member since:
2005-07-06

Longhorn isn't in the release candidate stage. Do not confuse Vista and Longhorn server -- they're two seperate products.

Reply Parent Bookmark Score: 2

RE[2]: in development
by n4cer on Thu 12th Oct 2006 19:00 in reply to "RE: in development"
n4cer Member since:
2005-07-06

Longhorn Server is not at the Release Candidate stage, only Windows Vista is.

Reply Parent Bookmark Score: 3

RE: in development
by jakesdad on Thu 12th Oct 2006 16:51 in reply to "in development"
jakesdad Member since:
2005-12-28

What if you are testing the installation for security and where it is at with it??? I would think that security would play a role in any evaluation of a server product...

If its not there now I would feel little off knowing that it can be added at a whim... To me that says that it can be removed as easily.

Reply Parent Bookmark Score: 2