Driver Signing/ Authenticode

Driver Signing is an integrated process within the OS.  Policies can be set to block the installation of invalid drivers, warn the users before their installation, or ignore their installation.

Not included. However, its Signature Verification Tool allows a user to scan drivers to determine whether or not they are signed.

Driver Verifier

All device drivers must pass a rigorous test to check for memory leaks, stability, etc. before being issued a signature.  (See Driver Signing, above).

Not available.

Fully 32-Bit

The operating system is fully 32-bit, reentrant, and thus supports true multithreading.

Not fully 32-bit; includes 16-bit code for backward-compatibility.

Integrated Windows Installer

Windows Installer runs as a service within Windows 2000 Professional.  Benefits of this native integration include elevated security with application installations, tighter integration with the Active Directory� service, and more control over DLL conflicts.

Not included, though available as a runtime of specific applications (such as Office 2000).

Plug and Play

Provides for automatic and dynamic recognition of installed hardware.  The implementation of the Advanced Configuration and Power Interface (ACPI) in Windows 2000 is more powerful and complete.

Feature included.

Process Separation

Errant applications will not bring down the system.  Each application is in a completely separate, protected memory space.

Not available.

Protected Kernel�Mode Architecture

Applications do not have access to the kernel.  This greatly improves reliability of the operating system.

Not available.

Side-by-Side Components

Multiple versions of DLLs with the same name, required for separate applications, can co-exist.

Not available.

Windows File Protection

Prevents users or applications from changing the core operating system files, proactively and automatically.

Not available, though it has a System File Checker utility, which is a manual, reactive tool to replace changed, missing, or corrupt files.

Feature

Windows 2000 Professional

Windows 98

Folder Redirection

The administrator can redirect specific subdirectories (such as My Documents) to actually store information on a network share for greater security and data recovery.

Not available.

Offline Files/Folders

Enables mobile users to work with the most current versions of their work files and subsequently synchronize those files with the network when they reconnect.  Data remains on the network server, but is available locally for offline use.  This is implemented seamlessly without changing the user�s �view� of the data.

Not available.  However, supports My Briefcase, which is a separate namespace for file synchronization.  It can be difficult for the user to master, and is not integrated into the file system.

Power Management

Support for the Advanced Configuration and Power Interface (ACPI), which enables managing a system�s power state in response to input from the user, applications, and device drivers.

Feature included.

Warm Docking

Users can plug mobile computers into and out of a docking station without rebooting.

Feature included.

Encrypting File Support (EFS)

Encrypting File System (EFS) provides seamless hashing of the contents within a file, thereby protecting confidential information.

Not available.

Personalized Menus

Adapts the Start menu to the way users work by showing the applications used most often.

Not available.

Indexed File System

Windows 2000 is capable of indexing the contents of the file system; this allows the users to locate files easily and quickly based on a filename or search string.

Not available.

Roaming User Profiles

Specific user applications and data can be made available on any computer.

Not available.

Network Connection Wizard

Simplifies the process of establishing a connection with an Internet Service Provider (ISP).

Not available.

Advanced Virtual Private Networking (VPN)

Support for Layer-2 Tunneling Protocol (L2TP) and Internet Protocol security (IPSec) in addition to Point-to-Point Tunneling Protocol (PPTP), offers flexible and highly secure access to corporate networks.

Limited: supports only PPTP.

Built-in Disk Duplication Support

Enables administrators to roll out standardized desktops (saving deployment time) by combining support for third-party disk-imaging tools with the Microsoft System Preparation Tool (SysPrep).

Not supported. SysPrep is available separately.

Computer Manager

Centralized location to find information about a local computer system configuration, which helps users in determining what is currently installed.

Not available.

Disk Quotas

Especially for shared desktops, users can be granted a limited amount of hard drive space.

Not available.

Event Viewer

Common log of system, application, and security logs for troubleshooting and auditing purposes.

Not available.

Mandatory Logon

Every user must log on to the system to gain access. Prevents unauthorized access to data.

Not a feature.

Multilingual Interface (MUI)

Makes it possible to deploy and manage a single operating system throughout an organization. The user interface is modular to include different languages. A single binary code base means easier global deployment and maintenance.

Not available.

Windows NT� File System (NTFS)

Protects corporate data by requiring authentication to access the file system and supports granular control over user access.  Each file or subdirectory can have user- or group-specific access controls. Builds on NTFS version 4 and is enhanced with a number of features, which include: disk defragmentation/compression, EFS, disk quotas, link tracking, and full text and property indexing.

Not available.

Windows NT Logon Manager (NTLM)/Security Account Manager (SAM)

SAM is a repository for user account information, passwords, group membership, permissions, restrictions, login initialization data, and so forth. SAM works closely with NTLM, which acts as the �traffic cop� to authenticate users when they are accessing network resources.

Not available.

Resource Kit for IT Professionals

Includes critical support tools that can help isolate, diagnose, and in some cases repair problems. 

Available.

Security Configuration Manager

A snap-in tool within Microsoft Management Console (MMC), which centralizes security configuration and analysis.  This tool can be integrated with Windows Administration Change and Configuration Manager, which would automatically configure system policies in an enterprise environment.

Not available.

Service Pack Slipstreaming

Enables adding a service pack directly to the distribution share.  As a result, when the operating system is installed on a PC, it can automatically include the latest updates.

Not available.

System Monitor

Able to analyze hundreds of different system metrics, including memory, disk, and network throughput.

Not available.

Task Manager

Provides users with useful computer performance and allows users to terminate inactive programs.  Also, users can opt for a reporting mechanism that best suits their specific requirements.

Not available.

Unattended Installation Scripting Tool

Installation can be completed with no user interaction by means of a wizard-driven tool.

Limited: installation scripting possible by means of Batch 98, though not completely unattended.

Feature

Windows 2000 Professional

Windows 98

Internet Connection Sharing

Multiple computers may share an Internet connection.

Available only with Second Edition.

Unified Search Interface

Enables users to query Local Area Network (LAN), Internet, and local computer resources from one location, which may include files, directories, file structure, contacts, newsgroups, Internet websites, specified content, and printers.

Not available.

Feature

Windows 2000 Professional

Windows 98

Fibre Channel

A technology for 1-gigabit-per-second data transfer that maps common transport protocols such as SCSI and IP, merging networking and high-speed I/O in a single connectivity technology. Fibre Channel technology addresses the distance and the address space limitations of conventional channel technologies.

Not available.

Symmetric Multiprocessing (SMP) Support

Enables organizations to use more than one processor for higher performance.

Not available.

Site Awareness

Offers capability to log on to the Domain Controller that is closest to the client in the network and ability to change password on any Windows 2000 Domain Controller, instead of the PDC.

Available with the Active Directory client extension patch.

DFS Fault Tolerance Client

Provides access to Windows 2000 distributed file system fault tolerant and fail-over file shares specified in the Active Directory.

Available with the Active Directory client extension patch.

Active Directory Windows Address Book (WAB) property pages

Allows users who have permission to change properties on user objects (for example, phone number and address) via the user object pages, which can be accessed by clicking the Start menu, and then pointing to Search and For People.

Available with the Active Directory client extension patch.

Active Directory Services Interface (ADSI)

Allows scripting to Active Directory and provides a common programming API to Active Directory programmers.

Available with the Active Directory client extension patch.

Active Directory Integration with Network Neighborhood

Users can browse objects within Active Directory as easily as they can browse other network resources.

Not available.

Application Life-Cycle Management

Using Windows Installer technology, Group Policy can ensure applications are deployed to the desktop based on who the user is or where they are located.  Applications can be deployed, upgraded, or removed centrally from the administrator�s console.

Not available.

Group Policy

Administrators can create management rules, which define the behavior of the desktop for a given user.  These policies would �follow� the user and work offline.

Limited: does not allow granular control.

IntelliMirror^TM Management Technologies

Allows network administrators� greater control and ease in customizing computers for different user requirements.

Not available.

Kerberos Support

Fast, secure, industry-standard support for Kerberos V5 authentication.

Not provided.

Remote Installation Services (RIS)

An entire desktop image (including operating system, applications, data, and settings) can be installed over the network onto a system.  This is useful in case of hard drive crashes or new system deployments.

Not available.

Smart-Card Support

Administrators can require physical logon mechanisms by means of a smart card instead of a User ID and password.

Not provided.

WebTV for Windows

Not available.

Brings broadcast and cable television right to your desktop.

Single MS-DOS application Mode

Not available.

Supports game software that requires 100 percent access to system components and system resources.

Support for Gaming hardware such as joystick

Not available.

Improved gaming experience.