2. ©2006 Microsoft Corporation. All rights reserved. Application Compatibility in Windows Vista and the Application Compatibility Toolkit Micheal Sciacqua Program Manager Application Experience Microsoft Corporation

3. ©2006 Microsoft Corporation. All rights reserved. Changes in Vista and common compatibility issues Vista compatibility technologies Inbox compatibility tools Application Compatibility Toolkit Windows Vista Upgrade Advisor DemosDiscussion/Q&A Agenda

4. ©2006 Microsoft Corporation. All rights reserved. Innovation and Compatibility Windows Vista enhances user experience SecurityReliabilityUsability Most applications just work Improvements in Windows Vista occasionally break compatibility

5. ©2006 Microsoft Corporation. All rights reserved. Common Compatibility Issues Assumption of running as admin (accessing secure, sensitive resources) Architectural changes and deprecated components Operating System versioning Using internal system calls and data structures Latent bugs Overall, high compatibility in Windows Vista

6. ©2006 Microsoft Corporation. All rights reserved. User Account Control Goal: applications run without Admin privileges Why: security feature to reduce introduction of vulnerabilities Mal-ware, Trojans, Viruses Issues: Some applications are admin ‘by design’ Redirection can cause apps to fail Application updates need Admin privileges

7. ©2006 Microsoft Corporation. All rights reserved. Windows Resource Protection Goal: only the OS can update protected resources Why: reliability feature to protect the system files, folders, and registry keys Issues: Some apps replace system binaries Some apps write to system registry keys Some apps repackage MSFT redistributables

8. ©2006 Microsoft Corporation. All rights reserved. Services Isolation Goal: services run in their own private session Why: security feature to prevent shatter attacks Issues: Services cannot directly interact with user desktop or applications Services with user interaction may hang as UI will not be visible Creating session, global namespace objects

9. ©2006 Microsoft Corporation. All rights reserved. Internet Explorer – Protected Mode Goal: Internet Explorer runs with very low permissions Why: security feature to prevent tampering with the system IE cannot modify user files, registry keys! File/registry writes are redirected, visible from IE only Issues: Controls that share data with external processes fail New prompts requesting user permission

10. ©2006 Microsoft Corporation. All rights reserved. MS GINA Goal: Microsoft Graphical Identification and Authentication is re-architected New Credential Provider API Why: reliability and usability feature easier to program to and support Issues: Biometric devices Custom VPN solution for XP Smart Card readers

11. ©2006 Microsoft Corporation. All rights reserved. 64-bit Windows Vista No support for 32-bit drivers Signed kernel mode drivers required No upgrade to 64-bit Windows Vista No support for 16-bit InstallersComponentsApplications

12. ©2006 Microsoft Corporation. All rights reserved. Vista Compatibility Technologies - Inbox Tools Program Compatibility Assistant Solves common problems for apps and their installers Version check Elevation for installers Mitigation scenarios continuously added Program Compatibility Tab Right-click functionality for “Compatibility Layers” Program Compatibility Wizard AppPatch Infrastructure (aka shim) AppHelp (Soft and Hard blocking) Fix applications using shim databases (.sdb)

13. ©2006 Microsoft Corporation. All rights reserved. Vista Compatibility Technologies

14. ©2006 Microsoft Corporation. All rights reserved. Application Compatibility Toolkit (ACT) version 5.0

15. ©2006 Microsoft Corporation. All rights reserved. High Level Architecture Log Processing Service Local ACT DB Agent Framework/Compatibility Evaluators Inventory IE IE UAC UAC UCE Etc… Compatibility Exchange Europe North America Desktop Topology Internet HR Finance Application Compatibility Manager Wilma Betty 1 2 3 4

16. ©2006 Microsoft Corporation. All rights reserved. Features:  IT Pros helping each other out by sharing of application compatibility rating with community  Secure and privacy compliant transactions  Simple and easy to share  Submission can be anonymous or by user name  Partner with MCS and deployment specialist in building and seeding community data  Scalable solution Works for me! or Found some issues 1. Community See risk rating and/or issues summary IT Pro (Enterprise A) IT Pro (Enterprise B) Compatibility Exchange Internet Features:  Feedback mechanism to vendors on most requested applications  Authoritative data compliments community rating  Leverage existing Microsoft data repositories (test, certification, logo, vendor portal)  Limited data due to dependencies on Vendor Portal and test team Analysis and Reporting App Compat Testing Certify app works or Publish issues ISV Microsoft Logo and Certification 2. Authoritative Sources Compatibility Exchange

17. ©2006 Microsoft Corporation. All rights reserved. Inventory Collector Inventories Applications and Devices Inventoried locations include:.Msi (Windows Installer database) Add/Remove Programs Windows Shell (Start menu) App Path Keys Locations pointed to by path environment variables Registered file extension handlers Registry Run/RunOnce Keys Service Control Manager Filters out Windows Components/Features

18. ©2006 Microsoft Corporation. All rights reserved. Vista Compatibility Evaluators User Account Control Detects Detects which applications may have issues with running as Standard User on VistaDeprecations Identifies applications that are loading binaries or using APIs that will be removed in Vista GINA Identifies applications that installed a GINA DLL Session 0 Identifies applications with interactive services Internet Explorer Detects Compatibility issues with web applications due to IE security features

19. ©2006 Microsoft Corporation. All rights reserved. Developer and Tester Tools Standard User Analyzer Provides a way for testers to further test the LOB applications to determine what will fail as Standard User on Vista Internet Explorer Test Tool Provides a way for testers to further test intranet web applications to understand issues and determine which of their web applications will not work with IE 7 Setup Analysis Tool Detects issues such as WRP, installing of 32 bit kernel mode drivers, 16 bit components to flag any of your packages which could run into this issue Compatibility Administrator Helps IT Admins, Developers, Testers create and test compatibility shim/fixes (no code changes required)

20. ©2006 Microsoft Corporation. All rights reserved. ACT Methodology Collect Data AnalyzeTest Inventory Applications and Devices Gather high-level compatibility data In-depth testing with test tools Log test data Build and Test mitigations Prioritize and Categorize Synchronize data with Compatibility Exchange Identify high-level issues

21. ©2006 Microsoft Corporation. All rights reserved. Update Compatibility Evaluator Detects applications impacted by Windows Updates Windows Updates Enterprise Desktop Topology Update Manifest Update (file/registry) Data Application Compatibility Manager Update Compatibility Evaluator

22. ©2006 Microsoft Corporation. All rights reserved. Application Compatibility Toolkit (ACT)

23. ©2006 Microsoft Corporation. All rights reserved. Vista Upgrade Advisor Scans a single computer to create compatibility report for upgrading to Windows Vista Reports known system, device, and application compatibility issues Recommendations on how to mitigate the issues Helps you choose the edition of Vista best fits the way you use your computer.

24. ©2006 Microsoft Corporation. All rights reserved. Application Compatibility Resources TechNet – ITPro Information http://www.microsoft.com/technet/windowsvista/appcompat/default.mspx MSDN – Developer Information http://msdn.microsoft.com/windowsvista/default.aspx?pull=/library/en- us/dnlong/html/AppComp.asp Application Compatibility Toolkit information http://www.microsoft.com/technet/windowsvista/appcompat/tools.mspx Sign up for the ACT RC (available Oct. 2006) https://connect.microsoft.com/availableprograms.aspx Business Desktop Deployment Solution Accelerator http://www.microsoft.com/technet/desktopdeployment/bddoverview.mspx

25. © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.