Mapping Microsoft Windows and Applications into a Typical IT Infrastructure
Satisfying the C-I-A triad requires more than just implementing controls on a single system. Today’s IT environments consist of a collection of computers and network devices connected to one or more networks and, in many cases, the Internet. In fact, many of today’s IT infrastructure components may exist in other organizations’ environments. Today’s IT environments are increasingly made up of components from remote networks that are connected through the Internet. These remote, or cloud-based, components are routinely integral parts of today’s IT infrastructure. The collection of all computers, devices, and network components that make up an IT environment is called an IT infrastructure. An IT infrastructure diagram depicts the various components that work together to satisfy the organization’s information processing requirements (FIGURE 1-2). Some common infrastructure components include:
Client platforms
Network segments
Network devices
Server instances (often listed by function)
FIGURE 1-2
A sample IT infrastructure.
© Jones & Bartlett Learning.
In most environments, the Microsoft Windows family of operating systems fills both the roles of client and server. In fact, many organizations currently use cloud-based Microsoft offerings as well, such as Office 365 and Azure. Windows systems can also operate as network devices, such as gateways or routers. However, it is more common to see either purpose-built devices or Windows servers providing device services. This text will focus on the client and server roles of Windows.
Windows Clients
Client systems exist to provide functionality to end users. These systems are often called customer-facing systems and increasingly include mobile devices as well as desktop and laptop computers. Each specific application can be deployed on client systems as either a thin or a thick client.
Thin clients collect information from end users or other data sources, send it to a server for processing, and display the returned results back to the end user. Most of the actual processing of the data occurs on a server. This is the most common model for applications running on mobile devices such as smartphones or tablets. Some of the most common examples of a thin client application include web browsers and mobile apps.
Thick clients collect information from the end user and process some, or all, of the information locally. Commonly, the information is stored in a database running on a server. The client handles a large amount of the information processing work. Examples of thick client applications are legacy enterprise applications that provide accounting and manufacturing control.
The most common Windows operating systems in use on client computers are:
Windows 10 (the newest and most popular Windows client operating system)
Windows 8.1
Windows 7
Windows XP (yes, Windows XP is still out there)
Windows client computers are often general-purpose computers that provide end user applications for various purposes. It is common for a single Windows client computer to have a web browser, an email client, and an office productivity suite, as well as proprietary application software installed. Client computers are rarely single-purpose devices. This multirole functionality often makes securing these computers more difficult.
The newest version of Windows, Windows 10, recognizes that all clients are not just typical computers. Windows 10 introduces an updated and cleaner user interface that works well on desktops, laptops, and mobile devices. Tablet devices and smartphones continue to increase in popularity, and Microsoft has responded with Windows 10 and Windows 10 mobile. Windows 10 may look different from earlier versions, but the strategies to keep it secure are very similar to those of other legacy Windows clients.
Windows Servers
Server computers exist in the IT infrastructure to provide specific types of services to client applications, either directly or indirectly. Common server applications may include web servers, application servers, and database servers. Microsoft provides several different server products to satisfy various needs. In each version, it is common to tailor the specific applications installed on the server to customize the services provided. Microsoft markets several server packages, all based on the following supported Windows server products:
Windows Server 2008 R2—Although this version of Windows is the oldest supported server version, it has a large install base and continues to operate in many organizations. Microsoft will end extended support for this version of Windows on January 14, 2020. This server product is available in several editions for different applications. The main differences among editions are the number of processors, the amount of memory, and the high-availability features supported.
Foundation—Cost-effective, entry-level server for small businesses.
Standard—More features than the Foundation edition and supports more common server functions for medium-sized businesses.
Enterprise—Advanced server for more performance and reliability than the Standard edition.
Datacenter—Optimized for large-scale deployment using virtualization on small and large servers.
Web—Optimized web application and services platform.
HPC—Windows High Performance Computing server for extensive scalability and interoperability between servers.
Itanium—Windows server specifically designed for the Intel Itanium high-performance processor.
Windows Server 2012 R2—Currently the most common Windows operating system for servers. This Windows product is available in four different editions.
Foundation—Cost-effective, entry-level server for small businesses.
Essentials—More features than the Foundation edition for most small- to medium-sized businesses.
Standard—Suitable for most server functions, along with limited virtualization ability.
Datacenter—Designed for large-scale deployment on servers that support extensive virtualization.
Windows Server 2016—This server product contains many updates to the prior version and is available in three different editions.
Essentials—Packaged for small businesses with basic IT requirements and a limited number of IT administration and support personnel.
Standard—Suitable for most server functions, along with limited virtualization ability.
Datacenter—Designed for large-scale deployment on servers that support extensive virtualization.
Windows Server 2019—This server product is the latest and is available in three different editions.
Essentials—Packaged for small businesses with basic IT requirements and a limited number of IT administration and support personnel.
Standard—Suitable for most server functions, along with limited virtualization ability.
Datacenter—Designed for large-scale deployment on servers that support extensive virtualization.