1. 1 Application Compatibility Toolkit 5.0

2. Agenda Windows Vista – Innovation and Compatibility Top Compatibility Issues in Windows Vista Application Compatibility Toolkit (ACT) 5.0 High Level Architecture High Level Architecture Methodology Methodology Demo Demo Application Compatibility Resources Question and Answer 2

3. Innovation and Compatibility Windows Vista Pillars SecurityReliabilityCompatibilityPerformance Feedback and Supportability Innovation in Windows Vista occasionally break compatibility. Microsoft has created these tools and services to help resolve application compatibility. Application Compatibility Toolkit 5.0 (ACT) Windows Vista Upgrade Advisor 1.0 Windows Vista Hardware Assessment Application Compatibility Factory Windows Logo programs SWAT team 3 Innovation Compatibility

4. Top Compatibility Issues in Vista Overall, high application compatibility in Windows Vista. However, these are the areas of concern. User Account Control (UAC) Windows Resource Protection (WRP) Internet Explorer 7 Protected Mode Windows Vista 64-bit Windows Filtering Platform Operating System Version Change Deprecations/GINA/Session 0 (High Impact/Low Frequency) 4

5. User Account Control (UAC) Description Enabling users to run with a standard user account Security feature to reduce introduction of vulnerabilities (Malware, Trojan, Viruses) Issues Custom installers and updaters need administrator privileges Unnecessary administrator checks or administrative actions Writing to file or registry locations that are not virtualized Mitigation Some common shims - Virtualization shims, Force Admin Access Relax ACL's on files and folders 5

6. Windows Resource Protection (WRP) Description Increase system stability by protecting Windows resources (files, folders, registry). Issues Application installers that attempt to replace, modify, or delete OS files and/or registry keys that are protected will fail with an access denied error message because the resource could not be updated. Remedies Never repackage Microsoft redistributables (use the Microsoft provided redistributable package instead). Do not write to system files and registry keys. 6

7. Internet Explorer 7 Protected Mode Description Internet Explorer 7 runs in Protected Mode, with greatly restricted privileges Issues IE cannot modify user files, registry keys Applications may not know how to handle new prompts requesting user permissions Mitigation Add the site in question to the trusted sites list. 7

8. Windows Vista 64-bit Description Windows Vista fully supports the 64-bit architecture processors from AMD and Intel. The 64-bit version of Windows Vista can run all 32-bit applications with the help of the WOW64 emulator. Issues Applications or components that use 16-bit executables, 16-bit installers or 32-bit kernel drivers will either fail to start or will function improperly on a 64- bit edition of Windows Vista. Remedies Remove all 16-bit components. Convert 16-bit installers to 32-bit or 64-bit installers Ensure that all 64-bit drivers are digitally signed 8

9. Windows Filtering Platform Description The Windows Filtering Platform (WFP) API allows developers to create code that interacts with the filtering that takes place at several layers in the networking stack and throughout the operating system. Publicly supported APIs. Issues Network scanning anti-virus and firewall applications will fail Remedies Update applications to use the new WFP APIs Microsoft is engaged with networking, firewall and anti-virus vendors to adopt the new platform 9

10. Deprecations Description Deprecations – removal of APIs or DLLs from Windows Vista that existed in Windows XP Issues Applications lose functionality or don’t start up correctly Remedies Search MSDN to look for replacement of API 10

11. Graphical Identification and Authentication (GINA) Description Windows Vista introduces a new Credential Provider framework Issues Users will not be able to logon using Custom logon applications. These may include: Biometric devices (fingerprint reader) Biometric devices (fingerprint reader) Custom UI for logon Custom UI for logon Virtual private network (VPN) solutions for remote users with custom logon UI Virtual private network (VPN) solutions for remote users with custom logon UIRemedies The applications or components that used the GINA technology will need to be re-authored For all credential provider information and questions, send e-mail to the Shell Credential Provider alias: credprov@microsoft.com credprov@microsoft.com 11

12. Operating System Version Change Description The internal version number for Windows Vista is changed to 6. The GetVersion function will now return this version number to applications when queried. Issues Any application that specifically checks for the OS version will get a higher version number which it may not be designed to handle Application installers may prevent themselves from installing and applications may prevent themselves from starting. Mitigation Use compatibility administrator and apply XP SP2 layer or version lie shim 12

13. Session 0 Description Services are isolated to run in their own private Session (Session 0) To enhance security and stability, users no longer share this session Issues Interactive services may hang since they display UI to Session 0 instead of the user’s session Remedies Update services and drivers to ensure you have the latest version. When authoring services and drivers display UI in the user’s session When Interactive Service Detection service detects UI in Session 0 it will send a notification to the user and allows them to switch to Session 0 and interact with the UI 13

14. APPLICATION COMPATIBILITY TOOLKIT Architecture, Methodology, and Platforms Supported 14

15. Application Compatibility Toolkit Customer Target Medium/Large Businesses and Large Enterprises Mission A lifecycle management tool that assists in identifying and managing your overall application/device/computer portfolio, reducing the cost and time involved in resolving application compatibility issues, and helping you quickly deploy Windows Vista and Windows Updates. Strategy Help detect, diagnose, and mitigate compatibility issues found in Windows Vista Microsoft Compatibility Exchange to facilitate exchange of compatibility data between ISV/IHV, Microsoft, and customers Deliver tools that are timely and relevant to Windows releases 15

16. High Level Architecture Log Processing Service and DB Data Collection Package/Compatibility Evaluators Inventory IE Vista Update Etc… Desktop Topology Europe North America HR Finance 1 2 Application Compatibility Manager 3 Wilma Betty Internet 16 Compatibility Exchange 4

17. Supported PlatformsComponent Windows 2000 Windows XP Windows Server 2003 Windows Vista Application Compatibility Manager Log Processing Service (LPS) Component SQL MSDE SQL 2000 SQL Server Express SQL 2005 Database 17

18. ACT Methodology Collect DataAnalyzeTest and Mitigate Inventory Applications and Devices Gather high-level compatibility evaluator data In-depth testing with dev/test tools Log test data Build and test mitigations Prioritize and Categorize Synchronize data with Microsoft Compatibility Exchange Identify high- level issues

19. COLLECT DATA Application, Device Inventory and Compatibility Evaluator data 19

20. Data Collection Architecture ACT Database 1 2 3 4 5 Desktop Topology IE Evaluator Update Evaluator Vista Evaluator Data Collection Package 20 Log Processing Service

21. Compatibility Evaluators Key Features Designed to run in the background on desktops Intended to run down-level operating system, Windows 2000 and up Helps reduce the need for testing Compatibility Evaluators Inventory Collector Gathers data on a computer regarding applications, devices (device manager), and system information. Gathers data on a computer regarding applications, devices (device manager), and system information. Windows Vista Compatibility Evaluator Deprecations - identifies applications that are loading binaries or using APIs that will be removed in Vista Deprecations - identifies applications that are loading binaries or using APIs that will be removed in Vista GINA - identifies applications that installed a Graphical Identification and Authentication (GINA) DLL GINA - identifies applications that installed a Graphical Identification and Authentication (GINA) DLL Session 0 - identifies applications with interactive services Session 0 - identifies applications with interactive services User Account Control Detects which applications may have issues with running as Standard User Detects which applications may have issues with running as Standard User Internet Explorer Compatibility Evaluator Detects compatibility issues with web applications due to IE 6/7 security features Detects compatibility issues with web applications due to IE 6/7 security features Updates Compatibility Evaluator Detects applications impacted by Windows Updates (security updates) Detects applications impacted by Windows Updates (security updates) 21

22. Update Compatibility Evaluator Security Update Manifest Update Compatibility Evaluator Data 22 Desktop Topology Europe North America HR Finance Update Report: shows potential incompatibilities Compatibility Exchange

23. Supported PlatformsAgent Windows 2000 Windows XP Windows Server 2003 Windows Vista Inventory Collector UAC Compatibility Evaluator IE Compatibility Evaluator Windows Vista Compatibility Evaluator Update Compatibility Evaluator IE7 only 23

24. Collect Data 24

25. ANALYZE Prioritize, Categorize, Rationalize, and Synchronize 25

26. Prioritize, Categorize, Rationalize Business Critical Important Nice to Have Unimportant Software Vendor Third Party Custom Microsoft Corporation Test Complexity High Medium Low Division Research and Development Finance Sales Region North America Europe Asia Application Test List with Redundancy Removed Application B 1.0 Application A 1.1 Application A 1.0 26

27. Application Compatibility Manager My Assessment Vendor Assessment Certified for Windows Vista Works with Windows Vista Community Assessment Microsoft Test Data IT Pro Assessment Assessment Providers 27

28. Microsoft Compatibility Exchange 28 Features:  Feedback mechanism to vendors on most requested applications  Authoritative data compliments community rating  Leverage existing Microsoft data repositories (test, certification, logo, vendor portal)  Limited data due to dependencies on Vendor Portal and test team Certify app/device work or Publish issue 2. Vendor Assessment (authoritative) Software Vendor (Windows Vista Logo Program) Hardware Vendor (Device Drivers) Analysis and Reporting Features:  IT Pros helping each other out by sharing of application compatibility rating with community  Secure and privacy compliant transactions  Simple and easy to share  Submission can be anonymous or by user name  Partner with MCS and deployment specialist in building and seeding community data  Scalable solution 1. Community Assessment Works for me or Publish issue Enterprise Corporation Compatibility Exchange See community risk assessment and/or issue summary Internet

29. Analyze 29

30. TEST AND MITIGATE Test, Debug, Resolve, Deploy Solutions 30

31. Developer and Tester Tools Standard User Analyzer Provides a way for testers to further test the LOB applications to determine what will fail as Standard User on Vista Provides a way to mitigate some of the issues that are logged using shims Internet Explorer Test Tool Provides a way for testers to further test the intranet web applications to understand the exact issue and determine which of their web applications will not work with IE 7 http://msdn.microsoft.com/library/default.asp?url=/library/en- us/ietechcol/cols/dnexpie/ie7_compat_log.asp http://msdn.microsoft.com/library/default.asp?url=/library/en- us/ietechcol/cols/dnexpie/ie7_compat_log.asp Setup Analysis Tool Detects issues such as WRP, installing of 32 bit kernel mode drivers, 16 bit components to flag any of your packages which could run into this issue Compatibility Administrator Helps IT Admins, Developers, Testers create and test compatibility shim/fixes (no code changes required) 31

32. Supported PlatformsAgent Windows 2000 Windows XP Windows Server 2003 Windows Vista IE Test Tool Setup Analysis Tool Standard User Analyzer IE7 only 32

33. Test and Mitigate 33

34. Resources Application Compatibility Resources and Services 34

35. Application Compatibility Resources ACT 5.0: Download: http://www.microsoft.com/downloads/details.aspx?FamilyID=24da89e9-b581- 47b0-b45e-492dd6da2971&displaylang=en Download: http://www.microsoft.com/downloads/details.aspx?FamilyID=24da89e9-b581- 47b0-b45e-492dd6da2971&displaylang=en http://www.microsoft.com/downloads/details.aspx?FamilyID=24da89e9-b581- 47b0-b45e-492dd6da2971&displaylang=en http://www.microsoft.com/downloads/details.aspx?FamilyID=24da89e9-b581- 47b0-b45e-492dd6da2971&displaylang=en Newsgroup: http://www.microsoft.com/communities/newsgroups/list/en- us/default.aspx?dg=microsoft.public.deployment.app_compatibility Newsgroup: http://www.microsoft.com/communities/newsgroups/list/en- us/default.aspx?dg=microsoft.public.deployment.app_compatibilityhttp://www.microsoft.com/communities/newsgroups/list/en- us/default.aspx?dg=microsoft.public.deployment.app_compatibilityhttp://www.microsoft.com/communities/newsgroups/list/en- us/default.aspx?dg=microsoft.public.deployment.app_compatibility For IT Professionals: Application Compatibility in Windows Vista http://www.microsoft.com/technet/windowsvista/appcompat/default.mspx Application Compatibility in Windows Vista http://www.microsoft.com/technet/windowsvista/appcompat/default.mspx http://www.microsoft.com/technet/windowsvista/appcompat/default.mspx Business Desktop Deployment Solution Accelerator http://www.microsoft.com/technet/desktopdeployment/bddoverview.mspx Business Desktop Deployment Solution Accelerator http://www.microsoft.com/technet/desktopdeployment/bddoverview.mspx http://www.microsoft.com/technet/desktopdeployment/bddoverview.mspx Windows Vista Hardware Assessment: http://www.microsoft.com/technet/windowsvista/deploy/readassess.mspx Windows Vista Hardware Assessment: http://www.microsoft.com/technet/windowsvista/deploy/readassess.mspx http://www.microsoft.com/technet/windowsvista/deploy/readassess.mspx For Developers: Application Compatibility Cookbook http://msdn.microsoft.com/windowsvista/default.aspx?pull=/library/en- us/dnlong/html/AppComp.asp Application Compatibility Cookbook http://msdn.microsoft.com/windowsvista/default.aspx?pull=/library/en- us/dnlong/html/AppComp.asp http://msdn.microsoft.com/windowsvista/default.aspx?pull=/library/en- us/dnlong/html/AppComp.asp http://msdn.microsoft.com/windowsvista/default.aspx?pull=/library/en- us/dnlong/html/AppComp.asp Finding Security Compatibility Issues in Internet Explorer 7 http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true Finding Security Compatibility Issues in Internet Explorer 7 http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true Windows Vista Application Development Requirements for UAC http://download.microsoft.com/download/5/6/a/56a0ed11-e073-42f9-932b- 38acd478f46d/WindowsVistaUACDevReqs.doc Windows Vista Application Development Requirements for UAC http://download.microsoft.com/download/5/6/a/56a0ed11-e073-42f9-932b- 38acd478f46d/WindowsVistaUACDevReqs.doc http://download.microsoft.com/download/5/6/a/56a0ed11-e073-42f9-932b- 38acd478f46d/WindowsVistaUACDevReqs.doc http://download.microsoft.com/download/5/6/a/56a0ed11-e073-42f9-932b- 38acd478f46d/WindowsVistaUACDevReqs.doc Application Compatibility Forum http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=904&SiteID=1 Application Compatibility Forum http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=904&SiteID=1 http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=904&SiteID=1 Questions related to SUA: suatool@microsoft.com Questions related to SUA: suatool@microsoft.comsuatool@microsoft.com 35

36. Application Compatibility Ecosystem Windows Logo Program Getting the “Certified for Windows Vista” or “Works with Windows Vista” logo is the most effective way for your customers to identify products that work well with Windows Vista Getting the “Certified for Windows Vista” or “Works with Windows Vista” logo is the most effective way for your customers to identify products that work well with Windows Vista https://winqual.microsoft.com/ https://winqual.microsoft.com/ https://winqual.microsoft.com/ Windows Vista Application Compatibility Training 2 days of intense learning on tools and techniques for detecting, diagnosing and mitigating Windows Vista Application Compatibility issues 2 days of intense learning on tools and techniques for detecting, diagnosing and mitigating Windows Vista Application Compatibility issues On-site engagements to help enterprise customers resolve Windows Vista Deployment blockers On-site engagements to help enterprise customers resolve Windows Vista Deployment blockers Contact: aecoe@microsoft.com Contact: aecoe@microsoft.comaecoe@microsoft.com Application Compatibility Factory 5 global System Integrators are on board and ready to work with you now 5 global System Integrators are on board and ready to work with you now Have deep expertise in application testing and remediation Have deep expertise in application testing and remediation ACF partner services focus on custom apps, scales to some ISV apps ACF partner services focus on custom apps, scales to some ISV apps Contact: Wipro Technologies, Tata Consultancy Services, Satyam Computer Services, Infosys Technologies, HP Contact: Wipro Technologies, Tata Consultancy Services, Satyam Computer Services, Infosys Technologies, HP http://www.microsoft.com/presspass/features/2006/nov06/11- 01windowsvistaacf.mspx http://www.microsoft.com/presspass/features/2006/nov06/11- 01windowsvistaacf.mspx http://www.microsoft.com/presspass/features/2006/nov06/11- 01windowsvistaacf.mspx http://www.microsoft.com/presspass/features/2006/nov06/11- 01windowsvistaacf.mspx 36

37. Question and Answer Open Discussion 37

38. © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 38

39. Inventory Collector Scans computer for devices, application, and system information Locations we search for applications -.Msi (Windows Installer database) Add/Remove Programs (HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\*) Windows Shell (Start menu) App Path (HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\*) Locations pointed to by path environment variables (%PATH%) Registered file extension handlers (HKEY_LOCAL_MACHINE\Software\Classes\*) Registry Run (HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\*) Service Control Manager (HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\*) (Filters out Windows Components/Features) 39

40. UAC Compatibility Evaluator Detects what applications will have issues with running as Standard User on Windows Vista Issues Detected - File Operations Lets the user know if the file will be virtualized Lets the user know if the file will be virtualized If not, lets the user know the access is restricted (e.g. locations like Program Files which only admins have access) If not, lets the user know the access is restricted (e.g. locations like Program Files which only admins have access) Registry Operations Lets the user know if the registry key will be virtualized Lets the user know if the registry key will be virtualized If not, lets the user know the access is restricted (e.g. locations like HKLM which only admins have access) If not, lets the user know the access is restricted (e.g. locations like HKLM which only admins have access) Profile API operations Checks if any applications are writing into any system ini files (including win.ini) Checks if any applications are writing into any system ini files (including win.ini) Elevation Detection Detects applications that need to run elevated/ as administrator (i.e. setup.exe) Detects applications that need to run elevated/ as administrator (i.e. setup.exe) 40

41. IE Compatibility Evaluator Detects Compatibility issues with web applications due to IE security features Issues detected – IE 6 on XP SP2 - Popup Blocking, Object Caching, ActiveX Blocking, Mime Handling, Windows Restrictions, Zone Elevation, Download Blocking, Binary Behaviors, LMZL IE 7 – All of the above plus CURL - Centralized URL Parsing, International Domain Names (IDN) Support, SSL, XDom Barrier, Manage Add-ons, Active-x Opt-in, Anti-Phishing, Cross Frame navigation, CSS fixes IE7 on Vista – All of the above plus Protected Mode IE Note: You need to test the web sites on IE 7 to detect any of the above issues Note: You need to test the web sites on IE 7 to detect any of the above issues More details about the issues - http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true http://msdn.microsoft.com/library/default.asp?url=/library/en- us/IETechCol/cols/dnexpie/ie7_compat_log.asp?frame=true 41

42. Feature ACT 5.0 Beta ACT 5.0 RTW Client tool for Reporting and Analysis Configuration Wizard Inventory Collector Internet Explorer Compatibility Evaluator (websites) UAC Compatibility Evaluator Update Compatibility Evaluator Microsoft Compatibility Exchange Website Reports (integrated in ACM) Prioritize, Categorize, and Deployment Tracking Devices Support Vista Compatibility Evaluators (GINA, Session 0, Deprecated Components) Compatibility Administrator (fix applications) Filter and Custom Report Developer Tester Tools (IE, SUA, Setup Analysis) Integration with SMS ACT Feature Comparison 42

43. Standard User Analyzer The Standard User Analyzer is a tool to help diagnose potential issues with an application when it is run as a standard user Based on LUA Predictor technology in Application Verifier (AppVerifier) Intercepts common API calls which usually require elevated privileges Predicts whether these API calls would have succeeded as a standard user 43

44. SUA - API Coverage File system access (e.g. Program Files) Registry access (e.g. HKLM) INI WriteProfile (privileged locations) Token checking (explicit checks) Privilege (e.g. enabling SeDebugPrivilege) Namespace (creating global objects) Other securable objects (events, mutexes, waitable timers, semaphores, etc.) Process creation (attempting to launch another process which requires elevation) 44

45. IE Compatibility Test Tool Installs the IE Compatibility Evaluator Enables Internet Explorer logging Compatibility issues are recorded in the event log IECE processes the event log to list events You can see the events real time, helps for easy debugging 45