After running Vista on a few machines in my network, I have come to realize
that Vista seems to (over)err on the side of security. DFS shares, printer
shares, authentication, etc. all the things that run quite efficiently with
Windows XP SP2 and 2003 R2 machines have occasional issues under Vista.
Vista appears to address the mobile laptop security issue very well; however
domain connectivity seems to suffer. Hopefully this will be corrected in
SP1; at the present time I cannot recommend Vista be deployed in a domain
environment without extensive testing and possible disabling of security
features in Vista.
My Vista machines are part of a Windows 2003 R2 native AD domain, and use
best practices as outlined in "Windows 2003 Security Guide, "Windows XP
Security Guide," and Threats and Countermeasures Guide" to secure the
machines via GPOs.
--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE