It's Not Vista: Windows Server 2008 Gets the Nod from IT

Better Living Through Active Directory

Active Directory and group policy are another area where users say even incremental improvements are welcome. Overall, however, the improvements in Active Directory, such as the new read-only domain controller and improved logging for change events, are minimal, says Gartner's Enck. More important improvements, including better integration with Lightweight Directory Services or non-Windows Kerberos implementations, aren't there yet.

Microsoft's Ralston counters that WS '08 includes more than 1,800 group policy settings that used to require the creation of custom scripts. "We closed the loop on all of those group policy features that were missing," he says. Microsoft also rolled in tools from its Desktop Standard acquisition, now called Group Policy Preferences, to automate the creation of group policies.

Woods & Aitken deployed a single instance of WS '08 for an Active Directory domain controller in a remote office that needed a new server. Mawson says the system is working fine, but he acknowledges that the deployment was a gamble. "It's more of a test in active use," he says. The enhanced group-policy management features are a step up, and Mawson intends to take full advantage of those features. He'll begin moving to WS '08 immediately but will only migrate as servers come up for their regular replacement, he says.

SEI Investments Co. found the new Active Directory features sufficient to upgrade some servers. "The improvements in the Active Directory services [and] fine-grained password policies are really compelling," says Michael Lebiedzinski, director of infrastructure for the company Global Wealth Platform. "In the past, different password policies were a driver to separate domains," he says. While the ability to fine-tune password policies drove the firm's adoption of WS '08, enabling domain consolidation was a secondary benefit, he says.

Others say they like the improvements but are in no rush to upgrade servers. "We've had talks about upgrading our Active Directory, but what do we actually gain from it? The risk is higher to go to 2008 than to just stay with 2003 at this point," Okuma says.