Microsoft has been quick to act on informing IT pros and the general public on the security issue in nearly every NT-based Windows version out in the wild however more details are still lacking.

The bug concerns the Server service found in all NT-based Windows OS responsible for communication between computers in a Windows based Network allowing for remote execution of code.

Bink first reported the issue along with a link to the rather small KB article. Since then Microsoft updated the article (several times?) to provide more information to the public. Questions are raised after seeing this additional information.

Why are Windows 2000 / XP / 2003 rated “Critical” and why are Vista and 2008 rated “Important”?

Why is there information available on what could happen on Windows 2000 / XP / 2003 systems but not on what could happen to Vista and 2008 systems?

Why are Windows Server 2008 Core installations effected?

Who found this critical flaw? (Internal or external reporting)

How come Windows 7 is effected? (This also confirms the bug is in the deep roots of the NT Server service and no major overhaul is taking place in concerning these types of services in Windows 7, not that a overhaul was expected.)

The updated are available to all users via Windows Update right now. All systems using the default autoupdate settings should get the patch tonight. For enterprise deployment, please refer to the deployment guide.

Hopefully when the systems are patched, we could get a glimpse on how this bug works and how it could be there has been a flaw in a modern and secure system for over 8 years now. More information will be posted as it comes available.

However … this month I noticed something different and consulted co-writer Raymond Comvalius. What was written surprised us both. Tony wrote in his letter “Zo hebben Daniël en ik net een uitgebreide training achter de rug over de mogelijkheden van Windows 7 (Windows Server 2008 R2) en alles over het Software+Services concept”. (Translation: Daniël and I just completed an extended training on the features of Windows 7 (Windows Server 2008 R2) and on everything related to the Software+Services concept).

The most remarkable bit being of course the notation of Windows Server 2008 R2 right after Windows 7 thus meaning Windows Server 2008 R2 will be based on Windows 7? One can only speculate at this point as Microsoft won’t talk on Windows 7 openly just yet.

Little is known on Windows Server 2008 R2. In May 2008 first details started to show: http://bink.nu/news/windows-server-2008-r2-planned-for-2009.aspx. A little fact that we do know is that Windows Server 2008 R2 will be x64-only as Windows Server 2008 is confirmed to be the last server edition of Windows to support x86.

Naming the new  version (of Windows Server) Windows Server 2008 R2 is a good move in my mind as  it won’t scare people away from Windows Server 2008, waiting for the new version (for instance Windows Server 2009). Making it sound like it’s not a huge upgrade, will make sure the adoption of Windows Server 2008 stays on track.