Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Coming from the questions, for ex., Sharepoint 2010 - “We did not find any results for” keyword which identified the problem (but not solution) with the help of Mike Hacker's blog Crawler Issue with SharePoint 2010 and Windows Server 2008 R2

The latter tells:

  • "The one that was working was built on Windows Server 2008 and the problem farm was built on Windows Server 2008 R2. Since Windows Server 2008 R2 and Windows 7 are built on the same core code"
  • "After several conversations with Microsoft it appears that the issue is related to security changes made in Windows Server 2008 R2 and Windows 7"

What are the security changes in Windows Server 2008 R2 (and Windows 7) in comparison with Windows Server 2008?

How is it that "Windows Server 2008 R2 and Windows 7 are built on the same core code" but Windows Server 2008 is built on a different one?
that is, workstation and server share the same core code but the different releases of the same Windows Server 2008 - not?

share|improve this question
Windows Server 2008 (non R2) is built on the same core code as Vista – Sam Aug 27 '10 at 16:45
+1 to @Sam for not rep-whoring. – squillman Aug 27 '10 at 16:52
This. It's a different Release, not a fixpack or service pack to 2008. MS has been using R2 for serious upgrades and refreshes for a few years now. – mfinni Aug 27 '10 at 16:56

Windows Server 2008 R2 is not "a different release of Windows Server 2008": it's the server release of Windows 7; this becomes immediately obvious if you simply compare the taskbar of Vista, 2008, 7 and 2008 R2. It also results from the version numbers, as Vista/2008 are NT 6.0, while 7/2008 R2 are NT 6.1.

Yes, I know the name is quite misleading; moreso as Windows Server 2003 R2 actually was only an interim release of Windows Server 2003, i.e. exactly the same O.S., but with some additional features.

share|improve this answer
thanks, I upvoted your answer as helpful but still it is not satisfactory answer. I see a lot of problems in security issues in development against R2 in comparison with non-R2, I just did not cluttered my post with all. As developer, I just must know more specifically – Gennady Vanin Геннадий Ванин Aug 27 '10 at 19:23
2008 non-R2 and 2008 R2 are different OS. Plain and simple. If you need a list of the differences for a given area, look at the MS documentation for that, or get a more specific question and ask it here. As I said below, for your example of SharePoint behaving differently between the two OS, it's because IIS was upgraded in R2. – mfinni Aug 27 '10 at 19:36

Specifically to your question : I couldn't quickly find a summary of R2 security-related changes, but IIS was upgraded to 7.5. So, there's the broad answer to the question : IIS had a serious update with Server 2008 R2. You could probably look into the documentation for IIS 7.5 to find a decent list of new features.

I'm going to comment a little bit here - a lot of your questions are getting closed because your tone seems argumentative. If you dislike Microsoft, or things that other sysadmins/co-workers have told you that you found to not be exactly true, casting questions in that light does not incline many of us to go out of our way to answer your questions. A lot of your posts don't seem like you're trying to solve a real-world or business problem, to me they seem more like kvetching about something that doesn't make sense to you.

share|improve this answer
W2008R2 is not installable without IIS? IIS cannot be upgraded to 7.5 on W2008(non-R2)? I am MS-oriented developer and came to it from Java/Linux development abandoning the latter in favor of MS. What is bad in clearing what I do not understand? – Gennady Vanin Геннадий Ванин Aug 27 '10 at 19:16
1. Incorrect, Server 2008 R2 is definitely installable without IIS, I didn't say it wasn't. 2. Correct, IIS 7.5 cannot be installed/upgraded on Server 2008 non-R2. 3. This information is readily-available on the Microsoft site for what's new/included with Server 2008 R2. 4. There's nothing wrong with asking for explanations of what you don't understand. You keep getting your questions closed, and I'm saying it may be because of your argumentative tone. Did you vote my answer down? That's an example of what I'm talking about. – mfinni Aug 27 '10 at 19:24
This my question even not theoretical curiosity, it is the practical unavoidable necessity – Gennady Vanin Геннадий Ванин Aug 27 '10 at 19:25
I'm not sure what you mean by your last comment. – mfinni Aug 27 '10 at 19:27
I upvoted your answer now – Gennady Vanin Геннадий Ванин Aug 27 '10 at 19:33

There are a variety of security changes in 2008 R2, specific to Sharepoint would be the negotiation authentication enhancements which offer improved single sign-on options particularly in light of the option in Group Policy to restrict NTLM Authentication and introduction of PKU2U.

There is also online identity integration, a new version of TLS and probably a couple of other things I'm missing.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.