Microsoft Now Decides to Accept Outside Security for Vista
Microsoft Corp. did an about-face yesterday, agreeing to make it easier for customers of its forthcoming Vista operating system to use outside security vendors, such as those who make popular antivirus and anti-spyware programs.
Context & Ripple Effects
The about-face lands mid-way through Microsoft's security-first marketing arc for Vista: Jim Allchin told customers in January to buy Vista for the security, and by June the company was calling it the most secure operating system it had ever shipped. A first release candidate followed in September, so the platform decisions behind that claim were hardening right up to this reversal.
What changed is who gets to defend Windows: Microsoft now agrees to make it easier for outside antivirus and anti-spyware vendors to operate on Vista rather than reserving that role for its own stack. The rollout of the news is telling — Brad Smith fronted a press conference specifically about Vista's release in Europe and Korea, and CNET framed the story around whether Windows kernel protection would hold, both pointing to antitrust scrutiny as the force behind the concession.
First-order effects
- Independent antivirus and anti-spyware vendors regain a workable path onto Vista, and customers keep their existing security choices instead of being pushed toward whatever ships in the box.
- The concession sits awkwardly against the marketing line Microsoft spent 2006 building — the 'most secure ever' positioning assumed control of the whole defensive stack, and this hands part of it back.
Second-order effects
- With Brad Smith tying the announcement to Vista's release terms in Europe and Korea, other competition authorities gain a template for prying open OS-adjacent markets wherever a platform owner bundles into its own turf.
- Enterprise buyers can now run best-of-breed security procurement on Windows rather than treating the OS vendor's bundle as the default, keeping pricing pressure on every vendor in the chain.
Third-order effects
- The episode establishes that kernel-level gatekeeping is negotiable when regulators are watching — platform owners who reserve strategic layers for themselves invite the same treatment Europe and Korea applied here.
- If the pattern holds, each major Windows release becomes contested ground between Microsoft's integrated-security ambitions and the independent security industry's access rights, rather than a unilateral engineering call.
The trend: Operating-system security is shifting from a unilateral design decision by platform owners to negotiated ground among vendors, independent security firms, and antitrust regulators.