Windows 7 includes a variety of features designed for enterprises and for small to midsize businesses as well.

AppLocker lets IT staff control what is run on individual users' PCs, banning or allowing specific applications.

The BitLocker encryption tool has been improved and now includes BitLocker to Go, which can encrypt data on USB drives.

Windows 7 also includes "federated search," which Microsoft says will allow people to use the Windows 7 search capabilities to search through remote document repositories set up by IT.

When Windows 7 is used in concert with Windows Server 2008 R2, Microsoft says, enterprises can take advantage of what it calls DirectAccess, which allows remote workers to securely access a corporate network without having to use a VPN. DirectAccess is also designed to make it easier for IT to manage remote machines.

BranchCache is aimed at branch offices when used with Windows Server 2008 R2, it speeds up the responsiveness of network applications, Microsoft says.

Finally, the new Windows XP Mode allows businesses to run Windows XP applications inside Windows 7 so that they look as if they are running on Windows 7 natively although they in fact are running in a virtual XP window. (Consumers can run this as well, but because of hardware limitations and a less-than-simple setup, it is better for businesses.)