Diagnostics and recovery:
- Microsoft Diagnostics and Recovery Toolset (DaRT), formerly Emergency Repair Disk Commander (ERD Commander), is a set of tools that helps diagnose an offline copy of Microsoft Windows. It comes on a bootable disc and is run during computer startup. It can uninstall installed hotfixes, perform crash analysis, recover deleted files and access System Restore's restore checkpoints on the offline operating system in an environment similar to Windows graphical user interface.

Network administration:
- Microsoft Advanced Group Policy Management (AGPM)
Provides enhanced management capabilities for group policy. It integrates with the Group Policy Configuration MMC snap-in and adds change control, offline editing, and delegation capabilities. Change control tracks and manages changes to Group Policy Objects (GPOs). It presents a virtual vault which houses the GPOs. To make any changes, a GPO must be checked out of the vault and the changed version checked in. The system enforces the latest version of the GPO and archives the older version, which can be restored back if need arises. Offline editing capabilities allow GPOs to be edited without a live connection to the network and Active Directory. The changes are merged on the next connection. AGPM also adds delegation capability, where the responsibility of managing the Group Policy can be divided among different administrators. Each administrator is concerned with only a certain set of GPOs, which can then be administered independent of others. Optionally, it can be configured so that changes are reviewed by other administrators before being enforced. Advanced Group Policy Management is based on GPOVault, a product by DesktopStandard Corporation which Microsoft acquired in October 2006.

- Microsoft BitLocker Administration and Monitoring (MBAM)
A tool for managing, enforcing and monitoring BitLocker drive encryption across an entire organization from a central location. MBAM consists of administration console which can be accessed using a web browser, as well as an agent which must be installed on every computer in the organization, either manually or using Active Directory.

Virtualization:
- Microsoft Application Virtualization (App-V)
An application virtualization and application streaming platform that allows clients to run applications locally via on demand streaming from a centralized server. This makes sure that all clients run the application with the same configuration. App-V also allows standalone virtualized applications to run locally on the client.

- Microsoft Enterprise Desktop Virtualization (MED-V)
It allows a physical Windows 7 workstation to host one or more virtual machines that run their own operating systems on a Windows Virtual PC hypervisor, with some transparent integration of the Start Menu and desktop of the virtual machine into that of the host. Microsoft advertises MED-V as a compatibility solution that allows enterprises to run legacy applications that will not run natively on Windows 7 to be hosted on a legacy platform such as Windows XP, similarly to the consumer-oriented Windows XP Mode.

- User Experience Virtualization (UE-V)
A replacement for roaming profiles that will allow user preferences and settings to roam between different environments and types of devices.