Analyst Report
Comparing Group Policy in Windows Server 2008 to SELinux in Red Hat Enterprise Linux 5
Published: 4/3/2008
This paper evaluates similarities and differences between features and functions of Windows Server 2008 Group Policy and SELinux in Red Hat Enterprise Linux 5 (RHEL5).

Summary
When choosing a server product for an IT environment, comparison shopping quickly reveals that two or more products might seem to have similar functionality, but each has unique features that can ultimately dictate which product is the best fit. This paper evaluates similarities and differences between features and functions of Windows Server 2008 Group Policy and SELinux in Red Hat Enterprise Linux 5 (RHEL5).
In terms of centralized policy management, it appears that both the Microsoft's Windows Server 2008 and RHEL5 SELinux architectures provide security polices at the individual computer and user levels. The capability within both platforms for this type of granular control serves to reduce the burden for Windows Server 2008 and RHEL5 IT professionals of enforcing security policies. However, the similarities between the two platforms end here, with each taking quite different approaches to policy scope, functionality, and management. Windows Group Policy aims to specify what functions users can perform, while SELinux focuses on controlling what programs and data users can access. The difference in mission is borne out of differing original objectives.
Included in this document
  • Policy Concepts in SELinux and Windows 2008
  • Policy Management via SELinux in RHEL5
  • Group Policy in Windows Server 2008