Table of Contents

Cover

Table of Contents

Part I: Deployment and Administration Secrets

Chapter 1: Windows Server 2008 R2 Deployment Secrets

Choosing an Edition of Windows Server 2008 R2

Deciding Between Types of Installation

Optimizing Your Deployment Image

Minimizing Deployment Time

Activating Windows

Summary

Chapter 2: The Windows Server 2008 R2 Administrator’s Toolkit

Choosing the Right Remote Administration Tool

Remote Desktop

Management Consoles

Remote Windows PowerShell

Emergency Management Services (When All Else Fails)

Summary

Chapter 3: Server Core Secrets

Using Server Core Administration Tools

Performing Server Core Post-Deployment Tasks

Understanding the Sconfig.cmd

Administering with Server Core Configurator

Understanding Server Core Infrastructure Roles

Summary

Chapter 4: Active Directory Domains and Forests

Understanding Forests and Domains

Setting Domain and Forest Functional Levels

Selecting the DNS Server

Defining Active Directory Sites

Defining FSMO Roles

Using Read-Only Domain Controllers

Securing with Global Catalog Servers and Universal Group Membership Caching

Maintaining the Active Directory Database

Summary

Chapter 5: Effectively Managing Group Policy

Applying Group Policy

Using Group Policy Management Console

Using Important Group Policy Features

Completing Common Group Policy Tasks

Summary

Chapter 6: Managing Users and Computers

Using Organizational Unit Structures

Managing User Accounts

Configuring Account Policies

Managing Groups

Creating Computer Accounts

Summary

Chapter 7: Managing Active Directory Certificate Services

Understanding Certification Authority Types

Managing Certification Authorities

Using Certificate Templates

Utilizing Certificate Autoenrollment

Recovering Certificates

Backing Up Certificate Services

Revoking Certificates

Summary

Part II: Network Infrastructure and Security Secrets

Chapter 8: Network Addressing

Understanding IPv4 and DHCP

Understanding IPv6

Transitioning to IPv6

Summary

Chapter 9: Securing the Network: Windows Firewall and Network Access Protection

Understanding Windows Firewall with Advanced Security

Understanding Connection Security Rules

Understanding and Configuring Network Access Protection

Summary

Part III: Shared Folder and Data Protection Secrets

Chapter 10: Secrets behind Shared Folders

Using the Share and Storage Management Console

Using File Server Resource Manager

Working with the Distributed File System

Utilizing BranchCache

Working with Offline Files

Summary

Chapter 11: Keeping Data Private

Encrypting File System

Encrypting with BitLocker

Using Active Directory Rights Management Services

Summary

Chapter 12: Backup and Recovery

Using and Configuring Windows Server Backup

Enabling Shadow Copies of Shared Folders

Performing Recovery

Using System Center Data Protection Manager

Summary

Part IV: Infrastructure Services

Chapter 13: Internet Information Services

Managing Sites

Managing Application Pools

IIS Users and Delegation

Managing FTP

Summary

Chapter 14: Configuring Hyper-V Virtual Machines

Configuring Hyper-V

Understanding Virtual Hard Disks

Understanding Hyper-V Networks

Using Virtual Machine Snapshots

Migrating Virtual Machines

Summary

Chapter 15: Patch Management with WSUS

Defining an Update Process

Installing and Deploying WSUS

Deploying Updates

Understanding WSUS Topologies

Verifying Update Deployment

Going Further

Summary

Chapter 16: High Availability

Understanding Network Load Balancing

Allocating Storage to iSCSI SAN

Understanding Failover Clustering

Summary

Part V: Remote Access Secrets

Chapter 17: Presentation and Application Virtualization

Understanding Remote Desktop Session Host

Running RemoteApp

Using Remote Desktop Web Access

Utilizing Remote Desktop Connection Broker

Connecting via Remote Desktop Gateway

Remote Desktop Licensing

Understanding Remote Desktop Virtualization Host

Virtualizing Applications with App-V

Summary

Chapter 18: Remote Access

Setting up Remote Desktop Gateway

Deploying Virtual Private Networks

Connecting via DirectAccess

Summary

Part VI: Maintenance and Monitoring Secrets

Chapter 19: Getting the Most Out of Event Logs and Auditing

Auditing Windows Server 2008 R2

Filtering and Viewing Event Logs

Event Log Forwarding

Creating Event Viewer Tasks

Going Further with Operations Manager

Summary

Chapter 20: Performance and Resource Management

Monitoring Point-in-Time Performance

Understanding Data Collector Sets

Using Windows Server Resource Manager

Summary

Read This First

Who This Book Is For

What This Book Covers

How This Book Is Structured

What You Need to Use This Book

Features and Icons Used in This Book

Part I: Deployment and Administration Secrets

Chapter 1: Windows Server 2008 R2 Deployment Secrets

Chapter 2: The Windows Server 2008 R2 Administrator’s Toolkit

Chapter 3: Server Core Secrets

Chapter 4: Active Directory Domains and Forests

Chapter 5: Effectively Managing Group Policy

Chapter 6: Managing Users and Computers

Chapter 7: Managing Active Directory Certificate Services

Chapter 1

Windows Server 2008 R2 Deployment Secrets

In This Chapter

Understanding the differences between Windows Server 2008 R2 editions

Creating a deployment image

Choosing virtual or physical deployment

Minimizing deployment time

Going further with System Center

As an experienced administrator, you’ve installed Windows Server operating systems more times than you can count. You didn’t pick up this book of secrets to read a walkthrough telling you how to insert a DVD into an optical drive and then proceed with a screen-by-screen description of how to perform the install. At this stage of your career, you are likely to perform a traditional optical media OS installation only if you haven’t had time to set up Windows Deployment Services or configure a custom image on a USB flash drive.

In this chapter, you learn the differences between the various editions of Windows Server 2008 R2, including the answer to the question, “What is the real difference between the Enterprise and Datacenter Editions, beyond the licensing cost?” And, you find out what the Foundation Edition is and the types of situations where it makes sense to deploy Windows Web Server 2008 R2.

Read this chapter and you will also learn how to set up a USB flash drive to deploy Windows Server 2008 R2 to individual servers far more quickly than using a DVD. You learn how to modify the install image to include drivers and updates, so you don’t have to install them as part of post-installation configuration, and you find out how to switch on certain features, so you don’t have to do it manually after the deployment is complete.

This chapter contains information you can use to get Windows Deployment Services not only broadcasting images in WIM format, but also how to add VHD images to the deployment server. You also learn about the types of situations where you’ll save your organization time and money by using answer files and products like System Center Configuration Manager.

Choosing an Edition of Windows Server 2008 R2

You probably know that Windows Server 2008 R2 comes in a variety of flavors, but do you know the real differences between each edition? Though most systems administrators deal with only one or two editions of Windows Server 2008 R2 on a regular basis, there are a total of seven editions available. Of course the more editions there are, the greater the complexity in choosing the right one for a specific set of needs. When most administrators see the number of editions that are available, they throw up their hands and choose the Enterprise Edition. In general, choosing the Enterprise Edition of any Microsoft product is a reasonable strategy, because with it, you have access to all the available features and won’t be caught unable to install some unusual role like Federation Services. The downside of this strategy is that occasionally you’ll spend more on a server operating system license than might actually be necessary. In reality, understanding the differences between the editions comes down to the following factors:

How many virtual licenses you want included with your OS so you can run separate instances on the same machine.

Whether you need a specific feature or role, such as wanting to set up an enterprise root certificate authority.

Whether you have a specific amount of RAM or number of processors that you want to be able to support.

NOTE All versions of Windows Server 2008 R2 run on only 64-bit platforms. If you’ve got a server that has a 32-bit processor, you won’t be able to run Windows Server 2008 R2, though you will still be able to run Windows Server 2008.

There are seven editions of Windows Server 2008 R2. The differences between them are as follows:

Sockets are different from cores, so if you have a collection of quad-core processors that are all the same, you can install four of these quad-core processors on a server that runs the Standard Edition of Windows Server 2008 R2.

The Standard Edition comes with only one virtual license, does not support Active Directory Federation Services, and has caveats when it comes to hosting the Certificate Services role. There are connection limits on Network Policy and Access Services and Remote Desktop Services roles, and DFS is limited to one stand-alone DFS root. The Standard Edition supports up to four processor sockets and up to 32 GB of RAM.

Enterprise comes with four virtual licenses, supports all server roles and features, and supports up to eight sockets and 2 TB of RAM. This version of Windows Server 2008 R2 is most commonly deployed in medium- to large-sized organizations.

The Datacenter Edition differs from the Enterprise Edition only in that you get an unlimited number of virtual instances and can use up to 64 processor sockets. The Datacenter Edition is most often deployed in virtualization scenarios, as it allows you to run as many virtual machines as you want on the one bit of hardware.

The Foundation Edition is available only from OEMs on single-socket servers and is limited to 8 GB of RAM. The key to understanding the Foundation Edition is that it is limited to 15 user accounts. You can have it as a Domain Controller (DC) or as a member server, but if there are more than 15 accounts in the domain or on the stand-alone system, the Foundation Edition will automatically shut down after a ten-day grace period. With that 15-account limitation and a few minor exceptions, the Foundation Edition supports the same features as the Standard Edition of Windows Server 2008 R2. You cannot install the Foundation Edition in the Server Core configuration.

The Web Server Edition supports only the Web server and DNS server roles. It is cheaper to license than other editions, and you should deploy it if you need a server running IIS but nothing else. It supports up to 32 GB of RAM and four processor sockets.

The HPC Server Edition is used in high-performance computing applications where it is necessary to run complex jobs against thousands of processing cores. The HPC Server version of Windows Server 2008 is often used with special applications for financial analysis. It supports up to 128 GB of RAM and four processor sockets.

Windows Server 2008 R2 for Itanium Edition runs on the Itanium platform and supports only Itanium-specific server applications, like SQL Server 2008 R2.

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!