Windows Server 2003 R2

50 %
50 %
Information about Windows Server 2003 R2
Education

Published on February 20, 2008

Author: Semprone

Source: authorstream.com

Slide1:  Bruce Cowper IT Pro Advisor Microsoft Canada Agenda:  Agenda Windows Server™ 2003 R2 Principal Scenarios Identity and Access Management Efficient Storage Management Simplified Branch Server Management Cost-Effective Virtualization Slide3:  Manage a single identity across partner, web and UNIX apps Better connectivity, reliability, Security Better control over storage setup Enterprise Edition & Virtual Server R2 Identity and Access Management:  Your EMPLOYEES Your APPLICATIONS Your PLATFORMS Your PARTNERS Their APPLICATIONS Your REMOTE and VIRTUAL EMPLOYEES Identity and Access Management Challenge: Extending access across users, apps, platforms Identity and Access Management:  Identity and Access Management Active Directory® Application Mode (ADAM) Lightweight, domain-independent mode of Active Directory for application directory scenarios Interoperability with Domain Mode for authentication Benefit: Tailor directory services infrastructure for local control/autonomy or shared services UNIX Identity Management Server for Network Information Service (NIS) helps integrate Windows and UNIX domains Password synchronization simplifies password maintenance across platforms Benefit: Efficient multi-platform identity management Active Directory Federation Services (ADFS) Windows Server 2003 R2 Features Active Directory Application Mode:  Active Directory Application Mode Lightweight, domain-independent mode of Active Directory for application directory scenarios Same code as Active Directory = same programming model, admin tools, replication model Simple wizard-based install; no DCPROMO Schema flexibility; synchronization with Active Directory possible via Identity Integration Feature Pack Free web download Authentication in Active Directory, authorization in ADAM for increased security ADAM Usage Scenarios Application-specific local directory:  ADAM Usage Scenarios Application-specific local directory Example: Web portal with personalization Store personalization info in ADAM Use Active Directory for authentication Infrastructure Active Directory Store/ retrieve data Client Authentication Server ADAM Usage Scenarios Extranet Access Management:  ADAM Usage Scenarios Extranet Access Management Policy server: ADFS or third-party solutions (CA SiteMinder, OpenNetwork/BMC, etc.) “Fast-bind authentication” via LDAP bind calls Scenario benefits from ADAM ease of use LDAP “admin connection” (search, Update) Web client LDAP bind (authN) Web servers UNIX Identity Management:  UNIX Identity Management Consolidation of administration and monitoring across platforms Remotely monitor and administer Windows-based systems in the same fashion and with the same tools as UNIX- based systems Efficient Cross-platform User Management UNIX Server Windows Server Windows Workstation UNIX Workstation Windows Server UNIX Server UNIX Workstation UNIX Workstation Windows Workstation Windows Workstation Server For NIS:  Server For NIS NIS Clients UNIX NIS Servers Master Slave Windows Servers Slave Server For NIS:  Server For NIS UNIX NIS Servers Windows Servers NIS Clients Slave Slave Slave Master UNIX Password Synchronization:  UNIX Password Synchronization Pull NIS schema into Active Directory Bidirectional Password Sync, user name mapping, supported on: HP-UX 11i Sun Solaris 8 & 9 IBM AIX 5L 5.2 Red Hat Linux 9.0 Mapping Server Map Windows® User and Group Accounts to UNIX Active Directory Federation Services Windows Integrated Authentication: Great For Intranets:  Active Directory Federation Services Windows Integrated Authentication: Great For Intranets Logon to Windows Flexible Authentication Kerberos X509 v3/Smartcard/PKI VPN/802.1x/RADIUS LDAP Passport/Digest/Basic (Web) SSPI/SPNEGO Single Sign-on to: Windows File/Print servers Microsoft applications 390/AS400 (Host Integration Server) ERP (BizTalk®, SharePoint® ESSO) 3rd Party Integrated Apps Web Applications via IIS UNIX/J2EE ADFS Scenario: Web SSO:  ADFS Scenario: Web SSO User credentials and attributes managed in Active Directory/ADAM at the application Benefits: Single sign-on to farm of IISv6 web apps Stronger authentication via forms, client-side certs ADAM support: LDAP user store in perimeter Support for “road warrior” applications Windows Integrated Auth for internal users ADFS auth for external users ADFS Scenario: Identity Federation:  ADFS Scenario: Identity Federation User credentials and attributes managed in “home realm” by partner organization Benefits: Single sign-on to internal and partner web applications Fewer passwords for users to forget Lower password reset costs Centralized administration, delegated to partners Automated restriction of partner app access Logging of inbound and outbound access requests Identity Federation in Action:  A. Datum Account Forest Trey Research Resource Forest Identity Federation in Action Federation Trust ADFS: Standards-Based Solution:  ADFS: Standards-Based Solution Active Directory Federation Services IBM PingID BMC Quest CA Centrify + others… Multi-vendor, multi-platform interoperability via Web Services WS-Federation ADFS Architecture:  ADFS Architecture Active Directory (2K, 2K3, ADAM) Authenticates users Manages attributes Federation Service (FS) STS (security token service) Issues security tokens Populates claims Statements an authority makes about security principals Manages federation trust policy FS Proxy (FS-P) Client proxy for token requests Provides UI for browser clients Web Server SSO Agent Enforces user authentication Creates user authorization context HTTPS LPC/Web Methods Windows Authentication/LDAP Application (authorization) Windows NT® Impersonation and ACLs ASP.NET IsInRole() AzMan RBAC integration ASP.NET Raw Claims API Slide19:  ADFS Mapping trusts in ADFS demonstration Slide20:  Active Directory Federation Services UNIX Identity Management Distributed File System Centralized File and Print Consoles File Server Resource Manager Storage Manager for SANs Enterprise Edition licensing change Simplified Branch Server Management:  Simplified Branch Server Management Wide-Area Network (WAN) WAN costs can be significant WAN latency issues Security / Management costs Lack of network admins on site in branch offices Tape backup expensive, unreliable Tools need to scale to large number of branches Policy Delegation UI Branch office challenges Slide22:  Security Configuration Wizard Server 2003 SP1 and Server 2003 R2 Identifies open ports The wizard should be executed with required applications and services running Selects server roles from configuration database Configures required services Configures ports for Windows Firewall Configures security for LDAP and SMB Configures an audit policy Configures settings specific to roles performed by the server Slide23:  Security Configuration Wizard Configuration saved to XML file Applied by the wizard Apply an existing security policy Applied from the command line scwcmd.exe configure /p:webserverpolicy.xml Used in scripts Unattended setup scripts Slide24:  Security Configuration Wizard Using the Security Configuration Wizard Roles and Templates demonstration Simplified Branch Server Management:  Simplified Branch Server Management Easily manage your infrastructure with centralized management tools DFS Management Console & Failover with Failback Print Management Console Keep your business running smoothly, by taking advantage of faster data replication DFS: Remote Differential Compression Reduce administration costs by eliminating local administration & local back-up Windows Server 2003 R2 Features for Branch Simplified Branch Server Management:  Simplified Branch Server Management Brand new management UI Hierarchical view of namespace New features such as rename links, drag n’ drop New features in DFS Namespace Service Failback (Configured by admin at root or link) Vs. Failover Prioritization of Target Server referrals Set priority of servers to which you failback Enabling Technologies: DFS Namespace Simplified Branch Server Management:  Simplified Branch Server Management A robust multi-master file replicator Efficient, scalable & robust Key new features: Core Service: Efficient and simple state-based synchronization Remote Differential Compression Bandwidth Throttling New management console Enabling Technologies: Distributed File System Replication (DFS-R) Simplified Branch Server Management:  Simplified Branch Server Management New Microsoft algorithm Send only minimal deltas when transferring data over a network RDC efficiency examples Change title in a 3.5MB PPT, resync takes just 16K Enabling Technologies: Remote Differential Compression (RDC) Source: MS Internal Simplified Branch Server Management:  Simplified Branch Server Management New Print Management Console (PMC) in R2 With PMC, branch servers can easily be print servers because they are remotely manageable on a 1-to-many basis Enabling Technologies: Print Role Printers Node Servers Node Slide30:  DFS Setting up and Securing DFS demonstration Slide31:  Active Directory Federation Services UNIX Identity Management Distributed File System Centralized File and Print Consoles File Server Resource Manager Storage Manager for SANs Enterprise Edition licensing change Efficient Storage Management:  Efficient Storage Management Storage growth estimates: 60-100% per year Managing storage growth effectively is a challenge Direct Attached Storage (DAS) solutions have limitations Storage Area Network (SAN) solutions can be complex Few IT professionals are storage experts: 35% of SMBs have moved from DAS to SAN 40% of SMBs are considering moving to SAN Costs of managing storage can be 10x the cost of storage Process of consolidating File Servers/Storage is involving Complex and error prone Potential disruption to end users The Challenges of Storage Today Efficient Storage Management:  Efficient Storage Management Windows Server 2003 R2 Storage Management (FSRM) (SMFS) Capacity Management Policy Management File Screening Quota Management Configuration Management File Server Resource Manager Storage Manager for SANs Disk provisioning Disk management Efficient Storage Management:  Efficient Storage Management Capacity Management Determine existing storage capacity usage across the organization Determine whether usage effectively supports organizational goals Define and implement storage policies Adjust the policies as capacity needs grow and as organization needs change Policy Management No easy way to control the type of data stored on file servers Unwanted content must be identified manually Quota Management User home directories often grow quickly causing servers to run out of space Departmental shares can also grow unexpectedly Administrators are only aware of storage crises when the server is already out of space FSRM: Administrator Challenges Efficient Storage Management:  Efficient Storage Management Capacity Management Identify where storage capacity is used inefficiently Identify mechanisms to prevent future capacity misuse Monitor usage patterns and utilization levels Policy Management Eliminate non-business files and improve storage utilization while reducing management costs Implement policies to restrict unauthorized files in order to limit legal exposure Promote a culture of accountability Quota Management Control the amount of space used for a folder or share and limit its impact on server utilization Monitor disk space usage growth per volume, folder, or share Slow down storage growth FSRM: User Scenarios and Benefits Efficient Storage Management:  Efficient Storage Management FSRM: Capacity Management Functionality Predefined and configurable storage capacity reporting Predefined reports for ease of use Configurable reports for fine tuning to specific server environments Multiple report formats Generate reports at scheduled intervals (e.g. off-hours) Save reports locally or send to users via e-mail Support for clustered configurations Efficient Storage Management:  Efficient Storage Management Functionality Applies to a folder tree or volume Screening rules Based on file groups Apply to all user files in the folder File screening settings can be saved in template Passive and active screening supported Screening events recorded in audit log Same set of notification as quotas File system interoperability Only NTFS volumes are supported Usage is tracked in real time Only volumes with screening configuration are monitored Screening is based on file name patterns (*.mp3, FY04*) Self-consistent volume configuration Cluster support FSRM: Policy Management (File Screening) Efficient Storage Management:  Efficient Storage Management Functionality Quotas limit the size of a directory tree or a volume Quota applies to all users files in directory Limit can be soft or hard File system interoperability Only NTFS volumes are supported Usage is tracked in real time, failing I/Os at hard limit Only volumes with quota configuration are monitored Quota usage is charged based on disk size Support for special files Compressed, sparse, named streams, hard links, reparse points Multiple notification thresholds at configurable quota utilization levels Self-consistent volume configuration Quota settings travel with volume (SAN, hot-pluggable disks) Cluster support FSRM: Quota Management Slide39:  Storage Management Quotas and reporting File Screening demonstration Slide40:  Active Directory Federation Services UNIX Identity Management Distributed File System Centralized File and Print Consoles File Server Resource Manager Storage Manager for SANs Enterprise Edition licensing change Change: Windows Server 2003 R2 Licensing Multiple instances per license for EE:  Change: Windows Server 2003 R2 Licensing Multiple instances per license for EE Windows Server Virtualization Licensing:  Windows Server Virtualization Licensing 1 install = 1 license SAN or file server w/ many images Servers (i.e. devices) Multiple instances per device Summary:  Summary Windows Server 2003 R2 Principal Scenarios Identity and Access Management Efficient Storage Management Simplified Branch Server Management Cost-Effective Virtualization UNIX Interoperability Editions and Features:  Editions and Features * Only one of the replication partners is required to be an Enterprise Edition or Datacenter Edition Slide45:  © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. All other trademarks are property of their respective owners. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Bruce Cowper IT Pro Advisor Microsoft Canada Blogs.TechNet.com/brucecowper

Add a comment

Related presentations

Related pages

Microsoft Windows Server 2003 – Wikipedia

Microsoft Windows Server 2003 ist ein Betriebssystem und wurde im Jahr 2003 von Microsoft als Nachfolger für die Windows 2000-Serverprodukte veröffentlicht.
Read more

Download Windows Server 2003/2003 R2 – Veraltete Inhalte ...

Windows Server 2003, Windows Server 2003 SP1 und SP2 und Windows Server 2003 R2 – Veraltete Inhalte.Die von Ihnen angeforderten Inhalte wurden bereits ...
Read more

Download Windows Server 2003 Service Pack 2 (32-Bit x86 ...

Bei Microsoft Windows Server 2003 Service Pack 2 (SP2) handelt es sich um ein kumulatives Service Pack, in dem die neuesten Updates enthalten sind.
Read more

Übersicht über Microsoft Windows Server 2003 R2 Standard ...

Windows Server 2003 R2 Standard Edition wurde für Standardarbeitslasten entwickelt, wie sie beispielsweise auf Abteilungsebene auftreten, und bietet ...
Read more

Windows Server 2003 R2 Trial - administrator.de

Hallo Zusammen Ich habe mich vorhin auf die Suche gemacht nach einem Windows Server 2003 R2 Trial. Leider jedoch keinen mehr gefunden. Von Microsoft her..
Read more

Windows Server | 2008 R2, 2008, 2003, WSUS, Active ...

Ihnen stehen offizielle Dokumentationen, Anleitungen, Ressourcen und Tools rund um die Verwaltung von Windows Server-Installationen, die Bereitstellung von ...
Read more

Support-Ende von Windows Server 2003: Das müssen IT ...

Im Juli endet der Support von Windows Server 2003/2003 R2. Verantwortliche müssen jetzt dringend handeln. Dann wird es keine Sicherheitsupdates ...
Read more

Windows Server 2003 - Wikipedia

Windows Server 2003 (sometimes informally referred to as Win2K3, or just 2K3) is a server operating system produced by Microsoft and released on April 24 ...
Read more

Suchergebnis auf Amazon.de für: windows 2003 server r2

Produktbeschreibungen Microsoft OSB WIN SVR STD 2003 R2 SP2 D, 1PK 64BIT 1-4CPU 5CLT GR
Read more

Aktualisieren von Windows Server 2003 mit Service Pack 1 ...

In diesem Artikel wird erklärt, wie Sie Microsoft Windows Server 2003 mit Service Pack 1 (SP1) auf Windows Server 2003 R2 aktualisieren können. Die ...
Read more