windows 2012 r2 multi server management
TRANSCRIPT
Free resources for IT professionalsTechNet Evaluation Center
IT CampsMicrosoft Virtual Academy
Free product evaluations and deep technical content
Expert-led, no cost, hands-on technical training events
Free, expert-led, technical courses
Download Microsoft software trials today.
Find an IT Camp near you. Take a free online course.
Technet.microsoft.com/evalcenter
Technet.microsoft.com/globalitcamps
microsoftvirtualacademy.com
MVA – Microsoft Virtual Academy
microsoftvirtualacademy.com
MVA provides free online technical training on the IT scenarios that are important to your company and your career. Learn at your own pace and boost your IT skills with access to over 100 expert-led courses across more than 15 different Microsoft technologies.
• Windows Server 2012• Windows 8• System Center 2012
SP1• Virtualization
Go to microsoftvirtualacademy.com
• Windows Azure• Security• SQL Server 2012• And more
Students registered 1.2MSelf-assessments passed 1.3MHours of training delivered 1.2M
What
Learn more / RegisterBy the numbers (worldwide view)
Covered Products/Technology
Introduction to Windows 2012 R2Multi-Server Management
• Overview• Server Manager / RSAT tools• Full GUI / MinShell / Core interface changes• Windows PowerShell 4.0, ISE and Windows
PowerShell Web Access• Windows Server Update Services (WSUS)
Agenda
Overview
Why do I need Windows Server 2012 R2?
Application owners pressing us for agility and availability, going directly to public clouds.
Protect my existing investments through easy systems integration.
Enable me to build and operate infrastructure efficiently across my customer base.
Provide differentiated services to customers.
IT budgets flat or shrinking even as business expectations increase.
We spent most of our time keeping the lights on, not staffed to take on impactful projects.
Need a solution that works across my diverse data center environments.
Windows PowerShellprovides more features to allow more activities to be automated across the server ecosystem
Windows Management Framework provides a common platform for building automation and integration incorporating Windows PowerShell, WS-Management and WMI
STANDARDS-BASED MANAGEMENT
How does Windows Server 2012 R2 meet my management needs? MULTISERVER
MANAGEMENTUPDATE MANAGEMENT
Server Manager enables a multiserver management experience that builds on the standardized approach to management and Simplify your routine task capabilities
WSUS provides the features that administrators need to manage and distribute updates
Centralized virtualization patching
SIMPLIFY ROUTINE TASKS
Server ModeGUI, minimal shell, core options
INTERFACE OPTIONS
Managing a diverse ecosystem
Methods to manage each device
Number of devices to manage
“The NxM Problem”
IT Pro Tool developer Solution provider
Storage Operating system DevicesDisk Managed
objects
IT Pro
Windows Management FrameworkTool developer Solution provider
DevicesOperating systemStorageDisk Managed
objects
Maximize the value of using the Windows Management Framework
Windows Management Framework
Standard models, protocols, and APIsMaximize the value of using the Windows Management Framework
Standard protocols: WS-Management, REST, HTTP, PSRP
Standard APIs: MI Client, Windows PowerShell, Open Data Protocol (OData)
Standard models: Common Information Model (CIM) schema, Storage Management Initiative Specification (SMI-S)
Windows Management Framework
IT Pro Tool developer Solution provider
DevicesOperating systemStorageDisk Managed
objects
Approach for Windows Server 2012 R2
Management OData ServiceDispatching Layer
Windows PowerShellGeneric
CIM ModuleServiceModule
CIM clientCIM client WS-ManProtocol Handler
Non-WindowsREST clients
CIM ModelDispatching File
CIM servers
• New WMI provider API (MI) with extended Windows PowerShell semantics
• Open Management Infrastructure (OMI) for Linux and UNIX with the same MI provider API
• Full implementation of WS-Man on Windows and Linux/UNIX
• New MI client with integrated Windows PowerShell layer
Open Managment Infrastructure
WS-Management
WS-Manprotocol handler
Windows PowerShell
MI client API
Microsoft .NET MI APINative MI API
WS-Manprotocol handler
Open Management Infrastructure
WS-Manprotocol handler
Any device
Linux/UNIX
MI provider
WS-Manprotocol handler
Windows Management Infrastructure
Windows
MI provider
Classicprovider
Server Manager / RSAT Tools
Easily and quickly see which servers have issues.
• Works over multiple servers.
• Start and stop services.• Add roles.
Create custom groups based on your needs.
Dashboard with overall view of server environment.
Fix issues from Server Manager, no need to open other tools.
Server Manager dashboard customizable.
Server Manager redesign - why should I care?
Actionable
Glance-able
Relevant
InventoryEvents
ServicesPerformance
BPA
REMOTE SERVERS
RolesAll Servers
GROUPS
User Custom
Dashboard
Detail ViewsVIEWS
Server Set
Dashboard Filter
Data Sets+
Query
Data Query
Group Taxonomy
Server Pool
DATA
Server Manager architectureCustomizable
Remote Server Administration Tools (RSAT)• Remotely manage roles and features in…• Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 ,or Windows Server 2008 R2
• Downloadable• Run from…
• Windows 8.1, Windows 8• Enabled by default• Accessed from Server Manager, Tools menu
• Windows 7, Windows Vista• Disabled by default• To enable, click Start, click Control Panel, click Programs, and then click Turn Windows features
on or off.
Full GUI / MinShell / Core Interface Changes
Server with a GUI
Minimal Server Interface
Server Core
Interface choices
Classic “Full Server”• Full Metro-style GUI shell• Install Desktop Experience to run Metro-style apps
Full Server without Server Graphical Shell• No Explorer, Internet Explorer or associated files• MMC, Server Manager, and a subset of Control Panel applets
are still installed• Provides many of the benefits of Server Core for those
applications or users that haven’t yet made the transition
Server Core• Can move between Server Core and Full Server by simply
installing or uninstalling components
Configuration levels
• The challenges… • Lowering the attack footprint of the server to the smallest size possible while keeping it fully patched is a
primary responsibility of administrators• Many administrators are uncomfortable with only a minimal command-line interface (Server Core)
• The Windows Server 2012 solution… multiple interface options• Allows administrators to use the same familiar graphical tools to administer the server without using
remote management tools• Removes the overhead of the other operating system elements not needed to perform that task• Does not require a re-installation to modify the level of GUI on a server; modified in the same manner as
any other role or feature• Allows for a single server deployment image
Interface choices - why should I care?
Server Core Minimal Server Interface
Server with a GUI
Desktop Experience
Command Prompt a a a aWindows PowerShell/.NET
a a a a
Server Manager x a a aMMC x a a aControl Panel x x a aCPL Applets x Some a aExplorer Shell x x a aTaskbar x x a aSystem Tray x x a aInternet Explorer x x a aHelp x x a aThemes x x x aStart screen (Metro) x x a aMetro-style apps x x x aMedia Player x x x a
• Server Core now supports more roles and services, including .Net Framework 4.5 and SQL Server 2012
• Firewall-friendly remote management (WinRM) and Windows PowerShell are enabled and installed by default
• Added the ability to easily move between Server Core and MinShell
Microsoft promotes Server Core as the primary server deployment option
• .Net Framework 4.5• Active Directory (AD) • Active Directory Lightweight
Directory Services (ADLDS) • Active Directory Certificate
Services (ADCS)• DHCP Server • DNS Server • File Services • BITS Server • BranchCache • Hyper-V • Internet Information Services (IIS) • Printing Services • Streaming Media Services • iSCSI • Load Balancing • MPIO • qWave • Telnet • Unix Migration • SQL Server 2012
Interface ChoicesServer Core
• Common Dialog box is functional (except networking)• Any UI with dependencies on items implemented as Shell Namespace
Extensions will fail• Certain CPLs are namespace extensions, e.g. Networking
• Internet Explorer is not available when Server Graphical Shell is uninstalled• Links in UI won’t work• Help isn’t available – calls
• Some file associations and protocol handlers broken• http://• file://• *.chm
• Some DLL files not installed• Check for dependencies or delay loads might fail! • DUMPBIN (Windows SDK)• Dependency Walker (http://www.dependencywalker.com, freeware)
• Test your applications on the Minimal Server Interface!• to HTML Help API will return NULL!
Limitations of the MinShell
Install-WindowsFeature Server-Gui-Mgmt-Infra
Install-WindowsFeature Server-Gui-Shell
Install-WindowsFeature Desktop-Experience
Uninstall-WindowsFeature Server-GUI-Shell
Uninstall-WindowsFeature Server-GUI-Shell -remove
Enabling/Disabling MinShell
• All roles and features are copied to the Windows side-by-side store (\windows\winsxs) during setup• Uses disk space to store roles and features that may never be installed
• Windows Server 2012 has Features on Demand• Allows an administrator to remove unneeded roles and features• Files for removed roles and features are deleted from the side-by-side store• Can be used to minimize VHD footprint
Reducing the disk footprint
• Server Core installation option is created using Features on Demand• Unsupported roles and features are removed from \windows\winsxs to maintain minimal footprint• Show as Removed in Windows PowerShell
• Show as Payload Removed in Dism.exe
Server Core installation option
• Files for <FeatureName> will be deleted from the \windows\winsxs folder
• Must use Windows PowerShell; remove is not available in Server Manager
• Reinstallation sources• Windows Update• If server has Internet access, it can use WU
• Use the WIM directly• Mount WIM• Can mount the install WIM
• Running server’s \windows\winsxs folder
• Location can be specified via Group Policy• Computer Configuration > Administrative Templates > System > “Specify settings for optional component
installation and component repair”
Removing roles and features
Uninstall-WindowsFeature <FeatureName> -Remove
• Server Manager• Windows PowerShell
Reinstalling roles and features
Install-WindowsFeature <FeatureName> -Source <Source>
Windows PowerShell 4.0
• Windows PowerShell is a distributed automation engine with a scripting language and interactive shell(s)• Focuses on the business• Makes change safe through automation• Bridges the gap between operators and developers
• Windows PowerShell 4.0 is available for the following operating systems:• Built-in• Windows Server 2012 R2• Windows 8.1
• Downloadable for• Windows 7 SP1• Windows Server 2008 R2 SP1
What is Windows PowerShell?
Ease of use• Integrated Scripting Environment: IntelliSense,
Code Snippets• Windows PowerShell Web Access
Greater resiliency• Robust session connectivity• Job scheduling• Windows PowerShell workflow
Extensive coverage• Rich management through more than 3000+
cmdlets
Real world scenario• Domain join• System Center integration
Key features
Windows PowerShell 4.0
• The challenge…• Reduce errors during configuration changes• Reduce the skill set required for authoring automation of complex solutions• Locate and import the numerous Windows PowerShell modules into each session• Reduce the syntax learning curve, especially for people new to Windows PowerShell• Bridge the gap between operators and developers
• The Windows PowerShell 4.0 solution….• Allows for use of tested scripts, reducing the number of errors that impact production environments• Improves efficiency due to the dramatic increase number of built-in cmdlets• Includes features designed to speed understanding and correct usage of syntax (Show-Command,
Intellisense)• Makes excellent progress toward bridging the gap between operators and developers• Simplifies routine tasks!!
Windows PowerShell 4.0 - Why should I care?
For exampleNew modules for:• AppBackgroundTask• Defender• NetEventPacketCapture• PSDesiredStateConfiguration• SyncShare• WDS• WebApplicationProxy• WindowsSearch• Others
Extensive coverage
• Comprehensive management with more than 3000+ cmdlets in 100+ modules.
• Many new modules that allow the use of Windows PowerShell 4.0 to manage all aspects of the datacenter.
Windows PowerShell 4.0
• Get-Help• Provides a progress indicator when searching
• Update-Help• With no parameters, it will use the Internet to update help for each module loaded into the current session• By default, can be used only once per day; override with –Force• Must be part of the Administrators group and Run As Administrator if updating core Windows PowerShell
modules• Can be used to pull updates from the Internet or a local folder or file share
• Save-Help• Downloads the help for modules and saves them to the local file or share• Organized into a single XML file accompanied by several CAB files, one for each language
Windows PowerShell HelpUpdate-Help-Force-Module [module name]-SourcePath-LiteralPath
Ease of Use
• Show-Command cmdlet• New command-line switches• Add-on tools• Help viewer window• Restart Manager and auto-save• Most-recently used list• New editor features• Console pane• Snippets• Intellisense• Supports workflow debugging and
remote script debugging
Windows PowerShell ISE
• Xml syntax coloring• Brace matching• Outline view• Drag & drop editing• Parse error display• Zoom• Rich text copy and paste• Block selection
-NoProfile-help-mta
Ease of Use
• Lets beginners run cmdlets from a dialog box• Running without parameters displays a list
of available cmdlets, functions, aliases and scripts installed on the system
• Can filter by module • Can search by name
Show-Command cmdletEase of Use
Snippets add reusable text to scripts and commands.
Ease of Use
Simplified scripting
• Syntax simplification: Windows PowerShell 4.0 includes simplified, consistent syntax across all cmdlets.
• Simplified scripting through Windows PowerShell ISE:
• Built-in code snippets include templates for functions, parameters, and statements.
• Users do not need to remember the syntax.
Intellisense
• Run Windows PowerShell ISE to execute commands and write, test, and debug scripts in a single Windows-based graphic user interface with multiline editing, tab completion, syntax coloring, and selective execution.
• Context-sensitive command completion for cmdlet and script names, parameter names and enumerated values, and property and method names.
• Show-Command pane for finding and running cmdlets in a dialog box.
Ease of Use
Get-IseSnippetNew-IseSnippet
• Displays code snippets for selected commands• Enabled in ISE by selecting Start Snippets
from the Edit Menu
SnippetsEase of Use
Windows PowerShell Web Access (PSWA)• Manage multiple computers
running Windows by using Windows PowerShell within a browser
• Broad support for popular browsers
• Built for tablets and mobile devices
• Enable through the Add Roles and Features wizard in Server Manager
CorporateNetwork
Server 1
Server 2
Server 3
Web-based console user
Internet
DMZ
Windows PowerShellWeb Access
Gateway
Greater Resiliency
• Allow for reconnection to disconnected remote sessions
Robust sessions
• This example creates a new session on a remote server, stores data in that session, and then disconnects it while leaving the session running. The name of the running session is Server1Session. The local connection variable is $RemoteSession.
• The following commands reconnect to the remote session (in this example, from the server where the session is still running)
↪ Enable-PSRemoting –Force↪ $RemoteSession = New-PSSession –Name Server1Session –ComputerName Server1 ↪ Invoke-Command –Session $RemoteSession –ScriptBlock {$date = Get-Date } ↪ Disconnect-PSSession –session $RemoteSession ↪ Exit
↪ Get-PSSession –ComputerName Localhost↪ $LocalSession = Connect-PSSession –ComputerName localhost –Name Server1Session ↪ Invoke-command –Session $LocalSession –Scriptblock { $date }
Greater Resiliency
03Robust session connectivity with PSWA
CorporateResource
Server 1
Script
1. User connects via the browser through the Windows PowerShell Web Access Gateway to run a script on Server 1.
2. User loses connection to the internet.
3. User reconnects to internet at a later point in time and reconnects to the Windows PowerShell session which is still in a connected state and still running.
Greater Resiliency
Internet
Web-based console user DMZ
Windows PowerShellWeb Access
Gateway
• A set of long-running activities (in sequence or in parallel) that perform complex management tasks, such as multi-machine application provisioning• Typically started from a client computer• Like any other Windows PowerShell command, you can use Get-Command to discover them and Get-
Help to learn how to use them• Authored using a Windows PowerShell script or the Visual Studio Workflow Designer (XAML)• Workflows survive system interruptions (reboots, network problems): suspend-job/ resume-job,
persist state and metadata
WorkflowsSimplify routine tasksGreater Resiliency
↪ Workflow MyWorkflow {Write-Output -InputObject "Hello from Workflow!"} ↪ Get-Command –Name MyWorkflow –Syntax ↪ MyWorkflow
• Improve management automation• Jobs execute based on triggers
• Once, daily, weekly, at startup, at logon• Schedule jobs for execution at a later time, according to a particular
schedule
Job schedulingSimplify routine tasks
Windows Server Update Services (WSUS)
What is WSUS?
Automatic updates
Server running Windows Server Update Services
Automatic updates
LAN
Internet
Test clients
Microsoft Update website
• Maintain operational efficiency• Overcome security vulnerabilities• Maintain stability of your production
environment
Why should I care about WSUS?
The WSUS update management process
Update Management
Phase 1: Assess•Set up a production environment that will support update
management for routine and emergency scenarios
Phase 3: Evaluate and Plan•Test updates in an environment that resembles, but is
separate from, the production environment•Determine the tasks necessary to deploy updates into
production, plan the update releases, build the releases, and then conduct acceptance testing of the releases
Phase 4: Deploy•Approve and schedule update installations•Review the process after the deployment is complete
Phase 4: Deploy•Approve and schedule
update installations•Review the process
after the deployment is complete
Phase 2: Identify•Discover new updates
in a convenient manner
•Determine whether updates are relevant to the production environment
Identify
Evaluate and Plan
Deploy
Assess
Server requirements for WSUS• Software requirements
• Internet Information Services 6.0 or newer• Microsoft .NET Framework 2.0 or newer• Microsoft Management Console 3.0• Microsoft Report Viewer Redistributable 2008 or newer• SQL Server 2012, SQL Server 2008, SQL Server 2005 SP2, or Windows
Internal Database• Hardware requirements
• 1.4 GHz or faster x64 processor• 2 GB of RAM or greater• 10 GB available disk space (40 GB or greater is recommended)
Central patching of key hosts and management servers
• Cluster-Aware Compliance – Ensures all hosts are patched to a baseline without VM downtime
• WSUS – Integrates with System Center Virtual Machine Manager and Configuration Manager
• Baselines – Admins define patches that are to be deployed for compliance. These baselines are assigned to hosts/servers
• Scan for Compliance – Scan the hosts/management servers against baselines to determine compliance
• Remediation – VMM orchestrates the patching of the servers, moving VMs as necessary with Live Migration
Centralized virtualization patching
16 new modules652 new cmdlets3603 new parameters
Glance-ableActionableRelevant
WSUS• Maintains
operational efficiency
• Overcomes security vulnerabilities
• Maintains stability of environments
Centralized virtualization patching
Diverse ecosystem managementOpen Management InfrastructureBroader WS-Man adoption:• WMI
Multi-server management and automationStandards-based Windows PowerShell
4.0
Server Manager
WSUS
Windows Server 2012 R2 is a great operating system for a lot of servers
and the devices connecting them,whether they are physical or virtual,
on-premises or off-premises.
Next StepsDownload evaluation softwareDownload free Microsoft software trials today at the TechNet Evaluation Center.http://aka.ms/CampEval
Learn moreBoost your technical skills with free expert-led technical training from Microsoft Virtual Academy.http://aka.ms/CampMVAWShttp://aka.ms/CampMVASC
Get certifiedGet hired, get recognized, and get ahead with certifications from Microsoft.http://aka.ms/CampCertWShttp://aka.ms/CampCertInfra
Evaluate onlineTest Microsoft’s newest products and technologies in a virtual environment for free at the Microsoft Virtual Labs.http://aka.ms/CampVlabs
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Free product evaluations and deep technical content
Expert-led, no cost, hands-on technical training events
Free, expert-led, technical courses
Download Microsoft software trials today.
Find an IT Camp near you. Take a free online course.
Technet.microsoft.com/evalcenter
Technet.microsoft.com/globalitcamps
microsoftvirtualacademy.com
At the TechNet Evaluation Center you can download free, trial versions of Microsoft software, with no feature limits. Dozens of trials are available – all at no cost. Try Windows Server 2012 for up to 180 days. Download the Windows 8 Enterprise 90-day evaluation. Or try Windows Azure for up to 90 days.
Microsoft IT Camps are no cost, hands-on technical training events for IT professionals led by Microsoft experts, centered on the issues and workloads you’re tackling in your environment today.New IT Camps cover topics including Windows Server 2012, Windows 8 for IT professionals, Windows Azure and more.
Microsoft Virtual Academy provides free online training on the IT scenarios that are important to your company and your career. Learn at your own pace and boost your IT skills with over 100 courses across more than 15 Microsoft technologies including Windows Server, Windows 8, Windows Azure, Office 365, virtualization, Windows Phone, and more.
TechNet Evaluation Center
IT Camps
Microsoft Virtual Academy
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
TechNet Evaluation Center
Technet.microsoft.com/evalcenter
WhatAt the TechNet Evaluation Center you can download free, trial versions of Microsoft software, with no feature limits. Dozens of trials are available – all at no cost.
Learn more / RegisterGo to technet.microsoft.com/evalcenter
Top Products/Technology• Windows Server 2012• Office Professional Plus 2013• Windows 8 Enterprise• Exchange Server 2012• Windows Server 2012• System Center 2012 SP 1• Lync Server 2013
IT Camps
Technet.microsoft.com/globalitcamps
IT Camps are no cost, hands-on technical training events for IT professionals led by Microsoft experts, centered on the IT challenges you’re tackling in your environment today.
• Windows Server 2012• Windows 8• Windows Azure• System Center 2012 SP 1
Go to technet.microsoft.com/globalitcamps
Number of IT Camps executed since July
575
Number of Students attended since July
13k
What
Learn more / RegisterBy the numbers (worldwide view)
Covered Products/Technology
Topic 2
[use this slide as page-break in case you plan to customize this deck]