Server Role Management

IIS 7.0 Features

Windows Powershell

Server Core

Virtualization

New Security features

Windows Deployment Services

Terminal Services

Group Policy

Read Only Domain Controller

Scalable Networking

• Windows Server 2003 setupWindows Server 2003 setup

• Post-Setup security updatesPost-Setup security updates

• Manage your serverManage your server

• Configure your server wizardConfigure your server wizard

• Add/Remove Add/Remove Windows components components

• Computer ManagementComputer Management

• Security Configuration WizardSecurity Configuration Wizard

• Operating system setupOperating system setup

• Initial Configuration Initial Configuration Tasks

• Server ManagerServer Manager

Windows Server 2008Windows Server 2008Windows Server 2003Windows Server 2003

Server roles streamline management

• Administrator password

• Network IP address

• Domain membership

• Computer name

• Windows Updates

• Windows Firewall

More than a Web server, Internet Information Services 7.0

provides an accessible, extensible platform for developing and

reliably hosting Web applications and services.

Modular Modular ArchitectureArchitecture

ManageableManageable

Built in Built in Request TracingRequest Tracing

Extensible Extensible DesignDesign

Integrated Integrated with .NETwith .NET

IIS 7.0 IIS 7.0 EnhancementsEnhancements

CreateStreamlined

ServersReduced Attack Surface

Extend/Modify IIS Features

Rapid Application Deployment

FastDiagnostics

New interactive New interactive shell and scripting language and scripting language

Based on and takes advantage of .NET features

Current tools will still work

Current automation will still work

Hundreds of Hundreds of Scripts Scripts

Books & Books & Training Training MaterialsMaterials

Community Community SupportSupport

MS MVPsMS MVPs

PowerShell Team BlogPowerShell Team Blog

Active NewsgroupActive Newsgroup

Channel 9: DFO ShowChannel 9: DFO Show

IIS.netIIS.net

Manning PublicationsManning Publications

O’Reilly MediaO’Reilly Media

Sapien Press & others…Sapien Press & others…

TechNet ScriptCenterTechNet ScriptCenterExchange Server 2007Exchange Server 2007

Terminal ServerTerminal Server

WMI, Registry, Hardware, etc.WMI, Registry, Hardware, etc.

Community-Submitted scriptsCommunity-Submitted scripts

MyITForum.comMyITForum.com

Only a subset of the executable files and DLLs installedNo GUI interface installed, no .NET, no PowerShell (for now)Nine available Server RolesCan be managed with remote tools

Dual-IP layer architecture for native IPv4 and IPv6 supportImproved Network Performance TroubleshootingImproved performance via hardware acceleration and autotuningGreater extensibility and reliability through rich APIsCompletely manageable through Group Policy

Insp

ectio

n

Insp

ectio

n

AP

IA

PI

•WSKWSK

WSK Clients TDI Clients

NDIS

AFD

•TDXTDX

TDI

WinsockUser User

ModeModeKernel ModeKernel Mode

•Next Generation TCP/IP Stack (tcpip.sys)Next Generation TCP/IP Stack (tcpip.sys)

•IPv4IPv4

•802.3802.3 •WLANWLAN •Loop-Loop-backback

•IPv4 IPv4 TunnelTunnel

•IPv6 IPv6 TunnelTunnel

•IPv6IPv6

•RAWRAW•UDPUDP•TCPTCP

Receive Window AutotuningReceive Window Autotuning Windows Filtering PlatformWindows Filtering Platform

Receive Side ScalingReceive Side Scaling Policy-based Quality of ServicePolicy-based Quality of Service

Automatically senses network Automatically senses network environment and adjusts key environment and adjusts key performance settingsperformance settings

Allows increase of the size of Allows increase of the size of the TCP/IP send / receive the TCP/IP send / receive windowwindow

Provides filtering capability at Provides filtering capability at all layers of the TCP/IP protocol all layers of the TCP/IP protocol stack stack

Integrates and provides support Integrates and provides support for next-generation firewall for next-generation firewall featuresfeatures

Previous Windows operating Previous Windows operating systems limits receive protocol systems limits receive protocol processing to single CPUprocessing to single CPU

RSS resolves this issue by RSS resolves this issue by allowing network load from a allowing network load from a network adapter to be balanced network adapter to be balanced across multiple CPUsacross multiple CPUs

Prioritize or manage the Prioritize or manage the sending rate for outgoing sending rate for outgoing network trafficnetwork traffic

Both DSCP marking and Both DSCP marking and throttling can be used together throttling can be used together to manage traffic effectivelyto manage traffic effectively

VirtualizationPlatform andManagement

Management toolsManagement tools

VM 2VM 2

“Child”“Child”

VM 1VM 1

“Parent”“Parent”

VM 2VM 2

“Child”“Child”

VM 1

“Parent”

VM 1

“Parent”

VM 2

“Child”

VM 2

“Child”VM 2VM 2

“Child”“Child”

VM 2VM 2

“Child”“Child”

•

VHDVHD

Greater scalability and improved performance

x64 bit host and guest supportSMP Support

Increased reliability and security

Minimal trusted code baseWindows running a foundation role

Better flexibility and manageability

Quick Migration New UIBroad management tool support including SCVMM

17

Functional AreaFunctional Area Key Supporting FeaturesKey Supporting Features

PerformancePerformance Microkernelized hypervisor architecture with a new VSP/VSC architectureMicrokernelized hypervisor architecture with a new VSP/VSC architecture

Support for large memory per virtual machine (64GB)Support for large memory per virtual machine (64GB)

SMP support for virtual machines (4 virtual processors)SMP support for virtual machines (4 virtual processors)

Automatable Host setup/configurationAutomatable Host setup/configuration

ScalabilityScalability Support for x86 and x64 virtual machinesSupport for x86 and x64 virtual machines

Broad OS support Broad OS support

Pass through disk access for VMsPass through disk access for VMs

Rapid creation and deployment of VMs using P2V, V2V, Media, TemplatesRapid creation and deployment of VMs using P2V, V2V, Media, Templates

AvailabilityAvailability Support for Quick Migration and unplanned downtimeSupport for Quick Migration and unplanned downtime

Support for Live Backups and VM checkpoints Support for Live Backups and VM checkpoints

Support for clustering and rapid recoverySupport for clustering and rapid recovery

Integration with management tools for continuous performance monitoring Integration with management tools for continuous performance monitoring

ManageabilityManageability Centralized view of all VMs in the environment and their statusCentralized view of all VMs in the environment and their status

Reports on consolidation candidates, utilization trending, optimization opportunitiesReports on consolidation candidates, utilization trending, optimization opportunities

Intelligent placement and Physical to Virtual (P2V) conversionsIntelligent placement and Physical to Virtual (P2V) conversions

Fully scriptable using PowerShellFully scriptable using PowerShell®®

Security Security Improved architecture with a minimal footprint hypervisor layerImproved architecture with a minimal footprint hypervisor layer

Hyper-V as a Server Core roleHyper-V as a Server Core role

Common security and driver model as Windows Server 2008Common security and driver model as Windows Server 2008

Robust networking features including support for VLANs and NATRobust networking features including support for VLANs and NAT

VirtualizationThe ability to virtualize workloads with few or no limitations as to what workloads can/may be virtualized.64-bit (x64) and hardware virtualization required

AMD AMD-V or Intel Virtualization Technology

32-bit (x86) & 64-bit (x64) child partitionsLarge memory support (>32GB) within VMsSMP supportPass-through disk access for VMsNew hardware sharing architecture (VSP/VSC)

Disk, networking, input, video

Robust networkingVLAN support, NAT, Quarantine

18

Provided by:Provided by:

OSOS

MS / MS / XenSource / XenSource / NovellNovellISV/IHV/OEMISV/IHV/OEM

Hyper-VHyper-V

Windows Hypervisor

“Designed for Windows” Server Hardware

Non hypervisor Non hypervisor aware OSaware OS

Windows Server 2003, Windows Server 2003, 20082008

Applications

WindowsWindowsKernelKernel VSCVSC

WindowsWindowsKernelKernel

Windows Server 2008Windows Server 2008

VSPVSP

VMBusVMBus EmulationEmulation

Parent Partition

Kernel ModeKernel Mode

User ModeUser Mode

Xen-enabledXen-enabledLinux KernelLinux Kernel Linux

VSCs

VMBus

Hypercall Adapter

ApplicationsApplications

Child Partitions

VMBusVMBus

Virtualization Stack

VMVMServiceService

WMI Provider VM WorkerProcess

ApplicationsApplications

19

Development Process

Secure Startup and shield up at install

Code integrity

Windows service hardening

Inbound and outbound firewall

Restart Manager

Improved auditing

Network Access Protection

Event Forwarding

Policy Based Networking

Server and Domain Isolation

Removable Device Installation Control

Active Directory Rights Management Services

Security Compliance

IntranetIntranet

Access requested

Health state sentto NPS (RADIUS)

NPS validates against health policy

If compliant, access granted

If not compliant,restricted network access and remediation

Microsoft Microsoft

NPSNPS

Corporate NetworkCorporate Network

Policy ServersPolicy Serverse.g.., Patch, AVe.g.., Patch, AV

DCHP, DCHP,

VPNVPN

Switch/Switch/

RouterRouter

RestrictedRestricted

NetworkNetwork

RemediatRemediat

ion ion

ServersServers

e.g., Patche.g., Patch

Not policy

compliant

Policy complian

t

11

33

55

44

11

33

44

55

22

22

Support for deploying Windows (all versions)Boots WinPE over PXE Use Windows Imaging (WIM) file formatExtensibleGranular Images ManagementLonghorn Server Specifics

MulticastTFTP download performance enhancementsEFI x64 network boot support

Perimeter Perimeter networknetwork

InternetInternet Corp LANCorp LAN

Exte

rnal

Fire

wal

lEx

tern

al F

irew

all

• Inte

rnal

Fire

wal

lIn

tern

al F

irew

all

HomeHome Terminal Terminal ServerServer

InternetInternet

TerminalTerminalServerServer

Terminal Services Terminal Services Gateway ServerGateway Server

E-mailE-mailServerServer

Business partner Business partner / client site/ client site

Roaming Roaming wirelesswireless

HotelHotel

Tunnels RDP Tunnels RDP over HTTPSover HTTPS

Tunnels RDP Tunnels RDP over HTTPSover HTTPS

Strips off Strips off RDP/HTTPSRDP/HTTPS

Strips off Strips off RDP/HTTPSRDP/HTTPS

RDP/SSL traffic RDP/SSL traffic passed to TSpassed to TS

RDP/SSL traffic RDP/SSL traffic passed to TSpassed to TS

Terminal Services Terminal Services Gateway ServerGateway Server

Remote Remote Desktop client Desktop client

requiredrequired

Remote Remote Desktop client Desktop client

requiredrequired

EasyPrint makes printing to a local printer, well, easy by exploiting XPSFour Registry entries let you dial up bandwidth allocation between the UI stuff (mouse, screen) and data transfer (printing, file transfer)WinFX means remoted graphics commands (which is way more exciting than it sounds)

Windows Vista set the stage…700+ new settings, ability to control things we never could before centrally (i.e. power save settings, device installation restrictions)Group policies no longer just a thread in Winlogon, but instead a separate serviceMeticulous step-by-step logging makes GP troubleshooting light-years easierPrinter/drive mapping via GPOPowerful new ADMX template format

Server 2008 rocks the house with…

Group Policy Preferences lets you create a do-it-yourself group policy setting out of, well, just about anything… with a few mouse clicksBuilt into Windows Server 2008 GPMCPart of the Desktop Standard acquisitionRemote Server Admin Tools (RSAT) delivered for Vista

Main Office Remote Site

FeaturesRead Only Active Directory DatabaseOnly allowed user passwords are stored on RODCUnidirectional ReplicationRole Separation

BenefitsIncreases security for remote Domain Controllers where physical security cannot be guaranteed

Support ADFS,DNS, DHCP, FRS V1, DFSR (FRS V2), Group Policy, IAS/VPN, DFS, SMS, ADSI queries, MOM

RODC

BranchBranchHubHub

Read Read

Only Only

DCDC

How RODC WorksHow RODC Works

Windows Windows

Server 2008 Server 2008

DCDC

11

22

33

44

5566

66

112233445566User logs on and authenticatesUser logs on and authenticatesRODC: Looks in DB: "I don't have the users RODC: Looks in DB: "I don't have the users

secretssecrets""

Forwards Request to Windows Server 2008 Forwards Request to Windows Server 2008

DCDC

Windows Server 2008 DC authenticates Windows Server 2008 DC authenticates

requestrequest

Returns authentication response and TGT Returns authentication response and TGT

back to the RODCback to the RODC

RODC gives TGT to User and RODC will RODC gives TGT to User and RODC will

cache credentialscache credentials

RODC

•Attacker PerspectiveAttacker PerspectiveHub Admin PerspectiveHub Admin Perspective

Efficient CommunicationsEfficient Communications Fast enterprise class search on clients and servers

Faster networking with new TCP/IP stack and native IPv6

Improved file-sharing performance over high-latency links

Integrated remote access to internal applications and resources

More Efficient ManagementMore Efficient ManagementSingle worldwide servicing model

Event forwarding between client and server

Faster and more reliable remote operating system deployments

Network Access Protection ensures health of connecting systems

Greater AvailabilityGreater AvailabilityScalable print servers with client-side rendering

Smooth offline experience with client-side caching

Transactional File System for file and registry operations

Policy-based Quality of Service to prioritize application bandwidth

For more information, please visit: www.microsoft.com/technet/subscriptionsFor more information, please visit: www.microsoft.com/technet/subscriptions

• All the benefits of TechNet Plus for 30% less, All the benefits of TechNet Plus for 30% less,

• TechNet Plus Direct subscribers receive…TechNet Plus Direct subscribers receive…

• Online Benefits Portal – New!Online Benefits Portal – New!

• Immediate download access: software and betas – New!Immediate download access: software and betas – New!

• 2 free Professional Support Incidents2 free Professional Support Incidents

• Managed Newsgroups and Online ConciergeManaged Newsgroups and Online Concierge

• The TechNet Library containing the KB, security updates, service The TechNet Library containing the KB, security updates, service

packs, resource kits, and morepacks, resource kits, and more

TechNet Plus Direct is available exclusively online without media shipmentsTechNet Plus Direct is available exclusively online without media shipments

Available Now!

Available Now!