Windows Small Business Server 2008: Remote Access and Computer Management
My notes from today’s Microsoft Partner Program webcast…
Self-Issued vs. Third Party certificates
- SBS2008 creates a self-issued certificate that can be used.
- Clients and computers have to install this certificate in order to trust it.
- 3rd-party certificates are easier to implement and manager. They are not more or less secure, but they’re easier to use. They have become very inexpensive.
- Fix My Network wizard will automate updating the Root Certificate
- “Add a Trusted Certificate Wizard” will automatically generate and give you a certificate request hash.
- Installing trusted certificate on client computers
- From a domain-joined computer, go to \\sites\public\downloads and download/extract “Install Certificate Package.zip”
- From a non-domain joined computer, download “Install Certificate Package.zip” and copy to a USB key or CD
- This package will also deploy your certificate to mobile devices via ActiveSync
Remote Web Workplace
- Available to members of Remote Web Workplace group
- RDP client has to be version 6.0 or later
- SBS ports 80, 443, 987, and 3389 must be open on the server firewall
- Ports 80, 443, and 987 must be open and forwarded to SBS server
- Terminal Services gateway is now used instead of clients directly connecting to port 3389
- Access at http://remote.<public-domain-name>
- Customizable features:
- RWW user access
- RWW sign-in page
- RWW home page
- Check email
- Connect to computer
- Internal web site (SharePoint)
- Change password
- Organizational links
- Administration links
Terminal Services Gateway
- User outside network connects to port 443.
- Server verifies SSL certificate and then creates Connection Authorization Policy (CAP)
- Server creates Resource Allocation Policy (RAP) that allows you to connect to other servers in the environment
- Connections out to the other machines still go out, internally, through port 3389
Mobile Device Support
- Exchange ActiveSync (EAS)
- Devices support: Windows Mobile 5.0 (with Messaging and Security Feature Pack) or higher
- Direct push
- Device security policy enforcement
- Remove device wipe
- For remote access, use remote.<public-domain-name>
- SPAddCert.exe allows you to add certificates to: Windows Mobile 5.0, Windows Mobile 2003, or Windows Mobile 2002
- On Windows Mobile 5, download “Install Certificate Package.zip”
- Not configured by default
- Microsoft feels that you really should use Remote Web Workplace
- Wizard is provided to turn on VPN
- Check application compatibility
- Check for latest BIOS
- Check drivers are up to date
- Make sure all Windows updates and service packs are in place
- Network configured properly
- Local administrator password is set and documented
Connecting client computers
- From IE go to http://connect
- There is also a “Connect Computer Wizard” that can be run from a USB drive
- You can also have users manually join the domain
- The Wizard will ask if you are setting up for yourself or setting up for others.
- Client Advisor utility checks that you have patches, .NET Framework 2, RDP 6, etc.
- Can move profile data
Managing Client Computers
- From the SBS Console, you can open the properties for a client computer and assign who is a local administrator on the machine, and who can remotely access the machine.
- Can offer remote assistance from the SBS console
Redirecting User’s Folders
- Applies GPO to redirect
- 2GB default storage quota
- Can modify whether this happens
Enabling Client-side Faxing
- Available in Windows Vista editions
- Faxing capabilities
- Scanning capabilities
- Users must be a member of the Windows SBS Fax Users group
Backup in Windows Server 2008 was rewritten from scratch.
Performs block level backup using VSS.
Users volume snapshots.
Stores incremental, restores full.
You can select what to backup at the volume level. Everything on the system drive is always selected.
Simplified restoration and operating system recovery. You can recover the whole server from any of the incremental backups.
Wbadmin command-line tool.
Configure backup performance.
No negative performance on the server while the backup is running. Allows you to take a higher number of backups during the day (more restore points to go back to)
Supported backup hardware:
- External hard disks: USB 2.0 or IEEE 1394
- Internal hard disks (as long as they don’t store data)
- Removable media drives
- Backup disks are formatted and must be exclusively used for backup.
- Rotate multiple disks (the wizards keep track of these for you).
- Use disks with 2.5 times the storage capacity of backup items.
Windows Recovery Environment (WinRe)
- Launch on-disk using F8
- Relies on Windows boot manager and boot loader
Manual diagnosis and repair
- Startup repair
- System restore
- Windows backup disaster recovery
- Command prompt (Regedit, ChkDsk)
- You can restore to dissimilar hardware, but the processor architecture on both machines must match
You can perform a full server restore by inserting your SBS 2008 installation DVD and choosing “Repair your Computer”. It can read off the USB disk and recover the whole server. COOL!!!!
SBS uses a plug-in to Windows Server Backup to back up Exchange. This is unique to SBS/EBS. It also backs up SharePoint. Users CAN recover Exchange or SharePoint separately from the rest of the system. Note that Exchange recovery is on the entire store (not block level).
Follow comments to this post through RSS 2.0.
Both comments and pings are currently closed.
Book Review: "Small Business Server 2008 – Installation, Migration, and Configuration" by David Overton
about 3 years ago - 3 comments
If you’ve been following my blog for a while, you know that I’m a big fan of Small Business Server, and that I have written quite a few blog posts (mainly around the RTM period) about Windows Small Business Server 2008. I was recently contacted by Packt Publishing to see if I’d be interested in…
about 4 years ago - Comments Off
Join us live for "The Dream Server" launch today at noon. Right here, or (if you don’t see the video below) go to http://infoetc.com/dreamserver Microsoft is launching Windows Small Business Server 2008 and Windows Essential Server 2008. Join us for this live launch webcast to learn all about these exciting new products. This syndication of…
about 4 years ago - 4 comments
My notes from today’s Microsoft Partner Program webcast… SBS2008 Premium edition includes everything in SBS2008 plus another copy of Windows Server 2008 Standard, and a copy of Microsoft SQL Server 2008 Standard Edition. When SBS2003 was first released, it included SQL Server 2000 Standard Edition. In SBS2003 R2, SQL Server 2005 Workgroup Edition was included…
about 4 years ago - 1 comment
My notes from today’s Microsoft Partner Program webcast… Messaging: Exchange Server 2007 Internet Address Management Wizard (IAMW) Configures SMTP Configures SMTP Connectors Configures self-issued certificates for encrypted email Configure Internet Mil Wizard Where you configure smart host (supports authentication Configuring the POP3 Connector Unique to Small Business Server On a scheduled basis, will download mail…
about 4 years ago - Comments Off
My notes from today’s Microsoft Partner Program webcast on SBS2008… Managing with the Windows SBS Console On the home tab, you will see: Task Pad Finish Installation Connect to the Internet Protect your data Add users, computers, and devices Grow your business Set up your Microsoft Office Live Small Business Web sites Network Essentials Summary: …
about 4 years ago - 122 comments
Some notes from today’s Microsoft Partner Program webcast on SBS2008 migration… Solutions Pathway Microsoft is providing an easy way to figure out what the licensing scenarios may be for you: http://www.microsoft.com/windowsserver/essential/pathway.mspx Shows you supported scenarios and the discount that will be applied. Preparing the network for migration Migration highlights: 21-day grace period to complete the…
about 4 years ago - Comments Off
Hooray! The SBS team signed off on the bits for Windows Small Business Server 2008 this morning, so SBS2008 has officially RTM’ed. It’s “in the machine” now, as they say. More information from the Small Business Server blog Read more posts from John R. Pattison about Windows Small Business Server 2008
about 4 years ago - 23 comments
My notes from today’s Microsoft Partner Program webcast… Requirements Requirements for primary server Processor 64-bit only, 2GHz minimum, maximum of 4 physical sockets (no limit on the number of cores) Memory 4GB RAM minimum. 32GB RAM maximum. OS Drive Partition 60GB minimum. DVD-ROM Bootable from system BIOS Network Adapter 1 x 100Mbps Ethernet adapteber Monitor…
about 4 years ago - 6 comments
I thought it would be beneficial to post an overview post on SBS2008, to fill anyone in on the new product offerings that Microsoft is bringing to market. Microsoft Small Business Server is growing up! Microsoft is introducing a new LINE of servers under the “Essential Business Solutions” umbrella: Windows Small Business Server 2008 (SBS2008)…
about 4 years ago - 1 comment
Windows Small Business server is just around the corner, and we’re gearing up for upgrades. We have a number of customers who have already expressed interest in upgrading from SBS 2003 to SBS 2008. In particular, customers are excited about Microsoft Exchange Server 2007, which brings a lot of great improvements, such as the improved…
Comments are closed.