Marcelo Sincic Consultor e instrutor msincic@green.com.br

Transcription

1 Marcelo Sincic Consultor e instrutor msincic@green.com.br

2 Marcelo Sincic Consultor / Instrutor msincic@uol.com.br blog:

3 Microsoft como CPLS - Certified Partner Learning Solutions (antigo CTEC) Mais de 130 mil alunos treinados Há mais de 20 anos atuando em Treinamentos de Informática Mais de empresas clientes Localização Privilegiada Av. Paulista Centro de Testes Prometric

4 NAP FSRM Hyper-V Preferences e AppLocker BranchCache DirectAccess TS-RemoteApp

5 VPN Server Active Directory IEEE 802.1X Devices Internet Perimeter Network DHCP Server Health Registration Authority Intranet NAP Health Policy Server Remediation Servers Restricted Network NAP Client with limited access

6 System Health Updates Remediation Server HRA RADIUS Messages Health Requirement Server System Health Requirement Queries DHCP Server NAP Client NAP Health Policy Server VPN Server IEEE 802.1X Network Access Devices

7 Marcelo Sincic Consultor e instrutor msincic@green.com.br

8 File Server Resource Manager is a File Services role that integrates: Capacity Management Monitors usage patterns and utilization levels Policy Management Quota Management Restricts unauthorized files (file screening) Controls the amount of space used for a volume, folder, or share Reports Provides extensive storage reports

9

10 Limiting storage space via a hard or soft quota and generating notifications when the limits are approached or exceeded Notification thresholds can be configured to: Send notifications Log an event Run a command or script Generate storage reports

11 Quota Features Quota Tracking Disk Usage Calculation Notification Mechanisms NTFS Disk Quotas Per user/per volume Logical file size Event logs only FSRM Quotas By folder or by volume Actual disk space , custom reports, command execution, event logs

12 You can monitor quota usage by: Viewing quota information Generating a Quota Usage report Creating soft quotas Quotas typically have an I/O performance overhead of 10 percent or less

13 Provides a flexible method to control the types of files that are saved on company servers The File Screening Management node allows you to: Create file screens Define file screen templates Create file screen exceptions Create file groups

14 A file screen template defines: Which file groups to block The type of screening to perform A set of notifications to be generated

15 Marcelo Sincic Consultor e instrutor msincic@green.com.br

16 2 3 AD DS 1 Request document security AD RMS Request access to document 4 Send protected file Content Creator Content Consumer

17 3 SQL Server Active Directory Domain Controller AD RMS Server RMS-enabled Application Information Author Recipient

18 Action Application Features Protect Sensitive Files Microsoft Office: Word Excel PowerPoint Set rights (View, Change, Print) Set validity period Do-Not-Forward/Print Microsoft Office Outlook Help protect sensitive from being sent to the Internet Help protect confidential from being taken outside of the company Help Safeguard Intranet Content Internet Explorer Microsoft Office SharePoint Services Help safeguard intranet content by restricting access to: View Change Print Identity Federation Support All RMS-enabled applications Help safeguard data across AD FS trusts

19 Server Role Active Directory Domain Services (AD DS) Active Directory Lightweight Directory Services (AD LDS) Active Directory Certificate Services (AD CS) Active Directory Rights Management Services (AD RMS) Active Directory Federation Services (AD FS) Description A centralized directory for user and computer management and authentication for a Windows Server 2008 network An LDAP directory service that provides flexible support for directory-enabled applications, without the restrictions of Active AD DS A solution used to protect information stored in documents, messages, and Web sites from unauthorized viewing, modification, or use An information-protection technology that works with AD RMS-enabled applications to help safeguard digital information from unauthorized use A server role in Windows Server 2008 that provides Web SSO technologies to authenticate a user to multiple Web applications over the life of a single online session

20 Without Virtualization With Virtualization With Microsoft s Virtualization Solution Applications installed to Specific hardware and OS Interface bound to process Operating System assigned to specific hardware Storage assigned to specific locations Network assigned to specific locations Virtual Applications Any application on any computer on-demand Virtual Presentation Presentation layer separate from process Virtual Machine OS can be assigned to any desktop or server Virtual Storage Storage and backup over the network Virtual Network Localizing dispersed resources Infrastructure Management Licensing Interoperability Support

21 Server Virtualization Presentation Virtualization Management Desktop Virtualization Application Virtualization

22 Challenges: Underutilized hardware Excessive power consumption Expensive space across data Center or branch office Server Virtualization Solution: Server consolidation through virtualization and physical and virtual machine management Case Study: AtlantiCare Eliminated need to expand or relocate data center Virtual Server 2005 used to consolidate infrastructure and legacy application servers Consolidation ratio achieved of 33:2

23 Infrastructure Applications Management Interoperability Licensing Virtual Server 2005 and Windows Server 2003 make cost effective virtualization combo Windows Server virtualization is a component of Windows Server Longhorn Accelerate deployment Reduce the cost of supporting applications Turn applications into dynamic, real-time services Ease consolidation onto virtual infrastructure Better utilize management resources Free up IT spend Heterogeneous support for Linux VHD Open Specifications Promise Standards Efforts DMTF: Standard APIs for VM management PCI-SIG: Standards for I/O virtualization Instance based licensing for Windows Server Unlimited instances with Windows Server Data Center Edition and SQL Server Enterprise Edition Support

24 Marcelo Sincic Consultor e instrutor msincic@green.com.br

25 Permite configurar todas as partes do desktop do usuário Configura impressoras Criar e manipular arquivos Configurar o registry Outros...

26 Permite a definição de quais programas podem rodar na máquina As regras podem ser definida por caminho, certificado, nome, etc

27 Marcelo Sincic Consultor e instrutor msincic@green.com.br

28

29

30 Marcelo Sincic Consultor e instrutor msincic@green.com.br

31

32

33

34 Marcelo Sincic Consultor e instrutor msincic@green.com.br

35

36

37 Marcelo Sincic Consultor e instrutor msincic@green.com.br

38 Visite o TechNet em: Treinamentos oficias (MOC): TS:Windows 2008 Active Directory (3 cursos) TS:Windows 2008:Network Infrastructure (2 cursos) Updating your Network Infrastructure and Active Directory Technology Skills to Windows Server Installing and Configuring Windows 7 Client Novo 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.