Microsoft Virtualization. Master Microsoft Server, Desktop, Application, and Presentation Virtualization

Transcription

1 Microsoft Virtualizatio Master Microsoft Server, Desktop, Applicatio, ad Presetatio Virtualizatio

2

3 Microsoft Virtualizatio Master Microsoft Server, Desktop, Applicatio, ad Presetatio Virtualizatio Thomas Olzak Jaso Boomer Robert M. Keefer James Sabovik Keeth Majors, Techical Editor AMSTERDAM BOSTON HEIDELBERG LONDON NEW YORK OXFORD PARIS SAN DIEGO SAN FRANCISCO SINGAPORE SYDNEY TOKYO Sygress is a imprit of Elsevier

4 Sygress is a imprit of Elsevier 30 Corporate Drive, Suite 400, Burligto, MA 01803, USA Liacre House, Jorda Hill, Oxford OX2 8DP, UK Microsoft Virtualizatio: Master Microsoft Server, Desktop, Applicatio, ad Presetatio Virtualizatio # 2010 ELSEVIER Ic. All rights reserved. No part of this publicatio may be reproduced or trasmitted i ay form or by ay meas, electroic or mechaical, icludig photocopyig, recordig, or ay iformatio storage ad retrieval system, without permissio i writig from the publisher. Details o how to seek permissio, further iformatio about the Publisher s permissios policies ad our arragemets with orgaizatios such as the Copyright Clearace Ceter ad the Copyright Licesig Agecy, ca be foud at our website: This book ad the idividual cotributios cotaied i it are protected uder copyright by the Publisher (other tha as may be oted herei). Notices Kowledge ad best practice i this field are costatly chagig. As ew research ad experiece broade our uderstadig, chages i research methods, professioal practices, or medical treatmet may become ecessary. Practitioers ad researchers must always rely o their ow experiece ad kowledge i evaluatig ad usig ay iformatio, methods, compouds, or experimets described herei. I usig such iformatio or methods they should be midful of their ow safety ad the safety of others, icludig parties for whom they have a professioal resposibility. To the fullest extet of the law, either the Publisher or the authors, cotributors, or editors, assume ay liability for ay ijury ad/or damage to persos or property as a matter of products liability, egligece or otherwise, or from ay use or operatio of ay methods, products, istructios, or ideas cotaied i the material herei. Library of Cogress Catalogig-i-Publicatio Data Applicatio submitted British Library Cataloguig-i-Publicatio Data A catalogue record for this book is available from the British Library. ISBN: Prited i the Uited States of America Elsevier Ic., the author(s), ad ay perso or firm ivolved i the writig, editig, or productio (collectively Makers ) of this book ( the Work ) do ot guaratee or warrat the results to be obtaied from the Work. For iformatio o rights, traslatios, ad bulk sales, cotact Matt Pederse, Commercial Sales Director ad Rights; [email protected] For iformatio o all Sygress publicatios visit our Web site at

5 Ackowledgmets The authors ackowledge Pomeroy IT Solutios ad CDW for supplyig the hardware used i the writig of this book, ad Adrew Page of Microsoft for providig techical validatio of the Microsoft Virtualizatio products. v

6

7 Cotets Ackowledgmets v About the Authors xv Itroductio xvii CHAPTER 1 What is virtualizatio?... 1 Evolutio of virtualizatio...1 Virtualizatio defied...3 How virtualizatio works...3 Server virtualizatio...4 Cliet virtualizatio...5 Buildig a busiess case for virtualizatio...6 Virtualizatio ad busiess cotiuity...9 The other side of virtualizatio...10 Fially, drop the hammer Summary...12 CHAPTER 2 Uderstadig Microsoft virtualizatio strategies Microsoft s IT maturity model...14 Buildig a dyamic dataceter...16 Virtualizatio layers i a dyamic dataceter Hardware virtualizatio layer Applicatio virtualizatio layer Cetralized, optimized desktop maagemet Applicatio ad presetatio virtualizatio Desktop hardware virtualizatio Additioal tools Summary...26 CHAPTER 3 Istallig Widows Server 2008 ad Hyper-V Widows Server 2008 ad server core...29 Istallatio requiremets for Hyper-V...30 Hardware requiremets for Hyper-V Software requiremets for Hyper-V Supported guests o Hyper-V...31 Istallig Hyper-V...31 Istallig the Hyper-V maagemet cosole o a workstatio...33 Bitlocker ad Hyper-V...36 Summary...37 vii

8 viii Cotets CHAPTER 4 Maagig Hyper-V Itroductio to the Hyper-V Maager sap-i...39 Virtual etworks...40 Cofigurig Hyper-V optios...44 Cofigurig virtual machie optios...53 Summary...59 CHAPTER 5 Istallig ad cofigurig Virtual Machie Maager Itroductio to virtual machie maager...61 System requiremets...62 Acquirig ad istallig VMM...62 Cofigurig VMM for your eviromet...87 Summary CHAPTER 6 Hyper-V ad high availability Overview of clusterig cocepts Microsoft fail-over cluster ad etwork load balacig Defiig HA for Hyper-V Makig virtual machies available Makig virtual machie services available Thigs to cosider Summary CHAPTER 7 Creatig virtual machies ad templates Creatig your first virtual machie Coectig to a virtual machie ad basic Hyper-V commads What is a virtual machie template? Creatig your first virtual machie template Usig a template to create a ew virtual machie Summary CHAPTER 8 Performig physical-to-virtual ad virtual-to-virtual migratios Hyper-V migratios Microsoft exchage server Microsoft SQL Server Microsoft SharePoit techologies Migratio scearios Migratig physical to virtual Physical to virtual System Ceter Virtual Machie Maager 2008 (VMM2008) Migratig virtual to virtual Summary

9 Cotets ix CHAPTER 9 Securig, moitorig, ad maagig a virtual ifrastructure Securig the Hyper-V Host Server Core istallatio cosideratios Network ad domai cosideratios Securig the virtual machies Bitlocker drive ecryptio Syskey.exe Widows Firewall Auditig Desigig your virtual etwork Moitorig ad other cosideratios Summary CHAPTER 10 Creatig a dyamic data ceter with Microsoft System Ceter Data ceter workload Hardware optimizatio Legacy applicatios Isolated eviromets Hardware cosolidatio Approach #1: Clusterig Approach #2: Clusterig with virtualizatio Software migratio Easier test eviromets Summary CHAPTER 11 Applicatio virtualizatio (App-V) What is applicatio virtualizatio? Applicatio Virtualizatio Maagemet Server Applicatio Virtualizatio Streamig Server App-V modes Stad-aloe mode Streamig mode System requiremets Istallatio Istallig the.net framework Istallig SQL Cofigurig IIS Istallig the App-V Maagemet Server Istallig the App-V Streamig Server Summary

10 x Cotets CHAPTER 12 Deployig App-V packages What is a App-V package? Applicatio Virtualizatio Sequecer Applicatio Virtualizatio Cliet System requiremets App-V Cliet requiremets Istallig the App-V Sequecer Istallig the App-V Desktop Cliet Creatig a App-V package Publishig the App-V package Streamig the App-V package Applicatio streamig with Maagemet Servers New features i App-V AutoLoad packages Applicatio streamig with Streamig Servers Applicatio streamig with File Servers Applicatio streamig with IIS Stad-aloe mode with MSI Streamig mode with MSI Summary CHAPTER 13 Presetatio virtualizatio (Termial Services) Itroductio to presetatio virtualizatio The five Widows Server 2008 Termial Services role services Termial Server TS Licesig TS Sessio Broker TS Gateway TS Web Access Istallig the Termial Services Termial Server role Coectig to a Widows remote desktop Summary CHAPTER 14 Itegratig applicatio ad presetatio virtualizatio (Termial Services) Cofigurig TS RemoteApp Distributig RemoteApp Program Files Creatig ad distributig a Widows Istaller package Creatig ad distributig a Remote Desktop Protocol File Istallig the TS Web Access role service

11 Cotets xi Access a Web published remote applicatio Summary CHAPTER 15 Desktop virtualizatio Virtual PC ad XP mode Istallig ad usig Microsoft Virtual PC 2007 SP Creatig a virtual machie i Virtual PC Istallig Widows Virtual PC ad XP mode Istallatio ad cofiguratio of XP mode Itroductio to MED-V MED-V server istallatio MED-V Cliet ad Maagemet Applicatio Istallatio Creatig a Virtual Machie Image Creatig a MED-V image Summary APPENDIX A Migratig virtual machies from Virtual Server APPENDIX B Case studies The case of the uexpected upgrade The case of migratig a legacy hardware platform to App-V or Hyper-V The case of supportig a large applicatio i a widespread orgaizatio The case of maagig a growig Data Ceter The case of limited capacity APPENDIX C Widows Server 2008 R2 Delta Chages Itroductio Networkig chages DirectAccess BrachCache VPN Recoect DNS cache lockig DNS Security Extesios Firewall profiles per etwork coectio Active Directory chages AD Recycle Bi Offlie Domai Joi AD Best Practices Aalyzer AD Web services Maaged Service Accouts

12 xii Cotets AD Admiistrative Ceter AD Module for PowerShell Read-Oly SYSVOL for Read-Oly Domai Cotrollers File ad prit services chages Read-Oly DFSR Replicas File Classificatio Ifrastructure Prit driver isolatio Network Scaer Maagemet Iteret Iformatio Server (IIS) Chages Request Filterig Module Best Practices Aalyzer PowerShell module Support for Maaged Service Accouts Hostable Web Core NET support o server core istalls Hyper-V Chages Live Migratio Processor Ehacemets Storage Ehacemets Remote Desktop Services (formerly kow as Termial Services) chages Remote Desktop Sessio Host Remote Desktop Virtualizatio Host RemoteApp ad Desktop Coectio Remote Desktop Coectio Broker Remote Desktop Gateway Remote Desktop Web Access Remote Desktop Cliet experiece Remote Desktop Services PowerShell Module ad Best Practice Aalyzer (BPA) High availability ad recovery chages Fail-over cluster PowerShell Support Cluster Shared Volumes Improved Cluster Validatio Support for Additioal Cluster Aware Services Ability to Back up Idividual Files ad Folders Security Chages DNSSEC Support AppLocker Chages to Network Access Protectio

13 Cotets xiii Maaged Service Accouts New Security Auditig Features Powershell chages Itegrated Scriptig Eviromet ad Debugger Backgroud Jobs Trasactios Cmdlets for server admiistratio Summary Idex...479

14

15 About the Authors Thomas Olzak is a IT professioal with over 26 years of experiece i programmig, etwork egieerig, ad security. He has a MBA ad is a CISSP. He is curretly the director of iformatio security at HCR MaorCare, a Ohio-based leadig provider of short- ad log-term medical ad rehabilitatio care with more tha 500 locatios i 32 states. At HCR MaorCare, he is resposible for maagig the corporate security program, chage maagemet, ad busiess cotiuity plaig. He is also the CEO of a security traiig compay. Prior to his curret job, he held positios as a etwork ad server egieer, director of ifrastructure egieerig, director of techical operatios, ad programmig maager at a variety of maufacturig ad distributio compaies. Before joiig the private sector, he served 10 years i the Uited States Army Military Police with 4 years as a military police ivestigator. He has writte a book, Just Eough Security, ad various papers o security maagemet. Jaso Boomer is a seior etwork egieer with HCR MaorCare. He curretly provides seior-level strategic ad techical support for all Microsoft Server ad Cliet devices i the HCR MaorCare eterprise. His specialties iclude server- ad cliet-side automatio solutios; Active Directory desig, implemetatio, ad support; applicatio packagig ad deploymet; ad operatig system deploymet automatio. Jaso s backgroud icludes positios as seior techical cosultat for Pomeroy IT Solutios, as a seior system admiistrator for La-Z-Boy Icorporate, as a seior systems egieer for Sequoia, ad as a seior systems egieer at IaCom. Robert M. Keefer (MCSA þ Messagig, MCSE Widows Server 2003, Securityþ, C EH) is a security aalyst for HCR MaorCare. He curretly works to maitai ad improve the security stace of the compay by idetifyig ad ivestigatig issues, reviewig ad recommedig ew products, ad moitorig systems for policy violatios as well as performig risk assessmets ad peetratio tests. His specialities are i vulerability assessmet ad ethical hackig. Robert s backgroud icludes positios i IS maagemet ad as a seior etwork egieer for a systems itegrator i A Arbor, MI. He curretly resides i southeast Michiga. James Sabovik is the maager of productio operatios at HCR MaorCare, where he has also served as the maager of etwork egieerig ad database admiistratio. He is a IT vetera with more tha 15 years of experiece, icludig desigig, deployig, ad maitaiig such thigs as Active Directory, Exchage, ad server ad etwork ifrastructures. I additio, he has maaged teams of egieers resposible for more tha 600 servers, both physical ad virtual, ad 15,000 cliet devices spread out across the majority of the Uited States. James holds a bachelor s degree i computer ad iformatio sciece from Ohio State Uiversity s College of Egieerig. xv

16 xvi About the Authors TECHNICAL EDITOR Keeth Majors (MCSE, MCITP, ITIL v3, Projectþ, VMware VCP, Citrix CCEA, CCA) is a vice presidet of systems architecture for Choice Solutios LLC, a systems itegrator headquartered i Overlad Park, KS. Choice Solutios provides IT desig, project maagemet, ad support for eterprise computig systems. He is a key cotributor to defiig best practices for Microsoft techologies, icludig Widows Server, Hyper-V, ad Systems Ceter; Citrix XeApp, XeServer, ad XeDesktop; VMware vsphere ad View; ad developmet of documetatio stadards. He develops techology solutios ad methodologies focused o improvig cliet busiess processes. These techology solutios touch every part of a system s life cycle from assessmet, blueprit, costruct, ad deploymet o projects to operatioal maagemet ad strategic plaig for the busiess process. Keeth holds a bachelor s degree from Colorado Techical Uiversity. He curretly resides i Olathe, KS, with his lovig ad supportive wife, Sady, ad ear their daughter, Tabitha, ad their gradsos, Wesley ( Peaut ) ad Austi. Their so, Keith, is curretly o active duty with the US Navy.

17 Itroductio The itetio of this book is to provide a thorough referece for those cosiderig a migratio ito the virtualized world. The majority of our target readers will likely be seasoed system admiistrators ad egieers who grew up i ad still maage primarily a hardware-based server eviromet cotaiig a large assortmet of both ewer ad legacy applicatios. As much as we attempt to outlie the graularities of Microsoft virtualizatio as a whole, doe properly, the combiatios ad possibilities are truly edless. The IS world is earig, ad i some cases, has already passed the poit of o retur whe it comes to large-scale virtualizatio implemetatios. Virtualizatio has evolved from somethig fu for ultra-geeks to play with i their spare time, to a solid developmet tool widely used by everybody from high-school studets to goliath software developmet compaies. The ievitable result of this evolutio is a ew way of lookig at eterprise maagemet, for ot oly the dataceter but also all of the compoets used by IS to provide the solutios required by the busiess it supports. The stigma oce placed o the use of virtualizatio by idustry leaders is dimiishig, ad rightly so. We stress throughout the book the importace of proper research ad documetatio. These are two terms commo to the IS world, but rarely used properly. Failure to fully research, uderstad, ad documet your virtualizatio strategy ca easily tur what should be a ejoyable ad very successful trasformatio ito a ightmare for all ivolved. We cover the broad spectrum of Microsoft virtualizatio i a way that will help the IS professioal begi usig virtualizatio i both theory ad practice. Whether you are just begiig your IS career, or you are a seasoed professioal, we hope you fid this book useful i ot oly uderstadig the techology itself but also i learig how to best prepare to use the techology i everythig from a small home-based test lab to a large eterprise productio eviromet. We kew from the begiig that this book would be writte to target our fellow IS peers. The majority of the topics i this book focus o the use of virtualizatio i day-to-day operatios of a eterprise-level IS orgaizatio. We do ot sell Microsoft virtualizatio as the silver bullet to cure all of your IS problems; however, we do feel that the proper use of its collective techologies ca help to alleviate a high amout of iadequacies that plague a large umber of data ceters today. From the small family-owed busiesses to the largest of mega corporatios, there is a aspect of virtualizatio that ca help you to become a more successful IS professioal. Whether it be somethig as simple as usig Disk2VHD to create a backup of a office computer for use i the evet of a uforesee disaster, or somethig as complex as the full implemetatio of Microsoft System Ceter as the framework for maagig thousads of servers, there are beefits to researchig the use of virtualizatio i your eviromet. xvii

18 xviii Itroductio The true beefits of virtualizatio are ofte uderappreciated, ad i some cases, ot obvious at all to aybody outside of the techical professioal who implemets ad maages it. This ca make the adoptio of virtualizatio a hard sell to those resposible for maagig costs. We discuss this topic at legth i a effort to provide some tools that the IS professioal ca use to promote the implemetatio of virtualizatio through the beefit of icreased efficiecy ad life cycle cost savigs. Usig this book as a referece, you ca begi your dive ito the world of virtualizatio ad start to uderstad the beefits that it may provide for your eviromet. The book will provide you the tools ad explaatios eeded to allow you to create a fresh virtualizatio eviromet. We will walk you through step-by-step istructios o everythig from buildig a Widows 2008 server to istallig ad cofigurig Hyper-V ad App-V. We provide examples of how to publish applicatios i various cofiguratios, as well as detailed explaatios o how to migrate existig servers ito the virtual world, but we will ot be able to show you how to cofigure your eviromet. Every virtualizatio eviromet will be differet. A properly built virtualizatio strategy must take ito accout everythig from the way you cofigure ad maage your servers to how your compay does busiess. Be wary of aybody who promises a shrik-wrapped, plug-ad-play virtualizatio desig for your compay; you must embrace the process of movig ito the virtual world, ad you must be prepared to dig i ad ask the questios that others may be afraid to ask or simply ot kow whom to ask. Virtualizatio techology is truly awe ispirig, which is likely oe of its ow biggest eemies. Before virtualizatio became a maistream techology, it was much easier for maagers ad others resposible for budgets to uderstad the cost of a data ceter, but the days of easily comparig the umber of physical servers with the umber of applicatios or users is quickly becomig a thig of the past. As this evolutio cotiues, you will begi to see budget decisio makers become more ad more depedet o their IS staff to provide reliable iformatio. Be thorough ad cocise, ad uderstad that others will ot likely be able to comprehed the true ature of a virtualized eviromet as you will. Here is a quick outlie of each chapter. Chapter 1: Itroductio to Virtualizatio I this chapter, we discuss the basics of virtualizatio that every IS professioal ad their maagemet should uderstad before jumpig i head first. We talk about the role of virtualizatio i the chagig ladscape of the traditioal data ceter ad its beefits. Chapter 2: Uderstadig Microsoft Virtualizatio Strategies I this chapter, we discuss the strategies of virtualizatio, ad how to begi your approach. We talk about chagig the data ceter from its traditioal cost ceter to a true asset. We touch o the defiitios commo to ay virtualizatio discussio ad explai how virtualizatio exteds far beyod the walls of the data ceter. Chapter 3: Istallig Widows 2008 Server Core ad Hyper-V I this chapter, we cover the step-by-step process used to build a Widows 2008 server, whether you choose the traditioal GUI method or the ewer commad lie (GUI-less) core-istall. With the

19 Itroductio xix operatig system istalled, we explai the steps take to istall Hyper-V ad get it ready for use. Chapter 4: Maagig Hyper-V I this chapter, we dive ito the process of cofigurig ad maagig a Hyper-V ifrastructure. We examie the various tools icluded i Hyper- V ad how they ca beefit you. We cover the cofiguratio ad use of virtual etworks, ad why you would wat to cofigure them i differet modes. Ad we discuss the differet disk modes available i Hyper-V. Chapter 5: Istallig ad cofigurig Virtual Machie Maager 2008 I this chapter, we talk about Virtual Machie Maager (VMM) ad all of the uderrated fuctioality it provides. We discuss proper VMM library structure ad Hyper-V cosoles that ca be istalled ad used o oserver operatig systems. Chapter 6: Hyper-V ad High Availability I this chapter, we discuss oe of the most highly discussed topics associated with the use of virtualizatio Microsoft s approach to high availability ad how the proper combiatio of Microsoft tools ca be put together i order to provide a very reliable ad highly available virtualizatio ifrastructure. Chapter 7: Creatig Virtual Machies ad Templates I this chapter, we explai virtual machies ad how to best create them. We discuss the importace of proper plaig specific to this fuctioality, ad why you will wat to be especially careful whe creatig virtual machies ad templates. Chapter 8: Performig Physical-to-Virtual ad Virtual-to-Virtual Migratios I this chapter, we discuss the most refereced ad talked about fuctio of virtualizatio; amely, the migratio of physical servers to virtual servers. We talk about the best practices, the importace of vedor support, ad how to prepare for the migratio itself. Chapter 9: Securig, Moitorig, ad Maagig a Virtual Ifrastructure I this chapter, we discuss the methods you will wat to uderstad i securig ad maagig your Hyper-V eviromet. We cover the varyig opiios regardig the eed for security withi the Hyper-V eviromet, ad how you should approach researchig ad applyig this security i your data ceter. Chapter 10: Creatig a Dyamic Data Ceter with Microsoft System Ceter I this chapter, we discuss the Dyamic Data Ceter cocept ad how you ca get there usig the Microsoft System Ceter suite of tools ad cocepts. We revisit the importace of proper plaig ad research ad discuss how virtualizatio for the sake of virtualizig is a bad idea. Chapter 11: Applicatio Virtualizatio I this chapter, we go ito graular detail of settig up a applicatio virtualizatio platform. From the step-by-step build of the server itself, to uderstadig the prerequisites of your App-V farm. Chapter 12: Deployig App-V Packages I this chapter, we demostrate the ease of creatig ad publishig a virtual applicatio withi App-V. We talk about the differet optios available whe publishig a applicatio ad how the differet optios might apply to differet scearios. Chapter 13: Presetatio Virtualizatio (Termial Services) I this chapter, we discuss the highly reovated Microsoft Termial Services ad how this ewer geeratio ca

20 xx Itroductio provide more efficiet traditioal use, as well as ew fuctioality that may have otherwise goe uoticed. We discuss the Termial Services role i detail ad provide some isight ito how it may help you with maagig your data ceter. Chapter 14: Itegratig Applicatio ad Presetatio Virtualizatio I this chapter, we discuss the ew RemoteApp fuctio available withi the latest geeratio of Termial Services. We talk about how RemoteApp ca be used i associatio with Web Access to provide access to applicatios across the Iteret. Chapter 15: Desktop Virtualizatio I this chapter, we coclude the book with a discussio of desktop virtualizatio ad all of the potetial it provides for a much more streamlied ad efficiet eterprise ladscape of tomorrow. We explai how the techology, although complex, is relatively easy to implemet today, ad why you should cosider it. That is our book i a utshell. We hope you ejoy readig ad usig it as much as we ejoyed researchig ad writig it. Remember that proper research ad documetatio are ot just the key to a successful virtualizatio implemetatio, but key to the success of ay job. Implemetig ad usig virtualizatio are as dyamic as the techology itself, ad virtualizatio is a world that truly defies the phrase it s oly as successful ad complex as you choose to make it. As the use of virtualizatio becomes easier for the ed user, it will udoubtedly become more complex for those who support it, so research the techology regularly ad always verify with peers ad vedors that the approach you followed yesterday is still the right approach to take today.