Windows Server 2008 R2 Deep Dive

Size: px

Start display at page:

Download "Windows Server 2008 R2 Deep Dive"

Lawrence McCarthy
7 years ago
Views:

1 Windows Server 2008 R2 Deep Dive Justin Rodino MVP: Windows Desktop Experience MCT STEP twitter dutchie027

What Is The Springboard Series Inside of Microsoft we are: A turnkey IT pro engagement platform for depth & breadth The program to mobilize MS marketing & field to focus on

Adoption Lifecycle The Springboard Series IT pro experience offers dynamic content and structured guidance across the adoption lifecycle Weekly, Monthly and Quarterly Rhythm of

2 What Is The Springboard Series Inside of Microsoft we are: A turnkey IT pro engagement platform for depth & breadth The program to mobilize MS marketing & field to focus on desktop OS IT pros To the IT pro, our goal is: Be the definitive resource for Desktop IT pros Open, honest; show don t tell Information at right time, right level across Adoption Lifecycle The Springboard Series IT pro experience offers dynamic content and structured guidance across the adoption lifecycle Weekly, Monthly and Quarterly Rhythm of Topical Content Virtual Roundtable Events Monthly Feature Articles & Guides Event Kits (Win 7 updates) and messaging Weekly Targeted IT Pro Drive-time Podcasts TechCenterin 10 languages 2

Technology Investment Areas Virtualization Hyper-V 2.0 Live Migration Remote Desktop Services Management Power Management AD Administrative Center PowerShell 2.0 Best Practices Analyzer Web IIS 7.

4 Technology Investment Areas Virtualization Hyper-V 2.0 Live Migration Remote Desktop Services Management Power Management AD Administrative Center PowerShell 2.0 Best Practices Analyzer Web IIS 7.0 & Integrated Extensions.NET on Server Core Configuration Tracing Service-Oriented Architecture Solid Foundation for Enterprise Workloads >64 Core Support Componentization Scalability Better Together with Windows 7 Direct Access Branch Cache AppLocker Enhanced Group Policies BitLocker on Removable Drives

5 Virtualization

6 What are the major changes in R2 Live Migration Virtual storage (VHD) hot plug/remove Support for shareable LUNs (CSV) Support for AMD RVI and Intel EPT nested page tables technologies Support for up to 32 physical cores Support for I/O Virtualization technologies

7 What are the major changes in R2 Live Migration Allows you to transparently move running virtual machines from one node of the failover cluster to another node in the same cluster without a dropped network connection or perceived downtime.

8 What are the major changes in R2 Enhanced processor support You can now have up to 32 physical processor cores. The increased processor support makes it possible to run even more demanding workloads on a single host. In addition, there is support for Second-Level Address Translation (SLAT) and CPU Core Parking. CPU Core Parking enables Windows and Hyper-V to consolidate processing onto the fewest number of possible processor cores, and suspends inactive processor cores

9 What are the major changes in R2 Enhanced networking support Support for jumbo frames, which was previously available in nonvirtual environments, has been extended to be available on virtual machines. This feature enables virtual machines to use jumbo frames up to 9,014 bytes in size, if the underlying physical network supports it.

10 Management

11 Today's IT Challenges Increasing demands from the business Reliance on technology for business-critical operations Always-available, anywhere Increasing complexity Adding capabilities adds management burden 80% of IT cost is managing existing systems Trends of the future magnify challenges Move to Datacenters large scale, virtualization remote management Outsourcing lower skilled, high turnover users

12 Streamlined Management Windows Server 2008 R2 as the foundation for data center automation Expand surface are of Windows Server that can be driven via scripting Top server roles/tasks can be managed using remote & local PowerShell scripts In-box cmdlets for server roles, and for power, blade and chassis management Work with OEMs and IHVs to deliver WS- Management compatible hardware

13 Streamlined Management (cont.) Install and run Server Manager (including role management snap-ins) from Windows 7 clients Remotable Server Manager UI Best Practices Analyzer integrated into Server Manager Performance counter viewer in Server Manager Easier migration of roles and core server settings from WS03/08/WS7 to Windows Server 2008 R2 Migration portal to expose step-by-step documentation for all roles 100% documentation coverage for migration of server roles and core OS settings, augmented by process automation Cmdline solution or role-specific migration tools to migrate AD, DHCP, DNS and File and Print roles

automation of system admin Easy-to-use Works with existing scripts Community Model New Features

14 Powershell 2.0 Improved Command-line shell & Scripting Language Improves productivity & control Accelerates automation of system admin Easy-to-use Works with existing scripts Community Model New Features Graphical PowerShell Improved Security Portability New cmdlets Integration Active Directory Administration Center IIS Power Management One-to-many remote management using WS-MGMT

15 Active Directory

16 Active Directory Domain Services New Active Directory Domain Services management console PowerShell integration/built on PowerShell Recovery of deleted objects New AD Recycle Bin Improved process for joining domains Offline domain join Improved management of user accounts and identity services Managed service accounts Improved Active Directory Federated Services Authentication assurance

17 Group Policy Preferences Group Policy Preferences lets you create a do-ityourself group policy setting out of, well, just about anything with a few mouse clicks Built into Windows Server 2008 GPMC Part of the Desktop Standard acquisition Remote Server Admin Tools (RSAT) delivered for Vista Can be utilized on Windows Server 2003, Windows XP, Windows Vista, as well as Windows Server 2008

18 AD ENHANCEMENTS ADAC BPA

19 Better Together with Windows 7

20 Better Together With Windows 7 More effective software control with AppLocker Ubiquitous remote connectivity via DirectAccess Combining Remote Workspace, Presentation Virtualization and Remote Desktop Services Gateway allows native desktop experience over public Win 7 computers BranchCache for improved branch performance Read-Only DFS for improved branch office security More efficient client power management Desktop and applications virtualization feeds feature Agile VPN BitLocker encryption on removable drives

21 Software Control via AppLocker Situation Today Windows Server 2008 R2 and Windows 7 Solution AppLocker Users can install and run unapproved applications Even standard users can install some types of software Unauthorized applications may: Introduce malware Increase helpdesk calls Reduce user productivity Undermine compliance efforts Eliminate unwanted/unknown applications in your network Enforce application standardization within your organization Easily create and manage flexible rules using Group Policy

22 IT Pro Benefits DirectAccess Benefits Improved manageability of remote users IT simplification and cost reduction Consistent security for all access scenarios End User Benefits Seamless & secure access to corporate resources Consistent connectivity experience in / out office Combined with other Windows 7 features enhances the end to end IW experience

23 DirectAccess Deployment Get ready step by step Determine your strategy Be ready to monitor IPv6 traffic Choose an Access Model: Full Intranet Access vs. Selected Server Access? Assess deployment scale Get your infrastructure ready Windows 7 clients Windows Server 2008 R2 DirectAccess Server DC, DNS Server, Active Directory, PKI, Application Servers, etc. During deployment Use DirectAccess configuration wizard to setup DirectAccess Server and generate policies for clients, application servers, and DC/DNS Customize policies as needed

24 Direct Access Allows access to resources on a corporate network without the need to establish a VPN connection. Invisible to end users. Two basic DA scenarios, including: (1) Full Intranet Access: Corporate Network DC and DNS (Windows Server 2008 or later) Internet DA clients Direct Access Server (Win7) (Single or Multiple) IPsec ESP tunnel/ip-tls encryption with Machine Auth (DC/DNS access) Domain Clients IPsec ESP tunnel/ip-tls encryption with Machine Auth and User Auth (App servers access) IPsec ESP NULL (transport mode) with Machine Auth and User Auth (App servers access) Application servers (Windows Server 2008 or later)

25 Direct Access (continued) (2) Selected Server Access Corporate Network DC and DNS (Windows Server 2008 or later) Internet DA clients (Win7) Direct Access Server (Single or Multiple) Domain Clients IPsec ESP+Encryption with Machine and User Auth Application servers (Windows Server 2008 or later)

26 BranchCache Windows 7 Solution Caches content downloaded from file and Web servers Users in the branch can quickly open files stored in the cache Frees up network bandwidth for other uses Technical Details Authenticates current state of data and access rights of the user against the server Supports commonly used protocols: HTTP(S), SMB Support network security protocols (SSL, IPsec) Requires Windows Server 2008 R2 in the data center and hosted cache

27 BranchCache Distributed Cache Data ID Data

28 BranchCache Hosted Cache Data ID ID ID Search Data ID Data ID

29 BranchCache Enterprise Distributed Cache Data cached in cache pool Recommended for branches without a branch server Easy to deploy: Enabled on clients through Group Policy Cache availability decreases with laptops that go offline Hosted Cache Data cached at the host server Cache stored centrally: existing Windows Server 2008 R2 in the branch Cache availability is high Enables branch-wide caching Increased reliability

30 THANK YOU Questions?

Introducing. Markus Erlacher Technical Solution Professional Microsoft Switzerland

Introducing. Markus Erlacher Technical Solution Professional Microsoft Switzerland Introducing Markus Erlacher Technical Solution Professional Microsoft Switzerland Overarching Release Principles Strong emphasis on hardware, driver and application compatibility Goal to support Windows