Recently a client had an increasing need to improve the quality of their machine builds and reduce the time that was spent deploying new machines. This client had 250 computers in ?ve locations and two states. They had just signed an agreement to refresh one- third of their machines, and because this was a leasing program, they would be doing this every year.
The current standard operating procedure was to build each machine by hand, which would result in an IT administrator or specialist spending 3 to 5 hours per machine. Each phase of the technical refresh program would have around 80 machines. Simple math tells you that this would require 240 to 400 hours spent on just building the machines, which is not ef ?cient.
A plan was developed to create system images and then deploy them with the earlier version of WDS, which was called Remote Installation Service, or RIS. While RIS was not as easy to use or set up as WDS, it did show how valuable images really are.
They decided to create three separate images, each with various applications installed based on the departments. A lot of time was spent working with department heads to determine what exactly the images would contain, which allowed us to create base images that needed very little additional attention after they were installed.
While we knew that this would reduce the time needed to deploy a machine and would create a standard build, a side bene?t turned out to be using the images to assist the help desk. If the help desk encountered an issue that would normally result in them deploying someone to rebuild the machine, they would instead deploy the build image. Overall, the use of images saved many man-hours and saved the organization money.
Ownership. WPI is the owner of all right, title, and interest, including copyright, in and to the compilation of the Software recorded on the physical packet included with this Book individual programs recorded on the Software Media is owned by the author or other authorized copyright owner of each program. Ownership of the Software and all pro- prietary rights relating thereto remain with WPI and its licensers.
You may only (i) make one copy of the Software for backup or archival purposes, or (ii) transfer the Software to a single hard disk, provided that you keep the original for backup or archival purposes. You may not (i) rent or lease the Software, (ii) copy or reproduce the Software through a LAN or other network system or through any computer subscriber system or bulletin-board system, or (iii) modify, adapt, or create derivative works based on the Software.
You may not reverse engineer, decompile, or disas-semble the Software. You may transfer the Software and user documentation on a permanent basis, provided that the transferee agrees to accept the terms and conditions of this Agreement and you retain no copies. If the Software is an update or has been updated, any transfer must include the most recent update and all prior versions.
Restrictions on Use of Individual Programs. You must follow the individual requirements and restrictions detailed for each individual program in the About the CD- ROM appendix of this Book or on the Software Media. These limitations are also contained in the individual license agreements recorded on the Software Media. These limitations may include a requirement that after using the program for a specified period of time, the user must pay a registration fee or discontinue use. By opening the Software packet(s), you will be agreeing to abide by the licenses and restrictions for these individual programs that are detailed in the About the CD-ROM appendix and/or on the Software Media. None of the material on this Software Media or listed in this Book may ever be redis- tributed, in original or modified form, for commercial purposes.
Configuring SSO on a Client Computer
Follow these steps to con?gure Single Sign-On on a Windows Vista computer.
1.Open Local Group Policy Editor. Click Start-Run-type gpedit.msc, and press Enter.
2.Expand and navigate to Computer Con?guration- Administrative Templates- System-Credentials Delegation.
3. Double-click Allow Delegating Default Credentials.
4. In Properties on the Setting tab, click Enable and click Show.
5. In Show Contents, click Add and add the terminal servers to the policy list by typing
the pre?x termsrv/ in front of the server name (for example, termsrv/TServ1 ).
6. Click OK three times to close all the dialog boxes.
Prepare and Configure the Use of Terminal Services RemoteApp (TS RemoteApp)
In the following sections, we’ll discuss a new feature of Terminal Services for Windows 2008 called Terminal Services RemoteApp (TS RemoteApp). In previous versions of Termi- nal Services, the only option was to publish the full Desktop, but with TS RemoteApp, now individual applications can be published. What this means is that, instead of launching a new Desktop session to run an application that is running on the terminal server, you can publish an individual application from the terminal server and it will appear as if is it is running on the client’s local computer. No longer will users have to deal with the confusion of running two different Desktops to run all their applications. Before we dive too deep into TS RemoteApp and its features, we need to install the Terminal Server role on our Windows 2008 server.
Installing Programs to Be Used with TS RemoteApp
TS RemoteApp is made available through the installation of Terminal Services on Windows Server 2008. As the administrator of the server installs applications on the server, they can be added to a published list of programs that users will be able to access. In Exercise 2.10, you’ll install the Terminal Services role and change the user mode to allow applications to be installed correctly on a TS server.
Installing the Terminal Services Role
Follow these steps to install the Terminal Services Role for Window Server 2008.
1.Open Server Manager. Click Start-Administrative Tools-Server Manager.
2. Under Roles Summary, click Add Roles.
3. In the Add Role Wizard, on the Before You Begin page, click Next.
4.On the Select Server Roles page, check Terminal Services. If Terminal Services is already installed, this check box will be grayed out.
5. Click Next.
6. On the Introduction to Terminal Services page, click Next.
7. On the Select Role Services page, select Terminal Server and click Next.
8. On the Uninstall and Reinstall Applications for Compatibility page, click Next.
9. On the Specify Authentication Method for Terminal Server page, select the authenti- cation you will be using and click Next. If you select Require Network Level Authen- tication, only computers running Windows Vista with RDC 6.0 or higher will be allowed to connect to the server. If you select Do Not Require Network Level Authen- tication, any RDC client can connect to the TS server.
10. On the Specify Licensing Mode page, select the licensing mode you will be using and click Next.
11. On the Select User Groups Allowed Access to this Terminal Server page, add the
users or groups that you will allow to connect and click Next.
12. On the Con?rm Installation Selections page, verify settings and click Install.
13. After the installation, you will be prompted to restart the server to ?nish the installation process. Click Close and Yes to restart the server.
After you install the Terminal Services role, you need to install the programs that are going to be published. Before you install a program on a terminal server, the server needs to be placed in install mode, and after installation is complete, the server needs to placed back into execute mode.
To change the system to install mode, type change user /install at the command prompt.
To change the system to execute mode, type change user /execute at the command prompt.
To get additional information or help, type change user or change user /? at the command prompt.
In this chapter, we examined the various aspects of Windows Server 2008 Storage Services as well as the various types of storage technologies and native Windows Server 2008 storage management tools. We started the chapter with initializing disks and choosing a partition type, MBR or GPT. We then discussed the types of disk con?gurations, dynamic and basic, that are supported in Windows Server 2008. You learned that there are various properties associated with each type of con?guration. Then we discussed the different types of RAID and the properties of each.
The next section explored storage technologies, namely iSCSI, Fibre Channel, and NAS. We primarily focused on iSCSI because of the native support in Window Server 2008. You learned how to con ?gure an iSCSI initiator and a connection to an iSCSI target. After that we looked at its iSNS server and how to con ?gure it. We concluded the chapter by looking at Storage Manager for SANs and Storage Explorer, which are built-in management tools in Windows Server 2008 for storage devices.
Exam Essentials
Know the disk types.Know how to initialize disks and the type of partitioning to chose.Also know the difference between dynamic and basic disks and when to use them.
Understand what RAID is and how it works. Know the various RAID types, the require- ments for each, and when it is appropriate to use each type.
Know the storage technologies.Understand how to use the storage technologies Fibre Channel, iSCSI, and NAS. Know how to con ?gure an iSCSI initiator and how to establish a connection to a target. Know the various MPIO policies.
Know how to manage storage.Know want type of administrative features are available for Storage Manager for SANs and Storage Explorer.
Exploring Terminal Services in Windows Server 2008
MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER:
Configure Terminal Services client connections. May include but is not limited to: connecting local devices and resources to a session, Terminal Services profiles, Terminal Services home folders, Remote Desktop Con- nection (RDC), single sign-on, Remote Desktop Snap- In, MSTSC.exe
Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp). May include but is not limited to: Configuring Terminal Services Web Access, configuring Terminal Services Remote Desktop Web Connection
Configure Terminal Services Gateway. May include but is not limited to: certificate configuration, Terminal Services Gateway Manager (TS Gateway Manager), specifying
resources that users can access through TS Gateway by using Terminal Services resource authori- zation policy (TS RAP) and Terminal Services connec- tion authorization policy (TS CAP)
Configure Terminal Services load balancing. May include but is not limited to: Terminal Services Session Broker redirection modes, DNS registration; setting through group policy
Storage in Windows Server 2008
Microsoft MPIO (Multipath I/O)
Multipath I/O (MPIO) is associated with high availability because a computer will be able to use a solution with redundant physical paths connected to a storage device. So if one path fails, an application will continue to run because it can access the data across the other path. The MPIO software provides the functionality needed for the computer to take advantage of the redundant storage paths. MPIO solutions can also load-balance data trafic across both paths to the storage device, virtually eliminating bandwidth bottlenecks to the computer. What allows MPIO to provide this functionality is the new native Microsoft Drive Speci?c Module (Microsoft DSM). The Microsoft DSM is a driver that communicates with storage devices —iSCSI, Fibre Channel or SAS —and provides the chosen load-balancing policies. Windows Server 2008 supports the following load-balancing policies:
Failover In a failover con ?guration, there is no load balancing. There is a primary path that is established for all requests and subsequent standby paths. If the primary path fails, one of the standby paths will be used.
Failback This is similar to failover in that it has primary and standby paths. However, with failback you designate a preferred path that will handle all process requests until it fails, after which, the standby path will become active until the primary reestablishes a connection and will automatically regain control.
Round robin In a round robin con ?guration, all available paths will be active and will be used to distribute I/O in a balanced round robin fashion.
Round robin with a subset of paths In this con ?guration, a speci ?c set of paths will be designated as a primary set and another as standby paths. All I/O will use the primary set of paths in a round robin fashion until all the sets fail. Only at this time will the standby paths become active.
Dynamic Least Queue Depth In a Dynamic Least Queue Depth con ?guration, I/O will route to the path with the least number of outstanding requests.
Weighted path In a weighted path con ?guration, paths are assigned a numbered weight. I/O requests will use the path with the least weight. The higher the number, the lower the priority.
Exercise 1.5 demonstrates the process of installing the Microsoft MPIO feature for Window Server 2008.
Disk storage is a requirement for just about every computer and application used in any corporate environment. Administrators have some familiarity with storage, whether it is internal storage, a locally attached set of disks, or network attached storage (NAS). In this chapter, we will examine the various aspects of Windows Server 2008 Storage Services. We’ll discuss the various types of storage technologies, but this chapter will primarily focus on iSCSI because of the new native features in Windows Server 2008. This chapter includes the following main topics:
Initializing disks
Dynamic and basic disks Volume sets RAID types
Mount points Storage technologies (iSCSI, Fibre Channel, NAS) Virtual Disk Specification (VDS) Storage Manager for SANS Storage Explorer Storage in Windows Server 2008.
What type of disks should be used ? What type of RAID sets should be made? What type of hardware platform should be purchased? These are all questions that many adminis- trators have to make when planning for storage in Windows Server 2008. In the follow- ing sections, we will attempt to answer these questions so that administrators can make the best decisions for their storage environment. We’ll cover the basics to prepare you to make these decisions when you’re either purchasing or con ?guring your storage solutions.
Initializing Disks
To begin this section, we must ? rst discuss how to add disk drives to a server. Once a disk drive has been installed, it must be initialized by selecting the type of partition. There are Storage in Windows Server 2008 two types of partition styles used to initialize disks: Master Boot Record (MBR) and GUID Partition Table (GPT).
MBR has a partition table that indicates where the partitions are located on the disk drive, and with this particular partition style, only volumes up to two terabytes (1,024 gigabytes) are supported. An MBR drive can have up to four primary partitions or three primary partitions and one extended partition that can be divided into unlimited logical drives. Windows Server 2008 can boot off only an MBR disk unless it is based on the Extensible Firmware Interface (EFI); then it can boot from GPT. An Itanium server is an example of EFI-based system. GPT is not constrained by the same limitations MBR is. In fact, a GPT disk drive can support volumes of up to 18 exabytes (1 million terabytes) and 128 partitions. As a result, GPT is recommended for disks larger than 2TB or disks used on Itanium-based computers. Exercise 1.1 demonstrates the process of initializing additional disk drives to an active computer running Windows Server 2008.
Introduction
Microsoft has recently changed its certi ?cation program to contain three primary series: Technology, Professional, and Architect. The Technology Series of certi ?cations is intended to allow candidates to target specic technologies and is the basis for obtaining the Profes- sional Series and Architect Series of certi ?cations. The certi ?cations contained within the Technology Series consist of one to three exams, focus on a speci ?c technology, and do not include job-role skills. By contrast, the Professional Series of certi ?cations focus on a job role and are not necessarily focused on a single technology but rather a comprehensive set of skills for performing the job role being tested. The Architect Series of certi ?cations offered by Microsoft includes premier certi ?cations that consist of passing a review board made up of previously certi ?ed architects. To apply for the Architect Series of certi ?cations, you must have a minimum of 10 years of industry experience.
When obtaining a Technology Series certi ?cation, you are recognized as a Microsoft Certi ?ed Technology Specialist (MCTS) on the speci ?c technology or technologies that you have been tested on. The Professional Series certi ?cations include Microsoft Certi ?ed IT Professional (MCITP) and Microsoft Certi ?ed Professional Developer (MCPD). Passing the review board for an Architect Series certication will allow you to become a Microsoft Certied Architect (MCA).
This book has been developed to give you the critical skills and knowledge you need to prepare for the exam requirement for obtaining the MCTS: Windows Server 2008 Applica- tions Infrastructure, Con ?guring (Exam 70-643).
The Microsoft Certified Professional Program
Since the inception of its certi?cation program, Microsoft has certi?ed more than 2 million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certi?cations can help companies verify the skills of prospective employees and contractors. Microsoft has developed its Microsoft Certi ?ed Professional (MCP) program to give you credentials that verify your ability to work with Microsoft products effectively and professionally. Several levels of certi ?cation are available based on speci ?c suites of exams. Microsoft has recently created a new generation of certi ?cation programs
You should configure Sticky Keys so that keyboard shortcuts can be pressed one key at a time instead of simultaneously. Sticky Keys, Toggle Keys, and Filter Keys are settings that can be configured to make it easier to type using the keyboard.
You should configure Filter Keys so that repeated keystrokes are ignored. Filter Keys also allows you to adjust the keyboard repeat rates. Sticky Keys, Toggle Keys, and Filter Keys are settings that can be configured to make it easier to type using the keyboard. Easy Keys is not an option for making the keyboard easier to use.
You should configure Toggle Keys so that a tone is played when the Caps Lock, Num Lock and Scroll Lock key is pressed. Toggle Keys can be enabled by pressing the Num Lock key and holding it down for five seconds. Sticky Keys, Toggle Keys, and Filter Keys are settings that can be configured to make it easier to type using the keyboard.
Clicking the Notification Area tab. The Network icon can also be displayed on the Desktop by using this tab. You can also reach this tab by right-clicking an empty area of the taskbar and selecting Properties from the context menu.
Click the Change Keyboards button, which opens the Text Services and Input Languages dialog box. Click the Language Bar tab on this dialog box to enable and configure the Language Bar. The Language Bar provides quick access to language options from the taskbar.
You can configure taskbar options by right-clicking an empty space of the taskbar, selecting Properties, and clicking the Taskbar tab. This tab contains several options for configuring the taskbar, such as Lock the Taskbar, Auto-Hide the Taskbar, Keep the Taskbar on Top of Other Windows, Group Similar Taskbar Options, Show Quick Launch, and Show Window Previews (Thumbnails).
You can configure user interface settings by clicking an empty space on the Desktop and selecting Personalize. The Theme option of the Personalization dialog box allows you to select from a number of themes available with Windows Vista. The Windows Vista Aero theme includes new user interface elements, such as transparent windows and new color schemes. Other theme options with Windows Vista include Windows Vista Basic, Windows Vista Stan- dard, and Windows Classic.
You can configure Start Menu options by clicking an empty space of the taskbar, selecting Properties, and clicking Customize on the Start Menu tab, which opens the Customize Start Menu dialog box. This dialog box provides a list of configuration options that customize how items are displayed on the Start Menu. The System Administrative Tools option configures how the Administrative Tools icon is displayed. You can configure the Administrative Tools icon to be displayed on the All Programs menu, to be displayed on both the All Programs menu and the Start Menu, or not to be displayed on either the Start Menu or the All Programs menu.
Access to the Regional and Language Options dialog box, shown in Figure 4.9. Through Regional and Language Options you can configure Formats, Location, Key- boards and Languages, and Administrative settings. We will look at each of these in the fol- lowing sections.
The Formats tab of the Regional and Language Options dialog box enables you to configure how numbers, currencies, dates, and times are displayed on the screen. You can change the cur- rent format using the Current Format drop-down list, which provides many different format options such as English (United States), German (Germany), and Chinese (Singapore). The Cus- tomize This Format button provides the ability to customize how numbers, currencies, times, and dates are displayed based on user or corporate preferences.
The Location tab of the Regional and Language Options dialog box enables you to specify the current location to use in software that provides localized information, such as news and weather information. The Current Location drop-down list provides you with a list of loca- tions that can be selected.
The Keyboards and Languages tab of the Regional and Language Options dialog box enables you to configure the input and keyboard language, and enables you to install or uninstall language
This tab also provides the ability to configure the language bar options and advanced keyboard settings. Clicking the Install/Uninstall Languages button opens the Install or Unin- stall Display Languages wizard, which allows you to select the languages to install or uninstall on your computer.
The Administrative tab allows you to support languages for non-Unicode programs. This enables non-Unicode programs to display menus and dialog boxes in the user’s native lan- guage. This tab also allows you to copy the current settings to reserved accounts, such as the default user account or to system accounts.
One by one, click the Formats, Location, Keyboards and Languages, and Administrative tabs and note the configurations on each tab.
Click the Formats tab, and select the Danish (Denmark) option from the Current Format drop-down list. Then click the Apply button.
In the Number, Currency, Time, and Date fields, note the changed configurations.
Reset your locale to the original configuration, and click Apply.
Your company has an office in Tokyo. Computers are shared by users there who require both English and Japanese language support, for document management as well as the UI. Your CIO has asked you to set up a system that lets users in the Tokyo office use Windows Vista in any language.
If your computer has a built-in USB device and does not detect the device through Device Manager, confirm that the USB is enabled in the computer’s BIOS and that the BIOS supports USB devices.
A service is a program, routine, or process that performs a specific function within the Windows Vista operating system. You can manage services through the Services window (Figure 3.15), which can be accessed in a variety of ways. If you go through the Computer Management utility, right-click Computer, select Manage, expand Services and Applica- tions, and then expand Services. You can also go through Administrative Tools or set up Services as an MMC snap-in.
For each service, the Services window lists the name, a short description, the status, the startup type, and the logon account that is used to start the service. To configure the properties of a service, double-click it to open its Properties dialog box, shown in Figure 3.16. This dialog box contains four tabs of options for services: General, Log On, Recovery, and Dependencies. General Allows you to view and configure the following options:
In addition, the buttons across the lower part of the dialog box allow you change the service status to start, stop, pause, or resume the service.
Log On The Log On tab, shown in Figure 3.17, allows you to configure the logon account that will be used to start the service. Choose the local system account or specify another logon account. At the bottom, you can select hardware profiles with which to associate the service. For each hardware profile, you can set the service as enabled or disabled.
Recovery The Recovery tab, shown in Figure 3.18, allows you to designate what action will be taken if the service fails to load. For the first, second, and subsequent failures, you can select from the following actions:
If you choose Run a Program, specify it along with any command-line parameters. If you choose Restart the Computer, you can configure a message that will be sent to users who are connected to the computer before it is restarted.
Dependencies The Dependencies tab, shown in Figure 3.19, lists any services that must be running in order for the specified service to start. If a service fails to start, you can use this information to examine the dependencies and then make sure each one is running. In the bot- tom panel, you can verify whether any other services depend on this service before you decide to stop it.
Managing disk devices, including CD-ROM devices, DVD devices, and removable media Managing display devices, including video adapters and multiple displays Managing mobile computer hardware, including how to configure power plans Managing I/O devices, including keyboards, mice, wireless devices, and USB devices Managing imaging devices, including scanners and digital cameras Managing Windows Vista services Enhancing performance using Windows ReadyBoost and Windows ReadyDrive.
