380 likes | 659 Views
SBS 2003 R2 more than just patching…. Wayne Small [SBS-MVP] Technical Director Correct Solutions Pty Ltd wayne@correct.com.au www.SBSfaq.com. What is SBS 2003 R2?. Launched on July 11, 2006 Next revision of SBS 2003 Patch management Increased mailbox size Increased SPAM protection
E N D
SBS 2003 R2more than just patching… Wayne Small [SBS-MVP] Technical Director Correct Solutions Pty Ltd wayne@correct.com.au www.SBSfaq.com
What is SBS 2003 R2? • Launched on July 11, 2006 • Next revision of SBS 2003 • Patch management • Increased mailbox size • Increased SPAM protection • Improved licensing options • Take us through to Cougar timeframe • Oops…
What is SBS 2003 R2? • SBS2003 with SP1 • Separate disk with “R2 bits” • You don’t have to install the R2 components but why wouldn’t you? • Not a free upgrade from SBS 2003 unless • Software Assurance • OEM technology guarantee (OEM 1/3/06-31/8/06) • www.microsoft.com/windowsserver2003/sbs/r2/upgrade.mspx • Available from August 2006
Key Improvements in SBS 2003 R2 Standard • Based on SBS 2003 SP1 • Win 2003 Server SP1 • FSRM • MMC v3.0 • Exchange 2003 SP2 • Up to 75GB Mailbox store • WSS 2003 SP2 • WSUS 2.0 + SBS Wizards!
Key Improvements in SBS 2003 R2 Premium • As per STD plus • ISA 2004 • SQL 2005 Workgroup Edition
Let’s talk Licensing… • Pre SBS 2003 R2 • Allows for additional W2003 Servers without need for W2003 CAL purchase • Still need to purchase W2003 Server License • Post SBS 2003 R2 • As above PLUS… • Allows for additional Exchange 2003 and SQL 2005 WE servers • No need to purchase Exchange 2003 or SQL 2005 WE CALs • Just a licensing option – not a technical solution
How to… additional Exchange Server • SBS supports multiple Exchange Servers • SBS wizards don’t “know” about them. • Wizard create mailboxes on first alpha server (not always SBS) • OWA/Outlook over HTTP/RPC, ActiveSync will NOT work for users on the 2nd server. • Need to purchase W2003 Server License • Need to purchase Exchange 2003 Server License • DO NOT need to purchase additional Exchange 2003 CALs
How to… additional SQL 2005 WE Server • Must have SBS 2003 R2 Premium • Need to purchase W2003 Server License • Need to purchase SQL 2005 WE Server License • DO NOT need to purchase additional SQL 2005 WE CALs • DO need to you have purchased SBS 2003 R2 Premium Edition CALS
How to… additional SQL 2005 SE Server • SQL 2005 Standard Edition • Need to purchase W2003 Server License • Need to purchase SQL 2005 SE Server License • Need to purchase SQL 2005 SE CALs
SBS 2003 R2 – Update Services • It’s just WSUS right? • No it’s not! • Additional wizardry to make it easier to manage
SBS 2003 R2 – Update Services • Can WSUS do this??? • Email you daily with your patch status on your network • Show you the computers that are not being included in patching? • Auto approve some patches based on requirements? • Only download patches that are NEEDED
Install Process • Can only install R2 onto a computer running SBS 2003 SP1 • Install Exchange 2003 SP2 • Install Windows SharePoint Services 2.0 SP2 • Don’t have any instances of MMC running • Must have SBS2003 Administration & Monitoring components installed • Must be logged in as THE “500” administrator account • Need minimum 1Gb free space of Update Services & 8Gb (additional) free space for Updates Services content • Will upgrade existing WSUS installations • Needs fine tuning though
SBS 2003 R2 – The Basics Wayne Small Tech.SBSGuru
SBS 2003 R2 – Tips • First 48 hours • Get the critical updates and security fixes down and installed • Beware – the false green tick • Console – use the Refresh link – not F5.
SBS 2003 R2 – Update Services Maintenance • Dependant on settings • Will need to approve some updates • Windows Defender pattern files • IMF Updates • Malicious Software Removal Tool
SBS 2003 R2 – Under the covers • SBS Wizardry • Scheduled Tasks • Computer Groups • Group Policy • Manual Settings
SBS 2003 R2 – Scheduled Tasks • 3 Tasks • Update Services Auto Approval Task • Runs hourly • Automatically approves updates for your network • Update Services Configuration Task • Runs ONCE - 48 hours after the initial installation. • Configures Windows Server Update Services for full functionality • Update Services Synchronisation Task • Runs every 5 minutes • Ensures that Update Services has a complete list of computers that are on your network
SBS 2003 R2 – Computer Groups • 3 Groups • Membership based on OS type • Update Services Client Computers • Win2000 Pro/XP/Vista • Update Services Excluded Computers • Anything you don’t want patched • Update Services Server Computers • Win2000 & 2003 Server • SBS 2003 Server • Use the Wizard to move computers, not WSUS
SBS 2003 R2 – Group Policy • Small Business Server Update Services Client Computers Policy • Automatic Update type and time • Small Business Server Update Services Common Settings Policy • All master settings – WSUS server etc • Small Business Server Update Services Server Computers Policy • Automatic Update type and time
SBS 2003 R2 – Manual Settings • Don’t mess with things too much • Change it too much and loose the Green Tick
SBS 2003 R2 – Troubleshooting • SBS Console Errors • 0x80072ee2 – common error • Transient Issue • Server Side • C:\Program Files\Microsoft Windows Small Business Server\Support • SBSUSSettings.log • ConfigurationHelper_Policy.log • Client Side • C:\Windows\WindowsUpdate.log • Windowsupdate = WSUS/MU • Windows Update = SUS/AU/WU
SBS 2003 R2 – Troubleshooting • Wuauclt /detectnow /resetauthorization • Use PSEXEC to run on remote machines
SBS 2003 R2 – Extending its capabilities • Create additional Computer Groups • Manually move computers into the groups using the SBS Wizard
SBS 2003 R2 – Mobile Users • Notebook users no longer use VPN • Still need to update them and monitor them • Options • Microsoft Update – but we loose visibility of updates • VPN into the LAN on a regular basis – troublesome for the user • Extend SBS 2003 R2 Update Services
SBS 2003 R2 – Mobile Users – Solution • Create alternate Computer Group • Create alternate GPO & assign to an OU • Move computers into the OU • Open up WSUS to the outside world • Port 8530 • STD - IP Restrictions • Premium - ISA Publishing rule
Troubleshooting and Extending SBS 2003 R2 Wayne SmallTech.SBSGuru
Exchange Improvements • Exchange Server 2003 SP2 • Recipient filtering turned on by default • IMF included with SP2 but not configured • IMF Autoupdate Enabled by default • Up to 75Gb PRIV & PUB • Need to regedit to increase size • Think about DR before doing this • Increased Backup Size • Increased recovery time
File Server Resource Manager (FSRM) • Improved ability to restrict content of folder shares • File type limits • Improved notification • SMTP email when limits are reached
FSRM - Installation • Not installed by default • Add/Remove Programs • Windows components • Management and Monitoring Tools • Select “File Server Resource Manager” • Insert Disk 1 when prompted, then the R2 components disk • Server will require a restart • Uses the new MMC 3.0 interface
Wrap up • SBS 2003 R2 – much more than just WSUS • Licensing improvements • Patch Management Improvements • Antispam Improvements
SBS2003 R2 • More information • https://partner.microsoft.com/sbs2003/r2 • http://www.microsoft.com/windowsserver2003/sbs/r2/default.mspx • Documentation: http://www.microsoft.com/windowsserver2003/sbs/techinfo/productdoc/default.mspx • www.SBSfaq.com
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.