MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

1. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration Chapter 11 Managing and Monitoring a Windows Server 2008 Network

2. Objectives • Use management consoles to maintain Windows Server 2008 • Update and maintain your clients using Windows Server Update Service • Monitor Windows Server 2008 using built-in and downloadable utilities • Perform backup and restore tasks with Windows Server 2008 MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

3. Managing Windows Server 2008 • Microsoft Management Console (MMC) 3.0 • Improved version of the MMC that has been used in past versions of Windows Server • Building custom MMCs • You can create a custom snap-in console for the following reasons • To centralize tools you use on a regular basis • To provide access to users that need to use specific snap-ins to perform their jobs MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

4. Managing Windows Server 2008 (continued) • Activity 11-1: Creating a Custom MMC Console • Time Required: 15 minutes • Objective: Work with snap-ins and the MMC console MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

5. Server Manager Console • Server Manager lets you manage components in the following sections • Roles • Features • Diagnostics • Configuration • Storage MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

6. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

7. Server Manager Console (continued) • Servermanagercmd.exe • Provides a command-line utility so that you can perform automated installations or removals of roles, role services, and features MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

8. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

9. Server Manager Console (continued) • Activity 11-2: Using servermanagercmd.exe • Time Required: 15 minutes • Objective: Use servermanagercmd.exe command switches MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

10. Updating Windows Server 2008 • Windows Update • Suite of tools and services provided by Microsoft for applying updates to systems • Responsible for managing the download and installation process of updates from Microsoft • Requires access to the Internet MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

11. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

12. Windows Server Update Services • Centralizes the updating tasks for client and server computers • Benefits of WSUS • Centralizes update management • Minimizes effects on the WAN connection • Improves network security and reliability • Improves installation of relevant updates • Targets updates to specific computers and computer groups MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

13. Windows Server Update Services (continued) • Basic requirements before installing WSUS 3.0 SP1 • Microsoft Internet Information Services (IIS) 7.0 • Microsoft Report Viewer Redistributable 2005 • Minimum of 6 GB of free space for storing downloaded updates MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

14. Windows Server Update Services (continued) • Activity 11-3: Performing Preinstallation Tasks for WSUS • Time Required: 15 minutes • Objective: Prepare for the WSUS installation MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

15. Windows Server Update Services (continued) • Activity 11-4: Installing WSUS • Time Required: 15 minutes • Objective: Install WSUS 3.0 SP1 MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

16. Windows Server Update Services (continued) • Activity 11-5: Configuring WSUS Using the WSUS Setup Wizard • Time Required: 20 minutes • Objective: Run the WSUS Setup Wizard MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

17. Windows Server Update Services (continued) • Working with WSUS • WSUS Administrative console allows you to: • Generate reports • Manage updates • Monitor the computer through the console MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

18. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

19. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

20. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

21. Windows Server Update Services (continued) • Activity 11-6: Working with the Update Services Console • Time Required: 15 minutes • Objective: Modify the configuration settings for WSUS MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

22. Windows Server Update Services (continued) • Configuring clients • After WSUS has been installed and configured in the WSUS console • Your clients need to be configured to use the WSUS server for updates MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

23. Windows Server Update Services (continued) • Activity 11-7: Configuring Group Policy Settings for WSUS Clients • Time Required: 30 minutes • Objective: Using Group Policy to deploy WSUS client settings MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

24. Windows Server Update Services (continued) • Activity 11-8: Verifying Client Settings • Time Required: 30 minutes • Objective: Verify that client computers have the correct settings MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

25. Windows Server Update Services (continued) • Approving and deploying updates • Using the Update Services console, you can control • Which updates are applied • Which computers receive the updates • When the updates are distributed MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

26. Windows Server Update Services (continued) • Activity 11-9: Approving Updates • Time Required: 30 minutes • Objective: Approve updates for clients MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

27. Microsoft Baseline Security Analyzer 2.1 • Excellent tool for beginning to analyze your current security posture • MBSA scans for missing security updates for the following products • Windows 2000 SP4 and later operating systems and components • Microsoft Office XP and later • Microsoft Exchange Server 2000 and later • Microsoft SQL Server 2000 SP4 and later MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

28. Microsoft Baseline Security Analyzer 2.1 (continued) • MBSA • Free download from Microsoft • Can be used on a local computer or to connect to one or more remote computers on your network • Options for running MBSA on remote computers • Domain name and IP address range MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

29. Microsoft Baseline Security Analyzer 2.1 (continued) • Activity 11-10: Running MBSA from the Command Line • Time Required: 10 minutes • Objective: Use mbscli.exe to complete MBSA scans from the command line MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

30. Monitoring Windows Server 2008 • Windows Server 2008 utilities • Event Viewer • Reliability and Performance Console • Network Monitor • Task Manager • Disk Management MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

31. Working with Event Viewer • Each event in Event Viewer is classified by severity • Event Viewer Console • Sections include: • Custom Views • Windows Logs • Applications and Services Logs • Subscriptions • Windows Remote Management (WinRM) • Command-line tool service used to configure a computer to accept WS-Management requests MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

32. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

33. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

34. Working with Event Viewer (continued) • Activity 11-11: Preparing MSN-SRV-1XX for Remote Log Collection • Time Required: 5 minutes • Objective: Configure Windows Server 2008 Enterprise clients for remote logging and administration MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

35. Working with Event Viewer (continued) • Activity 11-12: Preparing MSN-SC-0XX for Remote Log Collection • Time Required: 15 minutes • Objective: Configure Windows Server 2008 Server Core clients for remote logging and administration MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

36. Working with Event Viewer (continued) • Activity 11-13: Configuring an Event Subscription with a Remote Server • Time Required: 15 minutes • Objective: Create an event subscription MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

37. Reliability and Performance Console • Provides a suite of utilities for monitoring and capturing performance data for local and remote systems • Divided into the following areas • Resource Overview • Monitoring Tools including Performance Monitor and Reliability Monitor • Data Collector Sets • Reports MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

38. Reliability and Performance Console (continued) • Resource Overview • Provides a real-time summary based on the four key components: CPU, disk, network, and memory • Performance Monitor • Can display real-time or historical data of local or remote computers • Reliability Monitor • Provides an overview of system stability MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

39. Reliability and Performance Console (continued) • Activity 11-14: Working with Performance Monitor • Time Required: 15 minutes • Objective: Learn about Performance Monitor MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

40. Reliability and Performance Console (continued) • Data Collector Sets • Acts as a central repository for gathering information for Reliability and Performance Monitor • Generating Reports • Reports section provides a central reporting location for the information gathered by the Data Collector Sets MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

41. Reliability and Performance Console (continued) • Activity 11-15: Working with Data Collector Sets • Time Required: 15 minutes • Objective: Use Data Collector Sets MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

42. Network Monitor • Built-in utility for capturing and viewing network traffic as it arrives or leaves a server • Helps you determine whether traffic is reaching a destination • Lets you view encrypted ESP packets to verify that Internet Protocol Security policies are being properly applied MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

43. Network Monitor (continued) • Activity 11-16: Installing Network Monitor 3.2 • Time Required: 15 minutes • Objective: Install Network Monitor 3.2 MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

44. Network Monitor (continued) • Activity 11-17: Working with Network Monitor • Time Required: 15 minutes • Objective: Capture and save frame data with Network Monitor MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

45. Disk Management • Disk Management console • Provides central location for administering the physical hard disks and disk-based devices attached to a server • NTFS Disk Quotas • Allow you to track disk usage by users and enforce disk space limits on disk volumes • Volume Shadow Copy service (VSS) • Allows you to set up manual or automatic backup copies of files or folders MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

46. MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

47. Disk Management (continued) • Activity 11-18: Working with Volume Shadow Copies • Time Required: 15 minutes • Objective: Enable VSS and restore a file from Previous Versions MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

48. Backup and Restore in Windows Server 2008 (continued) • Activity 11-19: Installing WSB and Command-Line Tools • Time Required: 15 minutes • Objective: Install WSB and command-line tools MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

49. Backup and Restore in Windows Server 2008 • Windows Server Backup (WSB) • Provides backup and recovery of your files, folders, volumes, and application data on Windows Server 2008 • Works by using VSS and the Block Level Backup Engine service • Installing Windows Backup • Add this feature through the Add Features Wizard using servermanagercmd.exe MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration

50. Backup and Restore in Windows Server 2008 (continued) • Configuring Windows Backup • Choices include: Backup Schedule, Backup Once, Recover • WSB supports three backup options • Always perform full backup • Always perform incremental backup • Custom • Restoring with WSB • Bare-metal backup: process where a server can be restored to a clean machine in a single step MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration