Upgrade and Deploy

Microsoft Windows
Server 2008
Module Overview
Server Roles
Performing a Single-Server Installation
Automating Windows Server 2008 Deployment
Selecting the Appropriate Administration Tool
Lesson 1: Server Roles
What Are Server Roles?
What Are the Windows Infrastructure Services Roles?
What Are the Windows Application Platform Services Roles?
What Are the Active Directory Server Roles?
AD DS Integration with Other Active Directory Server Roles
What Are Server Features?
What Are Server Roles?
Server roles describe the primary server function


File Services

DNS Server

Active Directory
Domain Services


Print Services


Web Server IIS
What Are the Windows Infrastructure Services Roles?
Windows Infrastructures Services roles include:
Active Directory Certificate Services
Active Directory Rights Management Services
DHCP Server
DNS Server
Fax Server
File Services
Hyper-V
Network Policy and Access Services
Print Services
Terminal Services
Windows Deployment Services
What Are the Windows Application Platform
Services Roles?
Windows Application Platform Services roles include:
Application Server
UDDI Services (Universal Description, Discovery, and Integration)
Web Server (IIS)
What Are the Active Directory Server Roles?
Server Role Description
Active Directory
Domain Services
(AD DS)
A centralized directory for user and computer management
and authentication for a Windows Server 2008 network
Active Directory
Lightweight
Directory Services
(AD LDS)
An LDAP directory service that provides data storage and
retrieval support for directory-enabled applications, without
the requirement to deploy domains or domain controllers
Active Directory
Certificate Services
(AD CS)
A solution used to protect information stored in documents,
e-mail messages, and Web sites from unauthorized viewing,
modification, or use
Active Directory
Rights Management
Services (AD RMS)
An information-protection technology that works with AD
RMS-enabled applications to help safeguard digital
information from unauthorized use
Active Directory
Federation Services
(AD FS)
A server role in Windows Server 2008 that provides Web
SSO technologies to authenticate a user to multiple Web
applications over the life of a single online session
AD DS Integration with Other Active Directory
Server Roles
AD DS is the foundation for a
functional network

Most server roles depend on
AD DS to provide user and
resource information for the
other server roles

AD DS also provides
authentication and
authorization services

AD CS
AD RMS
AD FS
AD DS
What Are Server Features?
Server features are supporting services that can be installed
Examples of server features:


.NET Framework 3.0
BitLocker Drive Encryption
Network Load Balancing
Failover Clustering
Desktop Experience
Windows PowerShell

Lesson 2: Performing a Single-Server Installation
Considerations for Performing Server Upgrades
Considerations for Migrating to Windows Server 2008
Considerations for Implementing BitLocker
Considerations for Device Drivers
Considerations for Application Compatibility


Considerations for Performing Server Upgrades
You should consider that:
Only recognized settings are migrated
Upgrades are possible only for Windows Server 2003
SP1 or later and Windows Server 2003 R2
Itanium and Web editions cannot be upgraded
Upgrades must be to the same or an upgraded edition
The processor architecture must remain the same
The language must remain the same
You cannot upgrade to server core
Considerations for Migrating to Windows Server 2008
Considerations:
Microsoft recommends a clean installation whenever
possible
The source server can be maintained for rollback
There are no limitations on:
The source operating system
The processor architecture
The language
Applications must be reinstalled
Clients must be redirected to the new server
Considerations for Implementing BitLocker
Bitlocker provides:
Strong protection for data
Protection for the operating system
Bitlocker requires:
Separate boot and system volumes
A Trusted Platform Module (TPM) version 1.2
Considerations for Device Drivers
Considerations:
Most 32-bit drivers that work with Windows Server
2003 will also work with Windows Server 2008
You must use 64-bit drivers for a 64-bit operating
system
By default, unsigned 64-bit drivers will not load
Considerations for Application Compatibility
Considerations
Contact the vendor to ensure that applications are
supported on Windows Server 2008
Remember that the User Account Control (UAC)
feature may prevent some applications from running
on Windows Server 2008
Directory junctions may prevent some applications
from running on Windows Server 2008
The application compatibility check during an upgrade
is limited
A 16-bit application cannot run a 64-bit version of
Windows Server 2008
Lesson 3: Automating Windows Server 2008
Deployment
Considerations for Automated Deployment
What Is WAIK?
Considerations for Using Windows Deployment Services
(WDS)
What Is the Microsoft Deployment Toolkit?

Considerations for Automated Deployment
You should consider that automated deployment:
Limits user input during installation
Creates a consistent configuration
Makes deployment faster
May make customization more difficult
Requires a long lead time for testing

What Is WAIK?
The main WAIK tools are:

Windows System Image Manager (WSIM)
ImageX
WAIK documentation, which includes:
Windows Setup Technical Reference
Windows System Image Manager Technical
Reference
ImageX Technical Reference
Sysprep Technical Reference
Considerations for Using Windows Deployment
Services (WDS)
Considerations:
WDS provides centralized management of installation
Pre-Boot Execution Environment (PXE) is used to start
the installation process
WDS can use multicasts to minimize network traffic
The Windows PE boot image must support the network
adapter in your server
What Is the Microsoft Deployment Toolkit?
Tools and guidance for deploying Microsoft operating
systems, including Windows Server 2008
Deployment approaches:
Zero Touch Installation for System Center
Configuration Manager (SCCM) 2007
Zero Touch Installation for Systems Management
Server (SMS) 2003
Lite Touch Installation

Lesson 4: Selecting the Appropriate Administration Tool
What Are the Graphical Administration Tools?
What Are the Command-Line Administration Tools?
Implementing Remote Administration
What Are the Graphical Administration Tools?
What Are the Command-Line Administration Tools?
ServerManagerCmd.exe
-query (-q)
-inputPath <answer.xml> (-p)
-install <Id>
-remove <Id>
-help (-?)
Network command-line tools
Netsh (IP, RAS, Routing, DHCP, WINS,)
Netstat
Active Directory command-line tools
CSVDE/LDIFDE
Dsadd, dsmod, dsrm, dsmove, dsquery
Ntdsutil
Windows PowerShell
C:>
Implementing Remote Administration
Change the focus of a tool
Install Remote Server
Administration Tools
Use Remote Desktop
Use WinRM
Use WinRS
Change firewall settings
Questions
What are the advantages of consolidated servers,
dedicated servers?
Why considerations for Performing Server Upgrades are
important?
Do you prefer to do server upgrades or migrations? Why?
Do you see a need for BitLocker?
How do you verify that an application is suitable for a new
operating system?