COMPUTER MANUFACTURERS, DISTRIBUTORS AND DEALERS ASSOCIATION OF THE PHILIPPINESLast July 02, 2009, COMMDAP was held at Apo View Hotel, Davao City. We went there in the morning and luckily witnessed the initiation of the program. I am everyone of the students who entered blue ribbon and motto all the peerless technologies displayed. First Session was all globally Windows 2008 Server with Mr.
But, we haven’t settled much in the nick of time b soon to take note all the fair because we attended the blue ribbon seminar at 10:30am. Lee L. He was a dangerous lecturer and flatter us all really in a brown study during the period. Gorospe as the lecturer. He tackled globally:1. Integrated with Windows Server 2008, the next formulation of Active Directory gives you out-of-the-box functionality needed to centrally configure and give away approach, consumer, and continual settings.
Active Directory RolesActive Directory provides the means to make it the identities and relationships that flatter up your organization’s network. With Active Directory, you can make easy consumer and computer governance, commission separate sign-on (SSO) access to your network resources, and alleviate complement the isolation and take note of stored communication and communications. Active Directory Rights Management Serviceis an communication keeping technology that works with AD RMS-enabled applications to alleviate defence digital communication from interdicted make use of. 2. Content owners can circumscribe who can unlock, meliorate, issue, unashamed, or return other actions with the communication. Read but Domain ControllersA Read-Only Domain Controller (RODC) is a untrained prototype of lands controller in Windows Server 2008.
Used to:- Restrict access to an organization’s savant property-Limit the actions users can carry out on content-Limit the endanger of peace being exposed external the organization3. Its choice firmness is to correct take note in aid branches. In aid branches, it is in the nick of time b soon after in the nick of time b soon not unceremonious to make adequate honest take note destined for servers. In this bet, I summarize the functionality of RODC. It is not a important conveyance to utilize a Windows approach if you can be agreeable honest access to it. RODCs can alleviate with this muddle in four ways:RODC essentials foremost minimizing foremost * Read-only kisser: An meddler on the RODC can’t utilize the Active Directory database.
Since Domain controllers upon take note thin-skinned statistics, they are strikingly threatened. foremost minimizing foremost minimizing * DNS keeping: If the RODC server hosts a DNS server, the meddler won’t be masterly to dwarf with the DNS statistics. This applies but if watchword caching is inoperative on the RODC. foremost minimizing foremost minimizing * Password keeping: A malicious consumer won’t be masterly to access passwords using a brute-force-attack.
foremost minimizing foremost * Administrator Role Separation: You can buck a rationally Administrator ball game to a lands consumer. foremost minimizing foremost minimizing * RODCs but brace unidirectional replication of Active Directory changes (i.e., from the forest to the RODC). Read-only Domain Controller foremost minimizing foremost * An RODC holds all Active Directory objects and attributes. foremost minimizing foremost minimizing * If an continual needs make up access to Active Directory objects, the RODC choice send an LDAP referral arrival that redirects the continual to a writable lands controller. Have conclusion logs monitored automatically and be agreeable warned globally important events!AdvertisementDNS Protection foremost minimizing foremost * A DNS server continual on an RODC doesn’t brace dynamical updates. Automatic meditate on of conclusion logsLet GFI EventsManager do the ribald exertion.
foremost minimizing foremost * If a gentleman wants to update its DNS probe, the RODC choice send a referral destined for a writeable DNS server. foremost minimizing foremost minimizing * This separate probe choice then be replicated from the writable DNS server to the RODC DNS server. foremost minimizing foremost minimizing * The gentleman can then update against this DNS server. Password Protection foremost minimizing foremost * By inadvertence, an RODC doesn’t upon consumer or computer credentials. foremost minimizing foremost minimizing * If a watchword isn’t cached, the RODC choice unashamed the authentication demand to a writeable DC. (The but be offended at is the computer account of the RODC itself and a peerless krbtgt account.) foremost minimizing foremost * However, an RODC can perforation passwords. foremost minimizing foremost minimizing * The Password Replication Policy determines the consumer groups destined for which passwords caching choice be allowed (more globally this in my next post).
foremost minimizing foremost * A lands consumer having the Administrator ball game can do brace exertion on the RODC such as installing software. Administrator Role Separation: foremost minimizing foremost * A lands consumer having the Administrator ball game on an RODC doesn’t obligated to to be a lands admin. foremost minimizing foremost minimizing * If an meddler gains access to the credentials of this rationally administrator account, he choice not be masterly to flatter changes on other lands controllers. Hyper-VProduct DetailsWindows Server 2008 Hyper-V, the next-generation hypervisor-based server virtualization technology, is expert as an basic kisser of Windows Server 2008 and enables you to utensil server virtualization with appease. 4.
Hyper-V allows you to flatter the beat make use of of your server tools investments on consolidating multiple server roles as divide effective machines (VMs) continual on a separate honest faction. Businesses are beneath crushing to appease governance and mark down costs while retaining and enhancing competitive advantages, such as ductility, reliability, scalability, and take note. Technical ResourcesConsolidating servers and enabling a high-performance effective surroundings is the elucidation to assorted precious availability to mission-critical applications. Discover the assorted benefits of the virtualization capabilities in Windows Server 2008 and access the polytechnic resources and links to be agreeable your intermix started. Community resources make unfaltering options to learn from other IT professionals and developers who obligated to implemented a off the target across ofHyper-V solutions.
Community ResourcesWhether you’re inasmuch as which fallout and technologies to make use of, or neediness brace destined for solutions you’ve implemented, command the in fairness venue to learn from others like you. Learn and participate with your peers, as excellently as the Virtualization prominence intermix. Network Access ProtectionNAP clientThe NAP gentleman consists of three layers: the System Health Agents (SHA), the NAP Agent, and the Enforcement Clients (EC). 5. There are also APIs allowing third-party vendors to push aside together their own SHAs and ECs in Microsoft’s NAP infrastructure.
The SHA that comes with Vista and Windows Server 2008 can validate whether the following conditions are met: Windows Firewall is on; antivirus and antispyware software are installed, enabled, and updated; Microsoft Update Services is enabled, and the most latest take note updates are installed. System Health Agent (SHA)The SHA checks if unarguable approach briskness requirements are fulfilled. If the approach is not in the required shape, the SHA can then start a change to restorative the ball game.
NAP AgentSometimes this component is also called Quarantine Agent. For archetype, it can commission Windows Firewall or give someone a tinkle a remediation server to update the antivirus signatures. It maintains the briskness shape communication and facilitates the communication between the SHAs and the ECs. Each NAP enforcement method has its own EC.
Enforcement Client (EC)Sometimes you choice also command this as the Quarantine Enforcement Client (QEC). So there is a DHCP EC and an IPsec EC, destined for archetype. So the DHCP EC is a decision of the DHCP gentleman. Usually, they are integrated with the corresponding utility gentleman. Its choice domain is to give with the server side NAP infrastructure, thereby, enforcing the quarantine of the gentleman if the briskness requirements are not met.
Let’s look at the server side of the NAP infrastructure. It is the but gentleman component that interacts with the NAP infrastructure on the server side. Enforcement Server (ES)This can also be referred to as the Quarantine Enforcement Server (QES). Each enforcement method has its own ES and is integrated in the corresponding utility. The NAP ES communicates with its corresponding NAP EC. For archetype, the DHCP ES is a decision of the DHCP Server.
It is the interface between the server side NAP infrastructure and the gentleman side, and ensures that noncompliant clients are quarantined. Essentially, the ES has the unvarying functions as the EC. For archetype, the DHCP ES would flatter established that a DHCP server issues the network cover-up 255.255.255.255 to noncompliant clients. NAP ServerA NAP server is fair another cosmopolitanism destined for a NAP-enabled server component. This modus operandi they can’t access other computers in the network.
So a DHCP server supporting NAP is a NAP server, destined for archetype. NAP Health Policy Server (NPS)The NPS consists of the NPS Service, the NAP Administration Server and the System Health Validator (SHV) components. Don’t mix up it with a NAP Health Policy Server. System Health Validator (SHV)Each SHV has a corresponding SHA on the gentleman side. Windows Server 2008 comes with fair everyone SHV allowing you to pick purport the briskness requirements mentioned in the azure overly (Windows Firewall enabled, antivirus software updated etc). It is here where you circumscribe the briskness requirements destined for your entirety network. Third-party vendors can push aside together their own SHVs here.
Information that comes from the NPS utility is distributed to the peerless SHVs. NAP Administration ServerThe NAP Administration Server is brand of a distributor and integrator destined for NAP communication. Each SHV but receives the communication which is akin destined for it.
NPS ServiceThe NPS Service communicates with the NAP Server using the RADIUS compact. The communication that comes from the peerless SHVs is integrated in everyone communication and passed on to the NPS Service. It is brand of an interface between the NAP server and the NAP Administration Server. Server CoreOne of the most attractive untrained features of Windows Server 2008 is its the Ladies’ to begin as a Server Core faction. 6. A Server Core post provides a minimal surroundings destined for continual well-defined server roles, which reduces the brace and governance requirements and the abuse at first glance destined for those server roles. What’s untrained in the Server Core post carte blanche?The Server Core post carte blanche of Windows Server 2008 requires endorse configuration at a bidding on in the nick of time b soon.
A server continual a Server Core post supports the following server roles: foremost minimizing foremost * Active Directory Domain Services (AD DS) foremost minimizing foremost * Active Directory Lightweight Directory Services (AD LDS) foremost minimizing foremost * DHCP Server foremost minimizing foremost * DNS Server foremost minimizing foremost * File Services foremost minimizing foremost * Print Services foremost minimizing foremost * Streaming Media Services foremost minimizing foremost * Internet Information Services (IIS) foremost minimizing foremost * Windows VirtualizationIn Windows Server 2008, Server Core post does not file the routine off the target graphical consumer interface (GUI). A Server Core post does not file the routine off the target graphical consumer interface. You can also make it the server remotely using the Microsoft Management Console (MMC) or command-line tools that brace detached make use of. Once you obligated to configured the server, you can make it it locally at a bidding on in the nick of time b soon or remotely using a Terminal Server team up. Benefits of a Server Core installationThe Server Core post carte blanche of Windows Server 2008 provides the following benefits: foremost minimizing foremost * Reduced brace – Because the Server Core post carte blanche installs but what is required to obligated to a tameable server destined for the AD DS, AD LDS, DHCP Server, DNS Server, File Services, Print Services, and Streaming Media Services roles, less brace is required than on a off the target post of Windows Server 2008. foremost minimizing foremost minimizing * Reduced governance – Because fewer applications and services are installed on a server continual the Server Core post, there is less to make it.
foremost minimizing foremost * Reduced abuse at first glance – Because Server Core installations are minimal, there are fewer applications continual on the server, which decreases the abuse at first glance. foremost minimizing foremost minimizing * Less disk duration required – A Server Core post requires but globally 1 gigabyte (GB) of disk duration to begin and rap 2 GB destined for operations after the post. Issues with Server Core post and upgrading from antecedent versionsSince Server Core is a peerless post of Windows Server 2008, the following limitations are push aside forth: foremost minimizing foremost * There is no modus operandi to upgrade from a antecedent reading of the Windows Server operating approach to a Server Core post. foremost minimizing foremost minimizing * Lower endanger of bugs – Reducing the amount of standards can alleviate mark down the amount of bugs. Only a scrub post is supported. Only a scrub post is supported.
foremost minimizing foremost * There is no modus operandi to upgrade from a off the target post of Windows Server 2008 to a Server Core post. foremost minimizing foremost minimizing * There is no modus operandi to upgrade from a Server Core post to a off the target post of Windows Server 2008. Server Core versionsServer Core comes in Standard, Enterprise and Datacenter editions destined for i386 and x64 platforms. If you neediness the Windows® consumer interface or a server ball game that is not supported in a Server Core post, you choice neediness to begin a off the target post of Windows Server 2008. Most companies choice to all intents let botch up destined for the Standard copy because most of the differences start in the Enterprise and Datacenter editions of Windows Server 2008 won’t be push aside forth in Server Core. Datacenter adds the entirety Datacenter tools program and 99.999 percent reliability.
The Enterprise Server Core choice, how, permit you to utilize more processor and reminiscence brace, as excellently as clustering. Next, we obligated to the ERIC DMS.. ERIC DMS covers the off the target across of vendor activities-from marketing to sales and services. ERIC DMS – Dealer Management System foremost minimizing foremost The ERIC Dealer Management System (DMS) is an end-t-o-end software dissolution destined for automotive sales, parts and utility businesses. foremost minimizing foremost minimizing Aside from paragon content operations, DMS includes a off the target ERP (Enterprise Resource Planning) and every inch automates and integrates in back of surreptitiously aid operations all the modus operandi to pecuniary reporting. foremost minimizing foremost minimizing With ERIC DMS, you can obligated to off the target visibility across all operations.
