None much for me to say here.
Showing posts with label Windows Server 2008. Show all posts
Showing posts with label Windows Server 2008. Show all posts
Tuesday, December 25, 2007
Monday, December 24, 2007
Server Management in Windows.Server.2008 ServerCore - Part 2
Disk Management for ServerCore Installation
If you're interested in the security of your server, whether it be a plain server role or a RODC, installing BitLocker helps out a lot.
Yes, we do have syskey but having the whole drive encrypted brings it to a whole new level.
What's in here?
-Summary on BitLocker Requirements
-Diskpart Basics
-Jaeson
Note: Syskey is on by default protecting your authentication database in the file system and no lame story of someone putting a server offline and stealing the database files should make you gullible.
BitLocker requirements
As it turns out, my assumptions of how BitLocker should be installed on a Windows 2008 system is the same for Vista. Too bad I didn't partition my full install of Windows 2008 properly for BitLocker.
Adding the BitLocker feature: start /w ocsetup BitLocker
Note: My machine doesn't a TPM chip but that isn't much of a problem as you can always go around that obstacle. But doing it in ServerCore seems very much of a problem that we'll try to solve.
DiskPart Basics
How do you exactly use Diskpart?
Easy!
Type diskpart in the command-line, hoping you have admin privileges
Exhibit 1
C:\>diskpart
Microsoft DiskPart version 6.0.6001
Copyright (C) 1999-2007 Microsoft Corporation.
On computer: MISNET-DC-W2K8
DISKPART>
How to get help? Easier.
Exhibit 2
Microsoft DiskPart version 6.0.6001
Copyright (C) 1999-2007 Microsoft Corporation.
On computer: MISNET-DC-W2K8
DISKPART> help | ?
That means type "help" or the "?" symbol.
Note: Don't get any ideas that this tool will help you after you install ServerCore. Diskpart-ing must be done before installation of the OS choosing the "Repair Now" option.
Tip: Want to add on disk space on your system drive?
DISKPART> extend size=[whatever value your system allows you to reclaim]
Well, on Windows Vista and Server 2008, extending your volume is possible - this assumes that you didn't setup all of the diskspace for your primary partition and reserved some for another partition that you eventually want to edit out of your system or you just want to reclaim space.
If you're interested in the security of your server, whether it be a plain server role or a RODC, installing BitLocker helps out a lot.
Yes, we do have syskey but having the whole drive encrypted brings it to a whole new level.
What's in here?
-Summary on BitLocker Requirements
-Diskpart Basics
-Jaeson
Note: Syskey is on by default protecting your authentication database in the file system and no lame story of someone putting a server offline and stealing the database files should make you gullible.
BitLocker requirements
- Properly formatted drive (see my previous side note post)
- Add BitLocker as a feature
As it turns out, my assumptions of how BitLocker should be installed on a Windows 2008 system is the same for Vista. Too bad I didn't partition my full install of Windows 2008 properly for BitLocker.
Adding the BitLocker feature: start /w ocsetup BitLocker
Note: My machine doesn't a TPM chip but that isn't much of a problem as you can always go around that obstacle. But doing it in ServerCore seems very much of a problem that we'll try to solve.
DiskPart Basics
How do you exactly use Diskpart?
Easy!
Type diskpart in the command-line, hoping you have admin privileges
Exhibit 1
C:\>diskpart
Microsoft DiskPart version 6.0.6001
Copyright (C) 1999-2007 Microsoft Corporation.
On computer: MISNET-DC-W2K8
DISKPART>
How to get help? Easier.
Exhibit 2
Microsoft DiskPart version 6.0.6001
Copyright (C) 1999-2007 Microsoft Corporation.
On computer: MISNET-DC-W2K8
DISKPART> help | ?
That means type "help" or the "?" symbol.
Note: Don't get any ideas that this tool will help you after you install ServerCore. Diskpart-ing must be done before installation of the OS choosing the "Repair Now" option.
Tip: Want to add on disk space on your system drive?
DISKPART> extend size=[whatever value your system allows you to reclaim]
Well, on Windows Vista and Server 2008, extending your volume is possible - this assumes that you didn't setup all of the diskspace for your primary partition and reserved some for another partition that you eventually want to edit out of your system or you just want to reclaim space.
Labels:
BitLocker,
Diskpart,
Extend,
ocsetup,
Server Core,
Shrink,
Windows Server 2008
Server Management in Windows.Server.2008 ServerCore
I study for certification exams because it's part of my job and I've always come across interesting facts through the course of my studies and eventually forget them. Now, I have a place to go back to and review them all.
What's to expect in this blog?
-What is Server Core
-Server Management and Maintenance (for the GUI)
-ServerCore Management - What I did
-Jaeson
What is ServerCore?
ServerCore (maybe somewhat MinWin in essence) is a minimalistic version of Windows Server 2008 - less the UI, less the annoying and absurd UI at times, and less "that's so easy to do 'coz I saw you do it" thing.
Wouldn't you agree this would be fun?
I'm fancying ServerCore because it's as close as I can get to configuring a router - I'm from the Cisco world and got ported to the Windows galaxy. I'm enjoying so far.
I went to one of Microsoft's exhibits and played around with this new Toshiba laptop that was part of the event - free use of Windows Vista. Instead of clicking with the mouse all day I remembered Vista's new feature - Windows Firewall with Advanced Security, or was that Protection? I'm a frequent listener of TechNet Webcasts.
I spent around 30 minutes and finished playing around with Consec. And was I happy! ^___^
Server Management and Maintenance (for the GUI)
If we were to manage a gui-type server, we automatically perform tasks on the server that includes optimizing the server, prepping it up, and making it custom-built for our very own production network. Tasks include:
Installing Server Core
Changing the admin password
Configuring networking settings
Setting appropriate Regional settings
Changing video resolution
Adding or removing secure screensavers
Installing programs or adding services
Tinkering with the firewall
...and a lot of other things to do
The above are very common tasks. So, how do we exactly accomplish this in ServerCore?
ServerCore Management - What I did
[Installing ServerCore]
ServerCore installation is pretty straight forward. But if you don't have extra machines, Microsft's Virtual PC 2007 or Virtual Server 2005R2 and VMWare's Workstation 6.0 of VMWare Server will help you out a lot. I'm a fan of VMWare but I'm currently using VPC2007.
But whatever app you've used or method, that would do. (I guess I need to play with WDS later)
But before we go on and talk about the installation part, which I'll be creating two sections of - normal and unattended - let me first walk you through the bit locker prep thing for ServerCore.
[Side_Notes]
BitLocker - Installation Part
In a nutshell, I did the following to one of my ServerCore installations:
What's to expect in this blog?
-What is Server Core
-Server Management and Maintenance (for the GUI)
-ServerCore Management - What I did
-Jaeson
What is ServerCore?
ServerCore (maybe somewhat MinWin in essence) is a minimalistic version of Windows Server 2008 - less the UI, less the annoying and absurd UI at times, and less "that's so easy to do 'coz I saw you do it" thing.
Wouldn't you agree this would be fun?
I'm fancying ServerCore because it's as close as I can get to configuring a router - I'm from the Cisco world and got ported to the Windows galaxy. I'm enjoying so far.
I went to one of Microsoft's exhibits and played around with this new Toshiba laptop that was part of the event - free use of Windows Vista. Instead of clicking with the mouse all day I remembered Vista's new feature - Windows Firewall with Advanced Security, or was that Protection? I'm a frequent listener of TechNet Webcasts.
I spent around 30 minutes and finished playing around with Consec. And was I happy! ^___^
Server Management and Maintenance (for the GUI)
If we were to manage a gui-type server, we automatically perform tasks on the server that includes optimizing the server, prepping it up, and making it custom-built for our very own production network. Tasks include:
Installing Server Core
Changing the admin password
Configuring networking settings
Setting appropriate Regional settings
Changing video resolution
Adding or removing secure screensavers
Installing programs or adding services
Tinkering with the firewall
...and a lot of other things to do
The above are very common tasks. So, how do we exactly accomplish this in ServerCore?
ServerCore Management - What I did
[Installing ServerCore]
ServerCore installation is pretty straight forward. But if you don't have extra machines, Microsft's Virtual PC 2007 or Virtual Server 2005R2 and VMWare's Workstation 6.0 of VMWare Server will help you out a lot. I'm a fan of VMWare but I'm currently using VPC2007.
But whatever app you've used or method, that would do. (I guess I need to play with WDS later)
But before we go on and talk about the installation part, which I'll be creating two sections of - normal and unattended - let me first walk you through the bit locker prep thing for ServerCore.
[Side_Notes]
BitLocker - Installation Part
In a nutshell, I did the following to one of my ServerCore installations:
- Choosing "Repair Now"
- Diskpart-ing
- create primary partition size=1500
- assign letter=S
- active
- cre pri par
- assign letter=C
- exit
- format both using QUICK
But I really wanted to know if that was how I should do it.
[/Side_Notes]
What you'll notice different about the ServerCore install, and that of the full installation is that you can change the password for the default Administrator account. Nice change from Beta3 and RC0.
That's actually it. Pretty easy. But what comes next is something rather perplexing, which I'll cover next after a short break.
Labels:
70-648,
Longhorn,
Management,
MinWin,
Server Core,
ServerManagerCMD,
Windows Server 2008
Subscribe to:
Posts (Atom)