IT Pro Tips : Windows Server 2008

Failover Cluster Validation and Troubleshooting with Windows Server 2008

itprotipsadmin — Fri, 07 Mar 2008 06:01:00 GMT

By Mark Burnett

What I like about the various TechNet webcasts that Microsoft produces is that you get unique information from the actual product Program Managers, usually information that never really makes it to the whitepapers. It’s one thing to read a product document written by a technical writer, but when you hear about it from the people who design the products and deal with the customers you get a completely unique perspective.

Today I watched a webcast titled Failover Cluster Validation and Troubleshooting with Windows Server 2008. Bad experiences with clustering in Windows 2000 and Windows 2003 led me to always look for other solutions—any other solution—before ever recommending using a Windows Server cluster.

Not using clusters on a regular basis meant that each time involved relearning the process and making the same mistakes over again, which can be frustrating. Watching this webcast made me realize that Microsoft is well aware of customer frustrations and have provided many new tools available to prepare, monitor, and debug Windows clusters.

The presentation covers the new Cluster Validation tool, logging and debugging features, and how Microsoft has changed their support policy for Windows 2008 clusters.

One important new tool introduced in the webcast is the Cluster Validation tool, which thoroughly checks all cluster nodes to ensure they are configured correctly for cluster operations. You can also use the tool to diagnose problems with existing clusters.

TIP: Test all cluster nodes together to enable the full range of tests that the Validation tool provides.

An interesting point brought up in the webcast is that Microsoft completely changed their support policy, which in the past involved strict configurations found on the HCL. Now, Microsoft will support any hardware configuration that passes the Validate tests.

Cluster events now have their own log in the Event Viewer to prevent flooding out other system events. In the cluster management console, there are also options to view filtered views of cluster events.

In Windows 2008, Microsoft replaced the cluster.log file with Event Tracing for Windows (ETW).

The webcast also introduces the tracerpt tool that allows you to parse EVT data into any format that works well for you.

If you expect to work with clustering in Windows Server 2008, I wouldn’t even start without first watching Failover Cluster Validation and Troubleshooting with Windows Server 2008. It certainly will save you some time and maybe a few headaches as well.

Advanced Group Policy Management

itprotipsadmin — Tue, 19 Feb 2008 06:01:00 GMT

By Orin Thomas

Labcasts are great combinations of traditional screencasts and virtual labs. When you access a labcast, you first watch a presentation on a particular technology, including a demonstration of how to use its functionality to perform common tasks. The second part of the labcast involves you then performing the same steps as you just saw in the first part of the presentation. This allows you to get a “hands on” feel for the information in the lesson you’ve just viewed.

This labcast explores Advanced Group Policy Management, a technology that can be used to extend group policy management in Windows Server 2003 environments. In the first part of the demonstration, you will learn about the change control node of the extended group policy management console. The exhibit shows how to use the change control node to configure domain delegation. This involves assigning administrative roles to user accounts.

You’ll learn about each role’s rights and permissions and how you can leverage that to manage group policy by listening to the labcast.

TIP: You'll learn about each role's rights and permissions and how you can leverage that to manage group policy by listening to the labcast.

By watching and participating in the labcast, you’ll learn how to use the console to submit group policy change management requests to users that have the appropriate permissions to edit group policy objects. Part of this process is shown in the exhibit.

A key concept of Advanced Group Policy Management is that rather than apply group policy changes directly, the tool allows modifications to be done on checked out copies of GPOs. It is only users that have been delegated the approval role who are able to deploy a modified GPO copy to the production environment. During the labcast, you will learn how this administrative role separation allows one set of administrators to perform the grunt work of editing group policy objects without having the ability to actually apply those edits directly to the production environment.

You will also learn in the labcast how to view an audit-trail so that you can see specifically which users have created, checked in and deployed specific group policy objects in your Active Directory environment. This audit-trail is shown in the next exhibit.

Although the release of Windows Server 2008 is just around the corner, it will be some time before most organizations begin to make the transition to the new technology. In the meantime, you can use tools like the AGPM console to better implement group policy change management operations within your organization. To learn more about the AGPM console, access this labcast by navigating to the following link for a lesson in Advanced Group Policy Management

Prepare Yourself for Windows Server 2008 – Part 2 of 8: New Tools to Streamline the Imaging and Deployment Process

itprotipsadmin — Wed, 13 Feb 2008 06:01:00 GMT

By Orin Thomas

In this webcast, Prepare Yourself for Windows Server 2008: New Tools to Streamline the Imaging and Deployment Process, John Baker takes us through the new operating system deployment features of Windows Server 2008 known as the Windows Server Deployment, or WDS role. Baker starts by explaining that the new deployment technologies for Windows Server 2008 and Windows Vista are all based on the Windows Image Format, which uses the WIM file extension. The webcast shows that each WIM file can contain multiple operating system images. Baker’s first demonstration in the webcast is to show you how to manipulate operating system images using the IMAGEX command line tool. He shows how to mount an image in an empty directory using the IMAGEX, adding content to the image by dragging it to the directory using Windows Explorer and then how you can commit the changes to the image so that the image with the new content can be deployed using WDS.

Once the webcast finishes with the manipulation of images, Baker covers how you set up the WDS role on a Windows Server 2008 computer. He shows how to configure PXE options so that computers without operating systems but compatible network cards can contact the WDS server to receive their images.

You will learn also how you can configure a WDS server with an automatic naming scheme.

TIP: Automatic naming schemes allows each computer that has its operating system deployed by WDS to have a unique name on the network.

Next in the presentation, Baker shows you how to add boot files for each processor architecture. These boot files are used to boot an environment which allows the operating system to begin installing when booted off a PXE compliant network card.

By accessing the screencast you’ll also learn about creating capture images, which allows you to capture an existing configuration. You see how you can use the wdsutil command line utility to perform all of the functions that can be completed using the Windows Deployment Services console. This will be an area of interest for those of you that are considering how to automate the WDS process using scripting and scheduled tasks.

The webcast also explores the process of creating and applying an unattended installation file to a specific image. This type of file allows the automation of responses to common installation prompts such as time zone, domain membership and all of the other questions that administrators must answer when performing a standard operating system deployment.

From WDS the webcast moves to the tools that you will use for more complex deployment scenarios. The primary tool covered is System Center Configuration Manager 2007, which is the successor to the Systems Management Server line of products. By reviewing the webcast, you’ll learn about the specific tasks that SCCM 2007 can be used for and how deploying the product will help you as a systems administrator.

This part of the webcast will be very useful if you aren’t entirely sure what the practical differences are between what you can accomplish in terms of OS deployment with SCCM2007 versus the WDS Role that is available with Windows Server 2008. I came away from the webcast with an understanding of the types of network environment where WDS would be enough and the types of environments where SCCM2007 would really make a difference.

You can learn more about operating system deployment options with Windows Server 2008 by accessing this interesting and informative webcast at:

Prepare Yourself for Windows Server 2008: New Tools to Streamline the Imaging and Deployment Process

Managing Windows Server 2008 Beta 3 and Windows Vista using Group Policy

itprotipsadmin — Tue, 12 Feb 2008 06:01:00 GMT

By Mark Burnett

Although I have seen links to virtual labs on TechNet for some time now, I never felt like I had the patience to actually do one. It turns out I was wrong—a virtual lab is perfect for someone like me. The lab I tried out was Managing Windows Server 2008 Beta 3 and Windows Vista using Group Policy.

The best thing about the virtual lab format is that you essentially work in one or more remote terminals that you can just exit out of and restart if things get too messed up. The instructions are on the right side to follow as you configure the machines.

In this particular lab, you walk through the process of configuring and testing Group Policy. It shows you how to use multiple local policies, a new feature in Windows Vista.

In Vista and Windows 2008, you can create different policies for different users. In this case, we create a new policy that applies only to non-administrative users.

TIP: Use multiple local policies to tightly lock down machines without limiting any capabilities for Administrators.

Another Group Policy feature the lab demonstrates is the new Administrative Templates XML file format, referred to as ADMX. One nice feature with ADMX files is that you can have separate ADML files for different languages.

The Virtual Lab then goes on to demonstrate how to set some of the new desktop management policies, such as device restriction, printers, and power settings.

While whitepapers and webcasts can be useful, sometimes you can just learn more by jumping right in and doing it yourself. The Virtual Lab format is perfect for doing that and is a very cool way to play around with software without ever having to install it.

I definitely recommend running through this particular lab, which you can find at Managing Windows Server 2008 Beta 3 and Windows Vista using Group Policy.

Windows Server 2008 Beta 2 Server Core

itprotipsadmin — Wed, 16 Jan 2008 06:01:00 GMT

By Richard Lane

Can you imagine Windows Server without its graphical desktop? Now with this Virtual Lab, Windows Server 2008 Beta 2 Server Core, you can try it out. Windows Server 2008 Server Core is a new installation option. Rather than installing a full desktop, Server Core is a minimal environment designed to be managed from the command line or remotely, for lower maintenance and a reduced attack surface. It is quite a culture shock for admins who have always worked through a GUI. This is an ideal way to get the feel of this new way of working.

There is not much to see in the Virtual Lab, but that is exactly the point. This Lab is all about managing a server from the command line. The lab walks through how to join a domain, enable a firewall, and add server roles including DNS and DHCP.

TIP: I was puzzled about why the password I entered did not work. I discovered it because it contained an @ symbol, and my keyboard layout was not standard US. You can get round this by using “Send @ Key” from the Action menu, or just checking what your keyboard is actually typing.

The lab walks through how to add roles to the server from the command line. I made a couple of typing errors, but that does not matter; just try again. Occasionally you get a restart dialog, but the manual says it is OK to save time by choosing No.

A cool feature of this lab is that you use several different virtual servers and switch between them. You actually get to manage an entire virtual network!

One of the virtual machines is Windows Server 2008 with a full GUI. Working from the command line is neat, but it felt good to get back to a familiar GUI and check some of my work using tools like Active Directory Users and Computers.

TIP: When working in a Virtual Lab, the mouse pointer is trapped in the virtual PC. Press Alt + Gr to release the mouse back to your desktop.

The walkthrough continues with a number of optional components. In some ways that’s misleading: most things are optional with Server Core. It does demonstrate that “Core” does not mean “Limited”. You get the core plus exactly what you need.

A neat thing about this lab is that although there are some guided tasks, you can also explore your Virtual Server. I thought it would be fun to look at Task Manager and see what was running.

I was glad to see that Notepad is available in Server Core. What would I do without one of the oldest applications in Windows?

The lab closes with a look at all the ways you can manage a Server Core machine. WinRS (WIndows Remote Shell) is one particularly powerful option for remote management.

After completing this lab I had a good understanding of what a Server Core installation really means. That will help a lot as I get to grips with real-world installs.

TechNet Virtual Lab: Windows Server 2008 Beta 2 Server Core .

Prepare Yourself for Windows Server 2008

itprotipsadmin — Fri, 11 Jan 2008 06:01:00 GMT

By Orin Thomas

In this 70 minute webcast you’ll learn about several great new features of the Windows Server 2008 operating system. The webcast begins with a comprehensive discussion on the functionality of the new Server Manager console. What Windows Server 2003 administrators will find interesting about this console is how server roles, such as IIS, DHCP and DNS can all be managed without switching between Windows.

Prepare Yourself for Windows Server 2008

An example shown in the webcast is the tight integration of Active Directory Users and Computers with the Server Manager console. Watching the webcast you really get a good feel for how these new tools work.

The webcast further demonstrates the manageability improvements of Windows Server 2008 by showing how simple it is to locate errors that require further investigation.

The webcast will teach you how to create a custom event viewer view, which is like a persistent event log view, that allows systems administrators to quickly view. This is a very useful systems administration technique and is definitely worth checking out.

The webcast details the RemoteApp process, explaining how this new technology allows the deployment of an application’s screen, without the entire remote desktop window, to a client’s computer. The webcast also details the process of configuring TS-Web Acess, that allows clients to open RemoteApp applications from a shortcut located on a web page.

The webcast also provides a significant amount of detail on creating a Terminal Services Gateway Remote Access Policy. This allows you to limit remote access users to specific terminal services resources on your Windows Server 2008 network. This is presented in an informative way that will allow you to use it on your own network.

This webcast is the start of a series that introduces administrators to the new features of Windows Server 2008. To access this excellent webcast and to learn more about these interesting new Windows Server 2008 features, click on the following link: Prepare Yourself for Windows Server 2008

Developing for Windows Server 2008 Terminal Services (Level 300)

itprotipsadmin — Tue, 08 Jan 2008 06:01:00 GMT

By Richard Lane

Terminal Services is the technology behind Remote Desktop and I use it all the time, but this webcast by Bernard Tritsch opened my eyes to what is possible when you take advantage of the Terminal Services API. It turns a popular feature of Windows into a scriptable, programmable component that enables both easy administration and capable custom applications. Tritsch also explains what’s new for Terminal Services in Windows Server 2008. It strikes me that the webcast would be useful both for IT Professionals and for developers, since it covers a variety of coding techniques including scripts, native C code, and programming with the .NET Framework. Although it is rated level 300, it is not too demanding, and anyone with a little knowledge of how to program for Windows will find it easy to follow. The webcast can be streamed online or downloaded, and lasts around 75 minutes.

Developing for Windows Server 2008 Terminal Services

It was clear immediately that the presenter knows the subject backwards. He is an MVP, consultant, and the author of a book on Terminal Services for Microsoft Press.

I could see this would be a comprehensive webcast, covering scripting through WMI, server and client programming, and a thing called Virtual Channels that I admit I knew little about.

Tritsch has a great slide showing the architecture of Terminal Services, which he showed at several points during the webcast. You can create client applications, server applications, or – you guessed – applications with both client and server components.

TIP: Did you know that Terminal Services is used not only for remote desktop, but also in fast user switching, Vista’s meeting space, and XP Media Center Edition?

Tritsch gave a lightning tour of the WMI (Windows Management Instrumentation) provider for Terminal Services. I learned how IT professionals can use this to control and configure Terminal Services with scripts, and how it can also be called from applications.

I saw WMI examples in Visual Basic Script, PowerShell, and C#. I couldn’t help noticing that the PowerShell example was the most concise.

Tritsch went on to explain the C API for server-side coding. Apparently it is a C API because the DLL, WTSAPI32, has been around since NT 4.0. He memorably described the coding approach as “Sandwich” style. Seasoned API coders will know exactly what he means.

Many developers today prefer to use the .NET Framework. Tritsch showed in detail how to create a wrapper class for .NET using platform invoke.

Tritsch moved on to client-side programming, and gave one of the most compelling examples in the webcast: a custom application which embeds a remote desktop through the Terminal Services ActiveX control.

TIP: Beware if you have existing web applications which depend on the Remote Desktop OCX control. This will not be supported in Windows Server 2008, which could break some web pages.

This little message box is more interesting when you realize it is created by a custom application using a key feature of Terminal Services – virtual channels. I did not realize before that this is how things like printer and sound redirection work in Remote Desktop. Apparently Windows Server 2008 extends this by providing dynamic virtual channels, addressing limitations in previous implementations. This is exciting for developers, as it lets custom Terminal Services clients communicate with server components behind the scenes.

I recommend this webcast for anyone working with Terminal Services. Developers will learn the scope of the Terminal Services APIs, while IT Professionals will learn how a little coding or scripting can tailor these services to fit a wide variety of requirements.

TechNet Webcast: Developing for Windows Server 2008 Terminal Services.

Windows Vista and Windows Server 2008 Branch Office Technology Webcast

itprotipsadmin — Fri, 04 Jan 2008 06:01:00 GMT

By Orin Thomas

Blain Barton’s Windows Vista and Windows Server 2008 Branch Office Technology webcast starts off talking about the branch office enhancements that have been made to Windows Server 2008, particularly when it is deployed with Windows Vista but finishes by providing substantial and interesting information about the features of Microsoft’s new server operating system, Windows Server 2008.

Blain starts by teaching us about the details of the new TCP/IP Stack and how it can be leveraged to more efficiently use bandwidth between branch office and headquarters sites. This part of the presentation provides enough detail for those of us that have a fair amount of experience with TCP/IP without getting arcane and geeky. That’s unusual as most TCP/IP presentations are either too simple or get so detailed that the audience gets cross eyed with boredom.

Blain then explains and demonstrates how policy based Quality of Service policies can be leveraged to allow you to make the most efficient use of precious WAN bandwidth resources. Blain provides a “hands on” demonstration of the creation and application of QOS Policies. I found this really interesting as QOS is an aspect of group policy that I haven’t spent a lot of time with. If you are unfamiliar with the technology, you might be surprised to learn what it can accomplish.

Although not specifically Branch Office related, Blain goes through how you can configure Wireless Network Policies for Windows Vista using Windows 2008. This demonstration includes interesting information such as how to have a non-broadcast wireless network higher on the preferred network list than broadcast wireless networks. In the past clients had a habit of connecting to broadcast wireless networks even if these were lower on the list of network priorities than non-broadcast networks.

Blain then covers one of the highlighted features of Windows Server 2008, the new Read Only Domain Controller role. If you don’t understand what the hoopla about RODCs is, you will get a lot out of this part of Blain’s presentation. He also discusses other new features such as on-demand replication before moving on to the Server Manager console, which is the core administrative interface of Windows Server 2008. Blain goes through the server manager console and effectively demonstrates how it will allow you will be able to perform common administrative duties more efficiently on Windows Server 2008. He also drills down into several familiar tools, demonstrating the benefits you’ll get in using the new tool when your organization migrates to Windows Server 2008.

Other things that Blain covers during the webcast include explaining the improvements in SMB 2.0, which is a little geeky but interesting for network types. Blain also provides an excellent introduction to the enhancements in Terminal Services. Although billed as being about Vista and Windows server 2008 branch office technologies, you should check out this presentation as it provides some excellent highlights about what you can get out of Windows Server 2008.

Windows Vista and Windows Server 2008 Branch Office Technology Webcast