SBS 2003 R 2 more than just patching
SBS 2003 R 2 more than just patching… Wayne Small [SBS-MVP] Technical Director Correct Solutions Pty Ltd wayne@correct. com. au www. SBSfaq. com
What is SBS 2003 R 2? Launched on July 11, 2006 Next revision of SBS 2003 Patch management Increased mailbox size Increased SPAM protection Improved licensing options Take us through to Cougar timeframe Oops…
What is SBS 2003 R 2? SBS 2003 with SP 1 Separate disk with “R 2 bits” You don’t have to install the R 2 components but why wouldn’t you? Not a free upgrade from SBS 2003 unless Software Assurance OEM technology guarantee (OEM 1/3/06 -31/8/06) www. microsoft. com/windowsserver 2003/sbs/r 2/upgrade. mspx Available from August 2006
Key Improvements in SBS 2003 R 2 Standard Based on SBS 2003 SP 1 Win 2003 Server SP 1 FSRM MMC v 3. 0 Exchange 2003 SP 2 Up to 75 GB Mailbox store WSS 2003 SP 2 WSUS 2. 0 + SBS Wizards!
Key Improvements in SBS 2003 R 2 Premium As per STD plus ISA 2004 SQL 2005 Workgroup Edition
Let’s talk Licensing… Pre SBS 2003 R 2 Allows for additional W 2003 Servers without need for W 2003 CAL purchase Still need to purchase W 2003 Server License Post SBS 2003 R 2 As above PLUS… Allows for additional Exchange 2003 and SQL 2005 WE servers No need to purchase Exchange 2003 or SQL 2005 WE CALs Just a licensing option – not a technical solution
How to… additional Exchange Server SBS supports multiple Exchange Servers SBS wizards don’t “know” about them. Wizard create mailboxes on first alpha server (not always SBS) OWA/Outlook over HTTP/RPC, Active. Sync will NOT work for users on the 2 nd server. Need to purchase W 2003 Server License Need to purchase Exchange 2003 Server License DO NOT need to purchase additional Exchange 2003 CALs
How to… additional SQL 2005 WE Server Must have SBS 2003 R 2 Premium Need to purchase W 2003 Server License Need to purchase SQL 2005 WE Server License DO NOT need to purchase additional SQL 2005 WE CALs DO need to you have purchased SBS 2003 R 2 Premium Edition CALS
How to… additional SQL 2005 SE Server SQL 2005 Standard Edition Need to purchase W 2003 Server License Need to purchase SQL 2005 SE CALs
SBS 2003 R 2 – Update Services It’s just WSUS right? No it’s not! Additional wizardry to make it easier to manage
SBS 2003 R 2 – Update Services Can WSUS do this? ? ? Email you daily with your patch status on your network Show you the computers that are not being included in patching? Auto approve some patches based on requirements? Only download patches that are NEEDED
Install Process Can only install R 2 onto a computer running SBS 2003 SP 1 Install Exchange 2003 SP 2 Install Windows Share. Point Services 2. 0 SP 2 Don’t have any instances of MMC running Must have SBS 2003 Administration & Monitoring components installed Must be logged in as THE “ 500” administrator account Need minimum 1 Gb free space of Update Services & 8 Gb (additional) free space for Updates Services content Will upgrade existing WSUS installations Needs fine tuning though
SBS 2003 R 2 – Installation Routine
SBS 2003 R 2 – Console
SBS 2003 R 2 – Update Services
SBS 2003 R 2 – Update Services
SBS 2003 R 2 – The Basics Wayne Small Tech. SBSGuru
SBS 2003 R 2 – Tips First 48 hours Get the critical updates and security fixes down and installed Beware – the false green tick Console – use the Refresh link – not F 5.
SBS 2003 R 2 – Update Services Maintenance Dependant on settings Will need to approve some updates Windows Defender pattern files IMF Updates Malicious Software Removal Tool
SBS 2003 R 2 – Under the covers SBS Wizardry Scheduled Tasks Computer Groups Group Policy Manual Settings
SBS 2003 R 2 – Scheduled Tasks 3 Tasks Update Services Auto Approval Task Runs hourly Automatically approves updates for your network Update Services Configuration Task Runs ONCE - 48 hours after the initial installation. Configures Windows Server Update Services for full functionality Update Services Synchronisation Task Runs every 5 minutes Ensures that Update Services has a complete list of computers that are on your network
SBS 2003 R 2 – Computer Groups 3 Groups Membership based on OS type Update Services Client Computers Win 2000 Pro/XP/Vista Update Services Excluded Computers Anything you don’t want patched Update Services Server Computers Win 2000 & 2003 Server SBS 2003 Server Use the Wizard to move computers, not WSUS
SBS 2003 R 2 – Group Policy Small Business Server Update Services Client Computers Policy Automatic Update type and time Small Business Server Update Services Common Settings Policy All master settings – WSUS server etc Small Business Server Update Services Server Computers Policy Automatic Update type and time
SBS 2003 R 2 – Manual Settings Don’t mess with things too much Change it too much and loose the Green Tick
SBS 2003 R 2 – Troubleshooting SBS Console Errors 0 x 80072 ee 2 – common error Transient Issue Server Side C: Program FilesMicrosoft Windows Small Business ServerSupport SBSUSSettings. log Configuration. Helper_Policy. log Client Side C: Windows. Update. log Windowsupdate = WSUS/MU Windows Update = SUS/AU/WU
SBS 2003 R 2 – Troubleshooting Wuauclt /detectnow /resetauthorization Use PSEXEC to run on remote machines
SBS 2003 R 2 – Extending its capabilities Create additional Computer Groups Manually move computers into the groups using the SBS Wizard
SBS 2003 R 2 – Mobile Users Notebook users no longer use VPN Still need to update them and monitor them Options Microsoft Update – but we loose visibility of updates VPN into the LAN on a regular basis – troublesome for the user Extend SBS 2003 R 2 Update Services
SBS 2003 R 2 – Mobile Users – Solution Create alternate Computer Group Create alternate GPO & assign to an OU Move computers into the OU Open up WSUS to the outside world Port 8530 STD - IP Restrictions Premium - ISA Publishing rule
Troubleshooting and Extending SBS 2003 R 2 Wayne Small Tech. SBSGuru
Exchange Improvements Exchange Server 2003 SP 2 Recipient filtering turned on by default IMF included with SP 2 but not configured IMF Autoupdate Enabled by default Up to 75 Gb PRIV & PUB Need to regedit to increase size Think about DR before doing this Increased Backup Size Increased recovery time
File Server Resource Manager (FSRM) Improved ability to restrict content of folder shares File type limits Improved notification SMTP email when limits are reached
FSRM - Installation Not installed by default Add/Remove Programs Windows components Management and Monitoring Tools Select “File Server Resource Manager” Insert Disk 1 when prompted, then the R 2 components disk Server will require a restart Uses the new MMC 3. 0 interface
Wrap up SBS 2003 R 2 – much more than just WSUS Licensing improvements Patch Management Improvements Antispam Improvements
SBS 2003 R 2 More information https: //partner. microsoft. com/sbs 2003/r 2 http: //www. microsoft. com/windowsserver 2003/sbs/r 2/d efault. mspx Documentation: http: //www. microsoft. com/windowsserver 2003/sbs/tec hinfo/productdoc/default. mspx www. SBSfaq. com
Resources Technical Chats and Webcasts http: //www. microsoft. com/communities/chats/default. mspx http: //www. microsoft. com/usa/webcasts/default. asp Microsoft Learning and Certification http: //www. microsoft. com/learning/default. mspx MSDN & Tech. Net http: //microsoft. com/msdn http: //microsoft. com/technet Virtual Labs http: //www. microsoft. com/technet/traincert/virtuallab/rms. mspx Newsgroups http: //communities 2. microsoft. com/communities/newsgroups/en-us/default. aspx Technical Community Sites http: //www. microsoft. com/communities/default. mspx User Groups http: //www. microsoft. com/communities/usergroups/default. mspx
© 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U. S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
- Slides: 38