Coach Culbertson | Train Signal, Inc.

Welcome to Windows Server 2008 R2 Training

Coach Culbertson MCT, MCITP, MCTS ,etc., etc.

What Is New In Server 2K8 R2

Coach Culbertson | Train Signal, Inc.

In this video:

A Little About Your Instructor Hardware Setup Whats In This Course

A Little About Your Instructor

Coach Culbertson | Train Signal, Inc.

About Benjamin Coach Culbertson

MCITP, MCSA, MCDBA, MCT, A+, Net+, CIW, and a few others 2 Year Tour of Duty as an Inner City High School Teacher in Chicago Launched a couple hundred careers

About Train Signal

Casual Training Method that teaches real skills first Scenario-Based Training to answer the question "Why does this change my life?"

Hardware Setup
Coach Culbertson | Train Signal, Inc.

Heres What I Have 2 Hyper-V Compatible Servers with Server 2K8 R2 installed 1 Server is a DC, DC1-R2 The Other is a Hyper-V box Both are
4GB RAM 2.4 GHZ Quad-Core Processors 2 - 250GB HDDs

Whats In This Course

Coach Culbertson | Train Signal, Inc.

And now, the Hit Parade for this course!

2. New Active Directory Management Tools 3. The Active Directory Recycling Bin 4. New Group Policy in Server 2008 R2 5. Build an [Link] Application Server on Server Core 6. Boot a Machine with a Virtual Hard Disk

Whats In This Course

Coach Culbertson | Train Signal, Inc.

7. Hyper-V Dynamic Storage and Quick Switch Settings 8. Remote Desktop Services: Personal Virtual Desktops 9. Hyper-V Clustering!?!? 10.2K8 R2+Win7: AppLocker [Link] [Link]: Direct Access

So now
Coach Culbertson | Train Signal, Inc.

you know about your instructor, the basics of the hardware you need if you want to play along at home, and what you and I are going to cover in the course

SO LETS GET GOING!

Coach Culbertson | Train Signal, Inc.

New Active Directory Management Tools

Easy-Peasy AD Management

New AD Management Tools

Coach Culbertson | Train Signal, Inc.

In this video:

The Shiny New Active Directory Management Console The Best Practices Analyzer RSAT On Windows7? YES!

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Engage the Active Directory Administrative Center Run the Best Practices Analyzer to find Best Practices for a particular Role Install RSAT on Windows 7

Coach Culbertson | Train Signal, Inc.

The Active Directory Recycling Bin

A PowerShell Solution to Save You Massive Time When Your User Accounts Get Trashed (Accidentally, of course)

The Active Directory Recycling Bin

Coach Culbertson | Train Signal, Inc.

In this video:

The Server 2008 R2 Domain Functional Level Coachs AD Toolbox: Activating and Using the AD Recycling Bin

The Server 2008 R2 Domain Functional Level

Coach Culbertson | Train Signal, Inc.

Theres a new Functional Level in Town

The new Server 2008 R2 Domain Functional Level has all the features of the Server 2008 Functional Level, but adds the AD Recycling Bin All Domain Controllers in your network must be running Server 2008 R2no exceptions

Coachs AD Toolbox
Coach Culbertson | Train Signal, Inc.

Activating and Using the AD Recycling Bin

I Built a PowerShell Script Mini-Library for you so you can use the AD Recycling Bin ASAP

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Identify the Functional Level of a AD Domain Install the PowerShell Editor on a Server 2008 R2 Machine Activate the AD Recycling Bin using Coachs AD Recycling Bin Mini-Library Script Restore an AD Object using Coachs AD Recycling Bin Mini-Library Script

Coach Culbertson | Train Signal, Inc.

New Group Policy in Server 2008 R2

And now for some new GPO Toys!

New Group Policy in Server 2008 R2

Coach Culbertson | Train Signal, Inc.

In this video:

New Look, Nice Interface Super Easy Power Plan Preferences Internet Explorer 8 Preferences Starter GPOs Now built-in!

What We Covered
Coach Culbertson | Train Signal, Inc.

After viewing this video, you should be able to:

Admire the new interface Set Power Preferences for Win XP, Vista, and Win 7 Clients Find IE 8 Group Policy Settings Using the Filter Options Set IE 8 Options in Group Policy Preferences Install and Use the Built-In Starter GPOs as a base for creating new GPOs

Coach Culbertson | Train Signal, Inc.

Build an [Link] Application Server on Server Core

You and I are going to build an IIS 7.5 [Link] Web Server From Start to Finish, Including FTP and Remote Management! BOOYAH!

IIS 7.5: Now with More Toys

Coach Culbertson | Train Signal, Inc.

In this video:

Ummm, yeah, Ive already told you what were going to do.
Included: The Batch Script for installing [Link] in Server Core So You Dont Have to Type A Billion Commands

What We Covered
Coach Culbertson | Train Signal, Inc.

Heres your punchlist

1. Change the password on the administrator account on Server Core R2 2. Use sconfig to do the basic configuration: 1. Rename the machine to something intelligible 2. Set up your Network IP Address and DNS settings 3. Set Time Zone, etc.

What We Covered
Coach Culbertson | Train Signal, Inc.

Punchlist Continued

3. Use sconfig to:

1. Enable Remote Management via MMC 2. Enable PowerShell 3. Enable Remote Management via Server Manager 4. Check Firewall Settings

4. Run the script included in this course, [Link]

What We Covered
Coach Culbertson | Train Signal, Inc.

More Punchlist! I Need More Punchlist!

5. Connect to your Server Core Machine using Server Manager on a separate machine 6. Connect Your Machine to your IIS Manager on a separate machine 7. Create an FTP site for your Server Core machine using IIS Manager 8. Set up any User Accounts that you want to have access to the FTP site

What We Covered
Coach Culbertson | Train Signal, Inc.

YES! More Punchlist Items

9. Test out the FTP site using either the command line ftp or connect with your favorite FTP client software (Filezilla rules!)
You can use RSAT on Windows 7 to manage your Server Core Machine using Server Manager. IIS Manager is also available for Win 7 (and Vista), and you can manage your Server Core Web Server with it as well. Dont forget when you log in to your FTP site to include the name of your Virtual Host: Ex: [Link]|UserName

Coach Culbertson | Train Signal, Inc.

Boot a Machine with a Virtual Hard Disk

Test Out New Server Stuff (or Win7 stuff!) Without Blowing Away Your Current OS!

Boot a Machine with a VHD

Coach Culbertson | Train Signal, Inc.

In this video:

Why Would You Do This? Coachs Toolbox | The VHDBoot Script

Why Would You Do This?

Coach Culbertson | Train Signal, Inc.

So,ummm...yeah, whats up with this VHD boot thing?

The Virtual Hard Drive lives on the physical hard drive

Instead of booting up from the OS on the physical drive, in Server 2008 R2 we can boot up from the VHD file on the physical disk.

Why Would You Do This?

Coach Culbertson | Train Signal, Inc.

and heres why

Loading up an OS thats different than your primary OS allows you to tweak, test, blow stuff up, and see how things workwithout blowing away your primary OS Great for developers and admins trying out new thingsand if doesnt work, delete the VHD Also been tested to boot a VHD from a USB driveGoogle or Bing this

Coachs Toolbox | The VHDBoot Script

Coach Culbertson | Train Signal, Inc.

Easy VHD Boot Setup

Well need to use the bcdedit command to set this up Its not hard, but its still a command thats easier to use a script for Lets try it out

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Copy a VHD file to another machine (BFD!) Use bcdedit /Enum to list the current entries in the Boot Manager Create a new boot set up with bcdedit /copy {current} /d Name You Type Here Modify the [Link] script with the GUID from the new cloned boot settings Run the VHDBoot script to set up the boot loader for an alternate boot and boot it

Coach Culbertson | Train Signal, Inc.

Hyper-V Dynamic Storage and Quick Switch Settings

Just a Few New Toys in Hyper-V in Server 2008 R2

Hyper-V Dynamic Storage

Coach Culbertson | Train Signal, Inc.

In this video:

A Quick Look at New Hyper-V Capabilities WHAT?!?! I Dont Have to Shut Down?
Quick Switch Settings

A Quick Look at New Hyper-V Capabilities

Coach Culbertson | Train Signal, Inc.

New Fun Stuff

Comparing Microsoft Hyper-V Server R1 to R2 Feature Physical processor support Logical processor support Physical memory support Live migration High availablility Hyper-V Server 2008 R1 Up to 4 processors Hyper-V Server 2008 R2 Up to 8 processors

Up to 16

Up to 64

Up to 32GB No No

Up to 1TB Yes Yes

A Quick Look at New Hyper-V Capabilities

Coach Culbertson | Train Signal, Inc.

And Even More Fun Stuff

Support for running up to 384 virtual machines with up to 512 virtual processors Processor compatibility mode for live migration across different processors from the same vendor Hot add/remove of virtual storage

WHAT?!?! I Dont Have to Shut Down?

Coach Culbertson | Train Signal, Inc.

Ummm, yeah, thats the point.

Now with Server 2008 R2, you can add or remove virtual SCSI Hard Disks without shutting down your VM Youll still need to boot up with a virtual IDE disk, thoughno hot swapping on IDE Its easy, let me show this now

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Describe some of the new advantages of running Hyper-V on Server 2008 R2 Add or remove virtual SCSI hard drives on a VM on the fly (without shutdown) Use the Quick Switch to move between VM Settings

Coach Culbertson | Train Signal, Inc.

Remote Desktop Services: Personal Virtual Desktops

Terminal Services No MoreNow Its all Remote Desktop Services

Remote Desktop Services

Coach Culbertson | Train Signal, Inc.

In this video:

Personal Desktops: ThinClient Style OSs Also, What is a VDI?

Personal Desktops: Thin Client Style OSs

Coach Culbertson | Train Signal, Inc.

Everything old is new again...

RDS Server

Why would you ever do this?

Reduced hardware costs (sort of) Greater Administrative Control and Security Its Cool

Hyper-V Server

Also, What the !@#$ is a VDI?

Coach Culbertson | Train Signal, Inc.

VDI is not a disease.

Virtual
Desktop

Infrastructure

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Define what a VDI actually is Install all the necessary Roles and Role Services required for an initial VDI Rename Win 7 VMs for use in a VDI Assign a User to a Personal Desktop Use RD Web Access to access a Personal Desktop VM

Coach Culbertson | Train Signal, Inc.

Hyper-V Clustering!?!?
Highly Available (and Highly Expensive) Virtual Machine Movement Between Servers

Hyper-V Clustering!?!?
Coach Culbertson | Train Signal, Inc.

In this video:

What Does It Take To Build Highly Available VMs? The 2 Methods of Easy VM Migration

What Does It Take To Build Highly Available VMs?

Coach Culbertson | Train Signal, Inc.

A lot of expensive hardware, thats what!

Heres what you need:

Two Hyper-V Servers with as close to identical hardware configs as possible A Separate SCSI-3 Compliant Storage Appliance
SAN/NAS Storage (iSCSI is a good option)

Your SAN/NAS must support SCSI-3 persistent connections

What Does It Take To Build Highly Available VMs?

Coach Culbertson | Train Signal, Inc.

Sowhat it does do once you have it built?

When one Virtual machine Machine needs to go down for maintenance, the VM can be migrated to the other live machine

SAN/NAS Storage (iSCSI is a good option)

The 2 Methods of Easy VM Migration

Coach Culbertson | Train Signal, Inc.

Moving your VM can be easy

The original method: Quick Migration
The Virtual Machine is taken offline, moved to the other machine, and then brought back up

The R2 method: Live Migration

The Virtual Machine is in essence copied to the other machine while the original continues to run Once the copy is moved, the original VM is removed from the source machine, while the new copy is happily running on the destination machine

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Describe what is required to build a Hyper-V Failover Cluster Describe the 2 methods of migration and the difference between the tw

But waittheres more

Super Secret Video

Coach Culbertson | Train Signal, Inc.

If you act right nowby continuing to watch.

Bonus: Coachs Hyper-V Clustering Science Experiment

Science Time!
Coach Culbertson | Train Signal, Inc.

And heres what Ive got

1 Frankenstein Intel Quad Core 4GB of RAM 3 NICs

1 VMWare Virtual Machine Windows Storage Server 2008 512 MB of RAM 3 NICs

1 HP Proliant ML350 Xeon Quad Core 4GB of RAM 2 NICs

ReadyNAS Pro Storage Appliance

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Describe Failover Clustering in terms of how its useful with Hyper-V Describe the Hardware Requirements for Failover Clustering Run the Validate a Configuration Wizard to determine viability of hardware for Clustering Attach iSCSI storage using the iSCSI Initiator in Server 2008 (and R2) Create a Basic Failover Cluster using a Node Majority and File Share Quorum configuration

What We Covered
Coach Culbertson | Train Signal, Inc.

Create a Highly Available Virtual Machine using the Failover Clustering Manager Describe the differences between Quick Migration and Live Migration

Coach Culbertson | Train Signal, Inc.

2K8 R2+Win7: AppLocker

Decide Who Can Run What Applications On Your Desktops

2K8 R2+Win7: AppLocker

Coach Culbertson | Train Signal, Inc.

In this video:

The AppLocker GPO Setting

The AppLocker GPO Setting

Coach Culbertson | Train Signal, Inc.

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Locate the AppLocker GPO Setting in the Group Policy Editor Configure the Application Identity Service to start automatically (and start it!) Use the Local Security Policy on a Win 7 client to identify applications that you want to lock down Create a basic AppLocker Rule to deny the running of an application for a particular user in both a GPO and in Local Security Policy

Coach Culbertson | Train Signal, Inc.

BranchCache
A Nifty Feature That Will Help Stop Your Branch Offices From Bleeding Bandwidth (And Make Your Users Happy)

BranchCache
Coach Culbertson | Train Signal, Inc.

In this video:

Stop the Bleeding! Two Methods of Implementing BranchCache The Easy Implementation: Co-Op

Stop the Bleeding!

Coach Culbertson | Train Signal, Inc.

When youve got a branch office

File Server

Two Methods of Implementing BranchCache

Coach Culbertson | Train Signal, Inc.

InsteadCooperative Mode BranchCache

File Server

Two Methods of Implementing BranchCache

Coach Culbertson | Train Signal, Inc.

OrHosted Mode BranchCache

File Server

The Easy Implementation: Co-Op

Coach Culbertson | Train Signal, Inc.

This is how we do it
First, install BranchCache on your File Server (or Web Server) Then, youll set up BranchCache on the Server using either Local Group Policy, a GPO, or by editing the Registry After that, make sure any shared folders that you want your Branch Office Users to have access to are BranchCache Enabled Configure the Client machines for BranchCache via Group Policy and the Firewall Exception Done

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Identify the problem of bandwidth bleed and slow download times in a Branch Office scenario Describe the advantages of BranchCache Install the BranchCache Role Service on Server 2K8 R2 Enable BranchCache using Local Group Policy on a File Server Enable BranchCache on Client Machines in a particular OU by using a GPO Create a Rule for your Client Firewall in the same GPO as your BranchCache settings Enable BranchCache on specific files and folders

Coach Culbertson | Train Signal, Inc.

Concept: Direct Access

An Overview of VPN Connections Without the VPN!

Concept: Direct Access

Coach Culbertson | Train Signal, Inc.

In this video:

So, Ummm, What Is This Again? What You Need To Build a DA Setup The Secret Behind Direct Access

So, Ummm, What Is This Again?

Coach Culbertson | Train Signal, Inc.

So heres how this works Direct Access provides

Internet

Woo-hoo! Access to all my stuff on the road!

VPN Access without a VPN Users can get access to all their usual stuff on the corporate network over standard internet connections Admins can push updates and GPO updates without the machine having to be actually on-premises

What You Need To Build a DA Setup

Coach Culbertson | Train Signal, Inc.

So now for the laundry list-o-wonder.

1. Server 2K8 R2 Machine for use as a Direct Access Server 2. Windows 7 running on your mobile machines 3. At least one DC and a DNS (BFO) running Server 2K8 R2 or 2K8 SP2 4. A PKI Infrastructure along with a Network Access Protection (NAP) 5. IPSec 6. IPv6 Infrastructure (or Teredo)

The Secret Behind Direct Access

Coach Culbertson | Train Signal, Inc.

And now heres whats behind the smoke and mirrors

Two NICs on your DA Server Internet One Connected To Internet One Connected To Intranet

The BIGGEST Secret to DA CONNECT THROUGH PORT 443 YES, THATS HTTPS!

What We Covered
Coach Culbertson | Train Signal, Inc.

After watching this video, you should be able to:

Describe the basic functions of Direct Access Describe the basic requirements of Direct Access Be able to talk about at least one of the secrets behind Direct Access