Studio Press

Just another Blogger Blog

Small Business Server Support

Automate data classification with new features in Windows Server 2008 R2

Microsoft has added many features to Windows Server 2008 R2, and once you install the roles and features to add these modular goodies to your implementation, there are many impressive new things you can do. In this post, I am going to look at a new feature that works for Windows Server 2008 R2 File Servers called File Classification Infrastructure.

To use the classification features, you will need to install File Server Role and the File Server Resource Manager feature(s) associated with it. To install the File Server Role, complete the following steps:

1. Open the Server Manager.
2. Scroll down to section 3, Customize This Server.
3. Click Add Roles to add server roles.
4. Select the File Services Role and complete the roles wizard.

Once the needed roles are installed, the File Server Resource Manager (FSRM) console can be launched by selecting it from the Administrative Tools group or by entering fsrm.msc in the search box on the Start menu.

Why classify data?

Classifying data can help make data more accessible (or less accessible) to the users in your environment who need it. For example, suppose the Human Resources department created a folder on the file server within their department called Litigation. In this folder they place files that are needed for any litigation the company is associated with. The permissions on the folder are configured so that HR employees can edit the contents of the folder and add documents. Senior management can read the documents in the litigation folder, and the HR manager can remove documents that are no longer needed.

The question is, how is it determined that a document is no longer needed and how do we apply these criteria to existing files in such a way that minimizes user interaction with them? The new classification feature in Windows Server 2008 R2 makes it possible to automatically assign classification information to files on file servers and apply policy to them based on that information.

Classification in Windows Server 2008 R2 consists of several elements: properties, rules, and a policy segment including reporting and file management. Properties are the fields that you wish to assign a value for, and the rules are the criteria that set these values. There are other methods of classification available as well, including applications and scripts. More detailed examination of the methods of configuring the File Classification Infrastructure will follow in a future post.

To expire files, consider moving the files that meet a set of conditions, perhaps the last modified date greater than 30 days, to a different folder that an administrator can manually clean up at his or her leisure. Or you can create another rule, using a script, that can purge on a schedule, configured by the choice of the administrator or IT staff.

Source: http://blogs.techrepublic.com.com/networking/?p=1441

File Server Migration to Windows Server 2008

Windows Server 2008 has been out for a while and has proven to be a stable operating system. Now that Microsoft has released the first "real" service pack (SP2), more companies are looking at the possibility of upgrading to Windows Server 2008. Although the coexistence of Windows Server 2008 and Windows 2003 shouldn't pose a problem, the actual server migration process can be a bit tricky. In this article, I want to talk about some of the issues that you may encounter when migrating file servers.

The file server migration process can be deceptively simple. In fact, Microsoft offers a free utility to assist you with the migration process. Even so, there is usually a lot more to performing a migration than just running a migration utility.

Hardware considerations

One of the first things to consider is whether or not you will be reusing your existing file server hardware. Keep in mind that if you deploy new server hardware, then the migration process will likely be easier -- especially if you are using the Windows Distributed File System (DFS) on your current file servers. One of the primary advantages to using new hardware is that you can leave your existing server in its current state. That way, if something goes wrong during the migration process, you can still fall back on your old server.

If you choose to reuse your existing hardware, it's important to carefully plan the operating system upgrade. This is especially true if you are using DFS or a clustering solution.

How long will the migration take?

Another major consideration is the amount of time it takes to complete the file server migration process. For instance, suppose you are not using DFS, and you want to use new hardware to host the new file server. In that situation, you can install and configure Windows Server 2008 on the new server without disrupting the users.

The File Server Migration Toolkit

Microsoft has created a free download called the File Server Migration Toolkit that you can use to get around the UNC path issue for migrations to Windows Server 2003 or 2008.

Full detail available here: http://searchwindowsserver.techtarget.com/tip/0,289483,sid68_gci1353653,00.html

Wireless Print Servers

A wireless print server allows one or two printers to be conveniently shared across a WiFi network. Wireless print servers for home networks generally are available in both 802.11b and 802.11g varieties.

Wireless print servers offer the following advantages:

* Allows printers to be conveniently located anywhere within wireless network range, not tied to the location of computers
* Does not require a computer be always turned on in order to print
* Does not require a computer to manage all print jobs, that can bog down its performance
* Allows administrators to change computer names and other settings without having to re-configure the network printing settings.

A wireless print server must be connected to printers by a network cable, normally USB 1.1 or USB 2.0. The print server itself can connect to a wireless router over WiFi, or it can be joined using an Ethernet cable.

Most print server products include setup software on a CD-ROM that must be installed on one computer to complete the initial configuration of the device. As with network adapters, wireless print servers must be configured with the correct network name (SSID) and encryption settings. Additionally, a wireless print server requires client software be installed on each computer needing to use a printer.

The Linksys WPS54G 802.11g USB wireless print server is shown. Print servers are very compact devices that include a built-in wireless antenna and LED lights to indicate status.

Source: compnetworking.about.com/

What you need to enable on Windows Server 2008 for SCCM 2007

Below is a list of the what you need to enable on Windows Server 2008 for SCCM 2007 to pass the pre-requisites check and work. Role: Web Server (IIS). This will add Windows Process Activation Service automatically. Under Security, add Windows Authentication and URL Authorization Under Management Tools, enable IIS 6 Management Compatibility Application Development, add ASP Make sure Anonymous Authentication and Windows Authentication is enabled for the default web site Make sure the Allow for All Users authorization rule is set under the default web site.

You also need to enable the BITS Server Extensions features, which will enable other IIS role services. You need to download and install WebDAV. Once installed, you need to enable and configure it. You must set your configuration as shown here.

Specifically you need to set: Allow property queries with infinite depth to true Allow Custom Properties to false Allow anonymous property queries to true Create an authoring rule for All users to give read access to all content

You should now pass SCCM 2007 prerequisite check, as shown here.

Below is a dump of all the roles and features that are enabled on my SCCM box. Note I have some extras, as I'm running a SCCM Preboot Execution Environment Boot point, so I also need WDS installed. ----- Roles ----- [X] File Services [X] File Server [FS-FileServer] [X] Web Server (IIS) [Web-Server] [X] Web Server [Web-WebServer] [X] Common HTTP Features [Web-Common-Http] [X] Static Content [Web-Static-Content] [X] Default Document [Web-Default-Doc] [X] Directory Browsing [Web-Dir-Browsing] [X] HTTP Errors [Web-Http-Errors] [X] HTTP Redirection [Web-Http-Redirect] [X] Application Development [Web-App-Dev] [X] ASP.NET [Web-Asp-Net] [X] .NET Extensibility [Web-Net-Ext] [X] ASP [Web-ASP] [X] ISAPI Extensions [Web-ISAPI-Ext] [X] ISAPI Filters [Web-ISAPI-Filter] [X] Health and Diagnostics [Web-Health] [X] HTTP Logging [Web-Http-Logging] [X] Logging Tools [Web-Log-Libraries] [X] Request Monitor [Web-Request-Monitor] [X] Tracing [Web-Http-Tracing] [X] Security [Web-Security] [X] Basic Authentication [Web-Basic-Auth] [X] Windows Authentication [Web-Windows-Auth] [X] URL Authorization [Web-Url-Auth] [X] Request Filtering [Web-Filtering] [X] Performance [Web-Performance] [X] Static Content Compression [Web-Stat-Compression] [X] Management Tools [Web-Mgmt-Tools] [X] IIS Management Console [Web-Mgmt-Console] [X] IIS 6 Management Compatibility [Web-Mgmt-Compat] [X] IIS 6 Metabase Compatibility [Web-Metabase] [X] IIS 6 WMI Compatibility [Web-WMI] [X] IIS 6 Scripting Tools [Web-Lgcy-Scripting] [X] IIS 6 Management Console [Web-Lgcy-Mgmt-Console] [X] Windows Deployment Services [WDS] [X] Deployment Server [WDS-Deployment] [X] Transport Server [WDS-Transport] ----- Features ----- [X] .NET Framework 3.0 Features [NET-Framework] [X] .NET Framework 3.0 [NET-Framework-Core] [X] XPS Viewer [NET-XPS-Viewer] [X] BITS Server Extensions [BITS] [X] Remote Differential Compression [RDC] [X] Feature Administration Tools [RSAT-Feature-Tools] [X] BITS Server Extensions Tools [RSAT-Bits-Server] [X] Windows Internal Database [Windows-Internal-DB] [X] Windows PowerShell [PowerShell] [X] Windows Process Activation Service [WAS] [X] Process Model [WAS-Process-Model] [X] .NET Environment [WAS-NET-Environment] [X] Configuration APIs [WAS-Config-APIs]

Source: http://windowsitpro.com/mobile/pda/Article.cfm?ArticleID=101988&FAQ=1

How to Create the Printer Queues

Now that you have properly configured the Spooler resource with the necessary resources, you can create all of the print queues for all of the physical printers. You can also use the Clustool utility from the Resource Kit to migrate previously existing printer queues on a server to a clustered server. After that, use the Print Migrate utility to migrate the printer drivers. For best results, avoid having multiple servers configured to communicate directly with the same printer.

1. From one of the nodes or a remote computer that has administrative permissions to the cluster click Start, click Run, type \\VirtualServer where VirtualServer is the name that is specified for the Network Name resource on which the Spooler resource is dependent.
2. Double-click the Printers folder.
3. Double-click Add Printers to open the Add Printer Wizard, and then click Next.
4. Select Create a new port, and then click Next.

Note: TCP/IP ports are the only supported port type on a Windows Clustering. Use the Standard TCP/IP Port option unless the printing clients need RFC-compliant LPR ports. If this is the case, follow these steps:

1. In Control Panel, double-click Add/Remove Programs, and then click Add/Remove Windows Components to start the Windows Components Wizard.
2. Under Components, scroll down and click to select the Other Network File and Print Services check box.
3. Click Details to open the Other Network File and Print Services window, click to select the Print Services for UNIX check box, and then click OK to close the Other Network File and Print Services window.
4. Click Next to continue with the Windows Components Wizard.

When you complete the wizard, the LPR port will be available as a port type. By default, according to RFC 1179, LPR will use only eleven TCP ports.
5. Type the IP address of the network printer that you want to process the print jobs in the Printer Name or IP Address box.

You no longer have to create a locally-defined printer port configuration for each node. In Windows 2000 (and later) the port configuration is stored in the cluster registry and is therefore shared between all cluster nodes, under the following key:
HKEY_Local_Machine\Cluster\Resources\%Spooler GUID%\Parameters\Monitors\

6. Choose the appropriate driver for this printer, and then click Next.
7. Give the printer a unique name on the cluster server.
8. Choose a share name for the printer; this name must also be unique on this cluster. You do not want to have any other printers with the same share name on this cluster, even if they are in a different group and associated with a different Spooler resource.

9. Test the printing for this printer:

After you add all the desired print queues, use Cluster Administrator to move the group that contains the Print Spooler resource to all other nodes. This copies the printer drivers from the \PrinterDrivers folder on the shared disk to the %SystemRoot%\System32\Spool\Drivers\%Spooler GUID%\Drivers folder on that node.

For Detail Info: http://support.microsoft.com/kb/278455

File sharing in Windows Vista

with Service Pack 1 for Windows Server 2003, a new feature called Access-Based Enumeration (ABE) has been added to how file sharing works on Windows platforms. By installing and enabling ABE on a Windows Server 2003 SP1 or R2 file server, users on Windows XP desktops will only be able to see files and folders if they actually have permission to access them. I recently wrote an article for Windows Networking.com that explains how to implement this feature and lists a few gotchas you need to be aware of.

Trouble is, ABE only works if your network shares are on an ABE-enabled Windows Server 2003 SP1 or R2 machine. What if you allow some of the "power users" in your company to share folders on their own Windows XP desktop computers? In that case, you're out of luck as ABE can't be enabled on XP. With Windows Vista however, this has now changed -- Vista has ABE built right into it, and this means that when a user shares a folder on her machine and other users browse that share over the network, they will only see files and folders that they have permissions to access.

Note however that ABE only works if Vista users share their files or folders from within their user profile. Yes that's right, I said files -- in Vista you can share individual files provided you do so from within your user profile. For example, if user Jane Doe shares the file EndOfQuarterPresentation.ppt from within her Documents folder on her computer desk22.mtit.com, then other users to whom she has granted permissions will be able to view and access this file over the network by using the path \\desk22.mtit.com\Users\JaneDoe\Documents\EndOfQuarterPresentation.ppt.

For Detail visit: http://www.itworld.com/nls_windows_tullochvista060925

D-Link DP-301U Printer Server

Are you forever doomed to leaving a PC running 24-7 just to share the printer?

Not if you plug a print server into your router, then plug the printer into the server. Then all PCs on your network can tap that inkjet or laser.

This may not sound like a major deal, but trust me: Once you've sampled this kind of setup, you can't go back to old-school printer sharing.

Buy.com has the D-Link DP-301U Printer Server for $19.99 shipped. That's half the usual price and a bargain compared with buying a new, network-compatible printer.

These are new units, not refurbs, and you don't have to deal with any rebates. The DP-301U is compatible with Windows and Mac networks; all you need is a printer that has a USB interface.

Make that a compatible printer. The DP-301U works with most Canon, Epson, HP, and Lexmark models--check D-Link's compatibility list (which to me looks a little out of date--I suspect there are newer printers that will also work) to make sure your model is supported.


Source: CNET
iYogi Server Services

Labels