Gehärtet von Anfang an { Windows 2008: Spezielle Aufgaben } 3/28/2017 1:40 PM Gehärtet von Anfang an { Windows 2008: Spezielle Aufgaben } Nils Kaczenski IT Consultant Microsoft Most Valuable Professional © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Wenn Kollegen dreimal klopfen ? Server sind zu kompliziert! Neue Filialen! Hallmackenreuther GmbH Windows? Klickibunti. (Hihi) Marc Hallmackenreuther Karl Koop Thomas Broccoli Ellen Bogen

Wer vor Ihnen steht Nils Kaczenski IT-Consultant in Hannover Windows, Exchange, SQL Verfügbarkeit, Sicherheit Strategische Beratung Projektleitung Fachautor Windows Microsoft Press iX, cʼt, IT-Administrator Community: faq-o-matic.net Nils@Kaczenski.de

Was Sie erwartet Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core

Was Sie erwartet Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core

Rollen: Der neue Server-Manager Server-Manager? Da war doch was …? Ziel: Fehler vermeiden Rollen in Windows Server 2008 Serverdienste mit Konfiguration Features in Windows Server 2008 Zusatzfunktionen mit Konfiguration

Rollenspiele Featuring … Server im Griff 3/28/2017 1:40 PM { Server Manager } Demo Rollenspiele Featuring … Server im Griff © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Was Sie erwartet Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core

Powered by … Terminal Services Clustering Virtualisierung TS Gateway Remote Apps Clustering Jetzt auch für Nicht-Gurus Geo-Clustering ohne Klimmzüge Virtualisierung Hyper-V Noch etwas Geduld …

Terminal Services Gateway Internet DMZ Corp LAN Terminal Server External Firewall Internal Firewall Home Internet Terminal Server HTTPS / 443 Hotel Terminal Services Gateway Server Terminal Server Business Partner/ Client Site INF210

Cluster Management Cluster Administrator heute… INF210

Windows Server Virtualization VM 1 “Parent” VM 2 “Child” Virtual Hard Disks (VHD) Virtualization Platform and Management INF210

Wenn Windows dicht macht Network Access Protection (NAP) Die Quarantäne im LAN Windows Vista und Windows XP SP3 Systemhärtung Windows Firewall (Outbound! Standard!) Diensthärtung BitLocker … mehr bei Frank Solinske Gruppenrichtlinien Neue Technik – neues Glück! Und noch mehr Einstellungen …

Network Access Protection Policy Servers z. B. Patch, AV 3 DHCP, VPN Switch/Router 1 2 NPS Regel verletzt Quarantäne-Netzwerk 4 Update- Server z. B. Patch Windows Client Regel erfüllt 5 Produktions-Netzwerk INF210

Windows-Firewall Gruppenrichtlinien 3/28/2017 1:40 PM { Sicher doch … } Demo Windows-Firewall Gruppenrichtlinien © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Was Sie erwartet Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core

Nach Gusto: Active Directory Active Directory: Markenzeichen AD Domain Services (ADDS) AD Lighweight Directory Services AD Federation Services AD Rights Management Services AD Certificate Services Viel flexibler

RODC: AD für Zweigstellen Problem: „Server in der Teeküche“ Was heißt das für einen Domänencontroller? Lösung: Read-Only Domain Controller Active Directory nur zum Lesen Keine kritischen Kennwörter Lokale Admins ohne Domänenadministration „The Return of the BDC“?

Der DC mit wenig drin Hallmackenreuther GmbH Außenstelle Kleinkleckersdorf

RODC macht die Teeküche sicherer Neue Werkzeuge 3/28/2017 1:40 PM { Active Directory } Demo RODC macht die Teeküche sicherer Neue Werkzeuge © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Was Sie erwartet Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core

Wie der Core auf den Server kommt

Demo { Server Core } Windows ohne Windows 3/28/2017 1:40 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

? ! Fragen Rollenspiel: Der neue Server-Manager Powered by …: Unternehmens-Funktionen Nach Gusto: Active Directory Windows ohne Windows: Server Core Ellen Bogen

Windows Server 2008 weitere Ressourcen 3/28/2017 1:40 PM Windows Server 2008 weitere Ressourcen Windows Server 2008 Tech Center http://www.microsoft.com/germany/technet/prodtechnol/windowsserver/2008/default.mspx Windows Server 2008 Webcasts: http://www.microsoft.com/germany/technet/webcasts/windowsserver2008.mspx Windows Server 2008 Produktseite: http://www.microsoft.com/germany/windowsserver2008/default.mspx Microsoft Virtualization: http://www.microsoft.com/virtualization/default.mspx © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Ask the Experts Wir freuen uns auf Ihre Fragen: Technische Experten stehen Ihnen während der gesamten Veranstaltung in der Haupthalle zur Verfügung.

3/28/2017 1:40 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.