Showing posts with label Windows Server 2008. Show all posts
Showing posts with label Windows Server 2008. Show all posts

Sunday, May 6, 2012

bench3

Migration from Novell to 2008R2

How to migrating Windows XP workstations on Novel into a 2008R2 domain. Where, most workstations have only one primary user and profiles are stored locally. The My Documents folder is being redirected to a NetWare mapped drive. Can USMT migrate the local profile to a roaming profile stored on 2008R2?

Eventually the workstation will be migrated to 7. Do we hold off on roaming profiles until then? Can 7 go from local to roaming profile?

Go from local profile to local profile. Turn roaming on, afterwards. Simpler, cleaner, easier to troubleshoot. There will be those days.

Turning on roaming profiles once in a native Windows environment is simple, common and useful. However, check your network architecture to ensure you can handle this against what data is in those profiles. Large PST, Movies, etc will cause the user to think the new network or products (hint, hint) is not good.

Yes it can achieve this using UAMT 4 to migrate Windows XP local to 7 domain roaming.

Read More

Friday, February 17, 2012

bench3

Installing and Configuring FTP 7 On IIS 7 | Security and Deployment options Available On FTP 7.5

Microsoft rewrote the FTP service for Windows Server 2008 and above. This updated FTP service incorporates many new features that enable web authors to publish content better than before, and offers web administrators more security and deployment options.

The FTP 7.5 service ships as a feature for IIS 7.5 in Windows 7 and Windows Server 2008 R2.

The FTP 7.0 and FTP 7.5 services were shipped out-of-band for IIS 7.0, which required downloading and installing the service from the following URL: http://www.iis.net/download/FTP.

Some Of The Security and Deployment options Available On FTP 7.5

  • Integration with IIS: IIS has a new administration interface and configuration store, and the new FTP service is tightly integrated with this design. The old IIS 6.0 metabase is gone, and the updated configuration store based on the .NET XML-based *.config format took its place. In addition, IIS has an updated administration tool, and the new FTP server plugs seamlessly into that paradigm.
  • Support for new Internet standards: One of the most significant features in the updated FTP server is support for FTP over SSL. The FTP server also supports other Internet improvements such as UTF8 and IPv6.
  • Shared hosting improvements: By fully integrating into IIS, the updated FTP server makes it possible to host FTP and Web content from the same site by simply adding an FTP binding to an existing Web site. In addition, the FTP server has virtual host name support, making it possible to host multiple FTP sites on the same IP address. The FTP server also has improved user isolation, making it possible to isolate users through per-user virtual directories.
  • Custom authentication providers: The updated FTP server supports authentication using non-Windows accounts for IIS Managers and .NET Membership.
  • Improved logging support: FTP logging was enhanced to include all FTP-related traffic, unique tracking for FTP sessions, FTP sub-statuses, additional detail fields in FTP logs, and much more.
  • New supportability features: IIS has the option to display detailed error messages for local users, and the FTP server supports this by providing detailed error responses when logging on locally to an FTP server. The FTP server also logs detailed information using Event Tracing for Windows (ETW), which provides additional detailed information for troubleshooting.
  • Extensible feature set: FTP supports extensibility that allows you to extend the built-in functionality that ships with the FTP service. More specifically, there is support for creating your own authentication and authorization providers. You can also create providers for custom FTP logging and for determining the home directory information for your FTP users.
Read More

Friday, April 29, 2011

bench3

Use Windows Server 2008 Without Activation

In this post, we’ll know how to use Windows Server 2008 after the initial evaluation period that is 60 days without activation and entry of a product key.

Evaluating Windows Server 2008 software does not require product activation. Any edition of Windows Server 2008 may be installed without activation, and it may be evaluated for 60 days. Additionally, the 60-day evaluation period may be reset (re-armed) three times. This action extends the original 60-day evaluation period by up to 180 days for a total possible evaluation time of 240 days.

How to install Windows Server 2008 without activating it

  • During Windows Server 2008 Setup , when you are prompted to enter a product key for activation, do not enter a key. Click No when Setup asks you to confirm your selection.
  • You may be prompted to select the edition of Windows Server 2008 that you want to evaluate. Select the edition that you want to install.
  • When you are prompted, read the evaluation terms in the Microsoft Software License Terms, and then accept the terms.
  • When the Windows Server 2008 Setup program is finished, your initial 60-day evaluation period starts.

To check the time that is left on your current evaluation period, run the Slmgr.vbs script that is in the System32 folder. Use the -dli switch to run this script. The slmgr.vbs -dli command displays the number of days that are left in the current 60-day evaluation period.

How to manually extend the evaluation period
When the initial 60-day evaluation period nears its end, you can run the Slmgr.vbs script to reset the evaluation period. To do this, follow these steps:

  • Click Start, and then click Command Prompt.
  • Type slmgr.vbs -dli, and then press ENTER to check the current status of your evaluation period.
  • To reset the evaluation period, type slmgr.vbs –rearm, and then press ENTER.
  • Restart the computer

This resets the evaluation period to 60 days. Remember that you can do this three times.

Read More

Thursday, March 31, 2011

bench3

Windows Explorer Not Responding temporarily To File Share Requests When Copying File To A Share

Windows 7 having a problem when copying files to shares on our server (running Windows 2008 ). The file is copied but Explorer continues showing the dialog "Copying". The process cannot be killed with Task Manager and I am forced to restart manually the computer.

Consider the following scenario:

  • You have a computer that is running one of the following operating systems:
    • Windows Vista
    • Windows Server 2008
    • Windows 7
    • Windows Server 2008 R2
  • You share some files or some folders on the computer.
  • Some users try to access the shared files or the shared folders from remote computers.

In this scenario, the computer that shares the files and the folders may temporarily not respond to file share requests. When this issue occurs, users cannot enumerate the shared files or the shared folders on the computer.

Note The computer that shares the files and the folders resumes responding to requests for shared resources after 4 minutes.

Solution:

The only way to avoid this kind of problem is to try this hotfix:
KB2492806 - A Windows Vista-based, Windows Server 2008-based, Windows 7-based or Windows Server 2008 R2-based computer that shares some files and some folders may not respond to file share requests

Download Location: http://support.microsoft.com/kb/2492806

Also I found out that issuing the following commands at the Windows 7 machine solved the problem:

netsh interface tcp set global autotuninglevel=disabled
netsh int ip set global taskoffload=disabled

Read More

Wednesday, December 29, 2010

bench3

.Net 4.0 Is Not Included In Service Pack 1 Of Windows Server 2008 R2

Is net 4.0 part of service pack 1? Answer is probably no. It is not part of Windows Server 2008 R2 SP1, but we can install it with the Installer.

It is an important feature, and why it's not included in Windows Server 2008 R2 SP1:  
.net Framework will be inlcuced into Windows WHEN a tool inside the Windows needs it. It makes sense because not many many programs need .net 4.0 runtime and not many were written in net 4.0? So, it is adjustable as long as we can use the installer to make use of it when ever required.
Note: .Net 4.0 was Released To Manufacturing (RTM) in March 2010 after Windows 7 is out, so No Windows 7 tool uses it. But, the next version of Windows, Windows 8 will mostly include it. 
Related Post:
Fact: Currently the amount of tools which use .net 4.0 is very small. But it will grow. .Net 4.0 was released with Visual studio 2010 this year, so it takes a time until the first programs use it.
Read More

Monday, December 27, 2010

bench3

Windows 7 And Windows Server 2008 R2 Service Pack 1 | Improvements And New Features

Windows 7 Service Pack 1 is an update for consumers and IT Pros that helps keep your PCs supported, provides ongoing improvement to the operating system, includes previous updates delivered over Windows Update as well as continuing incremental updates to the Windows 7 platform based on customer and partner feedback, and is easy for organizations to deploy a single set of updates.
Windows Server 2008 R2 SP1 is an update for enterprises and IT Professionals that offers important virtualization enhancements to customers with the introduction of Dynamic Memory and Microsoft RemoteFX. It also includes previous improvements delivered via Windows Update and addresses feedback from customers. Windows Server 2008 R2 SP1 will have Dynamic Memory on Microsoft Hyper-V Server 2008 R2
Service Pack 1 will be released within the first half of calendar year 2011. However, Release Canditate Version SP1 is now available for download. The RC is best suited for IT Pros, tech enthusiasts, and developers who need to test the service pack in their organization or with the software they are developing. The final release of Service Pack 1 will be available through Windows Update for consumers when it is ready.
If you have already installed the RC Version of Windows 7, You cannot upgrade from the RC builds to the final build of SP1. You will have to uninstall the Service Pack or do a clean install of Windows 7 or Windows Server 2008 R2.
System Requirements For Service Pack 1:
Your current operating system must be the Release to Manufacturing (RTM) version of Windows 7 or Windows Server 2008 R2 (build 7600).
You cannot install the Release Candidate over the Beta of SP1. You must uninstall the beta. But you can install the RC on an evaluation version of Windows 7 or Windows Server 2008 R2.
There are several downloads available for Windows 7 And Windows Server 2008 R2 Service Pack 1. And if you are not sure of Which one you should choose, here is some simple tip for you. Actually, there are two ways you can obtain the service pack RC. You can download a special key to enable Windows Update to offer you the service pack RC, or you can download the service pack directly. For each download method, you should choose the correct download for your platform (x86, IA64 or x64).

Windows 7 is a high quality release and provides many benefits to consumers and businesses alike. SP1 will include all updates previously available to Windows 7 users through Windows Update, so there is no reason to wait or delay their use of Windows 7.

And there will not be a slipstream build of SP1 RC. The RC will only be available as the service pack update itself. You will need to have a release to manufacturing (RTM) version of Windows 7 or Windows Server 2008 R2 to install the RC of the service pack. And you will be able to uninstall the service pack RC if you need to.

Please note, it is always a best practice to back up your data prior to installing any RC software.
Warning! RC will stop functioning after a certain amount of time: You will be reminded beginning August 30, 2011. The RC will expire on November 30, 2011. You will have to upgrade to a newer build or uninstall and return to the RTM build by that time.
One of the major improvements included in Windows Server 2008 R2 SP1 is virtualization enhancements And for other improvements, please see the Notable Changes document for detail on the additional improvements in SP1.

Difference Between RemoteFX And  Remote Desktop Services.  How do they integrate:
RemoteFX describes a set of rich media capabilities that are available to customers using the Remote Desktop Services platform to deploy a virtual machine- or session-based remote desktop infrastructure. Specifically, RemoteFX enhances the Remote Desktop Protocol (RDP) in Remote Desktop Services so that remote workers can access any type of application or screen content, including rich media and 3D applications, improving end user productivity.
Read More

Wednesday, December 1, 2010

bench3

Problem Transferring Photos From Digital Cameras | Error File System Is Broken In Windows

Problem Transferring Photos From Digital Cameras In Windows 7: file system is broken in Windows 7 or in Windows Server 2008 R2. Have you come across such problem in Windows 7 with transferring photographs from digital cameras?

When I connect the camera, choose Transfer Pictures from the auto-play menu, then use Windows to transfer the photographs, a few files don't transfer initially and instead Windows displays the following in the notification area:
The following error occurred while importing :
The file or directory is corrupted and unreadable.
What do you want to do?
  • Try again.
  • Skip this file.
  • Skip all files with errors.
I first encountered the above problem just when transferring photos from a friends camera to to my brand new Dell Windows 7 Ultimate desktop I had the problem described above roughly once every 40 pictures or so. 

I investigated further and if I chose Try Again a photo which Windows 7 reported as corrupt was transfered without a problem. If I chose skip and manually copied off a photo which Windows 7 reported as corrupt it copied off fine. If I chose skip, disconnected the camera then reconnected it again the remaining photos (which Windows 7 reported as corrupt) were transferred correctly. 

Possible Reason: Such issues will occur if a camera is not compatible with Windows 7. If you load the card from a card reader the issue may not occur, because the card reader may work properly with Windows 7. If you would like to resolve this issue, please try to download the latest drivers from the website of the cameras’ manufacturers and install in Windows 7. ALso, It looks like there may be a hotfix from Microsoft for this problem:
Read More

Thursday, October 28, 2010

bench3

Windows 7 And Windows Server 2008 R2 SP1 RC Frequently Asked Questions

Windows 7 and Windows Server 2008 R2 Service Pack 1 Release Candidate Frequently Asked Questions

Q. What is Windows 7 SP1?
A. Windows 7 Service Pack 1 is an update for consumers and IT Pros that helps keep your PCs supported, provides ongoing improvement to the operating system, includes previous updates delivered over Windows Update as well as continuing incremental updates to the Windows 7 platform based on customer and partner feedback, and is easy for organizations to deploy a single set of updates.

Q: What is Windows Server 2008 R2 SP1?
A: Windows Server 2008 R2 SP1 is an update for enterprises and IT Professionals that offers important virtualization enhancements to customers with the introduction of Dynamic Memory and Microsoft RemoteFX. It also includes previous improvements delivered via Windows Update and addresses feedback from customers.

Q. What are the system requirements for the Service Pack 1 RC?
A. Your current operating system must be the Release to Manufacturing (RTM) version of Windows 7 or Windows Server 2008 R2 (build 7600).

Q. Can I install the Release Candidate over the Beta of SP1?
A. No. You must uninstall the beta.

Q. Can I install the RC on an evaluation version of Windows 7 or Windows Server 2008 R2?
A. Yes. The RC of SP1 can install on RTM evaluation versions of Windows 7 and Windows Server 2008 R2.

Q: When will SP1 be released?
A: Service Pack 1 will be released within the first half of calendar year 2011.

Q: Who should download and install the RC?
A: The RC is best suited for IT Pros, tech enthusiasts, and developers who need to test the service pack in their organization or with the software they are developing. The final release of Service Pack 1 will be available through Windows Update for consumers when it is ready.

Q: There are several downloads available. Which one should I choose?
A: There are two ways you can obtain the service pack RC. You can download a special key to enable Windows Update to offer you the service pack RC, or you can download the service pack directly. For each download method, you should choose the correct download for your platform (x86, IA64 or x64).

Q: Should customers who are considering deploying Windows 7 wait for SP1?
A: No. Windows 7 is a high quality release and provides many benefits to consumers and businesses alike. SP1 will include all updates previously available to Windows 7 users through Windows Update, so there is no reason to wait or delay their use of Windows 7.

Q. Can I upgrade from the RC builds to the final build of SP1?
A. No. You will have to uninstall the Service Pack or do a clean install of Windows 7 or Windows Server 2008 R2.

Q. Will there be a slipstream build of SP1 RC?
A. No. The RC will only be available as the service pack update itself. You will need to have a release to manufacturing (RTM) version of Windows 7 or Windows Server 2008 R2 to install the RC of the service pack.

Q. What languages will be released at RC?
A. For RC, we will release English, French, German, Japanese, and Spanish.

Q. Will I be able to uninstall the service pack RC?
A. Yes, you will be able to uninstall the service pack RC if you need to. Please note, it is always a best practice to back up your data prior to installing any RC software.

Q. Will the RC stop functioning after a certain amount of time?
A. Yes. You will be reminded beginning August 30, 2011. The RC will expire on November 30, 2011. You will have to upgrade to a newer build or uninstall and return to the RTM build by that time.

Q: What other improvements are included in Windows Server 2008 R2 SP1 besides the virtualization enhancements?
A: Please see the Notable Changes document for detail on the additional improvements in SP1.

Q: Is RemoteFX different than Remote Desktop Services? How do they integrate?
A: RemoteFX describes a set of rich media capabilities that are available to customers using the Remote Desktop Services platform to deploy a virtual machine- or session-based remote desktop infrastructure. Specifically, RemoteFX enhances the Remote Desktop Protocol (RDP) in Remote Desktop Services so that remote workers can access any type of application or screen content, including rich media and 3D applications, improving end user productivity.

Q: Will Dynamic Memory be available on Microsoft Hyper-V Server 2008 R2?
A: Yes.
Read More

Sunday, September 19, 2010

bench3

Installing Microsoft DotNet Framework 3.5 In Windows Server 2008

Your installation will stop with an error message (as shown in figure below) when ever you try to install Microsoft .NET Framework 3.5 On WINDOWS SERVER 2008 (x32/ X64) Version And Edition

The Error message will be this “You must use the Role Management Tool to install or configure Microsoft .NET Framework 3.5”.
What to do when you get this type of error message. Well, it is clearl said in the message that, you need to use the Role Manager Tool. 
  • 1. Start the Server Manager (also called as Role Manager) by clicking the Server Manager icon in the systray, or the Server Manager shortcut in directly the Start menu or in the menu Administrative Tools
  • 2. Choose Features
  • 3. Click on the check box "Microsoft .NET Framework 3.5"

  • 4. Click On Install. And Restart Your Server If It asks.
Read More

Monday, August 30, 2010

bench3

Solve Error 0x81000203 | System Restore Or Back Up Error In Windows 7 And Windows Server 2008

System restore encountered an error (0x81000203) "There was an unexpected error in the property page. System restore encountered an error (0x81000203). 
In the System event log, the following event is logged:
Log Name: System
Source: Service Control Manager
Event ID:      7023
Level:         Error
Description:
The Microsoft Software Shadow Copy Provider service terminated with the following error: The system cannot find the file specified.
Applies To:
  • Windows Server 2008 Standard, Enterprise, Datacenter
  • Windows Server 2008 R2 Datacenter, Enterprise, Standard
  • Windows Small Business Server 2008 Premium, Standard
  • Windows Web Server 2008,
  • Windows Web Server 2008 R2
  • Windows 7 All Editions
To resolve this issue, perform the following steps:
  • 1. Click Start, type regedit in the Start Search box, and hit Enter.
  • 2. Locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\swprv\Parameters
Note: If the Parameters registry key is missing, perform the following steps: Right-click the swprv registry key, select New, select Key, type Parameters and hit Enter.
  • 3. Once the Parameters registry key is selected, verify that the ServiceDll registry value has the following value:
%Systemroot%\System32\swprv.dll
Note: If the ServiceDll registry value is missing, perform the following steps:
Right-click the Parameters registry key, select New, and then select Expandable String Value.
For the value name, type ServiceDll and hit Enter.
Double-click the ServiceDll registry value.
In the Value Data box, type %Systemroot%\System32\swprv.dll, and then click OK.
  • 4. Perform a backup operation to verify that the issue is resolved.
Read More

Friday, March 19, 2010

bench3

Windows No Longer Supports Tape Backup | Removable Storage Manager No Longer Available As Of Windows 7 And Server 2008 R2

After being reduced to an optional component in previous releases of the Windows and Windows Server operating systems, Removable Storage Manager (RSM) has been removed. Windows Backup no longer supports writing directly to sequential (tape) backup devices so RSM is no longer required. Third-party backup software does not use RSM, but manages backup device objects directly.

Removable Storage Manager (RSM) facilitates communication among applications, robotic changers, and media libraries. It enables multiple applications to share local robotic media libraries and tape or disk drives, and manage removable media within a single-server system. A group of libraries, drives, and media that are managed by RSM is called an RSM system. RSM can help you create an application that makes effective use of the media resources in an RSM system.
The Microsoft Windows Software Development Kit (SDK) contains information about RSM that is tailored for developers creating RSM client applications. There is additional information in the Windows Resource Kit about administrative aspects of RSM. To understand how to utilize RSM within your application and design a good user experience, please refer to the Resource Kit.
Backup made on windows 2000 machine using ntbackup.exe. will no longer supported by Windows 7 machine and any one trying to restore older files using  ntbackup.exe can not succeed as this feature not available for Windows 7.

Upgrading to Windows 7 can simply not require one to abandon years of backups made by Microsoft's NtBackup! Microsoft should have to pay for people having to purchase a 3rd party backup software to accomidate this.
Read More
bench3

Windows Server 2008 R2 Available Only In 64-bit | Solution For 16bit And 32bit Applications On 64bit Platform

Microsoft Deprecated Features for Windows 7 and Windows Server 2008 R2. What this  mean is Windows Server® 2008 R2 ships with a 64-bit SKU only; no 32-bit SKU is available for the server version of the operating system. However, a 32-bit SKU continues to be available for Windows® 7. 

64-Bit Only will impact three areas:
32-bit drivers

32-bit plug-ins

16-bit executables

Now, how to install a 32bit driver or a 32 bit plug-ins or a 16 bit executables in a 64bit system?

The solution for 32-bit Drivers:
Recompile 32-bit drivers as signed 64-bit drivers.

Solution for 32-bit Plug-ins
WoW64, an x86 emulator, allows 32-bit Windows-based applications to run seamlessly on 64-bit Windows. WoW64 is now an optional feature that you must install if it is necessary to run 32-bit code.

The system isolates 32-bit applications from 64-bit applications, which includes preventing file and registry collisions. Console, GUI, and service applications are supported. The system provides interoperability across the 32/64 boundary for scenarios such as cut and paste and COM. However, 32-bit processes cannot load 64-bit DLLs, and 64-bit processes cannot load 32-bit DLLs. We commonly see this in shell plug-ins written for Windows Explorer.

A 32-bit application can detect whether it is running under WOW64 by calling the IsWow64Process function. The application can obtain additional information about the processor by using the GetNativeSystemInfo function

Note that 64-bit Windows does not support running 16-bit Windows-based applications. The primary reason is that handles have 32 significant bits on 64-bit Windows. Therefore, handles cannot be truncated and passed to 16-bit applications without loss of data. Attempts to launch 16-bit applications fail with the following error: ERROR_BAD_EXE_FORMAT.

Solution for 16-bit Executables
64-bit Windows recognizes a limited number of specific 16-bit installer programs and substitutes a ported 32-bit version. The list of substitutions is stored in the registry under the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\NtVdm64 There is built-in support for several installer engines, including InstallShield 5.x installers. Note that the 64-bit Windows Installer can seamlessly install 32-bit MSI-based applications on 64-bit Windows.
Read More

Monday, March 15, 2010

bench3

Windows Server 2008 Roles And Its Description | Various Roles Of Windows Server 2008

In computing, a server is any combination of hardware or software designed to provide services to clients. When used alone, the term typically refers to a computer which may be running a server operating system, but is also used to refer to any software or dedicated hardware capable of providing services.

The word server is used quite broadly in information technology. Despite the many Server branded products available (such as Server editions of Hardware, Software and/or Operating Systems), in theory any computerised process that shares a resource to one or more client processes is a Server. 
To illustrate this, take the common example of File Sharing. While the existence of files on a machine does not classify it as a server, the mechanism which shares these files to clients by the operating system is the Server.
Windows Server 2008 is one of Microsoft Windows server line of operating systems. Released to manufacturing on February 4, 2008, and officially released on February 27, 2008, it is the successor to Windows Server 2003, released nearly five years earlier. A second release, named Windows Server 2008 R2, was released to manufacturing on July 22, 2009. Like Windows Vista and Windows 7, Windows Server 2008 is built on Windows NT 6.x.
Here is the list of various Roles Of Windows Server 2008 and its description:
  1. Active Directory Certificate Services: Issues and manages security certificates needed in many applications.
  2. Active Directory Domain Services: Sets up Active Directory service and creates a domain controller to store and manage directory information and logon processes (abbreviated AD DS).
  3. Active Directory Federation Services: Provides single sign on (SSO) and customized client access for web-based and network applications
  4. Active Directory Lightweight Directory Services: An alternative to AD DS for the storing of application data across a network.
  5. Active Directory Rights Management Services: Provides licenses to identify users and give them specific rights to use information.
  6. Application Server: Provides access and management services to .NET Framework and other web applications that clients with a license can use.
  7. DHCP Server: Sets up the Dynamic Host Configuration Protocol to assign IP addresses to clients on the network.
  8. DNS Server: Sets up the Domain Name System to translate computer names and their domains to Internet Protocol (IP) addresses.
  9. Fax Server: Provides for the sending and receiving of faxes and for management of faxing on a network.
  10. File Services: Stores and manages files that can be accessed by clients.
  11. Network Policy and Access Services: Installs the Network Policy Server that provides for Routing and Remote Access Services and the necessary security for that.
  12. Print Services: Provides access to and management of network printers.
  13. Terminal Services: Installs a service that allows a client to run an application on the server as if it were on that client computer.
  14. UDDI Services: Provides for sharing information on an intranet using Universal Description, Discovery, and Integration (UDDI).
  15. Web Server (IIS): Provides for the hosting of web pages and web applications.
  16. Windows Deployment Services: Provides for the deployment of Windows operating systems over a network.
Read More

Wednesday, March 10, 2010

bench3

Understanding The Windows Media Services In Windows Server 2008 | Streaming Media Services In Windows Server 2008

Windows Media Services enables streaming of multimedia content over all types of networks. These networks can range from low-bandwidth, dial-up Internet connections to high-bandwidth local area networks. Windows Media Services (called “Streaming Media Services”) is a server role installed from the Server Manager:
  1. Click Start | Server Manager. In the server tree on the left, click Roles.
  2. Under Roles Summary in the right pane, click Add Roles and click Next. 
  3. In the list of roles, click Streaming Media Services and click Next. Read the Introduction To Streaming Media Services and click Next.
  4. If you think you will want them, click Web-Based Administration and Logging Agent. If you are asked if you want to add the features required for Web-Based Administration or Logging Agent, click Add Required Role Services and click Next.
  5. You are asked if you want to use Real Time Streaming Protocol (RTSP) or Hypertext Transfer Protocol (HTTP), but HTTP is grayed out since port 80 is being used for normal (nonstreaming) HTTP connections. Click Next three times (because you are also installing some additional features of IIS) and click Install.
  6. When you are told that the installation is successful, click Close.

NOTE: Streaming audio and video allows the media to be played on the receiving computer as it is being downloaded, instead of waiting for it to completely download before playing it. The Microsoft Windows Media Player, included in Windows XP and Vista, can be used to play streaming audio and video.
Utilizing Windows Media Services, a media server can stream audio and video content over the Web. To understand why this is significant, it helps to understand the way a typical HTTP session works. First, a web browser sends out a request for a URL over the network. The web server hosting the URL responds to the request and downloads the appropriate information to the browser. Once the web pages are downloaded from the site, the browser displays them. 

When the user clicks another link, the browser requests another URL and the server responds. This works great for small file sizes, such as a web page, but video and audio files are so large that waiting for files to download in this way is like waiting for paint to dry. Windows Media Services uses streaming technology to enable you to load and play the audio or video while it is still downloading. This greatly increases the satisfaction of the user who is downloading the file.

Stream Methods
There are two ways to stream audio and video. One uses a web server alone; the other separates the web tasks from the streaming media tasks. The second method utilizes a streaming media server to stream audio or video, in conjunction with a web server used to download the rest of the web information.

Stream with a Web Server The server sends the audio and video files in the same fashion as it would send any type of file. The streaming client stores, or buffers, a small amount of the audio or video stream and then starts playing it while continuing the download.

Buffering theoretically allows the media to continue playing uninterruptedly during periods of network congestion. In fact, it is normal for it to get interrupted on a dialup or other lower-speed connection. The client retrieves data as fast as the web server, network, and client connection allow.

Stream with a Media Server With a media server, the first step is to compress the media file and copy it to a specialized streaming media server (such as Microsoft’s Windows Media Services). Next, a reference is made on the web page so that IIS knows when and where to retrieve the streaming data for the page. Then data is sent to the client such that
the content is delivered at the same rate as the compressed audio and video streams. The
server and the client stay in close touch during the delivery process, and the streaming media server can respond to any feedback from the client.

Stream with Windows Media Services Designed specifically for the task of delivering live or on-demand streaming media rather than many small HTML and image files, a Windows Media Services server offers many advantages over standard web servers:
  • More efficient network throughput
  • Better audio and video quality to the user
  • Support for advanced features
  • Cost-effective scalability to a large number of users
  • Protection of content copyright
  • Multiple delivery options

Windows Media Services, diagrammatically shown in Figure above, automatically switches to the appropriate protocol, so no client-side configuration is necessary.
Read More

Thursday, March 4, 2010

bench3

File Classification Infrastructure In Windows Server 2008 R2 Helps To Prevent Loss of Sensitive Information

Today I want to discuss the importance of information classification and how it can be used to prevent data breaches and help organizations with compliance requirements such as PCI, HIIPA, ISO 27001, the Massachusetts Data Protection Law 201 and other similar legislation.

Information classification is the critical first step in managing data based on its business value. When the information’s value is understood, organizations can apply security policies to reduce the risk of information leakage. The new File Classification Infrastructure (FCI) in Microsoft Windows 2008 R2 enables organizations to protect data by automatically classifying files and applying policy. FCI includes the ability to define classification properties, automatically classify files based on location and content, and invoke file management tasks such as file expiration and custom commands based on classification.

Once the files have been classified, appropriate security can be applied based on the business value of the information. For example, in a PCI environment, FCI-based classification can be used to identify files that contain sensitive credit card information, and in a health care environment, FCI based classification can identify files with private health information. Once the files have been classified file management tasks can be used to segment sensitive files onto more secure storage devices, to protect files with encryption, and to assign more restrictive permissions to the files. This helps ensure that information stored on file servers is well secured.

Another concern is email. Email messages or email attachments are a security risk as email cannot easily be controlled. One of our FCI partners, Titus Labs has extended classification and information protection to the Microsoft Outlook environment. Titus Labs Message Classification can recognize file attachments that have been classified using FCI.

The Titus Labs solution can examine the FCI classifications of Microsoft Office attachments, and can apply policy that can restrict the distribution of sensitive information. Titus Labs’ Safe Recipient policies can be used to:
Protect the distribution of email within an organization. By examining all the recipients of an email, the Titus Labs policy can verify via Active Directory whether the recipient is allowed to receive attachments of a given classification. This prevents inadvertent data loss by warning the user that one of the recipients should be removed. For example, in an internal scenario, a financial organization may want to ensure that an employee in corporate finance is restricted from sending files classified as MERGER / ACQUISITION to another employee working as a broker or trader.
This is an example of the power of FCI to protect your sensitive information.
Protect the distribution of email outside the organization. By examining the domain of each of the recipients, the Titus Labs policy can verify that the domain is listed as trusted in the policy and can warn the user of a possible data breach and warn them or force them to change the recipient list. In the following example, the sender has mistakenly selected the wrong Anne Hollingsworth at an external address. The sender receives a warning because the email contains an attachment that has been classified as CONFIDENTIAL / INTERNAL USE.

Invalid recipient is detected based on classification.
Read More

Friday, January 29, 2010

bench3

New Group Policy Features In Windows 7 and Windows Server 2008 R2

Windows 7 and Windows Server 2008 R2 build on the foundation of Group Policy improvements made in Windows Vista and Windows Server 2008. The key improvements to Group Policy in Windows 7 and Windows Server 2008 R2 are as follows:

New categories of policy settings Windows 7 and Windows Server 2008 R2 include new categories of Group Policy policy settings and also some additional policy settings for existing policy categories. 

Default Starter GPOs Windows 7 and Windows Server 2008 R2 now include a number of default Starter GPOs that you can use to help ensure compliance with security best practices for enterprise environments. In Windows Vista and Windows Server 2008, you had to download these Starter GPOs separately before using them. 

Windows PowerShell cmdlets for Group Policy In Windows 7 and Windows Server 2008 R2, you can now use Windows PowerShell to create, edit, and maintain GPOs using the new Windows PowerShell cmdlets for Group Policy available within the Windows Server 2008 R2 GPMC. This allows administrators to automate many common Understanding Group Policy in Group Policy management tasks and to perform such tasks from the command line.

Note: This feature does not work with Local Group Policy. Also, it only works with registry-based settings and not with security policies or other aspects of policy. 

Enhancements to ADM Settings ADM policy settings (ADMX templates) are enhanced in Windows 7 and Windows Server 2008 R2 with an improved user interface that makes it easier to add comments to policy settings. Support for multi-string and QWORD registry value types is also now supported by ADMX templates for Windows 7. 

The overall authoring experience is also improved with the new ADMX user interface as the windows are more integrated and dialog boxes are now resizable. 

Enhancements to Group Policy Preferences Group Policy preferences has been enhanced in Windows 7 and Windows Server 2008 R2 with new capabilities for managing Power Plan settings in Windows Vista and later versions, creating scheduled tasks for Windows Vista and later versions, creating immediate tasks for Windows Vista and later versions that run immediately upon Group Policy refresh, and managing settings for Windows Internet Explorer 8. In addition, a new preference item called Immediate Tasks lets you create tasks.

Advanced Audit Policy Configuration Group Policy in Windows 7 and Windows Server 2008 R2 now includes more than fifty Advanced Audit Policy Configuration settings that can be used to provide detailed control over 10 different areas of audit policies, and they can be used to identify possible attacks on your network or to verify compliance with your organization’s security requirements. In Windows Vista and Windows Server 2008, these advanced audit policy categories can be managed from the command line using the Auditpol.exe utility. Starting in Windows 7 and Windows Server 2008, however, these advanced audit policy categories can be managed using Group Policy and are found under Computer Configuration\Policies\Windows Settings \Security Settings\Advanced Audit Policy Configuration. 

Application Control Policies Group Policy in Windows 7 and Windows Server 2008 R2 now includes Windows AppLocker, which replaces the Software Restriction Policies feature of Windows Vista and Windows Server 2008. AppLocker is found under Computer Configuration\Policies\Windows Settings\Security Settings\Application Control Policies. AppLocker includes new capabilities and extensions that can help reduce administrative overhead and allow administrators to control how users access and use executable files, scripts, Windows Installer files (.msi and .msp files), and dynamic-link libraries (DLLs). 

Name Resolution Policy Group Policy in Windows 7 and Windows Server 2008 R2 has been enhanced with support for Name Resolution Policy, which can be used to store configuration settings for Domain Name System security (DNSsec) and DirectAccess in a Name Resolution Policy Table (NRPT) on client computers. This new policy setting can be found under Computer Configuration\Policies\Windows Settings\Name Resolution Policy.
Read More
bench3

Logical Side And Physical Side Of Active Directory | The Two Sides Of Active Directory

Active Directory has both a logical side and a physical side, and each one plays a very important role. The physical side is made up of the domain controllers and physical locations where the domain controllers reside. When you promote a system to domain controller status, you will usually place that domain controller close to the user population that will use it for authentication and access. 

Domain controllers need to communicate with one another to share the information they have. The logical side is a little more nebulous; as well as containing the objects that define how the resources are organized and accessed, the logical side contains objects within Active Directory that define how the domain controllers will communicate with one another. Active Directory sites and site links define which domain controllers will replicate directly with each other and which ones will have to communicate indirectly through other domain controllers. 


Domains dictate the replication scope. When you create a domain, the domain partition is replicated only to domain controllers from the same domain. The domain partition is not copied to domain controllers outside of the domain. This allows you to partition your directory service and reduce the size of the database file that holds all of the forest’s objects. Forests and domains are discussed in greater detail in Chapter 3, “Active Directory Forest and Domain Design.”

Organizational units are used to organize objects for easy administration and to manage those objects easily using group policies. To have efficient administration of resources, you should design your Active Directory with administration in mind. 

If you are in the process of rolling out Active Directory, be sure to develop a detailed plan for the rollout. Without a good design, Active Directory may not work efficiently for your environment. If your design does not meet the needs of your organization, you may be faced with either suffering through working with an inadequate design or rebuilding your Active Directory infrastructure from the ground up. Neither of these options will sit well with your user base or the management of the company.
Read More
bench3

How Indexing For Optimized Searches Works | Windows Active Directory

The directory data store can be indexed to improve the efficiency of searches. Indexing is specified as part of the schema definition of an attribute (such as Description or given- Name). When an attribute is indexed, all occurrences of that attribute will be included in the index.

Some attributes are indexed by default, and the administrator can configure additional attributes to be indexed. Multiple types of indexing are available, depending on how the attribute will be used in searches:
  • Basic indexing The value(s) of the attribute is indexed so that queries requesting objects with a specific value for that attribute will run quickly.
  • Containerized indexes Similar to basic indexing, but also indexes the objects by container. This enables a query to quickly evaluate all the child objects in a container to determine if any match the requested attribute value.
  • Tuple indexes Used on string attributes so that substring searches specifying that attribute will run quickly. For example, applying a tuple index to the Description attribute would allow queries such as “return all objects whose Description attribute contains the string ‘Fabrikam’ anywhere in it” to execute efficiently. Maintaining tuple indexes can consume a large amount of resources, so they should be enabled sparingly.
  • Subtree indexes Enables a special type of Active Directory search, known as virtual list view, to execute quickly. These are similar to containerized indexes but include not only the immediate children of the container but also all the grandchildren, great-grandchildren, and so on. Like tuple indexes, subtree indexes can be expensive to maintain.

Administrators can enable indexing on attributes that aren’t indexed by default, based on the needs of their organization. Basic and containerized indexes can be enabled using the Active Directory Schema snap-in. However, tuple and subtree indexes require you to manually set the value of the searchFlags attribute on the attributeSchema objects defining the attributes you want to index.
Read More

Tuesday, January 26, 2010

bench3

Using Remote Server Administration Tools For Windows Server 2008 | Using RSAT

What if you want to manage our file server running Windows Server 2008 remotely from another machine?  Once we have a Remote Desktop Connection session with the remote server, we can run tools such as Server Manager or File Server Resource Manager as if we were sitting at the remote machine’s console.

In Windows Server 2003, you can also manage remote servers this way. But you can also manage them another way by installing the Windows Server 2003 Administration Tools Pack (Adminpak.msi) on a different Windows Server 2003 machine, or even on an admin workstation running Windows XP Service Pack 2. And once the Tools Pack is installed, you can open any of these tools, connect to your remote server, and manage roles and features on the server (provided the roles and features are installed).

Is there an Adminpak for Windows Server 2008? Well, there’s an equivalent called the Remote Server Administration Tools (RSAT), which you can use to install selected management tools on your server even when the binaries for the roles/features those tools will manage are not installed on your server. In fact, the RSAT does Adminpak one better because Adminpak installs all the administrative tools, whereas the RSAT lets you install only those tools you need. (Actually, you can just install one tool from Adminpak if you want to, though it takes a bit of work to do this-see article 314978 in the Microsoft Knowledge Base for details.)

What features or roles can you manage using the RSAT? As of Beta 3, you can install management tools for the following roles and features using the RSAT:

Roles: 
Active Directory Domain Services
Active Directory Certificate Services
Active Directory Lightweight Directory Services
Active Directory Rights Management Services
DNS Server
Fax Server
File Server
Network Policy and Access Services
Print Services
Terminal Services
Web Server (IIS)
Windows Deployment Services

Features:
BitLocker Drive Encryption
BITS Server Extensions
Failover Clustering
Network Load Balancing
Simple SAN Management
SMTP Server
Windows System Resource Management (WSRM)
WINS Server

How do you install individual management tools using the RSAT? With Windows Server 2008, it’s easy-just start the Add Feature Wizard, and select the RSAT management tools you want to install, such as the Terminal Services Gateway management tool. (See Figure below. Note that installing some RSAT management tools might require that you also install additional features. For example, if you choose to install the Web Server (IIS) management tool from the RSAT, you must also install the Configuration APIs component of the Windows Process Activation Service [WPAS] feature.)


Figure: Installing a management tool using the RSAT feature
The actual steps for installing features on Windows Server 2008 in production environment  are even more.  For now, just note that when you install an RSAT subfeature such as TS Gateway, what this does is add a new shortcut under Administrative Tools called TS Gateway. Then if you click Start, then Administrative Tools, then TS Gateway, the TS Gateway Manager console opens. In the console, you can right-click on the root node, select Connect To TS Gateway Server, and manage a remote Windows Server 2008 terminal server with the TS Gateway role service installed on it without having to enable Remote Desktop on the terminal server.

Finally, the Windows Server 2003 Adminpak can be installed on a Windows XP SP2  or SP3 workstation, which lets you administer your servers from a workstation. The RSAT can be installed on a Windows Vista or Windows 7 machines so that you can manage your Windows Server 2008 machines from there.
Read More
bench3

Managing Virtual Machines in Windows Server 2008 | Experts Talk About Windows Server Virtualization

The MMC snap-in for managing virtual machines that is provided with Windows Server virtualization is evolving, And here, I wanted to give you a quick preview. Figure below shows the Windows Virtualization Management console of Windows Server 2008. The console tree on the left displays the name of the server, while the Details pane in the middle shows a number of virtual machines, most of them in an Off state and two in a Saved state. The Actions pane on the right lets you manage virtualization settings, import virtual machines, connect to a virtual machine, and perform other tasks.

Figure: Windows Virtualization Management console

So that’s a very brief preview of what’s in store for virtualization in Windows Server 2008 in terms of managing virtual machines. Fortunately we also have some experts on the product team at Microsoft who provide us with some more information concerning this feature and especially the planning issues surrounding implementing Windows Server virtualization in your environment.

First, here’s one of our experts talking about using Windows Server virtualization in conjunction with the Windows server core installation option of Windows Server 2008:

From the Experts: Windows Server Virtualization and a Windows Server Core Installation:
The Windows server core installation option of Windows Server 2008 and Windows Server virtualization are two new features of Windows Server 2008 that go hand in hand. The Windows server core installation option is a new minimal GUI shell-less installation option for Window Server 2008 Standard, Enterprise and Datacenter Editions that reduces the management and maintenance required by an administrator. The Windows server core installation option provides key advantages over a full installation of Windows Server 2008 and is the perfect complement to Windows Server virtualization. Here are a couple of reasons why.
  • Reduced attack surface A Windows server core installation provides a greatly reduced attack surface because it is tailored to provide only what a role requires. By providing a minimal parent partition, this reduces the need to patch the parent partition. In the past with one workload running per server, if you needed to reboot the server for a patch, it wasn’t ideal, but generally one workload was affected. With Windows Server virtualization, you’re not just running a single workload. You could be running dozens (even hundreds) of workloads in their own virtual machine. If the virtualization server requires a reboot for a patch (and you don’t have a high availability solution in place), the result could be significant downtime.
  • Reduced resource consumption With the parent partition requiring only a fraction of the memory resources for a Windows server core installation as opposed to a full installation of Windows Server 2008, you can use that memory to run more virtual machines.
In short, it is highly recommended that you use Windows Server virtualization in conjunction with a Windows server core installation.


-Jeffrey Woolsey [ Lead Program Manager, Windows Virtualization ]


Next, let’s hear another of our experts on the virtualization team at Microsoft share about how to identify what should be virtualized in your environment and what maybe shouldn’t:


From the Experts: Virtualization Sizing
It is very important to understand how to roll out virtualization in your organization and what makes the most sense for your environment and business conditions. So often, some enthusiastic users and organizations start either attempting to virtualize everything or start with their most complex middleware environments. There are no right or wrong first candidates for virtualization but you need to ensure that you have fully thought about the impact of using virtualization in your environment and for the workloads in question.


As you think about what to virtualize and how to go about picking the right workloads, the order of deployment, and what hardware capabilities you need, find a model or a set of models that help you conceptualize the end solution. The System Center family of products provides you a set of tools that help simplify some of these issues, and other solutions from vendors like HP provide you tools to help size the deployment environment once you have figured out the candidates and the rollout process.


The next few points help identify some of the best practices in sizing your virtualization environment. Think of the following as a set of steps that will help you identify what workloads to virtualize and what the deployment schedule should look like.


1. Assessment As with any project, the first step is to fully know about where you are today and what capabilities you already have in your environment. The last thing you want to do is to sit and re-create the wheel and invest in things you already have in your environment. As you think about assessment, think about assessing all the components you have in your infrastructure, the types of workloads, and interdependencies of the various workloads. Also evaluate all the management assets you already have in your infrastructure and identify the functions that these are performing, such as monitoring, deployment, data protection, security, and so on. These are the easier items to assess, but the more critical one to assess will be the overall process discipline that exists in your organization and how you deal with change in today’s world. While this is a hard factor to quantify, this is critical in evaluating what capacity you have to deploy virtualization. To help you make this assessment from a holistic perspective, there are tools available such as Microsoft’s Infrastructure Optimization Model or Gartner’s IT Maturity Model that you can choose to use. There is one thing a customer once told me that I will never forget–“If someone tells you they have a solution for your problems when you have not identified or told them what your problems are, most likely they are giving you something you already have in a different package–that is, if you are lucky.”


2. Solution Target Once you have identified and assessed your current environment, find out where you can use virtualization today. All server virtualization solutions today provide these usage scenarios:
  • Production Server Consolidation, which encompasses all forms of consolidation of systems in existing or new environments.
  • Test and Development Environments, which addresses the use of virtualization for optimizing the test and dev cycles and not only enables you to leverage the cost saving from hardware needs but also enables easy creation and modification of the environments.
  • Business Continuance, where your primary motivator is to leverage the fact that virtualization transforms your IT infrastructure to files (in Microsoft’s case a VHD file) to enable new and interesting continuance and disaster recovery solutions.
  • Dynamic Datacenter, which is a new set of capabilities unleashed by virtualization to now enable you to not only create and manage your environment more efficiently, but provide a new level of capability to be able to dynamically modify the characteristics of the environments for workloads based on usage. The dynamic resource manipulation enables you to take the consolidation benefits and translate it to now making your IT a more agile environment.
Branch Office, which while not being a core solution, is one usage scenario where virtualization helps change how IT systems are deployed, monitored, and managed and helps extend the capabilities of the branch environment to bring in legacy and new application environments under one common infrastructure umbrella.


As you are trying to decide which solution area or areas to target for your virtualization solution, do keep in mind the level of complexity of the solutions and the need for increasing levels of management tools and process discipline. Test and dev environments are the easiest to virtualize and usually can manage to take some downtime in case of hiccups–hence this is a natural start for everyone. Server Consolidation is another area that you can start using virtualization in today. The initial cost savings here are in the hardware consolidation benefits–but the true value of consolidation is seen only when you have figured out how to use a unified management infrastructure. Business continuance and branch scenarios need you to have a management infrastructure in place to help orchestrate these solutions and again to see the true value – you will need to have a certain level of processes outlined. Dynamic datacenter is a complex solution for most customers to fully deploy and this usually applies to a certain subset of the org’s infrastructure–select the workloads that need this type of solution more carefully as adding the SLAs to maintain such a solution should mean that the workload is really critical to the organization.


3. Consolidation Candidates Most users today are deploying virtualization to help consolidate workloads and bring in legacy systems into a unified management umbrella. In this light, it becomes important to identify which workloads are the most logical ones to consolidate today and what makes sense in the future. There are some workloads that sound attractive for virtualization, but might not be ideal at any stretch because of certain I/O characteristics or purely because they are so big and critical that they easily scale up to or beyond the capabilities of the hardware being thrown at them. Operations Manager or Virtual Machine Manager has a report that is generated called the virtualization candidates report that helps scan your entire IT org and tell you exactly what workloads are ideal for virtualization based on a number of thresholds such as CPU utilization, I/O intensity, network usage, size of the workload, and so on. Based on this report and knowing the interdependencies identified during the assessment phase, you can make intelligent decisions on what workloads to virtualization and when.


4. Infrastructure Planning This is where the rubber meets the road so to speak. Once you have identified the candidates to virtualize, you need a place to host the virtualized workloads. Tools from companies such as HP (HP Virtualization Sizing Guide) help you identify the type of servers you will need in your environment to host the virtualization solution that you have identified in the previous step. There is one fundamental rule to consider as you are selecting the infrastructure for virtualization–the two biggest limiting factors for virtualization are memory and I/O throughput–so always ensure that you select a x64 platform for your hardware to ensure a large memory access, and always try to get the best disk subsystem either into the system for DAS or good SAN devices.


5. Placement This is not so much an area that is going to affect the sizing of your environment, but has the potential to impact your sizing decisions in the long run. Here we are referring to the act of taking one of the virtualization candidates and actually deploying it to one of the selected virtualization host systems. The knowledge of interdependencies of the various workloads affects some of how this placement occurs but from a high level, this is more about optimizing the placement for a few selected variables. Virtual Machine Manager has an intelligent placement tool that helps you optimize either to a load balancing algorithm or to a maximizing utilization algorithm. You can alternatively also tweak individual parameters to help optimize your environment based on your business weights of the different parameters.


As you size your virtualization environment, also keep in mind the overall manageability factor and how you can scale your management apps to help cover the new environment. Now that you have seen how to size your virtualization environments, keep two things in mind–virtualization is a great technology that can help in multiple levels and scenarios but is still not the panacea for all problems so do take the time to identify your true problems and also remember that you need to look at deploying and managing virtualized environments over a long period of time and hence the need to think about virtualization as a 3-year solution at least.


Virtualization is primarily a consolidation technology that abstracts resources and aids aggregation of workloads, so think carefully about how this affects your environment and what steps you need to have in place to avoid disasters and plan for them early.


-Rajiv Arunkundram [ Senior Product Manager, Server Virtualization ]

Finally, an important planning item for any software deployment is licensing. Here’s one of our experts explaining the current licensing plan for Windows virtualization:


From the Experts: Virtualization Licensing
One of the most talked about and often most confused areas for virtualization is licensing. Some of this is primarily caused due to the lack of one industry standard way of dealing with licensing and the other cause is that virtualization is a disruptive technology in how companies operate and hence not clear to customers on what the various policies mean in this new world.


Microsoft’s licensing goals are to provide customers and partners cost-effective, flexible, and simplified licensing for our products that will be applicable across all server virtualization products, regardless of vendor. To this effect, several changes were put in place in late 2005 to help accelerate virtualization deployments across vendors:
  • Windows server licensing was changed from installation-based licensing to instance-based licensing for server products.
  • Microsoft changed licensing to allow customers to run up to 1 physical and 4 virtual instances with a single license of Windows Server 2003 Enterprise Edition on the licensed device; and 1 physical and unlimited virtual instances with Windows Server 2003 Datacenter Edition on the licensed device.
  • With the release of SQL Server 2005 SP2, Microsoft announced expanded virtualization use rights to allow unlimited virtual instances on servers that are fully licensed for SQL Server 2005 Enterprise Edition.
With all these changes, you can now easily acquire and license Windows Server and other technologies in a much more efficient process. Virtualization also adds another level of complexity for licensing with the ability to easily move the images or instances around between machines. This is where licensing from the old era makes it tricky. The simple way to remember and ensure that you are fully licensed is to look at the host systems as the primary license holders with the instances being the deployment front. So if you want to move a workload to a system that has Windows Server Enterprise Edition running and already has 4 instances running, you will need an additional license; if it is lower than 4, you will not need an additional license to make the move happen.


Do note that the licensing policies for these apply across virtualization products in the same manner across all server virtualization platforms.
Read More