Windows Small Business Server 2008 Unleashed

Eriq Oliver Neale is the owner of EON Consulting (http://www.eonconsulting.net), a small business technology consulting practice in Denton, Texas, and a partner in Third Tier (http://www.thirdtier.net), an organization that provides escalation support for IT organizations around the globe. He is an internationally-recognized Small Business Server expert, and has been awarded the Most Valuable Professional designation for Small Business Server since 2005. Eriq was the lead author for Microsoft Small Business Server 2003 Unleashed, and his other writing credits include contributions to The Internet Unleashed 1997, Windows 2000 Server System Administrator’s Handbook, E-mail Virus Protection Handbook, and several books in both the 2000 and 2003 series MCSE exam preparation series.   Eriq is a 20+-year veteran in the IT industry, getting his start with DOS 2.1 and Novell 1.1. Over the course of his career, he has worked with various operating platforms (Microsoft, Apple, Novell, UNIX, Linux, VAX, AS/400), and he has focused on providing integration solutions for differing platforms. He has worked for small organizations, as well as Fortune 500 companies. Eriq’s introduction to the Small Business Server product line came in a one-year stint supporting the product for Microsoft Product Support and Services in Las Colinas, Texas. Since then, he has been focusing on providing solutions to make running and supporting SBS easier.   In addition to writing, Eriq maintains two blogs, one technical (http://simultaneouspancakes.com/Lessons) and one business-focused (http://msmvps.com/blogs/onq), and hosts a technology-focused weekly Internet radio program for small business owners (http://www.eoncall.com). He speaks regularly at industry conferences and user groups on a variety of SBS-related topics.   Eriq is a native Texan and makes his permanent residence in Denton. He is married, and he and his wife have a menagerie of animals for children. When not writing, blogging, or speaking about technology, he can be found attending baseball and women’s college basketball games, writing and recording music, or reading mysteries.   Amy Babinchak has officially been in IT since 1994 and unofficially for 10 years prior. Like many IT professionals, she started out helping people around the office and in the college dorm to build and use computers. Her knowledge grew from MS-DOS and the early PC applications into a full-time career, when she made the switch from professional environmentalist working from grant to grant into the world of enterprise IT support. In her career, she has supported MS-DOS, Windows 3.11, Novell, and Mac OS, all the way on up to the current versions. Having started her career in enterprise support, Amy noticed that many small businesses were languishing with poorly conceived networks and lack of consistent support. Excessive travel coerced her into opening her own business in 2000.   Amy is now the President of Harbor Computer Services (http://www.harborcomputerservices.net) to serve small businesses in the metro Detroit area and a Managing Partner in Third Tier (http://www.thirdtier.net), which provides escalation support services to IT organizations around the world. Harbor Computer Services has been recognized as a Small Business Specialist (SBSC). Amy actively participates in two local user groups and several online newsgroups. She has spoken at local and international conferences on SBS technical and security topics, including SMB Nation and SMB Summit. Amy is a Forefront MVP and has contributed her technical writing skills to Microsoft SBS 2003 Unleashed and various web sites. When these things don’t keep her busy enough, she provides remote support services for small business consultants using ISA. Amy firmly believes in maintaining work-life balance and has designed her company around this concept. She practices what she preaches by spending as much time as possible on her sailboat, cruising northern Lake Huron.   Steve Banks is a speaker, author, and consultant focusing on the small business space and Windows Small Business Server. With more than 17 years in computer technology fields, he is also the founder of the Puget Sound Small Business Server User Group and president of Banks Consulting Northwest Inc. Steve has collaborated with Microsoft, Forbes, and Hewlett-Packard on white papers and case studies focusing on TechNet, Small Business Server 2000, and Windows Small Business Server 2003.   Timothy Truman Barrett is cleverly disguised as a mild-mannered geek. He actually is a happily married man with his lovely wife of 18 years, Dayna. They have two wonderful daughters, Stephanie and Lauren, who are also lovely. And Tim hates monkeys. A lot. Obsessed with building things from Lincoln Logs and Tinker Toys almost from birth, Tim finally got his first computer at age 15--an old used TRS-80 Model I. It had no instructions or manuals, but by trial and error, he figured out how to make it work. He also learned BASIC and spent the entire summer bugging his mother and six siblings by constantly showing them all the “cool” stuff he could do with it. After studying computer aided drafting (CAD) and physics at Louisville Technical Institute, he went to work in the healthcare industry and then moved into information technology. As a veritable jack-of-all-trades, Tim has worked with just about everything: sewing machines, table saws, X-ray machines, IBM mainframes, phone systems, servers, PCs, and the occasional backhoe.   At age 39, Tim is currently a Microsoft Certified Professional, a Microsoft Small Business Specialist, Microsoft SBS MVP, and the founder of the Kentucky Small Business Server User Group (KYSBSUG). His motto is, “No Geek Left Behind.” He also has strong religious values as one of Jehovah’s Witnesses.   Susan Bradley blogs at www.sbsdiva.com (http://www.sbsdiva.com) and writes on patch management issues for Brian Livingston’s Windows Secrets newsletter. In addition to being one of the writers on this book and Windows Small Business Server 2003 Unleashed with Eriq Neale, she has been a contributing author to the Windows Server 2008 Security Resource Kit, and she has been a contributing author for Harry Brelsford’s SBS 2003 Best Practices book.   Dean Calvert is owner and managing director of Adelaide-based Calvert Technologies (www.calvert.net.au), a Microsoft Gold Certified Partner, and South Australia’s first Small Business Specialist. For more than 13 years, Calvert Technologies has been one of Adelaide’s leading providers of IT solutions and services in the SMB market. Dean has presented at SMB Nation (Seattle and Redmond), Microsoft ANZ Partner Conference (Sunshine Coast), Microsoft Worldwide Partner Conference (Boston and Denver), and TechEd (Gold Coast and Sydney). He often works with Microsoft to present at partner and customer events throughout Australia. In October 2004 Dean became a Microsoft MVP (SBS) and was selected as Australia’s first Small Business Specialist Community Partner Area Lead for the 2007—2008 year. Dean also facilitates the Adelaide SBS Users Group (www.sbsusers.net) which has been running since July 2003. Dean is extremely fortunate to be the husband of Vivienne and father of Reece and Brittany, who regularly pull him away from his computer to show him what life really is all about.   Cris Hanna, BS, SBS-MVP, is the only remaining original SBS MVP, first recognized by Microsoft in 1997. Cris holds a Bachelor of Science in Computer Information Systems and in Management from Park University. Cris is the owner and principal consultant of Computing Possibilities Unlimited in Belleville, IL and focuses on Small Business Customers and consumer support. With over 20 years experience in IT, ranging from enterprise to single users, you can typically find Cris regularly posting in the Microsoft Public Newsgroups specifically focused on Small Business Server.   Cris is the founder of the St. Louis area Small Business Solutions Group, made up of Microsoft Partners who focus on providing software and services to small business.   Kevin James is a solutions architect with more than 15 years of IT consulting experience in Microsoft technologies. He provides services and solutions to large international corporations and small business entities alike through organizations like Microsoft Consulting, HP Services, and his own consulting company. Kevin James is now in his second consecutive year as a Microsoft Small Business Server Most Valuable Professional award recipient.   Jeff Middleton is well recognized worldwide in the Microsoft Small Business Server (SBS) community, known as a speaker, author, advisor, and technical community leader. Microsoft has awarded him each year since 1999 with the prestigious Small Business Server Most Valuable Professional recognition. Based upon 20 years of experience as a consultant and system integrator in small business and vertical market applications, he’s operated his own business located in New Orleans since 1990. Jeff’s name is now synonymous with Swing Migration, the worldwide SMB consultant’s choice of methodology for SBS Server replacement. He founded SBSmigration.com in 2004, providing a technical mentor and training product as a project consultant to consultants. His work is both published and cited in books and trade journals.   As an expert in disaster recovery, domain migration, and a full-range of topics on the SBS and Windows platforms, Jeff travels constantly as a popular speaker. He has presented at conferences internationally including the Microsoft Partner Program, Tech Ed, SMBTN, ITA, and SMB Nation, as well as lending his support in person as a guest speaker to more than 50 local IT Pro groups of all sizes in North America, Australia, and Europe. Starting in 2007, he launched the SBSmigration.com IT Pro Conference held annually during May in New Orleans, offering a unique discussion forum for experts in SMB business and technology.   David Shackelford works for himself as an instructor and gun-for-hire for Exchange, Windows Server, and SBS-related projects. He plans deployments and migrations, conducts audits, and troubleshoots Exchange and SBS problems around the world, all remotely from his office in Olympia, WA. He is associated with CoopLink Ltd, a Microsoft Gold Partner, where he serves as the network architect and project planner. David actively participates on the technical forums at Tek-Tips.com and other random places where Exchange and SBS are being discussed, and he authored a TrainSignal video course on Exchange 2007. He has been awarded the Microsoft MVP award for his contributions to the Exchange community every year since 2004, and keeps a close involvement with the SBS production cycle and program group.   Kevin Weilbacher, SBS-MVP, is a small business consultant in the Tampa, Florida area, and is involved with the Tampa Bay SBS User group. He has worked with the Microsoft SBS Server product for eight years, and was first selected as a Microsoft SBS MVP in 2004. He has managed IT departments in the automobile, healthcare, and financial industries, and speaks on the topics of SBS and small business issues, especially security and compliance, at both the local and national levels.

Foreword   xxvii

Introduction   1

 Book Overview   2

 

Part 1 Introduction and Setup

Chapter 1 Welcome to Small Business Server 2008   5

 History of the SBS Product   5

 BackOffice Small Business Server 4.0   6

 BackOffice Small Business Server 4.5   7

 Microsoft Small Business Server 2000   7

 Microsoft Small Business Server 2003   8

 Essential Server Solution Family   9

 Features of SBS 2008   9

 Communication   9

 Collaboration   10

 Protection   11

 Expansion   12

 Limitations of SBS 2008   13

 Hardware Limitations   13

 Software Limitations   14

 Support for SBS 2008   14

 Community Support   14

 Online Support   15

 Official Product Support   16

 

Chapter 2 Planning for the SBS 2008 Deployment   17

 Knowing the Client Base   17

 Understanding How the Server Will Be Used   18

 Planning for Correct Licensing.    19

 Planning the Hardware   22

 Planning the Network   23

 Changes in Network Options from Previous Versions   23

 Connection to the Internet   23

 IP Address Ranges   24

 DHCP Configuration   25

 Public and Private Domain Names   26

 Planning the Storage Layout   26

 Changes in Storage from Previous Versions   27

 Multiple Partitions Versus Multiple Spindles   27

 Minimum Partition/Spindle Sizes   28

 Fault Tolerance   29

 Backup Technologies   32

 

Chapter 3 Installing and Configuring SBS 2008   35

 Preparing for SBS 2008 Installation   36

 Collecting Information for the Setup Process   36

 Configuring the Internal Network   37

 Disabling DHCP on the Network   37

 Installing SBS 2008   38

 Collect the Initial Setup Data   38

 Prepare the Disk Infrastructure   38

 Complete Setup   40

 Performing the Initial Configuration of SBS 2008   45

 Run the Connect to the Internet Wizard   45

 Install Security Updates   48

 Run the Set Up Internet Address Wizard   48

 Complete Other Setup Tasks   54

 Troubleshooting SBS 2008 Installation Issue   57

 Log Files   57

 Setup Issues   57

 Known Installation Issue   59

 

Part 2 Managing Network and Web Configuration

Chapter 4 DNS, DHCP, and Active Directory Integration   63

 Understanding the Role of DNS and DHCP   63

 Native Tools   64

 Preparations and Caveats   67

 Default Configuration of DNS and DHCP   67

 Securing DNS and DHCP   70

 Securing DNS   70

 Securing DHCP   71

 New in SBS 2008   72

 Adding DNS Records   75

 Reserving IP Addresses in DHCP Server   76

 Troubleshooting   78

 Event Log Errors   78

 Dcdiag   79

 Ping  80

 NSLookup    81

 Can’t Resolve a Host or Web Site Name   81

 ISP’s DNS Server Is Down   82

 DNS Returns a Bad Location   82

 Curse of the Hosts File   82

 There’s a Rogue DHCP Server   82

 

Chapter 5 Internet Information Services 7.0   85

 The Web Sites Under the Hood   85

 External-Facing Web Sites Included with SBS 2008   86

 Internal Web Sites Included with SBS 2008   86

 Additional Web Sites That Can Be Combined with SBS 2008   87

 Protecting the Server   87

 Default SBS Web Sites   88

 Integration with SharePoint   89

 Configuring the Default SBS Web Sites   89

 Settings for the Default Web Site   95

 Settings for the SBS SharePoint Site and for the SharePoint Central Administration v3   96

 Settings for the SBS Web Applications and Windows Server Client Deployment Applications   97

 Settings for the WSUS Administrator Web Site   98

 Protecting Web Site Configuration   99

 Backup and Recovery of Metadata Information   99

 The Appcmd Command   100

 Backing Up the Web Site Configuration   101

 Using System State Backup   103

 Backup and Recovery of Web Sites   104

 Configuring Additional Web Sites   104

 Managing SSL Certificates in IIS   106

 Understanding the Default Certificates   107

 Deciding When to Use a Third-Party Certificate   107

 Working with Third-Party Certificates   108

 Requesting and Installing a Third-Party Certificate with the Add a Trusted Certificate Wizard   108

 Manually Requesting and Installing a Third-Party Certificate   110

 Integrating External Web Publishing   116

 Troubleshooting IIS   117

 Service Unavailable   117

 Server Not Found.    118

 

Chapter 6 Remote Web Workplace and Other Remote Access Solutions   121

 Understanding the Role of Remote Accessibility Solutions in SBS 2008   121

 Remote Web Workplace   122

 VPN   126

 RDP   126

 Managing and Using Remote Web Workplace   128

 Managing the Remote Web Workplace Interface   128

 Using the Remote Web Workplace Interface   133

 Managing and Using VPN   136

 Managing VPN   136

 Using VPN   140

 Managing and Using Remote Desktop   141

 Managing Remote Desktopv   141

 Using Remote Desktop   152

 Securing Remote Access Solutions   159

 Network Security   160

 Password Security  161

 Troubleshooting Remote Access Solutions   162

 RWW Access Issues   162

 VPN Access Issues   163

 RDP Access Issues   163

 

Chapter 7 SharePoint and Companyweb   165

 Understanding the Role of SharePoint and Companyweb in SBS 2008   166

 Companyweb’s Components   166

 What’s “In the Box” with SharePoint?    167

 Understanding the Default Settings of SharePoint and Companyweb   173

 Companyweb Port Settings   173

 Companyweb Mobile Settings   173

 SharePoint Default URL Mapping     174

 Default Program and Data File Locations   175

 Customizing SharePoint and Companyweb   176

 Merging Data from an Existing WSS 3.0 Site into Companyweb   177

 Developing a Data Protection Plan for SharePoint and Companyweb   180

 The Recycle Bin   180

 Backup and Restore with Native SharePoint Backup   181

 Backup and Restore with Small Business Server Backup   183

 Troubleshooting SharePoint and Companyweb   185

 Event ID Error Message 10016 Is Logged in the System Log After You Install Windows   SharePoint Services 3.0   185

 Migration   186

 

Part 3 Managing E-Mail

Chapter 8 Exchange Management   191

 Default Mail Configuration   193

 Mail Hygiene   194

 Preventing the Reverse NDR Attack   197

 Configuring Recipient Filtering   198

 SMTP Tarpitting   198

 Hosted Anti-Spam Solutions   199

 Getting Your Mail Delivered   200

 How Mail Gets Delivered   200

 Ensuring Delivery   200

 The Windows SBS POP3 Connector   203

 How Does the POP3 Connector Work?    203

 Limitations of the POP3 Connector   204

 Setting Up the POP3 Connector   204

 Receiving Mail for Multiple Domains   206

 Adding Additional E-Mail Domains   206

 Routing Mail for a Non-Authoritative Zone   212

 Cohosting Multiple Organizations on a Single Server   215

 Getting Information About Mailboxes   217

 Managing Limits   218

 With the GUI   218

 Setting Limits with PowerShell   221

 Using Transport Rules   222

 Setting Up Disclaimers with Transport Rules   222

 To Create Copies of E-Mails   223

 Archiving Mail   224

 Using SharePoint Libraries   224

 Using Exchange Journaling   225

 Troubleshooting Exchange Management Issues   230

 Troubleshooting Outbound Mail Delivery   230

 Troubleshooting the Content Filter   235

 Troubleshooting POP3 Connector   237

 

Chapter 9 Exchange 2007 Client Connectivity   241

 Choosing the Right Exchange Client   242

 Outlook 2007   243

 What’s New in Outlook 2007   243

 Installing Outlook 2007   244

 Configuring Outlook 2007   245

 Cached Exchange Mode   247

 Outlook Anywhere   252

 How Outlook Anywhere Works   253

 Configuring Outlook Anywhere   253

 Outlook Web Access 2007   258

 Improvements in Outlook Web Access 2007   258

 Using Outlook Web Access 2007   259

 E-Mail Certificates in OWA and Outlook 2007   263

 Remote File Access in OWA 2007   264

 ActiveSync   265

 Different Versions of ActiveSync   265

 Windows Mobile Devices   266

 iPhone   270

 Palm Devices   272

 Troubleshooting Exchange 2007 Client Connectivity   272

 Troubleshooting Auto Account Setup   273

 Troubleshooting Cached Exchange Mode   273

 Troubleshooting Exchange 2007 ActiveSync   274

 

Chapter 10 Exchange Disaster Recovery   277

 Understanding the Exchange Database Structure   278

 Exchange Storage Groups   279

 Extensible Storage Engine (ESE) Databases   281

 Circular Logging   283

 Checkpoint File   283

 Transactions 284

 Understanding Exchange Backup Methods and Requirements   285

 Online Backup  286

 Offline Backup   287

 Security Permissions   288

 Configuring Deleted Item and Mailbox Retention   289

 Using Local Continuous Replication   290

 Using Windows Backup   294

 Using Export-Mailbox   295

 Using ExMerge   296

 Other Backup Solutions   298

 Recovering Exchange Databases from Backup   298

 Events Requiring Exchange Recovery   299

 Recovery Process   300

 Using the SBS Backup Wizard to Restore   300

 Using the Recovery Storage Group   303

 Mailbox Recovery Using a Recovery Storage Group   307

 Using ExMerge to Restore   309

 Using Third-Party Solutions to Restore.    310

 Repairing a Damaged Exchange Database   311

 Recovery Tools   311

 ESEUTIL /R   314

 ESEUTIL /P   314

 ISINTEG   315

 Troubleshooting Exchange Disaster Recovery Issues   316

 

Part 4 Managing Client Connectivity

Chapter 11 Group Policy in SBS 2008   321

 How SBS 2008 Employs Group Policies   322

 Default AD Policies   322

 User Folder Redirection   323

 WSUS Implementation in SBS 2008   323

 Workstation Client-Specific Settings   323

 SBS 2008 User Account Settings   323

 Overview of Group Policy   324

 Group Policy Settings   324

 Group Policy Preferences   325

 Working with the Group Policy Management Console   328

 Navigating the Group Policy Management Console   329

 Viewing Group Policy Settings   330

 Group Policy Scope and Order of Application   335

 Working with Group Policy Modeling and Results   339

 Creating the Modeling Report   340

 Creating the Results Report   342

 Default SBS 2008 Group Policy Objects   343

 Default Domain Controllers Policy   344

 Default Domain Policy   346

 Small Business Server Folder Redirection Policy   347

 Update Services Client Computers Policy   348

 Update Services Common Settings Policy   349

 Update Services Server Computers Policy   349

 Windows SBS Client Policy   350

 Windows SBS CSE Policy   351

 Windows SBS Client--Windows Vista Policy   352

 Windows SBS Client--Windows XP Policy  352

 Windows SBS User Policy   353

 Creating and Modifying Group Policy Objects in SBS 2008   354

 Planning the GPO   355

 Testing the GPO   357

 Implementing the GPO   361

 Troubleshooting Group Policy   361

 Group Policy Testing Tools   361

 Backing Up and Restoring Group Policy   366

 

Chapter 12 User and Computer Management   369

 Understanding the Role of User and Computer Management in SBS 2008   369

 Understanding the Role of User Management in SBS 2008   370

 Understanding the Role of Computer Management in SBS 2008   371

 Understanding the Default Settings of User and Computer Management   371

 Understanding User Default Settings   371

 Understanding Default Computer Settings   378

 Customizing User and Computer Management   381

 Customizing User Settings   381

 Customizing Computer Management   392

 

Chapter 13 Macintosh Integration   403

 Understanding the Role of Macintosh Integration in an SBS 2008 Network   403

 Native Tools   404

 Third-Party Tools  404

 Planning and Preparing the Network Environment   405

 Domain Naming Conventions   405

 Active Directory Integration   405

 Account Username Conflicts   406

 Operating System Notes   407

 Preparing SBS 2008 Server   408

 SBS 2008 as the Network DHCP Server   408

 File Services for Macintosh Not Required   408

 SMB Signing Compatibility Requirements   408

 Connecting Macs to the SBS 2008 Network   410

 Configure DHCP Support on the Mac   410

 Configuring Mac OS 10.5   412

 Accessing Files   414

 Configuring Mac OS 10.4   414

 Configuring Mac OS 10.5   416

 Connecting to Active Directory   417

 Configuring Mac OS 10.4   417

 Configuring Mac OS 10.5   422

 Accessing E-Mail   428

 Preparing the SBS 2008 Network   429

 Preparing the Macintosh for Entourage Connectivity   429

 Configuring Entourage 2004   431

 Configuring Entourage 2008   433

 Accessing SBS 2008 Web Resources   435

 Companyweb   436

 Outlook Web Access   437

 Remote Web Workplace   437

 Troubleshooting   437

 Network Connectivity   437

 File Share Access   440

 E-Mail Access   440

 Windows Support on the Macintosh   441

 Boot Camp   441

 Parallels Desktop for Mac and VMWare Fusion   442

 

Chapter 14 Additional Servers   445

 Understanding the Role of Additional Servers in an SBS 2008 Network   446

 Licensing for Additional Servers   446

 Scenarios for Additional Servers   447

 Misconceptions About Using Additional Servers   450

 Implementing Additional Servers   450

 Common Implementation Tasks   451

 Additional Domain Controller Configuration   459

 Terminal Server Configuration   469

 Developing a Data Protection Plan for Additional Servers   478

 Installing Backup Services   478

 Running a Manual Backup     479

 Scheduling Regular Backups   479

 

Chapter 15 Managing Workstations Through Group Policy   485

 Editing and Adding to Default Policies and Settings   491

 Organizational Units   491

 Security Groups   492

 Default Policies   493

 Group Policy Impact on Workstations   499

 Update Services Client Computer Policy   499

 Update Services Common Settings Policy   500

 Windows SBS User Policy   502

 Group Policy per Workstations   504

 Windows SBS Client--Windows Vista Policy   505

 Default Vista Firewall Policies   507

 Windows SBS Client--Windows XP Policy   509

 Windows SBS Client Policy   510

 Small Business Server Folder Redirection   510

 Deploying Software   511

 Controlling the Workstations   515

 Adjusting Permissions Using Group Policy   516

 Using Group Policy in the Vista Era   519

 User Account Control   520

 Mapping Network Drives   521

 Controlling USB Devices   522

 Troubleshooting   526

 

Part 5 Managing Security and System Health

Chapter 16 Monitoring and Reporting   531

 Understanding the Role of Monitoring and Reporting in SBS 2008   532

 Understanding the Default Settings of Monitoring and Reporting   533

 Security   534

 Updates   534

 Backup   534

 Other Alerts   534

 Notification Settings   534

 Setting Up the Default Monitoring Reports   535

 The Daily Report   538

 The Weekly Report   541

 Customizing Monitoring and Reporting   543

 Setting Up Your Own Report   544

 Creating Custom Alerts and Notifications   545

 Deploying the Custom Alert   549

 Sample Event for OneCare   551

 Developing a Data Protection Plan for Monitoring and Reporting   552

 Special Backups of the Database   552

 Scheduling a Backup   553

 Shrinking a Database   555

 Additional Reporting Capabilities   555

 WSUS Reports   555

 FSRM Reports   558

 Troubleshooting Monitoring and Reporting   558

 Best Practices Analyzer   562

 Third-Party Monitoring Solutions   563

 

Chapter 17 Managing Server and Workstation Security   565

 The Benefits and Pitfalls of a Single Integrated Server   565

 Covering the Basics   566

 Physical Security   566

 Default Shares   566

 Passwords   568

 Shared Folders   570

 Creating a Share Using the Add a New Shared Folder Wizard   571

 Creating a Share Without Using the Wizard   573

 Folder Redirection   574

 File Server Resource Manager   576

 Storage Reports Management   577

 Quota Management   578

 Default Security Groups   579

 User Roles   581

 Creating and Editing User Roles   582

 Changes to Administrative Access in Windows 200   584

 UAC--User Account Control   584

 Firewall Protection   588

 Windows Firewall with Advanced Security   588

 Enable Logging   590

 Configuring Rules   591

 Windows Firewall in XP and Vista   593

 Edge Firewall   594

 Ports and Firewall Discovery   594

 The Case for Controlling Outbound Access   595

 OneCare for Server   596

 Configuring OneCare   597

 Additional Online Features   598

 Windows Software Update Services   601

 Managing WSUS   602

 Changing Settings   602

 Maintaining WSUS Health   604

 Expanding the Definition of Security   605

 Backup   606

 Group Policy   606

 Remote Access to Network Resources   607

 

Chapter 18 Backup and Disaster Recovery   609

 What’s New with SBS 2008 Backup and Recovery   610

 New Backup Technology   610

 Design Considerations   612

 Improved Backup   612

 Easier Scheduling   613

 Dedicated Backup Devices   613

 Exchange/SharePoint Backup and Recovery   613

 Easier Recovery   614

 No Built-in Client Backup   614

 Understanding Backup Issues   614

 File Recovery   614

 Archiving   615

 System Recovery   615

 Hardware and Media   616

 The Backup Plan   616

 Site and Security   617

 Backup Schedule   617

 Using the SBS Backup Tools   618

 Windows SBS Console   619

 Windows Server Backup   627

 WBADMIN Command-Line   631

 Windows Recovery Environment   633

 Backing Up SBS 2008 Premium Second Server   633

 Disaster Recovery with SBS Backup Tools   634

 Recovery Wizard   635

 Full (Bare-Metal) Restore   639

 Troubleshooting Backup Issues   640

 

Part 6 Beyond SBS 2008

Chapter 19 IPv6 Overview   645

 Introducing IPv6   646

 New Features   646

 Why Do I Need IPv6?    647

 How Do I Read IPv6?    647

 Saying Goodbye to DHCP   648

 Creating IPv6 DNS Entries   649

 Using IPv6   649

 IPv6 in Action--Windows Meeting Space   649

 Troubleshooting IPv6   652

 Troubleshooting Utilities   652

Learning Path   653

 

Chapter 20 PowerShel1   655

 Who Needs PowerShell   655

 Why PowerShell?    656

 How PowerShell Is Used   656

 PowerShell Under the Hood   657

 PowerShell Basics   658

 Using PowerShell   659

 Getting Started   660

 Commands   661

 Aliases   663

 Execution Settings   664

 Basic PowerShell Example   664

 Windows PowerShell Script   666

 Exchange PowerShell Script   668

 The Power of PowerShel   672

 get-command   672

 Get-help   685

 get-member   686

 Get-PSDriv   687

 PowerShell Resources   687

 

Chapter 21 Advanced Installation Options   691

 Understanding the Answer File   691

 Answer File Generator   691

 Answer File Format   695

 Installing SBS 2008 with a Custom Internal Domain Name   698

 Prepare the Answer File   698

 Perform the Installation   699

 Installing SBS 2008 into an Existing Active Directory Domain   700

 Prepare the Existing Server    701

 Install SBS 2008 in Migration Mode   707

 Configuring the New Server   708

 Moving Data and Settings from the Old Server   712

 Reconfigure the Old Server   717

 Installing Forefront Security for Exchange and Windows Live OneCare for Server Manually   720

 Forefront Security for Exchange   720

 Windows Live OneCare for Server  722

 A SBS 2008 Resources   725

 Microsoft Community Resources   725

 SBS 2008 Technical Documentation   725

 Web Sites and RSS Feeds   725

 Newsgroups   726

 Web Logs (Blogs)    726

 Small Business Community Resources   726

 Web Sites/Blogs   726

 Mailing Lists   727

 Exchange Resources   727

 Macintosh Resources   728

 Web Pages and RSS Feeds   728

 Newsgroups   728

 Mailing Lists   728

 iPhone Resources   728

 Outlook Resources   729

 Outlook Web Access Resources   729

 ActiveSync/PocketPC Resources   729

 SBS Monitoring and Reporting Resources   730

 Group Policy Resources   730

 PowerShell Resources   731

 Web Resources   731

 Books   731

 RRAS, VPN, and Network Security Resources   731

 Terminal Server Resources   732

 Workstation Security Resources   732

 Anti-Virus/Anti-Malware Tools   732

 Security Response Toolkit   733

 Security and Patching Resources   734

 General Security Information   734

 WSUS Resources   735

 

Index   737