Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Why Upgrade To Windows Server 2012

13,326 views

Published on

A presentation that myself and Dave Northey (MSFT IE) delivered on a road show in Ireland. The goal was to discuss why people should upgrade to Windows Server 2012 ... and we deliberately exlcuded Hyper-V.

Published in: Technology
  • Be the first to comment

Why Upgrade To Windows Server 2012

  1. 1. Why Upgrade toWindows Server 2012?Aidan Finn, MicroWarehouseDave Northey, Microsoft
  2. 2. • MicroWarehouse is Ireland’s largest independently owned IT Distributor.• Established in 1986, it is completely controlled by the local management team.• Comprising of 28 staff, MicroWarehouse sells products from a focussed VendorPortfolio to over 500 resellers, offering the largest local stockholding,aggressively priced and supported by unrivalled local knowledge.• Products and solutions sold include PC systems, peripherals, software andlicensing.Company Headquarters in Park West Business Park, DublinAdditional services provided include:• Total procurement and logistics solutions• Technical product co-selling• Vendor promotion and reporting administration• Pre-sales support• Software asset management reviews• E-marketing solutionsOur customers are:• Retailers (indigenous and multi-national)• Value added resellers• Solution providers & integrators• Software licensing specialists• Computer consultants.• Computer System BuildersIn partnership with our vendors, MicroWarehouse focuses on a broad base of resellers and has a proven track record in genuine breadth growth.With a balance sheet value in excess of €9million, MicroWarehouse is a secure business 100% focussed on delivering value in the Irishmarketplace.MicroWarehouse
  3. 3. • 09:30 – 10:30 Part I• End of support for legacy products• Small & Medium Business• Administration• 10:45 – 11:00 Break• 11:00 – 13:00 Part II• Storage• Remote Working• Business continuity & backup• 13:00 FinishAgenda
  4. 4. End of Support forWindows Server 2003/R2
  5. 5. And it’s not Changing• Mainstream support ended for Windows Server 2003/R2 onJuly 13th, 2010• That means no new products would be developed for it• Extended support ends July 14th, 2015• Don’t bother calling MSFT Support• No more security updates• Logically, no more 3rd party support• The date is not changing
  6. 6. SBS 2003• SBS support cycles depend on component parts• Windows Server 2003/R2: July 14th, 2015• Exchange 2003:• Mainstream support ended April 14th, 2009• Extended support ends April 8th, 2014• That means SBS 2003 support ends next April!!!• No support and SBS 2003 becomes a security vulnerability
  7. 7. SBS 2003 R2• Exchange 2007 support life cycle:• Mainstream support ends: 4/10/2012• Extended support ends: 4/11/2017• However, Windows Server 2003 R2:• Extended support ends: July 14th, 2015• Therefore SBS 2003 R2 support ends July 14th, 2015
  8. 8. Windows Server 2012Editions
  9. 9. Windows Server 2012 For Business Solutions
  10. 10. Enables small businesses around the world, powers many of theworld’s largest data centers, and delivers value to organizations ofall sizesAutomatedvirtualization&managementVirtualization&managementWindows Server 2012VirtualizationFirst serverAutomatedvirtualization&managementof privatecloudSmall business Mid-market EnterpriseOne Platform For All Customers
  11. 11. Foundation• Per Server Licensing• Limited to 1 processor only• Up to 15 users, no CALs• Cannot be virtualized andcannot be used at avirtualization host• Basic workloads for core ITcapabilities: file sharing,printer sharing and remoteaccess• Per Server Licensing• Up to max of 2 processors• Up to 25 users, no CALs• Can be virtualized, but cannotbe used as a virtualizationhost• Ideal for small businesses:protect data, organize andaccess business informationand access cloud services• Processor & CALs• Up to 2 processors perlicense; no processor limit• Virtual Use Rights: 2 Instances• Unlimited users with CALs• All server features including:continuous availability,storage, management,networking, identity andaccess (parity with Datacenter)• Processor & CALs• Up to 2 processors perlicense; no processor limit• Unlimited Virtual Instances• Unlimited users with CALs• Full product features• High DensityVirtualization for private andhybrid cloud environmentsEssentials Standard DatacenterThe Windows Server 2012 Editions
  12. 12. Small & Medium Business
  13. 13. The Past The FutureSBS 2011 Standardunconditionallyintegrated withExchange ServerExchange Server will not be integrated, allowingcustomers and partners to choose: how/where torun those workloads:On-PremiseSBS 2011Essentialsleveragedmessaging/ collabservices in the cloudor on-premiseFlexibility and Choice
  14. 14. Windows Server 2012 Essentials is the ideal solution for…2011 Essentials…customers who would previously havepurchased SBS 2011 Essentials to leveragethe cloud for applications and services suchas messaging, collaboration, etc.…customers who would previously havepurchased SBS 2011 Standard but are nowinterested in leveraging cloud-basedapplications and services.2011 StandardWindowsServer2012EssentialsOnlineApps/ServicesDeploying with Cloud-Based Apps/Services
  15. 15. Windows Server 2012 Essentials can be deployed in several on-premise scenarios withWindows Server 2012 Standard, Exchange Server, and SQL ServerTwo Physical ServersInfrastructureServerWindows Server 2012EssentialsMessagingServerWindows Server 2012Standard & ExchangeServer StandardLOBServerSQL ServerStandardOne Physical Serverwith two virtual machinesInfrastructureServerWindows Server 2012EssentialsMessagingServerExchange ServerStandardHostWindowsServer 2012StandardOne Physical Serverwith three virtual machinesInfrastructureServerWindows Server2012 EssentialsMessagingServerExchange ServerStandardHostWindowsServer 2012StandardDeploying with On-Premise Apps/Services
  16. 16. Deploying a Lower Mid-Market SolutionWindows Server 2012 Essentials can be part of a solution for customers with 25-75 PCsVirtual instance runningWindows Server 2012Essentials- Remote Web Access- Client computer backup- Email integration- Dashboard, etc.Windows Server 2012Standardrunning as a Hyper-Vhost provides up totwo virtual instanceswith a single license.Virtual instance runningWindows Server 2012Standard- Can be used foradditional workloads,such as ExchangeServer, SharePoint,WSUS, SQL Server,Remote DesktopServices, etc.Beyond Small Business
  17. 17. Server Administration
  18. 18. Server Administration Agenda• Server Manager• PowerShell• IP Address Management (IPAM)• DHCP Failover• Core/MinShell/Full GUI
  19. 19. WindowsServer 2008R2Connect to server roles(such as File Services,Hyper-V, and RemoteDesktop Services) on aper-server basis.FILE SERVICESHYPER-VSTORAGEWindowsServer 2012Manage a server role asit spans across servers,or look at a server andthe server roles on thatserver. Both options areimportant.Server 1 Server 3Server 2Server 1Role 1 Role 3Role 2Server 1 Server 2 Server 3Role 1Role 2Role 3Server Manager – Then And Now
  20. 20. Key featuresBroader coverage• Rich management through more than 2400cmdletsGreater resiliency• Robust session connectivity• Disconnected sessions• Session configuration files• Job scheduling• Windows PowerShell Web AccessMore intuitive• Integrated Scripting Environment 3.0: Syntaxsimplification | IntelliSense | Reusable text incode examples• Cmdlet discovery and module autoloading• Updatable help• Script-sharingHigher performance• On-the-fly compilation—up to six timesfaster• Windows PowerShell WorkflowAutomation With PowerShell
  21. 21. Integrated ScriptingEnvironment (ISE) 3.0IntelliSenseCmdletdiscoveryGet-Command *-Net*Get-Help *-Net*UpdatableHelpUpdate-HelpSave-HelpSnippetsMore Intuitive Scripting
  22. 22. Address Planning• Manage public IP addresses obtained from RIRs• Plan address blocks required by each site on the networkAddress Allocation• Manage static addresses and allocate on demand• Centralize the configuration of dynamic address ranges and theirproperties in DHCP• Dynamically update DNSUsage Tracking• Keep track of address utilization and aid in network addresscapacity planningTroubleshooting • Help identify issues with DHCP and DNS services on the networkAudit • Log address assignments by device/user• Audit DHCP and DNS server modificationsIP Address Management (IPAM)Solves a real world problem
  23. 23. Load Sharing orHot Standby MoreDHCP Failover
  24. 24. Server Core• Primary, default serverdeployment option• Supports more roles andservices, including .NetFramework 4.5 and SQL Server2012• Firewall-friendly remotemanagement (WinRM) andWindows PowerShell are enabledand installed by default• Adds the ability to easily movebetween Server Core andMinShellMinShell• Minimal User Experience Option• Server Core with GUI tools• Server Manager and cmd.exelaunch by default when server isbooted• Allows other GUI tools to beloaded• Enabled through Add Roles andFeatures wizard, or withPowerShellServer Administration Agenda
  25. 25. Active Directory Administration
  26. 26. Active Directory Administration Agenda• Active Directory Administrative Center (ADAC)• PowerShell History Viewer• AD Recycle Bin• Fine Grained Passwords• DACL• Group Managed Service Accounts• Virtual Domain Controllers
  27. 27. Active Directory Administrative Center (ADAC)• Introduced in Windows Server 2008 R2 and improved inWS2012• Designed for administrators. Common tasks are just there:• Reset a password• Find a user• Different GUI that presents more information• Newer features presented only in ADAC & PowerShell• Performs PowerShell under the hood …
  28. 28. Active Directory Administration Made Easier …• … and cheaper!• PowerShell History Viewer• Finding AD PowerShell difficult to learn?• Open a pane in ADAC to see the PoSH being used• Fine Grained Password Policies• Support demands for special password policies – IT versus the directors!• Simple to do – associate special policies with AD security groups• AD Recycle Bin• Restoring deleted objects is difficult and backup agents are expensive• Right-click and restore single objects or entire OUs!
  29. 29. Benefits• Reduces the learning curve• Increases confidence in scripting• Enhances Windows PowerShelldiscoverability• Graphical user interface supports ActiveDirectory recycle bin functionalityPowerShell History Viewer
  30. 30. Active DirectoryDomain Services Characteristics• Composed of central access rules• Applied to file servers through Group Policyobjects• Supplement (not replace) native file andfolder access control lists from NewTechnology File System (NTFS)Corporatefile serversPersonallyidentifiableinformation policyFinance policyUser foldersFinance foldersOrganizationalpolicies• High business impact• Personally identifiableinformationHigh businessimpact policyFinancedepartment policies• High business impact• Personally identifiableinformation• FinanceExamples• Organization-Wide Authorization Policy• Departmental Authorization Policy• Specific Data-Management Policy• Need-to-KnowDynamic Access Control
  31. 31. User claimsUser.Department = FinanceUser.Clearance = HighAccess policyFor access to financial information that has high business impact, a user mustbe a finance department employee with a high security clearance, and must use amanaged device registered with the finance department.Device claimsDevice.Department = FinanceDevice.Managed = TrueResource propertiesResource.Department = FinanceResource.Impact = HighActive DirectoryDomain ServicesFileserverExpression-based access rules
  32. 32. • Background• Service need to logon as a user and their passwords should expire• Managed Service Accounts (MSAs) introduced with Windows Server 2008 R2managed their own passwords• Clustered or load-balanced services that needed to share a single security-principal were unsupported– MSAs not able to be used in many desirable scenariosGroup Managed Service Accounts (gMSA)
  33. 33. • Solution• Introduce new security principal type known as a gMSA• Services running on multiple hosts can run under the same gMSA account• 1 or more Windows Server 2012 DCs required– gMSAs can authenticate against any OS-version DC– passwords computed by Group Key Distribution Service (GKDS) running on all Windows Server2012 DCs• Windows Server 2012 hosts using gMSAs obtain password and password-updates from GKDS - password retrieval limited to authorized computers• Password-change interval defined at gMSA account creation (30 days by default)• Like MSAs, gMSAs are supported only by the Windows Service Control Manager(SCM) and IIS application pools– support for scheduled tasks is being investigatedGroup Managed Service Accounts (gMSA)
  34. 34. Use the wizard to deploy a single virtual domaincontroller.Configure additional options for domain controllerclone (for example, name and IP information).Copy source domain controller virtual machineand restart to complete cloning operation.Virtual domaincontroller Clones Rollback Detection• Virtual domain controllers use theunique GenerationID attribute to detectwhen:• Snapshots are applied• A virtual machine is copied• GenerationID changes when an eventaffects virtual machine’s position in time• During startup, the virtual domaincontroller compares the current value ofGenerationID against the value stored inthe directory• A mismatch (rollback event) triggers safevirtual domain controller convergenceVirtualizing domain controllers
  35. 35. Storage
  36. 36. Storage Agenda• iSCSI Target• Storage Spaces• Deduplication• SMB 3.0• Scale-Out File Server
  37. 37. Storage Challenges• Need an iSCSI solution for test, development, demo, andsmall environments• Traditional RAID is expensive and hardware defined• File and archive servers are bursting at the seams• SANs are an expensive requirement for high availability(clusters)• Customers want software defined storage that reuses existingskills and has single admin mechanism across platforms
  38. 38. The iSCSI Target• Turn a server into an iSCSI server• Connect to it just like an iSCSI SAN• Can provide storage for a SAN• Built into Windows Server 2012• A role service• Can be an active/passive role in a Windows Server 2012failover cluster• Brief outage during failover• Great for a lab• System Center 2012 SP1 – VMM includes SMI-S Provider
  39. 39. Storage Spaces• Aggregation of non-RAID disks(such as JBOD): A Storage Space• Think of Storage Pool like a disk group in a SAN• Create virtual disks from a Storage Pool• Think of virtual disks like LUNs or vDisks created from a SAN disk group• Each virtual disk consumes space from physical disk in Storage Pool:• Simple: no disk protection• Mirror: either 2-way mirror or 3-way mirror• Parity: data striped across disks• This is not Windows RAID of the past
  40. 40. Storage Spaces VisualizedStorage SpaceMirror 1 Mirror 1 Mirror 1Mirror 2 Mirror 2 Mirror 2Mirror 1 Mirror 3 Mirror 2Mirror 2 Mirror 1 Mirror 32-Way Mirror3-Way MirrorSimple 1 Simple 3 Simple 5Simple 2 Simple 4 Simple 6SimpleParity1 Parity 3 Parity 5Parity 2 Parity 4 Parity 6ParityStriping Striping Striping Striping Striping Striping
  41. 41. Deduplication• De-duplicate at rest data on non-system drive volumes• Cannot be enabled on Cluster Shared Volumes (CSVs)• Greatly reduce storage space used:• File servers• Digital libraries• Archives• Optimization runs on scheduled basis – can also be ondemand
  42. 42. Real World Deduplication ResultsFigures from http://workinghardinit.wordpress.com/ - Didier Van Hoye, MVP
  43. 43. Improvements in SMB 3.0• SMB 3.0 is a new version of the file sharing protocol• Networking improvements in Windows Server 2012:• SMB Multichannel: Use parallel data streams across a single NIC (RSShardware) and/or across multiple NICs (automatically) with fault tolerance• Think MPIO for file shares• SMB Direct uses Remote Direct Memory Access (RDMA)enabled NICs:• Allows massive file share data throughput with minimal latency and impacton CPU
  44. 44. SMB 3.0 Competes with Block File Access• SMB 3.0 file shares can match if not exceed iSCSI on the samehardware• TechEd Europe 2012 Live Demo:• 1.2 million IOPS from a Hyper-V virtual machine• Over twice the capability of most demanding DB MSFT could find• TechEd North America 2012:• 16 GigaBYTES per second transfer rate• SMB 3.0 is Microsoft’s strategy for data center storage• Software defined and more economic than legacy hardware solutions
  45. 45. SMB 3.0 Use Cases• A file server can provide centralizedstorage for:• Windows Server 2012 Hyper-V – can becentrally managed by System Center 2012 SP1– Virtual Machine Manager• A single store for web servers for many IIS 8.0servers• Even be used for SQL Server (2008 R2 & 2012)database and log files• Does a file server have the uptime?
  46. 46. Scalable & Continuously Available Storage• A new kind of file server cluster:• Scale-Out File Server (SOFS)• A special cluster role• Not for end user file shares• Cluster can use JBOD + Storage Spaces• Traditional SAN storage also supported• Provides more economic softwaredefined storage• Based on tech you know: file shares File Server ClusterNode A Node Bfs1share fs1shareSQL Server
  47. 47. Remote Working &Branch Offices
  48. 48. RemoteDesktop WebAccessRemoteDesktopGatewayRemoteDesktopLicensingRemote DesktopSession HostComponent ArchitectureServerManagerSQLDatabaseRemoteDesktopConnectionBrokerRemote DesktopVirtualization HostRemote Desktop Services Components
  49. 49. User Profile Disk withpooled virtual machinecollectionsUser Profile Disk withremote desktop session hostcollectionsBenefits• Available with pooled virtual machinecollections and remote desktop sessionhost collections• Stores all user settings and data• Contains roaming user profile, FolderRedirection cache, and user environmentvirtualization• Roams with user within collection• Appears as a local disk and improvesapplication compatibilityWhat should I deploy?User Profile DiskWith every virtual machine pool andremote desktop session host collectionUser environment virtualizationTo apply roam settings across collectionsFolder RedirectionTo apply roaming user data acrosscollectionsTo centralize user data backupPersonalization with User Profile Disk
  50. 50. Applies GPOsto remotecomputersIT: Manage Out"Light up"remote clientsDecreasespatch missratesFIREWALLDirectAccessSharePointAppsIntranetExchangeVPNWin XP / Vista/ Non-WindowsWindows 7Windows 8MobileBroadbandSimplifiedconnectivityEnd User:GreatExperienceImprovedproductivityNot userinitiatedDirectAccess gives users the experience of being seamlessly connected to their corporatenetwork any time they have Internet accessVPNs connect the user to the networkDirectAccess extends the network to the computer and userXDirectAccess
  51. 51. Improving network efficiency in branch officesBenefitsIncrease applicationPerformanceDecrease WANUtilizationIncrease end userproductivityNetwork efficiency
  52. 52. Hosted Cache vs. Distributed Cache
  53. 53. NEW IN WINDOWSSERVER 2012PerformanceScalabilityManagementCloud-Ready•••••••New in BranchCache
  54. 54. Branch Office Direct Printing
  55. 55. Business Continuity &Disaster Recovery
  56. 56. BC & DR Agenda• Windows Server Backup• Windows Azure Backup• Hyper-V Replica
  57. 57. Backup, DR, and Business Continuity Problems• 3rd party backup solutions are expensive for small businesses• Do you need additional software for just a single server?• Offsite backup is essential but difficult• A replica site?• The receptionist taking tapes or USB drives home on the bus?• Data protection compliance?• What happens if the office burns down or is flooded?• How long can a businesses applications/data remain offline?• DR replication is expensive, inflexible, and often not possible
  58. 58. Windows Server Backup• The built-in backup tool in Windows Server• Basic, local-server-only backup• Uses same Volume Shadow Copy Snapshot (VSS) service as paid-forbackup solutions• Uses the new 64 TB & 4K sector matching VHDX file• Back up to:• Tape• Local drive• Shared folder – does not retain historical backups without intervention• Now supports backing up clusters
  59. 59. Windows Azure Online Backup• A part of Windows Azure Recovery Services• A paid-per-usage backup in the cloud solution from Microsoft• Automated off-site backup• Encrypts your data using your private encryption key beforesending it to the cloud• Microsoft cannot access your data• You really cannot lose that private key – no recovery!• Two solutions:• Upgrade Windows Server Backup to send backup directly to Azure storage• Add-on to System Center 2012 SP1 – Data Protection Manager
  60. 60. Windows Azure Online Backup Scenarios• Backup your data to Azure• Scenario 1: Normal operational restore• Restore lost data to on-premises servers• Scenario 2: Improvised on-premise DR site• Restore lost data to improvised DR site after a disaster• Scenario 3: Improvised DR site in public cloud• Create VMs in a cloud (such as Azure) and restore data to them
  61. 61. Backup for DR• Backup is not great for DR replication• Recovery (RTO) is slow - if at all – and lots of data lost (RPO)• The business is losing money & customer relationships• Might get services back, but will the business recover?• What is needed?• DR site for easy/rapid business continuity• Off-site backup (Windows Azure Online Backup) to restore older data
  62. 62. Benefits• Affordable in-box business continuity anddisaster recovery• Failure recovery in minutes• More secure replication across network• No need for storage arrays• No need for other software replicationtechnologies• Automatic handling of live migration• Simpler configuration and managementNew featureReplicate Hyper-V virtual machines from aprimary site to a replica siteHyper-V role and toolsHyper-VcmdletsHyper-V PSintegrated UIHyper-V Management Moduletracks and replicates changes foreach virtual machineHyper-V role and toolsHyper-VcmdletsHyper-V PSintegrated UIHyper-V Management Modulereceives and applies the changes tothe replica virtual machinePrimary siteCRM virtual machineSQL virtual machineSharePoint virtualmachineExchange virtual machineIIS virtual machine ExchangereplicavirtualmachineCRMreplicavirtualmachineReplicate overWAN linkSMB file shareSend/receivereplica trafficSANR1R2R3P1 P2Replica siteHyper-V Replica
  63. 63. And remember …Support for Windows Server 2003 &SBS 2003 is ending soon63Thank You!

×