What settings are added or changed?

What does a Server Core installation do?

 Active Directory Domain Services

 Active Directory Lightweight Directory Services (AD LDS)

 DHCP Server

 DNS Server

 File Services

 Print Server

 Streaming Media Services

By choosing to use the Server Core installation option on a server, you can reduce your administrative effort and help limit security risks. A Server Core installation provides these benefits in three ways:

 By reducing the software maintenance required

 By reducing the management required

 By reducing the attack surface

To accomplish this, the Server Core installation option installs only the subset of the binary files that are required by the supported server roles. For example, the Windows Explorer user interface (or "shell") is not installed as part of a Server Core installation. Instead, the default user interface for a server running a Server Core installation is the command prompt.

Optional features

 Backup

 Failover Clustering

 Multipath IO

 Network Load Balancing

 Removable Storage

 Simple Network Management Protocol (SNMP)

 Subsystem for UNIX-based applications

 Telnet client

 Windows Internet Name Service (WINS)

Who will be interested in this feature?

Since no graphical user interface is available for many Windows operations, using the Server Core installation option requires administrators to be experienced in using a command prompt or scripting techniques for local administration of the server. Alternatively, you can manage the Server Core installation with Microsoft Management Console (MMC) snap-ins from another computer running Windows Server 2008 by selecting the computer running a Server Core installation as a remote computer to manage.

You should review this topic and additional documentation about the Server Core installation option if you are in any of the following groups:

 IT planners and analysts who are technically evaluating the product

 Enterprise IT planners and designers for organizations

 Those responsible for IT security

 IT Pros managing the following server roles: Active Directory Domain Services, AD LDS, DHCP Server, DNS Server, File Services, Print Server, or Streaming Media Services

What new functionality does a Server Core installation provide?

Why is this change important? What threats does it mitigate?

 Reduced maintenance. Because a Server Core installation installs only what is required for the specified server roles, less servicing is required than on a full installation of Windows Server 2008.

 Reduced attack surface. Because Server Core installations are minimal, there are fewer applications running on the server, which decreases the attack surface.

 Reduced management. Because fewer applications and services are installed on a server running a Server Core installation, there is less to manage.

 Less disk space required. A Server Core installation only requires about 1 gigabyte (GB) of disk space to install, and approximately 2 GB for operations after the installation.

What works differently?

The management experience will also be different using a Server Core installation. A Server Core installation requires you to initially configure the system from the command line, or using scripted methods such as an unattended installation, because it does not include the traditional full user interface.

Once the server is configured, you can manage it from the command line, either locally or remotely with a Terminal Services remote desktop connection. You can also use MMC snap-ins or command-line tools that support remote connections to manage the server remotely.

How do I fix any issues?

Although no changes are required to the configuration of your network, you might need to become familiar with command-line tools.

What settings are added or changed in a Server Core installation?

The Server Core installation option does not add or change any settings. However, you should review the documentation for each of the supported server roles that are available with the Server Core installation option, to check for changes in Windows Server 2008.

The changes in each of those roles are the same whether you are using the Server Core installation or full installation option.

Do I need to change any existing code?

The Server Core installation option is not an application platform, and you cannot run or develop server applications on a Server Core installation. A Server Core installation can only be used to run the supported server roles and management tools.

Servers running a Server Core installation support development of management tools and agents, which can be divided into two categories:

 Remote management tools. These tools do not require any changes, as long as they use one of the protocols supported in Server Core installations to communicate with the remote management workstation, such as remote procedure call (RPC).

 Local management tools and agents. These tools might require changes to work with Server Core installations because they cannot have any shell or user interface dependencies, and cannot use managed code.

The Windows Server 2008 Software Development Kit (SDK) includes a list of APIs that are supported in Server Core installations. You need to verify that all APIs called by your code are listed, and you also need to test your code on a Server Core installation to ensure that it behaves as expected.

What do I need to change in my environment to deploy a Server Core installation?

No changes to your environment or infrastructure are required.

The Server Core installation option only supports a clean installation onto a server. You cannot upgrade to a Server Core installation from a previous version of Windows.

To install a Server Core installation of Windows Server 2008, start the server computer with a bootable Windows Server 2008 DVD in the computer's DVD drive. When the Autorun dialog box appears, click Install Now, and then follow the instructions on the screen to complete the installation.

Note

In many cases, a Server Core installation will be installed using an unattended installation script.

Hardware prerequisites for optional features

The following optional features require appropriate hardware to be able to use them:

 BitLocker Drive Encryption

Note

Some BitLocker functionality is available without specific hardware.

 Failover Clustering

 Multipath IO

 Network Load Balancing

 Removable Storage

There are no prerequisites for the following optional features:

 Backup

 Simple Network Management Protocol (SNMP)

 Subsystem for UNIX-based applications

 Telnet client

 Windows Internet Name Service (WINS)

Additional references

The following resources provide additional information about Server Core installations:

 If you need product support, see Microsoft Connect (http://go.microsoft.com/fwlink/?LinkId=49779).

 To access newsgroups for this feature, follow the instructions that are provided on Microsoft Connect (http://go.microsoft.com/fwlink/?LinkId=50067).

 If you are a beta tester and part of the special Technology Adoption Program (TAP) beta program, you can also contact your appointed Microsoft development team member for assistance.

The following resources on the Microsoft Web site provide additional information about some of the commands you can use to configure Server Core installations and enable server roles:

 Command-line reference A-Z (http://go.microsoft.com/fwlink/?LinkId=20331)

 Dcpromo unattended installation files

 Performing an Unattended Installation of Active Directory (http://go.microsoft.com/fwlink/?LinkId=49661)

 Netsh

 Netsh overview (http://go.microsoft.com/fwlink/?LinkId=49654)

 Dnscmd

 Dnscmd overview (http://go.microsoft.com/fwlink/?LinkId=49656)

 Dnscmd syntax (http://go.microsoft.com/fwlink/?LinkId=49659)

 Dnscmd examples (http://go.microsoft.com/fwlink/?LinkId=49660)

 Dfscmd

 Dfscmd reference (http://go.microsoft.com/fwlink/?LinkId=49658)

The following resource provides additional information for deploying, configuring, and managing a Server Core installation, and also for enabling a server role on a Server Core installation:

 Server Core Installation Option Step-By-Step Guide (http://go.microsoft.com/fwlink/?LinkId=87369)

Active Directory Certificate Services Role

Active Directory® Certificate Services (AD CS) in the Windows Server® 2008 operating system provides customizable services for creating and managing public key certificates used in software security systems employing public key technologies. Organizations can use AD CS to enhance security by binding the identity of a person, device, or service to a corresponding private key. AD CS also includes features that allow you to manage certificate enrollment and revocation in a variety of scalable environments.

The following topics describe changes in AD CS functionality available in this release:

 Cryptography Next Generation

 AD CS: Online Certificate Status Protocol Support

 AD CS: Network Device Enrollment Service

 AD CS: Web Enrollment

 AD CS: Policy Settings

 AD CS: Restricted Enrollment Agent

 AD CS: Enterprise PKI (PKIView)

Cryptography Next Generation

Cryptography Next Generation (CNG) in the Windows Server® 2008 operating system provides a flexible cryptographic development platform that allows IT professionals to create, update, and use custom cryptography algorithms in cryptography-related applications such as Active Directory® Certificate Services (AD CS), Secure Sockets Layer (SSL), and Internet Protocol security (IPsec). CNG implements the U.S. government's Suite B cryptographic algorithms, which include algorithms for encryption, digital signatures, key exchange, and hashing.

What does CNG do?

CNG provides a set of APIs that are used to:

 Perform basic cryptographic operations, such as creating hashes and encrypting and decrypting data.

 Create, store, and retrieve cryptographic keys.

 Install and use additional cryptographic providers.

CNG has the following capabilities:

 CNG allows customers to use their own cryptographic algorithms or implementations of standard cryptographic algorithms. They can also add new algorithms.

 CNG supports cryptography in kernel mode. The same API is used in both kernel mode and user mode to fully support cryptography features. Secure Sockets Layer/Transport Layer Security (SSL/TLS) and IPsec, in addition to startup processes that use CNG, operate in kernel mode.

 The plan for CNG includes acquiring Federal Information Processing Standards (FIPS) 140-2 level 2 certification together with Common Criteria evaluations.

 CNG complies with Common Criteria requirements by using and storing long-lived keys in a secure process.

 CNG supports the current set of CryptoAPI 1.0 algorithms.

 CNG provides support for elliptic curve cryptography (ECC) algorithms. A number of ECC algorithms are required by the United States government's Suite B effort.

 Any computer with a Trusted Platform Module (TPM) will be able to provide key isolation and key storage in TPM.

Directory: uploads
uploads -> 587 Return function, r i(X) r i(0) r i(1) r i(2) r i(3) 1 0 2 4 6 Thermal Station, I 2 0 1 5 6 3 0 3 5 6 10
uploads -> Department of science and humanities department of mathematics part-a questions and answers
uploads -> The Case Against the nypd’s Quota-Driven ‘Broken Windows’ Policing What Is It?
uploads -> For want of a nail
uploads -> Ownership Models There are two different types of ownership models
uploads -> Police Militarization
uploads -> City of rising star regular meting thursday, july 14, 2016
uploads -> Township of winfield
uploads -> Stop Militarizing Law Enforcement Act of 2014
uploads -> The Black Panther Party’s Ten-Point Program What We Want Now!

Download 1.83 Mb.

Share with your friends: