Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

ICT VIETNAM COMMUNITY ICT24H.
NET
ICT24H.NET Page 1

TNG QUAN V WINDOWS SERVER 2008
NHNG TNH NNG MI TRONG WINDOWS SERVER
2008
So vi Windows Server 2003, phin bn Windows Server 2008 c nhng tnh nng mi sau.
1. Cng c qun tr Server Manager
Server Manager l mt giao din iu khin c thit k t chc v qun l mt server chy h iu
hnh Windows Server 2008. Ngi qun tr c th s dng Server Manager vi nhng nhiu mc ch
khc nhau.

Cng c qun tr Server Manager.
Qun l ng nht trn mt server: vi Server Manager bn c th tm thy nhng thng tin c bn
nh tn my tnh, workgroup, domain, trng thi kt ni LAN chc nng kt ni t xa remote desktop.
Hin th trng thi hin ti ca server: Server Manager truy vn n nhng bn ghi ca h thng v
lit k cc loi thng tin c gi n. Nu nhng cnh bo hoc li xy ra ca cc role c tm thy
trong bn ghi, mt biu tng s xut hin ch ra tnh trng hin ti ca server.
Nhn ra cc vn gp phi i vi cc role c ci t mt cch d dng hn: vi mi
role u c mt trang tm tt c hin th cng vi s kin ca role . Server Manager lc ra v ch
hin th nhng s kin xy ra i vi role. Hin th nhng thng tin h thng gi n, nhng cnh bo v
Smith Nguyen Studio.
http:/ / www.facebook.com/ SmithNguyenStudio
ICT VIETNAM COMMUNITY ICT24H.NET
ICT24H.NET Page 2

li xy ra u c lit k trn mt danh sch v bn c th double-click vo bt c s kin g xem
thng bo .
Qun l cc role trn server, bao gm vic thm v xa role: trong Windows Server 2008 cho
php bn ci t 17 role bng cch click vo Roles trn Server Manager s hin ra danh sch cc role
c ci t. Bn c th thm role bng cch click vo lin kt Add Roles. Tng t bn c th xa b
role bng cch click lin kt Removes Roles.
Thm v xa b cc tnh nng: vic thm v xa b cc tnh nng tng t nh role.
Chn on cc du hiu bt thng: cc cng c nh Event Viewer, Reliability and Performance
Monitor v Device Manger u c th gip bn chn on cc du hiu, trng thi vn hnh kp thi
khc phc v x l cc s c trn server.
Cu hnh server: c 4 cng c ( Task Scheduler, Windows Firewall, Services v WMI Control).
Cu hnh sao lu v lu tr: cc cng c gip bn sao lu v qun l a l Windows Server Backup
v Disk Management u nm trn Server Manager.
chy Server Manager, bn c th click Start > Administrative Tools > Server Manager. Mt cch
khc l click chut phi vo Computer trn thanh menu Start v chn Manage.
2. Windows Server Core
Server Core l mt tnh nng mi trong Windows Server 2008. N cho php bn c th ci t vi mc
ch h tr c bit v c th i vi mt s role.
V d, nu bn ln k hoch to mt DHCP server trn mt werver v ch c DHCP server, bn c th s
dng Server Core. Thay v ci t y mt h iu hnh Windows Server 2008 trn mt my tnh
ng vai tr server, Server Core c th ci t thc thi cc file v h tr nhng th vin lin kt ng
(DLL) cn thit cho Role m bn la chn(trong trng hp v d ny l DHCP).
Mt im khc bit ng k gia Server Core v ci t y h iu hnh l Server Core khng phi
l mt giao din ngi dng ha (GUI). Thay vo , tt c cc tng tc vi Server Core c thng
qua cc dng lnh.
Server Core mang li nhng li ch sau:
Gim thiu c phn mm, v th vic s dng dung lng a cng c gim. Ch tn
khong 1GB khi ci t.
Bi v gim thiu c phn mm nn vic cp nht cng khng nhiu.
Gim thiu ti a nhng hnh vi xm nhp vo h thng thng qua cc port c m mc nh.
D dng qun l.
Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di
y l danh sch cc role c h tr:
Active Directory Domain Services (AD DS)
Active Directory Lightweight Directory Services (AD LDS)
DHCP Server
ICT24H.NET Page 3

DNS Server
File Services
Print Services
Web Services
Hyper-V
Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d
nh .NET Framework hoc Internet Explorer.
3. PowerShell
im khc bit gia mt ngi qun tr tt v mt ngi qun tr v i l vic thng hay s dng
nhng tp lnh mt cch kho lo v linh hot.
PowerShell l mt tp hp lnh. N kt ni nhng dng lnh shell vi mt ngn ng script v thm vo
hn 130 cng c dng lnh(c gi l cmdlets). Bn c th s dng PowerShell thng xuyn i
vi nhiu s qun l hoc cc cng vic qun tr khc. Hin ti, bn c th s dng PowerShell trong:
Exchange Server
SQL Server
Terminal Services
Active Directory Domain Services.
Qun tr cc dch v, x l v registry.
Mc nh, Windows PowerShell cha c ci t. Tuy nhin bn c th ci t n mt cch d dng
bng cch s dng cng c qun tr Server Manager v chn Features > Add Features
4. Windows Deloyment Services.
Mt trong nhng cng vic tn nhiu thi gian l vic ci t hoc thit lp n tng my tnh trn h
thng. ci t h iu hnh n l mt khong 30 pht. Thm thi gian bn ci t cc bn v li,
cp nht hoc cc ng dng km theo v thi gian ca bn cho mt h thng c th ln n 3 hoc
nhiu gi.Nu bn c 20 my tnh ci t, bn s mt rt nhiu thi gian ci t.
Trc y, cng c Remote Installation Services (RIS) ca Microsoft c th t ng thc hin vic ci t
trn h thng. ng tic l mt s s c xy ra hn ch vic s dng n i vi nhiu nh qun tr.
Windows Deployment Services (WDS) l cng c c thit k li t RIS.
Windows Deployment Services c tch hp trong Windows Server 2008 cho php bn ci t h iu
hnh t xa cho cc my client m khng cn phi ci t trc tip. WDS cho php bn ci t t xa
thng qua Image ly t DVD ci t. Ngoi ra, WDS cn h tr to Image t 1 my tnh ci t sn
Windows v y cc ng dng khc.
Windows Deployment Serviece s dng nh dng Windows Image (WIM). Mt ci tin c bit vi WIM
so vi RIS l WIM c th lm vic tt vi nhiu nn tng phn cng khc nhau.
WDS bao gm 3 thnh phn chnh sau:
Server : thnh phn server cung cp mt phng thc dnh cho cc my client c th boot,ng thi
truy cp mng v np cc h iu hnh vo. N bao gm cng c Preboot Execution Environment (PXE,
ICT24H.NET Page 4

thng c gi l pixie) v Trivial File Transer Protocol (TFTP). Thnh phn ny bao gm mt th mc
c chia s vi Image v nhng tp tin khc c s dng np Image n mt my tnh kt ni t
xa.
Client: thnh phn ny bao gm Windows Pre-Installation Enviroment (Windows PE) cho php my
client boot t giao din ngi dng ha v la chn nhng Image thch hp t server.
Management : WDS gm c nhng cng c c s dng qun l server, Image, v cc ti khon
my tnh client. V d bn Sysprep c s dng xa thng tin my tnh ( chng hn SIDs) trc khi
bt ly Image, v tin ch WIDS Capture c s dng ly Image v lu tr chng vo nh dng
WIM.
Hnh di l cch thc lm vic ca WDS. WDS server ang lu tr Image. PXE client s boot, sau
connect n WDS server. Windows PE s c ti xung cc client. Image ny gm c giao din ngi
dng ha c th tng tc vi user hoc t ng x l.

5. Terminal Services.
Terminal Services l mt thnh phn chnh trn Windows Server 2009 cho php user c th truy cp vo
server s dng nhng phn mm.
Terminal Services gip ngi qun tr trin khai v bo tr h thng phn mm trong doanh nghip mt
cch hiu qu. Ngi qun tr c th ci t cc chng trnh phn mm ln Terminal Server m khng
cn ci t trn h thng my client, v th vic cp nht v bo tr phn mm tr nn d dng hn.
Terminal Services cung cp 2 s khc bit cho ngi qun tr v ngi dng cui :
ICT24H.NET Page 5

Dnh cho ngi qun tr: cho php qun tr c th kt ni t xa h thng qun tr bng vic s dng
Remote Desktop Connection hoc Remote Desktop. Vi Windows Server 2008, Remote Desktop
Connection 6.0 c, cung cp cho bn nhng ci tin v bo mt nhng ni chung th chc nng kt
ni t xa trong Windows Server 2008 ging nh Windows Server 2003.
Dnh cho ngi dng cui: cho php ngi dng cui c th chy cc chng trnh t Terminal
Services server. Thay i c bit trong Windows Server 2008 l chc nng cho php cng lc nhiu
ngi dng c th chy cc chng trnh t server. Thm vo , ng dng Terminal Services c th
vt qua firewall mt cch d dng v cho php ng dng c th truy cp bn ngoi vi kt ni VPN.
6. Network Access Protection
Network Access Protection (NAP) l mt tnh nng mi c th gip bo v h thng mng ca bn t
nhng kt ni truy cp t cc client ngoi. Ni mt cch ngn gn hn, NAP gip bn bo v h thng
mng t cc client.

Trong mng LAN, bn c th kim sot cc my client bo m chng lun trng thi an ton v
vn hnh tt. Bn c th s dng Group Policy bo m vic bo mt v trng thi cp nht cn thit.
Nhng phn mm phng chng virus v spyware c th ci t cc client v c cp nht u n.
Bn c th chy mt on lnh script bo m cc chnh sch mt khu vc no .
Tuy nhin bn khng th kim sot vic truy cp t client n h thng mng ca bn t mt khch sn
hoc mt ngi nh. N bao gm c kh nng c th c ca my tnh c virus truy cp n h thng
mng ca bn.Gii php c s dng y kim sot truy cp l NAP, y l cng ngh m bn c
th s dng n kim tra trng thi ca client. Nu client trng thi tt, NAP s cho php truy cp
ICT24H.NET Page 6

vo mng. Nu trng thi bt thng, n s cch ly v cho php truy cp n server kim duyt
nhng yu cu trc khi truy cp vo h thng mng.
Cc chnh sch trng thi c xc nh v thit lp bi bn. V d bn c th chn yu cu tt c cc
cp nht c ph chun c ci t trn client. Trong h thng mng, bn s dng ng dng
Windows Software Update Services (WSUS) ph chun v ci t cc bn cp nht ln client. V VPN
client khng nm trong h thng mng ca bn, do khng th yu cu n cp nht. Client VPN ny s
c cch ly v WSUS c s dng kim duyt cc yu cu hp l trc khi cp nht.
NAP cung cp b th vin API (Application Programming Interface), cho php cc nh qun tr lp trnh
nhm tng tnh bo mt cho h thng ca mnh.
Hin ti, NAP h tr trin khai trn nhng loi hnh sau:
Dynamic Host Configuration Protocol (DHCP)
Ipsec with Health Registration Authority (HRA)
IEEE 802.1X (Wired v Wireless)
Virtual Private Network (VPN)
Terminal Services Gateway (TS Gateway)

7. Read-Only Domain Controllers
Read-Only Domain Controller (RODC) l mt kiu Domain Controller mi trn Windows Server 2008.Vi
RODC, doanh nghip c th d dng trin khai cc Domain Controller nhng ni m s bo mt khng
c m bo v bo mt. RODC l mt phn d liu ca Active Directory Domain Services.
ICT24H.NET Page 7

Qu trnh xc thc RODC.
V RODC l mt phn d liu ca AD DS nn n lu tr mi i tng, thuc tnh v cc chnh sch ging
nh domain controller, tuy nhin mt khu th b ngoi tr. Khi user s dng RODC, RODC s ng b
vi domain controller kim tra mt khu. Nu ti khon user ny tn ti, RODC s gi mt khu ca
ti khon n domain controller xc thc, sau tr v RODC kt qu. Vi mi ln xc thc s tn
thi gian v bng thng, tuy nhin vi chc nng Credential Caching trong RODC gip bn lu li nhng
mt khu c chng thc vo c s d liu ca RODC.
8. Cng ngh Failover Clustering.
ICT24H.NET Page 8

Trc khi tho lun v ci tin mi trong clustering, hy xem hnh trn. Client kt ni n server (c tn
l Server1) c cu hnh 2 nt cluster l ServClust1 v SrvClust2. C 2 nt ny u kt ni h thng
mng v c 2 u c cha s n a (Quorum Disk). Ch c mt nt c hot ng ti thi gian
ny.
V d, bn ang chy SQL Server 2008 trn c 2 server cluster ny. SrvClust1 hot ng cn SrvClust2
cha hot ng. Thm ch nu c 2 server cluster ny cng ang chy, ch SrvClust1 p ng c
nhng yu cu v hot ng chnh. Cng vic chnh ca SrvClust2 l gim st SrvClust1. Nu SrvClust1
ngng hot ng, SrvClust2 s nhn dng c vn SrvClust1 thiu kh nng hot ng v SrvClust2
s thay th hot ng ca SrvClust1. iu ny s gip h thng vn hot ng bnh thng nh c
SrvClust2.
Qua v d trn, Clustering l cng ngh cho php s dng hai hay nhiu server kt hp vi nhay to
thnh mt cm server tng cng tnh n nh trong vn hnh. Nu server ny ngng hot ng th
server khc trong cm s m nhn nhim v m server ngng hot ng ang thc hin nhm mc
ch hot ng ca h thng vn bnh thng. Qu trnh chuyn giao ny gi l fail-over.
Khng phi tt c cc phin bn no ca Windows Server 2008 cng h tr cng ngh clustering. Nhng
phin bn sau h tr:
Windows Server 2008 Enterprise
Windows Server 2008 Datacenter
Windows Server 2008 Itanium
ICT24H.NET Page 9

Hai phin bn khng h tr cng ngh clustering l Windows Server 2008 Standard v Windows Server
2008 Web.
Mt s ci tin m Windows Server 2008 mang n trong clustering:
Loi b nhng a khng kh nng hot ng v thay th bng mt kiu mi.
Cung cp cng c xc nhn tnh tng thch phn cng h tr cluster trc khi trin khai.
Cung cp vic h tr m rng i vi Storage Area Network (SAN).
Cung cp nhng cng c qun tr c ci tin gip bn c th thit lp cluster d dng hn.

9. Cng ngh o ha Hyper-V
Microsoft trc y tng cung cp nhng phn mm o ha nh Virtual Server, Virtual PC hay hng
Vmware cung cp sn phm Vmware Server, Vmware vSphere4, Vmware Workstation...Cc sn phm
ny khng nh c v tr trn th trng trong nhiu nm qua.
Hyper-V l cng ngh o ha server th h mi ca Microsoft, s thay i ln nht m Microsoft mang li
so vi phin bn Windows Server 2003. Hyper-V hot ng trn nn h iu hnh 64-bit. Vi Hyper-V,
ngi s dng c th s hu mt nn tng o ha linh hot, bo mt, ti a hiu sut v tit kim chi
ph:
Hyper-V c th thch nghi vi doanh nghip ln vi hng nghn my tnh hoc cc doanh nghip
nh hay vn phng chi nhnh. Hyper-V h tr b nh o ln n 64GB, a b vi x l. Do d,
cc ng dng my ch yu cu cu hnh cao cng hon ton c th trin khai c trn nn
tng o ha ny.
Kh nng bo mt ging nh cc server vt l. Kt hp cc cng c bo mt Windows Firewall,
Network Access Protectiondo tnh bo mt tt nh mi trng tht.
Hyper-V gip khai thc ti a hiu sut s dng phn cng server. Bng vic hp nht server,
cho php mt server vt l c th ng nhiu vai tr ca nhiu server. T , tit kim c chi
ph t cc khong mua server, in, khng gian v bo tr.
ICT24H.NET Page 10

Hnh trn th hin v Hyper-V. Server vt l ca bn ang chy Windows Server 2008 Enterprise. Bn c
th chy thm cc virtual server khc. C th l Windows Server 2008, Novell SUSE Linux Enterprise v
Windows Server 2003.
Phin bn Linux duy nht h tr Hyper-V l Novell SUSE Linux Enterprise Server
Khi trin khai gii php o ha trn Windows Server 2008, lu mt s im sau:
Server vt l phi chy phin bn Windows Server 2008 64-bit. (Virtual server c th 32-bit hoc
64-bit).
Windows Server 2008 Standard ch h tr 1 virtual server.
Windows Server 2008 Enterprise h tr 4 virtual server.
Windows Server 2008 Datacenter khng gii hn s virtual server.

10. Windows Firewall with Advance Security
ICT24H.NET Page 11

So vi phin bn Windows Server 2003, Windows Firewall trong Windows Server 2008 l mt gii php
firewall mi, c tn gi l Windows Firewall with Advance Security, cho php ngi qun tr c th cu
hnh a dng v nng cao tng cng tnh bo mt cho h thng.

Windows Firewall with Advance Security c nhng im mi:
Kim sot cht ch cc kt ni vo v ra trn h thng (inbound v outbound)
IPsec c thay th bng khi nim Connection Security Rule, gip bn c th kim sot v qun
l cc chnh sch, ng thi gim st trn firewall. Kt hp vi Active Directory.
H tr y IPv6.

CHNG I: CI T, NNG CP V TRIN
KHAI WINDOWS SERVER 2008
Nhng qun tr vin h thng gii khng phi l nhng ngi ch lm vic vo bui sng vi tch caf
cng nh vi ci bnh quy, sau quyt nh ci t h iu hnh bi v h ch cn c vi gi trc khi
ti ba n tra. Qun tr vin h thng gii lm vic vi mt k hoch. H bit rng h chun b ci h
iu hnh trc khi server c th b a vo vin bo tng.
Chng ny cp n vic ln k hoch trin khai Windows Server 2008. bi hc 1 l vic xem
xt a ra quyt nh la chn phin bn Windows Server 2008 thch hp, p ng vai tr cng nh cc
tnh nng trin khai chng hn nh BitLocker v Server Core cng nh vic nng cp t phin bn
Windows Server 2003. bi hc th 2 l cc thit lp t ng, t vic to cho n ti u ha vic ci
ICT24H.NET Page 12

t cng nh qu trnh trin khai ng thi nhiu h iu hnh Windows Server 2008 bng cch s dng
Windows Deployment Services.
Ch trong chng ny:
Ln k hoch ci t v nng cp
Ln k hoch trin khai t ng trn server.
Nhng bi hc trong chng ny
Bi hc 1: Ln k hoch ci t v nng cp Windows Server 2008.
Bi hc 2: Trin khai t ng ha server.
Trc khi bt u
hon tt cc bi hc trong chng ny, bn cn phi p ng nhng iu kiu sau:
Mt my tnh vi khong 20GB dung lng trng. 512 MB RAM, tc x l 1 GHz hoc ln hn.
Nhng bi thc hnh khng yu cu my tnh ca bn phi kt ni Internet, nhng cn phi
c thit lp mt IP. Bn c th s dng phn mm Vmware hoc Virtual PC thc hin vic
ci t o.
Download phin bn Windows Server 2008 Enterprise Edition t Microsoft Download Center.

Bi hc 1 : Ln k hoch ci t v nng cp Windows
Server 2008
Trong bi hc ny bn s c tm hiu cc phin bn Windows Server 2008 v cc role trong . Bn s
c nghin cu v Windows Server Core phin bn mi trong sn phm Windows Server 2008. Bn
s c hc v cch ci t cng nh nng cp Windows Server 2008. Bn s c khm ph v tnh
nng m ha BitLocker v tng bc trin khai n.
Sau bi hc, bn s nm c:

Ci t hoc nng cp Windows Server 2008
Trin khai BitLocker

Thi lng bi hc: 60 pht

La chn ng phin bn Windows Server 2008
Cc phin bn Windows Server 2008 u khc nhau, mi phin bn c nhng vai tr nht nh. C phin
bn thch hp cho vic cu hnh file server cho mt chi nhnh vn phng hoc cng c phin bn khc
thch hp cho vic trin khai vn phng chnh vi Microsoft Exchange Server 2007.
ICT24H.NET Page 13

Cu hnh ti thiu dnh cho Windows Server 2008
Trc khi tm hiu v s khc nhau ca cc phin bn Windows Server 2008, bn cn bit v cu hnh
yu cu khi ci t hoc nng cp Windows Server 2008. Nu bn khng s dng Windows Deployment
Services hoc boot t Windows Pre-installation Environment (Win PE) t CD-ROM, bn cn phi c a
DVD-ROM v dung lng ci t ca Windows Server 2008 xp x Windows Vista. bi hc 2, bn s
c ci t Windows Server 2008 m khng cn a DVD-ROM. Bng di y l cu hnh yu cu ti
thiu dnh cho Windows Server 2008.
Phn cng Yu cu ti thiu ngh
B vi x l 1 Ghz (x86), 1,4 Ghz (x64) 2Ghz hoc ln hn
RAM 512MB RAM 2GB
Dung lng trng 15GB 40GB

Mc d yu cu 15GB, tuy nhin vi phin bn Standard x86 bn ch cn 5,5GB. Vi phin bn Windows
Server 2008 Enterprise x64 bn cn khong 11GB dung lng trng. Vic yu cu ti thiu 15GB bi v
bn cn phi lu tr nhng swap file cng nh cc log file, ngoi ra dung lng cng c dnh cho vic
ci t role khi cn.
Ty phn cng ca bn m chn phin bn x86 hoc x64 thch hp. Bn khng th ci t c phin bn
x86 v x64 trn phn cng x64. Hoc nu bn ci t Windows Server 2008 trn b xi x l Itanium th
bn ch c th la chn phin bn Windows Server 2008 Itanium Edition.
Phin bn Windows Server 2008 Standard
Phin bn Windows Server 2008 Standard c s dng cho cc doanh nghip c quy m va v nh.
y l phin bn m bn c th chn trin khai cc role thng thng. im ch trong phin bn
ny:
Phin bn 32-bit (x86) h tr ti a 4GB RAM.
H tr trin khai Network Load Balancing nhng khng h tr tnh nng failover clustering.
Kh bn ln k hoch trin khai cho cc server, bn c th chn phin bn ny ci t cc role c bn
nh DC, File and Print Server, DNS server, DHCP server v cc ng dng khc. Mc d nhng dch v
ny cn thit h tng mng doanh nghip ca bn tuy nhin vic trin khai m rng i hi bn nn cn
nhc khi la chn phin bn ny. Nu bn ch s dng cho doanh nghip va v nh, khng cn cho vic
trin khai failover clustering hoc Active Directory Federation Services th nn la chn phin bn
Windows Server 2008 Standard gim thiu chi ph.
Phin bn Windows Server 2008 Enterprise Edition
Windows Server 2008 Enterprise Edition l phin bn c s dng cho doanh nghip ln. Vi phin bn
ny, bn c th trin khai thm cc ng dng khc nh SQL Server 2008 Enterprise Edition v Exchange
Server 2007. Nhng sn phm ny yu cu RAM v xi x l mnh cng nh c h tr trong phin bn
Enterprise ny. Khi ln k hoch trin khai, bn cn xem xt v vai tr, v tr, li ch ca Windows Server
2008 Enterprise so vi phin bn Windows Server 2008 Standard nh:
ICT24H.NET Page 14

Failover Clustering: failover clustering l cng ngh cho php cc server khc c th duy tr, tip
tc cc dch v m server chnh tm ngng v mt s c no . Bn c th trin khai failover
clustering trn nhng server trng yu m bo ngun d liu, ti nguyn khng gp ri ro
khi b s c.
Active Directory Federation Services (ADFS) : ADFS l dch v cho php xc nh cc t chc
nhm trong doanh nghip, s dng dnh cho cc i tc cn truy cp vo cc ngun ti nguyn
ni b.
Phin bn 64-bit (x64) h tr ti a 2TB RAM.
Khi ln k hoch trin khai,, bn cn xem xt cc role cn thit trin khai trong tng lai m phin
bn Standard khng c, bng role s c cung cp cui bi hc.
Phin bn Windows Server 2008 Datacenter Edition
Windows Server 2008 Datacenter Edition l phin bn c s dng trong doanh nghip c quy m rng
ln. im chnh gia s khc bit trong phin bn Enterprise v Datacenter l kh nng s dng khng
gii hn cc virtual server. Windows Server 2008 Datacenter l s la chn tt nht dnh cho doanh
nghip khi mun xy dng m hnh o ha.
Phin bn 64-bit (x64) h tr ti a 2Tb RAM.
H tr failover clustering v ADFS
Khng gii hn cc virtual machine.
Phin bn Window Web Server 2008
Windows Web Server 2008 c thit k dnh cho cc ng dng chy trn Web server.
Bn nn trin khai Windows Web Server 2008 qua cu hnh Server Core gim thiu nhng tn cng
xm nhp. Ngoi ra, bn nn trin khai phin bn Windows Web Server 2008 y nu cc ng dng
Web ca doanh nghip bn i hi cc tnh nng nh ASP.NET, v nn tng .NET Framework khng hot
ng trn Server Core.
Windows Server 2008 Server Core
Windows Server 2008 Server Core l tnh nng mi trong Windows Server 2008. N cho php bn c th
ci t vi mc ch h tr c bit vi mt s role. im khc bit gia Server Core v mt phin bn
Windows Server 2008 y l giao din. Tt c cc tng tc vi Server Core c thng qua cc dng
lnh. Bn c th qun l mt my tnh chy Server Core bng cch remote thng qua Microsoft
Management Console (MMC).
ICT24H.NET Page 15

Giao din Server Core
S dng phin bn Server Core cho bn 2 li ch chnh:
Gim thiu cc hnh vi tn cng xm nhp vo h thng thng qua cc thnh phn hoc cc
port c m mc nh.
Gim thiu chi ph phn cng
Bn nn s dng lnh Help xem cc hng dn cng nh cc lnh c bn dnh cho vic qun tr. Mt
lnh v d, chng hn bn mun join mt my tnh c tn PC1 chy Server Core vo domain ICT24H vi
ti khon admin l admin_ict24h, bn c th s dng dng lnh sau:
Netdom join PC1 /domain:ICT24H /userd:admin_ict24h /passwordd:*
Mt im ch l Server Core khng h tr tt PowerShell, mc d bn c th chy cc lnh PowerShell
trn Server Core remote thng qua WMI. Ngoi ra, bn c th chy cc cng c quan trng trn
ICT24H.NET Page 16

Server Core chng hn nh regedit v Notepad hoc m cc tnh nng trong Control Panel nh Time and
Date hoc International Settings (s dng lnh control timedate.cpl hoc control intl.cpl)

M Regedit v Notepad trn Server Core
C 2 lnh khc cng quan trng l oclist.exe v ocsetup.exe. Oclist.exe cung cp mt danh sch tt c
cc server role c ci t trn server. Bn c th thm hoc xa nhng tnh nng bng lnh
ocsetup.exe. V d, ci t IIS-Webserver role, s dng lnh ocsetup.exe IIS-WebServerRole hoc
xa role s dng lnh ocsetup.exe/uninstall IIS-WebServerRole.
ICT24H.NET Page 17

Xem cc role v tnh nng c trn Server Core
Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di
y l danh sch cc role c h tr:
Active Directory Domain Services (AD DS)
Active Directory Lightweight Directory Services (AD LDS)
DHCP Server
DNS Server
File Services
Print Services
Web Services
Hyper-V
Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d
nh .NET Framework hoc Internet Explorer.
ICT24H.NET Page 18

Hi nhanh
1. Phin bn Windows Server 2008 no c th c ci t trn my tnh Core 2 Duo v 4Gb RAM ?
2. Hai li ch chnh ca vic trin khai Server Core l g?
Tr li nhanh
1. 32-bit v 64-bit
2. Vn hnh tt hn v gim thiu cc hnh vi xm nhp h thng

Cc role trong Windows Server 2008

ICT24H.NET Page 19

Server Role Web Itanium Standard Enterprise Datacenter
Web Services(IIS)
Appliaction Server
Print Services
Hyper-V
AD Domain Service
AD Lightweight Directory Services
AD Rights Management Services
AD Certificate Services Partial
AD Federation Services
DHCP Server
DNS Server
Fax Server
UDDI Services
Windows Deployment Services
File Services Partial
Network Policy and Access Services Partial
Terminal Services Partial
*Partial : mt phn
Ci t Windows Server 2008
Trc khi bt u ci t Windows Server, bn cn phi xem qua nhng vn v cc iu kin v yu
cu phn cng.Cho d bn c ci t Windows Server 2008 trn lab hoc mi trng thc t, bn cn
m bo cc phn cng chn phi bng mc ti thiu so vi cu hnh ti thiu m Microsoft ngh.
Khi bn chn cu hnh cho server, thm ch l cu hnh ti u m Microsoft ngh c th cng cha
p ng nhu cu trin khai v tng lai bn cn trin khai, nng cao cc dch khc trn server. V d h
thng Windows Server 2008 chy Exchange Server 2007 vi cu hnh Cluster Continous Replication
(CCR) s yu cu cu hnh nhiu hn 2GB RAM h thng hot ng n nh hn. Thm vo , SQL
Server 2008 chy trn Windows Server 2008 cung cp gii php BI (Business Intelligence) cho 10.000
user cn c yu cu 32GB RAM. V th, bn cn tnh ton trc khi bt u chn cho mnh mt server vi
cu hnh p ng c cc nhu cu cn thit.
Ch : Windows Server 2008 h tr c 2 cu trc vi x l 32-bit v 64-bit. Tuy nhin, phin bn mi
nht l Windows Server 2008 R2, Windows Midmarket Server v Windows Small Business vi nhng tnh
nng a dch v, cc phin bn ny ch h tr cu trc vi x l 64-bit.
RAM h tr ti a cho h thng 32-bit l 4GB khi chy phin bn Standard Edition v 64GB khi chy
phin bn Enterprise v Datacenter. Nu chy h thng 64-bit, b nh RAM c th h tr ln dn 32GB
v 2TB RAM cho phin bn Enterprise v Datacenter. Thm vo , Windows Server 2008 h tr h
thng Itanium, tuy nhin, chip x l Intel Itanium 2 nhn l cn thit.
C cc phin bn Windows cho bn la chn, mc d cc phin bn u c nhng tnh nng ging nhau,
tuy nhin mt s tnh nng khc ch c nhng phin bn Windows Server 2008 nht nh. Doanh
nghip hoc ngi qun tr cn phi hiu khi lng cng vic cn thit chn cho mnh phin bn
thch hp. V d, chn phin bn Enterprise Edition vi mc ch s dng cng ngh clustering hoc t
ng chng thc vi dch v Microsoft Certificate Services. Hay vi phin bn Web Edition l s cn thit
i vi vic gim thiu chi ph v ch trin khai web server v cc ng dng web.
ICT24H.NET Page 20

Nu bn c mi trng Windows, bn c th ci t mi hoc nng cp trn server . Vic cp nht
hay ci t mi u c nhng li ch khc nhau.
Ci t mi: li ch chnh ca vic ci t mi li h iu hnh l bn c th bit c server
c tht s tt hay khng. Bn c th trnh c nhng vn m bn c th gp phi
i vi phin bn trc - c th l cc phn mm c li, thit lp v cu hnh cha chnh
xc, hoc nhng ng dng c ci t khng tng thch. Tuy nhin, vic ci t li khin
bn s phi cu hnh li ton b. Thm vo , cc ng dng cn thit k tha trn server c s
cn phi c ci t li sau khi hon tt ci t h iu hnh mi. V th, trc khi ci t mi
h iu hnh bn cn ghi nh li tt c nhng thng tin cu hnh v sao lu ton b d liu
quan trng.

Nng cp: khi nng cp, cc file h thng s b thay th nhng s gi li cc ti khon user,
thit lp, nhm v quyn hn. trng hp ny, bn khng cn phi ci t li cc ng dng
hoc phc hi d liu. Trc khi c sa la chn nng cp thay v ci t mi, bn nn kim tra
li s tng thch ca cc ng dng bi v chng hot ng trn nhng phin bn Windows
trc khng c ngha l chng vn hnh tt trn Windows Server 2008.
Nng cp ln Windows Server 2008
nng cp ln phin bn Windows Server 2008, bn cn phi chy cc h iu hnh cp server.
Bn khng th nng cp cc phin bn Windows dnh cho ngi dng nh Windows XP hoc Windows
Vista ln Windows Server 2008. nng cp ln Windows Server 2008, h thng ca bn phi chy
Windows Server 2003. Vic nng cp t Windows NT 4.0 v Windows 2000 Server khng c h tr.
Nhng phin bn trc Nng cp ln Windows Server 2008
Microsoft Windows Server 2003 R2 Standard, Enterprise
hoc Datacenter Edition

H tr y
Microsoft Windows Server 2003 Service Pack 1(SP1)
Standard, Enterprise hoc Datacenter Edition

H tr y
Microsoft Windows Server 2003 Service Pack 2 (SP2)
Standard, Enterprise hoc Datacenter Edition

H tr y
Windows NT 4.0 Khng h tr
Windows 2000 Server Khng h tr
Windows XP Khng h tr
Windows Vista Khng h tr
Windows 7 Khng h tr

Vic nng cp t nhng phin bn Windows Server 2003 ln phin bn Windows Server 2008 Server
Core khng c h tr.
Vic nng cp ch thc hin c nhng phin bn ging nhau. V d, bn khng th nng cp phin
bn Windows Server 2003 Standard ln Windows Server 2008 Enterprise.
Nu phin bn bn ang s dng l Windows NT 4.0 hoc Windows 2000 Server, bn phi nng cp ln
Windows Server 2003 sau mi nng cp c ln Windows Server 2008.
ICT24H.NET Page 21

Khi nng cp ln phin bn Windows Server 2008, mi cu hnh thit lp, file v cc chng trnh u
c gi li. Tuy nhin, c mt s cng vic quan trng v cn thit m bn cn phi lm trc khi tin
hnh nng cp.
Khi nng cp h thng ln Windows Server 2008, bn cn ti thiu 482MB dung lng trng trong phn
dnh ring (partition) cho h thng, nu khng vic nng cp s tm dng.
Trc y, bn c th kim tnh tng thch ca h thng trc khi nng cp. Gi y bn c th lm
iu tt hn vi cng c Microsoft Application Compatibility Toolkit kim tra tnh tng thch
ca Windows Server 2008 trc khi ci t. Bn c th download cng c ny ti a ch website ca
Microsoft http://technet.microsoft.com/en-us/windowsvista/aa905066.aspx
Bn cng nn kim tra cc thnh phn phn cng ca server trc khi nng cp. Cng c gip bn lm
vic ny l Windows Memory Diagnostics. Xem chi tit v download ti a ch websiteca Microsoft
http://go.microsoft.com/fwlink/?LinkID=50362
Vic kim tra driver cng l iu cn thit. Khi nng cp ln Windows Server 2008, thng bo li s hin
th khi driver khng tng thch c pht hin, driver s khng th np vo h thng khi nng
cp.Nhng nguyn tc sau nn p dng x l trng hp trn:
1) Boot li server v nhn phm F8.
2) Chn Advance Boot Options.
3) Chn Disable Driver Signature Enforcement.
4) Boot t Windows.
5) Xa cc driver khng tng thch.
iu quan trng nht m bn cn lm l backup h thng trc khi nng cp : backup Active Directory,
backup d liu. bi hc sau bn s c tm hiu v vn ny.
Ln k hoch trin khai BitLocker
Windows BitLocker and Drive Encryption (BitLocker) l tnh nng xut hin ln u tin ti phin bn
Windows Vista Enterprise v Windows Vista Ultimate Edition v c ti cc phin bn Windows Server
2008. S dng BitLocker vi 2 mc ch: bo v d liu server thng qua vic m ha cc cng cha
d liu v kim tra c ch hot ng m bo vic khi ng c n nh.
Vic m ha ton h iu hnh v cc cng d liu gip bn c th bo v c cc d liu, ng dng
cha trong h thng. Vic h tr kim tra tnh ton vn, BitLocker yu cu my tnh cn phi c chip h
tr thch hp Trusted Platform Module (TPM) 1.2 hoc chun mi hn. My tnh cn phi c mt BIOS
h tr cho chun TPM. Khi BitLocker c vn hnh, tt c cc cng c bo v bi BitLocker s b
kha li v khng th m kha nu bn khng c c key. Ngoi ra, cc thnh phn trong BIOS, Master
Boot Record, Boot Sector, Boot Manager v Windows Loader cng c bo v.
V mt l do no , bn cn phi xa BitLocker ra khi my tnh. V d, mi trng trn my tnh ca
bn c bo mt kh cao t BitLocker gp phi mt s vn v kh nng vn hnh. V th bn phi
xa hoc v hiu ha n c th vn hnh, khi ng cc file h thng cng nh BIOS ca my tnh.
Hnh di y hin th 2 s la chn xa BitLocker t mt my tnh: v hiu ha BitLocker hoc b m
ha cng.
ICT24H.NET Page 22

Trin khai chi tit BitLocker s c cp cc bi hc sau.
Thc hnh: Ci t Windows Server 2008 v trin khai
BitLocker
Bi thc hnh 1: ci t Windows Server 2008 Enterprise Edition
bi thc hnh ny, bn s ci t Windows Server 2008 Enterprise Edition trn my tnh hoc my o.
Sau , bn s thc hin bi thc hnh trin khai v cu hnh tnh nng BitLocker trn my tnh.

ICT24H.NET Page 23

Language to install: ngn ng bn mun hin th.
Time and currency format: nh dng thi gian v tin t.
Keyboart or input method: nh dng bn phm v phng thc nhp ch.
Sau khi la chn cc thit lp trn xong, click Next tip tc ci t.
ICT24H.NET Page 24

Bn c th click dng What to know before installing Windows xem nhng iu cn bit trc khi ci
t Windows Server 2008.Click Install now bt u ci t.
ICT24H.NET Page 25

Sau khi chn Install now s hin th khung cho bn 2 s la chn :
Go online to get the latest updates for installation : cp nht phin bn mi nht qua
Internet. y l s la chn cn thit v bn s c cp nht y cc bn v bo mt, bn
v li v cc ng dng tng thch cu hnh. Nu c s la chn ny, my tnh ca bn phi
c kt ni Internet.
Do not get the latest updates for installation : vi s la chn ny, bn s khng cp nht
phin bn mi nht, iu ny khin my tnh bn c th c nhng l hng v bo mt. Tuy
nhin, vi s la chn ny bn c th ty chn c nhng thnh phn cp nht sau khi ci
t xong Windows Server 2008.
Nu bn mun nhn c s tr gip t Microsoft ci t c tt hn, hy nh du chn I want
to help make Windows installition better.
ICT24H.NET Page 26

in key bn quyn (License key) vo trng Product key (dashes will be added automatically)
hoc bn c th nh du chn vo Automatically activate Windows when Im online t ng
kch hot Windows khi trng thi trc tuyn.Click Next tip tc ci t.
ICT24H.NET Page 27

Nu bn cha nhp key, sau khi click Next bn s nhn c thng bo v vn nhp key. Click No
tip tc thc hin vic ci t, sau khi ci t xong bn c th thc hin vic nhp key.
ICT24H.NET Page 28

La chn phin bn Windows Server thch hp, y chng ta s la chn phin bn Windows Server
2008 Enterprise.
Ty thuc vo d liu ci t ca bn l g m s hin th s khc nhau. Nu bn a DVD Windows
Server 2008 Enterprise vo th khung hin th cc phin bn ch c Windows Server 2008 Enterprise dnh
cho 32-bit v 64-bit. i vi d liu cha ton b cc phin bn Windows Server 2008 s hin th tt c
cc phin bn Windows Server 2008 t Web Edition n Datacenter Edition. Click Next tip tc.
ICT24H.NET Page 29

Ti bng MICROSOFT PRE-RELEASE SOFTWARE LICENSE TERMS l nhng iu khon s dng
sn phm ca Microsoft. nh du chn vo I accept the license terms chp nhn nhng iu
khon v click Next tip tc.
ICT24H.NET Page 30

Ti bng trn cho bn 2 s la chn l nng cp hoc ty chn ci t, c th l ci t mi hoc ci t
chp ln h iu hnh c. Bn c th chn Custom (advaneced) tin hnh ci t ty chn.
Nu bn ang chy phin bn Windows Server 2008 th chc nng nng cp s b v hiu ha.
ICT24H.NET Page 31

Tip theo chn a cn ci t Windows Server 2008 Enterprise, nu bn tng ci t Windows XP,
Windows Vista hay Windows 7 th bc ny bn s c th d dng thao tc vi vic chn hoc format
a.
Vi nhng phin bn Windows trc, bn c 2 s la chn nh dng l NTFS hoc FAT/FAT32. Tuy
nhin, vi Windows Server 2008, FAT v FAT32 khng cn c h tr na, ch h tr nh dng NTFS
vi mc ch tng tnh bo mt
Tip tc click Next sau khi chn a ci t.
ICT24H.NET Page 32

i cho n khi hon tt ci t Windows Server 2008.
Sau khi h thng hon tt ci t s t ng ng nhp vi ti khon Administrator, tuy nhin mt
khu ang trng thi trng (blank) v th bn cn phi thit lp mt khu ln ng nhp u tin.

Click OK tin hnh thay i mt khu.
ICT24H.NET Page 33

Nhp mt khu v New mt khu v xc nhn li mt khu vo Confirm mt khu.
Mc nh, tng tnh bo mt, mt khu Windows Server 2008 c thit lp ch phc to
(Complexity). Mt khu phi tha mn nhng iu kin sau:
di t 8 k t tr ln.
Cha cc k t thng hoc k t hoa t a-z; A-Z
Cha cc k t s 0-9
Cha mt hoc nhiu k t c bit !@#$%^&*()_+....
V d : mt khu hp l : pass@word1 . Mt khu khng hp l: password1
Bi thc hnh 2: Cu hnh BitLocker m ha cng
Trong bi thc hnh ny, bn s c cu hnh BitLocker m ha ton b cng. Bi thc hnh ny
khng th hon thnh khi s dng my o bi v BitLocker khng h tr my o. Bi thc hnh ny gi
nh rng my tnh khng c TPM 1.2 hoc mi hn. Bao gm vic lu tr starup key trn cc thit b
TMP, mt sratup key trn thit b USB. Sau khi cu hnh BitLocker, bn s c thc hnh xa b n ra
khi my tnh. hon thnh bi thc hnh ny, lm theo tng bc sau:
ICT24H.NET Page 34

1. ng nhp vo my tnh, s dng ti khon Administrator.
2. T menu Administrative Tools, click Server Manager.
3. R-Click vo Features v chn Add Features.
4. Trn trang Select Features, chn tnh nng BitLocker Drive Encryption. Click Next sau
click Install.

5. Click Close. Khi hin th thng bo Do you want to restart now, click Yes. My tnh s khi
ng li hon tt vic ci t tnh nng BitLocker.
6. Sau khi my tnh khi ng, ng nhp ti khon Administrator vi mt khu l
P@ssw0rd.Ca s Resume Configuration Wizard s t ng hin th sau khi ng nhp.
Click Close hon thnh ci t.
7. Click Start > Run. Nhp gpedit.mcs v click OK.
8. Trong ca s Local Group Policy Editor, click Local Computer Policy > Administrative
Templates > Windows Components > BitLocker Drive Encryption Node.
9. M Control Panel Setup: kch hot chnh sch Advance Statup Options, chn Enabled, chn
Allow BitLocker Without a Compatible TPM, click OK v ng ca s Local Group Policy
Editor.
10. M ca s lnh v g gpupdate /force p dng chnh sch.
11. Xc nhn USB kt ni vi my tnh.
12. M Control Panel > BitLocker Drive Encryption. Click Turn On BitLocker di C:\
ICT24H.NET Page 35

13. Hin th cnh bo, click Continue with BitLocker Drive Encryption

14. Trn trang Set BitLocker startup freferences, click Require startup USB ket at every
startup.
15. Trn trang Save your startup key, chn USB v click Save.
16. Trn trang Save the recovery password, click Save the password on a USB drive v chn
USB cn lu li startup key, sau click Save.
ICT24H.NET Page 36

17. Mt khu c sao lu ln 1, click Next.
18. Trn trang Encrypt the volume, nh du chn Run BitLocker system check v click
Continue. Sau o click Restart Now.
ICT24H.NET Page 37

19. ng nhp bng ti khon Administrator v mt khu P@ssw0rd. Sau khi ng nhp bn s
nhn c thng bo my tnh khng h tr BitLocker hoc cng c m ha. Nu my
tnh bn khng h tr BitLocker, bn khng th hon thnh bi thc hnh ny.
20. Sau qu trnh m ha cng hon tt, m BitLocker Drive Encryption Control Panel v xc
nhn n c kch hot. Nu n c kch hot, bn c th nhn thy c cc ty chn nh
Turn Off BitLocker v Manage BitLocker Keys.
ICT24H.NET Page 38

21. Click Turn Off BitLocker > Decrypt the drive.
n bc 19 l bn hon tt bi thc hnh, vi bc 20, 21 hng dn bn tt BitLocker
Tng quan bi hc
Tm hiu cc phin bn Windows Server 2008 nh Standard, Enterprise, Datacenter, Web Server
v Itanium.
Tm hiu Server Core v trin khai Server Core gim thiu cc hnh vi tn cng xm nhp
cng nh chi ph phn cng.
Nng cp t phin bn Windows Server 2003 ln Windows Server 2008.
Tm hiu c bn v BitLocker.
Trc nghim
1. Cng ty ca bn c mt my tnh chy phin bn Windows Server 2003 R2 Standard Edition lm
intranet server. Bn c th nng cp ln phin bn no trong cc phin bn di y (Chn 2
p n)
A. Windows Server 2008 Datacenter edition
B. Windows Web Server 2008
ICT24H.NET Page 39

C. Windows Server 2008 Enterprise Edition
D. Windows Server 2008 Standard Edition
E. Windows Server 2008 Standard Edition (Server Core)
2. Cng ty ca bn c mt my tnh vi cu hnh Core 2 Duo v chy phin bn Windows Server
2003 R2 Standard Edition 32-bit. Phin bn no sau y c th nng cp ln 2008 c?
A. Phin bn 32-bit Windows Server 2008 Standard Edition.
B. Phin bn 64-bit Windows Server 2008 Standard Edition.
C. Phin bn 32-bit Windows Server 2008 Datacenter Edition.
D. Phin bn 64-bit Windows Server 2008 Enterprise Edition.
3. Bn va c cp trn ngh phi m ha cc cng trong my tnh chy Windows Server
2008 ng vai tr lm File server v phi s dng BitLocker. File server ny c 2 cng. cng
th nht l mt volume c lp cha h iu hnh. cng th 2 l mt volume c lp cha
cc file c chia s. Bo mch ca my tnh c kch hot chip TPM 1.2 v mt TCG ph
hp vi BIOS. Bc no sau y m bn cn cho php BitLocker m ha volume cha h iu
hnh v volume ch file chia s?
A. Cu hnh group policy thch hp.
B. nh li cc partition cha h iu hnh v ci t li Windows Server 2008.
C. Tt TPM chip.
D. Nng cp TPM chip.
4. Bn ang cn x l cu hnh BitLocker trn mt file server cho mt chi nhnh vn phng. cng
ca server ny c phn chia t h thng v ring bit vi cha h iu hnh. My tnh
khng c TPM chip, v th BitLocker c vn hnh bng cch s dng USB startup key.

Sau khi ci t tnh nng BitLocker, bn m BitLocker Control Panel v thy hin th nh hnh trn.
iu ny chng t BitLocker cha c bt. Bn cn lm g bt BitLocker ln:
ICT24H.NET Page 40

A. a USB vo my tnh.
B. Nng cp BIOS ca my tnh.
C. Cu hnh Group Policy.
D. Ci t tnh nng BitLocker.
5. Phin bn Windows Server 2008 no cn c s dng nu bn mun trin khai Exchange
Server 2007, yu cu c tnh nng failover clustering?
A. Windows Web Server 2008 (x64)
B. Windows Server 2008 Standard Edition (x64)
C. Windows Server 2008 Enterprise Edition (x64)
D. Windows Server 2008 Standard Edition (x86)
Bi hc 2: T ng ha trin khai trn server.
L mt qun tr vin h thng c kinh nghim, bn cn phi xem vic trin khai h thng nh mt ngh
thut. Khng ch ngi mt ch v click chut v cc hp thoi, bn c th vn hnh h thng bng cc
cng c t ng gip cho i mt ca bn c ngh ngi. Trong bi hc ny, bn s c tm hiu
v nhng cng c dng to ra cc file XML dnh cho vic ci t Windows Server 2008 v cch ci
t cng nh cu hnh Windows Deployment Service mt dch v cho php bn c th trin khai ci t
h iu hnh ln cc client bng image thng qua mng.
Sau bi hc ny, bn c th:

To v s dng file XML ci t Windows Server 2008.
Ln lch trin khai Windows Server 2008 s dng cc h iu hnh v Windows Deployment
Service.

Thi lng cho bi hc: 40 pht.

Tm hiu Windows Server 2008 Answer File
Mt answer file cho php bn c th nhng thit lp cc ty chn c th chng hn nh phn chia
cng, xc nh ng dn ca image ci t Windows Server 2008 v key sn phm. Windows Server
2008 answer file thng c gi l autounattended.xml. y l tn ca mt file c t ng x l
trong sut qu trnh ci t m khng cn gim st. Khng ging vi cc phin bn Windows Server
trc, Windows Server 2008 answer file s dng nh dng XML. Cc qun tr vin thng hay to file
ny bng cng c Windows System Image Manager (Windows SIM). Cng c Windows SIM gm c c
cng c Windows Automated Installation Kit (Windows AIK). Mc d bn c th to mt answer file bng
cng c lp trnh vi nhng c php XML phc tp tuy nhin vic s dng Windows AIK gip bn c th
tit kim thi gian. Mt li ch khc ca cng c Windows AIK cho php bn c th xc thc c answer
file c tht s a ra nhng kt qu mong mun.
to answer file bng cng c Windows System Image Manage, thc hin nhng bc sau:
1. M Windows System Image Manager. ng dng ny gm c c cng c Windows
Automated Installation Kit.
Bn c th download Windows AIK ti a ch http://go.microsoft.com/fwlink/?LinkId79385
ICT24H.NET Page 41

2. Copy file \Sources\install.wim t d liu ci t Windows Server 2008 vo mt th mc tm
thi no trn my tnh c ci t Windows AIK.
3. Click File > Select Windows Image. Chn file install.wim. File ny bao gm tt c phin bn
Windows Server 2008.
4. Bn c th chn mt image trong Windows Image. Chn Server Enterprise v click OK.
5. Khi hin th thng bo t mt catalog file, click Yes. Hp thoi User Account Control hin th,
click Continue. Catalog file s c to.
6. T menu File, chn New Answer File.
7. Chn thnh phn thch hp trong Windows Image, bn c th cu hnh cho thnh phn . Hnh
di hin th bng cu hnh thit lp cho php my tnh c ci t t ng v join vo domain
contoso.internal.

To file autounattended.xml trong Windows System Image Manager
8. Khi answer file c lu li, n s t ng xc thc image h iu hnh trc khi load ln.
Thng thng, vic ci t t ng c s dng trong a mm. Mt s server mi hin nay khng cn
a mm ny na, v th Windows Server 2008 ci t bng mt file, thng thng s t ng kim tra
trong tt c cc volume trn server, file ny c gi l autounattended.xml. S t ng ny cng c
kim tra cc thit b USB.
trng hp khc ca vic ci t s dng cc file chia s trong mng, n cn c boot t Windows
PE, kt ni vo mng chia s sau s dng lnh setup.exe /unatten:x:\autonattended.xml ( vi x:\ l
ng dn cha file autonattended.xml).
Hi nhanh
1. Cng c no cho php bn to mt unattended XML answer file?
2. Khi bn ci t Windows Server 2008 trn my tnh khng c a mm, lm th no bn c th
ICT24H.NET Page 42

m bo c file autounattended.xml c nhn din?
Tr li nhanh
1. Window System Image Manager t Windows AIK.
2. Sao chp file autounattended.xml ln USB kt ni trn server.

Windows Deployment Service
Windows Deployment Service l mt role trong Windows Server 2008 cho php bn trin khai cng vic
ci t h iu hnh t xa trn client m khng cn phi ci t trc tip. Bn cng c th trin khai
WDS vi cc phin bn Microsoft trc , nhng bi hc ny tp trung vo vic s dng cng ngh ny
trn Windows Server 2008
WDS yu cu client cn phi c card mng tng thch PXE. Nu client khng c h tr, bn cn
phi s dng phng php khc chng hn l ci t thng qua mng vi Windows PE remote.
Nu client c chng thc, client s t ng bt u ci dt. Nu autounattended.xml answer file
khng c ci t trn server c role WDS, vic ci t ny buc phi c thc hin bi qun tr vin.
Mt im khc bit gia vic ci t da trn WDS v ci t bnh thng l gia vic ci t thng qua
mng v ci t t ngun d liu trn DVD-ROM.
Windows Deployment Service c th c ci t trn Windows Server 2008 vi cc iu kin sau y:
My tnh cn ci t WDS phi thuc Active Directory domain.
Cn mt DHCP server trong mng.
Image h iu hnh phi c lu tr trong paritition nh dng NTFS.
Bn khng th trin khai WDS trn my tnh chy phin bn Windows Server Core. Sau khi ci t WDS,
bn cn cu hnh n trc khi cho n hot ng. Bn c th s dng cng c Windows Deployment
Services Configuration Wizard hoc cng c WDSUtil.exe.
Nu WDS khng thuc DHCP server, bn cn cu hnh n lng nghe mt port no khc port 67. Nu
khng, WDS v DHCP s b xung t.
ICT24H.NET Page 43

tab Client, cho php bn c th thip lp t ng ci t vi cc cu trc c th nh x86, x64 hoc
ia64.
ICT24H.NET Page 44

Mt s mi trng mng c cc dch v chng hn truyn thng thoi hoc cc on ghi hnh, s dng
cc a ch IP cp pht ra cc phm v. Bn c th s dng tab Network Settings cu hnh cp pht
IP s dng WDS v UDP port. Bn c th gii hn s bng thng s dng WDS trong mc Network
Profile.
ICT24H.NET Page 45

S dng Multicast, Schedule v Automatic Deployment
Multicast cho php doanh nghip s dng bng thng hiu qu hn. V d bn trin khai 20 my tnh
Windows Server 2008, bn c th tit kim c lng bng thng khi ci t mt image thng qua
mng (khong 1,5GB d liu) so vi vic truyn cho 20 my tnh (khong 60GB d liu). Ngoi ra bn
cng c th cu hnh s dng mt s lng bng thng nht nh. Trin khai multicast trong mi trng
mng khi router h tr multicast.
Bn cng c th ln lch trin khai. V d bn c th cu hnh trin khai trong gi cao im khi m vic
truyn ti d liu t mc cao v c cp nht hng ngy. Ngoi ra bn c th thit lp thi gian cho
s lng my c th nhn c image. Hnh di l s hin th ca vic cho php multicast lc 3h sng
nu c 10 my client nhn image.
ICT24H.NET Page 46

Windows Deployment Services Images
Windows Deployment Services s dng 2 hnh thc : ci t image v boot image. Vi hnh thc ci t
image bn c th trin khai trn Windows Server 2008 hoc Windows Vista. Ci t image mc nh
trong th mc \Source trn Windows Vista v Windows Server 2008 trong DVD. Nu bn s dng WDS
trin khai Windows Server 2008 n cc my tnh c cu trc vi x l khc nhau, bn cn thm cc
image ring bit cho tng cu trc vi x l. Nhng cu trc dnh ring cho cc bn image ny bn c th
tm thy trong cc ngun d liu ci t. Chng hn Itanium image c cha trong th mc ci t ca
Itanium. Mc d bn c th t to mt image ty nhng bn ch c th c mt image cho mi cu trc
vi x l. V d trin khai Windows Server 2008 Enterprise Edition x64 cho mt my tnh vi 1 vi x l x64.
bi thc hnh cui bi hc, bn s c thc hnh ci t image trin khai WDS.
Boot image c s dng boot cho client trong qu trnh ci t h iu hnh. Khi my tnh boot qua
mng, mt menu s hin th cc image c th trin khai ln my tnh trn WDS server. File boot.wim
trong Windows Server 2008 cho php bn c th trin khai theo cc s la chn. C 2 hnh thc boot
image c bn. Hnh thc u tin l capture image, cho pho s dng cng c bt li image. Hnh
thc th 2 l tm image. Hnh thc ny c s dng khi my tnh khng c PXE hoc mng khng cho
php trin khai PXE. NHng image ny c ghi trn CD, DVD hoc USB v c s dng boot.
WDS v vn kch hot sn phm
Mc d vic kch hot sn phm khng cn thit trong sut qu trnh ci t, tuy nhin qun tr vin nn
tm hiu v vic s dng WDS t ng kch hot sn phm vi volume activation. Volume activation cho
ICT24H.NET Page 47

php bn c th kch hot s lng ln sn phm trin khai trn cc server. Volume activation cung cp
cho bn 2 hnh thc key v 3 phng php kch hot. Hai hnh thc key l Multiple Activation Key
(MAK) v Key Management Services (KMS).
Multiple Activation Key cho php kch hot mt s lng my tnh nht nh. Mi ln kch hot thnh
cng coi nh bn s dng ht ln kch hot . V d mt MAK c 100 ln kch hot s kch hot c
cho 100 my tnh. MAK s dng phng thc MAK Proxy Activation v MAK Independent Activation
kch hot. MAK Proxy Activation tp trung ha vic kch hot bng cch request ln server kch hot sn
phm ca Microsoft. MAK Independent Activation yu cu mi my tnh kch hot ring bng cch
request ln server kch hot sn phm ca Microsoft.
Key Management Service cho php nhng my tnh c kch hot trong mt mi trng m khng
cn phi kt ni n Microsoft. Nhng KMS ket cho php dch v KMS trn server v cc my tnh kt ni
vi nhau thc hin vic kch hot. Cc doanh nghip s dng KMS nn c 2 server KMS trong 1
server ng vai tr backup. KMS yu cu phi c ti thiu 25 my tnh kt ni trc khi kch hot, v vic
kch hot phi c thay i bng cch kt ni li n server KMS sau 180 ngy.
Bn s dng kt hp KMS v MAK. Bn nn trin khai MAK nu s lng my tnh khng th kt ni
mng sau hn 180 ngy. Nu s lng my tnh ln hn 25 v khng th kt ni mng, bn nn s dng
hnh thc KMS. Nu s lng my tnh nh hn 25, bn cn s dng MAK v kch hot thng qua in
thoi.
Thc hnh : Ci t v cu hnh Windows Deployment
Services
Trong bi thc hnh ny bn s c ci t v cu hnh Windows Deployment Services, sau ci t
Windows Server 2008 bng image, cu hnh multicast trin khai cho cc image ny n cc my client
c cu hnh PXE.
Bi thc hnh 1: Chun b cho vic ci t Windows Deployment Services
Trong bi thc hnh ny bn s c hng dn chun b cho vic ci t WDS, bao gm c vic ci t
dch v DHCP v to ti khon qun tr nhng gii hn. y l ti khon khng thuc nhm Schema
Admin hoc Enterprise Admin. hon thnh bi thc hnh ny, thc hin theo cc bc sau:
1. ng nhp vo DC Glasgow, s dng ti khon Administrator.
2. Click Administrative Tools > Active Directory Users and Computers.
3. Ti Users, to mt ti khon mi c tn Kim_Akers vi mt khu l P@ssw0rd.
4. a ti khon Kim Akets vo nhm Domain Admins. Bn khng nn a ti khon ny vo cc
nhm qun tr khc.
5. ng xut ra khi DC Glasgow v ng nhp tr li bng ti khon Kim_Akers.
6. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu
Adminitrative Tools.
7. R-lick vo Role v click Add Roles.
8. Trn trang Before you begin, click Next
9. Trn trang Select one server role, chn DHCP Server v click Next.
10. Ti trang Introduction to DHCP Server, click Next.
ICT24H.NET Page 48

11. Ti trang Network Connection Bindings, chp nhn gi tr 10.0.0.11 v click Next.
12. Xc nhn a ch IP ca server ti trang Specify IPv4 DNS Server Settings

13. Trn trang IPv4 WINS Settings, mc nh v click Next.
14. Trn trang DHCP Copes, click Add.
15. Ti hp thoi Add Scope, nhp cc gi tr a ch IP sau click OK v click Next.
ICT24H.NET Page 49

16. Xem li cc thng s mc nh ti DHCPv6 Stateless Mode, sau click Next.
17. Xem li cc thng s mc nh ti DHCP IPv6 DNS Server, sau click Next.
18. Xc nhn ti khon s dng ti Use Current Credentials, chn User Name v chn ti khon
CONTOSO\kim_akers. Click Next. Ti trang Confirmation, click Install.]
19. Khi qu trnh ci t dch v DHCP Server hon tt, click Close.
20. ng xut ra khi DC.
Bi thc hnh 2 : Ci t role Windows Deployment Services v thm Image File.
Trong bi thc hnh ny bn s c ci t role WDS v thm image t source ci t Windows Server
2008. Bn phi m bo rng source ci t Windows Server 2008 phi nm trong DVD-ROM trn my
tnh ca bn.
1. ng nhp vo DC Glasgow bng ti khon Kim_Akers.
2. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu
Adminitrative Tools.
3. R-click vo Roles v chn Add Roles.
4. Ti trang Before you begin, click Next.
5. Trn trang Select server roles, nh du chn Windows Deployment Services v click
Next.
6. Xem li cc ch mc Things to note ti trang Overview of Windows Deployment v
click Next.
ICT24H.NET Page 50

7. Trn trang Select role services, m bo bn chn c Deployment Server v Transport
Server. Click Next sau click Install. i cho qu trnh ci t role hon tt, click Close.
8. Ti menu Administrative Tools, click Windows Deployment Services. Ti hp thoi User
Account Control, click Continue.
9. Ti giao din Windows Deployment Services, r-click vo Servers, sau click Add Server.
10. Ti hp thoi Add Server, m bo rng bn nh du chn vo Local Computer, sau
click OK.
11. R-click vo server Glasgow.contoso.internal v click Configure Server. Bt u vo trang
Windows Deployment Services Configuration Wizard. Click Next.
12. ng dn mc nh ca th mc Remote installation folder location l C:\RemoteInstall
v click Next.
13. Ti System Volume Warning, ch th mc remote trn volume phi khc vi volume cha
h thng.
14. m bo rng bn nh du chn Do not listen on port 67 v Configure DHCP option
60 to PXEClient sau click Next.
ICT24H.NET Page 51

15. Trn trang PXE server initial settings, chn Respond only to known client computers v
click Finish.
16. Trn trang Configuration Complete, nh du chn Add images to the Windows
Deployment Server now v click Finish.
17. Ti hp thoi Windows image files location, click Browse v chn ng dn ti th mc
Source trong DVD, click OK sau click Next.
18. Trn trang Image group, nh du chn vo Create a new image group v t tn group l
ImageGroup1. Click Next.
19. Ti hp thoi Review settings, xc nhn li s lng image boot v s image ci t sau
click Next v i image c chuyn t DVD sang th mc C:\RemoteInstall.
ICT24H.NET Page 52

20. Khi image c di chuyn xong, click Finish.
21. Ti giao din Windows Deployment Services, r-lick vo Multicast Transmission v chn
Create Multicast Transmission.
22. Trn trang Transmission Name, nhp TestAlpha v click Next.
23. Trn trang Select image, nh du chn ImageGroup1 v click Next.
24. Trn trang Multicast Type, nh du chn vo Scheduled-Cast v Select the start
automatically when the number of clients ready to receive this image is . Thit lp gi
tr l 10. Click Next sau click Finish.
ICT24H.NET Page 53

25. ng Windows Deployments Services v ng xut
Tng quan bi hc
Answer file cho php cc qun tr vin c th t ng ci t h iu hnh.
Answer file, in hnh l file autounattend.xml, c to bng Windows System Image Manager
(Windows SIM) 1 thnh phn ca Windows Automated Installation Kit (Windows AIK). Cng c
Windows AIK bn c th download trn website ca Microsoft.
Bn c th lu tr answer file ti USB. Ngoi ra chng cn c tm thy mng chia s v lm
vic vi Windows PE.
Bn c th s dng Windows Deployment Services (WDS) trin khai ci t h iu hnh t
cc client c PXE bng cch s dng c ch multicast. Vi trin khai ny gip bn gim thiu
c bng thng s dng.
Bn c th thit lp thi gian thc hin vic multicast khi s lng client kt ni n WDS
server. Ngoi ra bn c th to mt Auto-Cast t ng bt u.
Nu WDS server c c dch v DHCP trn , bn cn cu hnh WDS lng nghe mt port khc
port 67 cng nh cu hinh DHCP option tag 60 cho tt c cc scope.
Volume activation cho php s dng 2 hnh thc kch hot. Multiple Activation Key (MAK) l mt
key m bn c th s dng kch hot ng thi nhiu my tnh. Vi hnh thc th 2 l Key
Management Service (KMS) yu cu ti thiu 25 my tnh kt ni n KMS server v trong vng
180 ngy. KSM l s la chn thch hp nht khi mi trng mng ca bn khng kt ni
Internet.
ICT24H.NET Page 54

Trc nghim
1. Bn va mi ci t Windows Server 2008 trn my tnh v c d nh s trin Windows
Deployment Services (WDS). Yu cu no sau y cn phi c trc khi ci t WDS? (chn 3
p n).
A. My tnh ca bn phi thuc Active Directory domain.
B. DHCP server phi c chng thc trong mi trng mng.
C. DNS sever phi c trong mi trng mng.
D. WDS phi c ci t trn my tnh Windows Server 2008.
2. Mi trng no cho php bn bt u vi vic ci t t ng?
A. Windows PE 2.0
B. Windows NT Boot Disk
C. MS DOS Boot Disk
D. Windows Server 2008 Installation Media.
3. Bn va mi ci t WDS trn my tnh ng vai tr l DC, DHCP server v DNS server. Khi bn
khi ng server vi card mng PXE, bn khng th kt ni n PXE trn WDS server. Bn nn
lm g gii quyt vn trn?
A. Cu hnh DHCP trong Windows Deployment Services server.
B. Cu hnh DHCP trong giao din DHCP server.
C. Cu hnh DNS trong giao din DNS server.
D. Cu hnh my client trn Windows Deployment Services server.
4. Bn va cu hnh multicast trn WDS bt u lc 7h ti th 6 cho 10 client nhn image. WDS
server t phng server tng di, 10 my tnh m bn d nh s ci t Windows Server
2008 phng t chc, trn tng 4. Phng server c subnet ring. DNS v DHCP thuc mt
server khc WDS server. Bn cu hnh WDS t ng ci t. Bn ang ngi trn vn phng.
Bn nn s dng phng php no cho vic trin khai ny?
A. Cp nht cc DNS zone m bo rng chng thuc trong Active Directory Integrated.
B. Cu hnh mt scope IPv4 DHCP cho cc PXE client.
C. Cu hnh mt scope IPv6 DHCP cho cc PXE client.
D. Di chuyn b nh tuyn n ni c h tr multicast.
5. Bn c 15 image Windows Server 2008 trin khai cho cc client s dng Windows
Deployment Services (WDS). Tt c cc server cn c cu hnh gn nh nhau. Khng c
server no c a mm hoc cng. Lm th no c th cu hnh WDS gim thiu vic
ci t bng tay.
A. Di chuyn file autounattendend.xml trn th mc chia s.
B. Cu hnh Multicast transmission trong WDS.
C. Cu hnh file autounattended.xml trong WDS server.
D. Di chuyn file autounattended.xml vo USB v kt ni n n tng server.

Tm tt chng

Tm hiu v cc phin bn Windows Server 2008 v phn cng, yu cu clustering v cc
role cn thit.
ICT24H.NET Page 55

Ci t Windows Server 2008 s dng DVD-ROM. Bn c th s dng Windows PE
boot thng qua mng vi mc ch ci t Windows Server 2008 cho d cha c card
mng PXE v WDS.
BitLocker yu cu phi trin khai trn cng u tin trc khi trin khai h iu hnh.
Nu khng bn cn phi xa h iu hnh v cng sau ci t li v trin khai
BitLocker.
BitLocker c th trin khai m khng cn n chip tng thch TPM 1. Bn c th cu
hnh Group Policy cho php BitLocker key lu tr trn USB v thit lp BIOS h tr USB.
Windows Server 2008 answer file cn c gi l autounattended.xml v c to bng
System Image Manager mt cng c c trong Windows AIK (Download Windows AIK
ti website ca Microsoft). Bn c th cu hnh WDS s dng file autounattended.xml
thc hin vic ci t t ng.
Windows Deployment Services cho php cc image ca h iu hnh c trin khai
trn ng thi nhiu my tnh vi card mng PXE, ng thi thit lp thi gian
multicast. Cu hnh multicast gip bn tit kim c bng thng, cho php ci t h
iu hnh vi ng truyn mng thp.
Cc thut ng chnh
Boot partition
DHCP
Multicast
PXE
System partition
Windows PE
Ng cnh
Trong ng cnh di y, bn s c tm hiu nhm tng tnh thc t cho bi hc ca bn.
ICT24H ang trong giai on nng cp h tng mng ca h t Windows Server 2003 ln Windows
Server 2008. iu ny khin cc cng vic ca nhn vin s thay i, v ICT24H mong mun bn a ra
k hoch trong vic ny. H mun hi kin ca bn v 3 vn sau:
1. 5 chi nhnh vn phng ca ICT24H c ci t Server Core theo phin bn Windows
Server 2008 Standard Edition. Nhng server ny hin ti ang chy Windows Server
2003 Standard Edition. Cu hnh mi server l Core 2 Duo 2Ghz, 4GB RAM v 1TB dung
lng trng. Bn c th a ra k hoch nh th no hon thnh mc tiu ny?
2. Bn chun b trin khai BitLocker nh th no cho 5 server ng vai tr RODC ny?
3. Phin bn Windows Server 2008 no thch hp cho h trin khai trn mt server ch vi
mt chc nng cha website ca cng ty ICT24H.
---End---
(n c chng 2)


Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

Uploaded by

Copyright:

Available Formats

ICT VIETNAM COMMUNITY ICT24H.

You might also like