Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

Smith Nguyen Studio.
ICT VIETNAM COMMUNITY ICT24H.NET
TNG QUAN V WINDOWS SERVER 2008

NHNG TNH NNG MI TRONG WINDOWS SERVER 2008
So vi Windows Server 2003, phin bn Windows Server 2008 c nhng tnh nng mi sau.
1. Cng c qun tr Server Manager

Server Manager l mt giao din iu khin c thit k t chc v qun l mt server chy h iu hnh Windows Server 2008. Ngi qun tr c th s dng Server Manager vi nhng nhiu mc ch khc nhau.
Cng c qun tr Server Manager. Qun l ng nht trn mt server: vi Server Manager bn c th tm thy nhng thng tin c bn nh tn my tnh, workgroup, domain, trng thi kt ni LAN chc nng kt ni t xa remote desktop. Hin th trng thi hin ti ca server: Server Manager truy vn n nhng bn ghi ca h thng v lit k cc loi thng tin c gi n. Nu nhng cnh bo hoc li xy ra ca cc role c tm thy trong bn ghi, mt biu tng s xut hin ch ra tnh trng hin ti ca server. Nhn ra cc vn gp phi i vi cc role c ci t mt cch d dng hn: vi mi role u c mt trang tm tt c hin th cng vi s kin ca role . Server Manager lc ra v ch hin th nhng s kin xy ra i vi role. Hin th nhng thng tin h thng gi n, nhng cnh bo v
ICT24H.NET
Page 1
http://www.facebook.com/SmithNguyenStudio

li xy ra u c lit k trn mt danh sch v bn c th double-click vo bt c s kin g xem thng bo . Qun l cc role trn server, bao gm vic thm v xa role: trong Windows Server 2008 cho php bn ci t 17 role bng cch click vo Roles trn Server Manager s hin ra danh sch cc role c ci t. Bn c th thm role bng cch click vo lin kt Add Roles. Tng t bn c th xa b role bng cch click lin kt Removes Roles. Thm v xa b cc tnh nng: vic thm v xa b cc tnh nng tng t nh role. Chn on cc du hiu bt thng: cc cng c nh Event Viewer, Reliability and Performance Monitor v Device Manger u c th gip bn chn on cc du hiu, trng thi vn hnh kp thi khc phc v x l cc s c trn server. Cu hnh server: c 4 cng c ( Task Scheduler, Windows Firewall, Services v WMI Control). Cu hnh sao lu v lu tr: cc cng c gip bn sao lu v qun l a l Windows Server Backup v Disk Management u nm trn Server Manager. chy Server Manager, bn c th click Start > Administrative Tools > Server Manager. Mt cch khc l click chut phi vo Computer trn thanh menu Start v chn Manage.
2. Windows Server Core

Server Core l mt tnh nng mi trong Windows Server 2008. N cho php bn c th ci t vi mc ch h tr c bit v c th i vi mt s role. V d, nu bn ln k hoch to mt DHCP server trn mt werver v ch c DHCP server, bn c th s dng Server Core. Thay v ci t y mt h iu hnh Windows Server 2008 trn mt my tnh ng vai tr server, Server Core c th ci t thc thi cc file v h tr nhng th vin lin kt ng (DLL) cn thit cho Role m bn la chn(trong trng hp v d ny l DHCP). Mt im khc bit ng k gia Server Core v ci t y h iu hnh l Server Core khng phi l mt giao din ngi dng ha (GUI). Thay vo , tt c cc tng tc vi Server Core c thng qua cc dng lnh. Server Core mang li nhng li ch sau: Gim thiu c phn mm, v th vic s dng dung lng a cng c gim. Ch tn khong 1GB khi ci t. Bi v gim thiu c phn mm nn vic cp nht cng khng nhiu. Gim thiu ti a nhng hnh vi xm nhp vo h thng thng qua cc port c m mc nh. D dng qun l.
Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di y l danh sch cc role c h tr: Active Directory Domain Services (AD DS) Active Directory Lightweight Directory Services (AD LDS) DHCP Server
ICT24H.NET
Page 2

DNS Server File Services Print Services Web Services Hyper-V
Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d nh .NET Framework hoc Internet Explorer.
3. PowerShell
im khc bit gia mt ngi qun tr tt v mt ngi qun tr v i l vic thng hay s dng nhng tp lnh mt cch kho lo v linh hot. PowerShell l mt tp hp lnh. N kt ni nhng dng lnh shell vi mt ngn ng script v thm vo hn 130 cng c dng lnh(c gi l cmdlets). Bn c th s dng PowerShell thng xuyn i vi nhiu s qun l hoc cc cng vic qun tr khc. Hin ti, bn c th s dng PowerShell trong: Exchange Server SQL Server Terminal Services Active Directory Domain Services. Qun tr cc dch v, x l v registry.
Mc nh, Windows PowerShell cha c ci t. Tuy nhin bn c th ci t n mt cch d dng bng cch s dng cng c qun tr Server Manager v chn Features > Add Features
4. Windows Deloyment Services.

Mt trong nhng cng vic tn nhiu thi gian l vic ci t hoc thit lp n tng my tnh trn h thng. ci t h iu hnh n l mt khong 30 pht. Thm thi gian bn ci t cc bn v li, cp nht hoc cc ng dng km theo v thi gian ca bn cho mt h thng c th ln n 3 hoc nhiu gi.Nu bn c 20 my tnh ci t, bn s mt rt nhiu thi gian ci t. Trc y, cng c Remote Installation Services (RIS) ca Microsoft c th t ng thc hin vic ci t trn h thng. ng tic l mt s s c xy ra hn ch vic s dng n i vi nhiu nh qun tr. Windows Deployment Services (WDS) l cng c c thit k li t RIS. Windows Deployment Services c tch hp trong Windows Server 2008 cho php bn ci t h iu hnh t xa cho cc my client m khng cn phi ci t trc tip. WDS cho php bn ci t t xa thng qua Image ly t DVD ci t. Ngoi ra, WDS cn h tr to Image t 1 my tnh ci t sn Windows v y cc ng dng khc. Windows Deployment Serviece s dng nh dng Windows Image (WIM). Mt ci tin c bit vi WIM so vi RIS l WIM c th lm vic tt vi nhiu nn tng phn cng khc nhau. WDS bao gm 3 thnh phn chnh sau: Server : thnh phn server cung cp mt phng thc dnh cho cc my client c th boot,ng thi truy cp mng v np cc h iu hnh vo. N bao gm cng c Preboot Execution Environment (PXE,
ICT24H.NET
Page 3

thng c gi l pixie) v Trivial File Transer Protocol (TFTP). Thnh phn ny bao gm mt th mc c chia s vi Image v nhng tp tin khc c s dng np Image n mt my tnh kt ni t xa. Client: thnh phn ny bao gm Windows Pre-Installation Enviroment (Windows PE) cho php my client boot t giao din ngi dng ha v la chn nhng Image thch hp t server. Management : WDS gm c nhng cng c c s dng qun l server, Image, v cc ti khon my tnh client. V d bn Sysprep c s dng xa thng tin my tnh ( chng hn SIDs) trc khi bt ly Image, v tin ch WIDS Capture c s dng ly Image v lu tr chng vo nh dng WIM. Hnh di l cch thc lm vic ca WDS. WDS server ang lu tr Image. PXE client s boot, sau connect n WDS server. Windows PE s c ti xung cc client. Image ny gm c giao din ngi dng ha c th tng tc vi user hoc t ng x l.
5. Terminal Services.
Terminal Services l mt thnh phn chnh trn Windows Server 2009 cho php user c th truy cp vo server s dng nhng phn mm. Terminal Services gip ngi qun tr trin khai v bo tr h thng phn mm trong doanh nghip mt cch hiu qu. Ngi qun tr c th ci t cc chng trnh phn mm ln Terminal Server m khng cn ci t trn h thng my client, v th vic cp nht v bo tr phn mm tr nn d dng hn. Terminal Services cung cp 2 s khc bit cho ngi qun tr v ngi dng cui :
ICT24H.NET
Page 4

Dnh cho ngi qun tr: cho php qun tr c th kt ni t xa h thng qun tr bng vic s dng Remote Desktop Connection hoc Remote Desktop. Vi Windows Server 2008, Remote Desktop Connection 6.0 c, cung cp cho bn nhng ci tin v bo mt nhng ni chung th chc nng kt ni t xa trong Windows Server 2008 ging nh Windows Server 2003. Dnh cho ngi dng cui: cho php ngi dng cui c th chy cc chng trnh t Terminal Services server. Thay i c bit trong Windows Server 2008 l chc nng cho php cng lc nhiu ngi dng c th chy cc chng trnh t server. Thm vo , ng dng Terminal Services c th vt qua firewall mt cch d dng v cho php ng dng c th truy cp bn ngoi vi kt ni VPN.
6. Network Access Protection

Network Access Protection (NAP) l mt tnh nng mi c th gip bo v h thng mng ca bn t nhng kt ni truy cp t cc client ngoi. Ni mt cch ngn gn hn, NAP gip bn bo v h thng mng t cc client.
Trong mng LAN, bn c th kim sot cc my client bo m chng lun trng thi an ton v vn hnh tt. Bn c th s dng Group Policy bo m vic bo mt v trng thi cp nht cn thit. Nhng phn mm phng chng virus v spyware c th ci t cc client v c cp nht u n. Bn c th chy mt on lnh script bo m cc chnh sch mt khu vc no . Tuy nhin bn khng th kim sot vic truy cp t client n h thng mng ca bn t mt khch sn hoc mt ngi nh. N bao gm c kh nng c th c ca my tnh c virus truy cp n h thng mng ca bn.Gii php c s dng y kim sot truy cp l NAP, y l cng ngh m bn c th s dng n kim tra trng thi ca client. Nu client trng thi tt, NAP s cho php truy cp
ICT24H.NET
Page 5

vo mng. Nu trng thi bt thng, n s cch ly v cho php truy cp n server kim duyt nhng yu cu trc khi truy cp vo h thng mng. Cc chnh sch trng thi c xc nh v thit lp bi bn. V d bn c th chn yu cu tt c cc cp nht c ph chun c ci t trn client. Trong h thng mng, bn s dng ng dng Windows Software Update Services (WSUS) ph chun v ci t cc bn cp nht ln client. V VPN client khng nm trong h thng mng ca bn, do khng th yu cu n cp nht. Client VPN ny s c cch ly v WSUS c s dng kim duyt cc yu cu hp l trc khi cp nht. NAP cung cp b th vin API (Application Programming Interface), cho php cc nh qun tr lp trnh nhm tng tnh bo mt cho h thng ca mnh. Hin ti, NAP h tr trin khai trn nhng loi hnh sau: Dynamic Host Configuration Protocol (DHCP) Ipsec with Health Registration Authority (HRA) IEEE 802.1X (Wired v Wireless) Virtual Private Network (VPN) Terminal Services Gateway (TS Gateway)
7. Read-Only Domain Controllers

Read-Only Domain Controller (RODC) l mt kiu Domain Controller mi trn Windows Server 2008.Vi RODC, doanh nghip c th d dng trin khai cc Domain Controller nhng ni m s bo mt khng c m bo v bo mt. RODC l mt phn d liu ca Active Directory Domain Services.
ICT24H.NET
Page 6

Qu trnh xc thc RODC. V RODC l mt phn d liu ca AD DS nn n lu tr mi i tng, thuc tnh v cc chnh sch ging nh domain controller, tuy nhin mt khu th b ngoi tr. Khi user s dng RODC, RODC s ng b vi domain controller kim tra mt khu. Nu ti khon user ny tn ti, RODC s gi mt khu ca ti khon n domain controller xc thc, sau tr v RODC kt qu. Vi mi ln xc thc s tn thi gian v bng thng, tuy nhin vi chc nng Credential Caching trong RODC gip bn lu li nhng mt khu c chng thc vo c s d liu ca RODC.
8. Cng ngh Failover Clustering.
ICT24H.NET
Page 7

Trc khi tho lun v ci tin mi trong clustering, hy xem hnh trn. Client kt ni n server (c tn l Server1) c cu hnh 2 nt cluster l ServClust1 v SrvClust2. C 2 nt ny u kt ni h thng mng v c 2 u c cha s n a (Quorum Disk). Ch c mt nt c hot ng ti thi gian ny. V d, bn ang chy SQL Server 2008 trn c 2 server cluster ny. SrvClust1 hot ng cn SrvClust2 cha hot ng. Thm ch nu c 2 server cluster ny cng ang chy, ch SrvClust1 p ng c nhng yu cu v hot ng chnh. Cng vic chnh ca SrvClust2 l gim st SrvClust1. Nu SrvClust1 ngng hot ng, SrvClust2 s nhn dng c vn SrvClust1 thiu kh nng hot ng v SrvClust2 s thay th hot ng ca SrvClust1. iu ny s gip h thng vn hot ng bnh thng nh c SrvClust2. Qua v d trn, Clustering l cng ngh cho php s dng hai hay nhiu server kt hp vi nhay to thnh mt cm server tng cng tnh n nh trong vn hnh. Nu server ny ngng hot ng th server khc trong cm s m nhn nhim v m server ngng hot ng ang thc hin nhm mc ch hot ng ca h thng vn bnh thng. Qu trnh chuyn giao ny gi l fail-over. Khng phi tt c cc phin bn no ca Windows Server 2008 cng h tr cng ngh clustering. Nhng phin bn sau h tr: Windows Server 2008 Enterprise Windows Server 2008 Datacenter Windows Server 2008 Itanium
ICT24H.NET
Page 8

Hai phin bn khng h tr cng ngh clustering l Windows Server 2008 Standard v Windows Server 2008 Web. Mt s ci tin m Windows Server 2008 mang n trong clustering: Loi b nhng a khng kh nng hot ng v thay th bng mt kiu mi. Cung cp cng c xc nhn tnh tng thch phn cng h tr cluster trc khi trin khai. Cung cp vic h tr m rng i vi Storage Area Network (SAN). Cung cp nhng cng c qun tr c ci tin gip bn c th thit lp cluster d dng hn.
9. Cng ngh o ha Hyper-V

Microsoft trc y tng cung cp nhng phn mm o ha nh Virtual Server, Virtual PC hay hng Vmware cung cp sn phm Vmware Server, Vmware vSphere4, Vmware Workstation...Cc s n phm ny khng nh c v tr trn th trng trong nhiu nm qua. Hyper-V l cng ngh o ha server th h mi ca Microsoft, s thay i ln nht m Microsoft mang li so vi phin bn Windows Server 2003. Hyper-V hot ng trn nn h iu hnh 64-bit. Vi Hyper-V, ngi s dng c th s hu mt nn tng o ha linh hot, bo mt, ti a hiu sut v tit kim chi ph: Hyper-V c th thch nghi vi doanh nghip ln vi hng nghn my tnh hoc cc doanh nghip nh hay vn phng chi nhnh. Hyper-V h tr b nh o ln n 64GB, a b vi x l. Do d, cc ng dng my ch yu cu cu hnh cao cng hon ton c th trin khai c trn nn tng o ha ny. Kh nng bo mt ging nh cc server vt l. Kt hp cc cng c bo mt Windows Firewall, Network Access Protectiondo tnh bo mt tt nh mi trng tht. Hyper-V gip khai thc ti a hiu sut s dng phn cng server. Bng vic hp nht server, cho php mt server vt l c th ng nhiu vai tr ca nhiu server. T , tit kim c chi ph t cc khong mua server, in, khng gian v bo tr.
ICT24H.NET
Page 9

Hnh trn th hin v Hyper-V. Server vt l ca bn ang chy Windows Server 2008 Enterprise. Bn c th chy thm cc virtual server khc. C th l Windows Server 2008, Novell SUSE Linux Enterprise v Windows Server 2003. Phin bn Linux duy nht h tr Hyper-V l Novell SUSE Linux Enterprise Server Khi trin khai gii php o ha trn Windows Server 2008, lu mt s im sau: Server vt l phi chy phin bn Windows Server 2008 64-bit. (Virtual server c th 32-bit hoc 64-bit). Windows Server 2008 Standard ch h tr 1 virtual server. Windows Server 2008 Enterprise h tr 4 virtual server. Windows Server 2008 Datacenter khng gii hn s virtual server.
10.
Windows Firewall with Advance Security
ICT24H.NET
Page 10

So vi phin bn Windows Server 2003, Windows Firewall trong Windows Server 2008 l m t gii php firewall mi, c tn gi l Windows Firewall with Advance Security, cho php ngi qun tr c th cu hnh a dng v nng cao tng cng tnh bo mt cho h thng.
Windows Firewall with Advance Security c nhng im mi: Kim sot cht ch cc kt ni vo v ra trn h thng (inbound v outbound) IPsec c thay th bng khi nim Connection Security Rule, gip bn c th kim sot v qun l cc chnh sch, ng thi gim st trn firewall. Kt hp vi Active Directory. H tr y IPv6.
CHNG I: CI T, NNG CP V TRIN KHAI WINDOWS SERVER 2008

Nhng qun tr vin h thng gii khng phi l nhng ngi ch lm vic vo bui sng vi tch caf cng nh vi ci bnh quy, sau quyt nh ci t h iu hnh bi v h ch cn c vi gi trc khi ti ba n tra. Qun tr vin h thng gii lm vic vi mt k hoch. H bit rng h chun b ci h iu hnh trc khi server c th b a vo vin bo tng. Chng ny cp n vic ln k hoch trin khai Windows Server 2008. bi hc 1 l vic xem xt a ra quyt nh la chn phin bn Windows Server 2008 thch hp, p ng vai tr cng nh cc tnh nng trin khai chng hn nh BitLocker v Server Core cng nh vic nng cp t phin bn Windows Server 2003. bi hc th 2 l cc thit lp t ng, t vic to cho n ti u ha vic ci
ICT24H.NET
Page 11

t cng nh qu trnh trin khai ng thi nhiu h iu hnh Windows Server 2008 bng cch s dng Windows Deployment Services. Ch trong chng ny: Ln k hoch ci t v nng cp Ln k hoch trin khai t ng trn server.
Nhng bi hc trong chng ny

Bi hc 1: Ln k hoch ci t v nng cp Windows Server 2008. Bi hc 2: Trin khai t ng ha server.
Trc khi bt u
hon tt cc bi hc trong chng ny, bn cn phi p ng nhng iu kiu sau: Mt my tnh vi khong 20GB dung lng trng. 512 MB RAM, tc x l 1 GHz hoc ln hn. Nhng bi thc hnh khng yu cu my tnh ca bn phi kt ni Internet, nhng cn phi c thit lp mt IP. Bn c th s dng phn mm Vmware hoc Virtual PC thc hin vic ci t o. Download phin bn Windows Server 2008 Enterprise Edition t Microsoft Download Center.
Bi hc 1 : Ln k hoch ci t v nng cp Windows Server 2008

Trong bi hc ny bn s c tm hiu cc phin bn Windows Server 2008 v cc role trong . Bn s c nghin cu v Windows Server Core phin bn mi trong sn phm Windows Server 2008. Bn s c hc v cch ci t cng nh nng cp Windows Server 2008. Bn s c khm ph v tnh nng m ha BitLocker v tng bc trin khai n. Sau bi hc, bn s nm c: Ci t hoc nng cp Windows Server 2008 Trin khai BitLocker
Thi lng bi hc: 60 pht
La chn ng phin bn Windows Server 2008

Cc phin bn Windows Server 2008 u khc nhau, mi phin bn c nhng vai tr nht nh. C phin bn thch hp cho vic cu hnh file server cho mt chi nhnh vn phng hoc cng c phin bn khc thch hp cho vic trin khai vn phng chnh vi Microsoft Exchange Server 2007.
ICT24H.NET
Page 12

Cu hnh ti thiu dnh cho Windows Server 2008

Trc khi tm hiu v s khc nhau ca cc phin bn Windows Server 2008, bn cn bit v cu hnh yu cu khi ci t hoc nng cp Windows Server 2008. Nu bn khng s dng Windows Deployment Services hoc boot t Windows Pre-installation Environment (Win PE) t CD-ROM, bn cn phi c a DVD-ROM v dung lng ci t ca Windows Server 2008 xp x Windows Vista. bi hc 2, bn s c ci t Windows Server 2008 m khng cn a DVD-ROM. Bng di y l cu hnh yu cu ti thiu dnh cho Windows Server 2008. Phn cng B vi x l RAM Dung lng trng Yu cu ti thiu 1 Ghz (x86), 1,4 Ghz (x64) 512MB RAM 15GB ngh 2Ghz hoc ln hn 2GB 40GB
Mc d yu cu 15GB, tuy nhin vi phin bn Standard x86 bn ch cn 5,5GB. Vi phin bn Windows Server 2008 Enterprise x64 bn cn khong 11GB dung lng trng. Vic yu cu ti thiu 15GB bi v bn cn phi lu tr nhng swap file cng nh cc log file, ngoi ra dung lng cng c dnh cho vic ci t role khi cn. Ty phn cng ca bn m chn phin bn x86 hoc x64 thch hp. Bn khng th ci t c phin bn x86 v x64 trn phn cng x64. Hoc nu bn ci t Windows Server 2008 trn b xi x l Itanium th bn ch c th la chn phin bn Windows Server 2008 Itanium Edition.
Phin bn Windows Server 2008 Standard

Phin bn Windows Server 2008 Standard c s dng cho cc doanh nghip c quy m va v nh. y l phin bn m bn c th chn trin khai cc role thng thng. im ch trong phin bn ny: Phin bn 32-bit (x86) h tr ti a 4GB RAM. Phin bn 64-bit (x64) h tr ti a 32GB RAM. H tr trin khai Network Load Balancing nhng khng h tr tnh nng failover clustering.
Kh bn ln k hoch trin khai cho cc server, bn c th chn phin bn ny ci t cc role c bn nh DC, File and Print Server, DNS server, DHCP server v cc ng dng khc. Mc d nhng dch v ny cn thit h tng mng doanh nghip ca bn tuy nhin vic trin khai m rng i hi bn nn cn nhc khi la chn phin bn ny. Nu bn ch s dng cho doanh nghip va v nh, khng cn cho vic trin khai failover clustering hoc Active Directory Federation Services th nn la chn phin bn Windows Server 2008 Standard gim thiu chi ph.
Phin bn Windows Server 2008 Enterprise Edition

Windows Server 2008 Enterprise Edition l phin bn c s dng cho doanh nghip ln. Vi phin bn ny, bn c th trin khai thm cc ng dng khc nh SQL Server 2008 Enterprise Edition v Exchange Server 2007. Nhng sn phm ny yu cu RAM v xi x l mnh cng nh c h tr trong phin bn Enterprise ny. Khi ln k hoch trin khai, bn cn xem xt v vai tr, v tr, li ch ca Windows Server 2008 Enterprise so vi phin bn Windows Server 2008 Standard nh:
ICT24H.NET
Page 13

Failover Clustering: failover clustering l cng ngh cho php cc server khc c th duy tr, tip tc cc dch v m server chnh tm ngng v mt s c no . Bn c th trin khai failover clustering trn nhng server trng yu m bo ngun d liu, ti nguyn khng gp ri ro khi b s c. Active Directory Federation Services (ADFS) : ADFS l dch v cho php xc nh cc t chc nhm trong doanh nghip, s dng dnh cho cc i tc cn truy cp vo cc ngun ti nguyn ni b. Phin bn 32-bit (x86) h tr ti a 64GB RAM. Phin bn 64-bit (x64) h tr ti a 2TB RAM.
Khi ln k hoch trin khai,, bn cn xem xt cc role cn thit trin khai trong tng lai m phin bn Standard khng c, bng role s c cung cp cui bi hc.
Phin bn Windows Server 2008 Datacenter Edition

Windows Server 2008 Datacenter Edition l phin bn c s dng trong doanh nghip c quy m rng ln. im chnh gia s khc bit trong phin bn Enterprise v Datacenter l kh nng s dng khng gii hn cc virtual server. Windows Server 2008 Datacenter l s la chn tt nht dnh cho doanh nghip khi mun xy dng m hnh o ha. Phin bn 32-bit (x86) h tr ti a 64GB RAM. Phin bn 64-bit (x64) h tr ti a 2Tb RAM. H tr failover clustering v ADFS Khng gii hn cc virtual machine.
Phin bn Window Web Server 2008

Windows Web Server 2008 c thit k dnh cho cc ng dng chy trn Web server. Phin bn 32-bit (x86) h tr ti a 4GB RAM. Phin bn 64-bit (x64) h tr ti a 32GB RAM.
Bn nn trin khai Windows Web Server 2008 qua cu hnh Server Core gim thiu nhng tn cng xm nhp. Ngoi ra, bn nn trin khai phin bn Windows Web Server 2008 y nu cc ng dng Web ca doanh nghip bn i hi cc tnh nng nh ASP.NET, v nn tng .NET Framework khng hot ng trn Server Core.
Windows Server 2008 Server Core

Windows Server 2008 Server Core l tnh nng mi trong Windows Server 2008. N cho php bn c th ci t vi mc ch h tr c bit vi mt s role. im khc bit gia Server Core v mt phin bn Windows Server 2008 y l giao din. Tt c cc tng tc vi Server Core c thng qua cc dng lnh. Bn c th qun l mt my tnh chy Server Core bng cch remote thng qua Microsoft Management Console (MMC).
ICT24H.NET
Page 14

Giao din Server Core S dng phin bn Server Core cho bn 2 li ch chnh: Gim thiu cc hnh vi tn cng xm nhp vo h thng thng qua cc thnh phn hoc cc port c m mc nh. Gim thiu chi ph phn cng
Bn nn s dng lnh Help xem cc hng dn cng nh cc lnh c bn dnh cho vic qun tr. Mt lnh v d, chng hn bn mun join mt my tnh c tn PC1 chy Server Core vo domain ICT24H vi ti khon admin l admin_ict24h, bn c th s dng dng lnh sau: Netdom join PC1 /domain:ICT24H /userd:admin_ict24h /passwordd:* Mt im ch l Server Core khng h tr tt PowerShell, mc d bn c th chy cc lnh PowerShell trn Server Core remote thng qua WMI. Ngoi ra, bn c th chy cc cng c quan trng trn
ICT24H.NET
Page 15

Server Core chng hn nh regedit v Notepad hoc m cc tnh nng trong Control Panel nh Time and Date hoc International Settings (s dng lnh control timedate.cpl hoc control intl.cpl)
M Regedit v Notepad trn Server Core C 2 lnh khc cng quan trng l oclist.exe v ocsetup.exe. Oclist.exe cung cp mt danh sch tt c cc server role c ci t trn server. Bn c th thm hoc xa nhng tnh nng bng lnh ocsetup.exe. V d, ci t IIS-Webserver role, s dng lnh ocsetup.exe IIS-WebServerRole hoc xa role s dng lnh ocsetup.exe/uninstall IIS-WebServerRole.
ICT24H.NET
Page 16

Xem cc role v tnh nng c trn Server Core Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di y l danh sch cc role c h tr: Active Directory Domain Services (AD DS) Active Directory Lightweight Directory Services (AD LDS) DHCP Server DNS Server File Services Print Services Web Services Hyper-V
Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d nh .NET Framework hoc Internet Explorer.
ICT24H.NET
Page 17

Hi nhanh 1. Phin bn Windows Server 2008 no c th c ci t trn my tnh Core 2 Duo v 4Gb RAM ? 2. Hai li ch chnh ca vic trin khai Server Core l g? Tr li nhanh 1. 32-bit v 64-bit 2. Vn hnh tt hn v gim thiu cc hnh vi xm nhp h thng
Cc role trong Windows Server 2008
ICT24H.NET
Page 18

Server Role Web Services(IIS) Appliaction Server Print Services Hyper-V AD Domain Service AD Lightweight Directory Services AD Rights Management Services AD Certificate Services AD Federation Services DHCP Server DNS Server Fax Server UDDI Services Windows Deployment Services File Services Network Policy and Access Services Terminal Services Web Itanium Standard Partial Partial Partial Partial Enterprise Datacenter
*Partial : mt phn
Ci t Windows Server 2008

Trc khi bt u ci t Windows Server, bn cn phi xem qua nhng vn v cc iu kin v yu cu phn cng.Cho d bn c ci t Windows Server 2008 trn lab hoc mi trng thc t, bn cn m bo cc phn cng chn phi bng mc ti thiu so vi cu hnh ti thiu m Microsoft ngh. Khi bn chn cu hnh cho server, thm ch l cu hnh ti u m Microsoft ngh c th cng cha p ng nhu cu trin khai v tng lai bn cn trin khai, nng cao cc dch khc trn server. V d h thng Windows Server 2008 chy Exchange Server 2007 vi cu hnh Cluster Continous Replication (CCR) s yu cu cu hnh nhiu hn 2GB RAM h thng hot ng n nh hn. Thm vo , SQL Server 2008 chy trn Windows Server 2008 cung cp gii php BI (Business Intelligence) cho 10.000 user cn c yu cu 32GB RAM. V th, bn cn tnh ton trc khi bt u chn cho mnh mt server vi cu hnh p ng c cc nhu cu cn thit. Ch : Windows Server 2008 h tr c 2 cu trc vi x l 32-bit v 64-bit. Tuy nhin, phin bn mi nht l Windows Server 2008 R2, Windows Midmarket Server v Windows Small Business v i nhng tnh nng a dch v, cc phin bn ny ch h tr cu trc vi x l 64-bit. RAM h tr ti a cho h thng 32-bit l 4GB khi chy phin bn Standard Edition v 64GB khi chy phin bn Enterprise v Datacenter. Nu chy h thng 64-bit, b nh RAM c th h tr ln dn 32GB v 2TB RAM cho phin bn Enterprise v Datacenter. Thm vo , Windo ws Server 2008 h tr h thng Itanium, tuy nhin, chip x l Intel Itanium 2 nhn l cn thit. C cc phin bn Windows cho bn la chn, mc d cc phin bn u c nhng tnh nng ging nhau, tuy nhin mt s tnh nng khc ch c nhng phin bn Windows Server 2008 nht nh. Doanh nghip hoc ngi qun tr cn phi hiu khi lng cng vic cn thit chn cho mnh phin bn thch hp. V d, chn phin bn Enterprise Edition vi mc ch s dng cng ngh clustering hoc t ng chng thc vi dch v Microsoft Certificate Services. Hay vi phin bn Web Edition l s cn thit i vi vic gim thiu chi ph v ch trin khai web server v cc ng dng web.
ICT24H.NET
Page 19

Nu bn c mi trng Windows, bn c th ci t mi hoc nng cp trn server . Vic cp nht hay ci t mi u c nhng li ch khc nhau. Ci t mi: li ch chnh ca vic ci t mi li h iu hnh l bn c th bit c server c tht s tt hay khng. Bn c th trnh c nhng vn m bn c th gp phi i vi phin bn trc - c th l cc phn mm c li, thit lp v cu hnh cha chnh xc, hoc nhng ng dng c ci t khng tng thch. Tuy nhin, vic ci t li khin bn s phi cu hnh li ton b. Thm vo , cc ng dng cn thit k tha trn server c s cn phi c ci t li sau khi hon tt ci t h iu hnh mi. V th, trc khi ci t mi h iu hnh bn cn ghi nh li tt c nhng thng tin cu hnh v sao lu ton b d liu quan trng. Nng cp: khi nng cp, cc file h thng s b thay th nhng s gi li cc ti khon user, thit lp, nhm v quyn hn. trng hp ny, bn khng cn phi ci t li cc ng dng hoc phc hi d liu. Trc khi c sa la chn nng cp thay v ci t mi, bn nn kim tra li s tng thch ca cc ng dng bi v chng hot ng trn nhng phin bn Windows trc khng c ngha l chng vn hnh tt trn Windows Server 2008.
Nng cp ln Windows Server 2008

nng cp ln phin bn Windows Server 2008, bn cn phi chy cc h iu hnh cp server. Bn khng th nng cp cc phin bn Windows dnh cho ngi dng nh Windows XP hoc Windows Vista ln Windows Server 2008. nng cp ln Windows Server 2008, h thng ca bn phi chy Windows Server 2003. Vic nng cp t Windows NT 4.0 v Windows 2000 Server khng c h tr. Nhng phin bn trc Microsoft Windows Server 2003 R2 Standard, Enterprise hoc Datacenter Edition Microsoft Windows Server 2003 Service Pack 1(SP1) Standard, Enterprise hoc Datacenter Edition Microsoft Windows Server 2003 Service Pack 2 (SP2) Standard, Enterprise hoc Datacenter Edition Windows NT 4.0 Windows 2000 Server Windows XP Windows Vista Windows 7 Nng cp ln Windows Server 2008 H tr y H tr y H tr y Khng h tr Khng h tr Khng h tr Khng h tr Khng h tr
Vic nng cp t nhng phin bn Windows Server 2003 ln phin bn Windows Server 2008 Server Core khng c h tr. Vic nng cp ch thc hin c nhng phin bn ging nhau. V d, bn khng th nng cp phin bn Windows Server 2003 Standard ln Windows Server 2008 Enterprise. Nu phin bn bn ang s dng l Windows NT 4.0 hoc Windows 2000 Server, bn phi nng cp ln Windows Server 2003 sau mi nng cp c ln Windows Server 2008.
ICT24H.NET
Page 20

Khi nng cp ln phin bn Windows Server 2008, mi cu hnh thit lp, file v cc chng trnh u c gi li. Tuy nhin, c mt s cng vic quan trng v cn thit m bn cn phi lm trc khi tin hnh nng cp. Khi nng cp h thng ln Windows Server 2008, bn cn ti thiu 482MB dung lng trng trong phn dnh ring (partition) cho h thng, nu khng vic nng cp s tm dng. Trc y, bn c th kim tnh tng thch ca h thng trc khi nng cp. Gi y bn c th lm iu tt hn vi cng c Microsoft Application Compatibility Toolkit kim tra tnh tng thch ca Windows Server 2008 trc khi ci t. Bn c th download cng c ny ti a ch website ca Microsoft http://technet.microsoft.com/en-us/windowsvista/aa905066.aspx Bn cng nn kim tra cc thnh phn phn cng ca server trc khi nng cp. Cng c gip bn lm vic ny l Windows Memory Diagnostics. Xem chi tit v download ti a ch websiteca Microsoft http://go.microsoft.com/fwlink/?LinkID=50362 Vic kim tra driver cng l iu cn thit. Khi nng cp ln Windows Server 2008, thng bo l i s hin th khi driver khng tng thch c pht hin, driver s khng th np vo h thng khi nng cp.Nhng nguyn tc sau nn p dng x l trng hp trn: 1) 2) 3) 4) 5) Boot li server v nhn phm F8. Chn Advance Boot Options. Chn Disable Driver Signature Enforcement. Boot t Windows. Xa cc driver khng tng thch.
iu quan trng nht m bn cn lm l backup h thng trc khi nng cp : backup Active Directory, backup d liu. bi hc sau bn s c tm hiu v vn ny.
Ln k hoch trin khai BitLocker

Windows BitLocker and Drive Encryption (BitLocker) l tnh nng xut hin ln u tin ti phin bn Windows Vista Enterprise v Windows Vista Ultimate Edition v c t i cc phin bn Windows Server 2008. S dng BitLocker vi 2 mc ch: bo v d liu server thng qua vic m ha cc cng cha d liu v kim tra c ch hot ng m bo vic khi ng c n nh. Vic m ha ton h iu hnh v cc cng d liu gip bn c th bo v c cc d liu, ng dng cha trong h thng. Vic h tr kim tra tnh ton vn, BitLocker yu cu my tnh cn phi c chip h tr thch hp Trusted Platform Module (TPM) 1.2 hoc chun mi hn. My tnh cn phi c mt BIOS h tr cho chun TPM. Khi BitLocker c vn hnh, tt c cc cng c bo v bi BitLocker s b kha li v khng th m kha nu bn khng c c key. Ngoi ra, cc thnh phn trong BIOS, Master Boot Record, Boot Sector, Boot Manager v Windows Loader cng c bo v. V mt l do no , bn cn phi xa BitLocker ra khi my tnh. V d, mi trng trn my tnh ca bn c bo mt kh cao t BitLocker gp phi mt s vn v kh nng vn hnh. V th bn phi xa hoc v hiu ha n c th vn hnh, khi ng cc file h thng cng nh BIOS ca my tnh. Hnh di y hin th 2 s la chn xa BitLocker t mt my tnh: v hiu ha BitLocker hoc b m ha cng.
ICT24H.NET
Page 21

Trin khai chi tit BitLocker s c cp cc bi hc sau.
Thc hnh: Ci t Windows Server 2008 v trin khai BitLocker

Bi thc hnh 1: ci t Windows Server 2008 Enterprise Edition
bi thc hnh ny, bn s ci t Windows Server 2008 Enterprise Edition trn my tnh ho c my o. Sau , bn s thc hin bi thc hnh trin khai v cu hnh tnh nng BitLocker trn my tnh.
ICT24H.NET
Page 22

Language to install: ngn ng bn mun hin th. Time and currency format: nh dng thi gian v tin t. Keyboart or input method: nh dng bn phm v phng thc nhp ch. Sau khi la chn cc thit lp trn xong, click Next tip tc ci t.
ICT24H.NET
Page 23

Bn c th click dng What to know before installing Windows xem nhng iu cn bit trc khi ci t Windows Server 2008.Click Install now bt u ci t.
ICT24H.NET
Page 24

Sau khi chn Install now s hin th khung cho bn 2 s la chn : Go online to get the latest updates for installation : cp nht phin bn mi nht qua Internet. y l s la chn cn thit v bn s c cp nht y cc bn v bo mt, bn v li v cc ng dng tng thch cu hnh. Nu c s la chn ny, my tnh ca bn phi c kt ni Internet. Do not get the latest updates for installation : vi s la chn ny, bn s khng cp nht phin bn mi nht, iu ny khin my tnh bn c th c nhng l hng v bo mt. Tuy nhin, vi s la chn ny bn c th ty chn c nhng thnh phn cp nht sau khi ci t xong Windows Server 2008.
Nu bn mun nhn c s tr gip t Microsoft ci t c tt hn, hy nh du chn I want to help make Windows installition better.
ICT24H.NET
Page 25

in key bn quyn (License key) vo trng Product key (dashes will be added automatically) hoc bn c th nh du chn vo Automatically activate Windows when Im online t ng kch hot Windows khi trng thi trc tuyn.Click Next tip tc ci t.
ICT24H.NET
Page 26

Nu bn cha nhp key, sau khi click Next bn s nhn c thng bo v vn nhp key. Click No tip tc thc hin vic ci t, sau khi ci t xong bn c th thc hin vic nhp key.
ICT24H.NET
Page 27

La chn phin bn Windows Server thch hp, y chng ta s la chn phin bn Windows Server 2008 Enterprise. Ty thuc vo d liu ci t ca bn l g m s hin th s khc nhau. Nu bn a DVD Windows Server 2008 Enterprise vo th khung hin th cc phin bn ch c Windows Server 2008 Enterprise dnh cho 32-bit v 64-bit. i vi d liu cha ton b cc phin bn Windows Server 2008 s hin th tt c cc phin bn Windows Server 2008 t Web Edition n Datacenter Edition. Click Next tip tc.
ICT24H.NET
Page 28

Ti bng MICROSOFT PRE-RELEASE SOFTWARE LICENSE TERMS l nhng iu khon s dng sn phm ca Microsoft. nh du chn vo I accept the license terms chp nhn nhng iu khon v click Next tip tc.
ICT24H.NET
Page 29

Ti bng trn cho bn 2 s la chn l nng cp hoc ty chn ci t, c th l ci t mi hoc ci t chp ln h iu hnh c. Bn c th chn Custom (advaneced) tin hnh ci t ty chn. Nu bn ang chy phin bn Windows Server 2008 th chc nng nng cp s b v hiu ha.
ICT24H.NET
Page 30

Tip theo chn a cn ci t Windows Server 2008 Enterprise, nu bn tng ci t Windows XP, Windows Vista hay Windows 7 th bc ny bn s c th d dng thao tc vi vic chn hoc format a. Vi nhng phin bn Windows trc, bn c 2 s la chn nh dng l NTFS hoc FAT/FAT32. Tuy nhin, vi Windows Server 2008, FAT v FAT32 khng cn c h tr na, ch h tr nh dng NTFS vi mc ch tng tnh bo mt Tip tc click Next sau khi chn a ci t.
ICT24H.NET
Page 31

i cho n khi hon tt ci t Windows Server 2008. Sau khi h thng hon tt ci t s t ng ng nhp vi ti khon Administrator, tuy nhin mt khu ang trng thi trng (blank) v th bn cn phi thit lp mt khu ln ng nhp u tin.
Click OK tin hnh thay i mt khu.
ICT24H.NET
Page 32

Nhp mt khu v New mt khu v xc nhn li mt khu vo Confirm mt khu. Mc nh, tng tnh bo mt, mt khu Windows Server 2008 c thit lp ch phc to (Complexity). Mt khu phi tha mn nhng iu kin sau: di t 8 k t tr ln. Cha cc k t thng hoc k t hoa t a-z; A-Z Cha cc k t s 0-9 Cha mt hoc nhiu k t c bit !@#$%^&*()_+....
V d : mt khu hp l : pass@word1 . Mt khu khng hp l: password1
Bi thc hnh 2: Cu hnh BitLocker m ha cng

Trong bi thc hnh ny, bn s c cu hnh BitLocker m ha ton b cng. Bi thc hnh ny khng th hon thnh khi s dng my o bi v BitLocker khng h tr my o. Bi thc hnh ny gi nh rng my tnh khng c TPM 1.2 hoc mi hn. Bao gm vic lu tr starup key trn cc thit b TMP, mt sratup key trn thit b USB. Sau khi cu hnh BitLocker, bn s c thc hnh xa b n ra khi my tnh. hon thnh bi thc hnh ny, lm theo tng bc sau:
ICT24H.NET
Page 33

1. 2. 3. 4. ng nhp vo my tnh, s dng ti khon Administrator. T menu Administrative Tools, click Server Manager. R-Click vo Features v chn Add Features. Trn trang Select Features, chn tnh nng BitLocker Drive Encryption. Click Next sau click Install.
5. Click Close. Khi hin th thng bo Do you want to restart now, click Yes. My tnh s khi ng li hon tt vic ci t tnh nng BitLocker. 6. Sau khi my tnh khi ng, ng nhp ti khon Administrator vi mt khu l P@ssw0rd.Ca s Resume Configuration Wizard s t ng hin th sau khi ng nhp. Click Close hon thnh ci t. 7. Click Start > Run. Nhp gpedit.mcs v click OK. 8. Trong ca s Local Group Policy Editor, click Local Computer Policy > Administrative Templates > Windows Components > BitLocker Drive Encryption Node. 9. M Control Panel Setup: kch hot chnh sch Advance Statup Options, chn Enabled, chn Allow BitLocker Without a Compatible TPM, click OK v ng ca s Local Group Policy Editor. 10. M ca s lnh v g gpupdate /force p dng chnh sch. 11. Xc nhn USB kt ni vi my tnh. 12. M Control Panel > BitLocker Drive Encryption. Click Turn On BitLocker di C:\
ICT24H.NET
Page 34

13. Hin th cnh bo, click Continue with BitLocker Drive Encryption
14. Trn trang Set BitLocker startup freferences, click Require startup USB ket at every startup. 15. Trn trang Save your startup key, chn USB v click Save. 16. Trn trang Save the recovery password, click Save the password on a USB drive v chn USB cn lu li startup key, sau click Save.
ICT24H.NET
Page 35

17. Mt khu c sao lu ln 1, click Next. 18. Trn trang Encrypt the volume, nh du chn Run BitLocker system check v click Continue. Sau o click Restart Now.
ICT24H.NET
Page 36

19. ng nhp bng ti khon Administrator v mt khu P@ssw0rd. Sau khi ng nhp bn s nhn c thng bo my tnh khng h tr BitLocker hoc cng c m ha. Nu my tnh bn khng h tr BitLocker, bn khng th hon thnh bi thc hnh ny. 20. Sau qu trnh m ha cng hon tt, m BitLocker Drive Encryption Control Panel v xc nhn n c kch hot. Nu n c kch hot, bn c th nhn thy c cc ty chn nh Turn Off BitLocker v Manage BitLocker Keys.
ICT24H.NET
Page 37

21. Click Turn Off BitLocker > Decrypt the drive. n bc 19 l bn hon tt bi thc hnh, vi bc 20, 21 hng dn bn tt BitLocker
Tng quan bi hc
Tm hiu cc phin bn Windows Server 2008 nh Standard, Enterprise, Datacenter, Web Server v Itanium. Tm hiu Server Core v trin khai Server Core gim thiu cc hnh vi tn cng xm nhp cng nh chi ph phn cng. Nng cp t phin bn Windows Server 2003 ln Windows Server 2008. Tm hiu c bn v BitLocker.
Trc nghim
1. Cng ty ca bn c mt my tnh chy phin bn Windows Server 2003 R2 Standard Edition lm intranet server. Bn c th nng cp ln phin bn no trong cc phin bn di y (Chn 2 p n) A. Windows Server 2008 Datacenter edition B. Windows Web Server 2008
ICT24H.NET
Page 38

C. Windows Server 2008 Enterprise Edition D. Windows Server 2008 Standard Edition E. Windows Server 2008 Standard Edition (Server Core) 2. Cng ty ca bn c mt my tnh vi cu hnh Core 2 Duo v chy phin bn Windows Server 2003 R2 Standard Edition 32-bit. Phin bn no sau y c th nng cp ln 2008 c? A. Phin bn 32-bit Windows Server 2008 Standard Edition. B. Phin bn 64-bit Windows Server 2008 Standard Edition. C. Phin bn 32-bit Windows Server 2008 Datacenter Edition. D. Phin bn 64-bit Windows Server 2008 Enterprise Edition. 3. Bn va c cp trn ngh phi m ha cc cng trong my tnh chy Windows Server 2008 ng vai tr lm File server v phi s dng BitLocker. File server ny c 2 cng. cng th nht l mt volume c lp cha h iu hnh. cng th 2 l mt volume c lp cha cc file c chia s. Bo mch ca my tnh c kch hot chip TPM 1.2 v mt TCG ph hp vi BIOS. Bc no sau y m bn cn cho php BitLocker m ha volume cha h iu hnh v volume ch file chia s? A. Cu hnh group policy thch hp. B. nh li cc partition cha h iu hnh v ci t li Windows Server 2008. C. Tt TPM chip. D. Nng cp TPM chip. 4. Bn ang cn x l cu hnh BitLocker trn mt file server cho mt chi nhnh vn phng. cng ca server ny c phn chia t h thng v ring bit vi cha h iu hnh. My tnh khng c TPM chip, v th BitLocker c vn hnh bng cch s dng USB startup key.
Sau khi ci t tnh nng BitLocker, bn m BitLocker Control Panel v thy hin th nh hnh trn. iu ny chng t BitLocker cha c bt. Bn cn lm g bt BitLocker ln:
ICT24H.NET
Page 39

A. a USB vo my tnh. B. Nng cp BIOS ca my tnh. C. Cu hnh Group Policy. D. Ci t tnh nng BitLocker. 5. Phin bn Windows Server 2008 no cn c s dng nu bn mun trin khai Exchange Server 2007, yu cu c tnh nng failover clustering? A. Windows Web Server 2008 (x64) B. Windows Server 2008 Standard Edition (x64) C. Windows Server 2008 Enterprise Edition (x64) D. Windows Server 2008 Standard Edition (x86)
Bi hc 2: T ng ha trin khai trn server.

L mt qun tr vin h thng c kinh nghim, bn cn phi xem vic trin khai h thng nh mt ngh thut. Khng ch ngi mt ch v click chut v cc hp thoi, bn c th vn hnh h thng bng cc cng c t ng gip cho i mt ca bn c ngh ngi. Trong bi hc ny, bn s c tm hiu v nhng cng c dng to ra cc file XML dnh cho vic ci t Windows Server 2008 v cch ci t cng nh cu hnh Windows Deployment Service mt dch v cho php bn c th trin khai ci t h iu hnh ln cc client bng image thng qua mng. Sau bi hc ny, bn c th: To v s dng file XML ci t Windows Server 2008. Ln lch trin khai Windows Server 2008 s dng cc h iu hnh v Windows Deployment Service.
Thi lng cho bi hc: 40 pht.
Tm hiu Windows Server 2008 Answer File

Mt answer file cho php bn c th nhng thit lp cc ty chn c th chng hn nh phn chia cng, xc nh ng dn ca image ci t Windows Server 2008 v key sn phm. Windows Server 2008 answer file thng c gi l autounattended.xml. y l tn ca mt file c t ng x l trong sut qu trnh ci t m khng cn gim st. Khng ging vi cc phin bn Windows Server trc, Windows Server 2008 answer file s dng nh dng XML. Cc qun tr vin thng hay to file ny bng cng c Windows System Image Manager (Windows SIM). Cng c Windows SIM gm c c cng c Windows Automated Installation Kit (Windows AIK). Mc d bn c th to mt answer file bng cng c lp trnh vi nhng c php XML phc tp tuy nhin vic s dng Windows AIK gip bn c th tit kim thi gian. Mt li ch khc ca cng c Windows AIK cho php bn c th xc thc c answer file c tht s a ra nhng kt qu mong mun. to answer file bng cng c Windows System Image Manage, thc hin nhng bc sau: 1. M Windows System Image Manager. ng dng ny gm c c cng c Windows Automated Installation Kit. Bn c th download Windows AIK ti a ch http://go.microsoft.com/fwlink/?LinkId79385
ICT24H.NET
Page 40

2. Copy file \Sources\install.wim t d liu ci t Windows Server 2008 vo m t th mc tm thi no trn my tnh c ci t Windows AIK. 3. Click File > Select Windows Image. Chn file install.wim. File ny bao gm tt c phin bn Windows Server 2008. 4. Bn c th chn mt image trong Windows Image. Chn Server Enterprise v click OK. 5. Khi hin th thng bo t mt catalog file, click Yes. Hp thoi User Account Control hin th, click Continue. Catalog file s c to. 6. T menu File, chn New Answer File. 7. Chn thnh phn thch hp trong Windows Image, bn c th cu hnh cho thnh phn . Hnh di hin th bng cu hnh thit lp cho php my tnh c ci t t ng v join vo domain contoso.internal.
To file autounattended.xml trong Windows System Image Manager 8. Khi answer file c lu li, n s t ng xc thc image h iu hnh trc khi load ln. Thng thng, vic ci t t ng c s dng trong a mm. Mt s server mi hin nay khng cn a mm ny na, v th Windows Server 2008 ci t bng mt file, thng thng s t ng kim tra trong tt c cc volume trn server, file ny c gi l autounattended.xml. S t ng ny cng c kim tra cc thit b USB. trng hp khc ca vic ci t s dng cc file chia s trong mng, n cn c boot t Windows PE, kt ni vo mng chia s sau s dng lnh setup.exe /unatten:x:\autonattended.xml ( vi x:\ l ng dn cha file autonattended.xml). Hi nhanh 1. Cng c no cho php bn to mt unattended XML answer file? 2. Khi bn ci t Windows Server 2008 trn my tnh khng c a mm, lm th no bn c th
ICT24H.NET
Page 41

m bo c file autounattended.xml c nhn din? Tr li nhanh 1. Window System Image Manager t Windows AIK. 2. Sao chp file autounattended.xml ln USB kt ni trn server.
Windows Deployment Service

Windows Deployment Service l mt role trong Windows Server 2008 cho php bn trin khai cng vic ci t h iu hnh t xa trn client m khng cn phi ci t trc tip. Bn cng c th trin khai WDS vi cc phin bn Microsoft trc , nhng bi hc ny tp trung vo vic s dng cng ngh ny trn Windows Server 2008 WDS yu cu client cn phi c card mng tng thch PXE. Nu client khng c h tr, bn cn phi s dng phng php khc chng hn l ci t thng qua mng vi Windows PE remote. Nu client c chng thc, client s t ng bt u ci dt. Nu autounattended.xml answer file khng c ci t trn server c role WDS, vic ci t ny buc phi c thc hin bi qun tr vin. Mt im khc bit gia vic ci t da trn WDS v ci t bnh thng l gia vic ci t thng qua mng v ci t t ngun d liu trn DVD-ROM. Windows Deployment Service c th c ci t trn Windows Server 2008 vi cc iu kin sau y: My tnh cn ci t WDS phi thuc Active Directory domain. Cn mt DHCP server trong mng. Image h iu hnh phi c lu tr trong paritition nh dng NTFS.
Bn khng th trin khai WDS trn my tnh chy phin bn Windows Server Core. Sau khi ci t WDS, bn cn cu hnh n trc khi cho n hot ng. Bn c th s dng cng c Windows Deployment Services Configuration Wizard hoc cng c WDSUtil.exe. Nu WDS khng thuc DHCP server, bn cn cu hnh n lng nghe mt port no khc port 67. Nu khng, WDS v DHCP s b xung t.
ICT24H.NET
Page 42

tab Client, cho php bn c th thip lp t ng ci t vi cc cu trc c th nh x86, x64 hoc ia64.
ICT24H.NET
Page 43

Mt s mi trng mng c cc dch v chng hn truyn thng thoi hoc cc on ghi hnh, s dng cc a ch IP cp pht ra cc phm v. Bn c th s dng tab Network Settings cu hnh cp pht IP s dng WDS v UDP port. Bn c th gii hn s bng thng s dng WDS trong mc Network Profile.
ICT24H.NET
Page 44

S dng Multicast, Schedule v Automatic Deployment

Multicast cho php doanh nghip s dng bng thng hiu qu hn. V d bn trin khai 20 my tnh Windows Server 2008, bn c th tit kim c lng bng thng khi ci t mt image thng qua mng (khong 1,5GB d liu) so vi vic truyn cho 20 my tnh (khong 60GB d liu). Ngoi ra bn cng c th cu hnh s dng mt s lng bng thng nht nh. Trin khai multicast trong mi trng mng khi router h tr multicast. Bn cng c th ln lch trin khai. V d bn c th cu hnh trin khai trong gi cao im khi m vic truyn ti d liu t mc cao v c cp nht hng ngy. Ngoi ra bn c th thit lp thi gian cho s lng my c th nhn c image. Hnh di l s hin th ca vic cho php multicast lc 3h sng nu c 10 my client nhn image.
ICT24H.NET
Page 45

Windows Deployment Services Images

Windows Deployment Services s dng 2 hnh thc : ci t image v boot image. Vi hnh thc ci t image bn c th trin khai trn Windows Server 2008 hoc Windows Vista. Ci t image mc nh trong th mc \Source trn Windows Vista v Windows Server 2008 trong DVD. N u bn s dng WDS trin khai Windows Server 2008 n cc my tnh c cu trc vi x l khc nhau, bn cn thm cc image ring bit cho tng cu trc vi x l. Nhng cu trc dnh ring cho cc bn image ny bn c th tm thy trong cc ngun d liu ci t. Chng hn Itanium image c cha trong th mc ci t ca Itanium. Mc d bn c th t to mt image ty nhng bn ch c th c mt image cho mi cu trc vi x l. V d trin khai Windows Server 2008 Enterprise Edition x64 cho m t my tnh vi 1 vi x l x64. bi thc hnh cui bi hc, bn s c thc hnh ci t image trin khai WDS. Boot image c s dng boot cho client trong qu trnh ci t h iu hnh. Khi my tnh boot qua mng, mt menu s hin th cc image c th trin khai ln my tnh trn WDS server. File boot.wim trong Windows Server 2008 cho php bn c th trin khai theo cc s la chn. C 2 hnh thc boot image c bn. Hnh thc u tin l capture image, cho pho s dng cng c bt li image. Hnh thc th 2 l tm image. Hnh thc ny c s dng khi my tnh khng c PXE hoc mng khng cho php trin khai PXE. NHng image ny c ghi trn CD, DVD hoc USB v c s dng boot.
WDS v vn kch hot sn phm

Mc d vic kch hot sn phm khng cn thit trong sut qu trnh ci t, tuy nhin qun tr vin nn tm hiu v vic s dng WDS t ng kch hot sn phm vi volume activation. Volume activation cho
ICT24H.NET
Page 46

php bn c th kch hot s lng ln sn phm trin khai trn cc server. Volume activation cung cp cho bn 2 hnh thc key v 3 phng php kch hot. Hai hnh thc key l Multiple Activation Key (MAK) v Key Management Services (KMS). Multiple Activation Key cho php kch hot mt s lng my tnh nht nh. Mi ln kch hot thnh cng coi nh bn s dng ht ln kch hot . V d mt MAK c 100 ln kch hot s kch hot c cho 100 my tnh. MAK s dng phng thc MAK Proxy Activation v MAK Independent Activation kch hot. MAK Proxy Activation tp trung ha vic kch hot bng cch request ln server kch hot sn phm ca Microsoft. MAK Independent Activation yu cu mi my tnh kch hot ring bng cch request ln server kch hot sn phm ca Microsoft. Key Management Service cho php nhng my tnh c kch hot trong mt mi trng m khng cn phi kt ni n Microsoft. Nhng KMS ket cho php dch v KMS trn server v cc my tnh kt ni vi nhau thc hin vic kch hot. Cc doanh nghip s dng KMS nn c 2 server KMS trong 1 server ng vai tr backup. KMS yu cu phi c ti thiu 25 my tnh kt ni trc khi kch hot, v vic kch hot phi c thay i bng cch kt ni li n server KMS sau 180 ngy. Bn s dng kt hp KMS v MAK. Bn nn trin khai MAK nu s lng my tnh khng th kt ni mng sau hn 180 ngy. Nu s lng my tnh ln hn 25 v khng th kt ni mng, bn nn s dng hnh thc KMS. Nu s lng my tnh nh hn 25, bn cn s dng MAK v kch hot thng qua in thoi.
Thc hnh : Ci t v cu hnh Windows Deployment Services

Trong bi thc hnh ny bn s c ci t v cu hnh Windows Deployment Services, sau ci t Windows Server 2008 bng image, cu hnh multicast trin khai cho cc image ny n cc my client c cu hnh PXE. Bi thc hnh 1: Chun b cho vic ci t Windows Deployment Services Trong bi thc hnh ny bn s c hng dn chun b cho vic ci t WDS, bao gm c vic ci t dch v DHCP v to ti khon qun tr nhng gii hn. y l ti khon khng thuc nhm Schema Admin hoc Enterprise Admin. hon thnh bi thc hnh ny, thc hin theo cc bc sau: 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. ng nhp vo DC Glasgow, s dng ti khon Administrator. Click Administrative Tools > Active Directory Users and Computers. Ti Users, to mt ti khon mi c tn Kim_Akers vi mt khu l P@ssw0rd. a ti khon Kim Akets vo nhm Domain Admins. Bn khng nn a ti khon ny vo cc nhm qun tr khc. ng xut ra khi DC Glasgow v ng nhp tr li bng ti khon Kim_Akers. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu Adminitrative Tools. R-lick vo Role v click Add Roles. Trn trang Before you begin, click Next Trn trang Select one server role, chn DHCP Server v click Next. Ti trang Introduction to DHCP Server, click Next.
ICT24H.NET
Page 47

11. Ti trang Network Connection Bindings, chp nhn gi tr 10.0.0.11 v click Next. 12. Xc nhn a ch IP ca server ti trang Specify IPv4 DNS Server Settings
13. Trn trang IPv4 WINS Settings, mc nh v click Next. 14. Trn trang DHCP Copes, click Add. 15. Ti hp thoi Add Scope, nhp cc gi tr a ch IP sau click OK v click Next.
ICT24H.NET
Page 48

16. Xem li cc thng s mc nh ti DHCPv6 Stateless Mode, sau click Next. 17. Xem li cc thng s mc nh ti DHCP IPv6 DNS Server, sau click Next. 18. Xc nhn ti khon s dng ti Use Current Credentials, chn User Name v chn ti khon CONTOSO\kim_akers. Click Next. Ti trang Confirmation, click Install.] 19. Khi qu trnh ci t dch v DHCP Server hon tt, click Close. 20. ng xut ra khi DC. Bi thc hnh 2 : Ci t role Windows Deployment Services v thm Image File. Trong bi thc hnh ny bn s c ci t role WDS v thm image t source ci t Windows Server 2008. Bn phi m bo rng source ci t Windows Server 2008 phi nm trong DVD-ROM trn my tnh ca bn. 1. ng nhp vo DC Glasgow bng ti khon Kim_Akers. 2. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu Adminitrative Tools. 3. R-click vo Roles v chn Add Roles. 4. Ti trang Before you begin, click Next. 5. Trn trang Select server roles, nh du chn Windows Deployment Services v click Next. 6. Xem li cc ch mc Things to note ti trang Overview of Windows Deployment v click Next.
ICT24H.NET
Page 49

7. Trn trang Select role services, m bo bn chn c Deployment Server v Transport Server. Click Next sau click Install. i cho qu trnh ci t role hon tt, click Close. 8. Ti menu Administrative Tools, click Windows Deployment Services. Ti hp thoi User Account Control, click Continue. 9. Ti giao din Windows Deployment Services, r-click vo Servers, sau click Add Server. 10. Ti hp thoi Add Server, m bo rng bn nh du chn vo Local Computer, sau click OK. 11. R-click vo server Glasgow.contoso.internal v click Configure Server. Bt u vo trang Windows Deployment Services Configuration Wizard. Click Next. 12. ng dn mc nh ca th mc Remote installation folder location l C:\RemoteInstall v click Next. 13. Ti System Volume Warning, ch th mc remote trn volume phi khc vi volume cha h thng. 14. m bo rng bn nh du chn Do not listen on port 67 v Configure DHCP option 60 to PXEClient sau click Next.
ICT24H.NET
Page 50

15. Trn trang PXE server initial settings, chn Respond only to known client computers v click Finish. 16. Trn trang Configuration Complete, nh du chn Add images to the Windows Deployment Server now v click Finish. 17. Ti hp thoi Windows image files location, click Browse v chn ng dn ti th mc Source trong DVD, click OK sau click Next. 18. Trn trang Image group, nh du chn vo Create a new image group v t tn group l ImageGroup1. Click Next. 19. Ti hp thoi Review settings, xc nhn li s lng image boot v s image ci t sau click Next v i image c chuyn t DVD sang th mc C:\RemoteInstall.
ICT24H.NET
Page 51

20. Khi image c di chuyn xong, click Finish. 21. Ti giao din Windows Deployment Services, r-lick vo Multicast Transmission v chn Create Multicast Transmission. 22. Trn trang Transmission Name, nhp TestAlpha v click Next. 23. Trn trang Select image, nh du chn ImageGroup1 v click Next. 24. Trn trang Multicast Type, nh du chn vo Scheduled-Cast v Select the start automatically when the number of clients ready to receive this image is . Thit lp gi tr l 10. Click Next sau click Finish.
ICT24H.NET
Page 52

25. ng Windows Deployments Services v ng xut
Tng quan bi hc
Answer file cho php cc qun tr vin c th t ng ci t h iu hnh. Answer file, in hnh l file autounattend.xml, c to bng Windows System Image Manager (Windows SIM) 1 thnh phn ca Windows Automated Installation Kit (Windows AIK). Cng c Windows AIK bn c th download trn website ca Microsoft. Bn c th lu tr answer file ti USB. Ngoi ra chng cn c tm thy mng chia s v lm vic vi Windows PE. Bn c th s dng Windows Deployment Services (WDS) trin khai ci t h iu hnh t cc client c PXE bng cch s dng c ch multicast. Vi trin khai ny gip bn gim thiu c bng thng s dng. Bn c th thit lp thi gian thc hin vic multicast khi s lng client kt ni n WDS server. Ngoi ra bn c th to mt Auto-Cast t ng bt u. Nu WDS server c c dch v DHCP trn , bn cn cu hnh WDS lng nghe mt port khc port 67 cng nh cu hinh DHCP option tag 60 cho tt c cc scope. Volume activation cho php s dng 2 hnh thc kch hot. Multiple Activation Key (MAK) l mt key m bn c th s dng kch hot ng thi nhiu my tnh. Vi hnh thc th 2 l Key Management Service (KMS) yu cu ti thiu 25 my tnh kt ni n KMS server v trong vng 180 ngy. KSM l s la chn thch hp nht khi mi trng mng ca bn khng kt ni Internet.
ICT24H.NET
Page 53

Trc nghim
1. Bn va mi ci t Windows Server 2008 trn my tnh v c d nh s trin Windows Deployment Services (WDS). Yu cu no sau y cn phi c trc khi ci t WDS? (chn 3 p n). A. My tnh ca bn phi thuc Active Directory domain. B. DHCP server phi c chng thc trong mi trng mng. C. DNS sever phi c trong mi trng mng. D. WDS phi c ci t trn my tnh Windows Server 2008. 2. Mi trng no cho php bn bt u vi vic ci t t ng? A. Windows PE 2.0 B. Windows NT Boot Disk C. MS DOS Boot Disk D. Windows Server 2008 Installation Media. 3. Bn va mi ci t WDS trn my tnh ng vai tr l DC, DHCP server v DNS server. Khi bn khi ng server vi card mng PXE, bn khng th kt ni n PXE trn WDS server. Bn nn lm g gii quyt vn trn? A. Cu hnh DHCP trong Windows Deployment Services server. B. Cu hnh DHCP trong giao din DHCP server. C. Cu hnh DNS trong giao din DNS server. D. Cu hnh my client trn Windows Deployment Services server. 4. Bn va cu hnh multicast trn WDS bt u lc 7h ti th 6 cho 10 client nhn image. WDS server t phng server tng di, 10 my tnh m bn d nh s ci t Windows Server 2008 phng t chc, trn tng 4. Phng server c subnet ring. DNS v DHCP thu c mt server khc WDS server. Bn cu hnh WDS t ng ci t. Bn ang ngi trn vn phng. Bn nn s dng phng php no cho vic trin khai ny? A. Cp nht cc DNS zone m bo rng chng thuc trong Active Directory Integrated. B. Cu hnh mt scope IPv4 DHCP cho cc PXE client. C. Cu hnh mt scope IPv6 DHCP cho cc PXE client. D. Di chuyn b nh tuyn n ni c h tr multicast. 5. Bn c 15 image Windows Server 2008 trin khai cho cc client s dng Windows Deployment Services (WDS). Tt c cc server cn c cu hnh gn nh nhau. Khng c server no c a mm hoc cng. Lm th no c th cu hnh WDS gim thiu vic ci t bng tay. A. Di chuyn file autounattendend.xml trn th mc chia s. B. Cu hnh Multicast transmission trong WDS. C. Cu hnh file autounattended.xml trong WDS server. D. Di chuyn file autounattended.xml vo USB v kt ni n n tng server.
Tm tt chng
Tm hiu v cc phin bn Windows Server 2008 v phn cng, yu cu clustering v cc role cn thit.
ICT24H.NET
Page 54

Ci t Windows Server 2008 s dng DVD-ROM. Bn c th s dng Windows PE boot thng qua mng vi mc ch ci t Windows Server 2008 cho d cha c card mng PXE v WDS. BitLocker yu cu phi trin khai trn cng u tin trc khi trin khai h iu hnh. Nu khng bn cn phi xa h iu hnh v cng sau ci t li v trin khai BitLocker. BitLocker c th trin khai m khng cn n chip tng thch TPM 1. Bn c th cu hnh Group Policy cho php BitLocker key lu tr trn USB v thit lp BIOS h tr USB. Windows Server 2008 answer file cn c gi l autounattended.xml v c to bng System Image Manager mt cng c c trong Windows AIK (Download Windows AIK ti website ca Microsoft). Bn c th cu hnh WDS s dng file autounattended.xml thc hin vic ci t t ng. Windows Deployment Services cho php cc image ca h iu hnh c trin khai trn ng thi nhiu my tnh vi card mng PXE, ng thi thit lp thi gian multicast. Cu hnh multicast gip bn tit kim c bng thng, cho php ci t h iu hnh vi ng truyn mng thp.
Cc thut ng chnh
Boot partition DHCP Multicast PXE System partition Windows PE
Ng cnh
Trong ng cnh di y, bn s c tm hiu nhm tng tnh thc t cho bi hc ca bn. ICT24H ang trong giai on nng cp h tng mng ca h t Windows Server 2003 ln Windows Server 2008. iu ny khin cc cng vic ca nhn vin s thay i, v ICT24H mong mun bn a ra k hoch trong vic ny. H mun hi kin ca bn v 3 vn sau: 1. 5 chi nhnh vn phng ca ICT24H c ci t Server Core theo phin bn Windows Server 2008 Standard Edition. Nhng server ny hin ti ang chy Windows Server 2003 Standard Edition. Cu hnh mi server l Core 2 Duo 2Ghz, 4GB RAM v 1TB dung lng trng. Bn c th a ra k hoch nh th no hon thnh mc tiu ny? 2. Bn chun b trin khai BitLocker nh th no cho 5 server ng vai tr RODC ny? 3. Phin bn Windows Server 2008 no thch hp cho h trin khai trn mt server ch vi mt chc nng cha website ca cng ty ICT24H.
---End--(n c chng 2)
ICT24H.NET
Page 55

Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

Uploaded by

Copyright:

Available Formats

Smith Nguyen Studio.

ICT VIETNAM COMMUNITY ICT24H.NET

TNG QUAN V WINDOWS SERVER 2008

1. Cng c qun tr Server Manager

Smith Nguyen Studio.

2. Windows Server Core

Smith Nguyen Studio.

4. Windows Deloyment Services.

Smith Nguyen Studio.

Smith Nguyen Studio.

6. Network Access Protection

Smith Nguyen Studio.

7. Read-Only Domain Controllers

Smith Nguyen Studio.

8. Cng ngh Failover Clustering.

Smith Nguyen Studio.

Smith Nguyen Studio.

9. Cng ngh o ha Hyper-V

Smith Nguyen Studio.

Windows Firewall with Advance Security

Smith Nguyen Studio.

CHNG I: CI T, NNG CP V TRIN KHAI WINDOWS SERVER 2008

Smith Nguyen Studio.

Nhng bi hc trong chng ny

Bi hc 1 : Ln k hoch ci t v nng cp Windows Server 2008

Thi lng bi hc: 60 pht

La chn ng phin bn Windows Server 2008

Smith Nguyen Studio.

Cu hnh ti thiu dnh cho Windows Server 2008

Phin bn Windows Server 2008 Standard

Phin bn Windows Server 2008 Enterprise Edition

Smith Nguyen Studio.

Phin bn Windows Server 2008 Datacenter Edition

Phin bn Window Web Server 2008

Windows Server 2008 Server Core

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Cc role trong Windows Server 2008

Smith Nguyen Studio.

Ci t Windows Server 2008

Smith Nguyen Studio.

Nng cp ln Windows Server 2008

Smith Nguyen Studio.

Ln k hoch trin khai BitLocker

Smith Nguyen Studio.

Trin khai chi tit BitLocker s c cp cc bi hc sau.

Thc hnh: Ci t Windows Server 2008 v trin khai BitLocker

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Smith Nguyen Studio.

Click OK tin hnh thay i mt khu.

Smith Nguyen Studio.

V d : mt khu hp l : pass@word1 . Mt khu khng hp l: password1

Bi thc hnh 2: Cu hnh BitLocker m ha cng

Smith Nguyen Studio.