lOMoARcPSD|5957588

WINDOWS SERVER PROPOSAL FOR FIXING WINDOWS

LLC
Administering Windows Server (University of Maryland Global Campus)

StuDocu no está patrocinado ni avalado por ningún colegio o universidad.

Descargado por Andreas Deris (malmsteen@123mail.cl)
 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 1

WINDOWS SERVER PROPOSAL FOR FIXING WINDOWS LLC

Professor

CMIT 370 6386 Windows Server Networking

Mar 3, 2019

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 2

Executive summary

I have been hired by Fixing Windows LLC as an Information Technology consultant to develop

a technology proposal. Fixing Windows LLC manufactures and distributes solar panel for the

consumer market. I will submit a proposal that meets their criteria of current

implementation/concerns. The company has three locations (Los Angeles, Dallas, and Houston)

but are planning to grow rapidly due to high demand in solar panels. Main staff will be at Dallas

and Houston offices. The Windows Server 2016 operating system will be used for all aspects of

the solution. The proposal will include Dynamic Host Configuration Protocol (DHCP) & DNS,

File Services, Distributed File Service (DFS) Network Policy Server (NPS) and Remote Services

by Windows Server 2016 operating system.

DNS and DHCP

The organization needs reliable and uninterrupted IP address connection. Dynamic Host

Configuration Protocol (DHCP) provides this solution. DHCP provides a reliable IP address

configuration, automatically, and reduces network administration. By providing the DHCP

server users can transport from one location to the other without interruption. The users are now

able to connect to the network without having to reconfigure their device.

Due to the multiple locations of the company, DHCP failover is the best method for the

organization because the servers have knowledge of each other. DHCP failover can be

configured in 2 ways, load balancing and hot standby. We will use hot standby because the

physical site of each server are not in the same place. The main server will be in Dallas in the

partner server will be in Los Angeles. With this method, you have a backup server just in case

the primary DHCP goes down. The secondary DHCP can be used as a backup until the primary

server comes back up. The default ratio of 95:5 will be the ratio of leased IP addresses, but this

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 3

can be adjusted. Static IP We will also deploy a DHCP scope for static IP addresses will be

implemented at each location with a 30-day lease time. The Same IP address must be used for

all service not to include the DHCP in

printer servers. In order to do this DHCP

reservations must be maintained.

By implementing IPAM, there is a

reassurance that DHCP server IP addresses

and The Domain Name System (DNS)

server are being monitored controlled, tracked and up-to-date. With so many users on the

network, IPAM is able to distinguish which IP address belongs to which server and who is

using it and identify vacant IP addresses. IPAM is able to monitor the dynamic and static

IPv6 address space.

Without the Domain Name System (DNS), the Internet will not work correctly. DNS

Gathers public IP addresses in associate them with names. Instead of putting the IP address to

look up a website, you put in the name of the website , for example WWW.google.com. Fixing

Windows will have both private and public DNS namespace. The private will be

Intranet.FixingWindowsLLC.net and the public will be www.FixingWindowsLLC.com. Active

Directory (AD) Integrated zones will be implemented. The main AD will be located in Dallas

and the others will be located in Los Angeles and Houston allowing the intranet and internet to

be divided.

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 4

Active Directory replication is a critical service that keeps changes synchronized with

other domain controllers in the forest. Problems with replication can cause authentication failures

and issues accessing network resources (files, printers, applications). This will be used as the

security measure in protecting the network. The DNS request for LA and Houston will be

communicated to Dallas automatically. “RODC is designed primarily to be deployed in remote

or branch office environments. Branch offices typically have the following characteristics:

“(Technet, 2011).

File Services, DISTRIBUTED FILE SYSTEM (DFS) AND BRANCHCACHE:

In order to make file sharing easier the Distributed Files System (DFS) provides a single

hierarchical structure within the Windows Server 2016. Without it, it may be challenging to find

share files, as more and more files are added.

All files will be within the DFS and replicated across each server at each location. Each

department will have their own folder. NTFS (NT file system; sometimes New Technology File

System) is the file system that the Windows NT operating system uses for storing and

retrieving files on a hard disk. I recommend NTFS and Share Permission for each member that

is associated with each folder and/or file. The access will be granted via group membership.,

As a start, each share will have a quota of 500 MB and will be increased when needed.

The File Server Resource Manager (FSRM) will alert the user and administrators.

BranchCache is a bandwidth-optimization feature that has been available since the

Windows Server 2008 R2 and Windows 7 operating systems. Each client has a cache and acts as

an alternate source for content that devices on its own network request. This will allow the user

to access data locally. Each location’s domain should have their own domain controller (DC),

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 5

which is a server that responds to security authentication requests and allows for the “Active

Directory domain database to be stored as a read-only copy on the DC.” (Savill, 2008)

Remote Services and NETWORK POLICY SERVER (NPS):

Remote Services allow users to access the organization’s network remotely. The user will be

able to work from home or another remote location away from the office. For security reasons,

each user will be required to connect to the organization’s network using a combination of the

traditional Virtual Private Network (VPN) and Direct access. Another remote service is Direct

Access (DA). With the increase of users teleworking, this figure is very beneficial.

With the use of Remote Access array users using Windows 7 or newer will access the

network remotely using the direct Access, and all other users (non-domain joined machines, non-

Windows, and machines not capable of access IPv6) will access the network via the VPN.

In the main datacenter, Network Policy Server (NPS) will be implemented. Network

Policy Server (NPS) is the Microsoft implementation of a Remote Authentication Dial-in User

Service (RADIUS) server and proxy. It is the successor of Internet Authentication Service (IAS)

Administrators are able to ensure the policy are enforced with using NPS [ CITATION Mic181 \l

1033 ].

High Performance Network Solutions & Software-Based Networking (SDN)

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 6

. Software-defined networking (SDN) is an architecture that aims to make networks agile

and flexible. The goal of SDN is to improve network control by enabling enterprises and service

providers to respond quickly to changing business requirements. SDN allows segment traffic in

the network with the excess routers and switches. SDN is capable of accelerate the automation

of the network management tasks in a multi-vendor environment. Using High Performance

Network Solutions & Software-Based Networking (SDN) will really cut cost for Fixing

Windows LLC.

Within the High-Performance Network Solutions there are two features, NIC Teaming,

and SMB Direct. NIC Teaming allows you to group between one and 32 physical Ethernet

network adapters into one or more software-based virtual network adapters. A NIC team that

contains only one network adapter cannot provide load balancing and failover. [ CITATION Mic18 \

l 1033 ]. SMB Direct is an extension of the Server Message Block technology by Microsoft used

for file operations. The Direct part implies the use of various high-speed Remote

Data Memory Access (RDMA) methods to transfer large amounts of data with

little CPU intervention. [CITATION SMB19 \l 1033 ]. You can see the cost effectiveness of High-

Performance Network Solutions & Software-Based Networking (SDN).

Descargado por Andreas Deris (malmsteen@123mail.cl)

 lOMoARcPSD|5957588

CMIT 370 6386: WINDOWS SERVER PROPSAL 7

References
Chelsio Communication Accelerate. (2019). Retrieved from SMB Direct:
https://www.chelsio.com/nic/smb-direct/
Microsoft. (2018, September 9). Retrieved from NIC Teaming: https://docs.microsoft.com/en-us/
windows-server/networking/technologies/nic-teaming/nic-teaming
Microsoft. (2018, May 30). Retrieved from Network Policy Server : Network Policy Server
(NPS)
Implement Work Folders in Windows Server 2016 - RootUsers. (2018). Retrieved from https://
www.rootusers.com/implement-work-folders-in-windows-server-2016/

Fekay, A. (2013, April 30) DNS Zone Types Explained, and their Significance in Active
Directory. Retrieved from http://blogs.msmvps.com/acefekay/2013/04/30/dns-zone-
types-explained-and-their-significance-in-active-directory/

Descargado por Andreas Deris (malmsteen@123mail.cl)