Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio

ICT VIETNAM COMMUNITY ICT24H.NET

ICT24H.NET Page 1

TNG QUAN V WINDOWS SERVER 2008

NHNG TNH NNG MI TRONG WINDOWS SERVER

2008

So vi Windows Server 2003, phin bn Windows Server 2008 c nhng tnh nng mi sau.

1. Cng c qun tr Server Manager

Server Manager l mt giao din iu khin c thit k t chc v qun l mt server chy h iu

hnh Windows Server 2008. Ngi qun tr c th s dng Server Manager vi nhng nhiu mc ch

khc nhau.

Cng c qun tr Server Manager.

Qun l ng nht trn mt server: vi Server Manager bn c th tm thy nhng thng tin c bn

nh tn my tnh, workgroup, domain, trng thi kt ni LAN chc nng kt ni t xa remote desktop.

Hin th trng thi hin ti ca server: Server Manager truy vn n nhng bn ghi ca h thng v

lit k cc loi thng tin c gi n. Nu nhng cnh bo hoc li xy ra ca cc role c tm thy

trong bn ghi, mt biu tng s xut hin ch ra tnh trng hin ti ca server.

Nhn ra cc vn gp phi i vi cc role c ci t mt cch d dng hn: vi mi

role u c mt trang tm tt c hin th cng vi s kin ca role . Server Manager lc ra v ch

hin th nhng s kin xy ra i vi role. Hin th nhng thng tin h thng gi n, nhng cnh bo v

Smith Nguyen Studio.

http://www.facebook.com/SmithNguyenStudio


ICT24H.NET Page 2

li xy ra u c lit k trn mt danh sch v bn c th double-click vo bt c s kin g xem

thng bo .

Qun l cc role trn server, bao gm vic thm v xa role: trong Windows Server 2008 cho

php bn ci t 17 role bng cch click vo Roles trn Server Manager s hin ra danh sch cc role

c ci t. Bn c th thm role bng cch click vo lin kt Add Roles. Tng t bn c th xa b

role bng cch click lin kt Removes Roles.

Thm v xa b cc tnh nng: vic thm v xa b cc tnh nng tng t nh role.

Chn on cc du hiu bt thng: cc cng c nh Event Viewer, Reliability and Performance

Monitor v Device Manger u c th gip bn chn on cc du hiu, trng thi vn hnh kp thi

khc phc v x l cc s c trn server.

Cu hnh server: c 4 cng c ( Task Scheduler, Windows Firewall, Services v WMI Control).

Cu hnh sao lu v lu tr: cc cng c gip bn sao lu v qun l a l Windows Server Backup

v Disk Management u nm trn Server Manager.

chy Server Manager, bn c th click Start > Administrative Tools > Server Manager. Mt cch

khc l click chut phi vo Computer trn thanh menu Start v chn Manage.

2. Windows Server Core

Server Core l mt tnh nng mi trong Windows Server 2008. N cho php bn c th ci t vi mc

ch h tr c bit v c th i vi mt s role.

V d, nu bn ln k hoch to mt DHCP server trn mt werver v ch c DHCP server, bn c th s

dng Server Core. Thay v ci t y mt h iu hnh Windows Server 2008 trn mt my tnh

ng vai tr server, Server Core c th ci t thc thi cc file v h tr nhng th vin lin kt ng

(DLL) cn thit cho Role m bn la chn(trong trng hp v d ny l DHCP).

Mt im khc bit ng k gia Server Core v ci t y h iu hnh l Server Core khng phi

l mt giao din ngi dng ha (GUI). Thay vo , tt c cc tng tc vi Server Core c thng

qua cc dng lnh.

Server Core mang li nhng li ch sau:

Gim thiu c phn mm, v th vic s dng dung lng a cng c gim. Ch tn

khong 1GB khi ci t.

Bi v gim thiu c phn mm nn vic cp nht cng khng nhiu.

Gim thiu ti a nhng hnh vi xm nhp vo h thng thng qua cc port c m mc nh.

D dng qun l.

Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di

y l danh sch cc role c h tr:

Active Directory Domain Services (AD DS)

Active Directory Lightweight Directory Services (AD LDS)

DHCP Server




ICT24H.NET Page 3

DNS Server

File Services

Print Services

Web Services

Hyper-V

Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d

nh .NET Framework hoc Internet Explorer.

3. PowerShell

im khc bit gia mt ngi qun tr tt v mt ngi qun tr v i l vic thng hay s dng

nhng tp lnh mt cch kho lo v linh hot.

PowerShell l mt tp hp lnh. N kt ni nhng dng lnh shell vi mt ngn ng script v thm vo

hn 130 cng c dng lnh(c gi l cmdlets). Bn c th s dng PowerShell thng xuyn i

vi nhiu s qun l hoc cc cng vic qun tr khc. Hin ti, bn c th s dng PowerShell trong:

Exchange Server

SQL Server

Terminal Services

Active Directory Domain Services.

Qun tr cc dch v, x l v registry.

Mc nh, Windows PowerShell cha c ci t. Tuy nhin bn c th ci t n mt cch d dng

bng cch s dng cng c qun tr Server Manager v chn Features > Add Features

4. Windows Deloyment Services.

Mt trong nhng cng vic tn nhiu thi gian l vic ci t hoc thit lp n tng my tnh trn h

thng. ci t h iu hnh n l mt khong 30 pht. Thm thi gian bn ci t cc bn v li,

cp nht hoc cc ng dng km theo v thi gian ca bn cho mt h thng c th ln n 3 hoc

nhiu gi.Nu bn c 20 my tnh ci t, bn s mt rt nhiu thi gian ci t.

Trc y, cng c Remote Installation Services (RIS) ca Microsoft c th t ng thc hin vic ci t

trn h thng. ng tic l mt s s c xy ra hn ch vic s dng n i vi nhiu nh qun tr.

Windows Deployment Services (WDS) l cng c c thit k li t RIS.

Windows Deployment Services c tch hp trong Windows Server 2008 cho php bn ci t h iu

hnh t xa cho cc my client m khng cn phi ci t trc tip. WDS cho php bn ci t t xa

thng qua Image ly t DVD ci t. Ngoi ra, WDS cn h tr to Image t 1 my tnh ci t sn

Windows v y cc ng dng khc.

Windows Deployment Serviece s dng nh dng Windows Image (WIM). Mt ci tin c bit vi WIM

so vi RIS l WIM c th lm vic tt vi nhiu nn tng phn cng khc nhau.

WDS bao gm 3 thnh phn chnh sau:

Server : thnh phn server cung cp mt phng thc dnh cho cc my client c th boot,ng thi

truy cp mng v np cc h iu hnh vo. N bao gm cng c Preboot Execution Environment (PXE,




ICT24H.NET Page 4

thng c gi l pixie) v Trivial File Transer Protocol (TFTP). Thnh phn ny bao gm mt th mc

c chia s vi Image v nhng tp tin khc c s dng np Image n mt my tnh kt ni t

xa.

Client: thnh phn ny bao gm Windows Pre-Installation Enviroment (Windows PE) cho php my

client boot t giao din ngi dng ha v la chn nhng Image thch hp t server.

Management : WDS gm c nhng cng c c s dng qun l server, Image, v cc ti khon

my tnh client. V d bn Sysprep c s dng xa thng tin my tnh ( chng hn SIDs) trc khi

bt ly Image, v tin ch WIDS Capture c s dng ly Image v lu tr chng vo nh dng

WIM.

Hnh di l cch thc lm vic ca WDS. WDS server ang lu tr Image. PXE client s boot, sau

connect n WDS server. Windows PE s c ti xung cc client. Image ny gm c giao din ngi

dng ha c th tng tc vi user hoc t ng x l.

5. Terminal Services.

Terminal Services l mt thnh phn chnh trn Windows Server 2009 cho php user c th truy cp vo

server s dng nhng phn mm.

Terminal Services gip ngi qun tr trin khai v bo tr h thng phn mm trong doanh nghip mt

cch hiu qu. Ngi qun tr c th ci t cc chng trnh phn mm ln Terminal Server m khng

cn ci t trn h thng my client, v th vic cp nht v bo tr phn mm tr nn d dng hn.

Terminal Services cung cp 2 s khc bit cho ngi qun tr v ngi dng cui :




ICT24H.NET Page 5

Dnh cho ngi qun tr: cho php qun tr c th kt ni t xa h thng qun tr bng vic s dng

Remote Desktop Connection hoc Remote Desktop. Vi Windows Server 2008, Remote Desktop

Connection 6.0 c, cung cp cho bn nhng ci tin v bo mt nhng ni chung th chc nng kt

ni t xa trong Windows Server 2008 ging nh Windows Server 2003.

Dnh cho ngi dng cui: cho php ngi dng cui c th chy cc chng trnh t Terminal

Services server. Thay i c bit trong Windows Server 2008 l chc nng cho php cng lc nhiu

ngi dng c th chy cc chng trnh t server. Thm vo , ng dng Terminal Services c th

vt qua firewall mt cch d dng v cho php ng dng c th truy cp bn ngoi vi kt ni VPN.

6. Network Access Protection

Network Access Protection (NAP) l mt tnh nng mi c th gip bo v h thng mng ca bn t

nhng kt ni truy cp t cc client ngoi. Ni mt cch ngn gn hn, NAP gip bn bo v h thng

mng t cc client.

Trong mng LAN, bn c th kim sot cc my client bo m chng lun trng thi an ton v

vn hnh tt. Bn c th s dng Group Policy bo m vic bo mt v trng thi cp nht cn thit.

Nhng phn mm phng chng virus v spyware c th ci t cc client v c cp nht u n.

Bn c th chy mt on lnh script bo m cc chnh sch mt khu vc no .

Tuy nhin bn khng th kim sot vic truy cp t client n h thng mng ca bn t mt khch sn

hoc mt ngi nh. N bao gm c kh nng c th c ca my tnh c virus truy cp n h thng

mng ca bn.Gii php c s dng y kim sot truy cp l NAP, y l cng ngh m bn c

th s dng n kim tra trng thi ca client. Nu client trng thi tt, NAP s cho php truy cp




ICT24H.NET Page 6

vo mng. Nu trng thi bt thng, n s cch ly v cho php truy cp n server kim duyt

nhng yu cu trc khi truy cp vo h thng mng.

Cc chnh sch trng thi c xc nh v thit lp bi bn. V d bn c th chn yu cu tt c cc

cp nht c ph chun c ci t trn client. Trong h thng mng, bn s dng ng dng

Windows Software Update Services (WSUS) ph chun v ci t cc bn cp nht ln client. V VPN

client khng nm trong h thng mng ca bn, do khng th yu cu n cp nht. Client VPN ny s

c cch ly v WSUS c s dng kim duyt cc yu cu hp l trc khi cp nht.

NAP cung cp b th vin API (Application Programming Interface), cho php cc nh qun tr lp trnh

nhm tng tnh bo mt cho h thng ca mnh.

Hin ti, NAP h tr trin khai trn nhng loi hnh sau:

Dynamic Host Configuration Protocol (DHCP)

Ipsec with Health Registration Authority (HRA)

IEEE 802.1X (Wired v Wireless)

Virtual Private Network (VPN)

Terminal Services Gateway (TS Gateway)

7. Read-Only Domain Controllers

Read-Only Domain Controller (RODC) l mt kiu Domain Controller mi trn Windows Server 2008.Vi

RODC, doanh nghip c th d dng trin khai cc Domain Controller nhng ni m s bo mt khng

c m bo v bo mt. RODC l mt phn d liu ca Active Directory Domain Services.




ICT24H.NET Page 7

Qu trnh xc thc RODC.

V RODC l mt phn d liu ca AD DS nn n lu tr mi i tng, thuc tnh v cc chnh sch ging

nh domain controller, tuy nhin mt khu th b ngoi tr. Khi user s dng RODC, RODC s ng b

vi domain controller kim tra mt khu. Nu ti khon user ny tn ti, RODC s gi mt khu ca

ti khon n domain controller xc thc, sau tr v RODC kt qu. Vi mi ln xc thc s tn

thi gian v bng thng, tuy nhin vi chc nng Credential Caching trong RODC gip bn lu li nhng

mt khu c chng thc vo c s d liu ca RODC.

8. Cng ngh Failover Clustering.




ICT24H.NET Page 8

Trc khi tho lun v ci tin mi trong clustering, hy xem hnh trn. Client kt ni n server (c tn

l Server1) c cu hnh 2 nt cluster l ServClust1 v SrvClust2. C 2 nt ny u kt ni h thng

mng v c 2 u c cha s n a (Quorum Disk). Ch c mt nt c hot ng ti thi gian

ny.

V d, bn ang chy SQL Server 2008 trn c 2 server cluster ny. SrvClust1 hot ng cn SrvClust2

cha hot ng. Thm ch nu c 2 server cluster ny cng ang chy, ch SrvClust1 p ng c

nhng yu cu v hot ng chnh. Cng vic chnh ca SrvClust2 l gim st SrvClust1. Nu SrvClust1

ngng hot ng, SrvClust2 s nhn dng c vn SrvClust1 thiu kh nng hot ng v SrvClust2

s thay th hot ng ca SrvClust1. iu ny s gip h thng vn hot ng bnh thng nh c

SrvClust2.

Qua v d trn, Clustering l cng ngh cho php s dng hai hay nhiu server kt hp vi nhay to

thnh mt cm server tng cng tnh n nh trong vn hnh. Nu server ny ngng hot ng th

server khc trong cm s m nhn nhim v m server ngng hot ng ang thc hin nhm mc

ch hot ng ca h thng vn bnh thng. Qu trnh chuyn giao ny gi l fail-over.

Khng phi tt c cc phin bn no ca Windows Server 2008 cng h tr cng ngh clustering. Nhng

phin bn sau h tr:

Windows Server 2008 Enterprise

Windows Server 2008 Datacenter

Windows Server 2008 Itanium




ICT24H.NET Page 9

Hai phin bn khng h tr cng ngh clustering l Windows Server 2008 Standard v Windows Server

2008 Web.

Mt s ci tin m Windows Server 2008 mang n trong clustering:

Loi b nhng a khng kh nng hot ng v thay th bng mt kiu mi.

Cung cp cng c xc nhn tnh tng thch phn cng h tr cluster trc khi trin khai.

Cung cp vic h tr m rng i vi Storage Area Network (SAN).

Cung cp nhng cng c qun tr c ci tin gip bn c th thit lp cluster d dng hn.

9. Cng ngh o ha Hyper-V

Microsoft trc y tng cung cp nhng phn mm o ha nh Virtual Server, Virtual PC hay hng

Vmware cung cp sn phm Vmware Server, Vmware vSphere4, Vmware Workstation...Cc sn phm

ny khng nh c v tr trn th trng trong nhiu nm qua.

Hyper-V l cng ngh o ha server th h mi ca Microsoft, s thay i ln nht m Microsoft mang li

so vi phin bn Windows Server 2003. Hyper-V hot ng trn nn h iu hnh 64-bit. Vi Hyper-V,

ngi s dng c th s hu mt nn tng o ha linh hot, bo mt, ti a hiu sut v tit kim chi

ph:

Hyper-V c th thch nghi vi doanh nghip ln vi hng nghn my tnh hoc cc doanh nghip

nh hay vn phng chi nhnh. Hyper-V h tr b nh o ln n 64GB, a b vi x l. Do d,

cc ng dng my ch yu cu cu hnh cao cng hon ton c th trin khai c trn nn

tng o ha ny.

Kh nng bo mt ging nh cc server vt l. Kt hp cc cng c bo mt Windows Firewall,

Network Access Protectiondo tnh bo mt tt nh mi trng tht.

Hyper-V gip khai thc ti a hiu sut s dng phn cng server. Bng vic hp nht server,

cho php mt server vt l c th ng nhiu vai tr ca nhiu server. T , tit kim c chi

ph t cc khong mua server, in, khng gian v bo tr.




ICT24H.NET Page 10

Hnh trn th hin v Hyper-V. Server vt l ca bn ang chy Windows Server 2008 Enterprise. Bn c

th chy thm cc virtual server khc. C th l Windows Server 2008, Novell SUSE Linux Enterprise v

Windows Server 2003.

Phin bn Linux duy nht h tr Hyper-V l Novell SUSE Linux Enterprise Server

Khi trin khai gii php o ha trn Windows Server 2008, lu mt s im sau:

Server vt l phi chy phin bn Windows Server 2008 64-bit. (Virtual server c th 32-bit hoc

64-bit).

Windows Server 2008 Standard ch h tr 1 virtual server.

Windows Server 2008 Enterprise h tr 4 virtual server.

Windows Server 2008 Datacenter khng gii hn s virtual server.

10. Windows Firewall with Advance Security




ICT24H.NET Page 11

So vi phin bn Windows Server 2003, Windows Firewall trong Windows Server 2008 l mt gii php

firewall mi, c tn gi l Windows Firewall with Advance Security, cho php ngi qun tr c th cu

hnh a dng v nng cao tng cng tnh bo mt cho h thng.

Windows Firewall with Advance Security c nhng im mi:

Kim sot cht ch cc kt ni vo v ra trn h thng (inbound v outbound)

IPsec c thay th bng khi nim Connection Security Rule, gip bn c th kim sot v qun

l cc chnh sch, ng thi gim st trn firewall. Kt hp vi Active Directory.

H tr y IPv6.

CHNG I: CI T, NNG CP V TRIN

KHAI WINDOWS SERVER 2008

Nhng qun tr vin h thng gii khng phi l nhng ngi ch lm vic vo bui sng vi tch caf

cng nh vi ci bnh quy, sau quyt nh ci t h iu hnh bi v h ch cn c vi gi trc khi

ti ba n tra. Qun tr vin h thng gii lm vic vi mt k hoch. H bit rng h chun b ci h

iu hnh trc khi server c th b a vo vin bo tng.

Chng ny cp n vic ln k hoch trin khai Windows Server 2008. bi hc 1 l vic xem

xt a ra quyt nh la chn phin bn Windows Server 2008 thch hp, p ng vai tr cng nh cc

tnh nng trin khai chng hn nh BitLocker v Server Core cng nh vic nng cp t phin bn

Windows Server 2003. bi hc th 2 l cc thit lp t ng, t vic to cho n ti u ha vic ci




ICT24H.NET Page 12

t cng nh qu trnh trin khai ng thi nhiu h iu hnh Windows Server 2008 bng cch s dng

Windows Deployment Services.

Ch trong chng ny:

Ln k hoch ci t v nng cp

Ln k hoch trin khai t ng trn server.

Nhng bi hc trong chng ny

Bi hc 1: Ln k hoch ci t v nng cp Windows Server 2008.

Bi hc 2: Trin khai t ng ha server.

Trc khi bt u

hon tt cc bi hc trong chng ny, bn cn phi p ng nhng iu kiu sau:

Mt my tnh vi khong 20GB dung lng trng. 512 MB RAM, tc x l 1 GHz hoc ln hn.

Nhng bi thc hnh khng yu cu my tnh ca bn phi kt ni Internet, nhng cn phi

c thit lp mt IP. Bn c th s dng phn mm Vmware hoc Virtual PC thc hin vic

ci t o.

Download phin bn Windows Server 2008 Enterprise Edition t Microsoft Download Center.

Bi hc 1 : Ln k hoch ci t v nng cp Windows

Server 2008

Trong bi hc ny bn s c tm hiu cc phin bn Windows Server 2008 v cc role trong . Bn s

c nghin cu v Windows Server Core phin bn mi trong sn phm Windows Server 2008. Bn

s c hc v cch ci t cng nh nng cp Windows Server 2008. Bn s c khm ph v tnh

nng m ha BitLocker v tng bc trin khai n.

Sau bi hc, bn s nm c:

Ci t hoc nng cp Windows Server 2008 Trin khai BitLocker

Thi lng bi hc: 60 pht

La chn ng phin bn Windows Server 2008

Cc phin bn Windows Server 2008 u khc nhau, mi phin bn c nhng vai tr nht nh. C phin

bn thch hp cho vic cu hnh file server cho mt chi nhnh vn phng hoc cng c phin bn khc

thch hp cho vic trin khai vn phng chnh vi Microsoft Exchange Server 2007.




ICT24H.NET Page 13

Cu hnh ti thiu dnh cho Windows Server 2008

Trc khi tm hiu v s khc nhau ca cc phin bn Windows Server 2008, bn cn bit v cu hnh

yu cu khi ci t hoc nng cp Windows Server 2008. Nu bn khng s dng Windows Deployment

Services hoc boot t Windows Pre-installation Environment (Win PE) t CD-ROM, bn cn phi c a

DVD-ROM v dung lng ci t ca Windows Server 2008 xp x Windows Vista. bi hc 2, bn s

c ci t Windows Server 2008 m khng cn a DVD-ROM. Bng di y l cu hnh yu cu ti

thiu dnh cho Windows Server 2008.

Phn cng Yu cu ti thiu ngh

B vi x l 1 Ghz (x86), 1,4 Ghz (x64) 2Ghz hoc ln hn RAM 512MB RAM 2GB

Dung lng trng 15GB 40GB

Mc d yu cu 15GB, tuy nhin vi phin bn Standard x86 bn ch cn 5,5GB. Vi phin bn Windows

Server 2008 Enterprise x64 bn cn khong 11GB dung lng trng. Vic yu cu ti thiu 15GB bi v

bn cn phi lu tr nhng swap file cng nh cc log file, ngoi ra dung lng cng c dnh cho vic

ci t role khi cn.

Ty phn cng ca bn m chn phin bn x86 hoc x64 thch hp. Bn khng th ci t c phin bn

x86 v x64 trn phn cng x64. Hoc nu bn ci t Windows Server 2008 trn b xi x l Itanium th

bn ch c th la chn phin bn Windows Server 2008 Itanium Edition.

Phin bn Windows Server 2008 Standard

Phin bn Windows Server 2008 Standard c s dng cho cc doanh nghip c quy m va v nh.

y l phin bn m bn c th chn trin khai cc role thng thng. im ch trong phin bn

ny:

Phin bn 32-bit (x86) h tr ti a 4GB RAM.


H tr trin khai Network Load Balancing nhng khng h tr tnh nng failover clustering.

Kh bn ln k hoch trin khai cho cc server, bn c th chn phin bn ny ci t cc role c bn

nh DC, File and Print Server, DNS server, DHCP server v cc ng dng khc. Mc d nhng dch v

ny cn thit h tng mng doanh nghip ca bn tuy nhin vic trin khai m rng i hi bn nn cn

nhc khi la chn phin bn ny. Nu bn ch s dng cho doanh nghip va v nh, khng cn cho vic

trin khai failover clustering hoc Active Directory Federation Services th nn la chn phin bn

Windows Server 2008 Standard gim thiu chi ph.

Phin bn Windows Server 2008 Enterprise Edition

Windows Server 2008 Enterprise Edition l phin bn c s dng cho doanh nghip ln. Vi phin bn

ny, bn c th trin khai thm cc ng dng khc nh SQL Server 2008 Enterprise Edition v Exchange

Server 2007. Nhng sn phm ny yu cu RAM v xi x l mnh cng nh c h tr trong phin bn

Enterprise ny. Khi ln k hoch trin khai, bn cn xem xt v vai tr, v tr, li ch ca Windows Server

2008 Enterprise so vi phin bn Windows Server 2008 Standard nh:




ICT24H.NET Page 14

Failover Clustering: failover clustering l cng ngh cho php cc server khc c th duy tr, tip

tc cc dch v m server chnh tm ngng v mt s c no . Bn c th trin khai failover

clustering trn nhng server trng yu m bo ngun d liu, ti nguyn khng gp ri ro

khi b s c.

Active Directory Federation Services (ADFS) : ADFS l dch v cho php xc nh cc t chc

nhm trong doanh nghip, s dng dnh cho cc i tc cn truy cp vo cc ngun ti nguyn

ni b.


Phin bn 64-bit (x64) h tr ti a 2TB RAM.

Khi ln k hoch trin khai,, bn cn xem xt cc role cn thit trin khai trong tng lai m phin

bn Standard khng c, bng role s c cung cp cui bi hc.

Phin bn Windows Server 2008 Datacenter Edition

Windows Server 2008 Datacenter Edition l phin bn c s dng trong doanh nghip c quy m rng

ln. im chnh gia s khc bit trong phin bn Enterprise v Datacenter l kh nng s dng khng

gii hn cc virtual server. Windows Server 2008 Datacenter l s la chn tt nht dnh cho doanh

nghip khi mun xy dng m hnh o ha.


Phin bn 64-bit (x64) h tr ti a 2Tb RAM.

H tr failover clustering v ADFS

Khng gii hn cc virtual machine.

Phin bn Window Web Server 2008

Windows Web Server 2008 c thit k dnh cho cc ng dng chy trn Web server.



Bn nn trin khai Windows Web Server 2008 qua cu hnh Server Core gim thiu nhng tn cng

xm nhp. Ngoi ra, bn nn trin khai phin bn Windows Web Server 2008 y nu cc ng dng

Web ca doanh nghip bn i hi cc tnh nng nh ASP.NET, v nn tng .NET Framework khng hot

ng trn Server Core.

Windows Server 2008 Server Core

Windows Server 2008 Server Core l tnh nng mi trong Windows Server 2008. N cho php bn c th

ci t vi mc ch h tr c bit vi mt s role. im khc bit gia Server Core v mt phin bn

Windows Server 2008 y l giao din. Tt c cc tng tc vi Server Core c thng qua cc dng

lnh. Bn c th qun l mt my tnh chy Server Core bng cch remote thng qua Microsoft

Management Console (MMC).




ICT24H.NET Page 15

Giao din Server Core

S dng phin bn Server Core cho bn 2 li ch chnh:

Gim thiu cc hnh vi tn cng xm nhp vo h thng thng qua cc thnh phn hoc cc

port c m mc nh.

Gim thiu chi ph phn cng

Bn nn s dng lnh Help xem cc hng dn cng nh cc lnh c bn dnh cho vic qun tr. Mt

lnh v d, chng hn bn mun join mt my tnh c tn PC1 chy Server Core vo domain ICT24H vi

ti khon admin l admin_ict24h, bn c th s dng dng lnh sau:

Netdom join PC1 /domain:ICT24H /userd:admin_ict24h /passwordd:*

Mt im ch l Server Core khng h tr tt PowerShell, mc d bn c th chy cc lnh PowerShell

trn Server Core remote thng qua WMI. Ngoi ra, bn c th chy cc cng c quan trng trn




ICT24H.NET Page 16

Server Core chng hn nh regedit v Notepad hoc m cc tnh nng trong Control Panel nh Time and

Date hoc International Settings (s dng lnh control timedate.cpl hoc control intl.cpl)

M Regedit v Notepad trn Server Core

C 2 lnh khc cng quan trng l oclist.exe v ocsetup.exe. Oclist.exe cung cp mt danh sch tt c

cc server role c ci t trn server. Bn c th thm hoc xa nhng tnh nng bng lnh

ocsetup.exe. V d, ci t IIS-Webserver role, s dng lnh ocsetup.exe IIS-WebServerRole hoc

xa role s dng lnh ocsetup.exe/uninstall IIS-WebServerRole.




ICT24H.NET Page 17

Xem cc role v tnh nng c trn Server Core

Server Core khng th s dng c i vi tt c cc role. N ch c s dng vi mt vi role. Di

y l danh sch cc role c h tr:

Active Directory Domain Services (AD DS)

Active Directory Lightweight Directory Services (AD LDS)

DHCP Server

DNS Server

File Services

Print Services

Web Services

Hyper-V

Server Core khng bao gm tt c cc tnh nng c sn trong nhng phin bn ci t Server khc. V d

nh .NET Framework hoc Internet Explorer.




ICT24H.NET Page 18

Hi nhanh 1. Phin bn Windows Server 2008 no c th c ci t trn my tnh Core 2 Duo v 4Gb RAM ? 2. Hai li ch chnh ca vic trin khai Server Core l g?

Tr li nhanh 1. 32-bit v 64-bit 2. Vn hnh tt hn v gim thiu cc hnh vi xm nhp h thng

Cc role trong Windows Server 2008




ICT24H.NET Page 19

Server Role Web Itanium Standard Enterprise Datacenter

Web Services(IIS) Appliaction Server Print Services Hyper-V AD Domain Service AD Lightweight Directory Services AD Rights Management Services AD Certificate Services Partial AD Federation Services DHCP Server DNS Server Fax Server UDDI Services Windows Deployment Services File Services Partial Network Policy and Access Services Partial Terminal Services Partial

*Partial : mt phn

Ci t Windows Server 2008

Trc khi bt u ci t Windows Server, bn cn phi xem qua nhng vn v cc iu kin v yu

cu phn cng.Cho d bn c ci t Windows Server 2008 trn lab hoc mi trng thc t, bn cn

m bo cc phn cng chn phi bng mc ti thiu so vi cu hnh ti thiu m Microsoft ngh.

Khi bn chn cu hnh cho server, thm ch l cu hnh ti u m Microsoft ngh c th cng cha

p ng nhu cu trin khai v tng lai bn cn trin khai, nng cao cc dch khc trn server. V d h

thng Windows Server 2008 chy Exchange Server 2007 vi cu hnh Cluster Continous Replication

(CCR) s yu cu cu hnh nhiu hn 2GB RAM h thng hot ng n nh hn. Thm vo , SQL

Server 2008 chy trn Windows Server 2008 cung cp gii php BI (Business Intelligence) cho 10.000

user cn c yu cu 32GB RAM. V th, bn cn tnh ton trc khi bt u chn cho mnh mt server vi

cu hnh p ng c cc nhu cu cn thit.

Ch : Windows Server 2008 h tr c 2 cu trc vi x l 32-bit v 64-bit. Tuy nhin, phin bn mi

nht l Windows Server 2008 R2, Windows Midmarket Server v Windows Small Business vi nhng tnh

nng a dch v, cc phin bn ny ch h tr cu trc vi x l 64-bit.

RAM h tr ti a cho h thng 32-bit l 4GB khi chy phin bn Standard Edition v 64GB khi chy

phin bn Enterprise v Datacenter. Nu chy h thng 64-bit, b nh RAM c th h tr ln dn 32GB

v 2TB RAM cho phin bn Enterprise v Datacenter. Thm vo , Windows Server 2008 h tr h

thng Itanium, tuy nhin, chip x l Intel Itanium 2 nhn l cn thit.

C cc phin bn Windows cho bn la chn, mc d cc phin bn u c nhng tnh nng ging nhau,

tuy nhin mt s tnh nng khc ch c nhng phin bn Windows Server 2008 nht nh. Doanh

nghip hoc ngi qun tr cn phi hiu khi lng cng vic cn thit chn cho mnh phin bn

thch hp. V d, chn phin bn Enterprise Edition vi mc ch s dng cng ngh clustering hoc t

ng chng thc vi dch v Microsoft Certificate Services. Hay vi phin bn Web Edition l s cn thit

i vi vic gim thiu chi ph v ch trin khai web server v cc ng dng web.




ICT24H.NET Page 20

Nu bn c mi trng Windows, bn c th ci t mi hoc nng cp trn server . Vic cp nht

hay ci t mi u c nhng li ch khc nhau.

Ci t mi: li ch chnh ca vic ci t mi li h iu hnh l bn c th bit c server

c tht s tt hay khng. Bn c th trnh c nhng vn m bn c th gp phi

i vi phin bn trc - c th l cc phn mm c li, thit lp v cu hnh cha chnh

xc, hoc nhng ng dng c ci t khng tng thch. Tuy nhin, vic ci t li khin

bn s phi cu hnh li ton b. Thm vo , cc ng dng cn thit k tha trn server c s

cn phi c ci t li sau khi hon tt ci t h iu hnh mi. V th, trc khi ci t mi

h iu hnh bn cn ghi nh li tt c nhng thng tin cu hnh v sao lu ton b d liu

quan trng.

Nng cp: khi nng cp, cc file h thng s b thay th nhng s gi li cc ti khon user,

thit lp, nhm v quyn hn. trng hp ny, bn khng cn phi ci t li cc ng dng

hoc phc hi d liu. Trc khi c sa la chn nng cp thay v ci t mi, bn nn kim tra

li s tng thch ca cc ng dng bi v chng hot ng trn nhng phin bn Windows

trc khng c ngha l chng vn hnh tt trn Windows Server 2008.

Nng cp ln Windows Server 2008

nng cp ln phin bn Windows Server 2008, bn cn phi chy cc h iu hnh cp server.

Bn khng th nng cp cc phin bn Windows dnh cho ngi dng nh Windows XP hoc Windows

Vista ln Windows Server 2008. nng cp ln Windows Server 2008, h thng ca bn phi chy

Windows Server 2003. Vic nng cp t Windows NT 4.0 v Windows 2000 Server khng c h tr.

Nhng phin bn trc Nng cp ln Windows Server 2008 Microsoft Windows Server 2003 R2 Standard, Enterprise hoc Datacenter Edition

H tr y

Microsoft Windows Server 2003 Service Pack 1(SP1) Standard, Enterprise hoc Datacenter Edition

H tr y

Microsoft Windows Server 2003 Service Pack 2 (SP2)

Standard, Enterprise hoc Datacenter Edition

H tr y Windows NT 4.0 Khng h tr Windows 2000 Server Khng h tr Windows XP Khng h tr Windows Vista Khng h tr Windows 7 Khng h tr

Vic nng cp t nhng phin bn Windows Server 2003 ln phin bn Windows Server 2008 Server

Core khng c h tr.

Vic nng cp ch thc hin c nhng phin bn ging nhau. V d, bn khng th nng cp phin

bn Windows Server 2003 Standard ln Windows Server 2008 Enterprise.

Nu phin bn bn ang s dng l Windows NT 4.0 hoc Windows 2000 Server, bn phi nng cp ln

Windows Server 2003 sau mi nng cp c ln Windows Server 2008.




ICT24H.NET Page 21

Khi nng cp ln phin bn Windows Server 2008, mi cu hnh thit lp, file v cc chng trnh u

c gi li. Tuy nhin, c mt s cng vic quan trng v cn thit m bn cn phi lm trc khi tin

hnh nng cp.

Khi nng cp h thng ln Windows Server 2008, bn cn ti thiu 482MB dung lng trng trong phn

dnh ring (partition) cho h thng, nu khng vic nng cp s tm dng.

Trc y, bn c th kim tnh tng thch ca h thng trc khi nng cp. Gi y bn c th lm

iu tt hn vi cng c Microsoft Application Compatibility Toolkit kim tra tnh tng thch

ca Windows Server 2008 trc khi ci t. Bn c th download cng c ny ti a ch website ca

Microsoft http://technet.microsoft.com/en-us/windowsvista/aa905066.aspx

Bn cng nn kim tra cc thnh phn phn cng ca server trc khi nng cp. Cng c gip bn lm

vic ny l Windows Memory Diagnostics. Xem chi tit v download ti a ch websiteca Microsoft

http://go.microsoft.com/fwlink/?LinkID=50362

Vic kim tra driver cng l iu cn thit. Khi nng cp ln Windows Server 2008, thng bo li s hin

th khi driver khng tng thch c pht hin, driver s khng th np vo h thng khi nng

cp.Nhng nguyn tc sau nn p dng x l trng hp trn:

1) Boot li server v nhn phm F8.

2) Chn Advance Boot Options.

3) Chn Disable Driver Signature Enforcement.

4) Boot t Windows.

5) Xa cc driver khng tng thch.

iu quan trng nht m bn cn lm l backup h thng trc khi nng cp : backup Active Directory,

backup d liu. bi hc sau bn s c tm hiu v vn ny.

Ln k hoch trin khai BitLocker

Windows BitLocker and Drive Encryption (BitLocker) l tnh nng xut hin ln u tin ti phin bn

Windows Vista Enterprise v Windows Vista Ultimate Edition v c ti cc phin bn Windows Server

2008. S dng BitLocker vi 2 mc ch: bo v d liu server thng qua vic m ha cc cng cha

d liu v kim tra c ch hot ng m bo vic khi ng c n nh.

Vic m ha ton h iu hnh v cc cng d liu gip bn c th bo v c cc d liu, ng dng

cha trong h thng. Vic h tr kim tra tnh ton vn, BitLocker yu cu my tnh cn phi c chip h

tr thch hp Trusted Platform Module (TPM) 1.2 hoc chun mi hn. My tnh cn phi c mt BIOS

h tr cho chun TPM. Khi BitLocker c vn hnh, tt c cc cng c bo v bi BitLocker s b

kha li v khng th m kha nu bn khng c c key. Ngoi ra, cc thnh phn trong BIOS, Master

Boot Record, Boot Sector, Boot Manager v Windows Loader cng c bo v.

V mt l do no , bn cn phi xa BitLocker ra khi my tnh. V d, mi trng trn my tnh ca

bn c bo mt kh cao t BitLocker gp phi mt s vn v kh nng vn hnh. V th bn phi

xa hoc v hiu ha n c th vn hnh, khi ng cc file h thng cng nh BIOS ca my tnh.

Hnh di y hin th 2 s la chn xa BitLocker t mt my tnh: v hiu ha BitLocker hoc b m

ha cng.




ICT24H.NET Page 22

Trin khai chi tit BitLocker s c cp cc bi hc sau.

Thc hnh: Ci t Windows Server 2008 v trin khai

BitLocker

Bi thc hnh 1: ci t Windows Server 2008 Enterprise Edition

bi thc hnh ny, bn s ci t Windows Server 2008 Enterprise Edition trn my tnh hoc my o.

Sau , bn s thc hin bi thc hnh trin khai v cu hnh tnh nng BitLocker trn my tnh.




ICT24H.NET Page 23

Language to install: ngn ng bn mun hin th.

Time and currency format: nh dng thi gian v tin t.

Keyboart or input method: nh dng bn phm v phng thc nhp ch.

Sau khi la chn cc thit lp trn xong, click Next tip tc ci t.




ICT24H.NET Page 24

Bn c th click dng What to know before installing Windows xem nhng iu cn bit trc khi ci

t Windows Server 2008.Click Install now bt u ci t.




ICT24H.NET Page 25

Sau khi chn Install now s hin th khung cho bn 2 s la chn :

Go online to get the latest updates for installation : cp nht phin bn mi nht qua

Internet. y l s la chn cn thit v bn s c cp nht y cc bn v bo mt, bn

v li v cc ng dng tng thch cu hnh. Nu c s la chn ny, my tnh ca bn phi

c kt ni Internet.

Do not get the latest updates for installation : vi s la chn ny, bn s khng cp nht

phin bn mi nht, iu ny khin my tnh bn c th c nhng l hng v bo mt. Tuy

nhin, vi s la chn ny bn c th ty chn c nhng thnh phn cp nht sau khi ci

t xong Windows Server 2008.

Nu bn mun nhn c s tr gip t Microsoft ci t c tt hn, hy nh du chn I want

to help make Windows installition better.




ICT24H.NET Page 26

in key bn quyn (License key) vo trng Product key (dashes will be added automatically)

hoc bn c th nh du chn vo Automatically activate Windows when Im online t ng

kch hot Windows khi trng thi trc tuyn.Click Next tip tc ci t.




ICT24H.NET Page 27

Nu bn cha nhp key, sau khi click Next bn s nhn c thng bo v vn nhp key. Click No

tip tc thc hin vic ci t, sau khi ci t xong bn c th thc hin vic nhp key.




ICT24H.NET Page 28

La chn phin bn Windows Server thch hp, y chng ta s la chn phin bn Windows Server

2008 Enterprise.

Ty thuc vo d liu ci t ca bn l g m s hin th s khc nhau. Nu bn a DVD Windows

Server 2008 Enterprise vo th khung hin th cc phin bn ch c Windows Server 2008 Enterprise dnh

cho 32-bit v 64-bit. i vi d liu cha ton b cc phin bn Windows Server 2008 s hin th tt c

cc phin bn Windows Server 2008 t Web Edition n Datacenter Edition. Click Next tip tc.




ICT24H.NET Page 29

Ti bng MICROSOFT PRE-RELEASE SOFTWARE LICENSE TERMS l nhng iu khon s dng

sn phm ca Microsoft. nh du chn vo I accept the license terms chp nhn nhng iu

khon v click Next tip tc.




ICT24H.NET Page 30

Ti bng trn cho bn 2 s la chn l nng cp hoc ty chn ci t, c th l ci t mi hoc ci t

chp ln h iu hnh c. Bn c th chn Custom (advaneced) tin hnh ci t ty chn.

Nu bn ang chy phin bn Windows Server 2008 th chc nng nng cp s b v hiu ha.




ICT24H.NET Page 31

Tip theo chn a cn ci t Windows Server 2008 Enterprise, nu bn tng ci t Windows XP,

Windows Vista hay Windows 7 th bc ny bn s c th d dng thao tc vi vic chn hoc format

a.

Vi nhng phin bn Windows trc, bn c 2 s la chn nh dng l NTFS hoc FAT/FAT32. Tuy

nhin, vi Windows Server 2008, FAT v FAT32 khng cn c h tr na, ch h tr nh dng NTFS

vi mc ch tng tnh bo mt

Tip tc click Next sau khi chn a ci t.




ICT24H.NET Page 32

i cho n khi hon tt ci t Windows Server 2008.

Sau khi h thng hon tt ci t s t ng ng nhp vi ti khon Administrator, tuy nhin mt

khu ang trng thi trng (blank) v th bn cn phi thit lp mt khu ln ng nhp u tin.

Click OK tin hnh thay i mt khu.




ICT24H.NET Page 33

Nhp mt khu v New mt khu v xc nhn li mt khu vo Confirm mt khu.

Mc nh, tng tnh bo mt, mt khu Windows Server 2008 c thit lp ch phc to

(Complexity). Mt khu phi tha mn nhng iu kin sau:

di t 8 k t tr ln.

Cha cc k t thng hoc k t hoa t a-z; A-Z

Cha cc k t s 0-9

Cha mt hoc nhiu k t c bit !@#$%^&*()_+....

V d : mt khu hp l : pass@word1 . Mt khu khng hp l: password1

Bi thc hnh 2: Cu hnh BitLocker m ha cng

Trong bi thc hnh ny, bn s c cu hnh BitLocker m ha ton b cng. Bi thc hnh ny

khng th hon thnh khi s dng my o bi v BitLocker khng h tr my o. Bi thc hnh ny gi

nh rng my tnh khng c TPM 1.2 hoc mi hn. Bao gm vic lu tr starup key trn cc thit b

TMP, mt sratup key trn thit b USB. Sau khi cu hnh BitLocker, bn s c thc hnh xa b n ra

khi my tnh. hon thnh bi thc hnh ny, lm theo tng bc sau:




ICT24H.NET Page 34

1. ng nhp vo my tnh, s dng ti khon Administrator.

2. T menu Administrative Tools, click Server Manager.

3. R-Click vo Features v chn Add Features.

4. Trn trang Select Features, chn tnh nng BitLocker Drive Encryption. Click Next sau

click Install.

5. Click Close. Khi hin th thng bo Do you want to restart now, click Yes. My tnh s khi

ng li hon tt vic ci t tnh nng BitLocker.

6. Sau khi my tnh khi ng, ng nhp ti khon Administrator vi mt khu l

[email protected] s Resume Configuration Wizard s t ng hin th sau khi ng nhp.

Click Close hon thnh ci t.

7. Click Start > Run. Nhp gpedit.mcs v click OK.

8. Trong ca s Local Group Policy Editor, click Local Computer Policy > Administrative

Templates > Windows Components > BitLocker Drive Encryption Node.

9. M Control Panel Setup: kch hot chnh sch Advance Statup Options, chn Enabled, chn

Allow BitLocker Without a Compatible TPM, click OK v ng ca s Local Group Policy

Editor.

10. M ca s lnh v g gpupdate /force p dng chnh sch.

11. Xc nhn USB kt ni vi my tnh.

12. M Control Panel > BitLocker Drive Encryption. Click Turn On BitLocker di C:\




ICT24H.NET Page 35

13. Hin th cnh bo, click Continue with BitLocker Drive Encryption

14. Trn trang Set BitLocker startup freferences, click Require startup USB ket at every

startup.

15. Trn trang Save your startup key, chn USB v click Save.

16. Trn trang Save the recovery password, click Save the password on a USB drive v chn

USB cn lu li startup key, sau click Save.




ICT24H.NET Page 36

17. Mt khu c sao lu ln 1, click Next.

18. Trn trang Encrypt the volume, nh du chn Run BitLocker system check v click

Continue. Sau o click Restart Now.




ICT24H.NET Page 37

19. ng nhp bng ti khon Administrator v mt khu P@ssw0rd. Sau khi ng nhp bn s

nhn c thng bo my tnh khng h tr BitLocker hoc cng c m ha. Nu my

tnh bn khng h tr BitLocker, bn khng th hon thnh bi thc hnh ny.

20. Sau qu trnh m ha cng hon tt, m BitLocker Drive Encryption Control Panel v xc

nhn n c kch hot. Nu n c kch hot, bn c th nhn thy c cc ty chn nh

Turn Off BitLocker v Manage BitLocker Keys.




ICT24H.NET Page 38

21. Click Turn Off BitLocker > Decrypt the drive.

n bc 19 l bn hon tt bi thc hnh, vi bc 20, 21 hng dn bn tt BitLocker

Tng quan bi hc

Tm hiu cc phin bn Windows Server 2008 nh Standard, Enterprise, Datacenter, Web Server

v Itanium.

Tm hiu Server Core v trin khai Server Core gim thiu cc hnh vi tn cng xm nhp

cng nh chi ph phn cng.

Nng cp t phin bn Windows Server 2003 ln Windows Server 2008.

Tm hiu c bn v BitLocker.

Trc nghim

1. Cng ty ca bn c mt my tnh chy phin bn Windows Server 2003 R2 Standard Edition lm

intranet server. Bn c th nng cp ln phin bn no trong cc phin bn di y (Chn 2

p n)

A. Windows Server 2008 Datacenter edition

B. Windows Web Server 2008




ICT24H.NET Page 39

C. Windows Server 2008 Enterprise Edition

D. Windows Server 2008 Standard Edition

E. Windows Server 2008 Standard Edition (Server Core)

2. Cng ty ca bn c mt my tnh vi cu hnh Core 2 Duo v chy phin bn Windows Server

2003 R2 Standard Edition 32-bit. Phin bn no sau y c th nng cp ln 2008 c?

A. Phin bn 32-bit Windows Server 2008 Standard Edition.

B. Phin bn 64-bit Windows Server 2008 Standard Edition.

C. Phin bn 32-bit Windows Server 2008 Datacenter Edition.

D. Phin bn 64-bit Windows Server 2008 Enterprise Edition.

3. Bn va c cp trn ngh phi m ha cc cng trong my tnh chy Windows Server

2008 ng vai tr lm File server v phi s dng BitLocker. File server ny c 2 cng. cng

th nht l mt volume c lp cha h iu hnh. cng th 2 l mt volume c lp cha

cc file c chia s. Bo mch ca my tnh c kch hot chip TPM 1.2 v mt TCG ph

hp vi BIOS. Bc no sau y m bn cn cho php BitLocker m ha volume cha h iu

hnh v volume ch file chia s?

A. Cu hnh group policy thch hp.

B. nh li cc partition cha h iu hnh v ci t li Windows Server 2008.

C. Tt TPM chip.

D. Nng cp TPM chip.

4. Bn ang cn x l cu hnh BitLocker trn mt file server cho mt chi nhnh vn phng. cng

ca server ny c phn chia t h thng v ring bit vi cha h iu hnh. My tnh

khng c TPM chip, v th BitLocker c vn hnh bng cch s dng USB startup key.

Sau khi ci t tnh nng BitLocker, bn m BitLocker Control Panel v thy hin th nh hnh trn.

iu ny chng t BitLocker cha c bt. Bn cn lm g bt BitLocker ln:




ICT24H.NET Page 40

A. a USB vo my tnh.

B. Nng cp BIOS ca my tnh.

C. Cu hnh Group Policy.

D. Ci t tnh nng BitLocker.

5. Phin bn Windows Server 2008 no cn c s dng nu bn mun trin khai Exchange

Server 2007, yu cu c tnh nng failover clustering?

A. Windows Web Server 2008 (x64)

B. Windows Server 2008 Standard Edition (x64)

C. Windows Server 2008 Enterprise Edition (x64)

D. Windows Server 2008 Standard Edition (x86)

Bi hc 2: T ng ha trin khai trn server.

L mt qun tr vin h thng c kinh nghim, bn cn phi xem vic trin khai h thng nh mt ngh

thut. Khng ch ngi mt ch v click chut v cc hp thoi, bn c th vn hnh h thng bng cc

cng c t ng gip cho i mt ca bn c ngh ngi. Trong bi hc ny, bn s c tm hiu

v nhng cng c dng to ra cc file XML dnh cho vic ci t Windows Server 2008 v cch ci

t cng nh cu hnh Windows Deployment Service mt dch v cho php bn c th trin khai ci t

h iu hnh ln cc client bng image thng qua mng.

Sau bi hc ny, bn c th:

To v s dng file XML ci t Windows Server 2008. Ln lch trin khai Windows Server 2008 s dng cc h iu hnh v Windows Deployment

Service.

Thi lng cho bi hc: 40 pht.

Tm hiu Windows Server 2008 Answer File

Mt answer file cho php bn c th nhng thit lp cc ty chn c th chng hn nh phn chia

cng, xc nh ng dn ca image ci t Windows Server 2008 v key sn phm. Windows Server

2008 answer file thng c gi l autounattended.xml. y l tn ca mt file c t ng x l

trong sut qu trnh ci t m khng cn gim st. Khng ging vi cc phin bn Windows Server

trc, Windows Server 2008 answer file s dng nh dng XML. Cc qun tr vin thng hay to file

ny bng cng c Windows System Image Manager (Windows SIM). Cng c Windows SIM gm c c

cng c Windows Automated Installation Kit (Windows AIK). Mc d bn c th to mt answer file bng

cng c lp trnh vi nhng c php XML phc tp tuy nhin vic s dng Windows AIK gip bn c th

tit kim thi gian. Mt li ch khc ca cng c Windows AIK cho php bn c th xc thc c answer

file c tht s a ra nhng kt qu mong mun.

to answer file bng cng c Windows System Image Manage, thc hin nhng bc sau:

1. M Windows System Image Manager. ng dng ny gm c c cng c Windows

Automated Installation Kit.

Bn c th download Windows AIK ti a ch http://go.microsoft.com/fwlink/?LinkId79385




ICT24H.NET Page 41

2. Copy file \Sources\install.wim t d liu ci t Windows Server 2008 vo mt th mc tm

thi no trn my tnh c ci t Windows AIK.

3. Click File > Select Windows Image. Chn file install.wim. File ny bao gm tt c phin bn

Windows Server 2008.

4. Bn c th chn mt image trong Windows Image. Chn Server Enterprise v click OK.

5. Khi hin th thng bo t mt catalog file, click Yes. Hp thoi User Account Control hin th,

click Continue. Catalog file s c to.

6. T menu File, chn New Answer File.

7. Chn thnh phn thch hp trong Windows Image, bn c th cu hnh cho thnh phn . Hnh

di hin th bng cu hnh thit lp cho php my tnh c ci t t ng v join vo domain

contoso.internal.

To file autounattended.xml trong Windows System Image Manager

8. Khi answer file c lu li, n s t ng xc thc image h iu hnh trc khi load ln.

Thng thng, vic ci t t ng c s dng trong a mm. Mt s server mi hin nay khng cn

a mm ny na, v th Windows Server 2008 ci t bng mt file, thng thng s t ng kim tra

trong tt c cc volume trn server, file ny c gi l autounattended.xml. S t ng ny cng c

kim tra cc thit b USB.

trng hp khc ca vic ci t s dng cc file chia s trong mng, n cn c boot t Windows

PE, kt ni vo mng chia s sau s dng lnh setup.exe /unatten:x:\autonattended.xml ( vi x:\ l

ng dn cha file autonattended.xml).

Hi nhanh 1. Cng c no cho php bn to mt unattended XML answer file? 2. Khi bn ci t Windows Server 2008 trn my tnh khng c a mm, lm th no bn c th




ICT24H.NET Page 42

m bo c file autounattended.xml c nhn din? Tr li nhanh

1. Window System Image Manager t Windows AIK. 2. Sao chp file autounattended.xml ln USB kt ni trn server.

Windows Deployment Service

Windows Deployment Service l mt role trong Windows Server 2008 cho php bn trin khai cng vic

ci t h iu hnh t xa trn client m khng cn phi ci t trc tip. Bn cng c th trin khai

WDS vi cc phin bn Microsoft trc , nhng bi hc ny tp trung vo vic s dng cng ngh ny

trn Windows Server 2008

WDS yu cu client cn phi c card mng tng thch PXE. Nu client khng c h tr, bn cn

phi s dng phng php khc chng hn l ci t thng qua mng vi Windows PE remote.

Nu client c chng thc, client s t ng bt u ci dt. Nu autounattended.xml answer file

khng c ci t trn server c role WDS, vic ci t ny buc phi c thc hin bi qun tr vin.

Mt im khc bit gia vic ci t da trn WDS v ci t bnh thng l gia vic ci t thng qua

mng v ci t t ngun d liu trn DVD-ROM.

Windows Deployment Service c th c ci t trn Windows Server 2008 vi cc iu kin sau y:

My tnh cn ci t WDS phi thuc Active Directory domain.

Cn mt DHCP server trong mng.

Image h iu hnh phi c lu tr trong paritition nh dng NTFS.

Bn khng th trin khai WDS trn my tnh chy phin bn Windows Server Core. Sau khi ci t WDS,

bn cn cu hnh n trc khi cho n hot ng. Bn c th s dng cng c Windows Deployment

Services Configuration Wizard hoc cng c WDSUtil.exe.

Nu WDS khng thuc DHCP server, bn cn cu hnh n lng nghe mt port no khc port 67. Nu

khng, WDS v DHCP s b xung t.




ICT24H.NET Page 43

tab Client, cho php bn c th thip lp t ng ci t vi cc cu trc c th nh x86, x64 hoc

ia64.




ICT24H.NET Page 44

Mt s mi trng mng c cc dch v chng hn truyn thng thoi hoc cc on ghi hnh, s dng

cc a ch IP cp pht ra cc phm v. Bn c th s dng tab Network Settings cu hnh cp pht

IP s dng WDS v UDP port. Bn c th gii hn s bng thng s dng WDS trong mc Network

Profile.




ICT24H.NET Page 45

S dng Multicast, Schedule v Automatic Deployment

Multicast cho php doanh nghip s dng bng thng hiu qu hn. V d bn trin khai 20 my tnh

Windows Server 2008, bn c th tit kim c lng bng thng khi ci t mt image thng qua

mng (khong 1,5GB d liu) so vi vic truyn cho 20 my tnh (khong 60GB d liu). Ngoi ra bn

cng c th cu hnh s dng mt s lng bng thng nht nh. Trin khai multicast trong mi trng

mng khi router h tr multicast.

Bn cng c th ln lch trin khai. V d bn c th cu hnh trin khai trong gi cao im khi m vic

truyn ti d liu t mc cao v c cp nht hng ngy. Ngoi ra bn c th thit lp thi gian cho

s lng my c th nhn c image. Hnh di l s hin th ca vic cho php multicast lc 3h sng

nu c 10 my client nhn image.




ICT24H.NET Page 46

Windows Deployment Services Images

Windows Deployment Services s dng 2 hnh thc : ci t image v boot image. Vi hnh thc ci t

image bn c th trin khai trn Windows Server 2008 hoc Windows Vista. Ci t image mc nh

trong th mc \Source trn Windows Vista v Windows Server 2008 trong DVD. Nu bn s dng WDS

trin khai Windows Server 2008 n cc my tnh c cu trc vi x l khc nhau, bn cn thm cc

image ring bit cho tng cu trc vi x l. Nhng cu trc dnh ring cho cc bn image ny bn c th

tm thy trong cc ngun d liu ci t. Chng hn Itanium image c cha trong th mc ci t ca

Itanium. Mc d bn c th t to mt image ty nhng bn ch c th c mt image cho mi cu trc

vi x l. V d trin khai Windows Server 2008 Enterprise Edition x64 cho mt my tnh vi 1 vi x l x64.

bi thc hnh cui bi hc, bn s c thc hnh ci t image trin khai WDS.

Boot image c s dng boot cho client trong qu trnh ci t h iu hnh. Khi my tnh boot qua

mng, mt menu s hin th cc image c th trin khai ln my tnh trn WDS server. File boot.wim

trong Windows Server 2008 cho php bn c th trin khai theo cc s la chn. C 2 hnh thc boot

image c bn. Hnh thc u tin l capture image, cho pho s dng cng c bt li image. Hnh

thc th 2 l tm image. Hnh thc ny c s dng khi my tnh khng c PXE hoc mng khng cho

php trin khai PXE. NHng image ny c ghi trn CD, DVD hoc USB v c s dng boot.

WDS v vn kch hot sn phm

Mc d vic kch hot sn phm khng cn thit trong sut qu trnh ci t, tuy nhin qun tr vin nn

tm hiu v vic s dng WDS t ng kch hot sn phm vi volume activation. Volume activation cho




ICT24H.NET Page 47

php bn c th kch hot s lng ln sn phm trin khai trn cc server. Volume activation cung cp

cho bn 2 hnh thc key v 3 phng php kch hot. Hai hnh thc key l Multiple Activation Key

(MAK) v Key Management Services (KMS).

Multiple Activation Key cho php kch hot mt s lng my tnh nht nh. Mi ln kch hot thnh

cng coi nh bn s dng ht ln kch hot . V d mt MAK c 100 ln kch hot s kch hot c

cho 100 my tnh. MAK s dng phng thc MAK Proxy Activation v MAK Independent Activation

kch hot. MAK Proxy Activation tp trung ha vic kch hot bng cch request ln server kch hot sn

phm ca Microsoft. MAK Independent Activation yu cu mi my tnh kch hot ring bng cch

request ln server kch hot sn phm ca Microsoft.

Key Management Service cho php nhng my tnh c kch hot trong mt mi trng m khng

cn phi kt ni n Microsoft. Nhng KMS ket cho php dch v KMS trn server v cc my tnh kt ni

vi nhau thc hin vic kch hot. Cc doanh nghip s dng KMS nn c 2 server KMS trong 1

server ng vai tr backup. KMS yu cu phi c ti thiu 25 my tnh kt ni trc khi kch hot, v vic

kch hot phi c thay i bng cch kt ni li n server KMS sau 180 ngy.

Bn s dng kt hp KMS v MAK. Bn nn trin khai MAK nu s lng my tnh khng th kt ni

mng sau hn 180 ngy. Nu s lng my tnh ln hn 25 v khng th kt ni mng, bn nn s dng

hnh thc KMS. Nu s lng my tnh nh hn 25, bn cn s dng MAK v kch hot thng qua in

thoi.

Thc hnh : Ci t v cu hnh Windows Deployment

Services

Trong bi thc hnh ny bn s c ci t v cu hnh Windows Deployment Services, sau ci t

Windows Server 2008 bng image, cu hnh multicast trin khai cho cc image ny n cc my client

c cu hnh PXE.

Bi thc hnh 1: Chun b cho vic ci t Windows Deployment Services

Trong bi thc hnh ny bn s c hng dn chun b cho vic ci t WDS, bao gm c vic ci t

dch v DHCP v to ti khon qun tr nhng gii hn. y l ti khon khng thuc nhm Schema

Admin hoc Enterprise Admin. hon thnh bi thc hnh ny, thc hin theo cc bc sau:

1. ng nhp vo DC Glasgow, s dng ti khon Administrator.

2. Click Administrative Tools > Active Directory Users and Computers.

3. Ti Users, to mt ti khon mi c tn Kim_Akers vi mt khu l P@ssw0rd.

4. a ti khon Kim Akets vo nhm Domain Admins. Bn khng nn a ti khon ny vo cc

nhm qun tr khc.

5. ng xut ra khi DC Glasgow v ng nhp tr li bng ti khon Kim_Akers.

6. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu

Adminitrative Tools.

7. R-lick vo Role v click Add Roles.

8. Trn trang Before you begin, click Next

9. Trn trang Select one server role, chn DHCP Server v click Next.

10. Ti trang Introduction to DHCP Server, click Next.




ICT24H.NET Page 48

11. Ti trang Network Connection Bindings, chp nhn gi tr 10.0.0.11 v click Next.

12. Xc nhn a ch IP ca server ti trang Specify IPv4 DNS Server Settings

13. Trn trang IPv4 WINS Settings, mc nh v click Next.

14. Trn trang DHCP Copes, click Add.

15. Ti hp thoi Add Scope, nhp cc gi tr a ch IP sau click OK v click Next.




ICT24H.NET Page 49

16. Xem li cc thng s mc nh ti DHCPv6 Stateless Mode, sau click Next.

17. Xem li cc thng s mc nh ti DHCP IPv6 DNS Server, sau click Next.

18. Xc nhn ti khon s dng ti Use Current Credentials, chn User Name v chn ti khon

CONTOSO\kim_akers. Click Next. Ti trang Confirmation, click Install.]

19. Khi qu trnh ci t dch v DHCP Server hon tt, click Close.

20. ng xut ra khi DC.

Bi thc hnh 2 : Ci t role Windows Deployment Services v thm Image File.

Trong bi thc hnh ny bn s c ci t role WDS v thm image t source ci t Windows Server

2008. Bn phi m bo rng source ci t Windows Server 2008 phi nm trong DVD-ROM trn my

tnh ca bn.

1. ng nhp vo DC Glasgow bng ti khon Kim_Akers.

2. Nu Server Manager khng t ng hin th, m n ti thanh Quick Lauch hoc t menu

Adminitrative Tools.

3. R-click vo Roles v chn Add Roles.

4. Ti trang Before you begin, click Next.

5. Trn trang Select server roles, nh du chn Windows Deployment Services v click

Next.

6. Xem li cc ch mc Things to note ti trang Overview of Windows Deployment v

click Next.




ICT24H.NET Page 50

7. Trn trang Select role services, m bo bn chn c Deployment Server v Transport

Server. Click Next sau click Install. i cho qu trnh ci t role hon tt, click Close.

8. Ti menu Administrative Tools, click Windows Deployment Services. Ti hp thoi User

Account Control, click Continue.

9. Ti giao din Windows Deployment Services, r-click vo Servers, sau click Add Server.

10. Ti hp thoi Add Server, m bo rng bn nh du chn vo Local Computer, sau

click OK.

11. R-click vo server Glasgow.contoso.internal v click Configure Server. Bt u vo trang

Windows Deployment Services Configuration Wizard. Click Next.

12. ng dn mc nh ca th mc Remote installation folder location l C:\RemoteInstall

v click Next.

13. Ti System Volume Warning, ch th mc remote trn volume phi khc vi volume cha

h thng.

14. m bo rng bn nh du chn Do not listen on port 67 v Configure DHCP option

60 to PXEClient sau click Next.




ICT24H.NET Page 51

15. Trn trang PXE server initial settings, chn Respond only to known client computers v

click Finish.

16. Trn trang Configuration Complete, nh du chn Add images to the Windows

Deployment Server now v click Finish.

17. Ti hp thoi Windows image files location, click Browse v chn ng dn ti th mc

Source trong DVD, click OK sau click Next.

18. Trn trang Image group, nh du chn vo Create a new image group v t tn group l

ImageGroup1. Click Next.

19. Ti hp thoi Review settings, xc nhn li s lng image boot v s image ci t sau

click Next v i image c chuyn t DVD sang th mc C:\RemoteInstall.




ICT24H.NET Page 52

20. Khi image c di chuyn xong, click Finish.

21. Ti giao din Windows Deployment Services, r-lick vo Multicast Transmission v chn

Create Multicast Transmission.

22. Trn trang Transmission Name, nhp TestAlpha v click Next.

23. Trn trang Select image, nh du chn ImageGroup1 v click Next.

24. Trn trang Multicast Type, nh du chn vo Scheduled-Cast v Select the start

automatically when the number of clients ready to receive this image is . Thit lp gi

tr l 10. Click Next sau click Finish.




ICT24H.NET Page 53

25. ng Windows Deployments Services v ng xut

Tng quan bi hc

Answer file cho php cc qun tr vin c th t ng ci t h iu hnh.

Answer file, in hnh l file autounattend.xml, c to bng Windows System Image Manager

(Windows SIM) 1 thnh phn ca Windows Automated Installation Kit (Windows AIK). Cng c

Windows AIK bn c th download trn website ca Microsoft.

Bn c th lu tr answer file ti USB. Ngoi ra chng cn c tm thy mng chia s v lm

vic vi Windows PE.

Bn c th s dng Windows Deployment Services (WDS) trin khai ci t h iu hnh t

cc client c PXE bng cch s dng c ch multicast. Vi trin khai ny gip bn gim thiu

c bng thng s dng.

Bn c th thit lp thi gian thc hin vic multicast khi s lng client kt ni n WDS

server. Ngoi ra bn c th to mt Auto-Cast t ng bt u.

Nu WDS server c c dch v DHCP trn , bn cn cu hnh WDS lng nghe mt port khc

port 67 cng nh cu hinh DHCP option tag 60 cho tt c cc scope.

Volume activation cho php s dng 2 hnh thc kch hot. Multiple Activation Key (MAK) l mt

key m bn c th s dng kch hot ng thi nhiu my tnh. Vi hnh thc th 2 l Key

Management Service (KMS) yu cu ti thiu 25 my tnh kt ni n KMS server v trong vng

180 ngy. KSM l s la chn thch hp nht khi mi trng mng ca bn khng kt ni

Internet.




ICT24H.NET Page 54

Trc nghim

1. Bn va mi ci t Windows Server 2008 trn my tnh v c d nh s trin Windows

Deployment Services (WDS). Yu cu no sau y cn phi c trc khi ci t WDS? (chn 3

p n).

A. My tnh ca bn phi thuc Active Directory domain.

B. DHCP server phi c chng thc trong mi trng mng.

C. DNS sever phi c trong mi trng mng.

D. WDS phi c ci t trn my tnh Windows Server 2008.

2. Mi trng no cho php bn bt u vi vic ci t t ng?

A. Windows PE 2.0

B. Windows NT Boot Disk

C. MS DOS Boot Disk

D. Windows Server 2008 Installation Media.

3. Bn va mi ci t WDS trn my tnh ng vai tr l DC, DHCP server v DNS server. Khi bn

khi ng server vi card mng PXE, bn khng th kt ni n PXE trn WDS server. Bn nn

lm g gii quyt vn trn?

A. Cu hnh DHCP trong Windows Deployment Services server.

B. Cu hnh DHCP trong giao din DHCP server.

C. Cu hnh DNS trong giao din DNS server.

D. Cu hnh my client trn Windows Deployment Services server.

4. Bn va cu hnh multicast trn WDS bt u lc 7h ti th 6 cho 10 client nhn image. WDS

server t phng server tng di, 10 my tnh m bn d nh s ci t Windows Server

2008 phng t chc, trn tng 4. Phng server c subnet ring. DNS v DHCP thuc mt

server khc WDS server. Bn cu hnh WDS t ng ci t. Bn ang ngi trn vn phng.

Bn nn s dng phng php no cho vic trin khai ny?

A. Cp nht cc DNS zone m bo rng chng thuc trong Active Directory Integrated.

B. Cu hnh mt scope IPv4 DHCP cho cc PXE client.

C. Cu hnh mt scope IPv6 DHCP cho cc PXE client.

D. Di chuyn b nh tuyn n ni c h tr multicast.

5. Bn c 15 image Windows Server 2008 trin khai cho cc client s dng Windows

Deployment Services (WDS). Tt c cc server cn c cu hnh gn nh nhau. Khng c

server no c a mm hoc cng. Lm th no c th cu hnh WDS gim thiu vic

ci t bng tay.

A. Di chuyn file autounattendend.xml trn th mc chia s.

B. Cu hnh Multicast transmission trong WDS.

C. Cu hnh file autounattended.xml trong WDS server.

D. Di chuyn file autounattended.xml vo USB v kt ni n n tng server.

Tm tt chng

Tm hiu v cc phin bn Windows Server 2008 v phn cng, yu cu clustering v cc

role cn thit.




ICT24H.NET Page 55

Ci t Windows Server 2008 s dng DVD-ROM. Bn c th s dng Windows PE

boot thng qua mng vi mc ch ci t Windows Server 2008 cho d cha c card

mng PXE v WDS.

BitLocker yu cu phi trin khai trn cng u tin trc khi trin khai h iu hnh.

Nu khng bn cn phi xa h iu hnh v cng sau ci t li v trin khai

BitLocker.

BitLocker c th trin khai m khng cn n chip tng thch TPM 1. Bn c th cu

hnh Group Policy cho php BitLocker key lu tr trn USB v thit lp BIOS h tr USB.

Windows Server 2008 answer file cn c gi l autounattended.xml v c to bng

System Image Manager mt cng c c trong Windows AIK (Download Windows AIK

ti website ca Microsoft). Bn c th cu hnh WDS s dng file autounattended.xml

thc hin vic ci t t ng.

Windows Deployment Services cho php cc image ca h iu hnh c trin khai

trn ng thi nhiu my tnh vi card mng PXE, ng thi thit lp thi gian

multicast. Cu hnh multicast gip bn tit kim c bng thng, cho php ci t h

iu hnh vi ng truyn mng thp.

Cc thut ng chnh

Boot partition

DHCP

Multicast

PXE

System partition

Windows PE

Ng cnh

Trong ng cnh di y, bn s c tm hiu nhm tng tnh thc t cho bi hc ca bn.

ICT24H ang trong giai on nng cp h tng mng ca h t Windows Server 2003 ln Windows

Server 2008. iu ny khin cc cng vic ca nhn vin s thay i, v ICT24H mong mun bn a ra

k hoch trong vic ny. H mun hi kin ca bn v 3 vn sau:

1. 5 chi nhnh vn phng ca ICT24H c ci t Server Core theo phin bn Windows

Server 2008 Standard Edition. Nhng server ny hin ti ang chy Windows Server

2003 Standard Edition. Cu hnh mi server l Core 2 Duo 2Ghz, 4GB RAM v 1TB dung

lng trng. Bn c th a ra k hoch nh th no hon thnh mc tiu ny?

2. Bn chun b trin khai BitLocker nh th no cho 5 server ng vai tr RODC ny?

3. Phin bn Windows Server 2008 no thch hp cho h trin khai trn mt server ch vi

mt chc nng cha website ca cng ty ICT24H.

---End---

(n c chng 2)



Documents

Tong Quan Cac Tinh Nang Moi Cua WS2K8 - Smith.N Studio