Search This Blog

Wednesday, April 24, 2013

WindowsNetworking.com - Monthly Newsletter - April 2013

WindowsNetworking.com - Monthly Newsletter - April 2013

Hi Security World,

Welcome to the WindowsNetworking.com newsletter by Debra Littlejohn Shinder <http://www.windowsnetworking.com/Deb_Shinder/>, MVP. Each month we will bring you interesting and helpful information on the world of Windows Networking. We want to know what all *you* are interested in hearing about. Please send your suggestions for future newsletter content to: dshinder@windowsnetworking.com.


1. Windows Server 2012 Essentials: "Real Deal" or Rip Off?
-------------------------------------------------------------

If you have a small business or just want to run a domain-based home network, or if you're a consultant who supports small business clients, you're probably familiar with Microsoft's Small Business Server (SBS). It's been around for a long time in various incarnations; the first was BackOffice Small Business Server, introduced way back in 1997. That first version was based on Windows NT 4.0 and included Exchange, IIS, SQL Server and Proxy Server.

As the years passed, we had Microsoft Small Business Server 2000, Windows Small Business Server 2003, 2003 R2 and 2008 (Standard and Premium editions). Windows SBS 2011 is the most recent product with the SBS branding, and it likewise comes in two flavors: Standard and Essentials.

It's interesting to follow the changing criteria for qualifying as a "small business." First it was 25 clients, then 50, then 75, then with SBS 2011 back to 25 for the "Essentials" fork (staying at 75 for Standard). In 2012, the SBS branding went away completely (and with it, the 75-user option). The new product is branded as just a "lite" version of Windows Server 2012, identified by the "Essentials" label tacked onto the end. You can find out more about WS 2012 Essentials on the Microsoft web site <http://www.microsoft.com/en-us/server-cloud/windows-server-essentials/default.aspx>.

And that's "essentially" what it is. Unlike its predecessors, you no longer get the additional server products (Exchange, SharePoint and SQL in SBS 2011). And that has some small business folks up in arms. Of course, you can still install those server products on your network, but that's an extra cost â€" you'll have to buy WS 2012 Standard edition for them to run as well as the server products themselves â€" not to mention having to deal with separate licenses and CALs. Of course, that's not what Microsoft wants you to do.

Yep, you guessed it: The vision is to lure all the small businesses into the cloud. Given that plan, the omission of the server products makes sense; you don't need them because you'll be using a cloud service for mail, collaboration and data storage. Of course, to Microsoft that means Office 365.

Now, that's not a bad plan â€" for some organizations. Many small businesses just don't have the resources and personnel to deal with an internal IT infrastructure and they may be able to cut costs and operate more effectively by relying on cloud services. However, there are three big reasons that many companies are hesitant about doing so: Reliability, security and control.

Cloud reliability is still spotty. Microsoft recently had a 16 hour Outlook.com outage. In February Office 365 was down for several hours. And it's not just a Microsoft thing. Amazon, Google, all the big cloud providers have had outages ranging from a few hours to days or even weeks.

I'm primarily a security person and cloud security still has a long way to go. Providers and cloud advocates will tell you that security can be better than with on-premises datacenters because cloud providers have more money to invest in security, etc. etc. But can is the operative word. The problem is that it's all still in a state of flux right now. There are no real standards yet and no oversight. Big cloud providers are going to be targeted for attacks whereas your small network might not ever be. Gartner recently put out a report <http://m.networkworld.com/news/2013/041013-gartner-cloud-security-268587.html?source=NWWNLE_nlt_daily_pm_2013-04-10> finding that their clients are "almost universally disappointed" in cloud providers' contracts when it comes to security.

Control, though, is perhaps the biggest issue when taking into account the entrepreneurial spirit â€" which can be a big factor in businesses with 25 or fewer users. In your own network, you have control and you know what is or isn't being done. Someone is accountable. In the cloud, you pretty much have to take it on faith.

Microsoft is selling WS 2012 Essentials as a way to "retain core network and security functionalities in your local environment while enabling robust integration with cloud-based services." If the cloud is in your plans, Essentials might be just what you need to run local applications and store company data. As Paul Thurrott described it, it combines features of SBS, Windows Home Server and Windows Storage Server Essentials.

Essentials 2012 makes it very easy to set up a domain, and management is easy via the Dashboard. It also gives you easy backup of client PCs (up to 50 devices, recognizing that many users have more than one device) and it includes Storage Spaces, the storage pooling feature in Windows 8 and the "big brother" editions of Windows Server (Standard and Datacenter). The Anywhere Access feature makes it absurdly easy to set up VPNs, RDP and other remote access features.

As for your email, it may end up costing you more, but you do have more flexible choices with Essentials. You can use an on-premises Exchange Server, a hosted Exchange (or other email) server, or integrate with Office 365. Note that you can't install Exchange directly on the WS 2012 Essentials server.

The forums are alive with SBS users who are not happy campers. The biggest complaint is the exclusion of the additional server products. Of course, the Essentials version of SBS 2011 doesn't include them, either. Microsoft was obviously preparing the way to this transition when they introduced that edition.

Is Essentials 2012 a ripoff? It's not as if you're paying the same to get less. The Standard edition of SBS 2011 costs over $1000, whereas Essentials 2012 is less than half that. For those who don't need the on-premises mail and other servers, and who have fewer users, it's a money-saver (SBS 2011 is priced at $545). And for those who have a few more users, Microsoft has put in place a way to upgrade to Server 2012 Standard while keeping the Essentials features <http://blogs.technet.com/b/sbs/archive/2012/08/06/growing-beyond-25-users-with-windows-server-2012-essentials.aspx> (except for media features), for up to 75 users.

Tell us what you think. Is Essentials the best idea since sliced bread, a slap in the face to small business customers, or something in between?

By Debra Littlejohn Shinder, MVP

dshinder@windowsnetworking.com

=======================
Quote of the Month - A perfection of means, and confusion of aims, seems to be our main problem. â€" Albert Einstein
=======================



2. ISA Server 2006 Migration Guide - Order Today!
-------------------------------------------------------------

Dr. Tom Shinder's best selling books on ISA Server 2000 and 2004 were the "ISA Firewall Bibles" for thousands of ISA Firewall administrators. Dr. Tom and his illustrious team of ISA Firewall experts now present to you, ISA Server 2006 Migration Guide <http://www.amazon.com/exec/obidos/ASIN/1597491993/isaserver1-20/>.

This book leverages the over two years of experience Tom and his team of ISA Firewall experts have had with ISA 2006, from beta to RTM and all the versions and builds in between. They've logged literally 1000's of flight hours with ISA 2006 and they have shared the Good, the Great, the Bad and the Ugly of ISA 2006 with their no holds barred coverage of Microsoft's state of the art stateful packet and application layer inspection firewall.

Order your copy of ISA Server 2006 Migration Guide <http://www.amazon.com/exec/obidos/ASIN/1597491993/isaserver1-20/>. You'll be glad you did.



3. WindowsNetworking.com Articles of Interest
-------------------------------------------------------------

- Planning for Bring Your Own Device (BYOD) (Part 3)
http://www.windowsnetworking.com/articles-tutorials/netgeneral/planning-bring-your-own-device-byod-part3.html

- Product Review: SolarWinds Alert Central
http://www.windowsnetworking.com/articles-tutorials/product-reviews/product-review-solarwinds-alert-central.html

- Data Tiering and Overprovisioning
http://www.windowsnetworking.com/articles-tutorials/common/data-tiering-overprovisioning.html

- Windows 8 Tweaks and Tricks
http://www.windowsnetworking.com/articles-tutorials/windows-8/windows-8-tweaks-tricks.html



4. Administrator KB Tip of the Month
-------------------------------------------------------------

Processors that support Client Hyper-V on Windows 8

A tip on how to determine which processors support Client Hyper-V on Windows 8:

In order for a processor to support Client Hyper-V on Windows 8, the processor must support SLAT.

The following Intel processor SKUs support SLAT:

- Core i3
- Core i5
- Core i7

For a list of AMD processor SKUs that support SLAT, see here:

http://support.amd.com/us/kbarticles/Pages/GPU120AMDRVICPUsHyperVWin8.aspx

Tip: If you have a processor that supports SLAT but you can't enable Client Hyper-V when Windows 8 is installed on the machine, check to make sure you have the latest BIOS update.

For more great admin tips, check out http://www.windowsnetworking.com/kbase/



5. Windows Networking Tip of the Month
-------------------------------------------------------------

If you haven't heard about Azure Virtual Machines and Virtual Networks, then you're in for a treat. Azure has, in the past, been a playground for devs and many IT pros felt it really didn't have much to offer them. With the new Azure Virtual Machines and Virtual Networks, you have a real Infrastructure as a Service solution where you can spin up virtual machines in minutes to extend your corporate network into the cloud. Consider a scenario where your current datacenter is at capacity. You want to start up a new service for one of your business units. What do you do? Do you requisition some hardware and make your business unit wait three months? Or do you opt to stand up the new service in Windows Azure Virtual Machines and Virtual Networks and do that in a day? I know what I would do. Check out this new offering: http://www.windowsazure.com/en-us/home/scenarios/virtual-machines/



6. Windows Networking Links of the Month
-------------------------------------------------------------

- Azure Site to Site VPN Fails to Transmit Dataâ€"Tales of NAT Traversal
http://blogs.technet.com/b/privatecloud/archive/2013/04/10/azure-site-to-site-vpn-fails-to-transmit-data-tales-of-nat-traversal.aspx

- Active Directory Considerations in Azure Virtual Machines and Virtual Networks Part 5 â€" Domains and GCs
http://blogs.technet.com/b/privatecloud/archive/2013/04/09/active-directory-considerations-in-azure-virtual-machines-and-virtual-networks-part-5-domains-and-gcs.aspx

- Configure NIC teaming and QoS with VMM 2012
http://blogs.technet.com/b/privatecloud/archive/2013/04/03/configure-nic-teaming-and-qos-with-vmm-2012-sp1-by-kristian-nese.aspx

- Hyper-V Replica Certificate Based Authentication - makecert
http://blogs.technet.com/b/virtualization/archive/2013/04/13/hyper-v-replica-certificate-based-authentication-makecert.aspx

- Updated Links on Windows Server 2012 File Server and SMB 3.0
http://blogs.technet.com/b/josebda/archive/2013/04/11/updated-links-on-windows-server-2012-file-server-and-smb-3-0.aspx

- Get the best RDP 8.0 experience when connecting to Windows 7: What you need to know
http://blogs.msdn.com/b/rds/archive/2013/04/09/get-the-best-rdp-8-0-experience-when-connecting-to-windows-7-what-you-need-to-know.aspx



7. Ask Sgt. Deb
-------------------------------------------------------------

QUESTION:

Hey Deb,

Someone said to me that the unsung hero of Windows Server 2012 is the new RDP server. I haven't heard anything about that. What's new?

Thanks! â€" Karl.

ANSWER:

"Someone" is right. Windows Server 2012 Remote Desktop Services has been significantly improved so that you can support connectivity scenarios for users who have low bandwidth or jittery connections. Users now have access to a very rich experience, even more like what they experience when they are running the desktop experience directly on their own computers. What's even better, you can enable almost the same great RDP experience with Windows 7 computers. Some of the things you get include:

- Remote Desktop Connection 8.0 Client
- Dynamic In-Session USB Redirection
- Improved single sign on experience for Remote Desktop Web Access
- Reconnect for RemoteApp and Desktop Connections
- Support for Lync 2013 in VDI <http://blogs.msdn.com/b/rds/archive/2012/07/24/fast-and-fluid-audio-video-experience-with-the-new-lync-and-remotefx.aspx>
- Support for Nested Sessions <http://blogs.msdn.com/b/rds/archive/2012/09/06/remote-desktop-protocol-8-0-supports-nested-sessions.aspx>

When you enable RDP 8.0 for Windows 7 SP1, you get:

- RemoteFX for WAN <http://blogs.msdn.com/b/rds/archive/2012/08/23/remotefx-for-wan-overview-of-intelligent-and-adaptive-transports-in-windows-8-and-windows-server-2012.aspx>
- RemoteFX Network Auto Detect <http://blogs.msdn.com/b/rds/archive/2012/08/23/remotefx-for-wan-overview-of-intelligent-and-adaptive-transports-in-windows-8-and-windows-server-2012.aspx>
- RemoteFX Adaptive Graphics <http://blogs.msdn.com/b/rds/archive/2012/08/06/remotefx-adaptive-graphics-in-windows-server-2012-and-windows-8.aspx>
- RemoteFX Media Streaming <http://blogs.msdn.com/b/rds/archive/2012/08/16/enabling-a-seamless-multimedia-experience-with-remotefx-media-streaming-in-windows-server-2012-and-windows-8.aspx>
- RemoteFX USB Redirection <http://blogs.msdn.com/b/rds/archive/2012/09/11/remotefx-usb-redirection-in-windows-server-2012-and-windows-8.aspx>
- Support for Nested Sessions <http://blogs.msdn.com/b/rds/archive/2012/09/06/remote-desktop-protocol-8-0-supports-nested-sessions.aspx>
- Performance counters for monitoring user experience

Give it a try, I think you'll love RDP 8.0.



WindowsNetworking.com Sections
-----------------------------------------------------------------
- Articles & Tutorials (http://www.windowsnetworking.com/articles-tutorials/)
- KBase Tips (http://www.windowsnetworking.com/kbase/WindowsTips/)
- Products (http://www.windowsnetworking.com/software/)
- Reviews (http://www.windowsnetworking.com/articles-tutorials/product-reviews/)
- Free Tools (http://www.windowsnetworking.com/software/Free-Tools/)
- Blogs (http://www.windowsnetworking.com/blogs/)
- Forums (http://forums.windowsnetworking.com/)
- White Papers (http://www.windowsnetworking.com/white-papers/)
- Contact Us (http://www.windowsnetworking.com/pages/contact-us.html)



Techgenix Sites
-----------------------------------------------------------------
- MSExchange.org (http://www.msexchange.org/)
- WindowSecurity.com (http://www.windowsecurity.com/)
- VirtualizationAdmin.com (http://www.virtualizationadmin.com/)
- ISAserver.org (http://www.isaserver.org/)
- MSPanswers.com (http://www.mspanswers.com/)
- WServerNews.com (http://www.wservernews.com/)


--
Visit the Subscription Management (http://www.techgenix.com/newsletter/) section to unsubscribe.
WindowsNetworking.com is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@WindowsNetworking.com
Copyright WindowsNetworking.com 2013. All rights reserved.

No comments: