vlad mazek own web now corp ceo, mcse, mcsa, cissp [email protected] (877) 546-0316 [email protected]...

31
Vlad Mazek Vlad Mazek Own Web Now Corp Own Web Now Corp CEO, MCSE, MCSA, CEO, MCSE, MCSA, CISSP CISSP [email protected] [email protected] (877) 546-0316 (877) 546-0316 Portions reproduced with permission from Dean Calvert http://www.sbsusers.net

Upload: maximilian-bryant

Post on 21-Jan-2016

219 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Vlad MazekVlad MazekOwn Web Now CorpOwn Web Now CorpCEO, MCSE, MCSA, CEO, MCSE, MCSA, CISSPCISSP

[email protected]@owncorp.com(877) 546-0316(877) 546-0316

Portions reproduced with permission from Dean Calvert

http://www.sbsusers.net

Page 2: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What is Microsoft SBS 2003?What is Microsoft SBS 2003?

• Microsoft Windows 2003 Server, Standard Microsoft Windows 2003 Server, Standard Edition with add-on WMI wizards for easy Edition with add-on WMI wizards for easy installation.installation.

• Standard editions of Microsoft Exchange Standard editions of Microsoft Exchange 2003, Microsoft SQL Server 2000 (Premium), 2003, Microsoft SQL Server 2000 (Premium), Microsoft ISA 2000/2004 (Premium/SP1).Microsoft ISA 2000/2004 (Premium/SP1).

• Competitive bundle available for single Competitive bundle available for single server, single forest installations.server, single forest installations.

• Limited to 75 users, priced at $599 & $1499.Limited to 75 users, priced at $599 & $1499.

Page 3: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?Standard EditionStandard Edition• Windows Server 2003 SP1 (337Mb)Windows Server 2003 SP1 (337Mb)• Windows SharePoint Services 2.0 SP1 Windows SharePoint Services 2.0 SP1

(4Mb)(4Mb)• Exchange Server 2003 SP1 (101Mb)Exchange Server 2003 SP1 (101Mb)• Windows XP SP2 support (273Mb)Windows XP SP2 support (273Mb)• Outlook 2003 SP1 for client deploymentOutlook 2003 SP1 for client deployment• ActiveSync 3.8ActiveSync 3.8• SQL 2000 SP4 for SharePoint (WSMDE) & SQL 2000 SP4 for SharePoint (WSMDE) &

Monitoring (MSDE) databasesMonitoring (MSDE) databases• SBS2003 SP1 component (210Mb)SBS2003 SP1 component (210Mb)

Copyright © Dean Calvert

http://www.sbsusers.net

Page 4: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?Premium EditionPremium Edition

• Everything included in the Standard SBSEverything included in the Standard SBS

• SQL Server 2000 SP4 for SQL SharePoint, SQL Server 2000 SP4 for SQL SharePoint, LOB & ISA 2004LOB & ISA 2004

• ISA Server 2004 with SP1ISA Server 2004 with SP1

Copyright © Dean Calvert

http://www.sbsusers.net

Page 5: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• SBS 2003 SP1 ComponentSBS 2003 SP1 ComponentEnhancements to the Information Center page in Enhancements to the Information Center page in Server Management, enabling easier access and Server Management, enabling easier access and participation in community Newsgroup and participation in community Newsgroup and Community web site (access web chats, user groups, Community web site (access web chats, user groups, KB articles, other resources)KB articles, other resources)

Pages of Your Company Web Site are Not Displayed Pages of Your Company Web Site are Not Displayed in Internet Search Resultsin Internet Search ResultsWindows Small Business Server 2003 SP1 includes Windows Small Business Server 2003 SP1 includes an update that prevents Web robots from cataloging an update that prevents Web robots from cataloging all or part of your company’s internal Web site. Prior all or part of your company’s internal Web site. Prior to release of this update, this was manual.to release of this update, this was manual.

Page 6: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• Windows Server Service Pack 1Windows Server Service Pack 1

Data execution protectionData execution protectionEnhanced securityEnhanced securityIncreased reliabilityIncreased reliability

Page 7: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• Windows Sharepoint Services Service Pack Windows Sharepoint Services Service Pack 11

Significant security enhancementsSignificant security enhancementsImproved support for large filesImproved support for large filesStability and performance improvementsStability and performance improvements

Page 8: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• Exchange Server 2003 Service Pack 1Exchange Server 2003 Service Pack 1

Exchange Server 2003 is automatically Exchange Server 2003 is automatically configured to reject mail sent to accounts that configured to reject mail sent to accounts that don’t exist in AD directory servicedon’t exist in AD directory serviceNew functionality to prevent spammers from New functionality to prevent spammers from harvesting valid accounts from Active Directoryharvesting valid accounts from Active Directory

Page 9: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• Outlook 2003 Service Pack 1Outlook 2003 Service Pack 1

Outlook 2003 SP1 deployed to client computers Outlook 2003 SP1 deployed to client computers where Outlook was installedwhere Outlook was installed

Latest security fixes and settings for Outlook 2003Latest security fixes and settings for Outlook 2003

Improvements to the junk email filterImprovements to the junk email filter

Improved options for Rules and AlertsImproved options for Rules and Alerts

Page 10: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• Windows XP Service Pack 2Windows XP Service Pack 2

Windows XP SP2 installed by default on client Windows XP SP2 installed by default on client computers running Windows XPcomputers running Windows XP

Windows firewall automatically enabled on client Windows firewall automatically enabled on client computers running Windows XP SP2computers running Windows XP SP2

Pre-determined firewall configuration for security Pre-determined firewall configuration for security and functionalityand functionality

Security center enabled to warn users of problems Security center enabled to warn users of problems

Page 11: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• SQL Server 2000 Service Pack 4 (SBS SQL Server 2000 Service Pack 4 (SBS Premium)Premium)

A rollup of security and platform improvements A rollup of security and platform improvements since SQL Server 2000 Sp3a (currently ships with since SQL Server 2000 Sp3a (currently ships with SBS 2003)SBS 2003)

Automatic installation to the MSDE databases Automatic installation to the MSDE databases provided by SBS 2003 Monitoring, SharePoint and provided by SBS 2003 Monitoring, SharePoint and ISA Server 2004 (applies to Premium and ISA Server 2004 (applies to Premium and Standard edition)Standard edition)

Page 12: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

What’s in SBS2003 SP1?What’s in SBS2003 SP1?

• ISA Server 2004 (SBS Premium)ISA Server 2004 (SBS Premium)

Full-featured, application-layer-aware firewallFull-featured, application-layer-aware firewall

Virtual private network (VPN)Virtual private network (VPN)

Page 13: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Where can I get SBS2003 SP1?Where can I get SBS2003 SP1?

• Standard edition download available from: Standard edition download available from: www.microsoft.com/WindowsServer2003/swww.microsoft.com/WindowsServer2003/sbs/downloads/sp1/default.mspxbs/downloads/sp1/default.mspx

• Premium Edition available only by special Premium Edition available only by special order ($5) from: order ($5) from: https://www.microsoft.upgrade.com/sbshttps://www.microsoft.upgrade.com/sbs

• SP1 will be included in Action Pack & SP1 will be included in Action Pack & MSDN Universal Subscription.MSDN Universal Subscription.

Page 14: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Ordering SBS2003 SP1Ordering SBS2003 SP1

Copyright © Dean Calvert

http://www.sbsusers.net

Page 15: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Testing SBS2003 SP1Testing SBS2003 SP1

• Download components/order CDDownload components/order CD• ReadRead the release notes the release notes• Test in a non-production Test in a non-production

environment (Virtual PC)environment (Virtual PC)• Read the “Deployment Guide” Read the “Deployment Guide”

currently in its third revision.currently in its third revision.• Get plenty of drinks and snacks – Get plenty of drinks and snacks –

deployment takes 2-6 hours.deployment takes 2-6 hours.

Page 16: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Deploying SBS SP1Deploying SBS SP1

• Backup the entire system and verify backups.Backup the entire system and verify backups.• Reboot.Reboot.• Disconnect the Internet connection.Disconnect the Internet connection.• Shut down all applications.Shut down all applications.• Disable antivirus, antispam, antispyware and Disable antivirus, antispam, antispyware and

any 3any 3rdrd party services that would interfere with party services that would interfere with regular installation.regular installation.

• Find original SBS 2003 media (3 discs) and go.Find original SBS 2003 media (3 discs) and go.• SBS 2003 SP1 can not be uninstalled.SBS 2003 SP1 can not be uninstalled.

Page 17: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•Windows Server 2003 SP1Windows Server 2003 SP1

After about 10 minutes…

Copyright © Dean Calvert

http://www.sbsusers.net

Page 18: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•SharePoint Services 2.0 SP1SharePoint Services 2.0 SP1

Copyright © Dean Calvert

http://www.sbsusers.net

Page 19: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•Windows XP SP2 supportWindows XP SP2 support

Copyright © Dean Calvert

http://www.sbsusers.net

Page 20: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•Exchange Server 2003 SP1Exchange Server 2003 SP1

Copyright © Dean Calvert

http://www.sbsusers.net

Page 21: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•SBS2003 SP1SBS2003 SP1

Copyright © Dean Calvert

http://www.sbsusers.net

Page 22: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

• ISA Server 2004 with SP1ISA Server 2004 with SP1– Cannot download ISA Server 2004, Cannot download ISA Server 2004,

must order the CD from Microsoftmust order the CD from Microsoft– DO NOT install any other ISA2004 DO NOT install any other ISA2004

version (eg from ISA2k4 CDs) as version (eg from ISA2k4 CDs) as additional scripts are necessary to additional scripts are necessary to move settings from ISA2k move settings from ISA2k installationinstallation

Copyright © Dean Calvert

http://www.sbsusers.net

Page 23: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Installation ProcessInstallation Process

•SQL Server 2000 SP4SQL Server 2000 SP4– SBSMONITORING and SHAREPOINT are SBSMONITORING and SHAREPOINT are

upgraded by SBS SP1 automaticallyupgraded by SBS SP1 automatically– If SHAREPOINT is running with full SQL If SHAREPOINT is running with full SQL

Server 2000 then upgrade manuallyServer 2000 then upgrade manually– Other instances need to be upgraded Other instances need to be upgraded

individually where SP4 is supported for individually where SP4 is supported for that LOB app (check with vendor)that LOB app (check with vendor)

Don’t need to upgrade MSFW

instance – already upgraded by ISA installation

Copyright © Dean Calvert

http://www.sbsusers.net

Page 24: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

After The InstallationAfter The Installation

• Select the domain to log into.Select the domain to log into.

• Re-enable antivirus, antispyware, and any Re-enable antivirus, antispyware, and any third party software & services.third party software & services.

• Re-connect your system to the network.Re-connect your system to the network.

• Do Do NOTNOT run W2k3 SP1 Security run W2k3 SP1 Security Configuration WizardConfiguration Wizard

• Delete “wxpsp1” folder under ClientApps Delete “wxpsp1” folder under ClientApps folderfolder

Copyright © Dean Calvert

http://www.sbsusers.net

Page 25: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

If all goes well….If all goes well….

• RebootReboot• Check all business-critical services.Check all business-critical services.• Create and verify a new full backup set.Create and verify a new full backup set.• Run MBSA to check that all components Run MBSA to check that all components

are up to date.are up to date.• Review “Completing the setup” Review “Completing the setup”

documents provided by Microsoft at:documents provided by Microsoft at: http://go.microsoft.com/fwlink/?LinkId=45058http://go.microsoft.com/fwlink/?LinkId=45058

Page 26: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For (AD)Things To Watch For (AD)

• Need to be logged in as the built in Need to be logged in as the built in Administrator account (the 500 a/c)Administrator account (the 500 a/c)

• DSRestore error messagesDSRestore error messages– Synchronization of AD & non-AD Synchronization of AD & non-AD

administrator account passwordadministrator account password– No patch available yet.No patch available yet.

Copyright © Dean Calvert

http://www.sbsusers.net

Page 27: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For (LOB)Things To Watch For (LOB)

• Ensure Outlook 2003 is in the ClientApps Ensure Outlook 2003 is in the ClientApps folder prior to the installationfolder prior to the installation

• If the folder is not present SP1 install will If the folder is not present SP1 install will end with an error.end with an error.

• Progress bar loops around (as different Progress bar loops around (as different components are being installed)components are being installed)

Page 28: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For (IIS)Things To Watch For (IIS)

• Default Web Site index (Default.asp) is Default Web Site index (Default.asp) is overwritten during the SP1 installation.overwritten during the SP1 installation.

• SharePoint Team Services full-text search SharePoint Team Services full-text search is disabled. To enable go to Start > is disabled. To enable go to Start > Administrative Tools > SharePoint Administrative Tools > SharePoint Administration > Component Administration > Component Configuration > Configure full-text search.Configuration > Configure full-text search.

Page 29: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For (ISA)Things To Watch For (ISA)

• If ISA 2000 firewall client was installed via If ISA 2000 firewall client was installed via GP using MSI, uninstall from clients prior to GP using MSI, uninstall from clients prior to ISA 2004 installationISA 2004 installation

• Export ISA 2000 certificate (private key) Export ISA 2000 certificate (private key) before ISA 2004 installation. Import ISA before ISA 2004 installation. Import ISA 2000 certificate after ISA 2004 installation.2000 certificate after ISA 2004 installation.

Page 30: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For (ISA)Things To Watch For (ISA)

• If the ISA Server 2004 installation fails because If the ISA Server 2004 installation fails because it could not read the product key from the it could not read the product key from the registry, you can start the ISA Server 2004 registry, you can start the ISA Server 2004 installation wizard from the command line.installation wizard from the command line.

• If you want to reinstall ISA Server 2004 by If you want to reinstall ISA Server 2004 by using a configuration file that you saved using a configuration file that you saved previously, use the following syntax:previously, use the following syntax:

Sbsisa2k4setup /IMPORTFILE " Sbsisa2k4setup /IMPORTFILE " C:\importfile.xmlC:\importfile.xml " "

Page 31: Vlad Mazek Own Web Now Corp CEO, MCSE, MCSA, CISSP vlad@owncorp.com (877) 546-0316 vlad@owncorp.com Portions reproduced with permission from Dean Calvert

Things To Watch For Things To Watch For (SQL)(SQL)• Do not upgrade the instance of MSDE Do not upgrade the instance of MSDE

installed for Monitoring (SBSMONITORING), as installed for Monitoring (SBSMONITORING), as it is not supported.it is not supported.

• If SQL 2000 SP4 upgrade of SharePoint If SQL 2000 SP4 upgrade of SharePoint instances returns errors:instances returns errors:

"SHAREPOINT is not a SQL Server 2000 instance. Setup will now exit.""SHAREPOINT is not a SQL Server 2000 instance. Setup will now exit.""SQL Server 2000 is not installed on this machine. Setup will now exit.“"SQL Server 2000 is not installed on this machine. Setup will now exit.“

• Upgrade SharePoint WMSDE instance to full Upgrade SharePoint WMSDE instance to full SQL 2000, then install SQL 2000 SP4 again.SQL 2000, then install SQL 2000 SP4 again.