Archive for the ‘Training’ category

Training: 44CO175 – SharePoint 2010 Administrator Bootcamp

July 8th, 2010

44CO175 – SharePoint 2010 Administrator Bootcamp (BPIO)

Summary
Step-by-step understanding is key to successfully implementing and deploying SharePoint 2010. This 15-module course will guide you through each critical stage, giving you exactly the skills you need to leverage full value from the latest SharePoint technology.


Agenda
Module 0 – Getting Ready for a SharePoint 2010 Implementation: Why Governance and Business Requirements are Essential for a Successful Implementation.
Module 1 – Understanding the Architecture of SharePoint Server 2010
Module 2 – Installing SharePoint Server 2010.
Module 3 – Administrating and Configuring Farm Settings in SharePoint Server 2010
Module 4 – Understanding and Administrating Web applications
Module 5 – Managing Web Applications
Module 6 – Introduction to Site Collections
Module 7 – Creating Site Collections
Module 8 – Managing Site Collections
Module 9 – Working with SharePoint Server 2010 Portals
Module 10 – Governance and Information Assurance
Module 11 – Enterprise Content Types & Managed Metadata
Module 12 – Managing Documents and Records
Module 13 – Workflow
Module 14 – Implementing and Managing Search
Module 15 – People & Social Networking
Module 16 – Disaster Recovery

A handful of notes from the week..

Installation Preparation for Service & Install Accounts 

The SharePoint Installation Account

While I’ve become used to installing applications on servers with either the local or domain admin account, SharePoint 2010 really really really needs to have its own account created for the installation process. If you don’t you’ll have to correct the various service and app pool accounts later and that’s a pain.

Key points about the account used to install with -

  • It will become the application pool account used in IIS for the Central Admin
  • If you do plan to let SharePoint create your databases (content DBs’ etc…) this account needs rights to the SQL database to create DB’s (DBCreator and DBAdmin)
  • If DB’s are already created then it only needs DBAdmin
  • It only needs Local Admin permissions on the installation machine
  • Not to be used in day-to-day admin
  • Imagine this account to be “enterprise admin” of SharePoint.
  • It should never be used again after the initial install, obviously that doesn’t mean disable or delete it.

Example User Account – spinstall

The Farm Admin Account

 The farm admin account is an account that should be used by as few people as possible.

  • It either needs to be a local admin on the SharePoint front end or create a new supper user or login as spinstall(logging in as spinstall is not recommended)
  • The farm admin account change services running on the machine hence the need for local admin rights, farm admin right in SharePoint central admin isn’t enough

Example User Account - spfarmadmin

During the SharePoint 2010 install

 Make sure you move index location during install off from the C:…14data location

 This index file is a flat file used in search and can grow very large in next to no time.

After the install – the Configuration Wizard

Do not use it, it doesn’t follow best practice.

 Performance Tip for SharePoint databases 

Turn off Auto Growth

While it’s been mentioned a thousand times and shouldn’t need to be mentioned…

To prevent it happening in existing installations for any new databases:

SQL Management  Studio > Database > Model. Under the file groups section  change the properties for .mdf to grow by 50MB at a time

Fixing it for existing databases:

Open the properties of each database and under the file groups section, change the properties for .mdf to grow by 50MB at a time

Note: Why 50MB? Because it’s just right for SharePoint since it aligns with the default maximum upload file size.

Registering Managed Service Accounts for SharePoint 2010

  • Best practice is to add them here first then start to use them to run services
  • All are generally fine  as just domain user accounts without elevated privileges

Application Pool Accounts in IIS for SharePoint 2010

 Never change the app pool account from inside IIS as the config DB will not know about the change, web apps will not know about the change and new servers added to the farm will not know which account to use.

One of the few things you can and do need to configure in IIS is SSL certificates and also needs to be done on each and every web front end.

Training – SQL Server MasterClass (Kim Tripp & Paul Randal – www.SQLskills.com)

June 17th, 2010

As posted many times before, continous professional development through training and education is absolutely core of our IT consulting business, The Full Circle (www.thefullcircle.com).

Today is a good day for that mantra as we are attending an excellent training seminar by SQL MVP’s and founders of www.SQLskills.com - SQL Server MasterClass

My scribbles from the day.. and the formal agenda, speaker bio’s, etc. at the end

Bridging the gap between Development & Production..

DBA’s & Developers not communicating and the reluctant/involentary DBA..

The dilema of development, change control, production scheduling, and customer demands for new features

4 features that break an Enterprise to Standard restore – Partitioning, data compression, …, …

How Design Affects Production
Design considerations such as capacity planning up front to scale databases correctly, try to avoid autogrowth! & Log file fragmentation (LVF’s etc.)

Use of correct data types e.g. Use of bigint for small numbers, datetime when you only really need date, etc. – why use 16-bytes when you can use 4!

Disk maybe cheap, but memory overhead across a system is not.

Indexing – design them, not ad-hoc!

Resouce Governer – limit ad-hoc SQL query users

Naming conventions – obvious in any system (or should be!), makes long term management easier

Design choices affecting maintenance e.g. Fixed vs. Variable length impacting the ability to perform online index rebuilds or not!

Even some some MS apps break this such as SharePoint!

Nested Transactions – avoid!  ..they are evil!  (nested begins, only free resource at end of first transaction)

Instant File Initialisation (IFI) – restores create the file the full with zeros unless IFI is enabled.

Parameterization – trying to get your plan in cache, optimize at dB level.

Phyical dB layout – as dB’s become larger partioning into multiple filegroups is necessary – what’s a large dB? over 100GB you need to consider, TB absolutely!

Measuring your restores to check against your SLA’s – restores take longer than backup, ballpark 25% more, you can break your maintenance window (& SLA’s) by underestimating the restore time.

Primary Key Choice – obvious but not always followed.

Indexing Strategies – difficult!

Database Maintenance – lack of causes problems!

Real Testing!!! – developers need access to similar environment to live otherwise

Myth Buster – top 10 myths debunked, taken from Paul’s Myth a day posts in April at SQLskills.com/blogs/Paul/Misconceptions

e.g. Failover Clustering is best HA for SQL..? It depends!
Read more at “Proven SQL Server Architectures for High Availability and Disaster Recovery – http://download.microsoft.com/download/5/B/D/5BD13FFA-5E34-4AE1-9AA0-C6E6951B8FC8/SQL%20Server%202008%20R2%20High%20Availability%20Architecture%20White%20Paper.docx”

Tempdb or transaction log should be x% of the size of the largest dB – it depends! If you had a 10TB dB would you have 25% allocated for the log? e.g. 2.5TB wasted on logs.. NO!

use of single user mode, and admin connections.. the :m. and :a. startup switches

DR handbook should be written  by the most experienced member of the team, but tested by the most junior – who’d going to be holding the pager when the system goes bang at 02:00 on a Sunday…?  likely not the architect!

GUIDs: Use, Abuse, and How To Move Forward
Dilema of GUIDs everywere, great for uniqueness, not so great if used for non-clustered indexes and used as a primary key (due to it’s uniqueness) – back to using the correct data types, why use a 64-byte key when a 4-byte key will suffice – for a 10,000 row table this can mean an internal system index of 400Mb, a 64-byte key will be nearer 5GB – just for the system!

Massive performance and storage gains to be had from correct use of GUIDs – see Kimberly’s blog post on this for more info at http://www.sqlskills.com/BLOGS/KIMBERLY/post/GUIDs-as-PRIMARY-KEYs-andor-the-clustering-key.aspx

The Top-Ten List…

10) Data File Management – you can have up to 32768 files per database, and a minimum of two being the MDF & LDF, but just because you can doesn’t mean you should!  However, careful placement of physical files on different storage types can add huge value to your SQL environment..

9) Transaction Log file management – only one log file is necessary, try and isolate from the data files to avoid disk head contention, use appropriate RAID (not RAID 5 as has high overheads for write & logs are write intensive)
8) Tempdb – tempdb is a special case as it is very susceptible to contention issues because only 1 per instance and 1 tempdb file per processor core, you can now create multiple files to spread the contention. KB328551 maybe suitable in your environment.
Guideline for number of tempdb files, .25-.5 the number of cores.

7) Indexing Best Practice – dont’t go crazy with indexes, as with data files, just because you can.. doesn’t mean you should!  if anything try to reduce your indexes!  Good workload analysis to determine characteristics and query priority as over-indexing can be worse than under indexing.  Poorly maintained indexes can be more trouble in the long term – be sure to automate index maintenance.  A narrow index has very few issues, a wide one has the potential for many more!

6) Statistics

5) Index Fragmentation – Fragmentation Defined.. two broad types: internal (wasted space on data/indexes aka physical defragmentation) & logical (..)
Main causes.. GUID as high-order key, updates to variable length columns, badly configured FILLFACTOR, wide schemas that only fit a small number of rows per page
Keys to success.. how to read the data
How to correct.. create index with drop_existing, rebuild the index, defrag the index
Most folks rebuild or reorganise but their are tradeoffs.. how much disk space have you got? ;-)  

4)

3) I/O errors – 823/824 errors have already been retried 4 times before you find out that the I/O subsystem has transient problems.  monitor for error 825 – read errors

2) DBCC CHECKDB – see the blog post http://sqlskills.com/BLOGS/PAUL/category/CHECKDB-From-Every-Angle.aspx
How often should you run CHECKDB – at least once per week – yikes!, how long will it take? – it depends!   but if it starts to take longer it normally means a problem.

1) Recovering Using Backups – best way to avoid data loss but not necessarily the best way to avoid downtime so consider other mechanisms to full backups such as log shipping, mirroring, etc.  Recommend at least Full & Log backups but frequently e.g. full weekly, logs as often as every 5 minutes… however Differentials are better – redundancy in the backups

Q&A – I asked about placement of tempdb in a failover cluster and if there is a downside to putting it on non-cluster shared storage e.g. a local SSD drive or RAMdisk – no, this is fine as long as the same drive letter is available on each node as the tempdb is flushed and recreated everytime SQL starts anyway & got yet another geek polo shirt – my wife will love that… ;-)

more info at.. www.SQLskills.com

www.SQLskills.com/webcasts.asp - over 50hrs of free online training resources

Formal Event notes, background, agenda, speaker bio’s, etc.

www.regonline.co.uk/kimtrippsql
This special one-day event will focus on some of the top issues companies face when implementing and maintaining a SQL Server-based solution. Very often there is no dedicated DBA and so the IT managers struggle to keep the data tier performing well and the data available. This can be especially troublesome when the development team is unaware of how application design choices affect database performance.

SESSIONS SNAPSHOT
During the day Kimberly and Paul will:
Debunk many of the ingrained misconceptions around SQL Server’s behaviour
Show you disaster recovery techniques critical to preserving your company’s life-blood – the data
Explain how a common application design pattern can wreak havoc in the database
Walk through the top-10 points to follow around operations and maintenance for a wellperforming and available data tier

SESSIONS ABSTRACTS
KEYNOTE: Bridging the Gap Between Development and Production
Applications are commonly developed with little regard for how design choices will affect performance in production. This is often because developers don’t realize the implications of their design on how SQL Server will be able to handle a high workload (e.g. blocking, fragmentation) and/or because there’s no full-time trained DBA that can recognize production problems and help educate developers. The keynote sets the stage for the rest of the day. Discussing some of the issues that can arise, explaining how some can be avoided and highlighting some of the features in SQL 2008 that can help developers and DBAs make better use of SQL Server, and troubleshoot when things go wrong.

SESSION ONE: SQL Server Mythbusters
It’s amazing how many myths and misconceptions have sprung up and persisted over the years about SQL Server - after many years helping people out on forums, newsgroups, and customer engagements, Paul and Kimberly have heard it all. Are there really non-logged operations? Can interrupting shrinks or rebuilds cause corruption?
Can you override the server’s MAXDOP setting? Will the server always do a table-scan to get a row count? Many myths lead to poor design choices and inappropriate maintenance practices so these are just a few of many, many myths that Paul and Kimberly will debunk in this fast-paced session on how SQL Server operates and should be managed and maintained.

SESSION TWO: Database Recovery Techniques Demo-Fest
Even if a company has a disaster recovery strategy in place, they need to practice to make sure that the plan will work when a disaster does strike. In this fast-paced demo session Paul and Kimberly will repeatedly do nasty things to databases and then show how they are recovered – demonstrating many techniques that can be used in production for disaster recovery. Not for the faint-hearted!

SESSION THREE: GUIDs: Use, Abuse, and How To Move Forward
Since the addition of the GUID (Microsoft’s implementation of the UUID), my life as a consultant and “tuner” has been busy. I’ve seen databases designed with GUID keys run fairly well with small workloads but completely fall over and fail because they just cannot scale. And, I know why GUIDs are chosen – it simplifies the handling of parent/child rows in your batches so you can reduce round-trips or avoid dealing with identity values. And, yes, sometimes it’s even for distributed databases and/or security that GUIDs are chosen. I’m not entirely against ever using a GUID but overusing and abusing GUIDs just has to be stopped! Please, please, please let me give you better solutions and explanations on how to deal with your parent/child rows, round-trips and clustering keys!

SESSION 4: Essential Database Maintenance
In this session, Paul and Kimberly will run you through their top-ten database maintenance recommendations, with a lot of tips and tricks along the way. These are distilled from almost 30 years combined experience working with SQL Server customers and are geared towards making your databases more performant, more available, and more easily managed (to save you time!). Everything in this session will be practical and applicable to a wide variety of
databases. Topics covered include: backups, shrinks, fragmentation, statistics, and much more! Focus will be on 2005 but we’ll explain some of the key differences for 2000 and 2008 as well.

SPEAKER BIOGRAPHIES
Paul and Kimberly are a husband-and-wife team who own and run SQLskills.com, a world-renowned SQL Server consulting and training company.
They are both SQL Server MVPs and Microsoft Regional Directors, with over 30 years of combined experience on SQL Server. Paul worked on the SQL Server team for nine years in development and management roles, writing many of the DBCC commands, and ultimately with responsibility for core Storage Engine for SQL Server 2008. Paul writes extensively on his blog
(SQLskills.com/blogs/Paul) and for TechNet Magazine, for which he is also a Contributing
Editor. Kimberly worked on the SQL Server team in the early 1990s as a tester and writer before leaving to found SQLskills and embrace her passion for teaching and consulting. Kimberly has been a staple at worldwide conferences since she first presented at TechEd in 1996, and she blogs at SQLskills.com/blogs/Kimberly. They have written Microsoft whitepapers and books for SQL Server 2000, 2005 and 2008, and are regular, top-rated
presenters worldwide on database maintenance, high availability, disaster recovery, performance tuning, and SQL Server internals. Together they teach the SQL MCM certification and throughout Microsoft.
In their spare time, they like to find frogfish in remote corners of the world.

SPEAKER TESTIMONIALS
“To call them good trainers is an epic understatement. They know how to deliver
technical material in ways that illustrate it well. I had to stop Paul at one point and
ask him how long it took to build a particular slide because the animations were so
good at conveying a hard-to-describe process.”
“These are not beginner presenters, and they put an extreme amount of
preparation and attention to detail into everything that they do. Completely,
utterly professional.”
“When it comes to the instructors themselves, Kimberly and Paul simply have no
equal. Not only are they both ultimate authorities, but they have endless
enthusiasm about the material, and spot on delivery. If either ever got tired they
never showed it, even after going all day and all week. We witnessed countless
demos over the course of the week, some extremely involved, multi-step
processes, and I can’t recall one that didn’t go the way it was supposed to.”
“You might think that with this extreme level of skill comes extreme levels of
egotism and lack of patience. Nothing could be further from the truth. … They
simply know how to teach, and are approachable, humble, and patient.”
“The experience Paul and Kimberly have had with real live customers yields a lot
more information and things to watch out for than you’d ever get from
documentation alone.”
“Kimberly, I just wanted to send you an email to let you know how awesome you
are! I have applied some of your indexing strategies to our website’s homegrown
CMS and we are experiencing a significant performance increase. WOW….amazing
tips delivered in an exciting way! Thanks again”
Kimberley L. Tripp
Paul S.Randal

Training – Updating Your Technology Knowledge of Microsoft Windows XP to Windows 7

December 14th, 2009

 

Activity description: 44CO135 – Updating Your Technology Knowledge of Microsoft Windows XP to Windows 7 (M6291)

Summary:

This two-day instructor-led course provides students with the knowledge and skills to work with the new technologies in Windows Vista and Windows 7. This course is intended for individuals who already have experience with Windows XP to upgrade their skills to Windows 7.

Objectives:

After completing this course, students will be able to:

•Manage the desktop settings that personalize the computing experience.
•Describe how Windows 7 Beta Search enhancements improve productivity.
•Implement Search Federation to search remote data sources within the enterprise infrastructure.
•Describe the new Group Policy Preferences and Administrative Templates that are available to IT professionals who manage Group Policy Objects.
•Describe how IT professionals use the Group Policy Management Console to create scripts that manage Group Policy Objects.
•Identify and use the improvements made to the latest version of PowerShell.
•Describe how DirectAccess enables IT professionals to remotely manage and update user PCs.
•Describe the platform and network requirements necessary to implement DirectAccess.
•Describe the VPN reconnection features and the platform and network requirements.
•Illustrate how to use Group Policy to prevent specific types of files from being synchronized to the server.
•Describe how BranchCache improves user productivity in branch offices by caching content from remote file and Web servers in branch locations.
•Administer new User Account Control security settings to improve the end-user computing experience.
•Describe how AppLocker enables IT Professionals to specify the programs that are allowed to run on user desktops.
•Describe how Windows 7 Beta improves upon the firewall policy by allowing IT professionals to identify multiple active firewall profiles.
•Describe new Windows 7 Beta features as they relate to Windows Deployment Services and virtualization.
•Explain how the Problem Steps Recorder can be used to reproduce and record experiences with an application failure.
•Summarize key components of the Windows Troubleshooting Platform and run the troubleshooting wizard from the Start menu for a specific problem.
•Identify how unified tracing provides IT professionals with a single tool for troubleshooting issues in the Windows 7 Beta networking stack.
•Describe how Windows Management Instrumentation provides IT professionals with programmatic access to reliability data, enabling them to check stability status and review recent events remotely.
•Describe how to use the Device Manager and Devices and Printers to manage devices

Top tips & resources picked up during the course…

- Windows 7 is the last O/S from Microsoft available in a 32-bit sku, the reason still available on x86/32-bit is due to global economic conditions, to extend the life of older hardware (and not limiting the deployment of 7).

- Group Policy Preferences brought in with Server 2008 and allows user changes after the policy has been deployed.
Group Policy Audit Tool – auditpol.exe
AD DS Auditing Step-by-Step Guide – http://technet.microsoft.com/en-us/library/cc731607(WS.10).aspx

- Deployment accelerators at www.microsoft.com/springboard (‘Quickly access resources designed to ease the deployment and management of your Windows client infrastructure’), also check Stephen Rose at http://blogs.technet.com/stephenrose/

- DirectAccess & SBS… wait for SBS 2008 R2

- Windows 7 & Windows Server 2008 R2 is DoD Suite B compliant
Use BitLocker and BitLocker to go on all your mobile devices

- Google hacking… Andy showed us the interesting stuff that can be done with Google Hacking e.g. goto www.google.com and type in the search bar site:mil filetype:pdf “top secret”
also the use of the ‘similar’ button to get around site logon

Training – Updating Your Windows Server 2008 Technology Specialist Skills to R2

December 9th, 2009

This week I have another couple of days out of the office (or our clients office) for yet more Microsoft Partner training - 2 days of updating your Technology Specialist skills Windows Server 2008 R2.

Updating Your Windows Server 2008 Technology Specialist Skills to R2

This course is so hot off the press that the materials were only delivered last Thursday… e.g. buggy labs – fun to fix! ;-) , no course DVD cut as yet, and a speaker that doesn’t know the materials, and fortunately doesn’t need too… as it’s being delivered by  Andy Mallone (www.quality-training.co.uk/blog/ & http://www.divedeeperevents.com/)

Andy is an MVP in Windows Server, has been an MCT for 15 years (had a 4-digit MCP id), is a speaker at various events inc. just back from TechEd delivering , and will be in Redmond in 2 months time as an external member of the Windows 8 product team… likely to be the first x64 only client OS from Microsoft.

Global Knowledge use the strap line ‘Experts teaching Experts’ – they have nailed it on this one. :-)

Anyway, on to the course (Top tips as usual at the end..):

Activity name: 44CO149 – Updating Your Windows Server 2008 Technology Specialist Skills to R2

Facility: Global Knowledge, London, 83 Baker Street, W1U 6AG

Who: Andy Mallone (www.quality-training.co.uk/blog/)
MVP Windows Server, MCT for 15 years, speaker at various events inc. just back from TechEd, and will be in Redmond in 2 months time as an external member of the Windows 8 product team!

Andy Malone has a deep and broad understanding so far beyond the subject (and that your average instructor) that allowed him to easily fill in the gaps in the somewhat lacking and already outdated course materials.  The result was ‘quality training’ that has made a real difference to our long term understanding and ability to work with Windows 7 and the supporting technologies.

Activity Link (URL): https://training.partner.microsoft.com/learning/app/SYS_Login.aspx?lang=en-gb&RU=https%3A//training.partner.microsoft.com/learning/app/management/LMS_ActDetails.aspx%3FActivityId%3D549434%26UserMode%3D0

Activity description: 44CO149 – Updating Your Windows Server 2008 Technology Specialist Skills to R2

Summary:

This two day intensive course is aimed at fast tracking Windows Server Technical Specialists and IT professionals onto the new technology of Windows Server 2008 R2. This course will also provide enough knowledge and skills for Partners to pass the new WS08R2 exam, due out later this year.

Prerequisites:

Students who attend this 2-day ILT should have the following prerequisite knowledge:
• Possess core Windows Server 2008 Technology Specialist skills.

• Familiarity and experience with batch scripting or another scripting language.

• Experience with Windows deployment technologies and implementation.

• Experience with Windows networking technologies and implementation.

• Experience with Active Directory technologies and implementation.

• Experience with Windows Server 2008 server virtualization technologies and implementation.

• Experience with Windows Server 2008 Web application server technologies and implementation.

Objectives:

Students who attend this 2-day ILT should have the following prerequisite knowledge:
• Possess core Windows Server 2008 Technology Specialist skills.

• Familiarity and experience with batch scripting or another scripting language.

• Experience with Windows deployment technologies and implementation.

• Experience with Windows networking technologies and implementation.

• Experience with Active Directory technologies and implementation.

• Experience with Windows Server 2008 server virtualization technologies and implementation.

• Experience with Windows Server 2008 Web application server technologies and implementation.

Top tips & links picked up during the course…

- Using VHD’s created in disk management for storage whatever you need, whereever you need it, appearing as local storage (disk, volume, etc.) - helping towards the goal of ’elastic enterprise solutions’ & cloud computing

Demo on how to use a VHD to support native OS boot for Windows 7 or Windows Server 2008 R2 – more at Keith Combes excellent blahg at http://blogs.technet.com/keithcombs/archive/2009/05/22/dual-boot-from-vhd-using-windows-7-and-windows-server-2008-r2.aspx

- AD Administration Center… the shape of AD admin to come..?
(an R2 RSAT feature..)

- Technologies you need to embrace to succeed in this industry in the next few years… Virtualisation, Cloud, IPv6

- http://en.wikipedia.org/wiki/MinWin

- http://technet.microsoft.com/en-us/library/cc730985.aspx

- Encryption types, data at rest (e.g. encrypting on the disk with bitlocker) vs. data in transit (e.g. encryption on the network with IPsec)

- MSAT (Microsoft Security Assessment Toolkit) – is gold!

-

Training – Implementing and Administering Windows Small Business Server 2008

November 30th, 2009

This week is another out of the office on Microsoft partner training – 4 days of SBS 2008…

Course code: 44CO120 – M6445 – Implementing and Administering Windows Small Business Server 2008

Where: QA Tabernacle Street, London, EC2A 4DT

Who: Mark Cresswell (mark.cresswell@qa.com)

44CO120 – M6445 – Implementing and Administering Windows Small Business Server 2008

Summary:
This four-day instructor-led course provides students with the knowledge and skills to plan, implement, and manage Windows Small Business Server 2008
This course is intended for technology consultants, system integrators, and in-house technology staff that serve small and medium- sized businesses

Prerequisites:
In addition to their professional experience, students who attend this training should have technical knowledge and skills equivalent to the following courses:
  Course 6420: Fundamentals of a Windows Sever 2008 Network and Applications Infrastructure
  Course 6424: Fundamentals of Windows Server 2008 Active Directory
  Course 5115: Installing and Configuring the Windows Vista Operating
  System
  Course 5116: Configuring Windows Vista Mobile Computing and Applications

Objectives:
Delegates will learn how to Install Microsoft Windows Small Business Server 2008.
Migrate to Microsoft Windows Small Business Server 2008.
Configure Windows Small Business Server 2008 using the Windows Small Business Server 2008 Console.
Manage users and groups in Windows Small Business Server 2008.
Manage messaging and collaboration in Windows Small Business Server 2008.
Manage and monitor Windows Small Business Server 2008.
Secure a Windows Small Business Server 2008 network.
Expand a Windows Small Business Server 2008 network

Top tips & links picked up during the course…

Microsoft SBS docs – http://tinyurl.com/sbs-docs

Known Post Installation Event Errors from SBS 2008 - http://support.microsoft.com/default.aspx/kb/957713

Microsoft blog guide to WSS3/MOSS alternate access mappings – http://tinyurl.com/wss-aam

more tiny urls..  /sbs-rsg,  /sbs-docs, /sbs-grp

Microsoft OEM site – http://oem.microsoft.com

Top 100 public SharePoint sites – http://www.wssdemo.com/Pages/topwebsites.aspx

Free Block List provider – http://www.spamhaus.org/zen
This is gold!  add zen.spamhaus.org to your Block List Providers and switch on connection filtering.
One caveat to note, every time an email is processed by your server it performs a lookup to zen.spamhaus.org – if they receive too many lookups they will suggest that you take up their paid service.  The threshold for this is huge (100,000 SMTP connections per day or 300,000 lookups), and you must not be using it commercially i.e. providing a managed service incorporating their service.

Why disable or rename the Administrator account… because it has a well-known SID! (… -500).

Use child domains for all external domain records just like the default remote.yourdomain.com so to get round duplicate maintainence of internal and external resources (and prevent confusion when vpn’d in!)

SBS default groups have an attribute that mark them as created by the SBS setup process or management console.. so be mindful if creating outside of the console!
Fool it by opening AD Users & Computers, open the attribute editor for the group and edit the msSBSCreatedState to ‘Created’

Roaming profiles – SBS has not been designed to support roaming profiles and Microsoft will not support issues with them (in this context), e.g. production of a SBS specific hotfix to address an issue.
Advised not to use roaming profiles bar controlled environments such as standard build, lack of local admins, quotas, group policy lockdown, etc.

Client migration – above half a dozen client machines consider using the User State Migration Toolkit (USMT) to script the process,  ROI should be worthwhile in configuration time vs time saved at the desktop.

Segway! – the BBC iPlayer program is a P2P service that shares out content, based on Ch4 4oD package – remove it!

Need to inject drivers into WinRE or WinPE boot environments..?  don’t be scared!  use drvload and PEImage, more on TechNet Edge – http://edge.technet.com/Media/WinRE-and-free-stuff-with-Sean-Kearney/

SSL certs for SBS – don’t buy single certs unless you have to.   Host headers and ssl is tricky, has to be a ucc cert or wildcard cert to support.
Default cert purchase from now on will be a wildcard cert, unless a bloody good reason (or lots of small ones… read $’s) not to!

Security cost triangle – you can have any two but not all 3!
low cost, usability, security

Relability and Performance monitor – what a gem!

migration to SBS2008..

My recommendation is to start with Philip Elder’s great posts at http://blog.mpecsinc.ca/
SBS 2008 deployment checklist – http://blog.mpecsinc.ca/2009/05/sbs-2008-setup-checklist-v111.html
SBS2003 to 2008 migration guide – http://blog.mpecsinc.ca/2009/06/sbs-2003-to-sbs-2008-migration-guide.html

Exchange & Circular Logging…
A potential for lots of debate, but I’d agree with Mark that whilst migrating mailboxes, if circluar logging is not enabled, enable it otherwise run the risk of filling up disks with log files!

Disable circular logging post event and let the Exchange aware backups submit the log clear down.  However, if the store data and logs are on the same spindle you may as well leave circular logging on as you get little or no recovery benefits.

How to remove the last legacy Exchange server from an organisation – http://technet.microsoft.com/en-us/library/bb288905.aspx (http://tinyurl.com/sbs-exmig)

Common mistakes when upgrading Exchange 2000/2003 to 2007 – http://support.microsoft.com/kb/555854/en-us

ipconfig /displaydns

Microsoft Desktop Optimization Pack
http://technet.microsoft.com/en-gb/windows/bb899442.aspx
Advanced Group Policy Management – http://technet.microsoft.com/en-us/library/cc749396(WS.10).aspx
Asset Inventory Service – http://www.microsoft.com/windows/enterprise/products/mdop/ais.aspx
Microsoft Diagnostics and Recovery Toolset (DaRT)
System Center Desktop Error Monitoring (DEM)
Microsoft Asset Inventory Service (AIS)

Training – Accelerated Implementing & Managing Windows Server 2008 Hyper-V and SCVMM

November 24th, 2009

44CO134 – Server Virtualisation Competency Fast Track: Implementing and Managing Windows Server 2008 Hyper-V and SCVMM

Summary:
This course combines the syllabus of Microsoft courses 6422 and 6331 providing delegates with the knowledge to take Exams 70-652 and 70-403 which can lead to the new Server Virtualisation Competency.

This combined four day course teaches students how to implement and manage Windows Server 2008 Hyper-V. It also teaches students how to manage Hyper-V with System Center Virtual Machine Manager (VMM) and with PowerShell. The course then goes on to teach students how to implement a Microsoft System Center Virtual Machine Manager V2 solution in an organization. The course also discusses how to install, configure, and deploy VMM.

Prerequisites:
Windows Server 2000/2003 System Administration

Basic understanding of System Center Virtual Machine Manager (VMM) (optional)

Server Virtualization using Virtual Server 2005, Virtual PC, or VMWare

Operating knowledge of System Center Operations Manager 2007

Objectives:
Delegates will learn how to
Install and configure Windows Server 2008 Hyper-V.
Understand Hyper-V Virtual Networking.
Understand the types of Virtual Hard Drives and their benefits.
Create and manage Virtual Machines on the Hyper-V server.
Understand how to configure the Hyper-V server to ensure high availability.
Monitor the performance of the Hyper-V server.
Understand how to use existing virtual machines in the Hyper-V server.
Understand the issues with migrating existing Virtual Machines to Hyper-V.
Understand how System Center Virtual Machine Manager (VMM) can be used to manage Hyper-V servers throughout the enterprise.
Use PowerShell to manage the Hyper-V server and the virtual machines hosted on the Hyper-V server.
Implement a disaster recovery plan for Virtual Machines on Hyper-V.
Identify installation prerequisites and requirements for VMM, select secure settings for VMM installations; and install VMM management packs.
Describe prerequisites for installing the Administrator Console; configure the Windows Firewall for the VMM Administrator Console; and configure managed hosts.
Describe prerequisites for the VMM Self-Service Portal; configure IIS to support the Self-Service Portal; and install the Self-Service Portal.
Configure host server hardware to support VMs.
Add VM hosts to VMM; install the VMM agent; add VMWare servers to VMM; and create filters.
Configure delegated administration; set host or group permissions; and configure VMM settings to support a test environment.
Configure access to the VMM Self-Service Portal; configure quotas on the VMM Self-Service Portal; and self-provision VMs using the VMM Self-Service Portal.
Add a VMM library including library shares and library servers and manage the contents of VMM library shares.
Deploy VMs using multiple methods; and use Intelligent Placement to deploy VMs.
Identify considerations for SAN VM migrations; perform a Quick Migration; and use Intelligent Placement to move a VM.
Convert a physical computer to a VM.
Convert other VM formats to Hyper-V VMs using VMM.
Describe considerations for configuring host clustering and describe procedures for configuring host clustering.
Describe considerations for configuring guest clustering and describe procedures for configuring guest clustering.
Identify scenarios where VMM Checkpoints may be used to meet operational requirements and create a VM Checkpoint.
Describe considerations for patch management using System Center Configuration Manager (SCCM) and deploy patches using WSUS.
Describe and configure SCOM reporting.
Use SCOM to select potential virtualization targets based on workload and performance characteristics.
Describe considerations for monitoring host server utilization; measure and analyze host server utilization; and identify important considerations in growth planning.
Monitor and manage the progress of VMM jobs.
Locate failed jobs and recover failed jobs.

Agenda:
Course outline
M6422
Module 1: Introduction to Windows Server 2008 Hyper-V
This module introduces the concepts related to and the history of server virtualization. Through this module, the student will understand the business need for virtualization and how virtualization fits into their existing environment. Selecting the required hardware and basic installation and configuration are also covered.
Introducing Windows Server 2008 Hyper-V
Hyper-V Requirements
Installing the Hyper-V Server Role
Configure Hyper-V to Be Highly Available
Lab : Install Hyper-V and Perform Initial Configuration (Install Hyper-V; Explore the Hyper-V Management Console)
Module 2: Configure Hyper-V Settings and Virtual Networks
This module provides information on the configuration options available on the Hyper-V server and the Hyper-V Virtual Networks.
Configuring Hyper-V Options
Configuring the Virtual Network
Lab : Configuring Hyper-V and Virtual Networks (Configure Hyper-V Server Settings; Configure Hyper-V Virtual Networks)
Module 3: Hyper-V Remote Administration
This module explores the requirements for remote management of the Hyper-V Server and the tools available for remote management.
Configuring Hyper-V Remote Administration
Connecting to Hyper-V Remotely
Lab : Accessing and Managing Hyper-V Remotely (Configure the Windows Firewall; Install the Hyper-V Manager on Windows Vista; Connect to the Hyper-V Server Remotely)
Module 4: Creation of Virtual Hard Drives and Virtual Machines
This module explores the creation of the Hyper-V Virtual Machines and their associated Virtual Hard Drives. The options available for the Virtual Machines and the types of Virtual Hard Drives will be covered. This module also covers the importance of Hyper-V Integration Services and Hypervisor.
Creating Virtual Hard Drives
Creating Virtual Machines
Lab : Creating Virtual Hard Drives and Virtual Machines (Creating New Virtual Hard Disks; Creating New Virtual Machines)
Module 5: Virtual Machine Settings, Snapshots, and High Availability
This module explores the settings available on each Virtual Machines hosted on the Hyper-V server and how to use and manage Virtual Machine snapshots. The module will also cover configuring Hyper-V for high availability and performance monitoring on the Hyper-V server.
Managing Virtual Machine Settings
Using Virtual Machine Snapshots
Configuring Hyper-V for High Availability
Monitoring Hyper-V Performance
Lab : Managing Virtual Machine Settings (Configure Virtual Machine Settings; Monitor Hyper-V Performance)
Module 6: Migration of Virtual Machines to Hyper-V
This module provides instruction on how to migrate virtual machines hosted on earlier virtualization technologies to the Hyper-V server.
Migrating Legacy Virtual Machines
Understanding the Impact of Migrated VMs
Lab : Migrating Legacy Virtual Machines to Hyper-V (Migrate Existing Virtual Machines to Hyper-V; Troubleshoot Issues on the Migrated VMs)
M6331
Module 1: Installing System Center Virtual Machine Manager
Module 1 describes the installation prerequisites for VMM and describes the procedure for installing VMM. In addition, Module 1 describes the procedure to install the VMM Administrator Console and the VMM Self-Service Portal.
Installing System Center Virtual Machine Manager Server Components
Installing the VMM Administrator Console
Installing the VMM Self-Service Portal
Lab : Installing System Center Virtual Machine Manager (Installing VMM Server; Installing the VMM Administrator Console; Installing the VMM Self-Service Portal and Configuring a DNS Record)
Module 2: Configuring VM Hardware, Hosts, and User Roles
Module 2 describes host server hardware configuration considerations. In addition, Module 2 describes general host server configuration procedures including security configuration procedures.
Adding Hosts to VMM
Configuring Hardware
Configuring VMM Settings
Managing VMM Security
Lab : Configuring VM Hardware, Hosts, and User Roles (Configuring Hosts; Configuring VM Hardware; Configuring User Roles)
Module 3: Configuring the VMM Self-Service Portal and Library
Module 3 describes considerations and procedures for configuring the VMM Self-Service Portal and Library. This includes enabling user- or group-level access to the Self-Service Portal, configuring quotas, and using the Self-Service Portal to self-provision VMs. In addition, Module 3 describes procedures for maintaining VMM library servers and shares and the contents of library shares.
Configuring the VMM Self-Service Portal
Maintaining a VMM Library
Managing Library Files
Lab : Configuring the VMM Self-Service Portal and Library (Configuring the VMM Self-Service Portal; Maintaining a VMM Library)
Module 4: Deploying and Managing VMs
Module 4 describes VM deployment and management tasks. This includes using VMM Intelligent Placement, VM Templates, and other automated VM deployment tools. In addition, Module 4 describes using VMM to move VMs between available hosts.
Deploying VMs
Moving VMs Between Hosts
Lab : Deploying and Managing VMs (Deploying VMs; Using Intelligent Placement)
Module 5: Converting from Physical or Virtual Platforms
Module 5 describes important considerations for converting physical and virtual computers to Microsoft VMs. This includes procedures for using deployment agents to execute conversions to Microsoft VMs as well as converting from third-party formats.
Converting Physical Computers to Virtual Machines
Migrating Virtual Machines to Hyper-V
Lab : Converting Virtual Machines Using VMM (Converting a Microsoft Virtual Server VM; Converting a VMWare Virtual Machine)
Module 6: Deploying Highly Available VMs
Module 6 describes considerations and procedures for deploying clustered VMs.
Introducing Virtual Machine High Availability
Deploying Host Clustering
Deploying Guest Clustering
Lab : Planning for Highly Available Virtual Machines (Designing Host Clustering Hardware; Selecting Guest Clustering Type)
Module 7: Managing Virtual Machine Checkpoints and Updates
Module 7 describes procedures for managing VMs using checkpoints and updates. This includes identifying scenarios for using VMM VM Checkpoints and procedures for creating VM Checkpoints. In addition, Module 7 describes update deployment using WSUS and SCCM tools.
Managing Virtual Machine Checkpoints
Managing Virtual Machine Updates
Lab : Managing Virtual Machine Checkpoints and Updates (Managing Virtual Machine Checkpoints; Managing Virtual Machine Updates)
Module 8: Implementing Monitoring and Reporting
Module 8 describes procedures for integrating System Center Operations Manager with VMM to extend the capabilities of VMM. This includes using SCOM reporting with VMM. In addition, Module 8 describes using SCOM to select potential virtualization targets and to monitor and plan host server utilization.
Integrating System Center Operations Manager
Performance and Resource Optimization
Planning and Managing Hyper-V
Lab : Configuring VMM and Operations Manager for Reporting (Setting Up VMM for Reporting and PRO; Enabling PRO; Viewing Reports)
Module 9: Monitoring and Troubleshooting Jobs
Module 9 describes procedures for monitoring and troubleshooting VMM jobs. This includes monitoring and verifying multiple job types as well as recovering from failed jobs.
Monitoring Jobs
Troubleshooting and Repairing Jobs
Lab : Troubleshooting Jobs (Using PowerShell to View Jobs; Running PowerShell Script to Generate Jobs; Managing Jobs; Troubleshooting Failed Jobs)

Microsoft tech•ed Europe 2009, Berlin, 13 November 2009

November 13th, 2009

Going home very early this morning, but as a TechEd newbie I made a few notes & tips to self:

 

Microsoft tech•ed Europe 2009, Berlin, 12 November 2009

November 12th, 2009

Slighty shabby and a late start to Thursday following the Windows Server 2008 R2 EAP dinner followed by the 1E TechEd party – a heavy night! 

For the dinner, the UK team chose a fabulous Italian restaurant called Bacco (www.bacco.de/english/restaurant/restaurant.html) which I’d definately go back to and hosted a great evening… many thanks to Stuart, Gareth, Neil, Alex, etc. from Microsoft UK. 

We were also joined by Allen Stewart & Rajesh Dave from corp.  Allen is Principal PM for Windows Server and Raj is a PM for Windows Hyper-V.  Both very interesting & incredibly knowledgable guys with deep understanding across a wide range of topics (and not just Microsoft!).
I pestered them for info on Hyper-V thin provisioning of memory and whilst they couldn’t confirm anything as we all said ‘we live in hope!’ ;-) 

…as for the  night, I’d been invited to the 1E TechEd Europe party at Spindler & Klatt www.spindlerklatt.de - an uuber trendy restaurant/club in East Berlin frequented by the likes of Angelina, Clooney, and now Cook! 

What a great party and many many thanks to the team at 1E (www.1e.com).  Did I mention I was the 4th member of the business in the founding year?  (yes I probably did & several times.. lots to drunk! ;-) ) We went our separate ways in 1999, oh for a slice of that now… anyway, moving on! 

Seriously though hats off to Samir, Mark, and Phil – they have built a company that knows how to throw a great party (regarded as the best at TechEd), and a team of very bright, talented people who have a lot of respect for the company and its founders. 

Ouch my head is pounding!  time to go to sessions, starting with… 

ITS211 Keeping Your CIO Happy: Microsoft Office SharePoint Server 2007 SLA Scorecarding with Operations Manager 2007 and SQL Server 2008

Gordon McKenna & Sean Roberts speaking at TechEd
Presenters: Gordon McKenna, Sean Roberts, www.inframon.com
Thu 11/12 | 10:45-12:00 | London 2 – Hall 7-1b
Learn how you can create CIO level SLA scorecards in SharePoint Server 2007 for Microsoft System Center Operations Manager 2007 using some of the new features in Microsoft SQL Server 2008 Reporting Services and to create Executive SLA views of your Operational Environment. The session looks at why these types of views are important to many companies, what impact this can have on your business, and what simple steps you can take to achieve very effective, high-level executive views of everything from performance and availability of your key LOB services and applications, whether important SLAs and KPIs are being achieved and whether your IT department is meeting the day-to-day needs of your business. The key demos in this session take you through the steps you need to implement effective business scorecarding in SharePoint Server 2007 using key metrics collected in the Operations Manager 2007 Datawarehouse based on “real-world” experiences gained from the field. After attending this presentation you will have a good insight into how CIO Scorecards can help you add value to your Operations Manager deployments, helping you to show real value to your executives.
Tip – to remove parameter data from Ops Mgr reports imported into a SharePoint webpart, suffix the url with &rc:Parameters=collapsed
Cracking session from Gordon & Sean on how to try and keep your CIO happy (if that’s possible! ;-) )
blog Daniel Savage

Service Level dashboard – free solution accelerator dashboard on Microsoft 

SVR401 & 402 DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and Transition Technologies + Part 2 of 2: Putting It All Together

John Cradock presents DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and Transition Technologies 

Presenter: John Craddock (www.xtseminars.co.uk)
Thu 11/12 | 13:30-14:45 | Helsinki – Hall 7-2a
Take a sprinkling of Windows 7, add Windows Server 2008 R2, IPv6 and IPsec and you have a solution that will allow direct access to your corporate network without the need for VPNs. Come to these demo-rich sessions and learn how to integrate DirectAccess into your environment. In Part 1 learn about IPv6 addressing, host configuration and transitioning technologies including 6to4, ISATAP, Teredo and IPHTTPS. Through a series of demos learn how to build an IPv6 Network and interoperate with IPv4 networks and hosts. In Part 2 we add the details of IPSec, and components that are only available with Windows 7 and Windows Server 2008 R2 to build the DirectAccess infrastructure. Learn how to control access to corporate resources and manage Internet connected PCs through group policy. Part 1 is highly recommended as a prerequisite for Part 2.
John Craddock is an extremely talented AD/identity expert, and deeply technical across many other fields – in this case IPv6 & DA.
I was also lucky enough to have a drink with John and my old Microsoft PSS chum Paul Duffy on Monday night at the cleverly named hotel ‘Berlin Berlin’.
John is a genuine international industry expert and a thoroughly nice bloke with it!   Paul, another ‘genie-I’ went on to become PM for Office Communicator and knows a thing or ten about OCS amongst other subjects to a deep level.  This probably explains why these two know each other!
Anyway, back to the session plus my own notes, links, etc.
Gems & Tips
- be careful, not all apps will be compatible – test!
- to be native will likely mean new network gear, is new network layer (layer 2 unchanged)
- hex is back!  use of double colon notation, but can only be used once per address
- cannot mix with ipV4 mask bit notation
- host derived with mac address which has privacy issues, Win7 & R2 generate random based on interface, can be disabled (revert to mac based) with netsh interface ipv6 set global randomizeidentifiers=disabled
- route print -6 will show IPv6 route table
- ::1 is IPv6 loopback
- if you have a registered IPv4 address then you automatically have an IPv6 address on the 6to4 network
6to4 http://en.wikipedia.org/wiki/6to4 states 6to4 performs three functions:
  1. Assigns a block of IPv6 address space to any host or network that has a global IPv4 address.
  2. Encapsulates IPv6 packets inside IPv4 packets for transmission over an IPv4 network using 6in4.
  3. Routes traffic between 6to4 and “native” IPv6 networks.

- you need to manually unblock ISATAP entry in DNS which can be done via the registry or command line, e.g. 

C:>dnscmd /config /globalqueryblocklist wpad 

Registry property globalqueryblocklist successfully reset.
Command completed successfully. 

ISATAP is a huge subject in it’s own right, the Intra-site Automatic Tunnel Addressing Protocol Deployment Guide is available at http://www.microsoft.com/downloads/details.aspx?familyid=0f3a8868-e337-43d1-b271-b8c8702344cd&displaylang=en 

Putting it all together..

- Check tunnel endpoint authentication using ‘klist’ to list Kerberos data
- Use NRTP to direct DNS queries to a specific server for a particular names space (view using ‘netsh namespace show effectivepolicy’)
- PKI needs to be right as certificates are the foundations
- you must publish the revocation list
- NLS (Nework Location Server) is just a https website accessible from the DA server, e.g. nls.corp.example.com
- if it doesn’t work, it could be a couple of days troubleshooting! 

If you’re thinking of setting this up in a virtual lab, I also took note from Allen Stewart’s blog at http://blogs.technet.com/wincat/

…if you’re planning to virtualize your lab environment on Hyper-V, you should ensure you’re using Legacy Network Adapters for the child partition where you’re running the DAS. Using the default synthetic NICs is OK for all the other resources in the test lab, but for the DAS itself, it’s important to have both the Internet and Corpnet NICs as legacy ones, to ensure proper passing of traffic between both sides of the DAS. If you use the default synthetic adapters, you may end up in a situation where traffic doesn’t properly flow from the outside to the inside, even though all your IPsec, 6to4, Teredo, and IP-HTTPS settings are correct. Basically, you’ll be in a situation where connectivity will fail at a basic level, with you not even being to successfully ping the internal DNS server using its ISATAP address.If you’ve already built your lab on Hyper-V using the synthetic adapters, the fix is pretty simple. Just replace them with legacy ones, reconfigure the IP addressing as specified in the guide and rerun the DirectAccess wizard, again supplying all the information specified in the guide. After doing so, all your traffic should flow properly.

- Thanks Allen!

DAT312 All You Needed to Know about Microsoft SQL Server 2008 Failover Clustering

Presenter: Gopal Ashok
Thu 11/12 | 17:00-18:15 | London 3 – Hall 7-1b
There are major architectural changes in SQL Server 2008 for failover cluster setup and management, geared towards increased reliability and high-availability. To learn all the benefits and changes, attend this session for a comprehensive overview direct from the product development group. We cover SQL Server 2008 failover clustering setup, underlying Windows Server cluster and how SQL Server uses it, what’s new in SQL Server 2008 for failover clustering, differences from previous versions of SQL Server and future directions. This includes details of SQL Server 2008 failover clustering setup operations together with demos to illustrate the new setup.

- new features
- applications need retry mechanisms built in to provide seamless failover
- no longer have to take down the cluster to upgrade, supports rolling upgrades 

Want to deploy stretched clusters?  lots do.  As in separate geo-redundant clusters, not separate nodes e.g. 

Stretched SQL Clusters or the doodles of an artist?

Stretched SQL Clusters or the doodles of an artist?

- sql 2008 failover clustering install breaks on windows server 2008 R2 and needs to be slipstreamed with SP1 (If only we knew this last weekend!)
(slipstreaming is incorporating patches into the installation media to effect a higher level of install base over RTM – Microsoft tend to do this but not always quickly!)
see http://blogs.msdn.com/psssql/archive/2009/03/17/how-to-fix-your-sql-server-2008-setup-before-you-run-setup-part-ii.aspx for more info
- during upgrades to a 2-node cluster there will be a period of time when you are exposed to node failure, and must not have a failover attempt for fear of corruption.  removing the node from the cluster owners will stop premature attempted failover. 

Further Microsoft resources.. (will add others also) 

      SQL Server ® 2008 Failover Clustering White Paper: http://sqlcat.com/whitepapers/archive/2009/07/08/sql-server-2008-failover-clustering.aspx 

      Recommended  Books Online  Doc Refresh #7 (May, 2009), or later: http://msdn.microsoft.com/en-us/library/ms130214.aspx 

      Failover Clusters – Getting Started: http://msdn.microsoft.com/en-us/library/ms189134.aspx 

      Rolling upgrade process and best practice: http://msdn.microsoft.com/en-us/library/ms191295.aspx 

      Maintaining a Failover Cluster: http://msdn.microsoft.com/en-us/library/ms178061.aspx 

      Setup command line usage: http://msdn.microsoft.com/en-us/library/ms144259.aspx 

      Configuration.ini file usage: http://msdn.microsoft.com/en-us/library/dd239405.aspx 

Microsoft tech•ed Europe 2009, Berlin, 11 November 2009

November 11th, 2009

A daily update from Microsoft tech•ed Europe 2009, Berlin, 8-13 November 2009

Not the best day for me in terms of TechEd objectives (i.e. attending learning sessions, etc.) with the first post of the day saying ‘decisions decisions… for sessions just 09:00-10:15′ as struggled to choose between:

DAT302 Top 10 Best Practices for Microsoft SQL Server 2008 Analysis Services
or
MGT11-IS Get Virtualized with Microsoft System Center Essentials!
or
OFS322 Overview of Social Computing in SharePoint 2010
or
SVR207 Windows Server 2008 R2 File Classification Infrastructure: Managing your file data more effectively.
or
SVR319 Multi-Site Clustering with Windows Server 2008 R2

Ended up doing none of the above, but did have a productive breakfast meeting with Stuart Leddy, UK Windows Server Product Marketing Manager.  Stuart has been heading up the Windows Server 2008 R2 UK EAP activities that we have been involved in with Ascom Network Testing (http://blog.thefullcircle.com/2009/11/05/the-full-circle-secures-ascom-network-testing-for-windows-server-2008-r2-early-adopter-program/)

The day turned into going from one full session to the next, and walking back and forth for what seemed like miles in between!
my TechEd tip for the day - for popular sessions get there 10 minutes before they start!

Eventually did get into a 1st choice session I wanted at 12:20…

MGT03-DEMO Introduction to Microsoft System Center Essentials 2010

Presenters: Ravikiran Chintalapudi, David Mills, Eamon O’Reilly, Jeremy Winter
 
Come see the new customer-driven enhancements and fully integrated virtual management capabilities in the next release of Microsoft’s unified IT Management solution for medium-sized businesses, System Center Essentials 2010!
 
- great product, can manage 50 servers and 200 clients
 
 

SVR307 Security Best Practices for Hyper-V and Server Virtualisation

Jeff Woolsey, Senior Program Manager, Microsoft Virtualization
http://blogs.technet.com/virtualization/

Virtualisation is one of the hottest topics in IT today and security is a top priory for IT staff. In this session we cover security best practices for Hyper-V and introduce the Hyper-V Security Guide. This guide is Microsoft’s reference for hardening servers running Windows Server 2008 with Hyper-V enabled.

- Use of BitLocker
- AV scanning of offline VHD images… stale/dormant VMs that get reintroduced to the corporate network then can wreak havoc to new vulnerability exploits.  first product to do this is McAfee VirusScan Enterprise for Offline Virtual Images (rolls off the toungue!)
- AV configuration… added benefit of passthrough disks – host AV will scan these disks.  install AV on the guests!
- VHD performance, 2nd most popular VM workload in Microsoft is SQL! fixed disk performance is now on par with raw/real disk!  but remember spindles still count!
- Dynamic VHDs are now up to 15x faster with R2 – still a 10-15% performance hit over fixed, and the risk of disk over commit
- Multipath I/O (MPIO) in R2 & Win7 is soo much easier with iSCSI Quick Connect
- Advanced Storage Capabilities… storage dedupe and replication, if it is block based it will work
Hyper-V Networking – don’t forget the parent is a VM too!  the Hypervisor slides in beneath the O/S once enabled.  More NICs the better, min 2, min 3 with iSCSI
Jumbo Frames… Significant performance increases, but the infrastructure must support it.  also needs to be end-to-end.  confirm test with ping host -l 4000 -f – if you get a response you have jumbo frames
Virtual Machine Queues - Hyper-V R2 supports processing offloading to newer network adaptors (Intel, Broadcom, etc.), most benefit with 10Gb/E
- more tips… turn off screen savers in guests, in Windows Server 2003 create using 2-way to ensure MP HAL

more of a best practise and walkthrough of some basic tasks like not forgetting to install Intergration Component, good session and great blogger (not me – Jeff! ;-) )

 

DAT301 Building and Implementing a High Availability Strategy for Your Enterprise

Presenter: Gopal Ashok
Wed 11/11 | 17:30-18:45 | London 3 – Hall 7-1b
Every business has mission-critical applications running on Microsoft SQL Server that require maximum uptime. Some application data is more critical than others and requires strict guarantees with regard to data loss. Depending on the application requirements and IT constraints, the availability strategy and corresponding technology choices will vary. As an architect, DBA, or IT admin it is important to develop the right HA strategy and corresponding solution which meets the availability requirement and at the same time provides the cost benefit for your organisation. Microsoft SQL Server 2008 Always On Technologies provide a full range of options to minimise downtime and maintain appropriate levels of application availability. Come to this session to learn how to develop a comprehensive HA solution using the Always On technologies. The session walks you through the various technologies and features, providing a cost-benefit analysis and comparison, talks about the key decision points to consider when choosing a technology, and showcases real-world examples of how these technologies are currently used to provide a High Availability solution for various customer environments around the world.

Microsoft tech•ed Europe 2009, Berlin, 10 November 2009

November 10th, 2009

Microsoft TechEd Europe 2009, Berlin, 8-13th November 2009

Continuing the post on TechEd Europe started on Monday I’ve decided to write daily, there is just too much for one mega-post.  In fact, most sessions have enough quality content to justify their own posts, but I’ll save you from this! ;-)    It’s a massive geekfest!  ja!

First session of the day for me is:

CLI302 – How Windows Storage Is Changing: Everything’s Going VHD!

Mark Minasi, internationally recognised technical guru, funny guy, great speaker (his next session on IPv6 in the afternoon was one of the most over-subscribed sessions of the event and I didn’t get in :-( )

Load Windows 7 or Windows Server 2008 R2 on a system, and you’ll notice something sort of strange: there’s no boot record or BCD folder. Look at other Windows 7/R2 systems, and you may notice something even stranger: there’s only one file on the hard disk, and yet you can boot the system and run a normal Windows system. What’s going on here? Simple: Windows 7 gets a lot of press for its faster-than-Vista performance and newer user interface, but there’s a lot more to it also, including native support of VHD files (that’s how a one-file system boots) as well as a new default disk structure, support of direct-to-disk ISO burning, and more. Whether you’re going to Windows 7 sometime soon or five years from now, you’ll want to be prepared for the changes that Windows 7 brings to storage—and who better to prepare you than veteran Windows explainer Mark Minasi? Join Mark for this quick look at Windows 7/R2 storage and save yourself having to read a small mountain of whitepapers!

Mark Minasi: “come to the command line, the command line will set you free!.  If we want the full power my friends… the command line!”

Also, ignore the V in VHD, there’s nothing Virtual about VHD’s

How easy is it to create a VHD?

diskpart
  create vdisk file=filename maximum=sizeinmegabytes [type=fixed|expandable]
  select vdisk=drive:path
  attach vdisk  (can attach as read-only)

Of course, it can also be done through the GUI, although this is lame!  come to the command line!  (I like this guy lots!)

Creating a bootable VHD image:
  1) Take your gold image machine and sysprep it
  2) Attach an extra drive
  3) Image the system to the drive  (/verify /check)
  4) Create a new vhd
  5) Select the vhd
  6) Apply the wim file to the vhd (imagex /apply)
  7) Detach the vhd

You now have a sysprep’d gold image that you can deploy and boot from on as many machines as you like.  Sysinternals also have a tool that does the same and used the same API’s so is functionally identical

Basic VHD boot:
  1) Copy the VHD to a local hard drive
  2) Use BCDEDIT to create a new OS entry that points at the VHD

bcdedit /copy (copy the resultant GUID to the clipboard!)

What about making a system that has no installed O/S – just a pure boot from VHD

If you do this – insomnia!  you cannot hybernate a VHD system!

How to setup WinPE – newsletter #59 on www.minasi.com
Create the system.wim – newsletter #61

MGT213 – Introducing Microsoft System Center Data Protection Manager v3 Beta

Jason Buffington, Technical Product Manager, DPM
http://jasonbuffington.com/
http://blogs.technet.com/DPM
dpminfo@microsoft.com

The third generation of Microsoft’s backup and recovery solution began public beta in October 2009. In this session, we spend most of the hour demonstrating what’s changed, the new capabilities, and what you should be planning for with Data Protection Manager.

Agent deployment changes, can install as before, but also attach to an existing agent which covers for agents behind firewalls, externally installed, etc.

Disk Allocation – changes to support collocating data in the  DPM storage pool, also the ability to Automatically grow the volumes – woohoo!!  (single biggest request for DPM into Microsoft)

Client support – as in client workstations, laptops, etc.  Much improved support for remote clients over long, thin links.  Capabilities to enforce an IT policy for backup but also allow the end user to add to the protection (with controls, i.e. IT can still enforce exclusions such as no MP3s).

“I like one throat to choke” – i.e. using a Microsoft backup tool to backup Microsoft

Using DPM to provide Disaster Recovery, i.e. replace a.n.other replication technologies by having another offsite DPM server (can do very funky automated recovery into a VM using VMM).

One thing to remember if you don’t attend another DPM session.  For compliance, PCI, Sarbanes, whatever!  If you have your offsite DPM server with the tape drive at that location you are already backing up and storing in a seperate geographic location – “You don’t have to pay the guy to lose your tapes for you!”

DPM 2010 Scalability
100 servers, 1000 clients, up to 2000 databases per server
Significantly increases fan-in of data sources per DPM server

DPM Recovery – specify ‘latest’ will not just restore the last DPM replica point, but also play back the transaction logs to the point of failure :-)

www.inframon.com – “scary smart people who have taken DPM management to a whole new level”

you heard it hear 1st…
DPM 2010 from RC onwards will support backup of non-domain joined clients, i.e. none AD clients :-) – this got a major applause (fortunately no ‘high-fives’).

Feedback – Jason is an excellent, engaging presenter with deep understanding of the product with massively relevant content, way more interesting than the SQL performance tuning I was going to do. ;-)

BOF04 – Snapshots in Windows Server 2008 Hyper-V

Marcos Nogueira
Snapshots in Hyper-V are a very powerful feature that when used properly can save you from disaster. On the other hand, snapshots, if used incorrectly, can bring a server down. Can snapshot replace a backup? At this BoF session we discuss the best practices for snapshots and some common usage scenarios.

Interactive, audience led session.  Not helped by folks not that keen on talking, and the speaker, sorry host (is not a demo, presentation), didn’t sound confident although should do with 3000 VM’s in his enviornment!

My question about snapshot avhd merge issues, even if you delete the snapshot striaght after the test the avhd/s will continue to grown until either the VM is shutdown or saved.  Is there any other way of merging the AVHD files back in e.g. a ‘live merge’

Using snapshots in development through test, qa, etc. to manage iteration testing

MGT314 – How to Protect SharePoint and Other Application Servers with Microsoft System Center Data Protection Manager

Another session with Jason Buffington of DPM fame, we are now the DPM’ers!

In this session we look at the challenges and special requirements for protecting and recovering Microsoft SharePoint Server, as well as Microsoft Exchange Server, and Microsoft SQL Server. We discuss how Data Protection Manager (DPM) uses the native application VSS writers to ensure supportable backups and recoveries, and discuss the implementation specifics for protecting these key platforms. The discussion focuses mainly on DPM 2007 SP1 implementations for Microsoft Office SharePoint Server 2007, SQL Server 2008, and Exchange Server 2007, but concludes with a glimpse into what DPM v3 is planning for O14 and E14.

DPM2010 new features for SharePoint – auto protection of new content dB’s, no need for a recovery sharepoint farm

Tip – for workload specific DPM information goto www.microsoft.com/dpm/yourworkload e.g. www.microsoft.com/dpm/sharepoint - how to’s, videos, sandboxed demo enviornments, why you need it (for the boss), etc.

Tip – DPM can restore to tape, e.g. when asked for a copy of last month’s backup for the auditor, rather than give them a tape containing EVERYTHING (and you know you’ll never get it back), you can just give them the data they need from the time they want it.

Further training… TechNet virtual labs – for hands-on learning with DPM 2007 SP1

SVR308 – Storage and Hyper-V: The Choices You Can Make and the Things You Need to Know

 
Storage and virtualisation are two of the hottest technologies in IT right now—and they’re even better together. Microsoft is delivering new products into both spaces, and understanding the impacts that storage has on a server virtualisation design is key to understanding and successfully building a virtual infrastructure. This session talks about where we are, where we’ve been, and where we are going. We give you the information you need to know to make the right storage decisions in this new virtual world.

Hyper-V Architecture overview
Key to have the HCL/supported hardware (we know this, but it’s especially important for clustering)

Hyper-V Storage
DAS: SCSI, SATA, eSATA, USB, Firewire
SAN: iSCSI, Fibre Channel, SAS
NAS is not supported (stick an iSCSI target on it!)

Storage parameters / constraints..
Max VHD size 2048GB / 2TB

Tip – ISO”s on network shares, and especially with remote management.. needs a computer account & constrained delegation!  (gets round issue of needing local ISO’s on the nodes… ahhh!  learnt something! :-) )

Hyper-V Constrained Delegation

Hyper-V Constrained Delegation

Differencing VHDs – performance vs. chain length – above 8 the performance delta becomes significant

Hyper-V and AV..

SAN Boot and Hyper-V
  Boot host from SAN (FC or iSCSI)
  Boot child VM frin iSCSI (PXE solution such as emmboot)

iSCSI performance best practises with Hyper-V..
  Jumbo Frames since R2 :-)
  ..

Live Migration/HA Best Practises
  CSV
  Multi-Path IO (MPIO) is your friend
  Standardise names of virtual switches
  Use ISO’s not real CD/DVD as will break live migration

Sizing Storage for Hyper-V
  see pic

HA with Hyper-V using MPIO & FC SAN
  see pic

DAT306 – Microsoft SQL Server 2008 Reporting Services Best Practices

Chris Baldwin (chris.baldwin@microsoft.com)

Chris started by admitting to talking far too quickly, so excuse this post, maybe disjointed!

Is there anything you could be doing better with SQL Server Reporting Services? This session explores some of the best practices associated with report design and report server deployment. Topics range from the best way to plan your scale out architecture, to the best way to optimise your reports design for performance.

DAT306 - Microsoft SQL Server 2008 Reporting Services Best Practices

Agenda..

Server Deployment
  Backup/Restore… see pic
  Security – use read-only accounts, be wary of unecessary use of Windows Integrated, if really paranoid can be disabled for RS (server properties)
  Monitoring & Planning – use VS2005 to perform load testing on RS, RS caches so beware testing results, can use ‘NullRenderer’ subscription to pre-process and prime the cache ahead of use
  One-Box deployments useful, but not great for production due to lack of scale

Report Design and layout
  Understanding Tablix
  Report performance analysis and optimisation – subreports can negatively impac, move subreport layout up into main report, merge main report and subreport datasets

Data Visualisation
  .. will post pics!

RS Architecture..

pics to post!