Introduction to Small Business Server 2003 Part 2

Networking with Small Business Server – November 2008

Copyright 2008 Computer information Agency 1

Small B siness Se eSmall B siness Se eSmall Business ServerSmall Business ServerPart 2Part 2Presented by :Presented by :Robert Crane BE MBA MCPRobert Crane BE MBA MCPdirector@ciaops comdirector@ciaops [email protected]@ciaops.comComputer Information AgencyComputer Information Agency

http://www.ciaops.comhttp://www.ciaops.com

AgendaAgenda

Week 1Week 1 –– What is SBS / SetupWhat is SBS / SetupWeek 1 Week 1 –– What is SBS / SetupWhat is SBS / Setup

Week 2 Week 2 –– Using & configuring SBSUsing & configuring SBS

Week 3Week 3 TroubleshootingTroubleshooting

22

Week 3 Week 3 -- TroubleshootingTroubleshooting



Week 2 AgendaWeek 2 Agenda

Connecting to InternetConnecting to InternetConnecting to InternetConnecting to InternetRemote accessRemote accessSetting up user network userSetting up user network userSetting up network workstationsSetting up network workstationsSetting up monitoringSetting up monitoring

33

Setting up monitoringSetting up monitoringSetting up backupsSetting up backupsFaxingFaxingSharepointSharepoint

The planThe plan

Workstation

Switch

Remote User

ADSL RouterTape Drive

44

SB Server Internet

Fax Modem



SBS supported connection SBS supported connection methodsmethods

Broadband connection with localBroadband connection with localBroadband connection with local Broadband connection with local router.router.

Direct broadband connection.Direct broadband connection.

Broadband connection with userBroadband connection with user

55

Broadband connection with user Broadband connection with user authentication ( PPoE ).authentication ( PPoE ).

Dial up.Dial up.

Dial upDial up

•• Up to 56k Bps speed ( slow ).Up to 56k Bps speed ( slow ).p p p ( )p p p ( )

•• Cheap.Cheap.

•• Local call cost on every connection.Local call cost on every connection.

•• No additional firewall protection.No additional firewall protection.

Di l t fi dDi l t fi d

66SB Server InternetModem

•• Dial up must configured on server.Dial up must configured on server.

Switch

LAN



Broadband Broadband –– Local routerLocal router• Fast.

• Normally used for servers with a single network card

• Always on.

• No additional firewall protection.

• Unable to use SBS as additional firewall

77SB Server InternetDSL or cable modem

• Unable to use SBS as additional firewall

• More complex to maintain.

Switch

Broadband Broadband –– User User authenticationauthentication

• Fast.• ISP login details configured on server.• Always on.• No additional firewall protection.• Connection must be configured on server.

88SB Server InternetDSL or

cable modem

• More complex to maintain.

Switch

LAN



Direct BroadbandDirect Broadband

• Fast.

• No ISP login details to maintain.

• Always on.

• Additional firewall protection.

• Connection doesn’t have to be configured on server.

• Internet connection load maintained independent of server.

99SB Server InternetRouter / Firewall

• More reliable and easier to configure / troubleshoot.

Switch

LAN

Server ManagementServer Management

1010



1111

Web domain namesWeb domain names

Appears far more professionalAppears far more professionalAppears far more professional.Appears far more professional.Cheap and portable ( ie can move Cheap and portable ( ie can move between Internet providers ).between Internet providers ).Is easier to remember than a static IP Is easier to remember than a static IP address.address.

1212

address.address.Can have multiple domain names Can have multiple domain names pointing to same or different servers.pointing to same or different servers.



Need to knowNeed to know

Connection methodConnection methodConnection method.Connection method.ISP login / password if required.ISP login / password if required.IP address of router.IP address of router.ISP DNS addresses.ISP DNS addresses.Remote access options ( Remote WebRemote access options ( Remote Web

1313

Remote access options ( Remote Web Remote access options ( Remote Web Workplace, Outlook Web Access, etc ).Workplace, Outlook Web Access, etc ).Whether plan to use server for Whether plan to use server for receiving Internet emails.receiving Internet emails.

Connect to the InternetConnect to the Internet

1414




1515


1616




1717


1818




1919


2020




2121


2222




2323


2424




2525


2626




2727

Hardware firewall configHardware firewall config

Need to allow following ports throughNeed to allow following ports throughNeed to allow following ports through Need to allow following ports through hardware firewall to SBS machine ( router hardware firewall to SBS machine ( router port forwarding )port forwarding )–– Port 21 = File Transfer Protocol ( FTP )Port 21 = File Transfer Protocol ( FTP )–– Port 25 = Internet emailsPort 25 = Internet emails–– Port 80 = Web sitePort 80 = Web site–– Port 110 = Allow POP3 to ExchangePort 110 = Allow POP3 to Exchange

2828

–– Port 500, 1701, 1723 = VPN protocolsPort 500, 1701, 1723 = VPN protocols–– Port 443 = Permit secure web connectionsPort 443 = Permit secure web connections–– Port 444 = External Sharepoint accessPort 444 = External Sharepoint access–– Port 3389 = Terminal ServicesPort 3389 = Terminal Services–– Port 4125 = Remote Web WorkplacePort 4125 = Remote Web Workplace



Port forwardingPort forwarding

Firewall / routerNo forwarding Firewall / router

XSB server

Port forwarding

Internet

Firewall / router

2929

InternetWeb : 80

Email : 25

Secure : 443SB Server

Remote : 3389

/

RWW : 1425

Less open ports the Less open ports the betterbetter

Minimum open portsMinimum open portsMinimum open portsMinimum open ports–– Port 443 = Permit secure web Port 443 = Permit secure web

connectionsconnections

–– Port 4125 = Remote Web WorkplacePort 4125 = Remote Web Workplace

3030



SBS CertificateSBS Certificate

SBS creates its own encryption certificate soSBS creates its own encryption certificate soSBS creates its own encryption certificate so SBS creates its own encryption certificate so that remote traffic is protected.that remote traffic is protected.This certificate is not authenticated by This certificate is not authenticated by “trusted third parties” like Verisign.“trusted third parties” like Verisign.When you access SBS remotely you will When you access SBS remotely you will prompted with a warning about theprompted with a warning about the

3131

prompted with a warning about the prompted with a warning about the certificate.certificate.To overcome this warning in future simply To overcome this warning in future simply install the certificate onto the device.install the certificate onto the device.

SBS CertificateSBS Certificate

3232




DemoDemo

3333

Corporate web siteCorporate web site

Use an external hosting businessUse an external hosting businessUse an external hosting business, Use an external hosting business, unless you run a back end database.unless you run a back end database.–– Web sites are most subject to attack.Web sites are most subject to attack.–– Web site traffic can slow link.Web site traffic can slow link.–– If your SBS is down your web presence If your SBS is down your web presence

3434

isn’t down.isn’t down.–– Hosting companies have faster internet Hosting companies have faster internet

links.links.–– Problem with web site won’t affect SBS.Problem with web site won’t affect SBS.



Remote Access Remote Access -- VPNVPN

DataDataLayer 1 IPSEC VPN = Port 500

Virtual Private Network

Encryption Encryption

Layer 2

y IPSEC VPN = Port 500L2TP VPN = Port 1701PPTP VPN = Port 1723

3535

SB Server Remote UserInternetADSL Router

Layer 3


3636




3737


3838




3939


4040




4141

Configuring VPN accessConfiguring VPN access

DemoDemo

4242



VPN considerationsVPN considerations

Provides an unchecked tunnel into anProvides an unchecked tunnel into anProvides an unchecked tunnel into an Provides an unchecked tunnel into an organization.organization.Can never be 100% sure that VPN Can never be 100% sure that VPN client machine is clean.client machine is clean.VPN only as good as password.VPN only as good as password.

i ll l h hi ll l h h

4343

VPN is generally slower than other VPN is generally slower than other remote access methods.remote access methods.Routers can also functions as VPN Routers can also functions as VPN endpoints.endpoints.

Adding usersAdding users

Use existing templates wheneverUse existing templates wheneverUse existing templates whenever Use existing templates whenever possible.possible.

Possible to create additional templates.Possible to create additional templates.

Use consistent naming convention.Use consistent naming convention.

4444

Use consistent naming convention.Use consistent naming convention.

Can be changed later if needed.Can be changed later if needed.

Ability to add multiple users at once.Ability to add multiple users at once.



Creating usersCreating users

4545


4646




4747


4848




4949


5050




5151


5252




DemoDemo

5353

Connecting workstationsConnecting workstations

2 parts2 parts2 parts2 partsServerServer–– Create accounts for computers on server.Create accounts for computers on server.

WorkstationWorkstation–– Establish basic workstation connectivityEstablish basic workstation connectivity

5454

Establish basic workstation connectivity.Establish basic workstation connectivity.–– Browse to web page.Browse to web page.–– Follow wizard.Follow wizard.–– Enter details.Enter details.–– Reboot.Reboot.



Workstation limitationsWorkstation limitations

Wizards only support Windows 2000Wizards only support Windows 2000Wizards only support Windows 2000 Wizards only support Windows 2000 Pro or XP Pro.Pro or XP Pro.Windows 98 does work but has major Windows 98 does work but has major limitations.limitations.Can’t use passwords > 14 charactersCan’t use passwords > 14 characters

5555

Can t use passwords 14 characters Can t use passwords 14 characters with Windows 98.with Windows 98.Can connect Macintosh machines.Can connect Macintosh machines.

Connecting computers Connecting computers -- ServerServer

5656




5757


5858




5959


6060




6161


6262




DemoDemo

6363

Connecting computers Connecting computers --WorkstationWorkstation

Connect workstation to networkConnect workstation to networkConnect workstation to network.Connect workstation to network.

Boot workstation.Boot workstation.

Open browser.Open browser.

6464

Type in Type in http://servername/connectcomputerhttp://servername/connectcomputer

Follow prompts.Follow prompts.



Connecting computers Connecting computers -- WorkstationWorkstation

6565


6666




6767


6868




6969


7070




7171


7272




7373


DemoDemo

7474



Configuring FaxingConfiguring Faxing

Need at least 1 fax modem on serverNeed at least 1 fax modem on serverNeed at least 1 fax modem on server.Need at least 1 fax modem on server.

Faxes are sent from desktop just like Faxes are sent from desktop just like printing to printer.printing to printer.

Need to determine method ofNeed to determine method of

7575

Need to determine method of Need to determine method of delivering faxes delivering faxes –– printer, email, file.printer, email, file.

Can save faxes into intranet.Can save faxes into intranet.

Faxing Faxing -- outboundoutbound

Fax modem

SB server DestinationSource

7676



Faxing Faxing -- inboundinbound

Fax modemPrinter

Sharepoint

7777

SourceSB ServerMailbox Store

E mail

Folder

Destination

Configuring faxingConfiguring faxing

7878




7979


8080




8181


8282




8383


8484




DemoDemo

8585

Configuring MonitoringConfiguring Monitoring

Server can produce health reportsServer can produce health reportsServer can produce health reports.Server can produce health reports.

Server can produce usage reports.Server can produce usage reports.

Reports can be emailed or printed Reports can be emailed or printed automatically.automatically.

8686

yy

Report can be emailed externally.Report can be emailed externally.

Alerts can automatically be triggered Alerts can automatically be triggered and detailed forwarded for attention.and detailed forwarded for attention.



8787

Monitoring report Monitoring report -- ctdctd

8888



Monitoring email alertsMonitoring email alerts

8989


9090




9191


9292




9393


9494




9595


9696




DemoDemo

9797

Configuring BackupConfiguring Backup

SBS backup only supports tape and fileSBS backup only supports tape and fileSBS backup only supports tape and file SBS backup only supports tape and file backups.backups.

Additional programs like Arcserve and Additional programs like Arcserve and Veritas will backup to DVD as well.Veritas will backup to DVD as well.

9898

SBS backup doesn’t do SQL very well.SBS backup doesn’t do SQL very well.

SBS backup only backs up entire mail SBS backup only backs up entire mail store, not individual mailboxes.store, not individual mailboxes.




9999


100100




101101


102102




103103


104104




105105


DemoDemo

106106



Configuring GroupsConfiguring Groups

Configure security groups to secureConfigure security groups to secureConfigure security groups to secure Configure security groups to secure data.data.

Configure distribution groups to share Configure distribution groups to share email information.email information.

107107

email information.email information.

Configuring GroupsConfiguring Groups

DemoDemo

108108



Configuring User Configuring User templatestemplates

Use if create users of a certain typeUse if create users of a certain typeUse if create users of a certain type Use if create users of a certain type often.often.User templates are basically disabled User templates are basically disabled users.users.You can apply a template to user afterYou can apply a template to user after

109109

You can apply a template to user after You can apply a template to user after they have been created.they have been created.Applying a new template to user over Applying a new template to user over writes existing permissions.writes existing permissions.

Configuring User Configuring User templatestemplates

DemoDemo

110110



Email optionsEmail options

Use ISP mail server to hold emailsUse ISP mail server to hold emailsUse ISP mail server to hold emails. Use ISP mail server to hold emails. Retrieve them from ISP via POP3. Retrieve them from ISP via POP3. Send them to ISP via SMTP.Send them to ISP via SMTP.

Use SBS and Exchange server to Use SBS and Exchange server to handle emails SBS server performshandle emails SBS server performs

111111

handle emails. SBS server performs handle emails. SBS server performs the job of sending and receiving.the job of sending and receiving.

Emails Emails –– via ISPvia ISPInternet

ADSL Router Message

SB serverWorkstation ISP Mail Server

Workstation reads emails from ISP via POP3

112112

Workstation sends emails via ISP and SMTP

Advantages-No need for static IP-ISP can do filtering-Independent collection

Workstation emails saved to SBS

Disadvantages-User must have Outlook open to receive-Need to maintain individual email settings-Can’t use OWA to send externally



Emails Emails –– via SBSvia SBSInternet

ADSL Router Message

SB serverWorkstation

Mail sent directly to SBS from Internet

Port 25 - open

113113

Advantages-Emails received constantly-Can use OWA to send/receive-Can control setup from server

Workstation sends / receives from SBS

Disadvantages-Must have static IP address-Need to configure domain / MX record-SBS subject to spam

Intelligent Mail FilterIntelligent Mail Filter

Free add on to Exchange server toFree add on to Exchange server toFree add on to Exchange server to Free add on to Exchange server to automatically place spam into user junk mail automatically place spam into user junk mail folder.folder.Unable to fine tune, set a tolerance level at Unable to fine tune, set a tolerance level at server.server.Automatic updates of filtering now availableAutomatic updates of filtering now available

114114

Automatic updates of filtering now available Automatic updates of filtering now available with Exchange Service Pack 2 + some with Exchange Service Pack 2 + some configuration.configuration.Only works when SBS set to receive emails Only works when SBS set to receive emails directly from the Internet.directly from the Internet.



Intelligent Mail FilterIntelligent Mail Filter

115115

Sharepoint servicesSharepoint services

Internal web site that is atInternal web site that is atInternal web site that is at Internal web site that is at http://companyweb/ http://companyweb/ Contains several types of itemsContains several types of items–– Document and picture librariesDocument and picture libraries–– ListsLists

116116

–– Discussion boardsDiscussion boards–– SurveysSurveys



CompanywebCompanyweb

117117


Document and picture librariesDocument and picture librariesDocument and picture librariesDocument and picture libraries–– Web pages that make it easy to view Web pages that make it easy to view

upload and organize documents.upload and organize documents.–– Can create many different document and Can create many different document and

picture libraries.picture libraries.

118118




ListsListsListsLists–– Web pages containing posting by network Web pages containing posting by network

users.users.–– Can create announcements, help desk, Can create announcements, help desk,

links, vacation calendar.links, vacation calendar.

119119


Discussion boardsDiscussion boardsDiscussion boardsDiscussion boards–– Web pages that can poll users on the Web pages that can poll users on the

topic of your choice.topic of your choice.

120120



SharepointSharepoint

DemoDemo

121121

ReferencesReferences

http://www microsoft com/windowsserver2003/sbs/techinhttp://www microsoft com/windowsserver2003/sbs/techinhttp://www.microsoft.com/windowsserver2003/sbs/techinhttp://www.microsoft.com/windowsserver2003/sbs/techinfo/productdoc/default.mspxfo/productdoc/default.mspx -- SBS DocumentationSBS Documentation

http://www.microsoft.com/windowsserver2003/sbs/evaluahttp://www.microsoft.com/windowsserver2003/sbs/evaluation/trial/default.mspxtion/trial/default.mspx -- SBS 2003 Trial versionSBS 2003 Trial version

http://www.microsoft.com/downloads/details.aspx?Familyhttp://www.microsoft.com/downloads/details.aspx?Family

122122

ID=537ac5b3ID=537ac5b3--9ac29ac2--46674667--916b916b--99928bca9f70&DisplayLang=en99928bca9f70&DisplayLang=en –– SBS 2008 Trial versionSBS 2008 Trial version

http://www.microsoft.com/windowsserver2003/sbs/techinhttp://www.microsoft.com/windowsserver2003/sbs/techinfo/training/handonlab/default.mspxfo/training/handonlab/default.mspx -- SBS Hands on labSBS Hands on lab

Introduction to Small Business Server 2003 Part 2

Technology

Transcript of Introduction to Small Business Server 2003 Part 2