Donald Hester May 11, 2010 For audio call Toll Free and use PIN/code Windows 7 for IT Professionals Part 2: Network and Sharing

Maximize your CCC Confer window. Phone audio will be in presenter-only mode. Ask questions and make comments using the chat window. Housekeeping

Adjusting Audio 1)If youre listening on your computer, adjust your volume using the speaker slider. 2)If youre listening over the phone, click on phone headset. Do not listen on both computer and phone.

Saving Files & Open/close Captions 1.Save chat window with floppy disc icon 2.Open/close captioning window with CC icon

Emoticons and Polling 1)Raise hand and Emoticons 2)Polling options

Donald Hester Windows 7 for IT Professionals Part 2: Network and Sharing

Windows DirectAccess and Windows VPN Reconnect Windows BranchCache Libraries and Search

DirectAccess Overview DirectAccess Requirements and Deployment Connection Methods VPN Reconnect

Features Provides users transparent access to internal network resources whenever they are connected to the Internet Enables IT Professionals to manage remote computers outside of the office Establishes a bi-directional connection that enables the client computer to remain current with company policies and to receive software updates Does not require a VPN connection Supports multifactor authentication methods Configurable to restrict which servers, users, and individual applications are accessible Provides users transparent access to internal network resources whenever they are connected to the Internet Enables IT Professionals to manage remote computers outside of the office Establishes a bi-directional connection that enables the client computer to remain current with company policies and to receive software updates Does not require a VPN connection Supports multifactor authentication methods Configurable to restrict which servers, users, and individual applications are accessible

Requirements Deployment Requirements Deployment Windows Server ® 2008 R2 with two network adapters One domain controller and DNS server running Windows Server 2008 or Windows Server 2008 R2 A Public Key Infrastructure (PKI) IPsec policies IPv6 transition technologies Windows 7 Beta Enterprise on the client computers Optionally, a NAT-PT device to provide IPv4 access Windows Server ® 2008 R2 with two network adapters One domain controller and DNS server running Windows Server 2008 or Windows Server 2008 R2 A Public Key Infrastructure (PKI) IPsec policies IPv6 transition technologies Windows 7 Beta Enterprise on the client computers Optionally, a NAT-PT device to provide IPv4 access IPv6-over-IPsec to encrypt communications Scalability determined number of Direct Access servers Multiple ways to install Direct Access IPv6-over-IPsec to encrypt communications Scalability determined number of Direct Access servers Multiple ways to install Direct Access

Selected ServerFull Enterprise Network Highest level of security: Deploy IPv6 and IPsec in the organization Upgrade application servers Windows Server 2008 R2 Enable selected server access Allows end-to-end authentication and encryption from the DirectAccess client to internal resources Highest level of security: Deploy IPv6 and IPsec in the organization Upgrade application servers Windows Server 2008 R2 Enable selected server access Allows end-to-end authentication and encryption from the DirectAccess client to internal resources Configured using DirectAccess console or IPsec policies IPsec session is established between the DirectAccess client and server IPsec is not used for communications across the internal network Closely resembles VPN and can be more straightforward to deploy IPsec session is established between the DirectAccess client and server IPsec is not used for communications across the internal network Closely resembles VPN and can be more straightforward to deploy Flexible configuration meets organizational security requirements

Transparent to users Users who connect using wireless mobile broadband will benefit most from this capability Automatically re-establishes a VPN connection when users temporarily lose Internet connections Provides seamless and consistent VPN connectivity Uses IKEv2 technology to supply constant VPN connectivity

DirectAccess Deployment Guide us/library/ee649163(WS.10).aspx us/library/ee649163(WS.10).aspx Forefront UAG DirectAccess

Feature Components Deployment Models Client and Server Configurations

15

End User Benefits IT Professional Benefits End User Benefits IT Professional Benefits Helps reduce WAN link utilization Improves the responsiveness of network applications when users are accessing main office servers Improves file transfer time Helps reduce WAN link utilization Improves the responsiveness of network applications when users are accessing main office servers Improves file transfer time Supports commonly used protocols Provides compatibility with end-to-end security protocols Supports end-to-end encryption between clients and servers Optimizes traffic flows between Windows 7 Beta clients and Windows 7 Beta servers Remains completely transparent to the user Supports commonly used protocols Provides compatibility with end-to-end security protocols Supports end-to-end encryption between clients and servers Optimizes traffic flows between Windows 7 Beta clients and Windows 7 Beta servers Remains completely transparent to the user

Distributed or Cooperative Caching Mode Cache is distributed across client computers Peer-to-peer architecture - Windows 7 Beta clients cache content Additional clients retrieve the same content from the first client computer Best choice if you do not have a local computer running Windows Server 2008 R2 Cache is distributed across client computers Peer-to-peer architecture - Windows 7 Beta clients cache content Additional clients retrieve the same content from the first client computer Best choice if you do not have a local computer running Windows Server 2008 R2 Hosted Caching Cache resides on a Windows Server 2008 R2 server deployed in the branch office Content is copied to the server Additional clients retrieve the same content directly from the server Content is available even when the client that originally requested the data is offline Cache resides on a Windows Server 2008 R2 server deployed in the branch office Content is copied to the server Additional clients retrieve the same content directly from the server Content is available even when the client that originally requested the data is offline

Client Configuration Server Configuration Off by default Enable and configure manually or by Group Policy Caching mode to cooperative or hosted Host name of hosted cache server Set client cache size Set cache location on disk Firewall rules required Off by default Enable and configure manually or by Group Policy Caching mode to cooperative or hosted Host name of hosted cache server Set client cache size Set cache location on disk Firewall rules required Windows Server 2008 R2 - required either in the main server location or at the branch office Windows 7 Beta Enterprise - required on the client PCs Windows Server 2008 R2 - required either in the main server location or at the branch office Windows 7 Beta Enterprise - required on the client PCs Not installed by default Enable and configure manually or by Group Policy Enable for all file shares or on a file share by file share basis If enabled on a Web server, must be enabled for all Web sites Hosted cache must be equipped with certificate trusted by client computers suitable for TLS Not installed by default Enable and configure manually or by Group Policy Enable for all file shares or on a file share by file share basis If enabled on a Web server, must be enabled for all Web sites Hosted cache must be equipped with certificate trusted by client computers suitable for TLS

Thin, expensive WAN links between headquarters and branches High bandwidth utilization Poor application responsiveness Data centralization worsens the problem

Get ID Get Data Get ID Data

Get ID Put Data Get Data ID Search Get Search Request Offer ID Data ID Data

Libraries Search Federation and Search Connectors Start Menu Search Enterprise Search Scopes Search, Windows Explorer, and Group Policy

Organize and view the files on local computers and other computers and servers on the corporate network Two types of libraries: search-only and browse Automatically indexed for faster viewing and searching Create new libraries to meet specific business requirements Modify the existing libraries to add or remove locations Share with other users or keep private

24

25

26

Features Supports OpenSearch 1.1 compatible queries Supports RSS or ATOM feeds for search results Creates search connectors using an OpenSearch Description file (.osdx file) Deploys using push, pull, or imaging Searches connector files - located in %USERPROFILE%\Searches Link files - located in %USERPROFILE%\Links Supports OpenSearch 1.1 compatible queries Supports RSS or ATOM feeds for search results Creates search connectors using an OpenSearch Description file (.osdx file) Deploys using push, pull, or imaging Searches connector files - located in %USERPROFILE%\Searches Link files - located in %USERPROFILE%\Links Search Federation provides support for searching beyond the user's PC directly in Windows Explorer. Search connectors are used to search remote data stores and respect the security of the remote source. Search Federation provides support for searching beyond the user's PC directly in Windows Explorer. Search connectors are used to search remote data stores and respect the security of the remote source.

28

29 Name of Connector Description of Connector

Search Connectors en/us/search-connectors.aspx en/us/search-connectors.aspx create-windows-7-search-connectors- federated-search.htm create-windows-7-search-connectors- federated-search.htm 30

Results within the libraries are sorted by relevance Recommendations presented at the beginning of a search Search for Control Panel tasks Searches look at all the data in existing libraries Results appear as normal files

Can appear at the bottom of a Windows Explorer search results list Can appear on the user's Start menu Help users find the data they need Use Group Policy to deploy Use scopes to point users to the right data sources

New Group Policies Disable Known Folders Pin Internet search sites to the Search again links and the Start menu Pin Libraries or Search Connectors to the Search again links and the Start menu Remove the Search button from Windows Explorer Disable Known Folders Pin Internet search sites to the Search again links and the Start menu Pin Libraries or Search Connectors to the Search again links and the Start menu Remove the Search button from Windows Explorer Remove the Search the Internet Search again link Turn off the display of snippets in Smart Details view Turn off display of recent search entries in the Windows Explorer search box Remove the Search the Internet Search again link Turn off the display of snippets in Smart Details view Turn off display of recent search entries in the Windows Explorer search box

DirectAccess and VPN Reconnect Enables management and updating of internet-connected remote PCs, without a VPN connection, when users are off the corporate network Key requirements: Windows Server 2008 R2, IPSec, IPv6, and Windows 7 Beta client VPN Reconnect enables remote users to retain connection through internet connectivity interruptions BranchCache Reduces WAN bandwidth traffic and latency Content can be cached either on a Windows Server 2008 R2 or on individual computers in a peer-to-peer fashion Libraries and Search Search enhancements help users instantly find information on local computers. Search Federation enables searching of remote document repositories, SharePoint sites, and the Web. Libraries make finding, using, and sharing information less difficult and time consuming.

35

God Mode is easy to set up: Create a new folder anywhere. Rename the folder by pasting this name exactly as it appears (copy it first): GodMode.{ED7BA470-8E54-465E-825C E01C} 36

Donald E. Hester CISSP, CISA, CAP, MCT, MCITP, MCTS, MCSE Security, Security+ Maze & / San Diego City College Q&A

Evaluation Survey Link Help us improve our seminars by filing out a short online evaluation survey at:

Thanks for attending For upcoming events and links to recently archived seminars, check Web site at: Windows 7 for IT Professionals Part 2: Network and Sharing