Windows Server 2012: A Techie’s Insight into the Hot New Features John Craddock Infrastructure and Security Architect XTSeminars Ltd, UK WSV326

Domain Controller cloning Enhanced Direct Access Safe Domain controller virtualization RID pool enhanced management Enhanced logging PowerShell 3.0 PowerShell Workflow PowerShell history Kerberos CBAC Compound identity Remote FX IP Address Management DHCP HA DA object recovery GUI ISCI Target Windows NIC teaming Virtualization, virtualization, virtualization 32 virtual processors per VM 1TB virtual machine memory New 64TB VHDX format Native 4k disk support Hyper-V Replica Hyper-V virtual fiber channel Virtual networking Live storage migration Support for up to 64 nodes per cluster Support for 4000 VMs per cluster Hyper-V support for up to 2 TB of physical memory Live VHD merge Cluster shared volumes v2 SMB 2 Support RDMA support in SMB Scale-out file server Multi-channel SMB Virtual NIC monitor mode Storage PowerShell Network PowerShell Multi-Tenancy, Port ACLs / Firewall Storage metering Storage Spaces SMI-S support inbox Virtual NUMA support CPU metering Network metering Memory metering RemoteFX 3D graphics remoting Touch remoting USB remoting VDI Guest Application Health Monitoring VM Hardware Error Isolation VM Failover Prioritization Trusted boot support Removable Shell & IE Enables roles in VHDs Offline Multi-machine management protocol Integrated workflows and PowerShell So many new changes and they are all hot

Default installation

Server Core Minimal Server Interface GUI Desktop Experience Graphical Management Tools and Infrastructure Server Graphical Shell Desktop Experience Add/remove Feature PowerShell Install-WindowsFeature Uninstall-WindowsFeature Server-Gui-Mgmt-InfraServer-Gui-ShellDesktop-Experience

A tour around the management GUI

Windows keyMetro Start Windows key + COpen Charms bar Windows + ISettings on Charms bar Windows + QSearch on Charms bar Hover & click Metro Start Hover & select from Charms bar Just start typing

Virtual machines Storage virtualization Network virtualization CPU & memory virtualization VM hardware Offloading VM1VM2VM3VMn Virtualized customer networks Near SAN capability from commodity disks Network Direct HBA for VMs Direct data transfers ODX New dynamic memory support Live Migration Clustered VMs & hosts ReplicationVirtualized domain controller support

If Windows Server 2012 solves my issues – that’s hot

Corporate intranet Internet It’s a truly great user experience- But…

Tunnelling technologies for the Internet and intranet to support IPv6 over IPv4 Internet tunnelling selection based on client location – Internet, NAT, firewall Encryption/authentication of Internet traffic (end-to-edge/end-to-end) PKI required Client location detection: Internet or corporate intranet Corporate intranet Internet May Be Not Certificates require PKI

Windows Server 2012 fixes all and more… NAT Multi-domain support Multiple entry-points with automatic failover Comprehensive One role supports both OTP & virtual SC Now’s it’s easier

Just 3-clicks

PAC User’s group memberships added to PAC Authorization based on group membership User Groups Claims Device Groups Claims Compound ID PAC contains a user’s group and claims information + Device information Authorization based on group membership, user and device claims

Protect backend services by setting services account parameter – PrincipalsAllowedToDelegateToAccount Block cross forest delegation by setting netdom trust to “no” for /EnableTGTDelegation

Enabling Claims identity

Sales UK RW UK Sales US HI UK HI US Sales US RW Sales HI UK RW Sales HI US RW UK Sales US Sales Sales Managers

No way to tag files and apply authorization and auditing based on file type No way to create ACLs based on expressions Requires complex group structures ACLs defined using groups Device state not supported in authorization decisions

UK Sales US

A quick tour of Dynamic Access Control

John has designed and implemented computing systems ranging from high-speed industrial controllers through to distributed IT systems with a focus on security and high-availability. A key player in many IT projects for industry leaders including Microsoft, the UK Government and multi-nationals that require optimized IT systems. Developed technical training courses that have been published worldwide, co-authored a highly successful book on Microsoft Active Directory Internals, presents regularly at major international conferences including TechEd, IT Forum and European summits. John can be engaged as a consultant or booked for speaking engagements through XTSeminars.

Required Slide Complete an evaluation on CommNet and enter to win!