2. SBS 2003 R2 more than just patching… Wayne Small [SBS-MVP] Technical Director Correct Solutions Pty Ltd wayne@correct.com.au www.SBSfaq.com

3. What is SBS 2003 R2? Launched on July 11, 2006 Next revision of SBS 2003 Patch management Increased mailbox size Increased SPAM protection Improved licensing options Take us through to Cougar timeframe Oops…

4. What is SBS 2003 R2? SBS2003 with SP1 Separate disk with “R2 bits” You don’t have to install the R2 components but why wouldn’t you? Not a free upgrade from SBS 2003 unless Software Assurance OEM technology guarantee (OEM 1/3/06-31/8/06) www.microsoft.com/windowsserver2003/sbs/r2/upgrade.mspx Available from August 2006

5. Key Improvements in SBS 2003 R2 Standard Based on SBS 2003 SP1 Win 2003 Server SP1 FSRM MMC v3.0 Exchange 2003 SP2 Up to 75GB Mailbox store WSS 2003 SP2 WSUS 2.0 + SBS Wizards!

6. Key Improvements in SBS 2003 R2 Premium As per STD plus ISA 2004 SQL 2005 Workgroup Edition

7. Let’s talk Licensing… Pre SBS 2003 R2 Allows for additional W2003 Servers without need for W2003 CAL purchase Still need to purchase W2003 Server License Post SBS 2003 R2 As above PLUS… Allows for additional Exchange 2003 and SQL 2005 WE servers No need to purchase Exchange 2003 or SQL 2005 WE CALs Just a licensing option – not a technical solution

8. How to… additional Exchange Server SBS supports multiple Exchange Servers SBS wizards don’t “know” about them. Wizard create mailboxes on first alpha server (not always SBS) OWA/Outlook over HTTP/RPC, ActiveSync will NOT work for users on the 2 nd server. Need to purchase W2003 Server License Need to purchase Exchange 2003 Server License DO NOT need to purchase additional Exchange 2003 CALs

9. How to… additional SQL 2005 WE Server Must have SBS 2003 R2 Premium Need to purchase W2003 Server License Need to purchase SQL 2005 WE Server License DO NOT need to purchase additional SQL 2005 WE CALs DO need to you have purchased SBS 2003 R2 Premium Edition CALS

10. How to… additional SQL 2005 SE Server SQL 2005 Standard Edition Need to purchase W2003 Server License Need to purchase SQL 2005 SE Server License Need to purchase SQL 2005 SE CALs

11. SBS 2003 R2 – Update Services It’s just WSUS right? No it’s not! Additional wizardry to make it easier to manage

12. SBS 2003 R2 – Update Services Can WSUS do this??? Email you daily with your patch status on your network Show you the computers that are not being included in patching? Auto approve some patches based on requirements? Only download patches that are NEEDED

13. Install Process Can only install R2 onto a computer running SBS 2003 SP1 Install Exchange 2003 SP2 Install Windows SharePoint Services 2.0 SP2 Don’t have any instances of MMC running Must have SBS2003 Administration & Monitoring components installed Must be logged in as THE “500” administrator account Need minimum 1Gb free space of Update Services & 8Gb (additional) free space for Updates Services content Will upgrade existing WSUS installations Needs fine tuning though

14. SBS 2003 R2 – Installation Routine

15. SBS 2003 R2 – Console

16. SBS 2003 R2 – Update Services

18. Wayne Small Tech.SBSGuru SBS 2003 R2 – The Basics

19. SBS 2003 R2 – Tips First 48 hours Get the critical updates and security fixes down and installed Beware – the false green tick Console – use the Refresh link – not F5.

20. SBS 2003 R2 – Update Services Maintenance Dependant on settings Will need to approve some updates Windows Defender pattern files IMF Updates Malicious Software Removal Tool

21. SBS 2003 R2 – Under the covers SBS Wizardry Scheduled Tasks Computer Groups Group Policy Manual Settings

22. SBS 2003 R2 – Scheduled Tasks 3 Tasks Update Services Auto Approval Task Runs hourly Automatically approves updates for your network Update Services Configuration Task Runs ONCE - 48 hours after the initial installation. Configures Windows Server Update Services for full functionality Update Services Synchronisation Task Runs every 5 minutes Ensures that Update Services has a complete list of computers that are on your network

23. SBS 2003 R2 – Computer Groups 3 Groups Membership based on OS type Update Services Client Computers Win2000 Pro/XP/Vista Update Services Excluded Computers Anything you don’t want patched Update Services Server Computers Win2000 & 2003 Server SBS 2003 Server Use the Wizard to move computers, not WSUS

24. SBS 2003 R2 – Group Policy Small Business Server Update Services Client Computers Policy Automatic Update type and time Small Business Server Update Services Common Settings Policy All master settings – WSUS server etc Small Business Server Update Services Server Computers Policy Automatic Update type and time

25. SBS 2003 R2 – Manual Settings Don’t mess with things too much Change it too much and loose the Green Tick

26. SBS 2003 R2 – Troubleshooting SBS Console Errors 0x80072ee2 – common error Transient Issue Server Side C:\Program Files\Microsoft Windows Small Business Server\Support SBSUSSettings.logConfigurationHelper_Policy.log Client Side C:\Windows\WindowsUpdate.log Windowsupdate = WSUS/MU Windows Update = SUS/AU/WU

27. SBS 2003 R2 – Troubleshooting Wuauclt /detectnow /resetauthorization Use PSEXEC to run on remote machines

28. SBS 2003 R2 – Extending its capabilities Create additional Computer Groups Manually move computers into the groups using the SBS Wizard

29. SBS 2003 R2 – Mobile Users Notebook users no longer use VPN Still need to update them and monitor them Options Microsoft Update – but we loose visibility of updates VPN into the LAN on a regular basis – troublesome for the user Extend SBS 2003 R2 Update Services

30. SBS 2003 R2 – Mobile Users – Solution Create alternate Computer Group Create alternate GPO & assign to an OU Move computers into the OU Open up WSUS to the outside world Port 8530 STD - IP Restrictions Premium - ISA Publishing rule

31. Wayne Small Tech.SBSGuru Troubleshooting and Extending SBS 2003 R2

32. Exchange Improvements Exchange Server 2003 SP2 Recipient filtering turned on by default IMF included with SP2 but not configured IMF Autoupdate Enabled by default Up to 75Gb PRIV & PUB Need to regedit to increase size Think about DR before doing this Increased Backup Size Increased recovery time

33. File Server Resource Manager (FSRM) Improved ability to restrict content of folder shares File type limits Improved notification SMTP email when limits are reached

34. FSRM - Installation Not installed by default Add/Remove Programs Windows components Management and Monitoring Tools Select “File Server Resource Manager” Insert Disk 1 when prompted, then the R2 components disk Server will require a restart Uses the new MMC 3.0 interface

35. Wrap up SBS 2003 R2 – much more than just WSUS Licensing improvements Patch Management Improvements Antispam Improvements

36. SBS2003 R2 More information https://partner.microsoft.com/sbs2003/r2 http://www.microsoft.com/windowsserver2003/sbs/r2/d efault.mspx http://www.microsoft.com/windowsserver2003/sbs/r2/d efault.mspx Documentation: http://www.microsoft.com/windowsserver2003/sbs/tec hinfo/productdoc/default.mspx http://www.microsoft.com/windowsserver2003/sbs/tec hinfo/productdoc/default.mspx http://www.microsoft.com/windowsserver2003/sbs/tec hinfo/productdoc/default.mspx www.SBSfaq.com

37. Resources Technical Chats and Webcasts http://www.microsoft.com/communities/chats/default.mspx http://www.microsoft.com/usa/webcasts/default.asp Microsoft Learning and Certification http://www.microsoft.com/learning/default.mspx MSDN & TechNet http://microsoft.com/msdn http://microsoft.com/technet Virtual Labs http://www.microsoft.com/technet/traincert/virtuallab/rms.mspx Newsgroups http://communities2.microsoft.com/ communities/newsgroups/en-us/default.aspx Technical Community Sites http://www.microsoft.com/communities/default.mspx User Groups http://www.microsoft.com/communities/usergroups/default.mspx

38. © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.