1. Windows Server 2012 Overview Omer Palo, Readiness Specialist October, 2012

2. Deployment and Management Changes Active Directory Domain Services Hyper-V Remote Desktop Services Failover Clusters Networking Features IIS Features Agenda

3. Deployment and Management Citrix Confidential - Do Not Distribute

4. Server Editions Windows Server 2012Windows 2008 R2 Foundation Essentials Standard Enterprise Foundation Standard Web HPC Enterprise Datacenter Itanium

5. Windows 8 Windows 8 Pro Windows 8 Enterprise Windows RT Citrix Confidential - Do Not Distribute Windows 8 Editions

6. Deployment Options Windows 2008 R2Windows 2012 Citrix Confidential - Do Not Distribute Windows Server Core Windows Server Full Server Core Minimal GUI Server Full Server UI Desktop Experience

7. Remote PowerShell is not new in Windows 2012 WinRM 2.0 and PowerShell 2.0 could be used for remote PS execution WinRM was not enabled by default Windows Server 2012 enables WinRM by default It is the preferred management tools. Citrix Confidential - Do Not Distribute Remote PowerShell

8. Citrix Confidential - Do Not Distribute New Server Manager

9. Citrix Confidential - Do Not Distribute Adding additional servers Multi-Server Management

10. Citrix Confidential - Do Not Distribute Management tools can be launched on any server. Multi-Server Management: GUI

11. Citrix Confidential - Do Not Distribute Multi-Server Management: PowerShell

12. Server Core is the preferred deployment option PowerShell and RSAT should be the management tools Reducing the attack surface and footprint Reliability and less patching Citrix Confidential - Do Not Distribute New Server Management

13. New Features in ADDS Citrix Confidential - Do Not Distribute

14. ADDS Server role installation is built on PowerShell Prerequisite validation is part of configuration wizard Adprep.exe is now part of ADDS Installation Configuration options can be exported ADDS: Simplified Deployment

15. Forest Functional Level Windows Server 2012 Domain Functional Level Windows Server 2012 Citrix Confidential - Do Not Distribute ADDS: Functional Levels

16. No more DCPROMO ADDS: No more DCPROMO

17. Citrix Confidential - Do Not Distribute ADDS: Promoting a DC

18. Citrix Confidential - Do Not Distribute ADDS: Forest /Domain Functional Levels

19. Citrix Confidential - Do Not Distribute Exporting Configuration ADDS: Exporting Configuration

20. Off-Premises Domain Join now supports DirectAccess Citrix Confidential - Do Not Distribute ADDS: Simplified Management

21. Controlling access with standard ACL is difficult New claim-based authorization platform Claims can be both user and device based Requirements Windows Server 2012 domain controller(s) Windows Server 2012 file server(s) A domain policy enabling clams-policy Windows Server 2012 AD Administrative Center Citrix Confidential - Do Not Distribute ADDS: Dynamic Access Control Lists

22. PowerShell History Citrix Confidential - Do Not Distribute ADDS: Simplified Management

23. Citrix Confidential - Do Not Distribute Recycle bin UI ADDS: Simplified Management

24. Citrix Confidential - Do Not Distribute Password Settings UI ADDS: Simplified Management

25. Citrix Confidential - Do Not Distribute AD-based Activation ADDS: Simplified Management

26. Citrix Confidential - Do Not Distribute Service Accounts Group Managed Service Accounts ADDS: Simplified Management

27. Citrix Confidential - Do Not Distribute Rolling snapshots back could cause replication issues ADDS: Virtualizing Domain Controllers

28. Citrix Confidential - Do Not Distribute VM-Generated IDs provide safe restore of snapshots ADDS: Virtualizing Domain Controllers

29. Citrix Confidential - Do Not Distribute ADDS: Cloning Virtualizing Domain Controllers Win2012 PDC/GC vDC1 Add source to AD group Execute Get-ADDClonningApplication Execute new-ADDCCloneConfigFile vDC2 Clone

30. Citrix Confidential - Do Not Distribute Remote Group Policy Update –Invoke-gpupdate –computer pc1 - force ADDS: Group Policy

31. Citrix Confidential - Do Not Distribute Improved GPresult ADDS: Group Policy

32. Citrix Confidential - Do Not Distribute Group Policy Infrastructure Status No more GPOtool.exe ADDS: Group Policy

33. Citrix Confidential - Do Not Distribute What Else? –Local Group Policy Option for WinRT Devices (BYOD) –Group Policy Client Service Idle State –Group Policy Settings / Preferences Support for IE10 –Increased Size of Registry.pol ADDS: Group Policy

34. Global RID space per domain is now 2 billion Deferred Index Creation Forest administrators can now decide when to build db indexes following schema updates Kerberos Enhancements Constrained Delegations across domains Flexible Authentication Secure Tunneling (Kerberos Armoring) AD DS Claims in AD FS AD FS v2.1 can populate SAML tokens from Kerberos Ticket directly Citrix Confidential - Do Not Distribute ADDS: Other Notable Changes

35. Hyper-V Citrix Confidential - Do Not Distribute

36. SystemResourceHyper-v (2008 R2)Hyper-v 2012Imp. Factor HostLogical Processors643205x Physical Memory1TB4TB4x vCPU per Host51220484x Active VMs per Host38410242.7x VMvCPU per VM46416x Memory per VM64GB1TB16x Guest NUMANoYes- ClusterMaximum Nodes16644x Maximum VMs per Cluster100040004x Hyper-V: Scalability Comparison

37. ResourceHyper-vXenServer 6.1vSphere /ESXivSphere Ent. HostLogical Processors320160 Physical Memory4TB1TB32GB2TB vCPU per Host20489002048 Active VMs per Host1024150 / 50512 VMvCPU per VM6416832 Memory per VM1TB128GB32GB1TB Guest NUMAYesHost OnlyYes ClusterMaximum Nodes6416N/A32 Maximum VMs per Cluster 4000800-960N/A3000 Citrix Confidential - Do Not Distribute Hyper-V: Scalability Comparison

38. Windows 8 Pro supports Hyper-V Minimum 4 GB RAM required Storage Live Migration is supported No guest VM license is provided Unsupported features: RemoteFX Live Migration Hyper-V Replica SR-IOV Syntetic Fiber Channel Citrix Confidential - Do Not Distribute Hyper-V: Client Hyper-V

39. Can utilize higher network bandwidth up 10 gigabits Multiple simultaneous migrations Clustered or standalone Hyper-v Servers (Shared Nothing Live migration) VMs can be stored on shared, local or SMB storage Citrix Confidential - Do Not Distribute Hyper-V: Live Migrations

40. Processor on Hyper-V servers must be from same vendor Physical disks are not supported Cluster Live Migrations require cluster service and CSV configured SMB live migrations require permissions on SMB shares Shared Nothing Live Migrations require Kerberos or CredSSP Citrix Confidential - Do Not Distribute Hyper-V: Live Migration Requirements

41. 1.If Kerberos will be used, configure constrained delegation in AD CIFS and Microsoft Virtual System Migration Service 2. if CredSSP will be used login to source server Migration will fail if initiated from destination server 3.Configure Live Migration option Hyper-V Servers 4.Perform the live migration Citrix Confidential - Do Not Distribute Hyper-V: Live Migration Process (shared nothing LM)

42. Allows mission critical workloads to be replicated across clusters, storage systems and sites Citrix Confidential - Do Not Distribute Hyper-V Replica Production SiteDR Site Hyper1 Hyper2 VM1

43. Citrix Confidential - Do Not Distribute Hyper-V replica configuration options on replica server Hyper-V Replica

44. Citrix Confidential - Do Not Distribute Don’t forget the Windows Firewall rules! Hyper-V Replica

45. Citrix Confidential - Do Not Distribute Enabling VM replication Hyper-V Replica

46. Citrix Confidential - Do Not Distribute Replica enabled VM Hyper-V Replica

47. Citrix Confidential - Do Not Distribute IP settings on replica enabled VM Hyper-V Replica

48. Citrix Confidential - Do Not Distribute Startup memory and memory weight are the visible features Hyper-V: Dynamic Memory

49. Smart Paging utilizes disk space as memory for VMs in case of: VM is being restarted There is not enough physical memory on server No memory can be reclaimed from running VMs The use of paging file is temporary for about 10 minutes Memory over subscription relies on Windows Memory Manager, not Hyper-V Citrix Confidential - Do Not Distribute Hyper-V: Dynamic Memory

50. What is SR-IOV? It’s a technology that allows multiple operating systems to share PCI Express devices VMs can be directly attached to fiber or Ethernet based HBA Bypassing hypervisor, VMs leverage the hardware directly Citrix Confidential - Do Not Distribute Hyper-V: SR-IOV Support

51. Hyper-V can utilize SMB 3.0 based shares for storage Advantage of SMB based shared storage Flexible Easier management Cheaper!! Citrix Confidential - Do Not Distribute Hyper-V: SMB 3.0 File Share

52. Citrix Confidential - Do Not Distribute Hyper-V: SMB 3.0 File Shares Share SMB Server/Cluster Server1 Hyper-V Cluster \\Server1\share V M

53. Windows Server 2012 computer(s) with File and Storage Services Windows Server 2012 Hyper-V Server Role A common Active Directory structure. Citrix Confidential - Do Not Distribute Hyper-V: SMB 3.0 File Shares Requirements

54. A solution to help provide charge back and billing options Network Metering Provides fine grained metering capable of differentiating internet and intranet traffic VM Metrics Average CPU and memory usage over a period of time Minimum and maximum memory usage Disk space Total incoming / outgoing per virtual NIC Citrix Confidential - Do Not Distribute Hyper-V: Resource Metering

55. Enables direct fiber channel storage access from VMs Citrix Confidential - Do Not Distribute Hyper-V: Virtual Fiber Channel

56. New VHDX formats allows 64 TB virtual disks Citrix Confidential - Do Not Distribute Hyper-V: VHDX Disk Format

57. Protection against data corruption due to power failures Logging updates to VHDX metadata structures Ability to store custom metadata Support for Trim functions Requires physical disk access and Trim capable hardware Citrix Confidential - Do Not Distribute Hyper-V: VHDX Disk Format

58. What is NUMA? Non-Unified Memory Access allows applications to utilize memory in an efficient way on multi-processor systems The topology of memory configuration is passed on to VMs Virtual workloads that can be optimized with NUMA can take advantage (i.e. SQL Server) Citrix Confidential - Do Not Distribute Hyper-V: Virtual NUMA

59. Is an extensible, managed L2 switch providing network access to VMs Can provide tenant isolation, traffic shaping, policing and IDS/IDP solutions Provides built-in support for NDIS filter drivers Citrix Confidential - Do Not Distribute Hyper-V: Virtual Switch

60. Built-in features ARP /ND poisoning protection DHCP guard protection Port ACLs Trunk mode to VM Network traffic monitoring VLANs Bandwidth and burst limits ENC (Explicit Congestion Notification) Citrix Confidential - Do Not Distribute Hyper-V: Virtual Switch

61. Remote Desktop Services Citrix Confidential - Do Not Distribute

62. Overhauled Management RDS: Unified Management

63. RDS: Session Virtualization Deployment

64. Citrix Confidential - Do Not Distribute RemoteApp Properties RDS: RemoteApp

65. Citrix Confidential - Do Not Distribute Web based access to RemoteApps and Desktops RDS: Resource Access

66. Citrix Confidential - Do Not Distribute E-mail or URL-based discovery RDS: Resource Access

67. Citrix Confidential - Do Not Distribute Users can access remote resources from start screen RDS: Resource Access

68. Citrix Confidential - Do Not Distribute Remote resource management RDS: Resource Access

69. Citrix Confidential - Do Not Distribute RDS: Desktop Virtualization Deployment

70. Citrix Confidential - Do Not Distribute RDS: Creating VDI Collection

71. Citrix Confidential - Do Not Distribute RDS: Accessing Virtual Desktops Virtual Desktops are available in Start Screen

72. Citrix Confidential - Do Not Distribute Automatic Network Detection UDP Transport Forward Error Correction Fallback to TCP Native UDP Support for RemoteFX RDS: RDP Improvements

73. Citrix Confidential - Do Not Distribute WAN Optimization Multi-Touch Support Media Streaming Adaptive Graphics DirectX 11 Support RDP: RemoteFX Improvements

74. Failover Clustering Citrix Confidential - Do Not Distribute

75. Failover Clusters: Scalability Windows 2008 R2Windows Server 2012 Up to 16 nodes 1000 VMs per cluster Up to 64 nodes 8000 VMs per cluster 1024 VMs per host

76. Citrix Confidential - Do Not Distribute Support for BitLocker VSS based file backup SMB Multichannel and SMB Direct Integration with Storage Spaces Ability to scan and repair online volumes Failover Clusters: CSV Shared Storage Metadata

77. Citrix Confidential - Do Not Distribute Failover Clusters: Scale-Out File Servers

78. Scalability Availability Compatibility Proactive Error identification Citrix Confidential - Do Not Distribute Failover Clusters: Resilient File System

79. Citrix Confidential - Do Not Distribute Updates the cluster with little or no down time Failover Clusters: Cluster Aware Updates

80. Virtual Machine Monitoring Active Directory Integration Cluster Upgrade and Migration Task Scheduler Integration Windows PowerShell Support Citrix Confidential - Do Not Distribute Failover Clusters: Other New Features

81. Networking Citrix Confidential - Do Not Distribute

82. Up to 32 NICs can be bundled Networking: NIC Teaming

83. NIC Teaming ModesLoad Balancing Modes Citrix Confidential - Do Not Distribute LACP Static Teaming Switch Independent Address Hash Hyper-V Port

84. Citrix Confidential - Do Not Distribute DHCP Replication and Failover Networking: DHCP Server

85. Citrix Confidential - Do Not Distribute DHCP Policies –Vendor Class –MAC Address –Client Identifier –Relay Agent Information Networking: DHCP Server

86. DNS Server DNSSEC related updates PowerShell management support DNS Client LLMNR are not sent via mobile or VPN connections NETBIOS queries are not send to mobile broadband interfaces LLMNR and NETBIOS queries are sent in parallels Asynchronous DNS cache Citrix Confidential - Do Not Distribute Networking: DNS

87. Citrix Confidential - Do Not Distribute What is BranchCache Automatic Hosted Cache Discovery File Server integration Multiple Hosted Cache Server Networking: BranchCache

88. Citrix Confidential - Do Not Distribute What is DirectAccess? DirectAccess and RRAS Coexistence No PKI Prerequisite DirectAccess Server Behind NAT Manage-out to Clients Multisite Support Server Core and Windows Server Essentials Support Networking: DirectAccess

89. IP Address Management for Address Space Management IPAM Discovery IPAM Address Space Management IPAM Multi Server Management and Monitoring IPAM Auditing IPAM Architecture Distributed Centralized Citrix Confidential - Do Not Distribute Networking: IPAM Server

90. IPAM Requirements Windows 2008 DNS, DHCP DCs only Servers must be domain members Supports only Windows Internal Database Single IPAM Server can support: 150 DHCP Servers and 500 DNS Servers 6000 DHCP Scopes and 150 DNS zones Citrix Confidential - Do Not Distribute Networking: IPAM Server

91. Citrix Confidential - Do Not Distribute IPAM Manager Networking: IPAM Server

92. Citrix Confidential - Do Not Distribute Step 2: Provisioning Networking: IPAM server

93. Citrix Confidential - Do Not Distribute Step 3: Discovery Networking: IPAM Server

94. Citrix Confidential - Do Not Distribute Default IP tasks Networking: IPAM Server

95. Citrix Confidential - Do Not Distribute Management Interface Networking: IPAM Server

96. Internet Information Services Citrix Confidential - Do Not Distribute

97. \\Server\share Citrix Confidential - Do Not Distribute Web Servers can access SSL certificates from a common shared folder IIS8: Centralized SSL Certificates Load Balanced Web Servers

98. Citrix Confidential - Do Not Distribute We need to install the required component first IIS: Centralized SSL Certificates

99. Citrix Confidential - Do Not Distribute Enabling centralized Store IIS: Centralized SSL Certificates

100. Citrix Confidential - Do Not Distribute Creating a web site with central certificate store IIS: Centralized SSL Certificates

101. Citrix Confidential - Do Not Distribute Dynamically limiting CPU usage of application Pools –NoAction –KillW3wp –Throttle –ThrottleUnderLoad IIS: CPU Throttling on Application Pools

102. Citrix Confidential - Do Not Distribute IP/Domain based restrictions can be dynamically applied IIS: Dynamic IP Address Restriction

103. Citrix Confidential - Do Not Distribute IP Restrictions Proxy Mode IIS: Dynamic IP Address Restriction

104. Citrix Confidential - Do Not Distribute Host Header Support for SSL binding IIS: Server Name Indication

105. FTP Logon Attempt Restrictions Application Initialization Multicore scaling on NUMA Hardware Citrix Confidential - Do Not Distribute IIS: Other New Features

106. Citrix Receiver Already in Windows Store VDI-in-a-Box Virtual Desktop OS Hypervisor Everything else Project Excalibur Q1 / Q2 time frame Citrix Confidential - Do Not Distribute What About Our Products

107. Citrix Confidential - Do Not Distribute Questions?