- ホーム
- > 洋書
- > 英文書
- > Computer / Operating Systems
Full Description
Windows Small Business Server 2008 provides all the tools small companies need to improve collaboration, enhance productivity, and manage and secure all their information. In this book, a team of leading SBS experts brings together the in-depth knowledge and real-world insights you need to make the most of this state-of-the-art product. Microsoft Most Valuable Professionals Eriq Neale and his colleagues cover every facet of planning, deploying, and managing SBS 2008. The authors begin by showing how to install and configure SBS 2008 for maximum efficiency, performance, and ease of administration. You'll learn how to securely utilize SBS 2008's comprehensive Internet, file, and print services; simplify and automate both server and workstation management; and take full advantage of both SharePoint collaboration and Exchange communication tools. This book is packed with expert tips, tricks, and troubleshooting techniques drawn from the authors' unsurpassed experience helping companies succeed with SBS. Whether you're a full-time IT professional or a power user who's managing SBS in your spare time, it will be your most valuable resource.Detailed information on how to...Plan, install, configure, and customize SBS 2008 in any environment Set up and manage SBS 2008-based networks, Web access, and collaboration-including SharePoint Services 3.0 Leverage Remote Web Workplace and other advanced remote access solutions Manage email and other communications with SBS 2008's built-in Microsoft Exchange Server 2007 Centrally control Windows Vista, Windows XP, and other clients Seamlessly integrate Macintosh computers into your Windows network Protect your servers and workstations against both internal and external threats Prepare backups and disaster recovery plans you can actually use in an emergency Streamline and automate administration using Microsoft PowerShell
Contents
Foreword xxviiIntroduction 1Book Overview 2Part 1 Introduction and SetupChapter 1 Welcome to Small Business Server 2008 5History of the SBS Product 5BackOffice Small Business Server 4.0 6BackOffice Small Business Server 4.5 7Microsoft Small Business Server 2000 7Microsoft Small Business Server 2003 8Essential Server Solution Family 9Features of SBS 2008 9Communication 9Collaboration 10Protection 11Expansion 12Limitations of SBS 2008 13Hardware Limitations 13Software Limitations 14Support for SBS 2008 14Community Support 14Online Support 15Official Product Support 16Chapter 2 Planning for the SBS 2008 Deployment 17Knowing the Client Base 17Understanding How the Server Will Be Used 18Planning for Correct Licensing. 19Planning the Hardware 22Planning the Network 23Changes in Network Options from Previous Versions 23Connection to the Internet 23IP Address Ranges 24DHCP Configuration 25Public and Private Domain Names 26Planning the Storage Layout 26Changes in Storage from Previous Versions 27Multiple Partitions Versus Multiple Spindles 27Minimum Partition/Spindle Sizes 28Fault Tolerance 29Backup Technologies 32Chapter 3 Installing and Configuring SBS 2008 35Preparing for SBS 2008 Installation 36Collecting Information for the Setup Process 36Configuring the Internal Network 37Disabling DHCP on the Network 37Installing SBS 2008 38Collect the Initial Setup Data 38Prepare the Disk Infrastructure 38Complete Setup 40Performing the Initial Configuration of SBS 2008 45Run the Connect to the Internet Wizard 45Install Security Updates 48Run the Set Up Internet Address Wizard 48Complete Other Setup Tasks 54Troubleshooting SBS 2008 Installation Issue 57Log Files 57Setup Issues 57Known Installation Issue 59Part 2 Managing Network and Web ConfigurationChapter 4 DNS, DHCP, and Active Directory Integration 63Understanding the Role of DNS and DHCP 63Native Tools 64Preparations and Caveats 67Default Configuration of DNS and DHCP 67Securing DNS and DHCP 70Securing DNS 70Securing DHCP 71New in SBS 2008 72Adding DNS Records 75Reserving IP Addresses in DHCP Server 76Troubleshooting 78Event Log Errors 78Dcdiag 79Ping 80NSLookup 81Can't Resolve a Host or Web Site Name 81ISP's DNS Server Is Down 82DNS Returns a Bad Location 82Curse of the Hosts File 82There's a Rogue DHCP Server 82Chapter 5 Internet Information Services 7.0 85The Web Sites Under the Hood 85External-Facing Web Sites Included with SBS 2008 86Internal Web Sites Included with SBS 2008 86Additional Web Sites That Can Be Combined with SBS 2008 87Protecting the Server 87Default SBS Web Sites 88Integration with SharePoint 89Configuring the Default SBS Web Sites 89Settings for the Default Web Site 95Settings for the SBS SharePoint Site and for the SharePoint Central Administration v3 96Settings for the SBS Web Applications and Windows Server Client Deployment Applications 97Settings for the WSUS Administrator Web Site 98Protecting Web Site Configuration 99Backup and Recovery of Metadata Information 99The Appcmd Command 100Backing Up the Web Site Configuration 101Using System State Backup 103Backup and Recovery of Web Sites 104Configuring Additional Web Sites 104Managing SSL Certificates in IIS 106Understanding the Default Certificates 107Deciding When to Use a Third-Party Certificate 107Working with Third-Party Certificates 108Requesting and Installing a Third-Party Certificate with the Add a Trusted Certificate Wizard 108Manually Requesting and Installing a Third-Party Certificate 110Integrating External Web Publishing 116Troubleshooting IIS 117Service Unavailable 117Server Not Found. 118Chapter 6 Remote Web Workplace and Other Remote Access Solutions 121Understanding the Role of Remote Accessibility Solutions in SBS 2008 121Remote Web Workplace 122VPN 126RDP 126Managing and Using Remote Web Workplace 128Managing the Remote Web Workplace Interface 128Using the Remote Web Workplace Interface 133Managing and Using VPN 136Managing VPN 136Using VPN 140Managing and Using Remote Desktop 141Managing Remote Desktopv 141Using Remote Desktop 152Securing Remote Access Solutions 159Network Security 160Password Security 161Troubleshooting Remote Access Solutions 162RWW Access Issues 162VPN Access Issues 163RDP Access Issues 163Chapter 7 SharePoint and Companyweb 165Understanding the Role of SharePoint and Companyweb in SBS 2008 166Companyweb's Components 166What's "In the Box" with SharePoint? 167Understanding the Default Settings of SharePoint and Companyweb 173Companyweb Port Settings 173Companyweb Mobile Settings 173SharePoint Default URL Mapping 174Default Program and Data File Locations 175Customizing SharePoint and Companyweb 176Merging Data from an Existing WSS 3.0 Site into Companyweb 177Developing a Data Protection Plan for SharePoint and Companyweb 180The Recycle Bin 180Backup and Restore with Native SharePoint Backup 181Backup and Restore with Small Business Server Backup 183Troubleshooting SharePoint and Companyweb 185Event ID Error Message 10016 Is Logged in the System Log After You Install Windows SharePoint Services 3.0 185Migration 186Part 3 Managing E-MailChapter 8 Exchange Management 191Default Mail Configuration 193Mail Hygiene 194Preventing the Reverse NDR Attack 197Configuring Recipient Filtering 198SMTP Tarpitting 198Hosted Anti-Spam Solutions 199Getting Your Mail Delivered 200How Mail Gets Delivered 200Ensuring Delivery 200The Windows SBS POP3 Connector 203How Does the POP3 Connector Work? 203Limitations of the POP3 Connector 204Setting Up the POP3 Connector 204Receiving Mail for Multiple Domains 206Adding Additional E-Mail Domains 206Routing Mail for a Non-Authoritative Zone 212Cohosting Multiple Organizations on a Single Server 215Getting Information About Mailboxes 217Managing Limits 218With the GUI 218Setting Limits with PowerShell 221Using Transport Rules 222Setting Up Disclaimers with Transport Rules 222To Create Copies of E-Mails 223Archiving Mail 224Using SharePoint Libraries 224Using Exchange Journaling 225Troubleshooting Exchange Management Issues 230Troubleshooting Outbound Mail Delivery 230Troubleshooting the Content Filter 235Troubleshooting POP3 Connector 237Chapter 9 Exchange 2007 Client Connectivity 241Choosing the Right Exchange Client 242Outlook 2007 243What's New in Outlook 2007 243Installing Outlook 2007 244Configuring Outlook 2007 245Cached Exchange Mode 247Outlook Anywhere 252How Outlook Anywhere Works 253Configuring Outlook Anywhere 253Outlook Web Access 2007 258Improvements in Outlook Web Access 2007 258Using Outlook Web Access 2007 259E-Mail Certificates in OWA and Outlook 2007 263Remote File Access in OWA 2007 264ActiveSync 265Different Versions of ActiveSync 265Windows Mobile Devices 266iPhone 270Palm Devices 272Troubleshooting Exchange 2007 Client Connectivity 272Troubleshooting Auto Account Setup 273Troubleshooting Cached Exchange Mode 273Troubleshooting Exchange 2007 ActiveSync 274Chapter 10 Exchange Disaster Recovery 277Understanding the Exchange Database Structure 278Exchange Storage Groups 279Extensible Storage Engine (ESE) Databases 281Circular Logging 283Checkpoint File 283Transactions 284Understanding Exchange Backup Methods and Requirements 285Online Backup 286Offline Backup 287Security Permissions 288Configuring Deleted Item and Mailbox Retention 289Using Local Continuous Replication 290Using Windows Backup 294Using Export-Mailbox 295Using ExMerge 296Other Backup Solutions 298Recovering Exchange Databases from Backup 298Events Requiring Exchange Recovery 299Recovery Process 300Using the SBS Backup Wizard to Restore 300Using the Recovery Storage Group 303Mailbox Recovery Using a Recovery Storage Group 307Using ExMerge to Restore 309Using Third-Party Solutions to Restore. 310Repairing a Damaged Exchange Database 311Recovery Tools 311ESEUTIL /R 314ESEUTIL /P 314ISINTEG 315Troubleshooting Exchange Disaster Recovery Issues 316Part 4 Managing Client ConnectivityChapter 11 Group Policy in SBS 2008 321How SBS 2008 Employs Group Policies 322Default AD Policies 322User Folder Redirection 323WSUS Implementation in SBS 2008 323Workstation Client-Specific Settings 323SBS 2008 User Account Settings 323Overview of Group Policy 324Group Policy Settings 324Group Policy Preferences 325Working with the Group Policy Management Console 328Navigating the Group Policy Management Console 329Viewing Group Policy Settings 330Group Policy Scope and Order of Application 335Working with Group Policy Modeling and Results 339Creating the Modeling Report 340Creating the Results Report 342Default SBS 2008 Group Policy Objects 343Default Domain Controllers Policy 344Default Domain Policy 346Small Business Server Folder Redirection Policy 347Update Services Client Computers Policy 348Update Services Common Settings Policy 349Update Services Server Computers Policy 349Windows SBS Client Policy 350Windows SBS CSE Policy 351Windows SBS Client--Windows Vista Policy 352Windows SBS Client--Windows XP Policy 352Windows SBS User Policy 353Creating and Modifying Group Policy Objects in SBS 2008 354Planning the GPO 355Testing the GPO 357Implementing the GPO 361Troubleshooting Group Policy 361Group Policy Testing Tools 361Backing Up and Restoring Group Policy 366Chapter 12 User and Computer Management 369Understanding the Role of User and Computer Management in SBS 2008 369Understanding the Role of User Management in SBS 2008 370Understanding the Role of Computer Management in SBS 2008 371Understanding the Default Settings of User and Computer Management 371Understanding User Default Settings 371Understanding Default Computer Settings 378Customizing User and Computer Management 381Customizing User Settings 381Customizing Computer Management 392Chapter 13 Macintosh Integration 403Understanding the Role of Macintosh Integration in an SBS 2008 Network 403Native Tools 404Third-Party Tools 404Planning and Preparing the Network Environment 405Domain Naming Conventions 405Active Directory Integration 405Account Username Conflicts 406Operating System Notes 407Preparing SBS 2008 Server 408SBS 2008 as the Network DHCP Server 408File Services for Macintosh Not Required 408SMB Signing Compatibility Requirements 408Connecting Macs to the SBS 2008 Network 410Configure DHCP Support on the Mac 410Configuring Mac OS 10.5 412Accessing Files 414Configuring Mac OS 10.4 414Configuring Mac OS 10.5 416Connecting to Active Directory 417Configuring Mac OS 10.4 417Configuring Mac OS 10.5 422Accessing E-Mail 428Preparing the SBS 2008 Network 429Preparing the Macintosh for Entourage Connectivity 429Configuring Entourage 2004 431Configuring Entourage 2008 433Accessing SBS 2008 Web Resources 435Companyweb 436Outlook Web Access 437Remote Web Workplace 437Troubleshooting 437Network Connectivity 437File Share Access 440E-Mail Access 440Windows Support on the Macintosh 441Boot Camp 441Parallels Desktop for Mac and VMWare Fusion 442Chapter 14 Additional Servers 445Understanding the Role of Additional Servers in an SBS 2008 Network 446Licensing for Additional Servers 446Scenarios for Additional Servers 447Misconceptions About Using Additional Servers 450Implementing Additional Servers 450Common Implementation Tasks 451Additional Domain Controller Configuration 459Terminal Server Configuration 469Developing a Data Protection Plan for Additional Servers 478Installing Backup Services 478Running a Manual Backup 479Scheduling Regular Backups 479Chapter 15 Managing Workstations Through Group Policy 485Editing and Adding to Default Policies and Settings 491Organizational Units 491Security Groups 492Default Policies 493Group Policy Impact on Workstations 499Update Services Client Computer Policy 499Update Services Common Settings Policy 500Windows SBS User Policy 502Group Policy per Workstations 504Windows SBS Client--Windows Vista Policy 505Default Vista Firewall Policies 507Windows SBS Client--Windows XP Policy 509Windows SBS Client Policy 510Small Business Server Folder Redirection 510Deploying Software 511Controlling the Workstations 515Adjusting Permissions Using Group Policy 516Using Group Policy in the Vista Era 519User Account Control 520Mapping Network Drives 521Controlling USB Devices 522Troubleshooting 526Part 5 Managing Security and System HealthChapter 16 Monitoring and Reporting 531Understanding the Role of Monitoring and Reporting in SBS 2008 532Understanding the Default Settings of Monitoring and Reporting 533Security 534Updates 534Backup 534Other Alerts 534Notification Settings 534Setting Up the Default Monitoring Reports 535The Daily Report 538The Weekly Report 541Customizing Monitoring and Reporting 543Setting Up Your Own Report 544Creating Custom Alerts and Notifications 545Deploying the Custom Alert 549Sample Event for OneCare 551Developing a Data Protection Plan for Monitoring and Reporting 552Special Backups of the Database 552Scheduling a Backup 553Shrinking a Database 555Additional Reporting Capabilities 555WSUS Reports 555FSRM Reports 558Troubleshooting Monitoring and Reporting 558Best Practices Analyzer 562Third-Party Monitoring Solutions 563Chapter 17 Managing Server and Workstation Security 565The Benefits and Pitfalls of a Single Integrated Server 565Covering the Basics 566Physical Security 566Default Shares 566Passwords 568Shared Folders 570Creating a Share Using the Add a New Shared Folder Wizard 571Creating a Share Without Using the Wizard 573Folder Redirection 574File Server Resource Manager 576Storage Reports Management 577Quota Management 578Default Security Groups 579User Roles 581Creating and Editing User Roles 582Changes to Administrative Access in Windows 200 584UAC--User Account Control 584Firewall Protection 588Windows Firewall with Advanced Security 588Enable Logging 590Configuring Rules 591Windows Firewall in XP and Vista 593Edge Firewall 594Ports and Firewall Discovery 594The Case for Controlling Outbound Access 595OneCare for Server 596Configuring OneCare 597Additional Online Features 598Windows Software Update Services 601Managing WSUS 602Changing Settings 602Maintaining WSUS Health 604Expanding the Definition of Security 605Backup 606Group Policy 606Remote Access to Network Resources 607Chapter 18 Backup and Disaster Recovery 609What's New with SBS 2008 Backup and Recovery 610New Backup Technology 610Design Considerations 612Improved Backup 612Easier Scheduling 613Dedicated Backup Devices 613Exchange/SharePoint Backup and Recovery 613Easier Recovery 614No Built-in Client Backup 614Understanding Backup Issues 614File Recovery 614Archiving 615System Recovery 615Hardware and Media 616The Backup Plan 616Site and Security 617Backup Schedule 617Using the SBS Backup Tools 618Windows SBS Console 619Windows Server Backup 627WBADMIN Command-Line 631Windows Recovery Environment 633Backing Up SBS 2008 Premium Second Server 633Disaster Recovery with SBS Backup Tools 634Recovery Wizard 635Full (Bare-Metal) Restore 639Troubleshooting Backup Issues 640Part 6 Beyond SBS 2008Chapter 19 IPv6 Overview 645Introducing IPv6 646New Features 646Why Do I Need IPv6? 647How Do I Read IPv6? 647Saying Goodbye to DHCP 648Creating IPv6 DNS Entries 649Using IPv6 649IPv6 in Action--Windows Meeting Space 649Troubleshooting IPv6 652Troubleshooting Utilities 652Learning Path 653Chapter 20 PowerShel1 655Who Needs PowerShell 655Why PowerShell? 656How PowerShell Is Used 656PowerShell Under the Hood 657PowerShell Basics 658Using PowerShell 659Getting Started 660Commands 661Aliases 663Execution Settings 664Basic PowerShell Example 664Windows PowerShell Script 666Exchange PowerShell Script 668The Power of PowerShel 672get-command 672Get-help 685get-member 686Get-PSDriv 687PowerShell Resources 687Chapter 21 Advanced Installation Options 691Understanding the Answer File 691Answer File Generator 691Answer File Format 695Installing SBS 2008 with a Custom Internal Domain Name 698Prepare the Answer File 698Perform the Installation 699Installing SBS 2008 into an Existing Active Directory Domain 700Prepare the Existing Server 701Install SBS 2008 in Migration Mode 707Configuring the New Server 708Moving Data and Settings from the Old Server 712Reconfigure the Old Server 717Installing Forefront Security for Exchange and Windows Live OneCare for Server Manually 720Forefront Security for Exchange 720Windows Live OneCare for Server 722A SBS 2008 Resources 725Microsoft Community Resources 725SBS 2008 Technical Documentation 725Web Sites and RSS Feeds 725Newsgroups 726Web Logs (Blogs) 726Small Business Community Resources 726Web Sites/Blogs 726Mailing Lists 727Exchange Resources 727Macintosh Resources 728Web Pages and RSS Feeds 728Newsgroups 728Mailing Lists 728iPhone Resources 728Outlook Resources 729Outlook Web Access Resources 729ActiveSync/PocketPC Resources 729SBS Monitoring and Reporting Resources 730Group Policy Resources 730PowerShell Resources 731Web Resources 731Books 731RRAS, VPN, and Network Security Resources 731Terminal Server Resources 732Workstation Security Resources 732Anti-Virus/Anti-Malware Tools 732Security Response Toolkit 733Security and Patching Resources 734General Security Information 734WSUS Resources 735Index 737
