Installing FCI on Server 2008

Although FCI comes with all versions of Server 2008 R2, it is not installed by default in line with Microsoft’s strategy of installing only the necessary services and roles on each server based upon its functionality within the network. FCI is installed as a component of the File Services role, and implemented via the File Server Resource Manager console. Once installed, FCI is at once deceptively easy to use, and at the same time, infinitely complex in its possibilities.

The first step in using File Classification Infrastructure is to define what the tags are. There are no default tags or tagging systems, because FCI is designed to be custom tailored to a particular business environment. One need only think about the difference between what confidential or secret mean to a chain of dry cleaners, versus what they mean to a defense contractor to see why defaults would not be particularly useful in this case.

Tagging files is done by “classifying” them. FCI classification is a two-step process. The first step is to define the classifications. The second step is to apply the classifications to files.

Defining classifications is done within FSRM under Classification Management. Under Classification Management, is Classification Properties, where one creates the classification structure. Here the rules are defined that determine whether or not a file is classified as a particular kind of data. For example, a file might be classified as “confidential” if is stored in the “Confidential” directory of the Legal Department’s file server area. Obviously, more complex criteria are possible. A file might be classified as internal financial data if it is created by a member of the Accounting group, during the first week of the month, and the file name contains the words “monthly report.”

FCI supports classifications based upon date and time, numbers, multiple choice lists, ordered lists, strings, multiple strings, or Boolean criteria. There is no need to stick with generalized classifications like Confidential, Secret, or Internal Use Only, although these can be set as high-level classifications. The real power of FCI comes from more granular classifications, such as classifying all Excel spreadsheets, stored in the project folder “New Products”, created between January and March of 2009, that contain the words “projected internal costs”, as Internal Prototyping Projections.

Using FCI To Improve Security and Better Manage Data

Defining the classifications doesn’t actually do anything. No files are tagged just by defining the components of a classification. In order to do anything with these classifications, the real files must be tagged. Doing so requires creating Classification Rules.

To create a classification rule, one first defines a name and a scope for the rule in the Rule Settings tab. The name is what the tag attached to the file will be called. The scope defines which files to evaluate to determine if they are assigned that classification. The actual rules for classifying files are done in the Classification Tab. Classifying can be done by simply evaluating whether or not a file is within a certain folder (Remember the tag follows the file as it is moved and copied.). It can also be done by checking for certain words or phrases within the documents themselves. Powerful classification can be done using the PowerShell classifier. This limits your ability to evaluate files only by your ability to write a PowerShell script to do what you want.

An analogy can help make the process a little clearer.

Classifications Properties are the things that matter for determining speed limits. For example, how close is the road to a school, is the road an Interstate, is the road two-lanes, three-lanes, four-lanes, etc. Notice that these are just the properties that CAN be evaluated; there is no structure here for how a road is assigned a particular speed limit, only what properties will need to be examined in order to assign a speed.

Classification Rules are like the actual criteria that determines which speed limit a road gets. For example, roads within 100 feet of a school should be classified as 20 MPH roads. At this point, all you have is rules in the city planner’s office. In order to actually implement the speed limits, the possible criteria need to be evaluated against the rules.

At this point, you can actually apply the rules to the roads. Doing so requires choosing which roads to evaluate against which criteria (scope). Based on that evaluation, you can actually “tag” the roads by putting up speed limit signs that say 20 MPH (name).

Finally, the files are classified. However, nothing has actually been done based on those classifications.

To actually DO SOMETHING with all these tagged files, the administrator has several choices. First, both file management and reporting based on the classification tabs are available in FSRM. These tools can be used to move, copy, rename, or delete files, as well as setting more traditional file properties. Just as important, reports can be generated to alert administrators or managers that files tagged as Sensitive or Confidential are residing in insecure locations. Using just these two tools can resolve a lot of headaches, as well as create better processes. No doubt the first time that guy in accounting gets asked why he is saving proprietary budget documents to a public share, he won’t even know he was doing that. (“We’ve always saved them to the G Drive.”)

However, even more powerful management can be achieved using PowerShell. Once classified, the FCI system can be used inside PowerShell scripts in order to perform complex tasks or create additional reporting or alert levels.

Creating an entire file classification system from scratch is a daunting prospect. However, building some basic rules to generate reports is a good starting place. From there, needs and concerns will arise that can be easily solved by using the FCI system. Eventually, a file classification as robust and as well-defined as your Active Directory structure will emerge. After all, you didn’t start out the first day of the Active Directory implementation by creating all the objects you have today.

Related posts:

• File Classification Infrastructure in Server 2008 R2 SP2
• Active Directory Rights Management Services: Data Access Controls
• Server 2008: Installing Distributed File System (DFS)

Ironically, these data breaches were seldom the fault of corporate IT professionals who were properly performing their duties of keeping the company file servers up and running, and secure behind firewalls and security protocols. However, when a problem with computers or data arises, everyone turns to IT for answers. Fortunately, Microsoft Windows Server 2008 R2 comes with a free data management tool that can help IT be more proactive in managing data.

File Classification Infrastructure (FCI) in Server 2008 R2

File Classification Infrastructure, or FCI, was released with Server 2008 R2. Although FCI comes bundled for free with all editions of Server 2008 R2, it is not enabled by default. FCI is primarily a function of file servers.

To install FCI, the administrator must first install the File Server Resource Manager (FSRM) role service to the File Services role. All FCI functions, reporting, and configuration are handled from inside of the FSRM console.

Understanding FCI

Understanding the potential power of FCI is done best through example. Consider the following scenario.

Our intrepid hero this episode is a Microsoft Certified Systems Engineer (MCSE) named Clyde. Clyde works for a company that processes third-party transactions of all types (including financial transactions for some clients) for both businesses and customers.

As is the case at most well run corporate IT departments, the server and network infrastructure is housed in secure data centers behind an assortment of firewalls, security protocols, and monitoring systems. Getting at the company’s data by coming in the front door (or the backdoor, sidedoor, or windows) is difficult at best, and impossible for all but the most skilled intruders.

However, the company continues to have embarrassing incidents where confidential, proprietary, or personal information has been unintentionally disclosed in a variety of ways. None of these breaches has been the result of a hacker penetrating the company’s security, but rather mishaps ranging from sensitive data being left on a public share, to files with confidential information being passed on to clients, customers, or in one very embarrassing incident, directly to the media. In each case, internal investigations revealed that all IT systems functioned correctly.

How did sensitive information end up being exposed to the public?

The answer lies at the heart of what FCI can do for making data management easier, less expensive, and more secure.

What is the Point of FCI?

From our example above, we know that Clyde is a competent systems administrator. Like most admins, he has several responsibilities. He manages all of these different functions by utilizing power tools and utilities that allow him to automate as much as possible, and to monitor everything else.

Unfortunately, one critical tool is missing from his arsenal. While Clyde knows that financial reports are confidential, he has no way of knowing which files ARE financial reports, or which ones contain financial data.

Clyde has done what most IT administrators have done. He created specific places for the Accounting Department to store financial reports and other sensitive financial information. Access is locked down and restricted to certain members of the accounting team via several mechanisms including setting carefully configured permissions on servers, desktops, and laptops. Procedures are in place to require notification of any member of the accounting team leaving the company, and access is frequently audited. Security is monitored by both the security team and the administrators both manually and via detection systems. Accessing the financial data stored in these locations is virtually impossible for all but the most capable hackers.

Unfortunately, for Clyde, the Executive Vice President of Operations, who is preparing for a very important presentation to the Board of Directors on Friday, requested a few years worth of financial data. For a presentation like this one, the high-level numbers presented to the public, and even most people within the company, are not sufficient. This presentation requires details like exactly how much revenue comes from each client, and how much profit that generates, and so on.

The accounting team provided the VP with the data he needed. The executive is no dummy; he knows that this information is very sensitive and that its disclosure could hurt the company’s relationships with very important clients. Therefore, he keeps the data safe by storing it in secure locations he has access to on the network and on the encrypted hard drive of his laptop. Every system has worked perfectly and only authorized personnel have accessed the data.

Four months later, with the Board of Directors presentation long since left in the rear view mirror, a new crisis has erupted. The VP is travelling abroad and an issue is blowing up back at home. If the right people don’t get what they need fast, heads are going to roll. A fully authorized user, acting in a proper manner, accesses the backups of the server location where the necessary information is properly stored. He quickly copies all the files from April, encrypts them, and sends them on to the right people. Since almost all of the information required is confidential or sensitive in some manner, even if the file was in a directory called Confidential, there is no reason to single out a particular file.

The day is saved, but the right people to be getting all of the other April files are the wrong people to be looking at one particular spreadsheet from April. The spreadsheet used for the Board presentation that the VP kept just in case a board member came back later with questions about the data. The VP didn’t forget about it; he kept it a few weeks just in case someone came back with questions about the data, and then deleted the file.

How FCI Helps Manage Data Better, Reduces Costs, and Improves Security

The problem in this scenario would eventually be called “employee error” if investigated fully. However, that is a disingenuous conclusion since no one actually acted improperly.

The VP stored a confidential file in a secure manner. The employee retrieving the data was authorized to do so and can’t realistically be expected to examine every file to see what is in it. In fact, that could be a bigger security risk.

The real issue is that there is no practical way for data to be marked as sensitive (or important, or from a certain project, or …) in such a way that the tag follows the data through its lifespan. Even if the original file had been tagged somehow, the new one created by the VP would not have the same tag.

This is where the new File Classification Infrastructure comes in.

With FCI, data can be tagged in exactly this manner. The original spreadsheet from accounting could have been tagged not just as confidential, but as internal financial data, as well, based on where the file was stored originally. Even the new file created by the VP would be tagged in this manner, not because of where the VP saves the file, but rather based upon being part of a particular project. The off-site backup of the project data would retain the file’s tags because tags are retained within the NTFS properties of the file no matter where it is moved in the enterprise. Finally, even if the data were to somehow lose its tagged status, it could be re-tagged properly based upon its content.

These tags can be used by Clyde to monitor for sensitive files in the wrong places, if the file were copied to the web server, for example. The tags can also be used to manipulate how the file is treated. Files tagged like this one, might never be backed up as part of the regular backups. The tags could even be used to prevent the file from being displayed or included in the subsequent copy because the data tagged like this file are considered expired after a certain amount of time.

For the first time, the right tool is available to Clyde without implementing yet another big infrastructure project, without buying even more tools and utilities, and best of all, without implementing another round of company-wide security procedures. All he has to do is set it up.

Related posts:

• Using File Classification Infrastructure to Improve Security, Save Money, and Manage Data
• Server 2008: Windows System Image Manager and WDS
• Server 2008: Configuring Distributed File Systems (DFS)

Back then, I got an unsolicited phone call from a major computer company that was adding a new arm to its consulting division. They found my resume on the Internet, doubled my salary, sent me on consulting gigs across the country, and bought my first house with the discounted stock I bought out of every paycheck.

By the time I left the computer industry (before it became the “technology” industry) there wasn’t a job I couldn’t get an interview for just because I had an MCSE.

(By the way, if you’re wondering, I’m not old. I graduated from college in 1995. I got my certs pretty much right away.)

The Value of MCSE Certifications Today

Of course, things are not the same today as they were then. That is the function of time, to change what was into what is. Nevertheless, the MCSE certification continues to be both a badge of honor among IT professionals, and a powerful card to play when seeking a new job or a promotion.

However, the MCSE gravy train may finally be coming to an end.

When Microsoft first announced its new certification paradigm, there was much hand wringing and more than a few pronouncements that the IT world was doomed. It turns out that those sentiments were premature. The MCSE on Windows Server 2003 stepped in unnoticed as the “next” MCSE certification and IT professionals have been content to pursue, hold, and display the MCSE ever since.

So, what has changed?

Impact of Windows 7

Microsoft released Windows Server 2008 with exactly five years spacing between the last major server OS release (at least based on version number). True to form, corporate IT managers and directors remembered the advice they got somewhere along their career path: “When it comes to Microsoft always wait for SP1.”

That coupled with the diminished economy, budget cuts, and the fact that plenty of companies hated Windows Vista, all add up to Windows Server 2003 remaining the “standard” Microsoft server platform in most enterprises. But, with the release of Windows 7, change is on the horizon.

It has been a decade or more since most corporations last upgraded their operating system. There is no rush to upgrade now, but everyone knows that while Windows XP has become a solid, reliable, work horse, the future is Windows 7.

While there will be no stampede to upgrade to Windows 7 right away (after all, many companies will be waiting for SP1) the fact that an OS upgrade is coming raises some issues.

Perhaps the first question on the minds of IT executives is the order of the upgrades. With most enterprises still running Windows XP and Windows Server 2003, there are two major upgrades in the works. Upgrading to Windows Server 2008 first allows a company to take advantage of the newer, better, faster, easier to use tools to create and distribute an OS upgrade across a large environment.

Windows Server 2008 was released into a world where Microsoft was fully aware that the main upgrade in the enterprise would be from XP to Windows 7, there promises to be less integration issues between Windows 7 and Server 2008; in contrast to Microsoft’s focus the past few years on Server 2003 being used to upgrade XP to Vista.

Even more importantly, Windows Server 2008 not only already has SP1, it also already has R2, which means that more of those real world glitches that are so stubborn to find have been stomped out. Windows 7, in contrast, still hasn’t has a way to go.

MCSE 2008: How I learned to stop worrying and love the MCITP

The new world order that is emerging will soon be looking for system administrators, architects, consultants, engineers, and other IT pros that are certified in Windows Server 2008. They’ll be surprised to find that their former go-to certification, the MCSE is no longer around.

Those keeping an eye on the job boards, especially the more mainstream ones, can expect to see more than a couple postings looking for MCSE 2008 certifications while the world at large slowly comes to terms with Microsoft’s bizarre decision to sacrifice the virtually household name of MCSE for a confusing collection of who-outranks-who certifications.

MCITP is the new MCSE

Microsoft’s PR machine is big, if not effective, and eventually the world will come to at least a basic understanding of the new certification paradigm.

Until then, companies big and small will be looking to map what they already know on top of the new system. When they do, they’ll notice that MCTS can be had with just one exam for one product. That makes it the MCP, or the certification that people use because they can’t get an MCSE, or haven’t gotten there yet.

Then, they will take a look at the MCITP, with it multiple exam requirements across different technologies and products and they will decide that the MCITP is the new MCSE. In other words, shortly after the job postings for MCSE 2008 start appearing, postings for MCITP 2008 will appear without regard to “in what”.

Some hiring managers will overshoot and find themselves woefully lacking in applicants for a position that requires a MCM Server 2008 or a MCA Server Administrator. Then again, perhaps they’ll be flooded with applications that state this, since there is no such thing, perhaps I would be a good match.

How-To Upgrade Your MCSE to MCITP

Microsoft is all too aware that while there are over 155,000 MCSE Server 2003 certifications, there are fewer than 10,000 MCITP Server Administrators. It doesn’t look good when there are not enough people who are “qualified” to handle your products.

Fortunately, for holders of MCSE in Windows Server 2003, there is a very attractive upgrade path to the MCITP certification.

For Server 2003 MCSEs, just one Microsoft certification upgrade exam is required to get three 2008 MCTS certifications — Active Directory, Network Infrastructure, and Applications Infrastructure Configuration.

If you are wondering how to list that kind of certification on your resume and business card — MCTS(3), perhaps? — then you have an idea of why the new certification paradigm is not as user friendly as its predecessor.

Professionals who take advantage of this route can spend the next four or five years as MCSE 2003, MCTS 2008 certified while both the number of companies using Windows Server 2008 and the number of professionals with 2008 certifications slowly starts to build.

For older MCSEs, upgrading to MCITP isn’t as easy. The upgrade exams for Windows Server 2000 MCSEs have already been retired. For MCSE NT4 (like yours truly) the upgrade path involves taking almost all the same exams as someone without a certification. However, many individual exams count toward some of the MCITP requirements, particularly those from the “Choose One” areas.

There will be considerable value in being both a MCSE 2003 and MCITP for the next several years. For that reason, professionals capable of completing the MCSE 2003 certification quickly, would be best off getting their MCSE 2003 and then upgrading it instead of going straight for the MCITP.

Related posts:

• MCSE vs MCITP: Is the MCSE Still Worth It?
• Why Getting Your MCSE Now Is Still A Good Idea
• Dust Off Your MCSE: The New MCTS & MCITP Certifications Are The Future

Here are couple things to keep in mind.

First, the new Windows Server 2008 R2 can only be installed (or upgraded) on 64-bit servers.  If you have Server 2008 installed on a 32-bit server, you will first need to upgrade your hardware to 64-bit before upgrading to Server 2008 R2.

Another thing to think about is whether you want to install R2 from scratch or run an upgrade. Both options are available so it is up to you to decide.  When it comes to a clean install, it is quite easy and almost exactly the same as installing Server 2008.

Is the Upgrade Free?

Well, it depends. 

According to Microsoft, if you purchased Windows Server 2008 together with Software Assurance (SA), your upgrade to Server 2008 R2 is free.  If you did not purchase SA, then unfortunately you will need to purchase R2 before upgrading. 

How much will R2 cost without Software Assurance?  Microsoft did not publish the pricing just yet but you can contact your reseller and ask him/her what would be the cost for your upgrade.

To verify that the upgrade is in fact free for people who purchased SA, I contacted Microsoft via live chat.  Here is our quick conversation:

• Jodi: How may I assist you today?
• Gosia: Hi Jodi, I just have a quick question about Windows Server 2008 R2. If I already have Windows Server 2008 – will the upgrade be free or is there a price tag for upgrading?
• Jodi: Do you know if you purchased Software Assurance when you bought Windows Server 2008?
• Gosia: No… I did not purchase Software Assurance…
• Jodi: Ok, It is my understanding that you will have to purchase the Windows Server 2008 R2 if you did not purchase Software Assurance with the Windows Server 2008.  You will not have to re-purchase CALs, just the server software.
• Gosia: I see. But if I had purchased software assurance then it would have been a free upgrade, right?
• Jodi: Correct.  And, customers that had purchased Software Assurance are eligible for Windows Server 2008 R2 before new customers.
• Gosia: That will teach me a lesson for next time. Thank you for your time. That’s all I needed.
• Jodi: Sure.

So as you can see, purchasing SA is always a good idea and it saves you money in a long run.

Improvements in Server 2008 R2

Why should you upgrade to Server 2008 R2?  Are you going to benefit from the upgrade?

Lisa and I have mentioned a couple of our favorite new features in R2 like the Global Search bar in Active Directory Administrative Center or the Recycle Bin in Active Directory.

But besides the cool toys you’re going to get, here are few reasons for upgrading to R2:

• Better performance on more powerful hardware (Windows Server 2008 R2 can be only installed on 64-bit server)
• “Balanced” power policy for processors
• Enhanced Virtual Desktop Integration (VDI) technology
• Efficient Server Management
• Enhancements to Hyper-V
• File Classification Infrastructure (FCI) Feature for data management
• DirectAccess for remote users
• BranchCache for remote offices
• Improved and Simplified Management for SMBs
• Internet Information Services 7.5 (IIS 7.5)

To read more about these features check out the Top 10 Reasons to Upgrade to R2 from Microsoft.

Upgrading to Server 2008 R2 in 8 Easy Steps

Once you’re ready to upgrade your Server 2008 to R2 follow these simple 8 steps.

 
1.  Start the installation by clicking Install Now.

 
2.  Select the option to get the latest updates for installation by click on the option.

 
3. Next, select the appropriate version — I have Server 2008 Enterprise installed on my system so that’s the one I’m choosing. Once you make your selection, click Next.

 
4.  Accept the License terms and click Next.

 
5.  Now we are ready to select the Upgrade option — go ahead and click on the selection.

 
6.  R2 is now going to run a compatibility checker.  If you get a report that some things need to be improved or corrected, you must do that before continuing with the upgrade.

 
7. My compatibility checker gave me a couple of warnings but nothing major, so I’m going to continue. Once you’re ready, click the Next button.

 
8. Now we wait for the Upgrade to complete.

As you can see it is a very easy upgrade and as long as your compatibility checker turns out ok, you are good to go with your new Windows Server 2008 R2 in no time!

Related posts:

• Upgrading to Server 2008 from Server 2003
• A Guide to Upgrading to SCCM 2007 R2
• Installing Hyper-V Server Role in 7 Easy Steps

Hyper-V is becoming more and more popular in the virtual world and so is the Hyper-V certification — MCTS: Windows Server Virtualization, Configuration.

I’m not sure if many of you were aware that this certification even exists, since it’s not as popular as the other Windows Server certifications. In fact, only a little bit over 2 thousand people hold the Hyper-V cert, compared to over 37, 35 and 28 thousand for Active Directory, Network Infrastructure, and Applications Infrastructure certifications, respectively.

Note: The above stats are from 9/9/09; to see more current stats go here.

Well, now that you’re aware of the Hyper-V cert let me give you all the info on what you need to do to get it.

Hyper-V Exam 70-652 Details

From what I heard, the number of exam questions is around 50 with approximately 90-120 minutes to complete them all. The passing score was reported to be the usual 700.

I hear that it has a lot more lab questions that any other MCTS exam.  Overall, however, this exam is not too difficult and with solid preparation and lots of practice you are guaranteed to ace it.

As always, I strongly suggest going through all the questions and answering the ones you know how to answer first.  While doing so, mark the ones that will take longer for you to answer as well as the ones you have no clue about. Once you go through all the questions and reach the final one on your first “round” go back and review the marked questions for the rest of the allotted time.

By using this method you will have a chance to answer all the questions you know and then spend the rest of your time on the ones that you might not be sure about. Be aware of changing your answers on the second run, though. Chances are your “gut feeling” was right and the answer you picked the first time is correct.

Trust me on this one, I learned the hard way

Hyper-V Exam 70-652 Topics

There are 4 main topics on the Windows Server Virtualization, Configuring exam:

• Installing Hyper-V (14%)
• Configuring and Optimizing Hyper-V (20%)
• Deploying Virtual Machines (30%)
• Managing and Monitoring Virtual Machines (36%)

Make sure you know how to deploy, configure and manage Hyper-V machines since it accounts for nearly 2/3 of the exam questions.

I also found out through lots of forums and the nice people who shared their exam experiences that you need to be familiar with SCVMM08 (Systems Center, Virtual Machine Manager), clustering/quick migration requirements, how to use snapshots withing Hyper-V, Authorization Manager, iSCSI configuration for failover clustering, and versioning information for both VMs and Host Servers.

More details about the topics covered are included on this Microsoft page.

Where to Start

You need to start with a good source of information for learning the theory behind virtualization. You can either buy a book or get a training video for this.

Next you need to get yourself a testing environment and put the theory into practice. This should be quite easy since all you need is one decent machine on which you can run multiple virtual machines, or should I say, Hyper-V machines.

As far as hardware is concerned, I would suggest getting at least 4GB of RAM and at least 200GB of hard disk space. You want to be able to run a couple VMs at the same time and still have decent speed.

If you decide to prepare with our Hyper-V training, Coach will show you step-by-step how to create multiple virtual machines to use for practice plus lots of other cool stuff.

Don’t I Need Experience?

Microsoft suggests that you have “at least one and a half years of experience working in Windows Server 2003 and/or Windows 2008 Server environments as system administrators.”  In addition it states that you should be familiar with virtualization products and technologies.”

This is a pretty typical suggestion from Microsoft, they want to make sure that you get enough experience with the technology before you start preparing for the exam.

I would like to add to that and say that if you don’t have the 1.5 years of experience you can make up some of the lost time by practicing.

Start by building your own virtual environment and practice, practice, practice. Break your virtual machines, fix them, and learn as much as you can. Remember that re-creating your VMs is a quick and easy fix, but that’s not the true fix; you should be able to fix them without re-creating them. Find out what went wrong so you can be a real professional in a production environment and on the job.

Practice is also the best way to learn the material for the exam, so make sure you’re getting enough of it.

Why Do I Want to Get Hyper-V Certified?

Virtualization is becoming more and more popular, which means Virtualization experts are becoming more and more in demand.

The Hyper-V certification will give you an edge over your competitors in job searching. As I mentioned in the beginning, there aren’t a lot of Hyper-V experts out there and this cert will give you a chance to become one.

By preparing for and passing the 70-652 exam you will be able to show prospective employers that you’re proficient in setting up, configuring and managing Hyper-V, which should also make you eligible for that promotion or raise you’ve been looking to score.

Related posts:

• MCTS Demystified: What you need to know about the Server 2008 Applications Infrastructure (exam 70-643) Certification
• MCTS Demystified: What you need to know about the Server 2008 Network Infrastructure (exam 70-642) Certification
• MCTS Demystified: What you need to know about the Server 2008 Active Directory (Exam 70-640) Certification

Right now Coach and I are working on a new course that’s all about Windows Server 2008 R2.

I have to admit, Coach has me pumped about all the new goodies. But we’re not the only ones here at Train Signal who are digging R2. Did you read Gosia’s post on Recycle Bin in Active Directory?

The AD Recycling bin is covered in detail in the new course. Coach is even including his very own super easy PowerShell scripts for enabling and using the AD Recycling Bin. Very cool stuff!

So what else can you expect in the upcoming Server 2008 R2 training?

Here is a list of the hot topics that we plan to cover:

• New Active Directory Management Tools
• The Active Directory Recycling Bin
• New Group Policy Features
• Build an ASP.Net Application Server on Server Core
• Boot from a Virtual Hard Drive
• Hyper-V Dynamic Storage and Quick Switch Settings
• 8 Remote Desktop Services
• Live Migration
• AppLocker
• Branch Cache
• Direct Access

Sign up for our newsletter and keep an eye out for more details about when and how to get this super course when it is complete.

Related posts:

• Adding Storage to a Hyper-V Machine !!Without Shutting it Down!!
• Video: Coach Culbertson on Server 2008 R2 Training — Free for a Limited Time
• Windows Server 2008 R2 SP1 New Features: Dynamic Memory and RemoteFX

Which one is more valuable?  Which one is going to get you a better job?  Should you get your MCSE certification or go for the new MCITP?

These are all valid questions and they are not easy to answer. You have to keep in mind that one certification may work great for one person, and it may not work out so well for another. 

To make the right decision, you really need to take some time, evaluate your situation and your current position, and come up with a solution that will work for you. To help you get started I would suggest to take into consideration your current job situation and ask yourself these questions:

• Is my company still using Server 2003?  If so, for how long?
• Am I going to be involved with Server 2008 migration?
• How long do I plan on staying with my current company?
• Do I plan on getting a new job?
• Do I want a promotion?
• Do I want to completely change my career?

All these questions (and few more that you might come up with) will help you determine which certification path to go with. But here, let me clarify some info for you guys; let’s start with Windows Server 2003.

Windows Server 2003 MCSA/MCSE

The MCSA and MCSE certifications are very similar. In fact, 4 specific exams required for your MCSE will get you your MCSA in the progress. Then once you pass 3 additional exams you become MCSE certified.

So there are 4 exams required for the MCSA and 7 exams for the MCSE. As you can see the MCSE certification is a little more desirable than the MCSA because it’s more advanced and you’re required to know more (plus you need to pass 3 additional exams).

MCSA Exam Requirements

To become MCSA certified you are required to pass the following exams:

• Exam 70-290 – Managing and Maintaining a Windows Server 2003 Environment
• Exam 70-291 – Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure

And one of these two elective exams:

• Exam 70-620 – TS: Configuring Microsoft Windows Vista Client
• Exam 70-270 – Installing, Configuring, and Administering Windows XP Professional

Plus one additional exam, which is also an elective exam, from a list of about 20 exams to choose from. Here is the complete list — just make sure you’re looking at the Elective Exams under MCSA on Windows Server 2003.

This makes it a total of 4 exams — two required and two electives — to obtain your MCSA on Windows Server 2003.

MCSE Exam Requirements

Once you get your MCSA you will only need to pass the following 3 exams to become MCSE Certified:

• Exam 70-293 – Planning and Maintaining a Windows Server 2003 Network Infrastructure
• Exam 70-294 – Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure

And one of these two:

• Exam 70-297 – Designing a Windows Server 2003 Active Directory and Network Infrastructure
• Exam 70-298 – Designing Security for a Windows Server 2003 Network

For more information on the MCSE requirements, exams and their objectives, check out this page.

Windows Server 2008 MCTS/MCITP

Just like with MCSA and MCSE, the MCTS and MCITP certifications are also closely connected. You get one certification on your way to another, except that you earn your MCTS title after passing only a single exam. This is the complete list of the Microsoft exams that you can take to earn your MCTS credential.

It’s also good to know that by passing two of the MCTS exams, you get two MCTS certifications with two specific titles. For example, if you pass the Windows Vista – Configuration (70-620) Exam and the Windows Server 2008 Active Directory Configuration (70-640) Exam you have two MCTS certifications:

1. MCTS: Windows Vista, Configuration
2. MCTS: Windows Server 2008 Active Directory, Configuration

And you can continue to earn your MCTS certifications as you pass additional MCTS exams.

So … how do you earn your MCITP? 

MCITP Exam Requirements

Well first let me mention that there are two MCITP certifications for Windows Server 2008: MCITP: Server Administrator and MCITP: Enterprise Administrator.

For the MCITP Server Administrator Certification you will need to pass:

• Exam 70-640 – TS: Windows Server 2008 Active Directory, Configuring
• Exam 70-642 – TS: Windows Server 2008 Network Infrastructure, Configuring
• Exam 70-646 – Pro: Windows Server 2008, Server Administrator

For the MCITP Enterprise Administrator Certification you will need to pass:

• Exam 70-640 – TS: Windows Server 2008 Active Directory, Configuring
• Exam 70-642 – TS: Windows Server 2008 Network Infrastructure, Configuring
• Exam 70-643 – TS: Windows Server 2008 Applications Infrastructure, Configuring

Plus one of these:

• Exam 70-620 – TS: Configuring Microsoft Windows Vista Client
• Exam 70-624 – TS: Deploying and Maintaining Windows Vista Client and 2007 Microsoft Office System Desktops

And the final exam:

• Exam 70-647 – Pro: Windows Server 2008, Enterprise Administrator

Notice that exams 70-640 and 70-642 are required for both the Server Admin and Enterprise Admin certs (so it’s probably wise to start with those two exams). The MCITP Enterprise Administrator, like the MCSE, is a bit more advanced and as you can tell, it requires more knowledge and more testing.

If you’re interested in learning more about the two Server 2008 MCITP Certs check out:

• Video on Server 2008 MCITP Certifications
• What’s the difference between MCITP Certified Server Admin and Enterprise Admin?
• How To Become a Microsoft Certified IT Professional (MCITP) Server Administrator

The “Other” MCITP Certifications

I know this is a little off topic, since we are talking about Windows Server certification paths … but I thought I’d mention it anyway.

You can get MCITP certified in SQL Server, Exchange, Windows Client and Microsoft Office Project Server — not just Windows Server. There are several options when it comes to earning your MCITP and it really depends on your personal interests and what you would like to do in the future.

Do you like doing support work and see yourself working at a Help Desk? (I worked at a Help Desk and really enjoyed helping people, it was also a really good experience for me.) If so, then the MCITP: Enterprise Support Technician might be the right choice for you.

If you enjoy working with databases then consider one of the SQL Server MCITP’s — there are 6 to choose from!

There are even two choices for your Server 2008 MCITP cert, that I mentioned above, so it’s a good idea to learn as much as you can about the different MCITP certifications before you decide which one is right for you.

Check out the MCITP list from Microsoft to learn more about your choices when it comes to earning your MCITP certification.

The Final Question: MCSE or MCITP?

Option 1: MCITP

To make the right decision, first consider your situation.

If you only passed one of the required MCSE exams and you don’t currently work with Server 2003 (or plan on working with it in the near future) then it might be more advantageous for you to switch over to Server 2008 and start working on your MCITP.

Option 2: MCSE

However, there are many people that already started working towards their MCSE but, for whatever reason didn’t complete it. Should they just abandon their MCSE path and switch to the new MCITP?  Well, it depends.

Think about the questions I posed at the beginning of this article and consider how many exams you still need to complete to earn your MCSE.

At this point it becomes a no brainer — if you already passed 5 of the exams and have only 2 left then you might as well finish your MCSE, since you have already invested a lot of time and effort (not to mention money) on this certification path.

Option 3: MCSE & MCITP

There are advantages to going this route — you earn your MCSE on Server 2003 and then take the additional upgrade exams to earn your MCITP on Server 2008.

The upgrade paths are an awesome shortcut. With an MCSE on Server 2003 (sorry Server 2000 doesn’t qualify for this upgrade) you can earn 3 MCTS certifications by passing a single upgrade exam:

• Exam 70-649 – TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist.

After that you need only one exam to earn your MCITP Server Admin:

• Exam 70-646 – PRO: Windows Server 2008, Server Administrator

Or two exams to earn your MCITP Enterprise Admin:

• Exam 70-620 – TS: Configuring Windows Vista Client

or

• Exam 70-624 – TS: Deploying and Maintaining Windows Vista Client and 2007 Microsoft Office System Desktops

and

• Exam 70-647 – PRO: Windows Server 2008, Enterprise Administrator

Here’s some additional information on upgrading your MCSE to MCITP on Server 2008.

Where to Find MCSE and MCITP Training?

Whatever your decision is going to be — whether you want to finish up your MCSE or go for your MCITP — we got you covered! 

We have training videos that will help you earn both your MCSE and MCITP certifications. We also have training for those of you who are interested in the upgrade path from MCSA/MCSE on Server 2003. 

I took the 70-640 and 70-620 exams after watching our videos, just to test our instructors (I know, I’m evil ) and I passed on first try — and so can you!

Here are links to all of our Windows Server 2003 and 2008 training videos:

MCSA/MCSE Server 2003 Training:

• Windows Server 2003 Active Directory Training
• Windows Server 2003 Network Infrastructure Training
• Windows Server 2003 Security Training

MCTS/MCITP Server 2008 Training:

• Windows Server 2008 MCITP Server Administrator Training Package
• Windows Server 2008 MCITP Enterprise Administrator Training Package
• Upgrading Your MCSE on Server 2003 to Server 2008 MCTS

Time to Decide and Get Windows Server Certified!

No more excuses! No more procrastinating! No more wasting time!

The new MCITP’s have been out for over a year now and it’s time for you to take action — either finish up what you already started on your MCSE path (then take the upgrade exams to earn your MCITP) or, if you think that completing your MCSE is a waste of time then start working toward your MCITP.  Either way, it’s time to make a decision and get certified.

I hope that my article will be able to help you make the right decision and remember, you can always post your specific situation in the comments below and I will try to help you as best as I can! Good luck!

Related posts:

• Dust Off Your MCSE: The New MCTS & MCITP Certifications Are The Future
• What’s the difference between MCITP Certified Server Admin and Enterprise Admin?
• Why Getting Your MCSE Now Is Still A Good Idea

Microsoft has been developing and testing a new virtual lab test experience for a while now. At first it was piloted as the 70-113 exam and then started rolling out officially as the 83-640 exam.  All of this might have flown under your radar until recently. We have been getting questions about this here at Train Signal so I thought I would clarify the situation.

Now (as of May 31st actually) the English version of 70-640 has been completely replaced by the 83-640 in the US and Canada.

So why the change in number? I think it is just an organization thing. Like all the beta exams start with 71, the academic versions 72, and now virtual lab exams start with 83.

What to Expect on the New 83-640 Exam

In this case change really is good. The test is more fun (yes I just said fun and test in the same sentence). I encountered some simulation questions when I took 70-620: TS: Microsoft Windows Vista, Configuring. This, however, is an entirely different beast.

For the new 83-640 test you remotely access a virtual machine. You are given a problem or a list of tasks and need to actually solve it on Server 2008. It is a real VM! You could probably add Mickey Mouse as a user if you wanted to. Would this result in a fail? I don’t recommend trying it.

The Born to Learn Blog posted a neat little demo video so that you can get an idea of what this all looks like. I should also mention that there are still some multiple choice questions on the 83-640 exam as well.

Oh and make sure you show up on time for your exam because you have a virtual machine reserved for you at that certain time. Also, there have been some anecdotal reports of latency (not unexpected) and exams completely crashing. Be patient with the slowness but don’t be afraid to speak up if your exam goes kaput.  

What is it Worth?

Microsoft keeps saying that the 70-640 and the 83-640 have the same objectives and count the same. This is all true but have you thought about an additional intangible quality the new exam will bring you?

I think the certification holds more validity and prestige because it can’t be braindumped. You actually get to show that you know how to do configure AD not just the theory behind it. You can give yourself an extra spirited pat on the back after passing this exam.

I can’t wait to see what virtual lab test they decide to develop next. 642? Exchange 2010?

Good News!

Train Signal’s Server 2008 Active Directory Training course is completely able to prepare you for this new exam. Our training already shows you how and not just why. And … Drum roll please … we even include Transcender’s new one-of-a-kind virtual lab-based product. That way you can practice in the same environment that the test has.

Happy studying!

Related posts:

• MCTS Demystified: What you need to know about the Server 2008 Active Directory (Exam 70-640) Certification
• MCTS Demystified: What you need to know about the Server 2008 Applications Infrastructure (exam 70-643) Certification
• Get SQL Certified: What you need to know about the SQL Server 2008 Developer (70-433) Exam

System Center Configuration Manager 2007 R2 New Features

Application Virtualization Management – Now the machines you are managing don’t need to actually have the Configuration Manager client software installed on them. SCCM now supports running virtual application packages on clients with XP or above.  Here is some more information if you are interested. Get on board – application virtualization is the way of the future.

Forefront Client Security Integration – Use Configuration Manager to monitor Microsoft ForeFront Client Security configuration on the applicable clients. Here is a cute little scenario from Microsoft to give you an idea of how to use ForeFront with SCCM.

SQL Reporting Services Reporting – Seamlessly use the advanced reporting capabilities of SQL Reporting services from Configuration Manager. There are now exciting wealth of reports at your disposal! More info.

Client Status Reporting – Keep tabs on the health of your client machines. Get reports on clients who are not responding, are offline, and more.

Operating System Deployment – Create operating system images and deploy them out to systems. You can even deploy operating systems to several systems at once.

Upgrade Steps

First: Download and run the R2 upgrade file named SPLASH.HTA. See the link below to get your evaluation copy.

Start Screen: Click Configuration Manager 2007 R2 under the Install heading from the start screen. Remember this is an upgrade so you must already have Configuration Manager 2007 SP1 installed on this server.

Welcome Screen: Click Next on the welcome screen.

License Agreement: Read the lovely license, accept it, and click Next.

Registration Information: Enter your information and your product key. Then click Next.

Installation: What a pointless step!

Installation Process: Wait and watch as all the little blue guys fill up the line…

Setup Complete: When the Setup Complete screen displays – and I hope it does – click Finish.

That was possibly the most painless install ever. Now go play with all the new features!

Want to Play Along?

So if you want to give this a try here are links to the evaluation copies of Configuration Manager 2007 SP1 and the R2 up grade

• SCCM 2007 SP1 Evaluation Copy
• SCCM 2007 R2 Upgrade Evaluation Copy

Now that you have SCCM installed and upgraded take the next step: Learn how to manage updates, deploy software/operating systems, and more with System Center Configuration Manager Training.

Related posts:

• A Guide to Installing SCCM 2007 SP1 in Mixed Mode
• Microsoft Systems Center Configuration Manager (SCCM Exam 70-401) Certification Guide
• System Center Configuration Manager 2007 R2: Information, Training, Certification, and Resources

Today I’d like to talk about a few cool things that you can do with Hyper-V.

1. Consolidate Servers — Decrease Your Hardware Footprint

Have you ever seen a typical data center? No? Check out the image below.

Overwhelming, isn’t it?  All you see are racks with servers and then some more racks with servers.  There are hundreds and sometimes thousands of servers in a single data center. 

Imagine buying all these machines and then getting a big enough room with special a cooling system and security to store them in.  And that’s just the basics.

With Hyper-V you can consolidate all these machines and reduce the space required to store them. By investing in one or a few mega machines (depending on your situation) you can move 5, 10 or maybe even 50 servers onto a single machine. If you purchase the Datacenter edition of Server 2008 you can have unlimited number of virtual machines.

Don’t you think this is a great idea?

2. Save Energy, Save Money!

Once you move from hundreds of servers to let’s say a dozen you will start seeing the real benefits — savings in energy and money.

Since you’re not using as much energy to power up and cool your data center you are helping the environment and saving your company money. Lowering energy consumption should be a goal for every company, and Hyper-V makes this possible.

3. Run Linux/Unix OS on Microsoft Servers

Hyper-V also allows you more flexibility. Having different operating systems on your servers is no longer an issue. Using Hyper-V you can install any type of operating system on your virtual machine, so that you can have a Unix based system inside a Microsoft environment and vice versa.

Hyper-V helps you increase flexibility while minimizing limitations.

4. Create Multiple Testing Environments

One of my absolute favorite things about Hyper-V is that it makes testing so much easier.

Say your company is thinking about getting new software, or a new program for all of the employees and you want to test it to make sure it will work properly. The old way was to find a few machines to install the software or program on and then test it by trying to recreate the production environment as much as possible. Then when something breaks and your computer crashes you have to start over. This is a time consuming process and not an easy one.

Hyper-V allows you to create testing environments within minutes. And before installing the new software or program that you need to test you simply take a snapshot of your machine so that if something goes wrong and it crashes you can go back and try again. Easily and in no time.

Hyper-V makes testing more thorough and more detailed because you can concentrate on the actual testing.

5. Deploy Server in 10 Minutes or Less!

So I know you’re thinking that everyone knows that it takes more than 10 minutes to install ANY operating system. And you’re right; the initial install will take longer — but with Hyper-V you may only have to do that once. Let me explain.

Let’s say you install Server 2008 on your first virtual machine. Before making any changes to that server, simply save it as a base installation and make it a read-only server. Once you have your base install all you have to do is copy it (which takes about 10 seconds) and make changes to it, such as your IP address, computer name, role installs, etc.

Any install you do after that is a copy of your initial install so it takes no time at all.

This must be the favorite of any Server admin.

6. Access Multiple Servers with Minimal Movement

No more running around the data center from one corner to another trying to access different servers.  With Hyper-V you won’t have to move a muscle, well … maybe a muscle or two, but definitely not your legs.  You still need your fingers, sorry. 

You will be able to login to your Hyper-V machine and start, reboot, update, modify all of them from one central location.

7. Improve Business Continuity

With Hyper-V you are able to create and/or improve your disaster recovery solutions as well as high availability of your servers. 

Hyper-V provides both Network Load Balancing as well as Clustering to improve your business continuity. It’s already included — all you have to do is set it up and watch it work.  It will save your company in case of a disaster for no additional cost on your end.

See What Hyper-V Can Do For You

Hyper-V can be extremely beneficial to you, the administrator, as well as your company.  It can help you lower energy consumption and cost, increase the value of your hardware, increase the flexibility of your IT environment, save you time and so much more. Hyper-V gives you the benefits of both Server 2008 and virtualization in a single solution.

Now that you’re aware of the basics, here’s where you can get more information on Hyper-V:

• Hyper-V FAQ
• Hyper-V Getting Started Guide
• Microsoft’s Hyper-V website
• Download Hyper-V

And stay tuned for our awesome Hyper-V Training — coming soon!

Related posts:

• Hyper-V and VMware — Part 1: Usability
• Hyper-V Certification – MCTS: Windows Server Virtualization, Configuration (Exam 70-652)
• Hyper-V and VMware — Part 3: Cost