Windows 10: Microsoft raises security standard for next major Windows Server

Source: https://cloudblogs.microsoft.com/win...erver-release/

:)

 

Raising the windows domain and forest issues?


hi,

I run a domain that was all 2003 r2 servers. I recently upgraded all my domain controllers to windows 2012 r2.
That went off without any problems.. Our trust relationships had no issues also.

My first step was to raise the Domain and Forest levels past 2003 to 2008. This went off without a hitch.
These are the features for raising the levels to 2008:

• Features and benefits include all default Active Directory features, all features from the Windows Server 2003 domain functional level, plus:
• Read-Only Domain Controllers – Allows implementation of domain controllers that only host read-only copy of NTDS database.
• Advanced Encryption Services – (AES 128 and 256) support for the Kerberos protocol.
• Distributed File System Replication (DFSR) – Allows SYSVOL to replicate using DFSR instead of older File Replication Service (FRS). It provides more robust and detailed replication of SYSVOL contents.

Forest Level Windows Server 2008

• Features and benefits include all of the features that are available at the Windows Server 2003 forest functional level, but no additional features. All domains that are subsequently added to the forest will operate at the Windows Server 2008 domain functional level by default.

My next step is to raise the domain and forest to 2008 r2, then 2012, and finally 2012 r2. I have been trying to find out exactly what I could expect from raising the Domain and Forest for each step.

The step involving 2008 r2 seems relatively a non issue. But getting the couple of new features seem very nice

Domain Level Windows Server 2008 R2

• All default Active Directory features, all features from the Windows Server 2008 domain functional level, plus 2 new features

Forest Level Windows Server 2008 R2

• All of the features that are available at the Windows Server 2003 forest functional level, plus the following features:

• Active Directory Recycle Bin, which provides the ability to restore deleted objects in their entirety while AD DS is running. <== New Feature very cool
• All domains subsequently added to the forest will operate at the Windows Server 2008 R2 domain functional level by default.

Here is my big concerns for the next raising of domain and forest to 2012.

Forest Level Windows Server 2012:

• All of the features that are available at the Windows Server 2008 R2 forest functional level, but no additional features.
• All domains subsequently added to the forest will operate at the Windows Server 2012 domain functional level by default.

Domain Level Windows Server 2012 R2: <=====Need to investigate more and why this post

• DC-side protections for Protected Users. Protected Users authenticating to a Windows Server 2012 R2 domain can no longer:

• Authenticate with NTLM authentication <==============(what issues may arise)
• Use DES or RC4 cipher suites in Kerberos pre-authentication
• Be delegated with unconstrained or constrained delegation
• Renew user tickets (TGTs) beyond the initial 4-hour lifetime

Will this affect my exchange anywhere users with remote access authenticating either clear of NTLM???
and what would/may not to work properly day 1 when I raise the domain and forest to 2012. I cant really find anyone that can answer a straight question.

Has anyone gone through this? what problems did you have, if any , if a lot???

Any thoughts and suggestions will be much appreciated??

thanks


- - - Updated - - -

One more point... I am not sure if I posted this to the correct forum.. So if I was wrong and it should be in a different one..
PLEASE LET ME KNOW

 

Microsoft Windows Server 2003 Service Pack 2 (SP2)

Microsoft quietly rolled out SP2 for Windows Server 2003 today as part of its critical updates list. Microsoft Windows Server 2003 Service Pack 2 (SP2) is a cumulative service pack that includes the latest updates and provides enhancements to security and stability. In addition, it adds new features and updates to existing Windows Server 2003 features and utilities. The SP2 update can be applied to all Windows Server 2003/Windows XP Professional x64 Edition products.

Source: Microsoft

 

Microsoft Outlines Pricing, Packaging and Licensing for Windows Server 2008

At Microsoft TechEd IT Forum 2007, Bob Kelly, corporate vice president of Infrastructure Server Marketing at Microsoft Corp., updated an audience of more than 5,000 IT professionals on the development of Windows Server 2008 and a new virtualization offering. As Microsoft nears the final stages of Windows Server 2008 development and the Feb. 27, 2008, worldwide launch event, Kelly announced detailed packaging, pricing and licensing information for Windows Server 2008.


This includes Microsoft’s server virtualization technology, Hyper-V, previously code-named “Viridian.” Kelly also announced the stand-alone virtualization server named Microsoft Hyper-V Server. Finally, Kelly outlined a complementary program, called the Server Virtualization Validation Program that allows virtual machine vendors to validate their solutions with Windows Server operating systems.

“Windows Server 2008 redefines what a server operating system delivers to customers,” Kelly said. “With more than 1 million downloads and evaluation copies, we’ve built Windows Server 2008 based on a solid foundation of customer feedback, which is reflected in the product’s ease of management, security enhancements and overall reliability. The unprecedented range of customer choices and the virtualization enhancements will help customers tailor solutions built to fit virtually any business need.”

“As the Johannes Gutenberg-University Mainz’ IT department, it is a priority for us to keep students and staff connected. Accordingly, we are looking forward to Windows Server 2008 features, such as advances in Terminal Services and the Hyper-V technology, to help us do that while maximizing resources,” said Carsten Allendoerfer, director of the Computing Center System Group at the Johannes Gutenberg-University Mainz.

Windows Server 2008 Packaging, Pricing and Licensing
Windows Server 2008 is available in eight versions, three of which include Hyper-V:

• Windows Server 2008 Standard. This version has built-in, enhanced Web and virtualization capabilities, powerful tools that give customers greater control over their servers and streamline configuration and management tasks, and enhanced security features that work to harden the operating system to help protect their data and network and provide a solid, highly-dependable foundation for businesses. With Windows Server 2008 Standard edition, customers get one virtual instance per license.
• Windows Server 2008 Enterprise. Windows Server 2008 Enterprise has the same features as Windows Server 2008 Standard, but with Windows Server 2008 Enterprise edition, customers get four virtual instances per license.
• Windows Server 2008 Datacenter. Windows Server 2008 Datacenter delivers an enterprise-class platform for deploying business-critical applications. It helps customers improve availability and security features, and reduce infrastructure costs, by consolidating applications with virtualization licensing rights. And with Windows Server 2008 Datacenter edition, customers receive unlimited virtual instances per license.

Two versions offered without Hyper-V are targeted at specific workloads:

• Windows Web Server 2008. Designed to be used as a single-purpose Web server, Windows Web Server 2008 delivers a rock-solid foundation of Web infrastructure capabilities in the next-generation Windows Server 2008. Integrated with the newly re-architected Internet Information Services (IIS) 7.0, ASP.NET, and the Microsoft .NET Framework, Windows Web Server 2008 helps enable any organization rapidly deploy Web pages, Web sites, Web applications and Web services.
• Windows Server 2008 for Itanium-based Systems. Windows Server 2008 for Itanium-based Systems is optimized for large databases, and line-of-business and custom applications, providing high availability and scalability up to 64 processors to meet the needs of the most demanding and mission-critical solutions. Support for Itanium-based systems will now be offered through the new Windows Server 2008 for Itanium-based Systems edition, targeted at customers using the Intel Itanium platform and designed for these specific workloads.

Microsoft will also offer a range of versions of Windows Server 2008 without Hyper-V:

• Windows Server 2008 Standard without Hyper-V
• Windows Server 2008 Enterprise without Hyper-V
• Windows Server 2008 Datacenter without Hyper-V

All will be available in 32-bit or 64-bit versions, with the exception of Windows Server 2008 for Itanium-based Systems, which will only be available as a 64-bit version. Other changes include the availability of Windows Web Server 2008, a 64-bit edition of Web server. The Hyper-V feature will only be available with 64-bit editions of Windows Server 2008.

Pricing for all Windows Server 2008 products will be increasing by approximately 1 percent for all distribution channels. Estimated MSRP are listed by each version below:

• Windows Server 2008 Standard: $999 (with five Client Access Licenses, or CALs)
• Windows Server 2008 Enterprise: $3,999 (with 25 CALs)
• Windows Server 2008 Datacenter: $2,999 (per processor)
• Windows Server 2008 for Itanium-based Systems: $2,999 (per processor)
• Windows Web Server 2008: $469
• Windows Server 2008 Standard without Hyper-V: $971 (with five CALs)
• Windows Server 2008 Enterprise without Hyper-V: $3,971 (with 25 CALs)
• Windows Server 2008 Datacenter without Hyper-V: $2,971 (per processor)

Microsoft Hyper-V Server

Microsoft Hyper-V Server, a hypervisor-based server virtualization product, complements the Hyper-V technology within Windows Server 2008, allowing customers to consolidate workloads onto a single physical server. In addition, Microsoft Hyper-V Server will increase original equipment manufacturer (OEM) partners’ ability to offer customers simplified, reliable and cost-effective virtualization solutions that can easily plug in to their existing infrastructure. Partners including Dell Inc., Fujitsu Siemens Computers, Fujitsu Ltd., Hitachi Ltd., HP, IBM Corp., Lenovo, NEC Corp. and Unisys are already committed to working with Microsoft to offer solutions based on Microsoft Hyper-V Server once it is available. The estimated manufacturer’s suggested retail price (MSRP) for Microsoft Hyper-V Server is $28 (U.S.).

“Microsoft and Dell are continuing to work together to provide virtualization solutions and by offering Microsoft Hyper-V Server across a wide variety of Dell servers,” said Rick Becker, vice president of Software and Solutions at Dell. “Our joint customers can continue to leverage their expertise with Microsoft technologies to rapidly provision new services and better manage and simplify their IT environment.”

“The combination of Microsoft Hyper-V Server, industry-leading HP ProLiant and BladeSystem servers, and our comprehensive services portfolio provides customers with an adaptive infrastructure that is simple to operate, reliable and cost effective,” said Scott Farrand, vice president of Industry Standard Server Software at HP. “HP plans to support customers in the adoption of Microsoft Hyper-V Server by delivering solutions that help them realize the benefits of a virtualized environment.”

Server Virtualization Validation Program
In response to industry and customer demands for more comprehensive technical support of virtual machines, Kelly also announced the Server Virtualization Validation Program. Beginning in June 2008, vendors will be able to self-test and validate certain technical requirements of their server virtualization software running Windows Server 2008 and prior versions. The program will enable Microsoft to offer cooperative technical support to customers running Windows Server on validated, non-Windows server virtualization software.

“Microsoft has worked with industry partners to create a technical support model that will meet customers’ growing demands,” Kelly said. “As more customers deploy and virtualize Windows-based applications on Windows Server 2008 or other server virtualization software, this program will help ensure that customers receive a joint support experience for their physical and virtual infrastructure deployments.”

“Technical support of virtualized images is an industrywide challenge,” said Roger Levy, senior vice president and general manager of Open Platform Solutions for Novell. “Our relationship with Microsoft provides us with a jointly supported solution today. Novell and Microsoft continue to collaborate to optimize bidirectional virtualization between Windows and SUSE Linux Enterprise with Xen. Microsoft’s server virtualization validation program provides customers with additional peace of mind when they run Windows as a guest in a validated environment such as SUSE Linux Enterprise.”

Source: Microsoft