Archive for SBS 2008

SBS 2008 R2 release date..

The much touted and anticipated R2 version of Microsoft’s much loved Small Business Server 2008 package is now looking likely to be released 3rd-4th calendar quarter this year.
I was recently at a Microsoft event in the UK (http://wp.me/pcs3j-7G) and speaking with a very well respected Microsoft guy who knows a thing or two about SBS.. The educated feeling is that SBS 2008 R2 will be announced at the Microsoft Worldwide Partner Conference (WPC 2010) in Washington D.C. on July 11-15, 2010.
It is likely to be scheduled for Released to Manufacturer (RTM) a few months later, possibly in time for the European leg of Tech-Ed (back in Berlin for the next couple of years) around October-November.

So, a disapointment for those that thought (like I did) that the R2 release would be around 120 days post Windows Server 2008 R2 which was launched October 22nd along with Windows 7, but at least it is coming!, unlike EBS 2008 R2 which was shelved along with discontinuation of development of EBS see www.microsoft.com/ebs/en/us/faq.aspx#dis for more..

Leave a Comment

Migrating away (up!) from SBS2008 – licensing alerts

Recently replied to an old EBS2008 TAP friend and good mucker re: his plans to migrate away from EBS2008 and thought this post might help someone out there…

I’ll start by saying – no we haven’t done this with EBS!

But concur I’d be cautious on licensing.  We did something similar with our own production environment with that other license limited server product.. SBS2008.

With SBS2008 upgrading the domain/forest, and schema to R2 didn’t appear to be an issue but transferring the FSMO roles was.  SBS was soon (e.g. 24hrs) sending alerts stating “The FSMO role does not comply with the license policy“ – I’m pretty sure eventually seizing them back!!??!!

e.g.

-----Original Message-----
From: SBSMonAcct@thefullcircle.com [mailto:SBSMonAcct@thefullcircle.com]
Sent: 10 December 2009 19:37
To: +sysadmin
Subject: Windows Small Business Server 2008: Critical Event Notification

An alert was detected on your network. Further investigation into the issue is recommended.

Computer: SBSSRV01
Date/Time generated: 10/12/2009 15:50:24
Title: The FSMO role does not comply with the license policy
Source: License Compliance service
Description:
The FSMO Role Check detected a condition in your environment that is out of compliance with the licensing policy. The Management Server must hold the primary domain controller and domain naming master Active Directory roles. Please move the Active Directory roles to the Management Server now.

 

-----Original Message-----

From: SBSMonAcct@thefullcircle.com [mailto:SBSMonAcct@thefullcircle.com]

Sent: 10 December 2009 12:02

To: +sysadmin

Subject: Windows Small Business Server 2008: Critical Event Notification

 

An alert was detected on your network. Further investigation into the issue is recommended.

 

Computer: SBSSRV01

Date/Time generated: 10/12/2009 11:50:25

Title: Forest trust licensing error

Source: License Compliance service

Description:

The Forest Trust Check in the Licensing component did not pass because error 0x8007054b occurred in function f1 [BXHE].

The specified domain either does not exist or could not be contacted.

 

Make sure that your DNS server can be contacted and the following services are running on it: Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected.

 

 

Computer: SBSSRV01

Date/Time generated: 10/12/2009 11:50:25

Title: The FSMO role does not comply with the license policy

Source: License Compliance service

Description:

The FSMO Role Check detected a condition in your environment that is out of compliance with the licensing policy. The Management Server must hold the primary domain controller and domain naming master Active Directory roles. Please move the Active Directory roles to the Management Server now.

 

 

I found very little info on this last year, and in between adding R2 DC’s, Exchange 2010 (fun with mail routing), and adding SCE2010 Beta then RC into the network we ended up leaving the virtualised SBS2008 box in play – other priorities (customers!) have been more important.

Somewhat useless with helping find the cause – http://technet.microsoft.com/en-us/library/dd443466%28WS.10%29.aspx

very little info on it too –

http://www.google.co.uk/#hl=en&source=hp&q=The+FSMO+role+does+not+comply+with+the+license+policy&btnG=Google+Search&meta=&aq=f&oq=&fp=b432878984070c8a

Hope this helps, if just a little!

Leave a Comment

Training – Implementing and Administering Windows Small Business Server 2008

This week is another out of the office on Microsoft partner training – 4 days of SBS 2008…

Course code: 44CO120 – M6445 – Implementing and Administering Windows Small Business Server 2008

Where: QA Tabernacle Street, London, EC2A 4DT

Who: Mark Cresswell (mark.cresswell@qa.com)

44CO120 – M6445 – Implementing and Administering Windows Small Business Server 2008

Summary:
This four-day instructor-led course provides students with the knowledge and skills to plan, implement, and manage Windows Small Business Server 2008
This course is intended for technology consultants, system integrators, and in-house technology staff that serve small and medium- sized businesses

Prerequisites:
In addition to their professional experience, students who attend this training should have technical knowledge and skills equivalent to the following courses:
  Course 6420: Fundamentals of a Windows Sever 2008 Network and Applications Infrastructure
  Course 6424: Fundamentals of Windows Server 2008 Active Directory
  Course 5115: Installing and Configuring the Windows Vista Operating
  System
  Course 5116: Configuring Windows Vista Mobile Computing and Applications

Objectives:
Delegates will learn how to Install Microsoft Windows Small Business Server 2008.
Migrate to Microsoft Windows Small Business Server 2008.
Configure Windows Small Business Server 2008 using the Windows Small Business Server 2008 Console.
Manage users and groups in Windows Small Business Server 2008.
Manage messaging and collaboration in Windows Small Business Server 2008.
Manage and monitor Windows Small Business Server 2008.
Secure a Windows Small Business Server 2008 network.
Expand a Windows Small Business Server 2008 network

Top tips & links picked up during the course…

Microsoft SBS docs – http://tinyurl.com/sbs-docs

Known Post Installation Event Errors from SBS 2008 – http://support.microsoft.com/default.aspx/kb/957713

Microsoft blog guide to WSS3/MOSS alternate access mappings – http://tinyurl.com/wss-aam

more tiny urls..  /sbs-rsg,  /sbs-docs, /sbs-grp

Microsoft OEM site – http://oem.microsoft.com

Top 100 public SharePoint sites – http://www.wssdemo.com/Pages/topwebsites.aspx

Free Block List provider – http://www.spamhaus.org/zen
This is gold!  add zen.spamhaus.org to your Block List Providers and switch on connection filtering.
One caveat to note, every time an email is processed by your server it performs a lookup to zen.spamhaus.org – if they receive too many lookups they will suggest that you take up their paid service.  The threshold for this is huge (100,000 SMTP connections per day or 300,000 lookups), and you must not be using it commercially i.e. providing a managed service incorporating their service.

Why disable or rename the Administrator account… because it has a well-known SID! (… -500).

Use child domains for all external domain records just like the default remote.yourdomain.com so to get round duplicate maintainence of internal and external resources (and prevent confusion when vpn’d in!)

SBS default groups have an attribute that mark them as created by the SBS setup process or management console.. so be mindful if creating outside of the console!
Fool it by opening AD Users & Computers, open the attribute editor for the group and edit the msSBSCreatedState to ‘Created’

Roaming profiles – SBS has not been designed to support roaming profiles and Microsoft will not support issues with them (in this context), e.g. production of a SBS specific hotfix to address an issue.
Advised not to use roaming profiles bar controlled environments such as standard build, lack of local admins, quotas, group policy lockdown, etc.

Client migration – above half a dozen client machines consider using the User State Migration Toolkit (USMT) to script the process,  ROI should be worthwhile in configuration time vs time saved at the desktop.

Segway! – the BBC iPlayer program is a P2P service that shares out content, based on Ch4 4oD package – remove it!

Need to inject drivers into WinRE or WinPE boot environments..?  don’t be scared!  use drvload and PEImage, more on TechNet Edge – http://edge.technet.com/Media/WinRE-and-free-stuff-with-Sean-Kearney/

SSL certs for SBS – don’t buy single certs unless you have to.   Host headers and ssl is tricky, has to be a ucc cert or wildcard cert to support.
Default cert purchase from now on will be a wildcard cert, unless a bloody good reason (or lots of small ones… read $’s) not to!

Security cost triangle – you can have any two but not all 3!
low cost, usability, security

Relability and Performance monitor – what a gem!

migration to SBS2008..

My recommendation is to start with Philip Elder’s great posts at http://blog.mpecsinc.ca/
SBS 2008 deployment checklist – http://blog.mpecsinc.ca/2009/05/sbs-2008-setup-checklist-v111.html
SBS2003 to 2008 migration guide – http://blog.mpecsinc.ca/2009/06/sbs-2003-to-sbs-2008-migration-guide.html

Exchange & Circular Logging…
A potential for lots of debate, but I’d agree with Mark that whilst migrating mailboxes, if circluar logging is not enabled, enable it otherwise run the risk of filling up disks with log files!

Disable circular logging post event and let the Exchange aware backups submit the log clear down.  However, if the store data and logs are on the same spindle you may as well leave circular logging on as you get little or no recovery benefits.

How to remove the last legacy Exchange server from an organisation – http://technet.microsoft.com/en-us/library/bb288905.aspx (http://tinyurl.com/sbs-exmig)

Common mistakes when upgrading Exchange 2000/2003 to 2007 – http://support.microsoft.com/kb/555854/en-us

ipconfig /displaydns

Microsoft Desktop Optimization Pack
http://technet.microsoft.com/en-gb/windows/bb899442.aspx
Advanced Group Policy Management – http://technet.microsoft.com/en-us/library/cc749396(WS.10).aspx
Asset Inventory Service – http://www.microsoft.com/windows/enterprise/products/mdop/ais.aspx
Microsoft Diagnostics and Recovery Toolset (DaRT)
System Center Desktop Error Monitoring (DEM)
Microsoft Asset Inventory Service (AIS)

Comments (3)