Windows Server 2003: best practices for enterprise deployments

521 Pages·2003·16.448 MB·English

by  Danielle Ruest, Nelson Ruest

Color profile: Generic CMYK printer Tippr&ofTeicle/ Windows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Folioi
Windows
®
Server 2003
Best Practices
for Enterprise Deployments
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CMYK prinTitpe&rT epcro/f iWliendows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Folioii
About the Authors
Danielle Ruestis a workflow architect and process consultant focused on people
and organizational issues for large IT deployment projects. During her 22-year
career, she has led change-management processes, developed and delivered
training,andmanagedcommunicationsprogramsduringprocess-implementation
projects. Danielle is the co-author of numerous articles and presentations as well
asPreparing for .NET Enterprise Technologies, a book on mastering change in
the enterprise.
Nelson Ruestis an enterprise architect specializing in infrastructure design.
He is a Microsoft Certified Systems Engineer and Microsoft Certified Trainer.
The goal of his 22-year career has been to assist organizations in mastering the
technologies they depend upon. He is also a frequent guest speaker at Comdex
and other conferences in North America. Nelson is the co-author of numerous
articles as well asPreparing for .NET Enterprise Technologies.
BothworkforResolutionsEnterprises(http://www.Reso-Net.com/),
aCanadianconsultingfirmthatprovidesservicesinthearchitecturaland
projectmanagementfields.
About the Technical Editor
Stephane Asselinhas been involved with information technology for the
past 11 years, with a majority of his time focused on hardware and networking
configurations. He has done infrastructure assessment and host hardening on
Microsoft technologies for five years. He is a Certified Information Systems
SecurityProfessional(CISSP)andaMicrosoftCertifiedSystemsEngineer(MCSE).
More recently, he has been involved in supportability reviews for government
agencies to help them prepare for their Windows Server 2003 migration. He is
currently a senior technical account manager for Microsoft Corporation.
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CMYK printer Tippr&ofTeicle/ Windows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Folioiii
Windows
®
Server 2003
Best Practices
for Enterprise Deployments
Danielle Ruest
Nelson Ruest
McGraw-Hill/Osborne
New York / Chicago / San Francisco
Lisbon / London / Madrid / Mexico City / Milan
New Delhi / San Juan / Seoul / Singapore / Sydney / Toronto
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CMYK prinTitpe&rT epcro/f iWliendows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Folioiv
McGraw-Hill/Osborne
2100 Powell Street, Floor 10
Emeryville, California 94608
U.S.A.
To arrange bulk purchase discounts for sales promotions, premiums, or fund-raisers, please contact
McGraw-Hill/Osborne at the above address. For information on translations or book distributors outside the
U.S.A., please see the International Contact Information page immediately following the index of this book.
Windows®Server 2003: Best Practices for Enterprise Deployments
Copyright © 2003 by The McGraw-Hill Companies. All rights reserved. Printed in the United States of America.
ExceptaspermittedundertheCopyrightActof1976,nopartofthispublicationmaybereproducedordistributed
in any form or by any means, or stored in a database or retrieval system, without the prior written permission
of publisher, with the exception that the program listings may be entered, stored, and executed in a computer
system, but they may not be reproduced for publication.
1234567890 CUS CUS 019876543
ISBN 0-07-222343-X
Publisher Brandon A. Nordin
Vice President &
Associate Publisher Scott Rogers
Acquisitions Editor Franny Kelly
Project Editor Patty Mon
Acquisitions Coordinators Emma Acker
Martin Przybyla
Technical Editor Stephane Asselin
Copy Editor Lunaea Weatherstone
Indexer Karin Arrigoni
Computer Designers Carie Abrew, Lucie Ericksen
Illustrators Melinda Moore Lytle, Michael Mueller,
Danielle Ruest, Lyssa Wald
Series Design Roberta Steele
Cover Series Design Jeff Weeks
This book was composed with Corel VENTURA™ Publisher.
Information has been obtained byMcGraw-Hill/Osborne from sources believed to be reliable. However, because of the possibility of human
or mechanical error by our sources,McGraw-Hill/Osborne, or others,McGraw-Hill/Osborne does not guarantee the accuracy, adequacy, or
completeness of any information and is not responsible for any errors or omissions or the results obtained from the use of such information.
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CMYK printer Tippr&ofTeicle/ Windows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Foliov
If there is one thing we have learned in our 22 years of
experience, it is that even if technology is constantly changing,
one thing remains the same: we must always take the time to
master a technology before implementing it. But, even before that,
we must fully comprehend our needs. The best way to achieve
this is to work as a team. Including personnel from all areas of
the enterprise can only make a better product in the end.
Thus we dedicate this book to you, the reader, in hopes that
it will help you achieve this goal.
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CMYK prinTitpe&rT epcro/f iWliendows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Foliovi
This page intentionally left blank
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:12 PM
Color profile: Generic CTMipYK& Tpercin/t Werin pdroowfisl Seerver 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/ Front Matter
Composite Default screen
Contents at a Glance
Chapter 1 Planning for Windows Server 2003 . . . . . . . . . . . . . . . . . . . . 1
Chapter 2 Preparing for Massive Installations of Windows Server 2003 . . . . . . . 36
Chapter 3 Designing the Active Directory . . . . . . . . . . . . . . . . . . . . . . . 78
Chapter 4 Designing the Enterprise Network IP Infrastructure . . . . . . . . . . . . . 140
Chapter 5 Building the PC Organizational Unit Infrastructure . . . . . . . . . . . . . 198
Chapter 6 Preparing the User Organizational Unit Infrastructure . . . . . . . . . . . 244
Chapter 7 Designing the Network Services Infrastructure . . . . . . . . . . . . . . . 286
Chapter 8 Managing Enterprise Security . . . . . . . . . . . . . . . . . . . . . . . 348
Chapter 9 Creating a Resilient Infrastructure . . . . . . . . . . . . . . . . . . . . . 408
Chapter 10 Putting the Enterprise Network into Production . . . . . . . . . . . . . . 446
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469
vii
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:13 PM
Color profile: Generic CMYK prinTitpe&rT epcro/f iWliendows Server 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/
Composite Default screen
Blind Folioviii
This page intentionally left blank
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:13 PM
Color profile: Generic CTMipYK& Tpercin/t Werin pdroowfisl Seerver 2003: Best Practices for Enterprise Deployments / Ruest & Ruest / 222343-x/ Front Matter
Composite Default screen
Contents
Preface, xix
Acknowledgments, xxi
Introduction, xxiii
Chapter 1 Planning for Windows Server 2003 . . . . . . . . . . . . . . . . . . . . . . 1
Windows Server 2003 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Building the Foundation of the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
The Server Lifecycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
The Service Lifecycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
A New Model for Server Construction and Management . . . . . . . . . . . . . . . . . . . . 8
The Benefits of the PASS Model . . . . . . . . . . . . . . . . . . . . . . . . . . 11
A Structured Approach: Using Standard Operating Procedures . . . . . . . . . . . . . . . . . 12
SOP Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Enterprise Network Architectures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Building on Windows 2000: The WS03 Model . . . . . . . . . . . . . . . . . . . . . . . . . 15
Product Activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
The Windows Server Enterprise Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Designing the Enterprise Network Architecture . . . . . . . . . . . . . . . . . . . . . . . . 19
The Architectural Design Process . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Performing a Situation Review and Needs Analysis . . . . . . . . . . . . . . . . . 22
The Changing Role of Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Consolidating Servers with Windows Server 2003 . . . . . . . . . . . . . . . . . 23
Using the PASS Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Migration Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
ix
P:\010Comp\Tip&Tec\343-x\fm.vp
Wednesday, March 26, 2003 4:49:13 PM