Server Roles

Module OverviewRole-Based DeploymentDeploying Role-Specific Servers

Lesson 1: Role-Based DeploymentWhat Is a Server Role?What Are Role Services?What Are Features?Overview of Server ManagerDemonstration: How to Manage Roles and Features

Server roles:What Is a Server Role?Active Directory Certificate ServicesActive Directory Domain Services Active Directory Federation ServicesActive Directory Lightweight Directory ServicesActive Directory Rights Management Services Application ServerDHCP ServerDNS ServerFax ServerFile ServicesHyper-VNetwork Policy and Access ServicesPrint and Document ServicesRemote Desktop ServicesWeb Server (IIS)Windows Deployment ServicesWindows Server Update ServicesServer roles in Windows Server 2008 R2 describe a servers primary function

What Are Role Services?Role services allow you to control which role functionality is installed and enabled

What Are Features?Server features provide auxiliary or supporting functions to servers

Overview of Server ManagerFile ServerActive Directory

Demonstration: How to Manage Roles and FeaturesIn this demonstration, you will see how to add roles and features to a server

Lesson 2: Deploying Role-Specific ServersWhat Is a File Server?What Is a Domain Controller?What Is an Application Server?What Is a Web Server?What Is a Remote Access Server?

What Is a File Server?A file server:Provides storage for users filesProvides backup and restore mechanismsEnsures appropriate levels of access to users files through security settingsShares the folders that contain users files

What Is a Domain Controller?A domain controller:Holds a copy of AD DSIs located by querying DNSAuthenticates users to the networkResponds to requests for Active Directory informationsales. Contoso. comContoso. com

The applications that run on application servers are typically divided into two categories:What Is an Application Server?An application server is a computer that is dedicated to running network-aware application softwareTraditional applicationsWeb-based applications

A Web server is a server computer attached to either the Internet or the corporate intranet providing content:What Is a Web Server?Static ContentWeb-based applicationsStreaming Content

What Is a Remote Access Server?

Remote Access ServerRemote Computer at Internet Hot SpotWireless Access PointWireless ClientsRemote Computer at HomeCorporate resourcesRemote access is access to corporate resources from outside the corporate network

Lab: Implementing Server RolesExercise 1: Determining the Appropriate Roles to DeployExercise 2: Deploying the Determined Server Roles

Estimated time: 30 minutesLogon information

Lab ScenarioContoso, Ltd. has deployed client computers to a number of new R & D branch offices. It is planned to install new server computers at these branches to enable network infrastructure features, to support custom applications, and to enable file and print services to support office productivity applications on the client computers. Your task is to read the requirements document and determine what server roles are required to support the needs of users at branch offices

Lab ReviewIn the lab, you deployed the AD DS role to a server. When considering branch offices, how might you implement AD DS on a branch domain controller?When installing the File Services role during the lab, which role services might prove especially useful for a branch office?

Module Review and TakeawaysReview QuestionsToolsBest Practices

Presentation: 90 minutesLab: 60 minutes

After completing this module, students will be able to:Install Windows Server.Manage Services.Manage Devices and Device Drivers.

Required materialsTo teach this module, you need the Microsoft Office PowerPoint file 6420B_05.ppt.

Important: We recommend that you use PowerPoint 2002 or a later version to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, all the features of the slides might not be display correctly.

Preparation tasksTo prepare for this module: Read all of the materials for this module. Practice performing the demonstrations and the lab exercises. Work through the Module Review and Takeaways section, and determine how you will use this section to reinforce student learning and promote knowledge transfer to on-the-job performance.

Make sure that students are aware that the Course Companion CD contains additional module information and resources.

*After completing this module, students will be able to:Select and install server roles and features to support different types of server.Describe different types of server.

**The key focus of this lesson is:Describe server roles.Describe role services.Describe server features.Use Server Manager.Manage server roles and features.

Ensure that the students understand why they would want to dedicate a server to a particular role and why they would commonly see many roles installed on one server. Briefly discuss the common roles that are available and for what they are used. Mention that the Active Directory binaries are installed when the AD DS role is installed, but DCPromo still needs to be run to create a domain controller.

Reference:Windows Server 2008 R2: Edition Comparison by Server Rolehttp://go.microsoft.com/fwlink/?LinkID=199658*Ensure that the students understand that a role may consist of several role services. This enables them to more accurately define the function of a server computer by selecting only the role services they need.

While we have provided a list of File Services role services, you can use Server Manager to display other role services of other server roles. *Explain to the students that features offer more functionality to the server than adding a role does. Often, the inclusion of features augments the functionality of installed roles. Discuss some of the common features, such as Group Policy Management, Remote Server Administration Tools (RSAT), Backup, and Windows PowerShell. Point out that the Windows Server Backup appears in the Administrative Tools folder on the Start menu even though it may not be installed yet.

Open Server Manager and show the students the available features as you discuss them. *Explain how Server Manager replaces multiple consoles and can provide one-stop administration.

Ask students their opinion on the new Server Manager tools. Do they find them easier to use than the old interfaces?

*Demonstration steps:Note: You require the 6420B-NYC-DC1 and the 6420B-NYC-SVR3 virtual machines to complete this demonstration. Log on to both virtual machines as Contoso\Administrator with the password of Pa$$w0rd.1. Switch to the NYC-SVR3 computer.2. Click Start, point to Administrative Tools, and then click Server Manager.3. In Server Manager, in the navigation pane, click Roles, and then in the Results pane, click Add Roles.4. In the Add Roles Wizard, on the Before you Begin page, click Next and then on the Select Server Roles page, in the Roles list, select the following check boxes, and then click Next. DHCP Server DNS Server5. On the DNS Server and DHCP Server introduction pages, click Next.6. On the Select Network Connection Bindings page, remove the check mark next to 192.168.10.1 and then click Next.7. On the Specify IPv4 DNS Server Settings page, click Next.8. On the Specify IPv4 WINS Server Settings page, click Next.9. On the Add or Edit DHCP Scopes page, click Next.10. On the Configure DHCPv6 Stateless Mode page, click Next.11. On the Specify IPv6 DNS Server Settings page, click Next.12. On the Authorize DHCP Server page, click Next.13. On the Confirm Installation Selections page, click Install.14. On the Installation Results page, click Close.15. In the Results pane, click Add Roles.Note: It is necessary to add the AD DS role separately from the DNS role.16. In the Add Roles Wizard, on the Before you Begin page click Next and then click Next on the Select Server Roles page, in the Roles list, select the Active Directory Domain Services check box.17. In the Add Roles Wizard dialog box, click Add Required Features.18. On the Select Server Roles page, click Next.19. On the Active Directory Domain Services page, click Next.20. On the Confirm Installation Selections page, click Install.21. On the Installation Results page, click Close.Note: You are not required to configure AD DS.

**The key focus of this lesson is:Describe a file and print server.Describe a domain controller.Describe an application server.Describe a Web server.Describe a remote access server.Describe the term file server. Mention printer servers. Make sure students are clear about the fact that this is a specific type of server rather than a generic term.

*Describe a domain controller to students. Talk about what happens when a domain controller is unavailable.Mention that the domain controller has a copy of the domain partition for the local domain, the configuration partition, and the schema partition.Mention RODC.

Bear in mind that the following module focuses on Active Directory Domain Services (AD DS).

Question: How many domain controllers should you have?Answer: In a large organization, you should have at least two domain controllers per physical location. In smaller organizations, you may have only one domain controller per physical location. Some smaller locations may use a domain controller that is located across a WAN link.

*Discussion prompt: Ask students whether they are familiar with the term client-server. Ask them what it means to them. *Discussion prompts:

Ask students to discuss Web sites that they frequently use that provide different types of content.

Ask students if they have seen the https:// prefix on a Web site page and what they think it means. *Describe remote access for students. Ask students about the types of resources that clients may want to access for remote access such as email or documents. Also talk about scenarios where remote access might be used such as doing work from home and while traveling on business. Mention that there are security concerns when accessing data remotely.

Also consider raising the issue of firewalls. Firewalls are typically located between remote users and the Internet. They are also typically located between the remote access server and the Internet.

Question: What are some examples of security concerns for data that is accessed remotely?Answer: Concerns for data that is accessed remotely include: Use of packet sniffers to capture data in transit. Storage of files on remote systems that are not secure. Transmission of usernames and passwords over the Internet. Data stored on mobile devices and laptops that are lost or stolen.

**Note: optionally, you can choose to run exercise 1 as a discussion depending upon your students abilitiesLab ScenarioContoso, Ltd. has deployed client computers to a number of new R & D branch offices. It is planned to install new server computers at these branches to enable network infrastructure features, to support custom applications, and to enable file and print services to support office productivity applications on the client computers. Your task is to read the requirements document and determine what server roles are required to support the needs of users at branch offices.

Lab Objective(s): Select the appropriate roles, services, and features based on a presented scenario.Implement the selected roles.

Exercise 1: Determining the Appropriate Roles to DeployRead the supporting documentation.Complete the Branch Office Server Deployment Recommendations document.

Exercise 2: Deploying the Determined Server RolesDeploy Infrastructure-Related RolesDeploy File and Print-Related RolesDeploy Application Server-Related RolesDeploy Supplemental Roles and Features

*Question: In the lab, you deployed the AD DS role to a server. When considering branch offices, how might you implement AD DS on a branch domain controller?Answer: Consider configuring an RODC at the branch when you configure the AD DS role with Dcpromo.exe.

Question: When installing the File Services role during the lab, which role services might prove especially useful for a branch office?Answer: BranchCache would be useful for certain situations. **Question: How is a server role different from a server feature?Answer: A server role defines primary functionality while a server feature adds supplementary or supporting functions to server roles Question: You have just deployed the AD DS server role. What else must you do?Answer: You must also configure the domain controller. This involves running Dcpromo.exe to configure the specific role of the domain controller. You can run dcpromo.exe and have the server role binaries automatically install without needing to add them as a separate task in Server Manager.