WindowsServer2003R2OverviewandReviewerGuide

1、Windows Server 2003 R2 Reviewers GuideMicrosoft Windows Server 2003 R2 Overview GuideMicrosoft CorporationPublished: December 2005AbstractMicrosoft Windows Server 2003 R2 makes it easier and more cost-effective to extend connectivity and control to identities, locations, data and applications throug

2、hout and beyond an organization. Windows Server 2003 R2 is an update release of the award-winning Windows Server 2003 operating system. Built on Windows Server 2003 with Service Pack 1 (SP1), Windows Server 2003 R2 takes advantage of the stability and security enhancements of a proven code base whil

3、e extending connectivity and control into new areas. Windows Server 2003 R2 offers all of the benefits of Windows Server 2003 with SP1 while greatly improving identity and access management, branch server management, storage configuration and management, and application development inside and outsid

4、e your organizations boundaries. Windows Server 2003 R2 is easy to integrate into an existing Windows Server 2003 environment since it shares the same application compatibility, manageability, and serviceability as existing servers with Windows Server 2003 with SP1.The information contained in this

5、document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of

6、any information presented after the date of publication.This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the ri

7、ghts under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corpo

8、ration.Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license

9、to these patents, trademarks, copyrights, or other intellectual property. 2005 Microsoft Corporation. All rights reserved.Microsoft, Active Directory, ActiveX, IntelliMirror, MSDN, MSN, Outlook, PowerPoint, SharePoint, Visual Studio, Windows, the Windows logo, Windows NT, Windows Server, and Windows

10、 Server System are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Contents TOC o 2-3 h z t Heading 1,1 HYPERLINK l _Toc121566

11、977 Figures PAGEREF _Toc121566977 h vi HYPERLINK l _Toc121566978 Product Overview PAGEREF _Toc121566978 h 1 HYPERLINK l _Toc121566979 Simplified Branch Server Management PAGEREF _Toc121566979 h 1 HYPERLINK l _Toc121566980 Simplified Identity and Access Management PAGEREF _Toc121566980 h 2 HYPERLINK

12、l _Toc121566981 Efficient Storage Management PAGEREF _Toc121566981 h 3 HYPERLINK l _Toc121566982 Improved Web Platform PAGEREF _Toc121566982 h 3 HYPERLINK l _Toc121566983 Cost-Effective Virtualization PAGEREF _Toc121566983 h 4 HYPERLINK l _Toc121566984 Windows Server 2003 R2 Primer PAGEREF _Toc12156

13、6984 h 5 HYPERLINK l _Toc121566985 Release Philosophy PAGEREF _Toc121566985 h 5 HYPERLINK l _Toc121566986 Integration with Windows Server 2003 SP1 PAGEREF _Toc121566986 h 5 HYPERLINK l _Toc121566987 About Windows Server 2003 SP1 PAGEREF _Toc121566987 h 5 HYPERLINK l _Toc121566988 Updates PAGEREF _To

14、c121566988 h 5 HYPERLINK l _Toc121566989 Enhancements PAGEREF _Toc121566989 h 6 HYPERLINK l _Toc121566990 New features PAGEREF _Toc121566990 h 6 HYPERLINK l _Toc121566991 Why Should Organizations Deploy Windows Server 2003 SP1? PAGEREF _Toc121566991 h 7 HYPERLINK l _Toc121566992 Editions and Feature

15、s PAGEREF _Toc121566992 h 7 HYPERLINK l _Toc121566993 System Requirements PAGEREF _Toc121566993 h 8 HYPERLINK l _Toc121566994 Getting Started with Windows Server 2003 R2 PAGEREF _Toc121566994 h 9 HYPERLINK l _Toc121566995 To start Setup for a new installation from the product CDs PAGEREF _Toc1215669

16、95 h 9 HYPERLINK l _Toc121566996 To start Setup for a new installation from the network PAGEREF _Toc121566996 h 9 HYPERLINK l _Toc121566997 To start an upgrade on a computer running Windows Server 2003 (without SP1) PAGEREF _Toc121566997 h 10 HYPERLINK l _Toc121566998 To start an upgrade on a comput

17、er running Windows Server 2003 with SP1 PAGEREF _Toc121566998 h 10 HYPERLINK l _Toc121566999 To start an upgrade on a computer running Microsoft Windows NT Server 4.0 or Microsoft Windows 2000 Server PAGEREF _Toc121566999 h 11 HYPERLINK l _Toc121567000 Technical Overview PAGEREF _Toc121567000 h 12 H

18、YPERLINK l _Toc121567001 Simplified Branch Office Server Management PAGEREF _Toc121567001 h 12 HYPERLINK l _Toc121567002 Branch Office PAGEREF _Toc121567002 h 12 HYPERLINK l _Toc121567003 Distributed File System PAGEREF _Toc121567003 h 12 HYPERLINK l _Toc121567004 Remote Differential Compression PAG

19、EREF _Toc121567004 h 12 HYPERLINK l _Toc121567005 Distributed File System Replication PAGEREF _Toc121567005 h 13 HYPERLINK l _Toc121567006 Distributed File System Namespace PAGEREF _Toc121567006 h 13 HYPERLINK l _Toc121567007 Print Management Console PAGEREF _Toc121567007 h 13 HYPERLINK l _Toc121567

20、008 Simplified Identity and Access Management PAGEREF _Toc121567008 h 14 HYPERLINK l _Toc121567009 Active Directory Federation Services PAGEREF _Toc121567009 h 14 HYPERLINK l _Toc121567010 Classic Web SSO PAGEREF _Toc121567010 h 14 HYPERLINK l _Toc121567011 Federated Web SSO PAGEREF _Toc121567011 h

21、14 HYPERLINK l _Toc121567012 Federated Authorization and .NET Integration PAGEREF _Toc121567012 h 14 HYPERLINK l _Toc121567013 Extensible architecture PAGEREF _Toc121567013 h 15 HYPERLINK l _Toc121567014 Web Services interoperability PAGEREF _Toc121567014 h 15 HYPERLINK l _Toc121567015 What Is ADFS:

22、 In-Depth Information PAGEREF _Toc121567015 h 15 HYPERLINK l _Toc121567016 ADFS Requirements PAGEREF _Toc121567016 h 16 HYPERLINK l _Toc121567017 Hardware requirements PAGEREF _Toc121567017 h 16 HYPERLINK l _Toc121567018 Software requirements PAGEREF _Toc121567018 h 16 HYPERLINK l _Toc121567019 Fede

23、ration Service PAGEREF _Toc121567019 h 16 HYPERLINK l _Toc121567020 Active Directory and ADAM account store requirements PAGEREF _Toc121567020 h 16 HYPERLINK l _Toc121567021 Federation Service Proxy PAGEREF _Toc121567021 h 16 HYPERLINK l _Toc121567022 ADFS Web Service Agent PAGEREF _Toc121567022 h 1

24、7 HYPERLINK l _Toc121567023 Trusted certification authorities PAGEREF _Toc121567023 h 17 HYPERLINK l _Toc121567024 TCP/IP network connectivity PAGEREF _Toc121567024 h 17 HYPERLINK l _Toc121567025 DNS PAGEREF _Toc121567025 h 17 HYPERLINK l _Toc121567026 Web server PAGEREF _Toc121567026 h 17 HYPERLINK

25、 l _Toc121567027 Web browser PAGEREF _Toc121567027 h 17 HYPERLINK l _Toc121567028 Active Directory Application Mode PAGEREF _Toc121567028 h 17 HYPERLINK l _Toc121567029 ADAM Overview PAGEREF _Toc121567029 h 18 HYPERLINK l _Toc121567030 Whats new in ADAM PAGEREF _Toc121567030 h 18 HYPERLINK l _Toc121

26、567031 Microsoft directory technologies PAGEREF _Toc121567031 h 18 HYPERLINK l _Toc121567032 Comparing ADAM to Active Directory PAGEREF _Toc121567032 h 19 HYPERLINK l _Toc121567033 UNIX Identity Management PAGEREF _Toc121567033 h 19 HYPERLINK l _Toc121567034 Efficient Storage Management PAGEREF _Toc

27、121567034 h 20 HYPERLINK l _Toc121567035 Storage Manager for SANs PAGEREF _Toc121567035 h 20 HYPERLINK l _Toc121567036 LUN management for Fibre Channel subsystems PAGEREF _Toc121567036 h 20 HYPERLINK l _Toc121567037 LUN management for iSCSI subsystems PAGEREF _Toc121567037 h 20 HYPERLINK l _Toc12156

28、7038 File Server Resource Management PAGEREF _Toc121567038 h 21 HYPERLINK l _Toc121567039 Storage Resource Manager quotas vs. NTFS disk quotas PAGEREF _Toc121567039 h 21 HYPERLINK l _Toc121567040 Microsoft Services for Network File System PAGEREF _Toc121567040 h 21 HYPERLINK l _Toc121567041 Improved

29、 Web Platform PAGEREF _Toc121567041 h 22 HYPERLINK l _Toc121567042 Windows SharePoint Services PAGEREF _Toc121567042 h 22 HYPERLINK l _Toc121567043 Applications for Windows SharePoint Services PAGEREF _Toc121567043 h 22 HYPERLINK l _Toc121567044 SharePoint sites file storage plus collaboration PAGER

30、EF _Toc121567044 h 22 HYPERLINK l _Toc121567045 SharePoint Central Administration Web browser interface for managing servers PAGEREF _Toc121567045 h 23 HYPERLINK l _Toc121567046 ASP.NET 2.0 PAGEREF _Toc121567046 h 23 HYPERLINK l _Toc121567047 Internet Information Services (IIS) 6.0 PAGEREF _Toc12156

31、7047 h 23 HYPERLINK l _Toc121567048 Cost-Effective Virtualization PAGEREF _Toc121567048 h 24 HYPERLINK l _Toc121567049 Additional Features PAGEREF _Toc121567049 h 24 HYPERLINK l _Toc121567050 Web Services for Management PAGEREF _Toc121567050 h 24 HYPERLINK l _Toc121567051 Subsystem for UNIX-based Ap

32、plications PAGEREF _Toc121567051 h 24 HYPERLINK l _Toc121567052 Support for 64-bit Applications PAGEREF _Toc121567052 h 25 HYPERLINK l _Toc121567053 Common Log File System PAGEREF _Toc121567053 h 25 HYPERLINK l _Toc121567054 MMC 3.0 PAGEREF _Toc121567054 h 26 HYPERLINK l _Toc121567055 Action pane PA

33、GEREF _Toc121567055 h 26 HYPERLINK l _Toc121567056 New Add/Remove Snap-in dialog box PAGEREF _Toc121567056 h 26 HYPERLINK l _Toc121567057 Improved error handling PAGEREF _Toc121567057 h 26 HYPERLINK l _Toc121567058 Summary PAGEREF _Toc121567058 h 27 HYPERLINK l _Toc121567059 Related Links PAGEREF _T

34、oc121567059 h 28Figures TOC h z c Figure HYPERLINK l _Toc119999194 Figure 1: Distributed File System PAGEREF _Toc119999194 h 13 PAGE 28Product OverviewMicrosoft Windows Server 2003 R2 makes it easier and more cost-effective to extend connectivity and control to identities, locations, data, and appli

35、cations throughout and beyond your organization. Windows Server 2003 R2 is an update release of the award-winning Windows Server 2003 operating system. Built on Windows Server 2003 with Service Pack 1 (SP1), Windows Server 2003 R2 takes advantage of the stability and security enhancements of a prove

36、n code base while extending connectivity and control into new areas. Windows Server 2003 R2 offers all the benefits of Windows Server 2003 with SP1 while greatly improving identity and access management, branch server solutions, storage setup and management, and application development inside and ou

37、tside your organizations traditional boundaries. Use Windows Server 2003 R2 to:Simplify Branch Server Management: Windows Server 2003 R2 allows you to maintain the performance, availability, and productivity benefits of a local branch office server while avoiding issues typically associated with bra

38、nch office server solutions such as connectivity limitation and management overhead.Improve Identity and Access Management: Windows Server 2003 R2 includes Active Directory Federation Services, designed to help administrators address identity management challenges by making it possible for organizat

39、ions to share a users identity information more securely across security boundaries. R2 also provides UNIX password synchronization which helps integrate servers running Windows and UNIX by simplifying the process of maintaining secure passwords.Reduce Storage Management Costs: Windows Server 2003 R

40、2 includes new tools designed to provide a centralized view of storage, simplified storage planning, provisioning and maintenance, and improved monitoring and reporting.Provide a rich Web Platform: Windows Server 2003 R2 enables businesses to extend their infrastructure over the Web while reducing d

41、evelopment and management costs through the enhancements delivered with SP1, x64, Windows SharePoint Services, .NET Framework 2.0, and Internet Information Services 6.0.Provide cost effective server virtualization: Windows Server 2003 R2 Enterprise Edition will allow you to run up to 4 virtual insta

42、nces of Windows Server 2003 R2 EE on one licensed physical server or hardware partition, thereby decreasing the costs for server virtualization.Simplified Branch Server ManagementWindows Server 2003 R2 delivers on the vision and provides the underlying technologies needed to simplify integration of

43、branch office servers into a larger enterprise IT ecosystem. Windows Server 2003 R2 allows customers to maintain the performance, availability, and productivity benefits of a local branch office server while avoiding issues typically associated with branch office server solutions such as connectivit

44、y limitations and management overhead.To achieve this vision, Windows Server 2003 R2 provides a branch office framework for the deployment and management of key server roles that are conceptually comprised in the following modes: Optional. Remote clients can failover from the local branch office ser

45、ver to another server determined by closest site selection if local services become unavailable. Clients automatically failback to a preferred server when services are restored.Disposable. The branch office server performs as a service cache that does not hold a unique state and does not require sys

46、tem backup. If the server fails, there is no impact on branch office functionality.Replaceable. If the branch server fails, it can be replaced, re-provisioned, or redeployed server roles are well-adapted for branch offices and varying roles can be deployed as one. The recovery of data is automated.W

47、indows Server 2003 R2, the first in a wave of upcoming branch office technologies from Microsoft and industry partners, offers functionality that streamlines operations for remote file and print servers. Windows Server 2003 R2 features deliver distinct advantages for branch office integration throug

48、h:Robust File Replication Windows Server 2003 R2 includes a completely rewritten replication engine for the Distributed File System (DFS). DFS Replication (DFS-R) provides a robust multimaster file replication service that is significantly more scalable and efficient in synchronizing file servers th

49、an its predecessor, File Replication Services (FRS). DFS-R schedules and throttles replication schemes, supports multiple replication topologies, and utilizes Remote Differential Compression (RDC) to increase WAN efficiency. If WAN connections fail, data can be stored and forwarded when WAN connecti

50、ons become available.Advanced Compression Technologies Remote Differential Compression (RDC) is a WAN-friendly compression technology that replicates only the changes needed to ensure global file consistency. RDC thus provides significant WAN efficiencies, including enhanced performance with replica

51、ted file size, an area of primary importance for branch office servers based on customer feedback. Enhanced Management Tools The Print Management Console (PMC) provides a richer view of a networks printer topology, enabling an IT administrator to monitor and react quickly to printer situations and t

52、hus allow seamless productivity for branch office print users. Ultimately, PMC allows branch servers to perform as print servers, due to the manageability benefits it provides.Microsoft Management Console (MMC) 3.0 has been expanded to include an enterprise-wide administration framework for managing

53、 file and print services. Administrators will benefit from the familiar look and feel of Microsofts standard management interface. Businesses can mitigate the need for on-site administrators or third-party consultants for resolving local issues. The enhanced DFS Namespaces (DFS-N) user interface all

54、ows for easier management of file system roots within a network infrastructure, presenting shared folders to users as a grouping called a “Namespace.” In addition, Microsoft Operations Manager 2005 (MOM) Management Pack for DFS provides more granular management functions than FRS.Centralized Data St

55、ores Centralized data stores reduce the management costs of geographically disbursed mini data centers. The replication of branch office data is automated to a central location at specified intervals when there is available bandwidth. In this way round trips are minimized. Increased End-User Product

56、ivity Branch servers provide reliable and consistent access to the latest data that end users and applications rely on. The server employs local data to handle local requests or central servers in the event that a local server becomes unresponsive.Simplified Identity and Access ManagementOrganizatio

57、ns today are taking advantage of Web services to integrate their disparate internal applications. Furthermore, they are moving towards providing external users access to these internal applications. This allows organizations to better connect and collaborate with their customers, partners, and suppl

58、iers, helping to increase revenue growth, improve end-user satisfaction, and reduce operational costs.Extending internal applications to external users presents IT with security and administration challenges. Organizations must be confident that only appropriate external users are provided access to

59、 company data, and that the access granted is consistent with the users role. . In addition, they must manage the increased administrative workload that commonly results from dramatically expanding the infrastructure user base.Active Directory Federation Services (ADFS) is a new feature in Windows S

60、erver 2003 R2 designed to help administrators address identity management challenges by making it possible for organizations to share a users identity information securely across enterprise or organizational security boundaries. ADFS extends the value of Active Directory deployments to facilitate co