Windows Server 2008 Security Features.ppt

{Windows Server 2008 Security Features} Daniel Petri MVP, Senior IT Consultant www.petri.co.il daniel@petri.co.il Agenda Server Core Overview Server Core Supported Roles and Features Server Core Management Options Windows Firewall with Advanced Security Server and Domain Isolation Network Access Protection Group Policy Enhancements Server Core Overview Windows Server is frequently deployed to support a single role or a fixed workload However, you must deploy and service all of Windows Server, along with tons of functions, features, files, services and other binaries that are probably not needed for the specific function of that server. Server Core Overview Server Core is: A minimal installation option for Windows Server 2008 Command Line interface, no GUI Shell Included in the following Windows Server 2008 SKUs Web Standard Enterprise Datacenter Available for x86 and x64 Same binaries as full version Windows directory Full: 6 GB, 35K files Core: 1.5 GB 13K files Server Core Benefits Reduced maintenance Because the Server Core installation option installs only what is required to have a manageable server for the specific roles, less maintenance is required than on a full installation of Windows Server 2008. Reduced attack surface Because Server Core installations are minimal, there are fewer applications running on the server, which decreases the attack surface. Server Core Benefits Reduced management Because fewer applications and services are installed on a server running the Server Core installation, there is less to manage. Less disk space required A Server Core installation requires only about 1 GB of disk space to install and approximately 2 GB for operations after the installation. Server Core Benefits Server Core reduces the patches required Servicing burden is reduced by removing components that are most often serviced Windows 2000 is ~60% reduction Windows Server 2003 is ~40% reduction Not an application platform No .NET Supported Roles Active Direct