Re: newbie: a/d design and setup

From: RP (rp_at_nospam.com)
Date: 04/04/04


Date: Sun, 4 Apr 2004 10:36:31 -0400

Gus, thanks for all the great info! I was thinking about buying a book on
SBS 2003. Are there any books you know offhand that you would recommend?
Meanwhile I am printing that guide as we speak.

Also, I did not know the premium edition costs $1000 more than standard?
Currently, I have ordered and installed the premium trial kit on my test
server.

thanks so much,
Param

P.S. Which linksys firewall would you recommend? I would need one that would
plug into the switches (which we already have).

<Gus> wrote in message news:#YuYuOaGEHA.1228@TK2MSFTNGP11.phx.gbl...
> Param,
>
> I would highly recommend purchasing a Small Business Server book to read
up
> on. I'll answer a few of your questions though.
>
> If all the sites have high speed internet access, you can setup the SBS at
> your main location, purchase Windows 2k3 Standard Server for the other two
> locations, then setup a VPN tunnel to the other sites. DCPROMO the other
> two servers so they are DC's attached to the 2k3 SBS and all the account
> information will be replicated. Make sure you setup subnets so that
> replication is not constant and only goes accross the VPN wire at specific
> times.
>
> I would recommend doing a fresh install on the server you currently have.
> Take the data and offload to two client machines (safety) and format the
> server and setup. You need to make sure the hardware requirements meet
the
> minimum for SBS and that it meets your minimum for performance. If you
have
> run out of disk space on NT 4.0, you will probably need to upgrade the
Hard
> Drive.
>
> As for mail services, I would recommend using Exchange (you have the
> licenses already). You can then cancel your pop3 subscription and save
the
> company money.
>
> When you install SBS2k3, Exchange is automatically setup. There are many
> wizards that step you through setting up the users and workstations. The
> web site is already setup also, which by default you can access one of two
> ways: http://www.company.com/exchange or http://www.company.com/remote.
I
> would suggest having the users login to the remote site because it gives
the
> users access to more options, like remote desktop to their workstations.
> Read the SBS 2003 manual to find out what ports to open.
>
> As for your network setup, its everyones preference on how to setup with
the
> NICs. If you want to save money, save yourself the extra $1000 and don't
> buy the premium edition. Go out and buy like a Linksys VPN
router/firewall.
> Buy 3 total (one for each location) and setup the VPN connections via the
> Linksys routers instead of the servers. Again, its preference and whether
> you want to save money.
>
> Not sure if you have concerns of monitoring internet usage but if you do,
> then you will need to buy premium edition to get the logging and tracking
of
> ISA server. Otherwise if you don't, the linksys route would be most cost
> effective. If you do get premium, then use the two nic route.
>
> SBS does allow remote users to VPN into the network.
>
> As for changing the web port number, I haven't done an install in a while
> but I believe by default isa uses port 80 for internal web clients????
Might
> be wrong on that one. You can leave your site running on port 80 and have
> ISA use port 8080 for internal proxy clients.
>
> Again, you should buy a book to learn this. Jumping into SBS and
> implementing takes time to setup properly and securely. You don't want to
> install, put into production, and find out that you have security holes
and
> get hacked.
>
> Gus
>
> "RP" <rp@nospam.com> wrote in message
> news:OxHCLhZGEHA.3856@TK2MSFTNGP12.phx.gbl...
> > Hi all,
> >
> > I have been recently assigned the task of upgrading/setting up an SBS
> server
> > for our company. We have 3 locations and then we have a mobile
workforce.
> I
> > just ordered and setup the SBS2003 trial kit and have started looking at
> it
> > in my location. Here are my goals and some of my questions:
> >
> > 1. Each of the 3 locations are in different cities i.e. no dedicated
> > connectivity between them. Although they all have high speed internet
and
> > have been setup with dynamic dns services. Ideally I would like to setup
> the
> > SBS main server with our main domain and a/d in the main location. That
> > would be easier to manage. Although would users from the other locations
> be
> > able to login to their a/d account over the internet? Would I need to
open
> > any ports on the firewall? That would be insecure right?
> >
> > 2. If #1 does not work above, what would be the next best option?
Install
> > SBS at each of the 3 locations? I would have to duplicate a/d accounts
> > right? I am new to forest and tree structures. Could someone provide me
> some
> > guidance on that and what is the best way to set it up?
> >
> > 3. The main location currently has a server which I plan on installing
SBS
> > 2003 on. It currently has NT Server 4.0 installed in a domain
environment.
> > Although the server has a bunch of un-needed stuff on it and has 0 bytes
> > left on drive c. Would it be recommended to upgrade it? OR wipe it clean
> and
> > start from scratch. The users dont use any of the services on the server
> > except authentication. There are some shared folders for data which I
can
> > back up.
> >
> > 4. We currently use a 3rd party mail server hosted at our data center.
> > Although I would like to use the Exchanges features in SBS for group
> > contacts, calendaring, Sharepoint services etc. Would there be any
> conflict
> > in pop3 mail coming from 1 server, but other features from an Exchange
> > server? The reason I dont want to have Exchange host our email is
because
> of
> > 2 reasons: a). I dont know enough as yet on its features and how to set
it
> > up. b). The location where this SBS server is only has cable modem
> > connectivity which is not as reliable as the connection at our data
center
> > which hosts our web applications.
> >
> > 5. Can users access their Exchange account from home? i.e. over the
> > internet? How would I go about setting it up.
> >
> > 6. I plan on installing 2 NICs on the server and using it as a
> > router/firewall using the ISA server that comes with it. One NIC will
> > connect to the cable modem and the other to the switch where the rest of
> the
> > network will go. Am I on the right track? Could this cause any potential
> > security issues as far as opening up the data on the server?
> >
> > 7. Does SBS2003 allow you to setup a VPN server whereby remote users can
> VPN
> > in over the internet to get access to the network. Additionally most of
> the
> > client PCs run Windows XP PRO. I can turn on Remote Desktop on those
PCs.
> > Now how would I go about routing a Remote Desktop packet from the
outside
> to
> > the correct PC?
> >
> > 8. I noticed also that when I installed ISA Server it said to either
> > un-install IIS or change the website ports to ones other than port 80.
Why
> > is that? I need port 80 on IIS for certain web apps.
> >
> > Sorry for the plethora of questions. I am a newbie when it comes to
Server
> > 2003 a/d, administration etc.
> >
> > Much much thanks in advance.
> > Param
> >
> >
>
>



Relevant Pages

  • RE: Help with Internet and Email wizard
    ... Thank you for posting in the SBS newsgroup. ... On SBS Server, run the CEICW, go through "Connection Type" page, on ... Since we don't want to set up an external internet access, ... We can select Option one "Create a new Web server certificate" to ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Set the 'external' interface of SBS to get it's IP via DHCP from the router ... If the ws does not get an IP from DHCP check the event log on the server, ... They can go one day with out internet, ...
    (microsoft.public.windows.server.sbs)
  • Re: ICMP error when trying to access OWA on SBS 2003 Premium
    ... The Default Web Site is set to listen on the internal IP of the SBS server ... OWA publish rule or IIS manually. ... entire Web site from the Internet" is selected. ...
    (microsoft.public.windows.server.sbs)
  • Re: Inherited botched w2k3 SBS install, is this recoverable?
    ... continue installing rest of the SBS Components. ... Server Setup. ... Microsoft Windows Small Business Server Setup, ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 IIS BASED SERVICES FAIL INTERMITTENTLY
    ... If I read your post correctly, you have a switch where the SBS ... Run DHCP server on your SBS, and set all client machine nics to dynamic. ... Once you have your nics configured, run the Connect to the Internet wizard, ... QUESTION1 - what is REFUSING CONNECTIONS? ...
    (microsoft.public.windows.server.sbs)

Loading