Re: New server todo list

Pretty good list. The only thing that jumps out is forwarding port 80. You
don't need it and you shouldn't open it. Some people in the group will argue
that 3389 shouldn't be open either. I personally like it as a second door
and with a strong password I don't really see a risk there.

One other item: I would install Exchange SP2 before installing the Server
SP2....and do have the fixes on hand that you might need to apply after
installing the server sp2 on an SBS box.

--
Claus
"Rosewood" <rosewood@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2CB0448F-E398-4633-A2A6-BF146C0CD5FC@xxxxxxxxxxxxxxxx
I've always liked the To Do list in Server Management in SBS2003. I also
developed my own to do list and I found myself setting up a server for the
first time in awhile this weekend and wanted some feedback and
suggestions.

Obviously you start with the install of SBS2003.
I make sure to forward ports 3389 (RDP) 1723 (VPN PPTP) 443 (HTTPS) 80
(HTTP) 25 (SMTP) 21 (FTP)
Server 2003 SP2
Exchange 2003 SP2
Windows Update until no more updates left

Set up Exchange 2003 for Spam filtering (IMF set to 8, Reject 5, add
connection filtering, add relays.ordb.org bl.spamcop.net
sbl-xbl.spamhaus.org )
Make sure that SMTP connector to always run under delivery options
Turn on message logging and SMTP logging
Increase the storage and send and receive limits

Go through the SBS2003 Todo list for the VPN, the Monitoring and Backup
I add FTP through add/remove programs, then I make sure I turn off Anon
access and make sure I turn on write access

Configure my docs and desktop redirection

Install SAV and then install SAV on all clients

Install all apps on the clients

Run one last pass of updates
----

So, what obvious stuff am I missing?
What other things should I be installing / configuring?

Thanks for the feedback. I hope this can also be helpful to some.


.

Relevant Pages

  • Re: Do i need SP2?
    ... > I am running XP pro with all updates EXCEPT SP2. ... many patches will begin requiring SP2 to install.. ... and some you can only download if you are registered - but it is best ...
    (microsoft.public.windowsxp.general)
  • Re: FYI for eTrust AV 7.x Users
    ... When I just had my little incident with the redistribution settings on the SBS, my clients were logging successful checks for updates, and the logs indicated that no updates were found. ... That turned out to be because I had not gone back and checked the redistribution server box for 8.x after reinstalling the redistribution server. ... installed the new remote install utility which works the same as v7 did - just edited the .ICF file the way I wanted it and ran the client upgrades from the server. ... I can't remember if it's a separate install, or if you have to click a box when you do the Agent install, but redistribution server is not installed by default. ...
    (microsoft.public.windows.server.sbs)
  • Re: SUS
    ... > I have setup a SUS Server on win2k. ... 0-2.reg will not configure your machine to automatically download updates from ... critical updates or service packs that your machine needs. ... It will also ask you if you want to install them, ...
    (microsoft.public.windows.server.general)
  • Re: Disaster Restore SBS2003
    ... If you had the server set to download updates automatically (never ... then install any service packs to return the server to the same service pack ... have the correct version of NTBackup prior to the restore. ...
    (microsoft.public.windows.server.sbs)
  • Re: 96358 failed to install
    ... I suspect that Norton was running in the background when you reinstalled SP2 and this may have led to your issues. ... Other than doing a format/reinstall of Windows, ... Double-click Automatic Updates> Click on Stop ... After making certain you have a copy of your Product Key, uninstall all Norton software via Add/Remove Programs. ...
    (microsoft.public.windowsxp.general)
Loading