SSL Certificates: CSR Decoder to Verify Settings

When it comes to creating a certificate request sometimes we can miss a character or typo something.

If the processing takes longer than expected and the certificate provider does not provide much more than a "Processing" status it may be a good idea to verify the settings in the CSR file.

The CSR Decoder site can do that:

• CSR Decoder – Check CSR to verify its contents

We hit a snag with a CSR that was taking too long and sure enough there was a typo in the common name that caused it to hang up.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Chef de partie in the SMBKitchen
Find out more at
www.thirdtier.net/enterprise-solutions-for-small-business/

Windows Live Writer

ZoneEdit: How to add a Tertiary DNS Server

We needed to add another DNS server to the default two that come with the ZoneEdit DNS service.

Figuring out how was a bit of a rat’s nest.

After a note to support we have:

1. Add a new record.
2. Subdomain: @
3. Type: NS
4. TTL: 7200
5. Hostname: Choose the tertiary DNS server.
• Note: Make sure the tertiary is in a different geographical location than the other two.

Note that adding an extra DNS server is 1 credit per month.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

Windows Live Writer

Windows Server 2012 Essentials Beta Download Available

The new Windows Server 2012 Essentials Beta has been released to the public:

• Microsoft Connect: Windows Server 2012 Essentials Beta

The Connect site can be used to file bugs if found while working with the new beta.

The Official SBS Blog also has a link that is direct to the Microsoft Download Site:

• SBS Blog: Download the beta release of Windows Server 2012 Essentials today!

The official announcement with the feature set can be found here:

• Windows Server Blog: Download the beta release of Windows Server 2012 Essentials today!

The two features that stand out for us is the client backup and the Remote Web Access ability. Our clients are used to using RWA for their access needs. Having client backup will be a big plus especially for firms that have mostly laptop users in and out of the office.

As mentioned and demonstrated in Third Tier's Webinar last night Exchange integration is possible on a WS2012e network and in the Console.

That means that our solution configuration has changed but the components will remain the "same" depending on which server services our clients want on-premises.

So far, so good.

More to come on WS2012e.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

VDI: What version of Windows 7 Desktop OS to Install?

When it comes to setting up a client’s Virtual Desktop Infrastructure (VDI), we have already configured their Software Assurance plus MDOP to gain access to VDI.

So, do we install Windows 7 Professional or Windows 7 Enterprise into those VMs?

In many cases there will be no need for Enterprise to be installed for regular VM access.

However, there will be some cases where Enterprise does make sense. One is for a firm or company that uses multiple monitors on their remote and local desktop.

Windows 7 Enterprise and Ultimate give us access to the ability to RDP into the VM and utilize multiple monitors at the source.

Note that both endpoints in the RDP connection must be either Enterprise or Ultimate. No other Windows desktop OS versions support this RDP capability.

Now, depending on the Internet connection the client uses we would tailor a GPO with RDP related settings to limit bit depth to 15bpp and the number of monitors to 2 for smaller connections while we would up the number of monitors for larger connections.

Also note that users connecting to their office desktop via the SBS 2011 Remote Web Access portal that have two monitors hooked up to their home machine will get both monitors in the remote session if using Ultimate at home and Enterprise/Ultimate on their office desktop.

We find that clients that utilize multiple monitors see their user’s productivity increase exponentially.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

SBS and RDS – Big Picture How To Set Up RDS On An SBS Network

Original posted to the SBS2K Yahoo Group. This list has been tweaked and updated a bit. :)

A quick overview of how to set up Remote Desktop Services and RD RemoteApps on an SBS network:

1. Win2K8 R2 SP1 OS install
2. Server drivers
3. Updates
1. Windows Server Updates (we group 6-10 at a time).
2. Windows Server Security Updates (again 6-10 at a time).
3. Others.
4. Manufacturer’s Server Management.
• Configure management settings.
5. Enable the RDS Role (RDS + Licensing).
• Leave mode for later.
6. Install Office 2010 with SP1 integrated.
7. RemoteApp deploy needed apps including Office, QB 2011, etc.
8. Create RDP Files in RemoteApp Manager
• We create an internal RDP file set to deploy to local user’s desktops.
• We also create an external RDP file set that includes RD Gateway setting.
• We customize each file name once created.
9. Create folder under SBS RWW/RWA called RDPs.
• C:\Program Files\Windows Small Business Server\Bin\WebApp\RemoteAccess\RDPs
10. Copy RDG enabled RDP files into this folder.
• Must be done from Windows Explorer on SBS.
11. Make MIME changes for .RDP (Charlie's SBS 08 book has this)
12. Edit RWW/RWA Links in SBS Console
• Example RWW/RWA URL: https://remote.domain.com/remote/rdps/winword.rdp
• Description: RemoteApp – Word

When users connect to RDS or RemoteApp they will get a certificate warning. Coach them to tick the "Don't bug me again" box near the bottom left of the window.

Done.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

Transitioning From SBS At the 75 User/Device Limit How-To

The link came via the SBS2K Yahoo List.

Chris Puckett of Microsoft provides an excellent big picture view of how one would go about removing SBS from the picture once a client has grown past the 75 user/device limit.

• Microsoft TechNet Forums: Best way to expand past SBS 2008, 75 users, and a limited network

The post by Chris:

SBS 2011 Standard still has a 75 user limit, so if you're already approaching 75 it might make more sense to go to Windows Server.  You can migrate away from SBS 2008 by adding new server(s) running Windows Server 2008 R2 as domain controllers to the domain.  Then add Exchange Server 2007/2010 server to migrate your mail to and a Sharepoint Server for that data.

There is no single document for this scenario, but you can treat SBS 2008 as Windows 2008 DC and Exchange/IIS server. The steps would not be much different. The only caveat is once you move the FSMO roles you have 21 days to complete the rest of the migration process and you would have to take care of licensing requirements
A basic outline would be

1. ADprep SBS 2008 with the 08 R2 schema.
2. Join WS08R2 DC as a secondary domain controller in the SBS 2008 Domain
3. Install Exchange 2k7/2k10 on same server or different server.
4. Move mailboxes/public folders, address book generation etc to the new server.. (there should be a guide on migrating exchange 2007 to 2010 on technet)
5. Migrate any IIS websites they wish to keep
6. Migrate any data they wish to keep to the new server (Sharepoint)
7. If folder redirection/roaming profiles configured move that stuff over to the new server by updating the user account/group policy settings.
8. Move FSMO roles and GC to WS08R2 (Might want to wait a few days to make sure everything is remaining operational as you have 21 days from this point).
9. Uninstall Exchange 2007 from SBS 2008
10. DCPromo down SBS 2008
11. Remove the SBS 2008 server from the network

We have not run into this situation with any of our clients yet, but there are a few that are growing at a rate that may place them in this situation in the next year or two.

The above gives us an idea of how to go about keeping the core SBS features, but there are a few others that need to be considered when transitioning away from SBS:

1. Replacing the TS Gateway services setup to maintain remote connectivity to internal desktops and RDS services.
2. Replacing the Remote Web Workplace/Access portal with the Win2K8 R2 RDWeb application along with customizing it to meet a similar functionality to RWW/RWA.
• Microsoft KB 2276908: Windows Server 2008 R2 - RDWeb Access and RemoteApp Configuration.
• Microsoft TechNet: Overview of Remote Desktop Web Access (RD Web Access)
• Microsoft TechNet: Overview of Remote Desktop Connection Broker (RD Connection Broker).
3. Utilizing an MMC structure much like the SBS Native Tools to start with but possibly looking to System Center for an SBS Console like management experience.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

Video – An Introduction To The SBS 2011 Remote Web Access Portal

The following video gives an overview of the various features to be found in the new SBS 2011 Remote Web Access portal (formerly Remote Web Workplace in SBS 2003 and 2008).

SBS 2011 RWA has the following features:

• Outlook Web App (OWA) for full Outlook like access to our e-mail, contacts, calendars, and more.
• Access to the Companyweb SharePoint site.
• Access to shared folders hosted _on_ the SBS server.
• This new feature allows us to upload and download data as well as work with folders within the share.
• Connection to any desktop, laptop, or other Windows machine that we have been given permission to access.
• Of course that machine needs to be on for access!

The new version of RWA also allows us to customize the portal by adding Web links to various Internet based resources. We can also move the feature access boxes around to suit our tastes.

Please feel free to comment and critique any of the videos we put out.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

SBS 2011 – Remote Web Access (RWW) Shared Folders Upload With Easy File Upload Tool

When we first saw and started to use the Shared Folders access feature in the Remote Web Access portal (formerly Remote Web Workplace or RWW), we did not see it as being too useful except for spot file access.

Today definitely confirms that the Shared Folders feature is indeed useful especially when it comes to getting many large files uploaded onto our network.

The screenshot above shows a ZIP archive of two ProcessMonitor files that were created a few minutes ago.

One of those files contains the ProcessMonitor results of a successful QuickBooks 2010 open while connected using Remote Assistance while the other contains the ProcessMonitor results of the QB 2011 crash when the user opened it without any remote connections.

Yes, we are _still_ fighting to get QuickBooks 2011 and now QuickBooks 2010 to run at a client’s site:

• Blog Post: US QuickBooks 2011 R1 – Third Party Components Install Error Plus Error on MSVCR90.DLL And More

To get the 65MB file to our own site is now quite simple as we no longer need a third party service or VPN (bandwidth soak) to get the file.

While preparing to upload the file we saw the option to install the Easy File Upload Tool in the portal. So, we clicked the link and installed the ActiveX control that was needed:

Once we clicked the Install button our Upload page now looked like:

Now we no longer need to use the cumbersome Browse button method to add each file that we need to upload into the folder.

The folder access feature has become quite important to us because it is so simple to use especially once we have the Easy File Upload Tool installed!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer