Saturday, 27 December 2008

SBS 2008 - A couple of neat OWA features

The new Outlook Web Access (OWA) based on Exchange 2007 SP1 that we get with SBS 2008 is such a huge improvement over OWA in SBS 2003.

There are so many new client-side features that greatly improve a user's e-mail communication efficiency as well as their overall experience using Outlook Web Access.

One:

Deleted Items Recovery

Having the Deleted Items Recovery tool in the Outlook application when Exchange integrated is an administrator's life saver! Once a user has been shown that they can recover their deleted items, they take full advantage of it.

Now they can do so via OWA. They no longer need to establish a connection to a dedicated Remote Desktop to recover an e-mail, wait until they get back to the office to do so, or call us to help them out.

Two:

Remote Device Wipe

The time between a Windows Mobile device has been discovered missing and its being wiped by an administrator via Exchange 2003 can be absolutely critical ... and long.

With Exchange 2007, the user has control over the device. If the user's mobile device is somehow lost or stolen, they can remote wipe their own device quickly via OWA.

There is added security for Windows Mobile 6.x devices as the users would have turned on encryption for their add-in storage cards. So, barring any possible signal blocks or a dead battery, the device will wipe itself and any data on the card would be "lost" too.

These two features make SBS 2008 along with Windows Mobile device integration that much more attractive for clients with highly mobile workers.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

SBS 2008 - RWW and OWA Idle-Time Caveat or Hiccup?

The new Remote Web Workplace in SBS 2008 is pretty phenomenal. In our opinion, tying the new RWW features into the ability to publish Terminal Services RemoteApps is pretty much a "Killer App".

There is however, a hiccup, or caveat we have noticed between RWW and OWA.


The new Remote Web Workplace Portal

When a user uses RWW to authenticate and then clicks through to Outlook Web Access (OWA) via the Check E-mail button, they may get bumped out of OWA after 30 minutes of inactivity in the still existing RWW tab or browser window. Given the amount of time we spend working on our e-mail communications, 30 minutes is not unheard of when it comes to a user's being focused on the e-mail tasks at hand.

Essentially, while in the middle of working in OWA 30 minutes after connecting via RWW, the user will click on a button and be presented with the Exchange OWA log on page.

Now, if once the user has opened the OWA tab or new browser window and they turn around and close the RWW, the time-out hiccup does not happen. If the RWW page was indeed closed, it seems to be that the Private Computer idle settings apply.

Outlook Web Access Time-Out Options

This behaviour has been pretty consistent so far, so we have been mentioning to client users that if they plan on only using RWW to access their e-mail, that they should use the direct URL instead.

Any SBS domain joined workstation or laptop will have a Check E-Mail link in their favourites. For any non-domain joined workstation or laptop, we ask users to log onto RWW and click through to OWA and bookmark that page.

The SBS 2008 OWA direct URL is: https://remote.SBS2008.ca/owa.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Friday, 26 December 2008

Intel Associate Members - Demo Advantage = Get your Extreme On!

For those who are a part of the Intel Reseller Program at the Associate level or higher, the following two products (single purchase per quarter) are available through the Demo Advantage Purchase Program:
What does that mean?

Well, given the current exchange rate for the Canadian dollar to the United States dollar, it means close to 50% off our cost via distribution.

The setup will make a nice demo rig for those who need high horsepower setups for their own business.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Blu-ray Disk with Digital Copy Not Zune Friendly

Apparently the very public desire to have one's owned videos loaded on a portable media player is starting to pay off ... sorta.

I, personally, am an avid animated movie buff.

There are a number of animated movies that have come out of the leading studios over the last couple of decades that I can watch over and over again with the kids ... and yes, even twice in the same day of we are having a -30 degree Celsius "there is no way I am going outside" kinda day.

For those of us older birds who are/were into Trek, Heinlein, Floyd, Monty Python (Just a teensie wafer), Are You Being Served, Fawlty Towers, Heavy Metal, and others of their ilk, there is an inkling into the somewhat bent nature of our humour and imaginations.

What truly amazes me in a lot of the modern adult/child oriented animated movies are the implicit and explicit references to the various entertainment sources we were really into in our younger years.

A lot of the humour in movies like Wallace and Gromit Curse of the Were-Rabbit, or Robots, or Cars taps into so much history in the way of music, print, television and movies, and so much more. It can be a bit embarrassing to "get" a moment in the movie and laugh out loud while the theatre remains relatively silent around me. Talk about "dating" myself! ;)

We picked up a Blu-ray disk based movie for the kids to watch with the family since it was the first movie I took my 4 year old daughter Anne-Marie to last Fall.

The cover says "Digital Copy Special Edition" on it. The back of the case indicates that there is an actual Digital portable copy contained in the case to.

There is a caveat though: The file is DRM enabled. Whether through iTunes, or Windows DRM, there are restrictions on the file including a serial number that is required to unlock the "download to PC".

Reading through the fine print there is another caveat: The digital copy is not compatible with both Sony PSP and the Microsoft Zune. The file is Windows Media Video, so why it is not compatible must be to do with the DRM.

We certainly hope that the struggle over fair use rights is resolved with a win-win solution for both consumer and producer. It would end the pain points of failed DRM tactics such as rootkit installations, failed DRM on systems designed to play that content, device playback restrictions as is the case here, and so much more.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

SBS 2008 - Remote Web Workplace JavaScript Required

For those of us that have been working with SBS 2008 in production or in labs, one of the noticeable things is the tightening up of security in Internet Explorer a la Windows Vista.

Now, as a rule, browsing the Internet while at the server console, or remotely connected is a no-no.

To put it another way, browsing the Internet from a server should never happen.

For those of us that manage small SBS installations where there may not be a free desktop to remote into in the first place, this can be a bit of a challenge ... initially.

But, stop and think about what SBS based tool we have to use to facilitate the ability to never browse the Internet from the SBS console or remote desktop?

Before answering that question have a look at this:


SBS RWW JavaScript Required

The Remote Web Workplace for SBS 2008 requires that we have JavaScript enabled in IE. Well, that is not really possible on SBS 2008 without trying to change the security settings in the browser or figuring out how to uninstall IE's browser security.

The answer to the above question is the Companyweb SharePoint site. The catch to that answer though, is not the client's Companyweb!

Why?

Try and upload a zipped driver file to the SBS 2008 Companyweb at a client's site or in the Lab setting. When we right click on the file and download it to a local directory then try and extract its contents we will get an error that the archive is empty!

So, a best practice kinda way to get files like drivers, updates, and the like to the client's network is to do the following:

  1. Download the file via a secure desktop within our own shop.
  2. Zip the file, files, or a folder.
  3. Post the zip archive to our Companyweb site.
  4. Use the direct link on the client's SBS server to connect to our Companyweb: https://remote.mycompany.com:987 for SBS 2008 or https://rww.mycompany.com:444 for SBS 2003.
  5. Navigate to the zip archive.
  6. Right click and Save As.
  7. Extract the zip archive once the download has completed.

Now, this is the process we use for about 95% of any needed files from the Internet. The other 5% are things like service packs and other large files that we will need to download directly from the manufacturer's site.

Note that most Microsoft Updates will appear in WSUS, so we generally do not need to download from their site.

Once we have finished our own migration from SBS 2003 to SBS 2008, we will have a dedicated SharePoint site along with the SQL back end for this purpose.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Tuesday, 23 December 2008

Merry Christmas, Happy Hanukkah, & Happy Holidays!

Have a safe and wonderful Christmas, a happy Hanukkah, and Happy Holidays!

We take the Christmas break as an opportunity to implement larger projects at our client's locations while they are down.

So, we generally take Christmas day and New Years day off, but work the rest of the week days.

Our break will come sometime later in January.

Thank you all for the great support, contributions via comments and email, and for encouraging us to continue blogging by your readership.

We hope that 2009 will be a prosperous one for all of you!

Please note that posting may be a bit sporadic during the next couple of weeks! :)

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Monday, 22 December 2008

SBS 2008 - Default Group Policy Objects

There are so many times where we need the default GPO settings on a server setup.

In the case of SBS 2008, this is especially important since there are so many new settings.

Yes, commenting on the GPO itself along with any Administrative Templates related settings can be very helpful too.

So, we saved the reports from all of the GPOs that come with a fresh SBS 2008.

You can find them on our Windows Live SkyDrive folder for our new SBS 2008 Blueprint Book (SkyDrive Link). The reports are called SBS 2008 OOTBX Group Policies.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Saturday, 20 December 2008

Blog Poll: Should we keep SnapShots?

Just as the title asks, should we keep the SnapShots feature?

The service was originally thought to be something that would be helpful.

We have added a poll near the top of the right hand column on the blog.

Please take a moment to click through and let us know what you think.

Thanks for reading and for your input!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Server 2008 and Windows Vista Service Pack 2 Beta Available Publicly - TechNet/MSDN get Integrated Images

Need to test the newest upcoming service pack for Windows Server 2008 and Windows Vista? Keep in mind that this service pack will also be applicable to SBS 2008!

If so, it can be downloaded from the TechNet site: Windows Server 2008 Service Pack 2 and Windows Vista Service Pack 2 Beta Customer Preview Program (CPP).

When we get a little more time, we will download the service pack and run it against our longest running SBS lab box to see if it blows up! :)

We will get a backup just before the attempt too ... just in case.

Note that the combined x86/x64/IA64 ISO download is close to 1.4GB.

TechNet/MSDN subscribers can download the integrated product:


TechNet Server 2008 Service Pack 2 Integrated Downloads

Some further reading:

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

SQL 2005 Service Pack 3 is out

Okay, so we are a few days behind on the news! ;)

Microsoft SQL Server 2005 Service Pack 3 is available for download. Please read the list of bugs fixed with the Service Pack.

From there, the What's New in SQL Server 2005 SP3 document discusses what additional features and/or abilities have been added to the product.

There is a different Service Pack for SQL Server 2005 Express: SQL Server 2005 Express Download Page. Note that there is a request to register for the download, but there is a direct link to the download for those who may not want to registered.

Also, as of this writing the download for SQL Server 2005 Express still links to the Service Pack 2 version.

There is no word on the SQL 2005 Service Pack 3 being released via WSUS from what we can see yet.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Hyper-V on Server Core Rehash - Scratch to Production and Hardware Considerations

Server Core + Hyper-V after the fact: Build it and they will come! :)

Blog posts:

When working with the Server Core installation on a domain, it is a good idea to add the principle domain user to the local domain admins group. But only that user.

For other users that will manage only certain VMs on the Hyper-V box, there is AzMan. This is just a teaser since the Tech Days presentation went through AzMan and Hyper-V rather quickly, we will need more time to delve into the methodology. Anyone already familiar please feel free to drop some hints/suggestions/tidbits into the comments! ;)

Once the above steps have been completed, Hyper-V Manager on Vista SP1 or in Server 2008 (either Hyper-V Role enabled or management tool) will be able to connect.

Make sure to enable the remote advanced firewall management on the Server Core box for all profiles! If all else fails, at least we can still work the firewall rules via a GUI.

When it comes to the Hyper-V on Server Core hardware, make sure the box has at least 2 network cards! One NIC needs to be tied to the internal domain/workgroup and needs to be dedicated to management use only.

The second NIC, or any additional ones, will be for the Hyper-V virtual switch. Once the second NIC is bound via the Virtual Network Manager in Hyper-V, it is okay to disable the NIC in the Device Manager of the Hyper-V Server Core box. The Hyper-V Switch will continue to function since it is riding directly on the NIC hardware.

Also, when it comes to the hardware configuration and the number of cores enabled for a VM, there may not be a logical progression for core assignment. Here is an example (CPU focus only):

  • Hardware has a pair of E5440 Xeons (8 Cores).
    • 1 Virtual CPU: Vista VM
    • 1 Virtual CPU: Vista VM
    • 1 Virtual CPU: XP Pro VM
    • 1 Virtual CPU: XP Pro VM
    • 2 Virtual CPUs: Server 2008 VM + SQL 2008 Standard
    • 2 Virtual CPUs: Server 2008 VM + Exchange 2007 Standard

The logical thought progression would be to settle each VM on a core for the singles and a pair of cores for the VMs that have two virtual CPUs. Eight virtual CPUs demanded by the VMs with 8 cores available. But, that is not how the actual CPU tasks are served up across the cores. The above example may run just fine for a small shop with relatively low CPU to VM usage. But, as the VMs demand more processor horsepower, the more difficult it becomes to divvy up a pair of cores for the VMs with 2 virtual CPUs.

Now, take the above configuration and tweak it a bit:

  • Hardware has a pair of E5440 Xeons (8 Cores).
    • 2 Virtual CPUs: Vista VM
    • 2 Virtual CPUs: Vista VM
    • 4 Virtual CPUs: Server 2008 VM + SQL 2008 Standard
    • 4 Virtual CPUs: Server 2008 VM + Exchange 2007 Standard

We dropped the XP Pro single CPU VMs by moving them to another Hyper-V box because we knew the load on this particular Hyper-V box was going to jump.

Now, the question is, will increasing the number of virtual CPUs actually improve VM performance?

What we actually end up with is a competition for CPU cycles between the low virtual CPU count Vista VMs that are easier to assign CPU cycles to and the high virtual CPU count Server 2008 VMs. As demand increases VM performance would actually decrease due to the need to juggle virtual CPU demands across the 8 Xeon cores.

We could throw the most expensive pair of Xeon X5492 Quad Cores that we have bumped up to 3.9GHz into the Hyper-V box running the second set of VMs and still we would not see top performance out of them due to the virtual CPU count in the VMs.

Ultimately, the point is that increasing the VM virtual CPU count does not necessarily mean that the VM's performance will increase.

Some of the Tech Days virtualization sessions discussed the above hardware considerations. We tied them into our own virtualization experiences.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Friday, 19 December 2008

SequoiaView - A Neat Quick Visual Tree View Utility

SequoiaView is a neat little utility that will scan the contents of a partition and provide the tree view visually:


SequoiaView - Vista System Partition

The current root view is Program Files. Each Program Files sub folder is defined by a border, in this case the yellow one, with each grouping within it indicating more sub folders.

Each unique square visually represents a file. The larger the square, the larger the file.

You can enable a colour view to get a quick idea of what the file types are too:

SequoiaView in Colour

The screenshots in this post were pulled from the XP version of the utility running on Windows Vista Ultimate x86. We have yet to test it on an x64 OS.

This utility is definitely one to have on the Technician's Thumb Drive!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

HTC Touch Pro Windows Mobile 6.1 Review

We needed to replace one of our ageing HTC PPC6700 series mobile phones due to its reliability heading south.

The CDMA carriers up here recently introduced the HTC Touch Pro.

It is a Windows Mobile 6.1 Professional phone with a full slide out keyboard. Big thumbs means the keyboard is a prerequisite.

It has pretty good reception, though it struggles a bit more in enclosed areas such as a basement or server closet than the old HTC PPC6700 did. The PPC6700 gave warning that things were not working as they should with the way it behaved. The HTC Touch Pro gives a quiet snapping sound in the ear and the call is gone.

The high resolution screen is nice. Everything is crisp and clear, though at night there is a noticeable pulsing dim-bright-dim-bright cycle with the back light. So, this particular unit may end up heading back to the store for a replacement.

Add to that a 3MP camera that takes reasonably good pictures. Low light seems to cause a bit of a struggle, but that is expected with a built-in camera like this.

Integration into our existing SBS 2003 R2 Premium Outlook Mobile Access was quick and painless with the first sync taking under an hour to pull everything down.

The Touch Pro is noticeably quicker than the old PPC6700. That is refreshing as the stalls in between tasks on the PPC6700 were painful at times.

After adding in an 8GB SanDisk Ultra Micro-SD (Class 6) into the mix, we were good to go. The Class 6 level means the card will transfer data around 6MB/sec. Not nearly as fast as a USB flash drive, but will do in a pinch.

Windows Mobile 6.1 Pro has the ability to encrypt the entire contents of the storage card which is valuable for us when we need to move client data about.

The Touch Pro has a USB HDD feature that, when enabled, allows the phone to be plugged into a PC and be seen as a USB HDD with access to the storage card. This is a good thing to have because the Windows Mobile Device Center would otherwise be trying to sync with the phone.

The Touch Pro Bluetooth integrated with the HHR's in-car hands free system seamlessly. Once out of the car and then back in after a client visit, the Touch Pro recreates the connection with the car very quickly. The PPC6700 needed a call in or out to reestablish a connection with the in-car Bluetooth hands free.

All in all, the HTC Touch Pro is a very nice phone that will do the job for us.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Thursday, 18 December 2008

SBS 2008 - So, just how reliable is it?

With SBS 2008, we inherit all of the Windows Server 2008 monitoring goodness.


SBS 2008 Reliability Measure

This is our longest running SBS 2008 RTM box. The hiccups the box had earlier were typical for driver and management software hiccups.

The above reliability monitor includes all of the recent spate of updates from Microsoft.

So far, the server has been essentially bulletproof.

What does that mean for our clients and for us? It means that we are seeing successful deployments of SBS 2008 with no need to "wait for that service pack".

It means that we can build successful infrastructure solutions based on the new SBS 2008 feature pack knowing that we are working with a stable product.

It means that our clients are getting good value for their I.T. dollars.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Wednesday, 17 December 2008

SBS 2008 - Group Policy All Settings Filtering - The cat's meow!

One of the neatest new features we inherit from Windows Server 2008 Group Policy is the ability to set up filters for the settings:


Group Policy - All Settings Filtered on "Disconnect"

While the Excel spreadsheets we had of the various policy settings were searchable, they were still very painful to synchronize with the actual ongoing Group Policy editing.

That time, while not completely gone, has definitely taken a huge step forwards.

While filtering will not work for the Windows Settings node, it will work for any setting in the Administrative Templates node.

In this case, we were looking for the Remove "Disconnect" option from Shut Down dialog GP setting to enable in our default SBS 2008 Client Policy Object. We always enable this setting on our SBS networks so that users do not inadvertently disconnect from a workstation while working on it via the Remote Web Workplace. Inevitably, we would receive a support call to have that workstation freed up.

Right click on the All Settings node and click on Filter Options. From there, we can define any type of filter we may need to drill down to the GP setting we are looking for.

Check it out:

Group Policy - Filter Options

The options are almost limitless.

Now, after having a close look at the Filter Options screenshot, go back up to the Settings Filtered screenshot and click on it to bring it up full size.

Have a look at what happens when the + was clicked to the left of Administrative Templates. The little filter symbol appears on the folder and we can only click on folders that contain the GP settings we found via the filter as they are the only ones we can see.

How kewl is that!?! :D

This Group Policy feature was mentioned at Tech Days. This one learned feature alone more than paid for the two days of training and information. It will be such a huge time saver for us ... and for you! And, we also took the time to delve into the feature in Jeremy Moskowitz's book on Group Policy Fundamentals. Between the two, we are now better equiped to manage our SBS 2008, EBS 2008, and Windows Server 2008 Group Policy settings.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.