Miguel Hernández Consultor Senior de T.I.

Presentación del tema: "Miguel Hernández Consultor Senior de T.I."— Transcripción de la presentación:

1 Administración, Movilidad y Trabajo en grupo con Small Business Server 2008
Miguel Hernández Consultor Senior de T.I. MCP - MVP Small Business Server CSSA Sonicwall security administrator

2 Agenda Familia Essential Business Server Small Business Server 2008
Seguridad Funcionalidades Componentes Movilidad Colaboración

3 Familia Essential Business Server
Windows Essentials Business Server Windows Small Business Server Número de PCs 25 50 100 250 Punto en el que se contrata a personal IT interno Small Business Server Windows Essential Business Server 2008 Empresas sin personal en IT Administración simplificada 75 Usuarios o menos. Empresas con dpto. IT interno Administración unificada 300 usuarios o menos.

4 Windows Small Business Server 2008
Standard Premium Sistema Operativo (64 bits ) Sistema Operativo ( 32 o 64 bits ) Mensajería Seguridad Almacenamiento (Versión Standard) Colaboración

5 Windows Small Business Server 2008
Standard Premium Windows Server® 2008 Standard Microsoft® Exchange Server 2007 Standard Edition Windows® SharePoint® Services 3.0 Windows Server Update Services 3.0 Microsoft Forefront™ Security for Exchange Server1, 2 Windows Live™ OneCare for Server1, 2 Integración con Office Live Small Business2 Segundo servidor Server o 64 bits... Windows Server 2008 Standard Microsoft SQL Server® 2008 Standard Edition Posibilidad de: Terminal Services Windows Server 2008 Nuevo licenciamiento Standard CAL Premium CAL Instalación y administración integrada Protección máxima ante desastres Gran productividad Soporta 75 usuarios y/o dispositivos 1 1 año Trial 2 No disponible en todos los lenguajes.

6 Servicios hacia el usuario:
Entorno LAN Internet Usuario remoto SBS Server 2nd Server LOB / SQL Premium Edition Servicios hacia el usuario: Outlook Web Access Mobile Device Access Remote Web Workplace VPN SharePoint Hardware Firewall SBS gestiona los puertos Conexión a VPN

7 Aministración Y seguridad 4/1/2017 7:05 PM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8 Toda la red protegida con SBS 2008
Despliegue según “Best Practices” Incrementa la seguridad y protección de los datos en la empresa Escanea el comportamiento de toda la red Asistentes para administración y seguridad Protección de la red con 1Onecare y Forefront1 Requerido Router o Firewall de red Vigilancia de PCs cliente a través de AV y Centro de seguridad de Windows 1 Trial limitado en el tiempo

9 Simplicidad y seguridad
4/1/2017 7:05 PM Simplicidad y seguridad Funcionalidades y asistentes Asistentes de puesta en marcha y administración Remote Web Workplace bajo SSL Consolas de administración Windows Server Backup Informes de red Aplicaciones Windows Server 2008 Standard Edition, x64 Exchange 2007 Standard Edition SP1 Windows Server Update Services 3.0 SP1 ForeFront Security for Exchange 2007 Windows Live OneCare for Server © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10 Windows SBS 2008 Funcionalidades añadidas
Module 1: Introduction to Microsoft Windows Small Business Server 2008 Course 6445A Windows SBS 2008 Funcionalidades añadidas Remote Web WorkPlace Conexión remota segura Consolas de administración 3 Consolas de herramientas administrativas integradas Configuración segura de conexión a internet Gestión dinámica de puertos: web, Vpn… Windows Server Backup Wizard Copia de seguridad muy completa y fiable Informes de red Informes de red regulares del estado del servidor y salud de la red

11 Supervisión de sistema
4/1/2017 Proporciona una base operacional de vigilancia y definiciones de políticas del servidor SBS, 2 º servidor, también se suma a la monitorización de toda la red Pilares del sistema de seguridad: Solapa de seguridad Gestión de actualizaciones Alertas Críticas de SBS Backup Microsoft Confidential - Internal Use Only

12 *Trial limitada en el tiempo (1 año)
Solapa de Seguridad anti-malware/ anti-spam Forefront, seguridad para Exchange * Live OneCare seguridad para el Servidor * Monitorización de clientes, archivos, sistema, antivirus y antispyware Integrado con estado de salud de Vista y XP *Trial limitada en el tiempo (1 año)

13 Software Updates (desde la consola)
WSUS provee de actualizaciones a toda la red WSUS Integrado en consola de administración Administración intuitiva Totalmente configurado previa inst. de SBS 2008

14 Copia de seguridad Copia de seguridad muy robusta y fiable de la totalidad del sistema operativo, componentes y datos Automatización y administración de la copia de seguridad Green – Última copia se realizó satisfactóriamente Yellow – Copia de seguridad no configurada Red – Última copia de seguridad no completada Backing Up and Restoring Data on Windows SBS 2008

15 Envio de alertas Monitorización de los servicios (servidor)
4/1/2017 Monitorización de los servicios (servidor) Principales eventos (Servidor): Backup Licenciamiento Networking Seguridad Umbrales / Rendimiento (clientes y servidores) Uso del disco Monitorización de las alertas críticas de la red Página de equipos: Estado de los equipos Descripción y detalle de las alertas Informes diarios/semanales y mensuales o consola Microsoft Confidential - Internal Use Only

16 Política de dominio predefinida
Windows XP y Windows Vista Security Center habilitado Windows XP y Windows Vista (Adv.) Firewall habilitado Ofrecer asistencia remota habilitado Permitir Control: Domain Admins “Client Side Extension” desplegado Backup del cliente, Gadget, Extensiones WMI IE Favoritos administradores IE Página web administrada IE Phishing automático Link a CompanyWeb en Start Menu y escritorio Windows Vista hibernación deshabilitado Fácil redirección de documentos y escritorios desde la consola Configuración de actualizaciones de seguridad

17 Microsoft Forefront Security para Exchange Server
Module 1: Introduction to Microsoft Windows Small Business Server 2008 Course 6445A Microsoft Forefront Security para Exchange Server Microsoft Forefront Security para Exchange Server 1 año de suscripción Multiples motores de AV (ocho) 5 motores de AV Simultaneos Filtrado por nombres de archivos, extensiones y tamaño Integrates directly with server applications Comprensivas notificaciones al adminsitrador Filtros preconfigurados para SBS Scaneo de virus Filtrado de archivos Filtrado de contenidos Excepciones configuradas 3 min (new in SBS2008) Instructor Notes: See bold below – please cover different scan options available. Currently no integration Forefront/WSS on SBS2008 – planned to be available in subsequent releases Microsoft Forefront Security for Exchange Server SBE (small business edition) 120 free trial Multiple antivirus scan engines (eight) - (can only select 5 at a time) File filtering by file name, extension, or size Integrates directly with server applications Exchange Server 2007 Scanning/Background scanning and WSS Scanning (when available) Comprehensive notifications to administrator Scan job options Real-time In Forefront Security for Exchange Server, the Realtime Scan Job continuously scans inbound and outbound messages. This method of scanning messages in real time is the most effective way to stop the spread of infectious file attachments. You can configure the Realtime Scan Job to scan message bodies as well as attachments. This feature is disabled by default. In Forefront Security for SharePoint, the Realtime Scan Job continuously scans the files that users upload to or download from a SharePoint server. This method of scanning file transfers in real time is the most effective method to stop the spread of infectious files. Forefront Security for SharePoint can support up to ten real-time processes. By default, it supports three real-time processes. Manual Transport In Forefront Security for SharePoint, the Realtime Scan Job continuously scans the files that users upload to or download from a SharePoint server. This method of scanning file transfers in real time is the most effective method to stop the spread of infectious files. Forefront Security for SharePoint can support up to 10 real-time processes. By default, it supports three real-time processes. Quick Scan – Immediately Scheduled background scanning In Forefront Security for Exchange Server, a scheduled background scan helps you periodically scan a selected set of messages by using the latest engine updates and scanning configurations. The scope of the background scan is determined by the options that you select in the Background Scanning section of the General Options work pane. The Background Scanning option is not offered by Forefront Security for SharePoint. On-access scanning On-access scanning is a new feature that is provided by Exchange Server This feature ensures that all the files that are accessed by the Exchange Server 2007 server are scanned at least once by Forefront Security for Exchange Server. On-access scanning is not offered by Forefront Security for SharePoint.

18 Module 1: Introduction to Microsoft Windows Small Business Server 2008
Course 6445A Windows Live OneCare Mismo motor que “Forefront clients security” 1 Año de uso libre Funcionalidades de administración para multiples PC Creación de círculo de 25 equipos Posibilidad de crear múltiples circulos Antivi-virus Copia de seguridad y fácil restauración de los clientes Copia de seguridad de Onecare desabilitada por def. Usar copia de seguridad del servidor Excepción de archivos del servidor configuradas por defecto No Firewall Instructor: Live OneCare for server also offers a backup feature. It is always recommended to use the SBS backup. By default, the Backup and Restore in OneCare is turned off. (Point out that we are in RC0, so for RTM it may be different.) AV: AV and antispyware Microsoft update integration File and photo backup: Backs up to CD, DVD, external hdd, network share, USB drives Up to 3 PCs in circle: Connects/shares printers Automatic updates: Automatic AV updates Automatic version updates

19 Objetivo de SBS hacia el administrador
Simplificar la tarea de administración de una red Despliegue desatendido y repetible Permite adminsitración rápida para administradores avanzados y ciertas tareas fáciles para el mismo usuario. Estrategia Ventanilla única  Consola de administración Une y organiza tareas comunes importantes en una consola de administración Tareas complejas de forma fácil Incorporar administración de software de terceros Organizar tareas y recursos de información de un modo lógico Administrar desde cualquier parte

20 Module 1: Introduction to Microsoft Windows Small Business Server 2008
Administración Course 6445A Multiple Tareas administrativas con asistente “Connect to the internet” “Internet Address Management” Configuración de correo Configuración de una VPN “Fix my Network wizard” Sencilla conexión de equipos al dominio Sencilla y robusta copia de seguridad Instalación y renovación sencilla de certificados Tres consolas de administración ampliables 30 sec Instructor Note: The next slides are to be touched on briefly to highlight the main wizards and features included in SBS that simplify administrative tasks. Later modules will visit these in depth as needed to manage the SBS By its very nature, an operating system running multiple technologies tends toward complex management. However, managing a complex environment does not have to expose that complexity for all tasks. Windows Small Business Server 2008 reduces operating system complexities by using an intuitive management console, one that presents an administrator with relevant system information and a matching set of tasks. These tasks are the ones most commonly needed by administrators and have been streamlined. Tasks that may take hours to complete with standalone product technologies become very simple, efficient, and effective processes that a non-technical person can perform. For example, adding a new user to the Windows Small Business Server 2008 network requires a small set of user-specific information and three clicks in a wizard. Windows Small Business Server 2008 handles the rest, automating user account creation—creating the user alias, providing permissions to server resources, and building the user’s root directory.

21 SBS 2003 R2 Administración

22 SBS 2008 Administración

23 SBS 2008 Administración ¿Quien puede acceder a la consola?
Administradores de SBS ¿Desde donde? Localmente “Log on” en servidor Intranet Desktop link o TS administración Vista – Admin Gadget Remote Web Workplace Internet

24 Demo Administración 4/1/2017 7:05 PM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25 Movilidad y Colaboración
4/1/2017 7:05 PM Movilidad y Colaboración © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26 Movilidad y colaboración ( Componentes)
4/1/2017 7:05 PM Movilidad y colaboración ( Componentes) Windows Server 2008 Standard Edition, x64 Exchange 2007 Standard Edition SP1 Windows SharePoint Services 3.0 SP1 Windows Server Update Services 3.0 SP1 ForeFront Security for Exchange 2007 Windows Live OneCare for Server Office Live Small Business Adicional Windows Server 2008 (Pos. Terminal Server) SQL Server 2008 © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27 Experiencia del cliente
Entorno facil e intuitivo para los usuarios Acceso a los datos, , escritorio desde cualquier parte (RWW, OWA, Sharepoint, Connect Computer…) Comunica y comparte información de forma efectiva con compañeros de la empresa o colegas de otras empresas, clientes, etc. Permite la realización de negocio por intenet con Windows Live Small Business Permite añadir el equipo al dominio de forma fácil y completa LAN Internet

28 Herramientas de SBS para los usuarios
Redirección de carpetas de usuario a servidor Conexión a VPN (configuración muy fácil) Links Gadget Herramientas administrativas Connect Computer Remote Web Workplace Administración de Links Gadget Remote Web WorkPlace OWA Conexión remota a equipos clientes Companyweb (SharePoint version 3) Habilitado el envio por de documentos a bibliotecas Entrada de fax enrutado a Sharepoint o Exchange

29 Remote Web Workplace

30 Gadget y links Nueva funcionalidad en SBS 2008
Diréctamente aparece en el escritorio Contiene links a: OWA Companyweb Web de trabajo remoto Links de la organización: Links para administradores Links para usuarios Links para usuarios con links de administrador

31 Company Web ¿Que tiene nuevo? ¿Que añade?
Windows SharePoint Services version 3 SP1 Aceso por SSL TCP/987 ¿Que añade? Acceso desde el exterior Compenetración con otras funcionalidades Entrada de faxes Envio de documentos a companyweb por correo Para publicar Companyweb teniendo Isa : KB Secure SSL access on TCP/987 If client is behind ISA need SSL TUNNEL config – KB

32 Integración con Office Live
Ayuda a crear una web de empresa que además es una extranet con tecnología sharepoint para contactos externos e internos de la emp. Web alojada en Office live con validación passport Colaborar y compartir información con clientes, proveedores y/o partners Publicidad con Office live, creación de campañas, mailings, etc. Informes y estadísticas del funcionamiento de la web externa.

33 Asistente de integración con Office live
Integra SBS 2008 con Office Live Enables domain re-delegation without changing the MX records or other values used to access the SBS 2008 server Habilita la “re-delegación” del dominio sin hacer ningún cambio en los DNS o otros valores. Crea los valores necesarios en en DNS interno.

34

35 Demo Movilidad y Colaboración 4/1/2017 7:05 PM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36 Recursos Windows EBS TechNet Library Windows SBS TechNet Library The SBS Official Blog The EBS Official Blog Nick King’s Blog Sean Daniel’s Blog Miguel Hernández

37 Más acciones desde TechNet
Para ver los webcast grabados sobre éste tema y otros temas, diríjase a: Para información y registro de Futuros Webcast de éste y otros temas diríjase a: Para mantenerse informado sobre todos los Eventos, Seminarios y webcast suscríbase a nuestro boletín TechNet Flash en ésta dirección: Descubra los mejores vídeos para TI gratis y a un solo clic: Para acceder a toda la información, betas, actualizaciones, recursos, puede suscribirse a Nuestra Suscripción TechNet en:

38 4/1/2017 7:05 PM © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.