Progress of the DESY Windows Project Building a

Progress of the DESY Windows Project Building a new domain with Windows 2003 Server Reinhard Baltrusch, DESY IT HEPi. X-HEPNT Amsterdam 21. 05. 2003

Windows Project Situation The project starts in march 2002 with the goal to build a new, active directory based Windows domain for DESY. In the first phase a sitespreading test environment with Windows 2000 was installed and filled with life (win 2 k. desy. de). Meanwhile Windows XP has become the preferred client operatingsystem for administration. But we have seen always some conflicts between Windows 2000 and XP (e. g. policies !) and restrictions of Windows 2000 (e. g. Dfs). Since 24. April Windows Server 2003 (. NET) is available and we have seen in preceding tests with the RC 2 that many problems are solved. New features make the life easier and there is no need to spend time for later migration. So we decided to avoid the deployment of Windows 2000 and go forward with Windows Server 2003 and Windows XP SP 1. By now new hardware is waiting to start in the next phase of the project : Construct the real production environment for the domain win. desy. de. HEPi. X-HEPNT Amsterdam 21. 05. 2003 2

Windows Project Useful Windows Server 2003 features Group Policy Management Console (GPMC) Volume Shadow Copy Services / Shadow Copy Client Automated System Recovery (ASR) Dfs (enhanced, more then one root possible) RIS (advanced, server OS also supported) Schema management (deactivate/activate classes and attributes) inet. Org. Person object class built-in (in W 2 K extension) Metadirectory support (enterprise edition) Better support for migration of NT 4 (ADMT, e. g. password migration) CHKDSK Performance (over 20 % faster than W 2 k) Windows Sharepoint Services (later update for W 2 K 3, beta) Rename domain HEPi. X-HEPNT Amsterdam 21. 05. 2003 3

Windows Project Group Policy Management Console HEPi. X-HEPNT Amsterdam 21. 05. 2003 4

Windows Project Shadow Copies HEPi. X-HEPNT Amsterdam 21. 05. 2003 5

Windows Project Hardware for the new DESY domain l Available : – 3 HP/Compaq Proliant DL 380 G 3 as Domaincontroller (computer centre, machine controls in Hamburg HEPi. X-HEPNT Amsterdam 21. 05. 2003 6

Windows Project Hardware for the new DESY domain (II) – 4 HP/Compaq Proliant DL 360 G 3 for several services (like Web, SUS, Transaction, Net. Install) HEPi. X-HEPNT Amsterdam 21. 05. 2003 7

Windows Project Hardware for the new DESY domain (III) – 1 Compaq/HP Proliant DL 380 G 2 Packaged Cluster with Storage. Works Array for RIS, DFS and other fileservices. HEPi. X-HEPNT Amsterdam 21. 05. 2003 8

Windows Project Hardware for the new DESY domain (IV) l Not delivered jet : – Storage system for homedirectories in Hamburg : HP Storage. Works MSA 1000 with 4 HP blade server (6 TB für win. desy. de and DESYNT) – Storage system for homedirectories in Zeuthen : HP Storage. Works MSA 1000 with HP DL 380 cluster (1 TB für win. desy. de, expandable) HEPi. X-HEPNT Amsterdam 21. 05. 2003 9

Windows Project Storage. Works MSA 1000 HEPi. X-HEPNT Amsterdam 21. 05. 2003 10

Windows Project General build up plan After installing three domain controller the replication behavior and the DDNS functionality (site spreading) must be smooth before going ahead ! In the test domain proofed services, tools and scripts will be integrated in the production domain. The basic Active Directory structure (namespace container) with delegation and basic grouppolicies will be inserted. In first step we are looking for max. 500 test users, who should try to do there normal work on XP clients configured for the domain. But the reservation is to install the domain a second time if something is going absolutly wrong in this test phase of the production domain. Otherwise necessary improvements will be made on the services, structure, policies and security. If all is running in a good way further services and users will be migrated. HEPi. X-HEPNT Amsterdam 21. 05. 2003 11

Windows Project Active Directory structure HEPi. X-HEPNT Amsterdam 21. 05. 2003 12

Windows Project Basic services in the new Windows domain at the beginning l l l l Homedirectory, quota management (native) and backup inclusiv (TSM, TSM-Client V. 5. 16 is ready for Windows Server 2003). Dfs (active directory integrated and standalone) - the homedirectory path in the user profile will be a Dfs link. Remote Installation Service for basic OS installation. Usage of the Software Update Service from the beginning (Windows update push mode). Application provision over grouppolicies and later over Net. Install. Deployment of Mc. Afee Virus. Scan Enterprise 7. 0 (one version for server and workstation), update over the Auto. Update Architect. Mail and printing is at first functional over the old domain. HEPi. X-HEPNT Amsterdam 21. 05. 2003 13

Windows Project Distributed file service HEPi. X-HEPNT Amsterdam 21. 05. 2003 14

Windows Project Software Update Services HEPi. X-HEPNT Amsterdam 21. 05. 2003 15

Windows Project Virus. Scan Enterprise 7. 0 HEPi. X-HEPNT Amsterdam 21. 05. 2003 16

Windows Project Auto. Update Architect HEPi. X-HEPNT Amsterdam 21. 05. 2003 17

Windows Project Future look on. . l l l Exchange Titanium (2003, beta, E 2 k is not supported for W 2 K 3) Share. Point Portal Server v. 2 (2003, beta) e. Policy Orchestrator version 3 (beta, Mc. Afee scanner administration) Samba version 3 (alpha) Advanced quota management tool (for group quotas) HEPi. X-HEPNT Amsterdam 21. 05. 2003 18