Posts

Microsoft Small Business Server 2008

Microsoft SBS Server 2008 is an excellent solution for small businesses.  However, migrating to SBS 2008 is not that simple.  First things first it is essential that you migrate to a new physical server.  Doing an in place upgrade is a nightmare and I would not attempt to do it.  If you don’t have another server and your current server is of x64 platform then you should create a virtual machine and use a physical to virtual utility to convert your existing machine to a virtual machine.  Once that is done install SBS 2008 from scratch then power up the virtual machine.  You can then migrate over to SBS 2008.
It should also be noted that x64 is becoming the new standard.  It gives you a bus twice as big as its predecessor x86 processing.  That being said Windows Server 2008 requires x64 hardware.  It will not install on x86.
You basically have two choices when it comes to SBS2008 standard or premium.  The main difference is with premium edition you can have 2 servers in the domain.  As where standard was intended to be a single server solution.
Microsoft decided that ISA server would not be included in SBS 2008.  This in my opinion was a good idea.  There are things certain companies are good at and they should stick to their core competencies of things that they can perfect.  Cisco owns Microsoft when it comes to networking/firewall’s and Microsoft has better server solutions.  Do yourself a favor and do not try to use a “software” firewall solution.  Use a Cisco ASA 5505 or model that fits your needs.
SBS 2008 also has a built in web interface for connecting to your PC at work.  I believe RDP is the way to go for employees accessing your network remotely.  The reason being is their PC acts as a dumb terminal and they can see and feel their desktop as if they were sitting at it.  VPN solutions also known as virutal private networks are over rated.  When a client VPN’s from home they basically connect their PC to your internal networking.  Meaning that if their PC is compromised their attacker basically has a door to your network.  Since it is almost impossible to control employees’ PC’s at home it is inevitable at some point they will get a virus or spyware.  If you remember this is how Microsoft’s network was compromised a few years back. 
Also with the premium edition you have the ability to install SQL 2008 standard.  This is not an option with standard.
The steps for migrating from SBS 2003 are as follows:
Always run backups on your existing server first before doing anything.  This is vital.
Next go to Windows Updates and make sure you upgraded and installed all service packs and updates.
You must now raise the function level of your SBS 2003 domain that can be done by first demoting any NT4 or Windows 2000 domain controllers(if you have any).  Once that is complete Go to active directory domains and trust.  Right click on your domain and select raise domain functional level to 2003.  You must also upgrade the forest functional level to 2003.  This can be done by staying in the console and right clicking on active directory domains and trusts select raise forest functional level.
I would recommend next that you have all of your users go into Outlook.  Tell them to go to tools and empty recycle bin.  This will free up tons of space worth of trash.  It will help make your migration faster.
Make sure your source server has the correct time as this is essential:  w32tm /config /syncfromflags:domhier /reliable:no /update
net stop w32time
net start w32time
Make sure your domain is in native mode and not mixed
Next prepare your server by inserting the 2008 SBS DVD.  Go to tools click sourcetool and run it.  You are going to need an answer file for this which can be created by running SBSAfg.exe on the SBS 2008 DVD.
Keep in mind you must remove the source server.  You have 21 days.
When you install the new server make sure your answer file is on a USB drive.  It will be auto detected as long as it is in the source of any drive.  If it successfully detected after you answer all the Windows server 2008 questions you will get a start the migration page. 
To migrate Exchange 2003 to Exchange 2008 I would recommend you have all your users create a backup PST from Outlook.  This way you have local copies of your data.  Once that is complete then on the migration wizard home page click migrate exchange mailboxes and settings.  Follow the steps outlined.

Your computer is infected!

Don’t fall for this fake anti-virus message that pops up on your screen. If it pops up just close down internet explorer or your browser! Do not let it install this is a fake message that will force you to download a bloated piece of software you don’t need!
“Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check! System Guard 2009 will perform a quick and free scanning of your PC for viruses and malicious programs.”
threat

Protect your computer against spyware.

Everyone has heard of the need for antivirus and anti-spyware programs, but some people still don’t realize what spyware is, or why it’s so dangerous. Spyware is not the same as a computer virus. Viruses corrupt files and destroy data. Spyware generally keeps track of where you go online, and sends this information to advertising agencies who then use the data for various purposes. It can also change your home page, slow down computer performance, and the more dangerous types log your keystrokes for possible password and credit card number gathering schemes.
Perhaps the most insidious thing about spyware is that it is often installed without our knowledge – free programs online can sometimes be the culprit, but spyware is also sometimes downloaded and installed simply by visiting certain websites that exploit security problems in various browsers.
Preventing the spread of spyware is an important aspect of computer security. Just as we should keep passwords safe, we should also take steps to ensure that our passwords aren’t compromised in the first place. There are several anti-spyware programs on the market, both paid and free. One of the best places to search for reputable software is a site like download.com.
However, even the best anti-spyware program won’t do much if it’s not kept up-to-date and run regularly. As part of computer security, spyware should be updated once every 24 hours, and your computer should be scanned once a day, with a full scan once a week just to be on the safe side.
With a little effort, it’s possible to keep your confidential data safe and your computer spyware free.

Antivirus 2009… And how to get rid of it

I have recently noticed clients callings of a complaint that they have severe spyware on their computers that they need removed.  Turns out there is a new thing going around called Antivirus 2009 or Antivirus 2008.  It tricks users to thinking that it is an antivirus program when in fact it is spyware itself.  Not to mention it’s a hell of a time to get rid of it.  I have recently found software they can combat this spyware it’s called Malwarebytes’ anti-malware.  It is a free program you can download it run a full scan and your problem should be resolved.
As a note to this you might want to consider your end users only having “user” access to a machine and not “administrator” access.  You can do this by removing them from the administrators group.  Now I’m not saying to not give them the login to the local administrator account but when they are doing their day to day activities they should probably not be running around with administrator access.  This is something we as network admins should also practice.  Why have the keys to the castle all the time if you only need them sometimes?  Use them when you need them don’t put your computer and your entire network at risk.