Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


April 2008

Windows Server 2008 Installation—It’s a Snap!

Explore the ins and outs of image-based installation
RSS
Subscribe to Windows IT Pro | See More Windows OSs Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
SideBar    What You Need to Know About In-Place Upgrades

Download the Code Here

The next window prompts for the type of installation you want to perform: Upgrade or Custom (advanced). Because you’re doing a clean installation from media, the Upgrade option is disabled (i.e., grayed out), and you must select Custom (advanced). Note that if you run the installation process from within Windows Server 2003, both options will be enabled.

A new window opens that asks one final question: Where do you want to install Windows? A dialog box displays partitions and unallocated space. You can add or remove partitions, reformat a previously used hard drive before installing Server 2008, and load additional drivers as needed. Select the partition for the installation, then click Next to install the OS. If the partition isn’t formatted, the installation process quickly formats the partition as NTFS and proceeds.

That’s it. You’re done—no more questions. You can go have a drink. But don’t go too far! Because the installation is image-based, it doesn’t take long to complete. A window displays the progress of the installation, and the server reboots twice during the process.

Configuration
So, what about all the things you never configured during installation: server name, time zone, administrator password, IP configuration? A server has a lot of default settings, DHCP-assigned IP address, automatically assigned server name, and so forth that you need to configure after the installation process has completed. This is starting to sound worse than what you had to do previously to install Windows Server! In the past, you installed and configured the OS in one process. Now, do you have to root through different Control Panel applets to configure the server? Fortunately, no.

As Figure 3 shows, the first thing you see after the installation is a window that tells you the user’s password must be changed before logging on for the first time. In the Server 2008 installation process, the Administrator account is created with a blank password, so the first action is to set a new Administrator password. Once you’ve set the new Administrator password, you are logged on as the Administrator.

If you ever had to install Windows Server 2003 with Service Pack 1 (SP1) slipstreamed after installation, you know that the Post Setup Security Updates (PSSU) Wizard forced you to patch your server and set an update schedule. With Server 2008, you get a beefed-up PSSU-type process in the form of the Initial Configuration Tasks (ICT) interface.

As you can see in Figure 4, the ICT guides you through all the main configuration items for a server with a new installation of Server 2008. The current values are displayed, and clicking an item opens the appropriate Control Panel applet for the value you want to set. For example, when you click the icon to set the computer name and domain, the Control Panel System applet opens automatically.

In Server 2008, Windows Firewall is enabled and Remote Desktop is disabled by default so that the server is secure from the start. Furthermore, Windows Firewall is fully integrated with the OS. Server 2008 offers several server roles (e.g., DHCP server, DNS server, domain controller) and features (e.g., backup, clustering) that help the server perform the role you select. (You add roles and features in section 3 of the ICT interface via the “Add roles” and “Add features” links.) When you enable a role and its supporting features, the various ports required by the role and its features are opened automatically in Windows Firewall; no additional configuration is required. (To maintain the Windows Firewall settings over time, you’ll want to use the Security Configuration Wizard—SCW— to create templates that let you continuously monitor Windows Firewall.)

Once you’ve configured the server, select the “Do not show this window at logon” check box and click Close. If you want to perform further configuration or role and feature maintenance, use Server 2008’s new role-based management tool, Server Manager.

Beyond Manual Installation
So that’s a walkthrough of the basic Server 2008 installation experience. As you’ve seen, you don’t really have much to do, but unless you need to install the OS on just a few servers, you’ll want to automate the installation process.

To create an unattended answer file for use in an automated process, first download Microsoft’s free Windows Automated Installation Kit (www.microsoft.com/downloads/details.aspx?FamilyID=c7d4bc6d-15f3-4284-
9123-679830d629f2&DisplayLang=en
). The WAIK contains the Windows System Image Manager application, which you’ll use to create your answer file. You can use the answer file with services such as Windows Deployment Services to automate your installations, or you can name the answer file autounattend.xml, place it on a floppy disk or USB drive, and insert it as the Server 2008 installation process begins. The process will read and use the answer file to automate the installation.

The WAIK documentation details the minimum requirements you need to specify for an automated installation. Web Listing 1 (Download a .zip file at the top of the page this page) provides an example of an autounattend. xml file that will partition the disk and install the full version of Server 2008 Enterprise. To use this file, you need to set the product key and also the local Administrator password value via the Windows System Image Manager as the local Administrator password is encrypted. (Note that there are other options—for example, a key management system—that don’t require you to hand out the product key in an autounattend file.)

End of Article

   Previous  1  [2]  Next  


Reader Comments
John, you say "with no GUI, they're less open to security risks". How can a GUI make an OS more open to risks? The belief that command line systems are securer is just a hoax. And you say the clean installation, not the upgrade is the best option. No, it is not the best option in the real-life scenarios. You would want to retain all your settings after a new OS, so the upgrade is the best option.

muraty April 14, 2008 (Article Rating: )


muraty, thanks for your feedback. Here's John Savill's response: "Thanks for writing. I appreciate your comments and maybe I was not clear enough.

With no GUI we are less open to security risks because the GUI itself is code, e.g. explorer.exe. The code contains vulnerabilities and if we look at many of the windows fixes they often relate to things like Internet Explorer, Explorer etc. So no GUI is more secure because we don’t have those components in the operating system and there we don’t have the vulnerabilities associated with those components.

In terms of upgrade vs fresh install I still stick with fresh install is the best option. There may be some specific roles where you can upgrade providing we don’t have certain applications or services installed that don’t support an upgrade. Maybe if a server was just a file server or a domain controller this would be an option however in the real-world most companies perform a hardware refresh at the same time as this type of OS upgrade so a migration of resources and services is common. When you add in changes to drivers, the likely switch to 64-bit with Windows Server 2008 and other new 2008 versions I think a fresh install makes the most sense for customers especially from a fallback situation if something goes wrong. From a settings perspective hopefully we are using group policies etc for the majority of our configuration or answer files for other components which is a best practice anyway incase a server “goes bang” and we have to recreate. I hope this clears things up."

AnneG_editor April 16, 2008 (Article Rating: )


You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now




Top Viewed ArticlesView all articles
Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

WinInfo Short Takes: Week of November 23, 2009

An often irreverent look at some of the week's other news, including some post-PDC some soul searching, a Google Chrome OS announcement and a Microsoft response, Windows 7 off to a supposedly strong start, the Jonas Brothers and Xbox 360, and so much more ...

2009 Windows IT Pro Editors' Best and Community Choice Awards

Picking a favorite product from an impressive crowd of competitive offerings is never an easy task, and such was the case with our Editors' Best and Community Choice awards this year. ...


Related Events Deep Dive into Windows Server 2008 R2 presented by John Savill

Getting ready for Windows 7, eLearning series with Mark Minasi

Check out our list of Free Email Newsletters!

Windows OSs eBooks Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

SQL Server Administration for Oracle DBAs

Related Windows OSs Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound
Left-Brain.com Technology Resource Directory asp.netPRO ITTV Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement