Windows Deployment Services for Windows Server 2008 R2

Step-by-Step Guide for Windows Deployment Services

 

Table of Contents
Introduction
Technical Requirements
Installation and Configuration
Procedure to Capture Image
Procedure to Install Image
Resources Links
About the Author








Introduction
 
WDS (Windows Deployment Services) is a Windows 2008 Server's built-in component. It is
used for deployment of Windows operating system. If you want a reliable, free, and easy to use
Windows Image deployment system, WDS is your best bet.
This ebook contains a step-by-step procedure on how to install, configure and deploy Windows
operating system such as Windows 7 Operating System using Windows Deployment Service.
Technical Requirements
 
This guide assumes that the following technical requirements were met:
Operating System:
Windows 2008 Server R2 SP1.
Roles and Features:
Active Directory. The server must be either a member of AD DS Domain or a Domain
Controller.
DHCP. The server must have Dynamic Host Configuration Protocol (DHCP) loaded and
working. Workstations on the network will boot PXE and will obtain IP Address from the DHCP
Server.
DNS. The server should have a working Domain Name Services.
For a guide on how to install and configure those additional server roles and features, please visit
http://www.techzzone.com.

Installation and Configuration
Steps to install Windows Deployment Services.
Step 1: Click Start.
Step 2: Click Administrative Tools.
Step 3: Then, Click Server Manager.
Step 4: Add Roles, located in the Roles Summary pane.
Step 5: Click Next.
Step 6: Then, Select Windows Deployment Services.
Step 7: Click Next.
Step 8: Make sure that the Development Server and Transport Server is checked.
Step 9: Click Next.
Step 10: Click Install. Wait for few minutes to finish installation.
Step 11: Then, Click Close.

Steps to configure Windows Deployment Services.
Step 1: Click Start.
Step 2: Click Administrative Tools.
Step 3: Then, Click Windows Deployment Services.
Step 4: In the left pane of the Windows Deployment Services MMC, expand the list of server.
Step 5: Right-click the server.
Step 6: Click Configure Server.

Steps to create Boot Image.
Step 1: Click Start.
Step 2: Click Administrative Tools.
Step 3: Click Windows Deployment Services.
Step 4: In the left pane of the Windows Deployment Services MMC, expand the list of server.
Step 5: Right-click on the Boot Images.
Step 6: Select Add Boot Image.
Step 7: Click Browse
Step 8: Insert your original Windows 7 CD on your CDROM Drive, and then navigate through
the following file path. D:\sources\boot.wim.
Step 9: Click Open.
Step 10: Click Next.
Step 11: On Image Name box, type Install Image.
Step 12: On Image Description box, type Install Image.
Step 13: Click Next. Wait for few minutes to finish adding boot image.
Step 14: Click Finish.

Steps to create Capture Image.
Step 1: On the WDS MMC left pane, Navigate through Boot Images > Install Image.
Step 2: Right-click on Install Image.
Step 3: Select Create Capture Image.
Step 4: On the Image name box, type Capture Image.
Step 5: On the Image description box, type Capture Image.
Step 6: Click Browse. The capture image file will be created and save on the server.
Step 7: Navigate through c:\remoteinstall\.
Step 8: Type File name: CaptureImage.wim, then click Open.
Step 9: Click Next. Wait for few minutes to finish creating capture image.
Step 10: Check Add image to the Windows Deployment Server, then click Finish.
Step 11: Click Next, Click Next, Click Next.
Step 12: Click Finish.

Procedure to Capture Image
On your workstation, install Windows 7 operating system and any special software application
that you need on your system. Download and install critical and security updates from Microsoft
Update. Make the necessary adjustment on your graphics settings, sounds, date and time.
Configure other devices such as network inteface card (NIC), printers, etc.
Once your queen workstation is ready for deployment, connect it to your private network where
your WDS server is connected. Sysprep your PC. Sysprep tool is located in the following folder
C:\Windows\System32\Sysprep\.
Double-click Sysprep.exe
On the System Cleanup Action, select OOBE.
Check Generalize.
On Shutdown Options, choose Shutdown.
During Sysprep process your pc will shutdown. Reboot your PC and Boot PXE when it comes
up. Note: To boot PXE on HP computers, hit F12. Any other brand, please refer to the
manufacturer's manual.
During the PXE boot process, you will be prompted to choose two options: Install Image or
Capture Image.
Select Capture Image, and then hit the Enter key.
On the Windows Deployment Services Image Capture Wizard, Click Next.
On the Volume to capture. Select D.
On the Image name box, type Windows 7 Image.
On the Image name box, type Windows 7 Image.
Click Next.
Click Browse, Save the image file on D:\Windows7.wim.
Check Upload image to a Windows Deployment Services.
On Server name, type the IP Address of the WDS Server (Example: 192.168.0.1).
Click Connect.
WDS will prompt you to enter username and password. Enter the administrator account and
password, and then click OK.
On the Image Group name, Select Imagegroup1.
Click Next. Wait for several minutes to finish capturing the image.
Done.

Procedure to Install Image
Connect your PC to your private network.
Turn on your PC. Boot on PXE (For HP Computers, Press F12 when it comes up).
Select Install Image, and then hit Enter.
Click Next.
Select the Operation System you want to install (Example: Windows 7).
Select the partition you want to install the image. (You can also delete, re-format, and create new
partition if you want to).
Click Next.
Click OK.
Windows is now installing. Wait for several minutes to finish installation.
The System will reboot after the installation.
Done.

Resources Links
Windows Server 2008 R2 System Requirements
Installing Windows Server 2008 R2
Getting Started with Windows Deployment Services

Read More

Windows Server 2008 Course details Syllabus | Windows Server 2008

Course Contents

Networking Essentials
• Networking concepts, History of server OS
• Introduction to windows server 2003 & 2008
• Features of Windows server 2008
• Installation of windows server 2008
• Installation of windows Vista
• Introduction and Creation of Users accounts
Active Directory - Domain Services
• IP Addressing
• Logical Topologies, Peer to peer & Domain Models
• Introduction to Directory Services
• Evolution of Directory services – LDAP Protocol
• Features of Active Directory
• Installing Active Directory – Domain Controller
Member Servers, Clients, User Configuration
• Configuring Member Servers and Clients.
• Creating Users in AD-DS
• User Logon policies
• Password policies
• Account Lockout policies
• User properties
Permissions/Access Control Lists
• File Systems
• Security and Sharing Permissions - Folders & Files
• Offline Folders
User Profiles
• Types of Profiles
• Local, Roaming and Mandatory Profiles
• Home Folder
• Disk Quotas
Logical Structure of AD - DS
• Configuring ADC
• TREE Structure - Child Domain
• FOREST Structure
FSMO Roles of AD - DS
• Roles of AD - DS
• Transferring of Roles
• Seizing of Roles
Group Policy / System Policies
• Organizational Unit, Delegation of Control
• User & Computer Policies
• Scope of Policies - OU, Domain, Sites
• Group policy modeling (RSOP)
• Software Deployment
• Scripts, Folder Redirection
Active Directory Trusts
• Introduction to Trust Relationship
• Categories, Directions & Types of Trusts
• Functional Levels
• Authentication Protocols
• Configuring Forest Trusts between 2008 Forests
RODC & Physical Structure of AD-DS
• Introduction & Configuration of Read-Only Domain
Controller
• SITES and Global Catalog
• Replication between the Domain Controllers
• AD-DS Partitions
Dynamic Host Configuration Protocol (DHCP)
• Introduction and Configuration of DHCP Server
• DHCP Client Configuration
• Reservations
• BOOTP Server
• DHCP Backup
Windows Deployment Services
• Introduction & Configuration of WDS Server
• Attended & Unattended Installation
Domain Name System (DNS)
• Internet Basics, Host & LM Host Files
• DNS Naming Hierarchy
• Lookup Zones - Forward and Reverse lookup Zones
• Types of Zones – Primary, Secondary & Stub Zone
• Resource Records, Integration with ADS, SRV Records
• Forwarders, Dynamic Updates
Internet Information Services
• IIS 7.0 Configuration
• Hosting Websites, Virtual Directories
• Backup & Restoring Sites
• FTP Server Configuration
Routing & Remote Access
• Routing Configuration - Static Routes
• ICS, NAT, DHCP Relay Agent
• Remote Access Server Configuration
• Dial-in & Dial-out
• VPN - PPTP, L2TP
Terminal Services
• Terminal Server Configuration
• Terminal Server Licensing Mode
• Remote Desktop
• T.S Web access administration and T.S Remote Apps.
• Overview of T.S Gateway service & T. S. session broker
Disk Management
• Basic & Dynamic Disks
• Types of Volumes
• RAID 0, 1, 5 Levels
• Remote Harddisk Partitioning
• Mounting Concept
Windows Server Core
• Installation of Windows Server Core 2008
• Basic Commands of Server Core
• Installation, Managing & Uninstalling Server Core
Features & roles
• Remote Management of Server Core
Advanced Topics
• Introduction to DFS & File server
• Configuring Namespace, Folders etc
• Introduction to Backup & Backup media
• Types of Backups & Strategies
• Recovery of Data from any backup media
• System state backup & restoration
• Overview of AD- FS, LDS, RMS, CS
• Upgrading windows server 2003 to 2008
• Groups, VSS, Paging File
Live Setup - Demo by Faculty Designing, Implementing & Maintaining a Corporate Network

Separate Course (Duration : 1 Week)
Microsoft Exchange Server 2007 (Mail Server)
• Introduction to Exchange Server Roles
(Mailbox Server, Client Access, Hub Transport, Unified
Messaging, Edge Transport)
• Creating Types of Mailbox (User, Room Equipment,
Linked) and Recipients (Mailbox User, Mail User, Mail
Contact, Distribution Group)
• Configuration of Clients (Outlook Web Access,
WindowsMail, Outlook)
• Managing Mailbox Permissions, Storage Groups,
Databases and Public Folders.
• Configuring Local Continuous Replication,
• Backup and Recovery of E-mails using Windows Mail,
Outlook.
• Controlling Message Flow using Transport Rules,
Message Tracking.
• Configuring Send and Receive Connectors, Address List.

Read More

Server Maintenance

Your Servers Monthly Inspection CheckUp

You take your vehicle in for servicing every 5,000-8,000 km for an oil change, check the brakes, fill up the fluids etc... Your server is no different. We look for errors and warning signs that allow us to address them before they turn into big problems that may cause outages, downtime, loss of productivity and/or corruption of data.
Our server maintenance plans are specifically designed to keep your servers updated and working efficiently to produce the performance that your users have grown to expect. Our server maintenance plans are comprised of:
* Check hard drive redundancy
* Check hard drive for errors
* Check hard disks for available space
* Hard Drive fragmentation
* Check server log files
* Analyze Event logs
* Ensure Antivirus software is updated
* Applying necessary security updates
* Check server security
* Check core server services
* Recommending necessary software and hardware upgrades
* Check backups and more!

Read More

Windows Server 2008 Active Directory Interview Questions 2

1. What are the Important Windows port numbers:
 
RDP – 3389 – (windows rdp port number and remote desktop port number)
FTP – 21 – (file transfer protocol)
TFTP – 69 – ( tftp port number )
Telnet – 23 – ( telnet port number)
SMTP – 25 – ( SMTP port number)
DNS – 53 – ( dns port number and Domain Name System port number)
DHCP – 68 – (DHCP port number and Dynamic Host Configuration Protocol port number )
POP3 – 110 – ( post office Protocol 3 port )
HTTP – 80 – (http port number)
HTTPS – 443 – (https port number)
NNTP – 119 – ( Network News Transfer Protocol Port number )
NTP – 123 – (ntp port number and network Time Protocol and SNTP port number )
IMAP – 143 – (Internet Message Access Protocol port number)
SSMTP – 465 – ( SMTP Over SSl )
SIMAP – 993 – ( IMAP Over SSL )
SPOP3 – 995 – ( POP# Over SS L)
Time – 123 – ( ntp port number and network Time Protocol and SNTP port number )
NetBios – 137 – ( Name Service )
NetBios – 139 – ( Datagram Service )
DHCP Client – 546 – (DHCP Client port number)
DHCP Server – 547 – (DHCP Server port number)
Global Catalog – 3268 – (Global Catalog port number)
LDAP – 389 – ( LDAP port number and Lightweight Directory Access Protocol port number )
RPC – 135 – (remote procedure call Port number)
Kerberos – 88 – ( Kerberos Port Number)
SSH – 22 – ( ssh port number and Secure Shell port number)
2. How to check tombstone lifetime value in your Forest
Tombstone lifetime value different from OS to OS, for windows server 2000/2003 it’s 60 days, In Windows Server 2003 SP1, default tombstone lifetime (TSL) value has increased from 60 days to 180 days, again in Windows Server 2003 R2 TSL value has been decreased to 60 days, Windows Server 2003 R2 SP2 and windows server 2008 it’s 180 days

If you migrating windows 2003 environment to windows 2008 then its 60 day’s
you can use the below command to check/view the current tombstone lifetime value for your Domain/Forest
dsquery * “cn=directory service,cn=windows nt,cn=services,cn=configuration,dc=” –scope base –attr tombstonelifetime
Replace forestDN with your domain partition DN, for domainname.com the DN would be dc=domainname, dc=com
Source:  http://technet.microsoft.com/en-us/library/cc784932(WS.10).aspx
3. How to find the domain controller that contains the lingering object
If we enable Strict Replication Consistency
Lingering objects are not present on domain controllers that log Event ID 1988. The source domain controller contains the lingering object
If we doesn’t enable Strict Replication Consistency
Lingering objects are not present on domain controllers that log Event ID 1388. Domain controller that doesn’t log Event ID 1388 and that domain controller contain the lingering object
You have a 100 Domain controllers which doesn’t enable Strict Replication Consistency, then you will get the Event ID 1388 on all the 99 Domain controllers except the one that contain the lingering object
Need to Remove Lingering Objects from the affected domain controller or decommission the domain controller
You can use Event Comb tool (Eventcombmt.exe) is a multi-threaded tool that can be used to gather specific events from the Event Viewer logs of different computers at the same time.
You can download these tools from the following location:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en
4. What are Active Directory ports:
List of Active Directory Ports for Active Directory replication and Active Directory authentication, this ports can be used to configure the Firewall

Active Directory replication- There is no defined port for Active Directory replication, Active Directory replication remote procedure calls (RPC) occur dynamically over an available port through RPCSS (RPC Endpoint Mapper) by using port 135
File Replication Services (FRS)- There is no defined port for FRS, FRS replication over remote procedure calls (RPCs) occurs dynamically over an available port by using RPCSS (RPC Endpoint Mapper ) on port 135
Other required ports for Active Directory

TCP 53 – DSN (DNS Download)
UDP 53 – DSN (DNS Queries)
TCP 42- WINS
UDP 42- WINS
TCP 3389- RDP (Remote Desktop)
TCP 135 – MS-RPC
TCP 1025 & 1026 – AD Login & replication
TCP 389 – LDAP
TCP 639 – LDAP over SSL/TLS
TCP 3268 -Global Catalog
TCP 3268 – Global Catalog over SSL/TSL
UDP 137 & 138 – NetBIOS related
UDP 88 – Kerberos v5
TCP 445 – SMB , Microsoft-ds
TCP 139 – SMB
5. How to do active directory health checks?
As an administrator you have to check your active directory health daily to reduce the active directory related issues, if you are not monitoring the health of your active directory what will happen
Let’s say one of the Domain Controller failed to replicate, first day you will not have any issue. If this will continue then you will have login issue and you will not find the object change and new object, that’s created and changed in other Domain Controller this will lead to other issues
If the Domain Controller is not replicated more then 60 day’s then it will lead to Lingering issue
Command to check the replication to all the DC’s(through this we can check Active Directory Health)
Repadmin /replsum /bysrc /bydest /sort:delta
You can also save the command output to text file, by using the below command
Repadmin /replsum /bysrc /bydest /sort:delta >>c:\replication_report.txt
this will list the domain controllers that are failing to replicate with the delta value
You can daily run this to check your active directory health
6. GPRESULT falied with access denied error:
Unable to get the result from gpresult on windows 2003 server, gpresult return with the access denied errors, you can able to update the group policy without issue
Run the following commands to register the userenv.dll and recompile the rsop mof file
To resolve the access denied error while doing the gpresult.
1. Open a cmd
1. re-register the userenv.dll
Regsvr32 /n /I c:\winnt\system32\userenv.dll
2. CD c:\windows\system32\wbem
3. Mofcomp scersop.mof
4. Gpupdate /force
5. Gpresult
Now you able to run the gpresult without error and even server reboot not required for this procedure
7. What is the command to find out site name for given DC
dsquery server NYDC01 -site
domain controller name = NYDC01
8. Command to find all DCs in the given site
Command to find all the Domain Controllers in the “Default-First-Site-Name” site
dsquery server -o rdn -site Default-First-Site-Name
Site name = Default-First-Site-Name
9. How many types of  queries DNS does?
Iterative Query
Recursive Query

Read More