Windows Essential Business Server Installation Guide

Installation Microsoft Corporation

Published: February 2009

Version: 2

Abstract Windows® Essential Business Server (EBS) provides an integrated server and management system for midsize networks. This document explains how to install Windows EBS in a production environment.

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.

This White Paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Your right to copy this documentation is limited by copyright law and the terms of the software license agreement. As the software licensee, you may make a reasonable number of copies or printouts for your own use. Making unauthorized copies, adaptations, compilations, or derivative works for commercial distribution is prohibited and constitutes a punishable violation of the law.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

Unless otherwise noted, the companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred.

© 2009 Microsoft Corporation. All rights reserved.

Microsoft, Active Directory, Hyper-V, Internet Explorer, MSDN, Outlook, PowerShell, SQL Server, SharePoint, Forefront, Windows, Windows NT, Windows Server, and Windows Vista are trademarks of the Microsoft group of companies.

UPnP is a certification mark of the UPnP Implementers Corporation.

All other trademarks are property of their respective owners.

Contents

Windows Essential Business Server Installation Guide ................................................................ 5

Overview of the Installation Process ............................................................................................ 5

Install Windows Essential Business Server .................................................................................. 9

Establish Temporary Internet Connectivity ................................................................................ 9

Accessing Windows Server 2008 During Installation ................................................................ 9

Install the Management Server ............................................................................................... 11

Install the Security Server ...................................................................................................... 18

Install the Messaging Server .................................................................................................. 24

Summary of the Installation .................................................................................................... 28

Recover from Errors During Installation ..................................................................................... 30

Where to Find More Information ................................................................................................ 31

5

Windows Essential Business Server Installation Guide This guide helps you install Windows® Essential Business Server by describing the procedures you follow in the Windows EBS Installation Wizard. You start the Installation Wizard after you have run the Preparation Wizard and the Planning Wizard, and when you have finished the preparation and planning steps for Windows EBS deployment. This guide provides information about the following:

• Preparing for and performing the installation

• Understanding the state of your servers after software installation

• Recovering from errors that you may encounter during installation

This guide should be used in conjunction with the Windows EBS Preparation and Planning Guide and the Windows EBS Getting Started Guide.

Important

Read the Windows EBS release notes before you begin to install Windows EBS. The release notes contain late-breaking information that is critical to properly install and configure Windows EBS. To download the latest updated version of the release notes, visit the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=122109).

Overview of the Installation Process Windows EBS automates many of the installation and configuration tasks that you usually must perform manually when you install servers. This document provides an overview of the tasks that are completed during installation.

Important

• Before installing Windows EBS, you must run the following tools:

• Run these tools from Windows EBS Disc 1 - Prerequisite Planning Tools. Additional information for running these tools is available in the Windows EBS Preparation and Planning Guide at the Microsoft Web site (http://go.microsoft.com/fwlink/?linkid=122157).

After running the Preparation Wizard and the Planning Wizard, you install and configure Windows EBS by following these steps:

1. Make physical connections for power and network connectivity and prepare your existing environment to meet Windows EBS prerequisites.

Important

Before installing Windows EBS in a production environment, be sure to perform a complete backup of your existing environment, including a system state backup.

6

2. Install Windows EBS software on three servers: the Windows EBS Management Server, Security Server, and Messaging Server. This process includes a procedure to integrate the servers running Windows EBS into your existing environment.

Notes

• The procedures for installing Windows EBS instruct you to install the software from the Windows EBS installation discs and to create a partition on each server to install the operating system. If you bought your servers for Windows EBS from an original equipment manufacturer (OEM), your installation media may differ and some components of Windows EBS may be preinstalled. For more information, refer to the documentation supplied with the hardware from your OEM.

• You can use Windows Deployment Services to deploy Windows EBS to your new servers. To deploy Windows EBS from a server that is running Windows Deployment Services, you must add the images for the Management Server, Messaging Server, and Security Server to the server that is running Windows Deployment Services. For more information about using Windows Deployment Services, see “Windows Deployment Services Step-by-Step Guide” at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=125837). You must finish the installation process on all three Windows EBS servers after you deploy the images.

3. Set the time zone on each server to the local time zone in your area. For more information, see Set the time zone on each computer.

4. Finish configuration and migration tasks to start using your servers. These tasks are finished by using tools and guidance in the Configuration and Migration Tasks page, which you open in the Windows EBS Administration Console after the Windows EBS software is installed.

Installation sequence Windows EBS installation is tightly integrated among the Preparation Wizard, the Planning Wizard, and the three servers. You are guided to install Windows EBS on the servers in the following order:

1. The Management Server

2. The Security Server

3. The Messaging Server

Note

The Installation Wizard detects if you attempt to install the servers out of sequence, and prompts you to continue the installation in the correct order.

After the installation is finished on each server, the Installation Wizard lists the components, server roles, and services that are installed. After Windows EBS is installed on the Messaging Server, you can complete the configuration and migration tasks that are necessary to optimize use of the servers. Complete these tasks by using the Configuration and Migration Tasks page that starts when you open the Windows EBS Administration Console on the Management Server.

7

This page describes each task, provides links to associated tools and documentation, and provides a checklist to help you track your progress.

Installation Wizard The Installation Wizard performs some verification checks, installs Windows EBS, and establishes the Windows EBS Security Server as a network firewall.

Note

During installation, you may be prompted to use additional tools to update your existing network so that it is compatible with your servers. These tools are supplied with Windows EBS.

The Installation Wizard completes several functions, including the following:

• Verifies that you have run and finished the Preparation Wizard and the Planning Wizard

• Verifies the compatibility of your current network with Windows EBS, and then helps you perform updates to ensure compatibility

• Connects to the Microsoft Update Web site to download and install critical updates

• Installs Windows Server® 2008

• Installs the product technologies, applications, and components of Windows EBS

• Performs initial configuration of network services, such as DHCP Server service and Active Directory® Domain Services

• Performs initial configuration of network security services on the Security Server.

• Guides you through the steps to establish the Windows EBS Security Server as your external gateway and primary firewall during the Security Server installation

• Performs initial configuration of messaging services on the Messaging Server

After you install all three of the servers for Windows EBS, the Installation Wizard prompts you to complete a list of configuration and migration tasks on the Windows EBS Administration Console. These tasks complete your network configuration and move your primary workloads to the servers running Windows EBS.

Network operation during installation The Windows EBS installation process minimizes interruptions and demands on your current network services. Brief, temporary network outages occur at specific times during installation. The Installation Wizard explains when these outages occur and what processes take place when they happen. Even though outages are not extensive, it is recommended that you schedule installation of Windows EBS during a period of low user access to the network, such as a weekend or evening.

Although network activity may increase during installation as updates are downloaded and information is shared between your servers, Windows EBS installation minimizes traffic across your network.

8

Network security during installation During installation, the servers are updated automatically with current critical security updates from the Microsoft Update Web site. This is by design to help protect your servers during installation.

If you choose, the Installation Wizard also connects to the Microsoft Update Web site after the software and roles are configured on each server, to check for remaining optional updates to download and install. Optional updates include the following classifications:

• Update

• Update rollup

• Service pack

• Feature pack

• Critical update

• Definition update

It is recommended that you configure the Installation Wizard to download and install the optional updates automatically as part of the installation of Windows EBS. To enable the automatic download and installation of the optional updates for the three Windows EBS servers, select the check box on the Microsoft Update page of the Management Server Installation Wizard. To disable the automatic download and installation of the optional updates for the three servers, clear the check box on the Microsoft Update page.

If you choose to disable the automatic installation of optional updates, you are still prompted to download optional updates before you finish the installation of Windows EBS on each server. You can choose at that time to download and install the optional updates or to finish the installation without the optional updates.

If there is a problem downloading or installing an update from Microsoft Update, you can successfully finish the installation of Windows EBS without applying the update. After you finish the installation of Windows EBS on the three servers, use the update-management tools in Windows EBS to apply updates.

Participate in the Microsoft Customer Experience Improvement Program Microsoft continually works to improve its products. One of the ways it does this is to ask customers to share information with Microsoft about the types of errors and issues that they experience with Microsoft products. That information helps Microsoft learn which features its customers use most frequently, where errors are occurring, and how they occur. You may participate in two ways—through error reporting and through usage and reliability reporting. You can choose to participate in either or both programs by selecting options during your installation. To change your options at any time after installation, click the Administration Console Help menu, and then select Customer Experience Options or Error Reporting Options .

9

Install Windows Essential Business Server In this phase of your software installation, you install the Windows EBS software on all three servers.

You are prompted to begin each installation on the proper server at the appropriate time during installation. During the installation process, each of your servers will restart to complete various installation tasks. After each restart, continue the installation by logging on with the account that you used to start the installation. After all the necessary information has been entered and you click Install , the installation proceeds unattended even if you have not logged on. You can check the progress at any time by logging on with the account that you used to start the installation.

Establish Temporary Internet Connectivity During installation, the Installation Wizard needs to connect to the Microsoft Update Web site to download critical updates for the Installation Wizard and the roles that it installs. For the wizard to connect to the Internet, you need to specify and configure temporary settings for a network adapter. You can specify static IP addresses, or you can allow the addresses to be assigned by an existing DHCP server.

Note

The network settings for connecting to the Internet are used temporarily during the installation. If you assign a static address for connecting to the Internet during the installation, you can reuse that address later.

During installation, the Installation Wizard provides screens for you to assign permanent network settings to each of the servers for Windows EBS. The permanent settings are used in your network to enable the features in Windows EBS, such as the management and external connectivity features. Unlike the temporary settings that are used for downloading updates, your permanent settings should take into account whether you are retaining or replacing an existing firewall or gateway device, the role of the Security Server as the gateway device for your network, and your choices for DNS and DHCP Server services in Windows EBS. The Installation Wizard prompts you for the information that is needed to configure the permanent settings.

Accessing Windows Server 2008 During Installation As you install Windows EBS, you may need to temporarily stop the installation process to access the operating system. You may need to do this if the network adapters on the server are not recognized after the operating system is installed.

You can access the operating system during installation to install a driver for a network adapter or to perform other necessary tasks. For example, you can temporarily leave the Installation Wizard, and then access Control Panel to install a network adapter driver with the Add Hardware Wizard.

10

Use one of the following procedures to access Control Panel during installation. The way that you choose to access the Control Panel during installation depends on whether you are logged on to the computer with the local Administrator user account. When you are finished, you can return to the wizard and continue the installation.

Note

You can perform these procedures only after Windows Server 2008 is installed. If the Installation Wizard is running installation tasks when you access Control Panel, the installation will not pause.

Important

Do not access the operating system to make any changes that are not required to continue the Windows EBS installation.

To access Control Panel when you are logged on with a local Administrator account

1. Press SHIFT+F10.

2. At the command prompt, type control.exe , and then press ENTER.

Tip

At the command prompt, you can also run any command line executable that you need. For example, you can type ipconfig /all to check the settings of the network adapter on the computer.

3. When you are finished, close Control Panel and other windows that you opened, and then continue with the Windows EBS Installation Wizard.

To access Control Panel when you are not logged on with a local Administrator account

1. Press CTRL+ALT+DELETE, and then click Start Task Manager .

2. In Task Manager , click File , and then click New Task (Run…) .

3. In the Open text box, type runas /user:computername\administrator control.exe , and then click OK.

Tip

You can also type cmd.exe instead of control.exe to open a Command Prompt window and run any command line executable that you need.

4. In the Runas window, type the password for the local Administrator account, and then press ENTER.

5. When you are finished, close Control Panel and other windows that you opened, and then continue with the Windows EBS Installation Wizard.

11

Install the Management Server The Installation Wizard begins by installing Windows EBS on your Management Server.

Run the Management Server Installation Wizard Use the following procedure to install Windows EBS on your Management Server.

Important

Do not change any network settings in your existing environment after you begin Windows EBS installation.

Note

You need from 2.5 to 4 hours to install the software. Your interaction with the Installation Wizard is approximately 30 minutes. This time may vary, depending on the capacity of your network. For example, Active Directory replication activities performed during installation create heavy demand on your network. The capacity to handle heavy traffic on your network could result in a longer overall installation time.

To install the Management Server

1. Insert Windows EBS Installation Disc 2 into the Management Server, and then boot from the DVD. The Windows Server 2008 Installation Wizard appears.

2. Set your locale, and then click Next .

3. Click Install Now .

4. When prompted, we strongly recommend that you type your 25-character product key to help avoid problems during activation. Click Next .

Important

You need a different product key for each of the three servers. Check your supplied packaging for the proper keys.

5. If you have an Internet connection, select the check box Automatically activate Windows when I'm online if you want to activate your software now. Click Next .

6. Review the Microsoft Software License Terms. If you agree with them, select the check box, I accept the license terms , and then click Next .

7. Click Custom (advanced) as your installation type.

8. On the Where do you want to install Windows? page, click the partition where you want to install Windows EBS, and then click Next .

Note

A system partition of at least 50 GB is recommended. If you need to load a driver, click Load Driver . If you need to format or partition a disk, click Drive Options (advanced) . If you do not format or partition the disk now, you have opportunity to do it later during installation by using the Windows Server 2008

12

Disk Manager.

Note

If you plan to use a hardware-based RAID storage system, it is recommended that you configure it now, prior to continuing with the Management Server installation.

9. The Installation Wizard installs Windows Server 2008.

Note

Your computer restarts one or more times while Windows Server 2008 is being installed.

10. The Management Server Installation Wizard appears. On the Welcome page, read the introductory text. Click Next .

11. On the Choose the network adapter page, select the network adapter that you use to connect this server to your network. Verify that the network adapter is connected to your internal network, and then click Next .

Note

If your Management Server has only one network adapter, select it. If the server has two network adapters, select the adapter that you prefer for your internal network (LAN) connection. Windows EBS requires only one network adapter each, connected to the internal network, for the Management Server and your Messaging Server.

12. On the Choose temporary IP addresses page, either choose to use DHCP Server service to automatically assign the Management Server an IP address that is used during installation, or type a valid IP address that provides an Internet connection through your network, and then click Next .

Note

These IP address settings are used temporarily during installation to download critical updates from the Microsoft Updates Web site and to connect to the computers that already exist on your network. The settings will be reconfigured to your final settings later in the installation.

13. On the Microsoft Update page, choose whether to download optional updates from the Microsoft Updates Web site and apply them automatically during installation, and then click Next .

14. The Installation Wizard connects to the Microsoft Updates Web site and searches for critical updates for Windows EBS. If the wizard detects any updates, it downloads and installs them.

15. When the wizard is finished, click Next on the Critical updates installed page.

Note

If there are no updates to install or if you do not have an Internet connection, the

13

Installation Wizard notifies you. Click Next to continue to the Choose the Active Directory domain page.

16. On the Choose the Active Directory domain page, choose to join your existing Active Directory forest or to create a new Active Directory forest, and then click Next . Complete step 17a or 17b of this procedure, depending on your selection.

17. Do one of the following, depending on your choice in step 16:

a. If you chose to join your server to your existing forest, type the requested information when prompted on the Join the Active Directory domain page, and then click Next . Type the domain name and the account logon credentials for a user account that has Enterprise Administrator permissions on this domain, and then click Join domain .

The server restarts to join the domain. When prompted, log on with the account that you used to join the domain. The Progress of joining the domain page appears to help you track the progress as the server joins the domain. When the domain is joined, click Next .

b. If you are creating a new domain, the Configure the Active Directory domain page appears. Type the name of your new domain and the credentials for the default domain administrator account, and then click Next .

Note

These credentials are used in the future as your domain administrator credentials. Write them down and keep them in a secure location.

After you create the domain, the Planning data upload page appears. Click Load Planning Data to open the XML file that you saved when you completed the Planning Wizard. You can open the file from a USB drive or other portable storage media. The data file is required to continue the Installation Wizard.

18. On the Name the servers page, type the names of your servers, and then click Next .

Note

Use descriptive names for each of your servers. Ensure that each server name is longer than one character and does not exceed 15 characters.

Caution

Renaming your servers after Windows EBS has been installed is not supported.

19. On the Assign IP addresses page, verify the default static IP addresses and the subnet masks for each of the servers, and then click Next .

Important

For users who are installing Windows EBS into an existing production environment, configure the static IP address for the Security Server with the same IP address as your existing network gateway.

These IP settings are saved on the Management Server during installation. They are then used later in the installation to set the recommended network settings for the other

14

servers.

20. On the Select firewall option page, select an option to replace your existing firewall with the Windows EBS Security Server, or to retain your existing firewall.

Important

If you choose to retain your existing firewall, you must perform additional configuration tasks during the installation of the Security Server.

21. On the Set the internal network IP addresses page, review the default IP settings for the Management Server, and then click Next to accept the settings.

Note

If you want to use different servers for your preferred and alternate DNS servers, click Manually configure the network settings , and then type the IP addresses that you want to use.

22. If you joined an existing Active Directory domain, the Check the environment page appears. Click Check environment .

Note

In the next phase of the installation, the Installation Wizard checks several aspects of your environment to ensure that the wizard can successfully finish.

Note

If you did not join an existing Active Directory domain, these checks are not performed. Continue directly to the Choose the DHCP Server service page in step 24.

If the environment checks find a condition that prevents successful installation, the Installation Wizard pauses, and you are prompted to make changes to an existing server. When you are done, click Check again . This may happen more than once, if several conditions need attention.

23. After the Installation Wizard successfully completes all of the preinstallation checks, it displays a summary of the results on the Environment check is finished page. Review this summary, and then click Next . While the check is being performed, you may be prompted to perform upgrades or to make other changes to your existing environment. If you are prompted to run the Schema Upgrade Tool, see Run the Schema Upgrade Tool.

24. On the Choose the DHCP Server service page, click either Continue to use the existing DHCP Server service or Configure the DHCP Server service in Windows Essential Business Server . If you choose to configure the Windows EBS DHCP Server service, click Start the DHCP Server service in Windows Essential Business Server .

Important

If you choose to start the DHCP Server service in Windows EBS, your existing DHCP Server service is shut down.

Click Next .

15

25. On the Configure the DHCP Server service - 1 of 2 page, review the recommended name for your DHCP Server service scope, make any desired changes, and then type your desired settings to define the range of the DHCP Server service scope. Review the preconfigured Subnet mask and Default gateway settings, and then click Next .

26. On the Configure the DHCP Server service - 2 of 2 page, either confirm the default DNS server IP address or change the IP address to your preferred DNS server. Next, set the lease times for the IP addresses that are issued by DHCP Server service or accept the default of eight days. If you want, you can also type the settings for an optional DHCP Server service exclusion range. Click Next .

27. On the Choose a volume for storing data page, you can choose to store application data on a volume that is separate from your system volume. To do this, leave the radio button selected and select the data volume that you want to use. If you need to format a hard-disk drive, create a partition or perform other disk management tasks, and then click Disk Management . If you need to install a driver for the disk controller, see Accessing Windows Server 2008 During Installation.

If you want to store your system and application data on the same volume, click Store all system and application data on the system volume .

Click Next .

28. On the Type your company information page, type the company name.

The name that you provide is used for the company name on the home page of Remote Web Workplace. The home page can display a maximum of 30 characters for the company name. If you plan on using Remote Web Workplace, choose a company name that is less than 30 characters long.

You can type the administrator user account name as an option. The Installation Wizard automatically generates a name for the issuer of Windows EBS certificates. You can change the automatically-generated name, if desired.

Important

The certificate issuer name cannot be changed later. Be certain that you have provided the name you want to use before you continue the installation.

Click Next .

29. On the Choose how to report errors page, you are prompted to choose whether you want to participate in the Microsoft Error Reporting service.

Click Next .

30. On the Choose whether to report usage data page, you are prompted to choose whether you want to report usage and reliability data.

Click Next .

31. Review your settings on the Management Server installation page. You can change the settings that you made since you joined the Active Directory domain by clicking Previous to return to previous pages. When you finish reviewing the settings, click Install .

The Installation Wizard installs Windows EBS on your Management Server and

16

configures it with the settings that you chose. The Progress of Management Server installation page displays progress bars that show you how the installation is proceeding. Depending on the settings that you chose, the server may restart several times.

You can leave the remainder of the installation unattended. If you want to observe the progress, you can log on to the server by using your domain administrator credentials.

32. When the Management Server is installed, the Management Server installation tasks finished page appears. Click Next .

33. If you did not choose to automatically install optional updates, the Choose optional updates page appears. Here, you can choose to install the most recent updates for all of your installed server roles. If you prefer, you can also finish the installation without downloading or installing the updates. Click Install updates to start the update process, or click Finish to finish installing the Management Server without the updates.

34. If you chose to install optional updates, review the status of your installation and updates on the Installation and updates finished page, and then click Close .

Note


35. For either update option, the Continue installation page directs you to continue the installation on the Security Server, as described in Install the Security Server. Click Close , and then move to the Security Server to continue.

Note

If you do not see the Windows desktop after you close the Installation Wizard, you can restart the computer. Or, press CTRL+ALT+DEL, and then click Start Task Manager . In Task Manager, click File , and then click New Task (Run…) . In the Open text box, type explorer.exe , and then click OK.

Run the Schema Upgrade Tool If you are prompted to upgrade your Active Directory schema level during the preinstallation checks, use the Windows EBS Schema Upgrade Tool to do this.

To use the Schema Upgrade Tool

1. Insert the Windows EBS Disc 1 - Prerequisite Planning Tools into your existing domain controller, as prompted by the Installation Wizard.

2. In the dialog box that appears, click Run the Schema Upgrade Tool .

3. Follow the directions that appear in the tool interface.

17

Note

The Schema Upgrade Tool can take several minutes to run. Wait until the tool has finished before continuing.

After the upgrades are finished, remove the disc from the server. Return to the Management Server, and then continue with the Installation Wizard. The Installation Wizard runs additional preinstallation checks before continuing.

Management Server installation summary

Applications, roles, and services installed During installation, applications, roles, and services are installed on the Management Server. Most of these are completely configured during installation. For those roles that are not completely configured, you are guided through the final configuration process after installation is finished on all three servers. For more information about the components that are installed on each of the servers in Windows EBS, see the Windows EBS Product Overview.

The following applications, roles, and services are installed on the Management Server:

• Active Directory components

• Certificate Services

• Domain Name System (DNS) service

• DHCP Server service (optional installation)

• Exchange Server management tools

• File server role

• Forefront TMG (formerly called ISA Server) management tools

• Internet Information Services (IIS)

• Microsoft SQL Server® Express

• Microsoft System Center Essentials

• Network Protection Service

• Print server role

• Remote Assistance optional component

• Terminal Services RemoteApp™

• Windows Server 2008

• Windows EBS Administration Console

• Windows EBS licensing service

• Windows Server Update Services (WSUS—installed as a component of System Center Essentials)

18

Network status When installation is finished on the Management Server, the following has been accomplished:

• The Management Server is assigned a name and a static IP address.

• Active Directory is configured in one of the following two options:

• The Management Server is joined to an existing Active Directory domain as a domain controller.

• The Management Server is the domain controller for a new domain in a new forest.

• DNS is configured in one of the following two options:

• The Management Server is the preferred DNS server.

• Your existing DNS server is the preferred DNS server, and the Management Server is the alternate DNS server.

• If selected as an option, the Management Server DHCP scope is defined.

• If selected as an option, the Windows EBS DHCP service is started.

• The Management Server internal adapter points to the network default gateway.

• The Windows Firewall service on the Management Server is configured with the default firewall exceptions for Windows EBS.

Install the Security Server After you finish installing the Management Server, install Windows EBS on the Security Server.

Important

You must successfully finish installing the Management Server before you begin to install the Security Server.

Note

If you have a Group Policy object in your domain that forces Windows Firewall to be enabled on computers that join the domain (by using the Windows Firewall: Protect all network connections Group Policy setting), you must temporarily disable it to install the Security Server. During the installation of Windows EBS, Windows Firewall is turned off on the Security Server and is replaced by the network firewall in Forefront TMG. For more information about Windows Firewall Group Policy settings, see the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=139090.

Run the Security Server Installation Wizard To configure the Security Server, the Installation Wizard uses settings that you chose while installing the Management Server.

Note

Time to complete this task: approximately 1.5 hours. This time may vary depending on the state of your current network and how many updates or upgrades must be applied.

19

To install the Security Server

1. Insert Windows EBS Installation Disk 3 into the Security Server, and boot from the DVD. The Windows Server 2008 Installation Wizard appears.




5. If you have an Internet connection, select the Automatically activate Windows when I'm online check box if you want to activate your software now. Click Next .

6. Review the Microsoft Software License Terms. If you agree with them, select the I accept the license terms check box and then click Next .

7. Select Custom (advanced) as your installation type.


Note

A system partition of at least 50 GB is recommended. If you need to load a driver, click Load Driver . If you need to format or partition a disk, click Drive Options (advanced) . It is recommended that you format and partition the disk before you install the Security Server. You have another opportunity to format volumes in the Windows EBS Installation Wizard.


Note

Your computer restarts several times while Windows Server 2008 is being installed.

10. The Security Server Installation Wizard appears. Read the introductory information on the Welcome page, and then click Next.

11. On the Choose the internal network adapter page, select the network adapter that you use to connect this server to your network. Verify that the network adapter is connected to your internal network. Click Next .

12. On the Choose temporary IP addresses page, either choose to use DHCP Server service to automatically assign the Security Server an IP address that is used during installation, or type a valid IP address that provides an Internet connection through your network

Click Next .

Note

It is recommended that you use an existing DHCP server. If your existing domain does not have a DHCP server, use a static address.

Note

20


13. The Installation Wizard connects to the Microsoft Update Web site and searches for critical updates for Windows EBS. If the wizard finds any updates, it installs them.

14. Review the status of the critical updates installation on the Critical updates installed page, and then click Next .

15. On the Choose the external network adapter page, in the list box, select the network adapter that you want to use for your external connection, and then click Next .

Note

This page does not appear if you have only two network adapters in your computer.

16. On the Join the Active Directory domain page, type the Active Directory domain name that the Management Server is joined to. Type the credentials of an account that has Enterprise Administrator permissions on this domain, and then click Join domain . The server restarts to join the domain. When prompted, log on with the account that you used to join the domain. The Progress of joining the domain page helps you track the progress. When you are finished joining the Security Server to the domain, click Next .

17. On the Check the environment page, the Installation Wizard automatically checks your environment to verify that it is compatible with Windows EBS. Read and follow the directions on the screen, and then click Check environment .

18. On the Environment check is finished page, the Installation Wizard displays the status of the completed environment checks. When all of the checks are finished, click Next to continue.

19. On the Set the internal IP address page, verify that the settings that you chose during the Management Server installation are filled in as the default settings, and then click Next .

If the IP address that you specified is detected on the network, then the Choose firewall option page appears. Choose one of the following:

• Replace your existing firewall device with the Security Server.

• Retain your existing device and deploy the Security Server behind it. Click Next to continue.

20. On the Set the external IP address page, choose whether to use an existing DHCP server or to manually configure the IP address settings. If you choose to manually enter the IP address settings, type a set of IP address settings that are valid for your network, and then click Next .

21. On the Choose an Administrator password page, type a new password for the Directory Services Restore Mode. This password should be different from the passwords that you use to log on as a domain administrator and that you used to join the Active

21

Directory domain. Confirm the password, and then click Next .

22. On the Set the e-mail gateway page, configure the settings that allow external e-mail traffic through the Security Server until you have migrated mailboxes and other settings to the Messaging Server.

The Installation Wizard automatically detects if Exchange Server is running in your environment and preconfigures some of the settings on this page. If Exchange Server is detected, the Installation Wizard selects I want to forward e-mail to this IP address and provides the current SMTP domains. Type the IP address of the Exchange Server in the text box, verify the SMTP domain settings, and then click Next .

If Exchange Server is not running in your environment, select whether you want to forward e-mail. If you choose to forward e-mail, type the IP address of the e-mail server in the text box. Then, specify the SMTP settings. Type the SMTP domain name, and then click Add . If you add more than one domain, to specify the default SMTP domain, click the domain name, and then click Set default . When you are finished, click Next .

Important

You can forward e-mail only to an existing SMTP server that is accessible from the internal network adapter on the Security Server.

Note

You can add, remove, or reconfigure SMTP domain information after Windows EBS installation is finished. For more information, see the technical article on the Microsoft Web site (http://go.microsoft.com/fwlink/?linkID=121808).

23. On the Remote access settings page, you can set up remote access to your network through services (such as Remote Web Workplace) and through e-mail services (such as Outlook® Web Access or Outlook Anywhere). Choose a URL that is easy to remember, such as remote.adventure-works.com . Type the URL, and then click Next .

24. On the Choose a volume for storing data page, you can choose to store applications data on a volume that is separate from your system volume. To do this, leave the radio button selected and choose the volume that you want to use for data. If you need to format a hard disk drive, create a partition, or perform other disk-management tasks, click Disk Management .


Click Next .

25. On the Select firewall option page, select the appropriate radio button to Replace or Retain your existing firewall, and then click Next .

26. On the Integrate the Security Server page, follow the instructions to configure your existing network to route Internet traffic through the Security Server.

Note

If you do not have a gateway device (such as a router or a firewall) connecting

22

your network to the Internet, this page is not displayed.

Important

If you choose to retain your existing gateway device and supplement it with the Security Server, complete the following steps (a through d). If you choose to replace your existing gateway device, remove the gateway device from the network and reconnect your Internet cable to the external network adapter of the Security Server. If your existing device has failover capabilities, make sure that you also decommission the secondary device at this time. Then continue with step 27 below.

For steps a through d, pause your installation of Windows Essential Business Server. These steps position the Security Server as the default gateway for your local area network (LAN). When you finish the reconfiguration, your network connects to the Security Server as the Internet gateway (firewall). The Security Server connects to your existing (but reconfigured) firewall device to connect it to the Internet. The Installation Wizard prompts you to complete steps a through d.

a. Change the internal IP address on your existing Internet gateway device to a new address. To do this, follow the instructions from the device manufacturer.

b. Disconnect the cable that connects your existing gateway device to your network (leave it connected to the Internet).

c. Connect the disconnected cable to the external network adapter on the Security Server. This connects the Security Server to the gateway device. You may need to use one or more hubs to make these connections.

d. Connect the internal network adapter on the Security Server to the LAN. The Security Server is already configured with the IP address of your existing gateway device.

When you are finished, click Next in the Installation Wizard.

27. Review, and optionally save, your settings on the Review the Security Server installation page. You can change the settings that you made since you joined the Active Directory domain by clicking Previous to return to previous pages. When you finish reviewing the settings, click Install . The remainder of the installation can proceed unattended.

The Installation Wizard installs Windows EBS on your Security Server and configures it with the settings that you select. The Progress of Security Server installation page displays progress bars that show you how the installation is proceeding. Depending on the settings that you chose, the server may restart several times.

If you want to observe the progress, you can log on to the server by using your domain administrator credentials.

28. When the Security Server is installed, the Security Server installation tasks finished page appears. Click Next .

29. If you did not choose to automatically install optional updates, the Choose optional updates page appears. You can choose to install the most recent updates for all the server roles that you installed. If you prefer, you can finish the installation without

23

downloading or installing the updates. Click Install updates to start the update process, or click Finish to finish installing without the updates.

30. If you chose to install optional updates, the Installation Wizard connects to the Microsoft Updates Web site to search for and download updates for your server. The Progress of optional updates page displays progress as updates are installed. After the updates are installed, click Finish on the Installation and updates finished page.

Note


31. For either update option, the Continue installation page directs you to continue installation on the Messaging Server, as described in Install the Messaging Server. Click Close , and then move to the Messaging Server to continue.

Note


Security Server installation summary

Applications, roles, and services installed During installation, applications, roles, and services are installed and partially or completely configured on the Security Server. For those roles that are partially configured, you complete the configuration after the installation is finished on all three servers. The following applications, roles, and services are installed:

• Active Directory Lightweight Directory Services

• Exchange Server Edge Transport

• Exchange Intelligent Message Filter

• Forefront TMG

• Remote Web Workplace

• Routing and Remote Access service

• System Center Operations Manager agent

• SQL Server Express (required for Forefront TMG logging)


24

Network status When installation is finished on the Security Server, the following has been accomplished:

• The Security Server is assigned a name and a static IP address.

• The Security Server is joined to the selected Active Directory domain.

• Windows Firewall is turned off on the Security Server and is replaced by Forefront TMG.

• The Security Server is established as the default gateway for your network.

• The Security Server provides firewall and other security roles to the network.

• If chosen as an option, your previous gateway device is reconfigured to be an additional firewall between the Security Server and the Internet. If you did not choose to retain your previous gateway device, it is decommissioned.

• Default Forefront TMG publishing rules are configured.

• E-mail is forwarded to the existing e-mail server, if specified.

• Exchange Server Connector settings are configured.

Install the Messaging Server After you finish installing the Security Server, install Windows EBS on the Messaging Server.

Important

You must successfully finish installing the Security Server before you begin to install the Messaging Server.

Run the Messaging Server Installation Wizard To configure the Messaging Server, the Installation Wizard uses settings that you chose during planning and while installing the Management Server.

Note

Time to complete this task: Approximately 1.5 hours. This time may vary depending on the state of your current network and how many updates or upgrades must be applied.

To install the Messaging Server

1. Insert Windows EBS Installation Disc 4 into the Messaging Server, and boot from the DVD. The Windows Server 2008 Installation Wizard appears.




5. Review the Microsoft Software License Terms. If you agree with them, select the I accept the license terms check box, and then click Next .

6. Select Custom (advanced) as your installation type.

25


Note

A system partition of at least 50 GB is recommended. If you need to load a driver, click Load Driver . If you need to format or partition a disk, click Drive Options (advanced) . It is recommended that you format and partition the disk before you install the Messaging Server.


Note

Your computer may restart one or more times while Windows Server 2008 is being installed.

9. The Messaging Server Installation Wizard appears. Read the introductory information on the Welcome page, and then click Next .

10. On the Choose the network adapter page, select the network adapter that you use to connect this server to your network. Click Next .

11. On the Choose temporay IP addresses page, either choose to use DHCP Server to automatically assign the Messaging Server an IP address that is used during installation, or type a valid IP address that provides an Internet connection through your network. Click Next .

Note


12. The Installation Wizard connects to the Microsoft Update Web site and searches for critical updates for Windows EBS. If the wizard finds any updates, it downloads and installs them. When the process is finished, on the Critical updates finished page, click Next .

13. On the Join the Active Directory domain page, type the Active Directory domain name that the Management Server is joined to. Type the domain name and credentials of an account that has Enterprise Administrator permissions on this domain, and then click Join domain . The server restarts to join the domain. When prompted, log on with the account that you used to join the domain. The Progress of joining the domain page helps you track the progress. When you are finished joining Messaging Server to the domain, click Next .

14. On the Check the environment page, the Installation Wizard automatically checks your environment to verify that it is compatible with Windows EBS. Read and follow the directions on the screen, and then click Check environment .

15. On the Environment check is finished page, the Installation Wizard displays the status

26

of the completed environment checks. When all of the checks are finished, click Next to continue.

16. On the Set the internal network IP address page, verify that the settings that you chose during the Management Server installation are filled in as the recommended settings, and then click Next .

17. On the Choose a volume for storing data page, you can choose to store applications data on a volume that is separate from your system volume. To do this, leave the radio button selected and click the volume that you want to use for data. If you need to format a hard disk drive, create a partition, or perform other disk-management tasks, click Disk Management . If you need to install a driver for a disk controller, see Accessing Windows Server 2008 During Installation.

Note

For better performance from Exchange Server on your Messaging Server, it is recommended that you accept the default setting and store your applications data on a separate volume from your system files.


Click Next .

18. Review your settings on the Review the Messaging Server installation page. To change the settings that you made since you joined the Active Directory domain, click Previous to return to previous pages. When you are finished reviewing the settings, click Install .

The Installation Wizard installs Windows EBS on your Messaging Server and configures it with the settings that you select. The Progress of Messaging Server installation page displays progress bars that show you how the installation is proceeding. Depending on the settings that you chose, the server may restart several times.

19. When the Messaging Server is installed, the Messaging Server installation tasks finished page appears. Click Next .

20. If you did not choose to automatically install optional updates, the Choose optional updates page is displayed. You can choose to install the most recent updates for all of the server roles that you installed. If you prefer, you can finish the installation without downloading or installing the updates. Click Install updates to connect to the Microsoft Update Web site and install the updates, or click Finish to close the Installation Wizard without the updates.

21. If you chose to install the updates, the Progress of optional updates page is displayed to help you track the update process.

22. Review the status of the update installation on the Installation and updates finished page. Click Finish to close the Installation Wizard.

Note

If there is a problem downloading or installing an update from Microsoft Update,

27

you can successfully finish the installation of Windows EBS without applying the update. After you finish the installation of Windows EBS on the three servers, use the update-management tools in Windows EBS to apply updates.

23. The Continue installation page directs you to return to the Administration Console to review and begin work on the Configuration and Migration Tasks. Click Close, and then move to the Management Server.

Note


Set the time zone on each computer Before you start the Configuration and Migration Tasks, set the time zone on the Management Server, Security Server, and Messaging Server to the local time zone for your area.

To set the time zone

1. On each computer, click Start , and then click Control Panel .

2. In Control Panel , double-click Date and Time .

3. In Date and Time , click Change time zone , select the local time zone for your area, click OK, and then click OK again.

Messaging Server installation summary

Applications, roles, and services installed During installation, applications, roles, and services are installed and partially or completely configured on the Messaging Server. For those roles that are partially configured, you complete the configuration after the installation is finished on all three servers. The following applications, roles, and services are installed:

• Domain Name System (DNS) Server service

• Exchange Server 2007 Client Access Server (CAS), Mailbox (MBX), and Hub Transport (HUB) roles

• Forefront™ Security for Exchange Server

• Internet Information Services (IIS)

• Network Policy Server (NPS)

• Operations master roles:

• Domain naming master

• Infrastructure master

28

• Primary Domain Controller (PDC) Emulator

Note

This role is not moved immediately during installation. It is transferred after Windows EBS has been running for several hours.

• Relative ID master

• Schema master

• Terminal Services Gateway

• System Center Operations Manager agent

• Windows EBS licensing service


Network status When installation is finished on the Messaging Server, the following has been accomplished:

• The Messaging Server is assigned a name and a static IP address.

• The Messaging Server is joined to the selected Active Directory domain.

• The Messaging Server is a domain controller and a Global Catalog server.

• The Messaging Server is set as the alternate DNS server.

• Data from the existing domain is replicated to the Messaging Server. The replicated data includes the following:

• Active Directory schema

• Active Directory data

• Integrated DNS data

• SYSVOL data

• The internal network adapter points to the network default gateway.

• The Exchange Server Connectors point to Forefront TMG for e-mail routing.

• All operations master (also known as flexible single master operations or FSMO) roles are transferred to the Messaging Server.

• Windows Firewall on the Messaging Server is configured with the Windows EBS default firewall exceptions.

Summary of the Installation When the Installation Wizard is finished on the Messaging Server, you are finished installing Windows EBS. Specifically, you have installed the following servers, applications, and roles on your Management Server, Security Server, and Messaging Server:

29

Management Server Security Server Messaging Server

Active Directory components

Certificate Services

Domain Name System (DNS) service

DHCP Server service (optional)

Exchange Server management tools

File-server role

Forefront TMG management tools

Internet Information Services (IIS)

Microsoft SQL Server Express

Microsoft System Center Essentials

Network Protection Service

Print-server role

Remote Assistance optional component

Terminal Services RemoteApp

Windows EBS Administration Console

Windows EBS licensing service

Windows Server 2008

Windows Server Update Services (WSUS) (Installed as a component of System Center Essentials.)

Active Directory Lightweight Directory Services

Exchange Server Edge Transport role

Exchange Server Intelligent Message Filter

Forefront TMG

Remote Web Workplace

Routing and Remote Access service

System Center Operations Manager agent

SQL Server Express (required for Forefront TMG logging)

Windows Server 2008

Domain Name System (DNS) Server service

Exchange Server 2007 Client Access Server (CAS), Mailbox (MBX), and Hub Transport (HUB) roles

Forefront Security for Exchange Server

Internet Information Services (IIS)

Network Policy Server (NPS)

Operations master roles:

• Domain naming master

• Infrastructure master

• Primary domain controller (PDC) emulator

• Relative ID master

• Schema master

Simple Mail Transfer Protocol (SMTP) service

System Center Operations Manager agent

Terminal Services Gateway

Windows EBS licensing service

Windows Server 2008

Note

If you installed Windows EBS in an environment where DNS is not integrated with Active Directory Domain Services, the DNS Server role is not automatically installed on the Management Server and the Messaging Server. You must manually install the DNS Server role on those computers. For more information, see the technical article on the Microsoft Web site (http://go.microsoft.com/fwlink/?linkid=95814).

30

Your servers are now functional, but they require additional configuration steps. To continue, log on to the Management Server with an account that has domain administrator privileges, start the Administration Console, and complete the tasks on the Guided Configuration and Migration Tasks page. These tasks must be finished to complete the installation process.

Recover from Errors During Installation You may encounter errors during Windows EBS installation for a variety of reasons. Windows EBS helps you recover from those errors and continue with the installation wherever possible. If the installation on one of the servers is unsuccessful, you do not need to reinstall the software on the previously completed servers. For example, if the installation is unsuccessful on the Messaging Server, you do not need to reformat partitions or reinstall the software on the Management Server or the Security Server.

Before it attempts to install, the Installation Wizard checks whether a previous installation was attempted. If it detects a failed attempt, before it continues, the Installation Wizard restores the existing environment by removing files that were written to shared network storage (such as an Active Directory database). If you cancel the installation for any reason, the Installation Wizard also attempts this cleanup before it closes.

Depending on the type of error or condition that you encounter, you may need to do one of the following:

• Retry the operation in the Installation Wizard.

• Resume the Installation Wizard on the server.

• Restart the installation on the server.

Retry the operation For most input errors, such as an invalid IP address or a password that does not meet the minimum strength requirements, the Installation Wizard displays an error icon so that you can correct the data. To correct the error, place your cursor over the icon to display the error message, and then follow the instructions that are displayed in the error message.

For other errors or conditions (such as failure to detect a domain controller on your existing network), you are notified by a dialog box. You can then correct the condition that caused the error. After you resolve the error, close the dialog box to retry the operation in the Installation Wizard.

Resume the Installation Wizard You may encounter some conditions that require you to perform one or more corrective tasks before you can continue the installation. In most cases, the Installation Wizard informs you of the action that you need to take. After you take the corrective action, you can resume the Installation Wizard.

31

Restart the installation If you decide to cancel the Installation Wizard on a server, you can restart the installation later on that server. After you cancel the wizard, you must begin the installation from the installation disc and reformat the system partition on the server hard disk to install the Windows EBS software.

To cancel the Installation Wizard, click Cancel , click Yes in the confirmation dialog box, and then turn off the server. To restart the installation later, insert the correct installation disc into the server, and then start the server from the DVD drive. Follow the instructions to create and select the partition where you want to install the operating system. After the operating system is installed, the Welcome page of the Windows EBS Installation Wizard appears.

Note

Instead of canceling the Installation Wizard, you can turn off the server while the Installation Wizard is running. When you restart the server from the hard disk after doing this, the Windows EBS Installation Wizard restarts at the Welcome page. You are not required first to reformat your hard disk and reinstall Windows Server 2008. Interrupting the wizard by turning off the server is not recommended while the wizard is installing the software components.

Where to Find More Information For more information about Windows EBS, see the following:

• Product documentation at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=77645)

• Windows EBS newsgroups at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=108914)

Documents

Windows Essential Business Server Installation Guide