That basically boils down to two paragraphs - security and reliability. Write a 
paragraph about each and explain how your organization will benefit. 

Thanks,
Brian Desmond
[email protected]

c - 312.731.3132


-----Original Message-----
From: David Lum [mailto:[email protected]] 
Sent: Tuesday, December 22, 2009 9:41 AM
To: NT System Admin Issues
Subject: 2003 -> 2008 sales pitch, sorta

Here's what I have pulled from MS's website on 2008 Server and pared down. 
Sorry if the cut and paste from Word isn't pretty (looks way better in a Word 
doc). This is actually two doc's merged into one (and yes I know ABE was 
available as an add-in in earlier 
OS's).

How would you guys repackage this to present to less technical management? I'm 
guessing for them it should be just a couple of paragraph's, right?

Server 2008 enhancements over Server 2003

. Fine-Grained password policies 

Provides different password and account lockout policies for different sets of 
users in a domain.

. Read-Only Domain Controllers

A read-only domain controller (RODC) is a new type of domain controller in the 
Windows Server® 2008 operating system.  RODC's have unidirectional 
communication because writeable DC's do not need to pull data from them (and 
thus less network traffic). RODC's can have a local administrator account that 
has no domain privileges (this is called Administrator Role Separation).

. Access-Based Enumeration

Access-based enumeration displays only the files and folders that a user has 
permissions to access. If a user does not have Read (or equivalent) permissions 
for a folder, Windows hides the folder from the user's view

. Self-healing NTFS

Traditionally, the Chkdsk.exe tool was used to fix corruptions of NTFS file 
system volumes on a disk. In the Windows Server® 2008 operating system you can 
now use Self-healing NTFS to protect your entire file system efficiently and 
reliably, without having to be concerned about the details of file system 
technology. The self-healing process is enabled by default.

. Network Access Protection (NAP) 

NAP enforces health requirements by monitoring and assessing the health of 
client computers when they attempt to connect or to communicate on a network. 
If client computers are determined to be noncompliant with health requirements, 
they can be placed on a restricted network that contains resources to assist in 
remediating client systems so that they can become compliant with health 
policies.

. Print Services 

Print Services enables you to share printers on a network and centralize print 
server and network printer management tasks by using the Print Management 
snap-in. Print Management helps you monitor print queues and receive 
notifications when print queues stop processing print jobs. It also enables you 
to migrate print servers and deploy printer connections by using Group Policy. 
You can use Print Management with Group Policy to automatically deploy printer 
connections to users or computers and install the appropriate printer drivers.

------ GPO enhancements -----

. All power options have been Group Policy enabled
. You can centrally restrict devices from being installed on computers in your 
organization. You will now be able to create policy settings to control access 
to devices such as USB drives, CD-RW drives, DVD-RW drives, and other removable 
media
. Ability to assign printers based on location in the organization or a 
geographic location
. Administrators can now delegate to users the ability to install printer 
drivers by using Group Policy
. 

2008 R2 domain controller enhancements over Server 2008

------ Active Directory Domain Services -----

. Active Directory Recycle Bin 

Information technology (IT) professionals can use Active Directory Recycle Bin 
to undo an accidental deletion of an Active Directory object

. Active Directory Best Practices Analyzer

The Active Directory Best Practices Analyzer (BPA) uses Windows PowerShell 
cmdlets to gather run-time data. It analyzes Active Directory settings that can 
cause unexpected behavior. It then makes Active Directory configuration 
recommendations in the context of your deployment

. Managed Service Accounts

Managed Service Accounts provide simple management of service accounts. At the 
Windows Server 2008 R2 domain functional level, this feature provides better 
management of service principal names (SPNs). Managed Service Accounts help 
lower total cost of ownership (TCO) by reducing service outages (for manual 
password resets and related issues). You can run one Managed Service Account 
for each service that is running on a server, without any human intervention 
for password management.

. Offline domain join

You can use offline domain join to join computers to a domain without 
contacting a domain controller over the network. You can join computers to the 
domain when they first start up after an operating system installation. No 
additional restart is necessary to complete the domain join. For example, an 
organization might need to deploy many virtual machines within a datacenter. 
Offline domain join makes it possible for the virtual machines to be joined to 
the domain when they initially start following the operating system 
installation. No additional restart is required to complete the domain join.

------ GPO enhancements -----

. Power Plan preference

You can use Power Plan preference items to configure default sleep and display 
options for managing power consumption for computers, reducing power 
consumption and benefitting the environment. With Power Plan preference items, 
you can let users make changes to those default options. Although you can also 
manage power options by using enforced policy settings, some user roles (such 
as mobile users) might need the flexibility to change those settings on their 
own.


David Lum // SYSTEMS ENGINEER 
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to