Sneak Peek at Windows Server 2008
stinkymountain writes to tell us that NetworkWorld got their hands on Microsoft's latest addition to the server OS market and had a chance to poke around inside Windows Server 2008. It seems that the new release is a vast improvement over older versions in both security and performance but still lacking in several key areas. "There's even a minimalist installation called Windows Server Core that can run various server roles (such as DNS, DHCP, Active Directory components) but not applications (like SQL Server or IIS dynamic pages). It's otherwise a scripted host system for headless operations. There's no GUI front end to a Windows Server Core box, but it is managed by a command line interface (CLI), scripts, remotely via System Manager or other management applications that support Windows Management Instrumentation (WMI), or by Remote Terminal Services. It's also a potential resource-slimmed substrate for Hyper-V and virtualization architectures."
Do you think Windows Server Core will run on embedded hardware? That seems like the best place for something like this.
These are all great ideas but I would've liked to have seen them a decade or more ago.
Even so, better late than never.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
so you add or remove / trun it on or off at any time with out havening to reinstall widnows server.
anybody know?
I thought people who prefer Windows tended to like command lines,which would explain they preference in OS and why Linux is so often lambasted as being geeky.
"Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
Oh wait, too late.
Um... how about "insightful" instead???
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
well, I guess imitation is the best form of flattery
Google's Super Secret Search Algorithm: SELECT @search_results FROM internet WHERE @search_results = 'good'
(yes, I know that some Windows admins can use a CLI for nearly anything that'll run on one, but I'm almost willing to wager that the majority do not).
Quo usque tandem abutere, Nimbus, patientia nostra?
so it's like linux 10 years ago? except not as good? and more money?
I would have got a first post, but it BSODed on me.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
All while being naked to the world.
I don't know where you work, but at my job I don't have that nudity clause. In fact I'm pretty sure if I turned up to work naked I'd be fired. That's okay though because I'd rather quit than be around some of my coworkers naked.
These posts express my own personal views, not those of my employer
And if I upgrade to WinServer 08, my wish will be fulfilled!
-- Tigger warning: This post may contain tiggers! --
Running a server, especially a web server, is THE most difficult system administration task there is.
How about being the sysadmin for a nuclear power plant? For a supercomputer where you have to provide shell access to a bunch of programmers? Yeesh, a web server is a trivially simple sysadmin task these days.
Someone should let Bill know about this.
and this: Gates predicts fall of the keyboardfrom: Gates: Keyboard use will decline
It must have been something you assimilated. . . .
The number of people who successfully ran outward-facing Solaris servers for any number of years would disagree with that.
Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
You know that WMI they referenced? Yeah, it's so you can manage all kinds of minutia through a GUI. The fact that you don't have to have a local GUI is irrelevant. Basically, you fire up the image, and install it more as an appliance and manage it remotely. Just like windows has been doing for a long time now. And pretty much every other server OS incidentally. That a local GUI is being left out changes nothing in how they're managed. But hey, you've successfully whored karma on slashdot. Your prize is continued complacency with your virginity. Congratulations.
What do you morons think, that every person managing windows servers is some mathlete reject in cross trainers running from box to box, loging on local to reboot?
But I must say it seems you put the bar quite high!
Beware: In C++, your friends can see your privates!
I'm sorry but it's too late. I stopped using MS Server just as 2003 was released. W2k was a fine OS for small and local LAN admin, but by that time I was very fluent with Debian.
My needs grew, as did the # of boxes that I needed to support & secure. The ease of remote CLI via SSH + painfully slow 14.4 access damned MS's GUI's to the gutter.
I started with DOSv5 and am not afraid of the CLI, but there was too much stuff that w2k needed a mouse & GUI for.
Microsoft; good for you for finally listening, it's a shame that it's too little too late.
"The price good men pay for indifference to public affairs is to be ruled by evil men." ~Plato (427-347 BC)
They're really pushing the command-line thing for all their products. We got a demo of Exchange 2007 and not everything is configurable from within the GUI. Where it is, it gives you the PowerShell command at the bottom.
The worst part for me is that they're reducing support for a lot of their "old" API and everything has to be rewritten using command line tools. Essentially what I'm doing is making pretty web interfaces for something that should be part of their own product. Madness!
So there will be a cli only TS? What about just including sshd?
---- Booth was a patriot ----
Lucky for you then, huh? ;)
Quo usque tandem abutere, Nimbus, patientia nostra?
If you don't have the source, you cannot know it--and I don't give a damn how wonderful your knowledge base is. MS's knowledge base IS good, and it's the standard response I get to this from Windows zealots. But they remain blind to the fact...that they are blind, ultimately, as you are forbidden from truly understanding your server software.
Considering I know a great many successful web server admins (using a wide variety of technologies) and none of them have ever gone mucking about in the source code, that's bullshit.
It doesn't take a programmer to be a good admin.
Stripped down version, command line only.... Sounds like...
"Those who don't understand UNIX are condemned to reinvent it, poorly." - Henry Spencer
Give them another 5 - 10 years, and maybe, just maybe, they'll get there.
Get your own free personal location tracker
Most people seem to miss the fact that it's not JUST a CLI, there are also a whole boatload of client GUI utilities that go with it, that you run on your workstation to manage the server. That's something that Linux has been largely missing (not counting stuff like Webmin, which isn't quite the same thing or remote X)
For example, for a Server Core Active Directory Role, you can administer it from the standard AD Users and Computers applet from any client.
If you need web hosting, you could do worse than here
They *insist* on using non-standard stuff, just to piss off the world, while *every* other prominent OS has at its core a bourne compliant shell.
XML is like violence. If it doesn't solve the problem, use more.
I think what he was getting at is, with the source code available, odds are better that independent eyes have come across a particular convoluted problem, and has found the solution by studying the code as a last resort... giving you the solution in far less time than it would otherwise take by trying to crawl into the heads of Microsoft's documentation writers.
It's a variation (and IMHO an important one) of the "many eyes" concept for securing code.
Quo usque tandem abutere, Nimbus, patientia nostra?
Windows core server sounds a lot like Unix, only without the 25+ year history and renowned stability record... why did we need this again? /supposed to be funny, but headache causing tumors in funny region
stuff |
Isn't Windows a misnomer for an OS without a GUI?
You *do* know that Microsoft existed before Windows, right? And that Windows 1.0 wasn't graphical, at that, right?
I remember having plenty of fun with DOS. I also remember having plenty of fun with Apple IIe's. And as far as I know, both of those predate Linux, although I suppose BSD predates all of the above by considerable margins.
is something like core server with cheaper licensing. One area where linux kills windows right now are on clusters, where you have numerous relatively cheap boxes doing lots of raw computation.
Using windows for this you get a lot of overhead both in terms of cost, wasted HD space, memory, and processor usage on software and services that are irrelevant to a headless cluster node. Windows would be a lot more compelling for this space if they offered some kind of really cheap volume license for a stripped down windows that came utilities for managing a cluster of them. Some kind of logarithmic pricing model for clusters would be nice and make them a lot more competitive.
Of course I'm sure a lot of Linux enthusiasts would like to see Microsoft continue to price themselves out of the market. Personally, I think some more serious competition from windows on this front would be a good thing and spawn more innovation in the distributed computing space.
Another turn of Bob Barker's The Price is Right Wheel o Windows is a waste of effort unless it leaps ahead into outerspace in relation to the current feature set.
It has to run virtualization out of the box. It has to allow for per process and per CPU throttling. It has to run real time back up, support dedicated inline encryption and security subsystems. It has to support 16x more RAM and an order of magnitude larger AD spaces. It has to support virtualized patches, a journalled file system, a file system that spans physical volumes.
THAT's what solid improvement looks like, not fixing 70% of what they left out or broke before and calling that a new version.
I tried to look at the web page about Windows Server 2008. But everything was CORRUPTED!
dnuof eruc rof aixelsid
I'm not sure, he was after all talking about me "understanding" my server software through the source.
Beware: In C++, your friends can see your privates!
I've been playing with this at work, and for a "trimmed down CLI" version of the OS I find it telling that it uses just 60 mb of memory after booting than the GUI version and it still requires some 3.5 gb of hard drive space (this isn't precise, I'm not at work right now). And the weirdest thing about it is that it's not just command line. It actually loads, to a point, the windows GUI. There's no explorer, but the command line box it gives you is a window. You can move it with the mouse. You can open notepad, and it opens in a window. Regedit is still there. Just to see if I could, I installed Firefox. They leave out a few handy odds and ends like Explorer.exe so you don't get your usual file manager, but if they're serious about going with a real command line, this ain't it.
Maybe it does have it's place. If you just want to run basic DNS or some of the 10 or so other things it's intended to do, then at least it's going to do that for you with slightly less memory/space requirements and without quite so much other stuff running that leaves it so open to other vulnerabilities. But I still find it kind of silly, a good Sys. Admin can lock down the regular GUI version just fine and resource savings are so minimal as to be nonexistent.
But that's just my couple of cents...
Like Windows Server 2003, only now with a sexy aero theme!
Do you know of a remote code vulnerability in the default install of IIS6? I know of one in the default install and a handful with ASP turned on. Since IIS6 is 5 years old I would say that's pretty damn good, even having the source to Apache isn't going to get you much better security than that since it's programmed by humans and is a non-trivial application.
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
I'd feel better about the GUI design of Server 2008 if the "shutdown" option wasn't the default on the logout portion of the start menu. I can't tell you how many times I've shut down our test 2008 server in the last week, instead of logging out. Sigh.
Marco...that was Portugese.
XML is such a terse language, really - ignore what some people say, but it's not meant for humans.
Sure, you can read it but writing it using a normal text editor is a boring, error-prone job that will drive any admin nuts if they are forced to do enough of it.
Why not be _really_ innovative and provide a shell to manipulate XML files based on the schema.
It took a Linux lab to figure out how to make MS$ crappy servers better. Now they can pollute the world more affectively with their proprietary shit.
I said "knowable", not "I know it". :-)
I don't! But I know that I can, and occasionally I do indeed go grubbing through the source when I'm looking for explanations of it's behavoir.
expandfairuse.org
Where is a suddenoutbreakofcommonsense tag when you need one. Seriously, CLI is the best way to go esp when you dont have a very speedy connection available when doing remote admin.
I want to run far far away from Vista on my laptop and I wonder if the I/O sucks alot less.
Of course I may still have driver issues but since I can't downgrade to XP I am looking at perhaps upgrading to it.
http://saveie6.com/
I'm surprised that no one has mentioned the lack of Services for Macintosh on Server 2008. http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1886904&SiteID=17 Might as well run Linux or OSX Server if Windows Server is no longer going to "attempt" to offer cross platform support for clients. I'm aware the SFM client used a ancient version of AFP. There used to be the misguided hope Microsoft would update it. Surprisingly they haven't killed Services for NFS. http://technet2.microsoft.com/windowsserver2008/en/library/173273b1-8734-470b-b20c-9496419412501033.mspx?mfr=true Could killing SFM be construed as anticompetitive behavior in the face of increasing Mac marketshare? I think so.
*FINALLY* ... Windows servers are starting to make some friggin sense. With a headless install and a strong emphasis on automation / scriptability. This is great, especially for people like me who have some WMI experience, as well as lots of .NET. I also have a bit of Powershell experience from when I was coding with .NET.
... I just can't remotely connect to the friggin thing!!!
;-)
The only thing I'm struggling with is howto get SSH up and running, so I an actually use the server. The installation went fine
I've tried using get-command / help in Powershell and googling everywhere.
apt-get install openssh-server just doesn't seem to work!?!?
I can't even figure out howto search packages. Where's apt/yum/etc? I figure, cause everything's binaries (no source code), that there's a binary package management system, rather than portages. I just cant seem to figure it out.
Help! Code examples???
TIA!
AppleTalk services are gone. Vista gets first class status, otherwise, Macs work, even the remote data client works (with screen size limitations). The rest is there. You expected perhaps, that all that talk about SMB2 was just joshing? When the SAMBA team gets the code info that Microsoft gave it a couple of months ago (search samba and microsoft for the correct hit) and churns it into SAMBA 4, then the rest of the world will be roughly as fast-and-featured as Vista clients. Even XP goes slower because of its older stacks and SMB1. They had to do something to give Vista a boost in sales, I guess.
---- Teach Peace. It's Cheaper Than War.
http://www.microsoft.com/canada/heroeshappenhere/register/default.mspx a free copy of the server is available at Microsoft introductory events across the country.
I do have to say that I'm amused at the idea of a GUI-less Windows, considering that Windows began as nothing but a GUI, which ran on top of DOS. After all the effort Microsoft went through to make the GUI mandatory and supposedly integral to the OS itself, now they're talking about uncoupling it. MS-DOS 8.0 anyone?
http://alternatives.rzero.com/
I don't miss Appletalk. I don't want Appletalk. Appletalk has been dead for a long time. AFP over TCP on the other hand would be nice as SMB shares currently don't preserve Mac specific file info. I have no faith in Microsoft fully disclosing what the Samba team requires to give Linux and Mac clients feature parity. It is only under continued EU pressure they have given what they have so far. Regardless, Apple has committed to making Samba as good as possible on the Macintosh. This may very well be the solution. It doesn't make it the best solution. You also have to like Microsoft making the Samba team and Apple's engineers do all the heavy lifting. Talk about being at a competitive disadvantage.
I think you may have missed the news: Microsoft already agreed to disclose exactly that: http://news.zdnet.co.uk/software/0,1000000121,39291688,00.htm
So don't use a normal text editor. Use Notepad++, NetBeans, or Kdevelop. If you do a fair amount of work in these, any of them will make the job a bit easier.
I have no problem with XML files as configuration sources. They're straightforward, everyone can understand them, and the format has some error checking features. They're also universally usable in a straightforward manner by code. People can use them, code can use them, what's not to like?
I was taught to respect my elders. The trouble is, it's getting harder and harder to find some.
Its always a problem with the registry. All-freaking-ways. If a program x isn't behaving its 99% of the time because of the registry. I worked too long doing tech support to know that the registry is anything but horrid. I'd list its many faults here, but it would make me relive a time in my life I'd rather forget. In brief I'd just say that having small config files in each apps directory is a lot easier to maintain than one giant one, that tries to solve all problems but does none well. I'm not a violent man by nature, but If I were ever to meet anyone connected with the creating a registry for windows, well, I'd like to introduce his or her face to a cream pie of their least favorite variety.
Well.. maybe. Or Maybe not. But Definitely not sort of.
Comment removed based on user account deletion
Sure, you can run IIS, but whats the point of that when you cant use ASP.NET ? If you want a basic file/web-server, why dont go for a free operating system? Setting up a web/file-based HTTP server on *NIX aint that hard, and you save a bundle on license fee. Just me two cents.
behavoir - is this some french only Apache mod?
Who modded him troll?!? It is easier to copy-paste solution than follow vague graphical solution.
If someone asks "how do I change may IP address provider from dhcp to static on my linux box?" How do you answer?
First of all, you have no idea what windows manager does this person uses, thus if you live in KDE your instructions will be worth crap on GNOME environment.
If you do know the window manager, you do not know the localization the user uses. Whenever someone gives me graphical instructions, I have to translate them into English and hope I got it right (Yes, I use localized linux).
Not all CLI based advices works on all distributions, but this is as close as it can get.
Je fume. Tu fumes. Nous fûmes!
'nuff said
Let's clear the air on this one now...
-You can't recompile the kernel with functionality you'll never use (i.e boot of a floppy for instance).
-You can't strip out executables you'll likely never need (wmp.exe for instance).
-You have to wait until Microsoft approve patches in order to stay upto-date.
-You can't specialise and fork projects to run on Windows Server (like IIS)
But, having said that:
-Windows Server 2008 contains a bucket load of functionality Linux doesn't (Active Directory, SharePoint services, etc)
-Hard-disc space is cheap (is about the best argument for this counter-point - a weak one I know)
-Server's if locked down correctly should be patched that ofen; plus important patches like Service Patches come tested to high-heaven
-IIS7 is highly modular; there's very very little you can't customise/disable/write-your-own. IIS7 core is a proverbial house-brick capable of send HTTP OK only responses all stripped down.
throw new NoSignatureException();
Er, no. It's Microsoft, (re)inventor of the gui. You will have your tickbox based front end for editing the configs with. It's just that those configs you're editing when you tick a box now reside in an xml file that is easily accessed/edited by other, possibly non-native applications instead of living in a proprietary formatted 'registry'.
I wish people would stop jumping to conclusions every chance they get. If you need to jump, surely there are cliffs nearby instead?
Yeh but... you can't run IIS7 on Server Core. Seems like very selective modularity there.
And you say that is a good thing?! That goes to reinforce what people say about MCSEs. Anyway, vunerabilities don't just pop into existence when software gets older. It is the other way around, their number should go down with time.
Rethinking email
So they have gone for a more modular way of operating and even abstracted the GUI out of the core OS functionality allowing a "headless" server. That's good!
.....
Next you know, they'll be letting people poke about inside the Source Code
Je fume. Tu fumes. Nous fûmes!
MS is just trying to get as far away from Unix-like stuff so that IF their users wake up to Linux the users would want to stay with what they know.
IE: Only Windows has a registry for configuration. (I'm excluding NetWare 5+ on purpose , BTW)
It's not because it's better. It's to make windows applications harder to leave the Windows world and take their users with them. In fact, if your application still uses INI files you can't get Windows XP certification (never mind Vista...)
So in the end, it's all about lock-in. (Lock-in = $)
Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
You don't have to know the entire codebase personally. It's enough to know that other people, independent of the original vendor and with nothing to lose irrespective of how much anything they might say could embarrass said vendor, also have access to it.
Je fume. Tu fumes. Nous fûmes!
Nano has Syntax Highlighting, Auto-indentation, multiple-buffers, regex search and replace.
Combined with screen it's quite the IDE, IMHO.
Of course for you GUI-is-a-must people. Medit (mooedit) is quite nice. GTK2 app with builtin console and all the other stand features you expect from a code editor.
Skiffy is Spiffy, but Ort is tort.
I agree - their readable and writable by humans, but often very verbose, and if dealing with a large number of different xml files from different projects (e.g. Spring, EJB, app server configs and other random Java stuff) then its hard to remember all the different options and their expectations.
:)
:)
What I was proposing is a commandline editor similar to 'ed' but specifically for XML files with auto-hinting and validation based on the schema/dtd files.
In the end you'd probably have something quite similar to the Cisco IOS console, but it would work on any xml file, and more significantly make my life easier
Take a look at programs like OxygenXML - specialist XML editors, then think about how these could be applied to commandline editing
Unix and other server OSes had them from early on if not day one.
Why Windows NT Server didn't is beyond me. Sure, it had telnetd, "net admin," and "terminal services" but it didn't have the pick-and-choose-your-components that other OSes had from infancy.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
What an improvement! UNIX started out as a CLI environment that later gained all kinds of GUI interfaces, notably X Window System and more recently the Mac OS X interface. Windows is sort of going the other way around, having started as a GUI environment that is now going CLI. If we follow this trend, Server 2011 might use a teletype as its interface, Server 2015 will use a punched card system, and Server 2019 will be the ultimate, returning to the days of ENIAC, when computers didn't have stored programs at all and were programmed by running wires. What amazing progress is being made!
Dude, they are all patched, that's in the entire 5 year history of IIS 6.
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
>And you say that is a good thing?! That goes to reinforce what people say about MCSEs.
Oh yeah, I forgot. In the half-decade that IIS6 has been available there's been a handfull of issues that were all patched years ago.
wtf are you smoking dude? WinCE *IS* NT(4). At least the early versions of it were. There have been a lot of versions though:
http://en.wikipedia.org/wiki/Image:Windows_CE_Timeline.png#file
Granted it is stripped down and has some new drives. Copy some NT4 win32 and winCE files to linux and run strings on them and you will see.
In my case, he was referring to Netscape, but he could have just as easily meant Borland, Word Perfect, Ashton Tate, Lotus or a few others....
I've missed nothing. They have agreed to a disclosure. This in no way guarantees they will "fully" disclose everything useful or pertinent. However the EU has done a excellent job of guaranteeing they will provide all the needed info or be heavily fined.
Ok, now that is good.
Rethinking email
Here is news release today saying EC has fined Microsoft over 1 Billion (insert Doctor Evil laugh). http://www.electronista.com/articles/08/02/27/ec.fines.ms.14b/
see volume shadow copy
And do what exactly? Restore the volume shadow? I know that's what Microsoft is selling, but
1. It doesn't "just" work. It's most definitely not some kind of DR solution.
2. We also ran into a nasty issue on our clusters where volume shadow brings the whole cluster down in situations where there's some load. Imagine that, peak traffic and the cluster locks. Both nodes... Poof. I know. You've never heard of that and I'm making it up because there's no one else reporting the issue on the web. I lived it twice too much. Volume shadow service is off.
pretty good fine-grained sercurity system.
Apologizing for a security system that would make Rube Goldberg proud remains an outstanding issue for which there is no fix.
Really? 2TB isn't enough for you?
Nope. Not enough.
Hmm I had never heard anyone complaining about any AD limits
Of which there are many. Too many to have it be the authentication core of a heterogeneous environment.
See NTFS
Now you've made the Baby Jesus cry! The fact that I still have to defrag a server is ridiculous. No one pays much attention to file systems but there are far better ones for server environments.
http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
This is funny, for those of you who can't understand the concept of humor. Please mod it appropriately.
This work is licensed under a Creative Commons Attribution 3.0 Unported License.