Windows Server 2003…secure at last?

We tested Windows Server 2003, which officially launches this week, and found that Microsoft's new server operating system delivers better performance, tighter security and easier management than its predecessor. Windows 2003 also provides increased support for managing storage-area networks and makes it easier for customers to build Web services. This product had been named .Net Server, part of Microsoft's plan to brand all its server products under the .Net Web services umbrella. The name has changed, but Windows 2003 still maintains a strong web services hooks. Services created within the .Net framework can take advantage of network, administration and management features built into Windows 2003. We used Microsoft's VisualStudio.Net tool and plug-ins from third parties such as Eiffel's ENVision to build a simple Active Server pages web application that monitored growth in a series of subfolders. Via a Web page, we watched the subfolder grow, change colours and flash when growth reached a predefined "critical" stage. The application easily could be distributed by policy to other servers, then communicate with a ‘console page’ if desired. Such applications were easily distributed and posted so they could be shared, used and, if desired, modified by others. Microsoft has added User Description Discovery and Integration support to Active Directory. UDDI is a registry and discovery/proxy service for applications that helps the operating system locate resources on local and remote servers. We tested support for this web services feature, and it worked well. Web performance boost Microsoft says it has rewritten most of the Internet Information Server code that comes bundled with Windows 2003. Our tests showed that effort has produced dramatic results. We used Spirent Communications' WebAvalanche to test the total number of connections per second, maximum number of transactions per second, and maximum number of open connections per second on Windows Advanced Server 2000 and Windows 2003 Enterprise Edition. We ran them on three different levels of server - configured at the defaults without optimizing either platform. The biggest performance gains came in TCP performance. In our maximum TCP connection test, which measures the capacity of the server to respond or TCP session requests, the numbers for Win 2003 came in almost 900 percent higher than those of Win 2000. In a more stringent transactional test, in which we tested static Web page transaction cycles - downloading 40 text pages per transaction with pauses - Win 2003 showed improvements in performance ranging from 161 percent to 287 percent depending on which hardware server we used to conduct the test. In an Intel IOMeter test between Win 2000 and Win 2003 running on the same hardware, we saw a 31 percent increase in number of I/Os per second on Win 2003 - with no optimizations on either platform. Moving on to management Microsoft has added a wizard that controls the Microsoft Management Console (MMC) called Manage Your Server. This application serves as a gateway to various server subsystems, including DNS, Dynamic Host Configuration Protocol, print, mail, VPNs, and Web and terminal services. It was possible to build this kind of tool from MMC component views in the past, but the Manage Your Server application is convenient by contrast. If you're unfamiliar with the various components required to make the Active Directory and other services connect cohesively, you will appreciate this centralization of services options. While Windows NT's multimaster domain model was full of problems, it has largely stabilized, and runs on machines often purchased years ago. This means that users have moved more slowly to Active Directory and Win 2000 than Microsoft would have preferred. With the addition of Microsoft Metadirectory Services (MMS), implementing a new Active Directory scheme and migrating existing directories to a Microsoft world has been simplified. Gone are rigid directory forests with impenetrable trust relationships between them, replaced by more easily managed and inter-related directory forests and trees. MMS - which originates in part through metadirectory smarts that Microsoft picked up when it acquired VIA Software and its metadirectory product, ZoomIt - visually connects and synchronizes a number of directory services. This gives administrators a single point to change user profiles and set security parameters. MMS supports Lotus Notes/Domino, NetWare eDirectory, iPlanet and flat-file directory databases. We had no problems when we tested MMS with Active Directory; an importation of Novell's eDirectory with a 500-user testing directory database; and SQL Server 2000 database. Group policies, a feature Microsoft pushed with Win 2000 and Active Directory that has been difficult for many administrators to embrace, has an important change: the ability for administrators to view and understand cumulative effects of user policy controls. We found this new utility, called Group Resultant Set of Policy (GRSP), removed much of the mystery of policy application and should aid policy administration, especially accessibility and security. For example, giving a user membership to multiple groups often results in conflicting accessibility and usage policies. The GRSP utility delivers a composite view of policy interactions, so conflicts can be sorted out. It also was easy to graphically modify Active Directory schemas, as well as import, export and alter records through any Active Directory-based servers in the lab network with the MMS tools. The storage story It's easier to manage a storage-area network (SAN) with Win 2003 than prior editions. One console can be used to visually inspect, partition, share and place access boundaries on SAN resources - especially disk volumes. Microsoft now offers Virtual Disk Services, a set of APIs that drives a revamped replication service called Volume Shadow Service (VSS). In our tests, we easily connected Win2003 to a JBOD SAN. We tested the VSS, which when combined with Automated System Recovery, let us restore our primary server's media in several simulated crashes - caused by yanking live boot media. Crash recovery for a 40GB server boot drive took 14 minutes from start to finish, which is as fast or faster than other bare-metal restoration third-party applications that we've used with Win 2000. We also configured a boot-on-SAN to let the server boot from the JBOD array. This lets organizations place huge amounts of storage against high-density, 1U Win 2003 Servers. Microsoft's Backup program also has been changed to let volumes with open files be backed up; they were skipped in prior editions, so users had to procure third-party back-up tools and applications to do the simple yet mandatory job of server backup. Security Microsoft's security enhancements for Win 2003 lie in removing basic privileges that existed in previous versions. For example, Microsoft has made it tougher to get root hacks by lowering the operating level of service applications. By changing many classes of services that are part of a typical start - including IIS - to user roles instead of root user roles, these applications cannot exploit a server by having native root privileges. Many services that formerly were started automatically and by default, such as web and FTP services, now are defaulted to off, so they don't have to be turned off to be unavailable for surreptitious hacking. Microsoft also bundles the Internet Authentication Server (IAS), which serves as a Remote Access Dial-In User Service server for proxy authentication into the operating system. IAS enables 802.1x authentication, which is popular in wireless network infrastructures. This version of the server operating system has much more to warm up to than 2000 Advanced Server, and lives gracefully in an ever-more heterogeneous network world.

What are your views on this subject? Use the form below to post a comment on this article up to 500 characters.


Characters remaining: 500

Related Operating Systems news

Oracle given breathing space by EC

Regulator gives an extra week to prepare Sun takeover arguments.

Microsoft, Linux rivals mock Google Chrome OS

Operating system crippled by reliance on web access

Google releases Chrome OS to waiting world

Stresses speed and security of operating system.

NSA helped with work on Windows 7 security

Privacy organisations concerned about spooks' involvement.

Related Operating Systems reviews

Jolicloud OS

Moblin 2.0 review

Ubuntu Netbook Remix



Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Database security: Preventing enterprise data leaks at the source

IDC discusses the growing internal threats to business information, the impact of government regulations on the protection of data, and how enterprises must adopt database security best practices...

Download Whitepaper

Service-oriented security

SOA has become an integral part of enterprise software by providing a framework to efficiently develop software as services that is easily sharable, reusable, and integrated. No where is the need more apparent than in the Identity Management space. Welcome to the age of Service-Oriented Security (SOS).

Download Whitepaper

Data protection prospective vendor checklist

Organisations need a way to map business needs against all these challenges in procuring a technical solution. To help, SANS has developed the following Prospective Vendor Checklist.

Download Whitepaper

Unlock the power of the mainframe

This whitepaper presents the notion of CICS as an integration hub based on a component-based, service-oriented architecture supporting Web services. Highlights will review the challenges and contrasted support for Web services natively in CICS.

Download Whitepaper

Techworld UK - Technology - Business

COLT White Paper

Are all VoIP services the same?

Questions to ask your service provider to ensure you get the VoIP service you need
With careful choice of partner, your business can have all the advantages of VoIP access - reduced costs, flexibility and simplicity - without the drawbacks.
This white paper is your guide to ensure you get right the VoIP service and details the pitfalls which businesses would do well to avoid.

Download white paper
BMC

Ride the express lane in the journey to speed ITIL adoption

Explore the challenges in making the journey to ITIL and the criteria for selecting consulting services
By following ITIL practices, your IT organisation will become more closely integrated with the business. We recommend making the journey to ITIL in a sequence of six incremental steps, the phases of which are driven through execution of a strategic transformational roadmap.

Download white paper

Webcast: IT Financial Management: Cost Optimisation for Efficiency and Agility.
On Demand Webcast
Join this webcast to learn about the techniques and technologies that can help you prove the value of IT to the business by understanding the true cost of today's IT services and those that will be necessary to deliver future success.

Register Today

Site Map

IDG Network

* *