Windows Small Business Server 2011 Standard Product Features

Module 4: User and Client Computer Management, Remote Access Name Title

Lesson 1

MANAGING USERS

User Tasks General User Tasks • Add new account • Add multiple accounts • Change user roles for accounts • Change password policies • Redirect folders • Help Specific User Tasks • Edit user properties • Remove user account • Reset user password • Change group membership • Disable user account • Add new user role based on this user • Print a Getting Started page for user

Modifying User Account Properties

Properties • Remote access permissions • VPN permissions • E-mail information and mailbox quotas • Access to Remote Web Access • Access to Outlook Web Access • Computer access • Access to internal shared folders • Group membership

User Roles and Groups User Roles • Add a new role • Edit role properties • Remove role Groups • Add new group • Edit group properties • Change group membership • Remove group

Best Practice

Security best practice for managing user accounts: • Implement strong passwords • Change password policies • Educate users • Do not use the administrator account for daily work

Lesson 2

DEPLOYING AND MANAGING CLIENT COMPUTERS

Managing with the Windows SBS Console Network Page Computers Devices Connectivity

Pre-deployment Administrative Tasks

Did you check applications for compatibility?

Do you have the latest BIOS?

Drivers up-to-date?

Latest service packs and security updates applied?

Network connectivity configured properly?

Local admin password set and documented?

Connecting Client Computers

http://connect • From Internet Explorer address bar Connect Computer Wizard • From portable media (USB) User can join the client computer • Does not require administrative privileges

Connect Client Computer Wizard

Launch Client Computer Wizard Set up for yourself Set up for others Enter username Enter password Move profile data Runs Client Advisor utility Enter admin name Enter admin password Verify computer name Assign user Move profile data Select user role Restarts computer, joins to the SBS domain

Managing Client Computers

Computer Properties • General settings • Administer user access to the client • Configure updates

Managing Client Computers

Offer remote assistance

Lesson 3

MANAGING AND USING SERVER SHARED FOLDERS

Managing with the Windows SBS Console Shared Folders and Web Sites Page Shared Folders Web Sites

Redirecting User’s Folders

Applies GPO to redirect Redirect folder options: • Desktop • Documents • Start Menu 2GB default storage quota Enables Previous Client Version Enables Offline Files

Using Shared Folders

Users access data stored on the SBS server using network shared folders • Windows Search Service allows users to quickly find files The Company folder is created by default Administrators use the Dashboard to create additional shared folders Access is controlled using simplified permissions: • Full access (Read/Write) • Read only • No access Shared folders support Shadow Copies • Users can use Previous Versions tab in Windows Explorer to recover accidently deleted or overwritten files

Lesson 4

CONFIGURING AND USING REMOTE WEB ACCESS

Remote Web Access

RWA Features • E-mail, Calendars, Contacts via Outlook Web Access • Intranet portal (Companyweb) • Computer desktops (Admins can connect to the SBS server) • Shared folders • Single Sign-On experience • Self-service password change

Customizing Remote Web Access

Customizable features: • Remote Web Access user access • Remote Web Access sign-in page • Remote Web Access home page • Check e-mail • Connect to computer • Internal Web site (SharePoint) • Change password • Help • Organizational links • Administration links

Remote Web Access Requirements

Prerequisites to access RWA • Member of Remote Web Access users • RDP client software 6.0 or later • Router ports 443 and 987 must be open and forwarded to SBS server • optionally port 80 for redirection to port 443 • Ports 443 and 987 must be open on the SBS server • optionally port 80 for redirection to port 443 • Browser must accept cookies

Request & Install a Third-party Certificate Windows SBS 2011 creates a self-issued certificate that can be used to established secure remote connections • Connected client computer have certificate installed automatically • Remote client computers must install certificate manually • PDAs/smart phones must install this certificate Certificates generated by third-party providers are easier to implement and manage • Nothing to install on client devices • Have become very inexpensive

Configuring Mobile Devices

What is Exchange ActiveSync? (EAS) Mobile devices supported • Microsoft ® Windows Mobile ® Pack) • Windows Mobile ® 5.0 (Messaging & Security Feature 6.x and Above • Any device that supports Exchange ActiveSync Exchange ActiveSync features • Direct Push • Device Security policy enforcement • Remote device wipe

Resources

 Product Page http://www.microsoft.com/sbs  Official Blog http://blogs.technet.com/sbs  Facebook Page http://www.facebook.com/windowssbs  Microsoft Partner Network http://partner.microsoft.com/sbs2011  OEM Partner Center (for System Builders) https://www.microsoft.com/oem

Questions

?

?

© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows 7 and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.