I109 TS and Virtualization

Slide2: 

Virtualization Name Lionel CAU Title Senior Consultant Group Infrastructure Services Company SOGETI Switzerland

Agenda: 

Agenda Longhorn Server Terminal Services Terminal Services Remote Programs Terminal Services Gateway Terminal Services Web Access Server Virtualization Hypervisor Virtual Server System Center Virtual Machine Manager Microsoft SoftGrid Application Virtualization A few words about licensing

Terminal Services: 

Terminal Services Central office Roaming user Branch office Home office Centralized Application Access Application Deployment Branch Office Secure Anywhere Access Compliance and Security Enabling Technologies TS Remote Programs$ TS Gateway TS Web Access Designed for low complexity scenarios

TS Remote Programs Overview: 

TS Remote Programs Overview

TS Gateway Overview: 

TS Gateway Overview Eliminates need for VPN TS Gateway and Network Policy Server RDP 6.0 tunneled over HTTPs

TS Gateway Remote Access: 

TS Gateway Remote Access Perimeter Network Internet Corp LAN Terminal Server Hotel External Firewall Internal Firewall Home Business Partner/ Client Site Other RDP Hosts Terminal Server Internet Terminal Services Gateway Server Network Policy Server Active Directory DC Tunnels RDP over RPC/HTTPS

TS Gateway Remote Access: 

TS Gateway Remote Access Perimeter Network Internet Corp LAN Terminal Server Hotel External Firewall Internal Firewall Home Business Partner/ Client Site Other RDP Hosts Terminal Server Internet Terminal Services Gateway Server Network Policy Server Active Directory DC Tunnels RDP over RPC/HTTPS

TS Gateway Remote Access: 

TS Gateway Remote Access Perimeter Network Internet Corp LAN Terminal Server Hotel External Firewall Internal Firewall Home Business Partner/ Client Site Other RDP Hosts Terminal Server Internet Terminal Services Gateway Server Network Policy Server Active Directory DC Tunnels RDP over RPC/HTTPS Strips off RPC/HTTPS

TS Gateway Remote Access: 

TS Gateway Remote Access Perimeter Network Internet Corp LAN Terminal Server Hotel External Firewall Internal Firewall Home Business Partner/ Client Site Other RDP Hosts Terminal Server Internet Terminal Services Gateway Server Network Policy Server Active Directory DC Tunnels RDP over RPC/HTTPS Passes RDP/SSL traffic to TS Strips off RPC/HTTPS

CAPs and RAPs: 

CAPs and RAPs Connection Authorization Policies (CAPs) Allow you to specify users, user groups (and optionally, computer groups) that can access a TS Gateway server Users are granted access to a TS Gateway server only if they meet or exceed the conditions specified in the CAP that contains their group name For example, you might require a user to use a smart card to connect through TS Gateway Resource Authorization Policies (RAPs) Create RAPs to allow access from the TS Gateway server to specific remote computers on the network Instead of creating a resource group manually, you can use a security group defined in Active Directory You create CAPs and RAPs by using TS Gateway Management

TS Web Access Overview: 

TS Web Access Overview Terminal Services Remote Programs available from a Web browser Default Web page or SharePoint Services Active Directory Domain Services

Other TS improvements: 

Other TS improvements PnP device redirection for media players and digital cameras Windows Embedded for Point of Service device redirection Remote Desktop Connection display improvements: Custom display resolutions Monitor spanning Desktop Experience Desktop composition Font smoothing Display data prioritization Single sign-on Microsoft Windows System Resource Manager (WSRM) on "Longhorn" Server allows you to control how CPU and memory resources are allocated to applications, services, and processes on the computer

Slide14: 

Longhorn Server TS TS Remote Programs TS Gateway TS Web Access + Microsoft SoftGrid Application Virtualization

Server Virtualization : 

Microsoft Virtual Server 2005 R2 Virtual Server MOM Management Pack Windows Server “Longhorn” System Center Virtual Machine Manager Virtual Server 2005 R2 SP1 Virtual Server MOM Management Pack R2 Windows Server virtualization Beta System Center: Virtual Machine Manager Beta Microsoft Virtual Server 2005 R2 SP1 Beta Server Virtualization Windows Server Virtualization within 6 months Of Windows Server “Longhorn”

Windows Server Virtualization: 

Windows Server Virtualization Virtualization Platform and Management

Virtual Server vs. WSV: 

Virtual Server vs. WSV

Virtual Server R2 SP1 Beta 2 (1/2): 

Virtual Server R2 SP1 Beta 2 (1/2) Hardware-assisted virtualization Support for Intel Virtualization Technology AMD Virtualization Technology (AVT) compatibility *(x64-hotfix) By default, hardware assisted virtualization is enabled if present Support for Intel Virtualization Technology and/or AMD Virtualization Technology can also be specifically enabled or disabled on a per virtual machine basis Virtual Server host clustering step-by-step Guide The host clustering whitepaper is now included with Virtual Server Installed at: ~:\Program Files\Microsoft Virtual Server\Host Clustering. The default size for dynamically expanding virtual hard disks has been changed from 16 GB to 127 GB. Virtual SCSI fix for Linux guests Some users encountered an issue when trying to install certain Linux distributions inside a virtual machine on the emulated SCSI bus. The issue occurred most often with the Linux 2.6.x kernel. This issue has been fixed in R2 SP1 Beta 1

Virtual Server R2 SP1 Beta 2 (2/2): 

Virtual Server R2 SP1 Beta 2 (2/2) Volume Shadow Service Support improved support for backup and disaster recovery. Instead of scheduling downtime for backing up each virtual machine individually, customers will now be able to take snapshot backups of physical machines that will in turn take snapshots of all the virtual machines on that physical host. Offline VHD Mounting view and manipulate the files in a VHD from the host OS. This enables administrators to easily deploy scripts and perform virus scans across VHDs without having to start each virtual machine. Active Directory integration and management features Virtual Server service now publishes its binding information in Active Directory as a Service Connection Point (SCP) object. System administrators can use this information to easily locate all instances of the Virtual Server service within an Active Directory forest.

System Center Virtual Machine Manager : 

System Center Virtual Machine Manager One Click switching between physical and virtual views VM State Transition, migration and checkpoints Complete details of both physical and virtual layers Customizable grouping of physical and virtual machines into resource pools

Virtual Machine Manager: 

Public Beta 1, TAP: Core features with limited documentation RTM: Full product, highest quality with complete documentation Q3 2006 Public Beta 2: Enterprise features, core documentation Virtual Machine Manager

VMM: Feature Summary (V1): 

VMM: Feature Summary (V1)

Centralized Management of Virtual and Physical Systems: 

Centralized Management of Virtual and Physical Systems ‘Host Groups’ are key to organization Container for physical assets or systems Derived from active directory or built manually by administrator Host Groups organized into completely customizable tree structure Enables resource pooling that drives hardware utilization Unit of policy application for Self-Service Portal

Consolidation: 

Consolidation Identification of consolidation candidates Integrated Operations Manager consolidation candidate report Consideration of peak vs. average performance Configurable report parameters Physical to Virtual Migration Not VSMT based, new VSS based P2V Support for Windows 2000 Server, Windows 2003 Server, optimized for Windows 2003 and above Optimized network transport using BITS No need to boot into PXE (W2K3 +) Wizard based or scripted via Powershell

Placement of Virtual Machines: 

Placement of Virtual Machines Capacity planning everywhere Placement of virtual machines onto physical hardware is the key in maximizing the utilization from physical assets Capacity considerations now required for every workload Placement in SC VMM Executed upon every placement of virtual machine: P2V, migration, template deployment Three inputs into rating scheme: hard and two types of soft Hard Requirements – Minimum CPU, RAM, Disk and Network resources that are not already committed to another VM Soft Requirements (Historical Performance) – For physical workloads this would be derived from MOM, for virtual workload this is derived from SC VMM data store Soft Requirements (Current Host Performance) – The actual resource consumption of the virtualization hosts

Offline LibraryOrganizing the Virtual Data Center: 

Offline Library Organizing the Virtual Data Center Templates Captures both software and virtual hardware settings to standardize deployment of new virtual machines Implemented as “sysprepped.vhd” with associated hardware configuration Virtual Machines Enables controlled way to store and organize non-running virtual machines Enabler to scheduled VM deployment and tear down Disks, ISO and Scripts Distributed architecture Multiple library servers enable images to be distributed throughout organization Configuration of Distributed File System Namespace and Replication with library servers provides method for standard image distribution

Self-Service Portal: 

Self-Service Portal Web based interface Significant Controls for Managed Deployment End Users only able to engage with their VMs Limited set of templates offered to each user for deployment Quotas set on resources by individual Optionally deployed Stale machines “retired” after lease expiration

Slide28: 

VS R2 SP1 B2 + SC VMM B1

SoftGrid : 3 Key Components: 

SoftGrid : 3 Key Components

MVS 2005 R2 MPState view : 

MVS 2005 R2 MP State view

MVS 2005 R2 MPDiagram view: 

MVS 2005 R2 MP Diagram view

MVS 2005 R2 MPVirtualization Candidates: 

MVS 2005 R2 MP Virtualization Candidates

A few words about licensing: 

A few words about licensing Windows Server 2003 R2 Enterprise Edition Includes 4 virtual instances Windows Server 2003 R2 Datacenter Edition Includes unlimited virtual instances Note: Requires a Windows Server Datacenter Terminal Services CAL Licensing per virtual processor SQL, BizTalk, ISA server, etc “Running Instance” based licensing Will enable new usage models http://www.microsoft.com/licensing/userights

Licensing by Virtual Processor: 

Licensing by Virtual Processor LESS VMs Than Processors MORE VMs Than Processors Previous License Rights: Total: 2 WS licenses + 4 SQL processor licenses New License Rights: Total: 2 WS licenses + 1 SQL processor license Previous License Rights: Total: 6 WS licenses + 4 SQL processor licenses New License Rights: Total: 6 WS licenses + 5 SQL processor licenses Proc 2 Proc 1 Proc 3 Proc 4 Proc 3 Proc 2 Proc 1 Proc 4

A LPS international leader: 

A LPS international leader Dedicated to Local Professional Services in Information Technology A leader with € 1.1 b rev. and 17’000+ eng. An international player covering Europe and USA Backed by Capgemini group (55 000 staff) USA (2’000) Baltimore, Chicago, Cincinnati, Cleveland Columbus, Dallas, Detroit Houston, Indianapolis Kansas City, Minneapolis New York, Omaha, Portland, Seattle, Washington DC Europe (14'500) France (8'500) United Kingdom (70) Spain (1'200) Belux (900) Switzerland (100) Germany (80) Sweden (620) Netherlands (2'000) Ireland (50) Poland (partners)

Offer perimeter: 

Offer perimeter

MS IOM: 4 phases and 5 capabilities: 

MS IOM: 4 phases and 5 capabilities Identity & Access Management Desktop, Server, & Device Management Security & Networking Data Protection & Recovery IT Management & Security Process

Slide39: 

The Core IO model Mastering backup and restore processes on critical servers Users data are managed and controlled Centralized administration of backups Restore tests performed regularly Anti-virus on all workstations Centralized firewall Basic network services Remote accesses sevures Firewall on laptops Secured wireless network Complete automation Quarantine feature Security logs centralized Network and security Data protection Services support processes No standard Limited security Backups are not sures and not tested Multiple storage locations for end users data Informal processes No SLA SLAs have been validated Centralized Service Desk Incident and problem management in line with ITIL best practices Change and configuration management in line with ITIL best practices Services management dashboard Users data synchronized Disk to disk backups Manual administration Minimal policies in terms of granting access to ressources Automatic updates Standardized images for workstations Complete monitoring of critical servers Automatic inventory and setup Laptops are secured Capacity Management Automatic laptop management Centralized users identification Security Automation Administration partially centralised Administration totally centralised External access authentification Access and identity management Workstations and servers mangement No standardized workstation, several images No centralised management

Slide40: 

Mastering backup and restore processes on critical servers Users data are managed and controlled Centralized administration of backups Restore tests performed regularly Anti-virus on all workstations Centralized firewall Basic network services Remote accesses sevures Firewall on laptops Secured wireless network Complete automation Quarantine feature Security logs centralized Network and security Data protection Services support processes No standard Limited security Backups are not sures and not tested Multiple storage locations for end users data Informal processes No SLA SLAs have been validated Centralized Service Desk Incident and problem management in line with ITIL best practices Change and configuration management in line with ITIL best practices Services management dashboard Users data synchronized Disk to disk backups Manual administration Minimal policies in terms of granting access to ressources Automatic updates Standardized images for workstations Complete monitoring of critical servers Automatic inventory and setup Laptops are secured Capacity Management Automatic laptop management Centralized users identification Security Automation Administration partially centralised Administration totally centralised External access authentification Access and identity management Workstations and servers mangement No standardized workstation, several images No centralised management Optimization steps (1/4) Phase 1: Evaluate OIM steps

Slide41: 

Mastering backup and restore processes on critical servers Users data are managed and controlled Centralized administration of backups Restore tests performed regularly Anti-virus on all workstations Centralized firewall Basic network services Remote accesses sevures Firewall on laptops Secured wireless network Complete automation Quarantine feature Security logs centralized Network and security Data protection Services support processes No standard Limited security Backups are not sures and not tested Multiple storage locations for end users data Informal processes No SLA SLAs have been validated Centralized Service Desk Incident and problem management in line with ITIL best practices Change and configuration management in line with ITIL best practices Services management dashboard Users data synchronized Disk to disk backups Manual administration Minimal policies in terms of granting access to ressources Automatic updates Standardized images for workstations Complete monitoring of critical servers Automatic inventory and setup Laptops are secured Capacity Management Automatic laptop management Centralized users identification Security Automation Administration partially centralised Administration totally centralised External access authentification Access and identity management Workstations and servers mangement No standardized workstation, several images No centralised management Phase 1: Evaluate Improvment areas defined OIM steps Optimization steps (2/4)

Slide42: 

Mastering backup and restore processes on critical servers Users data are managed and controlled Centralized administration of backups Restore tests performed regularly Anti-virus on all workstations Centralized firewall Basic network services Remote accesses sevures Firewall on laptops Secured wireless network Complete automation Quarantine feature Security logs centralized Network and security Data protection Services support processes No standard Limited security Backups are not sures and not tested Multiple storage locations for end users data Informal processes No SLA SLAs have been validated Centralized Service Desk Incident and problem management in line with ITIL best practices Change and configuration management in line with ITIL best practices Services management dashboard Users data synchronized Disk to disk backups Manual administration Minimal policies in terms of granting access to ressources Automatic updates Standardized images for workstations Complete monitoring of critical servers Automatic inventory and setup Laptops are secured Capacity Management Automatic laptop management Centralized users identification Security Automation Administration partially centralised Administration totally centralised External access authentification Access and identity management Workstations and servers mangement No standardized workstation, several images No centralised management PROJECT 3 PROJECT 1 PROJECT 2 Phase 1: Evaluate Improvment areas defined Phase 2: Optimization projects OIM steps Optimization steps (3/4)

Slide43: 

Mastering backup and restore processes on critical servers Users data are managed and controlled Centralized administration of backups Restore tests performed regularly Anti-virus on all workstations Centralized firewall Basic network services Remote accesses sevures Firewall on laptops Secured wireless network Complete automation Quarantine feature Security logs centralized Network and security Data protection Services support processes No standard Limited security Backups are not sures and not tested Multiple storage locations for end users data Informal processes No SLA SLAs have been validated Centralized Service Desk Incident and problem management in line with ITIL best practices Change and configuration management in line with ITIL best practices Services management dashboard Users data synchronized Disk to disk backups Manual administration Minimal policies in terms of granting access to ressources Automatic updates Standardized images for workstations Complete monitoring of critical servers Automatic inventory and setup Laptops are secured Capacity Management Automatic laptop management Centralized users identification Security Automation Administration partially centralised Administration totally centralised External access authentification Access and identity management Workstations and servers mangement No standardized workstation, several images No centralised management Optimization steps (4/4) Phase 1: Evaluate Improvment areas defined Phase 2: Optimization projects OIM steps Reevaluate

Virtualization Progression: 

Virtualization Progression

Slide45: 

SOGETI added value SOGETI is Microsoft « GOLD Partner » certified The highest level of certification, recognizing SOGETI experience and knowledge in Microsoft products and processes SOGETI is a global Microsoft worldwide partner with strong links between companies and permanent technical and administrative interfaces Microsoft IOM is based on MOF and Microsoft experience while SOGETI added value lies in Deeper knowledge using Microsoft products in heterogeneous environments Professional expertise in IT project management (+ people) Existing material and experience in evaluating infrastructures’ strengths and weaknesses and how to improve current situation SOGETI 3 main axis of action Automation (Tools, Scripts, Web portals, Tasks sequencers, Schedulers, Monitoring) Availability (Clustering, Load balancing, Caching, Backup/Restore, Security) Agility (Virtualization, Update mechanisms, Standardization, Simplicity) SOGETI’s offer MIO « Microsoft Infrastructure Optimization » In partnership with Microsoft Based on IOM from Microsoft, completed with SOGETI’s processes and people

Deliveries: 

Deliveries MIO is based on predefined materials, all are customized and detailed regarding your environment Projects are part of a complete and detailed service catalog, depending on your needs

Benefits of MIO: 

Benefits of MIO Simplify Microsoft infrastructure Makes it closer to real business needs Simplify all operating tasks as a consequence Reduce security threats (#hardening) Automate maintenance tasks Improve flexibility (new applications, migrations, …) Reduce compatibility issues (#ever greening) Evaluate maturity level and highlights optimization tracks Study licensing issues and potential benefits  Reduce costs and improve service quality AND … Helps to clarify IT staff vision of available technologies Helps finding appropriate tools and techniques when new projects are starting Helps technical staff to realize the potential benefits of ready to use guides and scripts as well as IT process management (#ITIL) Helps to spread knowledge within IT departments and between IT departments