What's New in Management Services
|
On This Page
 | Introduction |
| Benefits |
| New Features and Improvements |
| Summary |
Introduction
As computing has proliferated on desktops, laptops, and portable devices, the real cost of maintaining a distributed personal computer network has grown significantly. This total cost of ownership (TCO) includes not only the initial cost of hardware and software, but deployment expense, hardware and software update costs, training, day-to-day maintenance, and technical support as well.
The Windows Server 2003 operating system builds on the foundation of Windows 2000, letting you increase the value of your existing investments while lowering overall computing costs. Easier to deploy, configure, and use, Windows Server 2003 provides centralized, customizable management services to reduce TCO. This article provides an overview of benefits, new features, and improvements for management services in Windows Server 2003.
Benefits
Windows Server 2003 provides the following benefits.
| Benefit | Description |
Dependable | Windows Server 2003 extends the reliability and availability of management tools introduced in Windows 2000 with improvements in key features such as Windows Management Instrumentation (WMI), Group Policy, and Resultant Set of Policy (RSoP). In addition, new policy settings enable administrators to more easily manage environments in order to lock down desired configurations for groups of users throughout an organization. |
Greater Productivity | With Microsoft IntelliMirror® management services, users' applications, data, and settings are available to them regardless of where they log on, enabling them to get more done. And applications can be remotely installed and upgraded. Because organizations can deploy and manage customized desktop configurations, they spend less money supporting users on an individual basis. Users get the flexibility they need to do their jobs without having to spend time configuring their system on their own. |
Connected | Improvements such as WMI command-line management and remote management capabilities deliver unprecedented flexibility for administrators. Simplified folder redirection and more robust roaming capabilities enhance connectivity for users across an organization. And with cross-forest support, organizations can achieve more interoperability scenarios, enabling increased flexibility. |
New Features and Improvements
Windows Server 2003 provides the following:
| • | Improved Policy Setting Management Features |
| • | Powerful Deployment Tools and Services |
| • | Robust Command-Line Management |
| • | Windows Update |
| • | Windows Server Update Services (WSUS) |
| • | Integrated Solutions for Enterprise-Class Management |
Improved Policy Setting Management Features
Windows Server 2003 improves the way administrators can use Group Policy to control a wide range of configuration issues such as users' desktops, settings, security, roaming profiles, Start menu options, and so forth.
| Feature | Description |
Group Policy Management Console | The Group Policy Management Console (GPMC) provides the new framework for managing Group Policy. With GPMC, Group Policy is easier to use than in previous versions, a benefit to organizations that want to take advantage of the Active Directory® service and its powerful management features. For example, GPMC enables backup and restore of Group Policy objects (GPOs), import/export and copy/paste of GPOs, reporting of GPO settings and RSoP data, use of templates for managed configurations, and scriptability for all GPMC operations. In addition, GPMC lets administrators manage Group Policy for multiple domains and sites within a given forest, all in a simplified user interface with drag-and-drop support. And with cross-forest trust, administrators can manage Group Policy across multiple forests from the same console. GPMC can manage Group Policy for Windows 2000 or Windows Server 2003 domains. |
Resultant Set of Policy (RSoP) | Support for RSoP gives administrators the ability to plan, monitor, and troubleshoot Group Policy. With RSoP, administrators can plan how Group Policy changes would affect a targeted user or computer. Or administrators can remotely verify the policies currently in effect on a specific computer. |
New Policy Settings | With more than 200 new policy settings for Windows Server 2003, organizations can easily lock down or manage configurations such as customizing or prohibiting hundreds of features like Remote Assistance, AutoUpdating, and Error Reporting. |
Enhanced User Interface in the Group Policy Object Editor | Policy settings are more easily understood, managed, and verified with Web-view integration in the Group Policy Object Editor. Clicking on a policy instantly shows the text explaining its function and supported environments such as Windows XP only or Windows 2000. |
WMI Filtering | WMI filtering lets administrators determine whether to apply a GPO to a specific computer or user based on their configuration, role, or other criteria. For example, the use of Internet Protocol Security (IPSec) could be limited to only those machines that have a network interface card (NIC) optimized for it. |
Cross-Forest Support | While GPOs can only be linked to sites, domains, or organizational units (OUs) within a given forest, the cross-forest feature in Windows Server 2003 enables several new scenarios that Group Policy supports. For example, it is possible for a user in forest A to log on to a computer in forest B, each with their own sets of policy. Alternatively, settings within a GPO can reference servers in external forests, for example software distribution points. Windows Server 2003 Group Policy successfully supports these interoperability scenarios. |
User Data and Settings Management Enhancements | Administrators can automatically configure client computers to meet specific requirements of a user's business roles, group memberships, and location. Improvements include simplified folder redirection and more robust roaming capabilities. |
Software Restriction Policies | The increased role of the Internet increases security threats to your network from viruses. With software restriction policies, organizations can protect their computer environment from suspect code by identifying and specifying the applications that are allowed to run. |
Powerful Deployment Tools and Services
Windows Server 2003 includes new technologies and features that ease the task of deployment.
| Feature | Description |
Remote Installation Services (RIS) | Administrators can use RIS servers using Risetup and RIPrep to deploy all editions of Windows 2000, Windows XP Professional, and all editions of Windows Server 2003 (except Windows 2000 Datacenter Server and Windows Server 2003 Datacenter Edition.) In addition, administrators can use RIS servers using Risetup to deploy Windows XP 64-bit Edition and the 64-bit versions of Windows Server 2003. Automated deployment is further enhanced with tighter security, improved performance to major components in RIS, such as Trivial File Transfer Protocol (TFTP), and hardware abstraction layer (HAL) filtering to ensure that images are recognized only by machines with a compatible HAL. Administrators can save more time with the OS Choice Wizard, which can run in its entirety without administrator intervention. These and other improvements in RIS were designed to enable faster and more efficient automated deployment, resulting in lower TCO. |
User State Migration | Migrating files and settings for multiple users in a corporate environment is made easier with the User State Migration Tool (USMT). USMT gives administrators command-line precision in customizing specific settings such as unique modifications to the registry. In addition, Windows Server 2003 includes a Files and Settings Transfer Wizard designed for individual users or small office users. The wizard is also useful in a corporate network environment for employees who get a new computer and need to migrate their own files and settings without the support of an IT department or help desk. |
Windows Installer | Managing software applications in a corporate environment has traditionally burdened organizations with high costs. Now with Windows Installer, administrators can greatly simplify the process of customizing installations, updating and upgrading applications, and resolving configuration problems. Windows Installer can also manage shared resources, enforce consistent file version rules, and diagnose and repair applications at run time. The result: significantly lower TCO for managing applications. |
Robust Command-Line Management
Windows Server 2003 includes improved command-line management tools that allow administrators to complete most tasks without having to use a graphical user interface. This can increase efficiency for administrators desiring to use command-line functionality and automate common tasks.
| Feature | Description |
Ready to Use | Solutions are ready to use "out of the box" with little or no extra coding required. All tools have a consistent, standard syntax with easy access to command line documentation (/? Help text) as well as a comprehensive HTML Help file, "ntcmds.chm". |
Remote Management | All new tools support remote server operation via the /S parameter (remote system name, for example, "/S MyServer") as well as run under Telnet and Terminal Services, enabling fully remotable command-line management. |
Scriptable | Administrators can use batch files or scripts at the command line to create customized management solutions and automate common tool usage. |
WMI Command-Line (WMIC) Support | WMIC, a WMI command-line interface, is a powerful tool that gives administrators the precision to perform many WMI-related tasks, such as retrieving information from a local computer, remote computer, and from multiple computersߞ in a single command. |
Windows Update
Millions of users each week use Windows Update as a way to keep their Windows systems up-to-date. Windows Update allows a user to connect to www.windowsupdate.com, where their computer is evaluated to see which updates need to be applied to keep their system up-to-date, as well as any critical updates that are needed. Windows Update also extends these services with Critical Update Notification, and Automatic Updates.
| Feature | Description |
Microsoft Windows Update Services Catalog Site | Administrators can download specific patches and drivers for distribution via Systems Management Server or other management tools. See the Windows Update Services Catalog site for more information. |
Windows Update Consumer Site | Designed primarily for consumers or users in a lightly managed network environment, this Windows Update site delivers updates to individual computers accessing the Web site. This feature can be turned off or managed via Group Policy. See the Windows Update site for more information. |
AutoUpdating | Administrators can automatically download and install critical updates such as security patches, high impact bug fixes, and new drivers when no driver is installed for a device. AutoUpdate helps IT managers better manage the deployment and installation of critical software updates as well as consolidate multiple reboots into a single one. Compatible with corporate-hosted software update servers, AutoUpdate provides administrators with greater control of updates. Automatic updates can be configured automatically over the Internet or administered in-house. |
Dynamic Update | Dynamic Update is designed to deliver emergency fixes to address any issues at setup time such as new drivers that are required but not available on the Windows Server 2003 product CD. |
Driver Services | Windows Server 2003 enables administrators to get the latest certified drivers to users through Web sites and integration with device manager and Plug and Play services. |
Microsoft Windows Server Update Services
Windows Server Update Services is an update component of Windows Server and offers an effective and quick way to help you get secure and stay secure. WSUS represents an important step toward delivering a core software distribution and update management infrastructure in Windows. WSUS has both a server and client component.
| Feature | Description |
Microsoft Windows Server Update Services (WSUS) | WSUS is the successor to Software Update Services (SUS) 1.0. It enables you to fully manage the distribution of updates that are released through Microsoft Update to computers in your network. WSUS enables information technology administrators to deploy the latest Microsoft product updates to Microsoft Windows 2000 Server, Windows Server 2003, and Windows XP operating systems, as well as Microsoft Office, Exchange Server, SQL Server, and additional Microsoft products over time. WSUS is now available free of charge as a downloadable addition to Windows Server. For more information, see the Windows Server Update Services site. |
Integrated Solutions for Enterprise-Class Management
The Windows Server 2003 platform is at the core of Microsoft's vision for managing the enterprise. Its out-of-the-box management infrastructure and technologies enhance desktop management, streamline server administration, and simplify software deployment. Building on top of this infrastructure, Microsoft offers three solutions for enterprise-class management of Windows-based desktop and server systems.
| Product | Description |
Systems Management Server 2003 | Provides system inventory, enterprise-class software distribution and diagnostics. See the Systems Management Server site for more information. |
Microsoft Operations Manager 2005 | Delivers enterprise-class event and performance management for Windows-based environments of all sizes. See the Microsoft Operations Manager site to learn more. |
Application Center 2000 | Helps deploy and manage high-availability Web applications built on the Microsoft Windows platform. See the Application Center site for further information. |
Summary
Building on the foundation established in Windows 2000, Windows Server 2003 provides centralized, customizable management services that help reduce administrative overhead while helping users to be more productive.