Windows Server 2008 Inside Out- P2

Tham khảo tài liệu windows server 2008 inside out- p2, công nghệ thông tin, quản trị mạng phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả
Nội dung trích xuất từ tài liệu:
Windows Server 2008 Inside Out- P2 Architecture Improvements 17 Chapter 1Figure 1-4 Review the proposed solution.Windows Vista with SP1 or later and Windows Server 2008 have several networkingenhancements that affect networking and NDF in general, including: Support for Server Message Block (SMB) version 2 SMB is the fi le sharing pro- tocol used by Windows operating systems. Windows Vista and Windows Server 2008 support SMB version 2, which enhances the performance of the original SMB protocol. Windows Vista with SP1 or later and Windows Server 2008 sup- port the SMB Helper Class as part of the Network Diagnostics Framework (NDF). This helper class provides diagnostics information users will find useful when they are having problems connecting to file shares. Specifically, this helper class can help diagnose failures including when a user is trying to access a server that does not exist, when a user is trying to access a nonexisting share on existing server, and when a user misspells a share name and there is a similarly named share available. Note When working with Windows Vista SP1 or later and Windows Server 2008, file access and remote copy performance is increased significantly. SMB v2 offers significant file trans- fer improvements, as do improved file transfer algorithms. Additionally, network share thumbnails are cached for all users, allowing faster display of thumbnails when working with network shares. Implementation of extensions to network awareness Improvements in network selection algorithms allow a computer connected to one or more networks via two or more interfaces (regardless of whether they are wired or wireless) to select the route with the best performance for a particular data transfer. As part of the best route selection, Windows chooses the best interface (either wired or wireless) for the transfer and this improves the selection of wireless over wired networks when both interfaces are present. 18 Chapter 1 Introducing Windows Server 2008 Changes to network management policies Network management policies are available for both wired (IEEE 802.3) networks and wireless (IEEE 802.11) net- works under Computer Configuration\Windows Settings\Security Settings inChapter 1 Group Policy. If you right-click the Wired Network (IEEE 802.3) node, you can create a policy for Windows Vista or later computers that enables the use of IEEE 802.3 authentication on wired networks. If you right-click the Wireless Network (IEEE 802.11) node, you can create separate policies for Windows XP comput- ers and Windows Vista or later computers that enable WLAN autoconfiguration, define the specific networks that can be used, and set network permissions. Changes to wired and wireless single sign on (SSO) SSO changes allow users to change their passwords when connecting to a wired or wireless network (as opposed to using the Winlogon change password feature), to correct a wrong password entered during sign on, and to reset an expired password—all as part of the network logon process. Windows Vista with SP1 or later and Windows Server 2008 also support many network security enhancements, including: Secure Socket Tunneling Protocol (SSTP) and Secure Remote Access (SRA) SSTP allows data transmission at the data-link layer over a Hypertext Transfer Proto- col over Secure Sockets Layer (HTTPS) connection. SRA enables secure access to remote networks over HTTPS. Together these technologies enable users to securely access a private network using an Internet connection. SSTP and SRA represent improvements over the Point-to-Point Tunneling Protocol (PPTP) and Layer Two Tunneling Protocol/Internet Protocol Security (L2TP/IPSec) protocols because they use the standard TCP/IP ports for secure Web traffic and this allows them to traverse most fi rewalls as well as Network Address Translation (NAT) and Web proxies. Because SSTP supports both IPv4 and IPv6, users can establish secure tunnels using either IP technology. Essentially, you get VPN technology that works everywhere, which should mean far fewer support calls. CryptoAPI version 2 (CAPI2) and Online Certificate Status Protocol (OCSP) extensions CAPI2 extends support for PKI and X.509 certificates and implements additional functionality for certificate path validation, certificate store designa- tion, and signature verification. One of the steps during certificate path validation is revocation checking. This step involves ve ...