| WinInfo Daily News | Windows IT Pro |
![]() |
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() |
![]() ![]() |
Windows Server 2003 Review (Part One)
Joining several colleges from Windows & .NET Magazine at a late June 2002 Reviewer's Workshop for Windows Server 2003 near Microsoft's Redmond headquarters, I received an almost mind-numbingly technical overview to the vast array of new features in the company's next server operating system. After this barrage of information, subsequent meetings with Microsoft, and months of work with Windows Server 2003, one thing is clear: Windows Server has grown up dramatically since the early NT days, and it now scales up to the most scalable and advanced hardware on the planet. It wasn't always that way. Early versions of NT Server met with much market resistance, mostly because of the system's poor performance and low-end aspirations. So it wasn't until the release of Windows 2000 Server in February 2000 that Microsoft had a credible enterprise solution. "Windows NT 4 was all about small teams of people," said Cliff Reeves, Microsoft's Vice President of Product Management for Windows Server 2003. "Windows 2000 was focused on being a robust OS suitable for the data center. Windows Server improves on Windows 2000 and NT and introduces developer and application server capabilities. It's the tip of the iceberg for what's coming in the future on the server."
Windows Server 2003 OverviewWindows Server 2003 is so vast, so--dare I say it--rich, that it's hard to summarize quickly. Indeed, Microsoft is still grappling with the problem of describing Windows Server 2003 accurately to its customers. Reeves might have put it best when he told us that Windows Server 2003 was "a bloody good Windows 2000 version. That’s the basic Zen of what it is. It's all the things we learned, all the ideas encapsulated in a whole series of improvements. It's more secure, more manageable, more performance, more scalable. It's a kick ass Windows 2000 upgrade." Clearly, Reeves is right. But Windows Server 2003 is also like death by a thousand small cuts: One just doesn't know where to begin, and it's easy to get lost in all the confusion of new features. In a general sense, Windows Server 2003 is simply Microsoft's latest and greatest attempt to scale what had been a departmental and workgroup server ever higher into the domain of Big Iron and high-end UNIX. And if you can accept that Windows 2000 finally put Microsoft on the enterprise map, it's not a big leap to see that Windows Server 2003 may finally overcome what little perceived advantage the competition might still have. "We want to bring PC economics to the data center," Reeves said. "We will bring the costs down, make it less expensive to acquire and manage technology, and hack away at the high cost parts of today's data center. We talk to customers about dropping the cost of managing and deploying infrastructure. Windows is seen as an inevitability in the data center now. We have bigger machines, better technology, and higher scale. The key to Windows' value is its incredible focus on the value side. What do you do above that level makes people more productive." OK, so what do you get with Windows Server 2003? First, you're getting the results of two and a half years of improvements over Windows 2000, and the benefits of customer feedback from both NT 4 and 2000. Bill Veghte, the Corporate Vice President of Windows Server Management at Microsoft, told us that the company looked at tens of thousands of customer inputs and drove improvements based on that feedback into the product.
That last one, incidentally, caused some puzzled looks. Veghte was talking about federation, a new Microsoft buzz word used to describe user authentication across disparate systems. Federation basically became a hot topic when Microsoft's partners rejected the Passport centralized user database strategy called .NET My Services and asked the company to instead develop server products that would let them keep their customer and user data in-house. Federated servers will eventually permit external authentication so that enterprises can interoperate with other companies. Microsoft announced this strategy, code-named TrustBridge, in June 2002 and expects to roll out a corresponding server product of some sort in 2003 (See my WinInfo article for more information). Windows Server 2003 Server Family MembersWindows Server 2003 is available in a much wider range of products than was Windows 2000 Server. The mainstream 32-bit products include: Windows Server 2003, Web EditionOptimized solely for serving and hosting Web pages, Windows Server 2003, Web Edition supports 2 processors and up to 2 GB of RAM. Web Edition supports the .NET Framework, IIS 6, ASP.NET, Network Load Balancing (NLB), IPv6, Distributed File System (Dfs), Encrypting File System (EFS), Shadow Copy Restore, Print Services for UNIX, IntelliMirror, Resultant Set of Policy (RSoP), Windows Instrumentation Management (WMI) command line features, Remote OS installation (but not RIS), Internet Connection Firewall (ICF), and Remote Desktop. Web Edition can be a member server in an Active Directory (AD) domain, but cannot be a domain controller, and thus lacks much of the management infrastructure found in the other editions.
Windows Server 2003, Standard EditionThe core product for small and medium-sized businesses, Windows Server 2003, Standard Edition also supports 2 processors, but can handle up to 4 GB of RAM. Standard Edition includes all of the technologies in Web Edition, plus Enterprise UDDI Services, Internet Authentication Services (IAS), removable and remote storage, Fax Service, Services for Macintosh, Remote Installation Services (RIS), Windows Media Services (WMS), Public Key Infrastructure (PKI), Certificate Services, Smart Card support, and Terminal Services. Windows Server 2003, Enterprise EditionTargeted as the new high volume Windows Server product, Enterprise Edition supports 4-8 processors, 32 GB of RAM, and up to 8-node clusters. A 64-bit version with different specifications is also available (see below). Enterprise Edition is a superset of Standard Edition, adding Metadirectory Services Support (MMS) and Terminal Services Session Directory features, and support for hot-add memory and Non-Uniform Memory Access (NUMA). Windows Server 2003, Datacenter EditionMicrosoft's performance champion is aimed at the upper end of the market, with exclusive availability and scalability enhancements. Datacenter Edition supports 8 to 32 microprocessors, 64 GB of RAM, and up to 8-node clusters. A 64-bit version with different specifications is also available (see below). Datacenter is functionally equivalent to Enterprise Edition, though it lacks the Metadirectory Services Support (MMS) and Internet Connection Firewall features, but of course adds support for the Datacenter Program (DCP). 64-Bit Windows Server Editions
In June 2001, Microsoft began offering a limited distribution Windows Server 2003 Edition
dubbed Windows Advanced Server, Limited Edition (WASLE).
WASLE is a 64-bit product designed to take advantage of
the first generation Itanium platform, or IA-64, which
also shipped last summer, and Microsoft has recently shipped an upgrade that targets Itanium 2. This product
will be superceded by Windows Server
2003, 64-bit Enterprise Edition and Windows Server
2003, 64-bit Datacenter Edition in April 2003, and both versions will support the
Itanium and Itanium 2 processors. Enterprise-64 supports
up to 64 GB of RAM, 8 processors, and up to 8-node
clusters. Datacenter-64 supports 512MB to 256 GB of RAM
(though most systems will probably be physically
constrained to 128 GB initially), 8 to 32 processors,
and 8-node clusters. Interestingly, the 32-processor
limit on Datacenter-64 is pretty artificial, since
32-proc machines are currently only in the planning
stages. But Microsoft says it could easily scale
Datacenter-64 beyond 32 processors if the hardware was
there today. Windows Server 2003 FeaturesWhile I'm going to wait for some hands-on time with Windows Server Release Candidate 1 (RC1) before providing feedback about my experience with the product, I will at least address the broad strokes of new functionality you can expect. "Our vision for the server is that it is a foundation for connecting people, technology and businesses," Veghte said. "It is a platform for developing, deploying, and operating applications and services that federate seamlessly and scale without limits." Here are some of the major new features in Windows Server 2003. AbilitiesOK, the abilities term is buzzword-friendly enough to be trying at times, but there's some truth to it. As Microsoft is so fond of pointing out, its server products are continually improving in reliability, availability, scalability, and manageability, though I'll cover that one a bit later, as well as interoperability. The idea is that Windows Server needed to be improved enough in these areas to be accepted into the data center, and while Windows 2000 got them a foot in the door, Windows Server 2003 will, theoretically at least, break the door down completely. One imagines Sun administrators running for cover. Well, Brian Valentine does anyway. Having met the man now, I'm sure of it. Reliability"Customers have two key questions," said Jim
Livingston, the Lead Program Manager for Windows
Datacenter Server. "First, is Windows really ready for
mission critical work? And secondly, how can I determine
why there is downtime so I don't have reboot and just
hope it doesn’t happen again?" To tackle these problems,
Microsoft looked at the downtime statistics for Windows
2000. According to Livingston, 76 percent of Win2K
downtime is planned, while 24 percent is unplanned. AvailabilityTechnically, even the more reliable server is of no
use if clients can't access it. So Windows Server 2003s must be
available as well. Availability is achieved through
clustering and failover technologies, of course, and
problem avoidance techniques. Clustering has been
improved from 4 nodes in Win2K to 8 nodes in this
release. But clustering is also easier to set up than
before, thanks to friendly wizards and proactive tools
that will sense when a cluster is improperly configured
and correct any problems. ScalabilityThe Windows scalability challenge remains unchanged
from Windows 2000: Microsoft wants Windows computers to
be the top performing computers in the world. And make
no mistake about the company's goals for world
domination: It wants Windows Server to win every single
performance benchmark. But with Win2K, there were still
two major customer concerns: They wanted more hardware
choices on the very high end, and wanted proof that
Windows could scale as high as UNIX.
InteroperabilityHistorically, Microsoft has had a pretty weak
interoperability story, due largely to the omnipresent
mentality that all the machines in every network would
be running Windows. However, the company now embraces
the notion that heterogeneous platforms will
interoperate using Web services and open standards such
as XML and SOAP. So Windows Server 2003 is the first
Microsoft server OS to fully embrace this new vision.
"Interoperability is the key to surviving and thriving,"
said Barry Goffe, the Group Manager for Enterprise
Marketing Strategy. "It's a big change for Microsoft. We
used to ask customers to throw everything else out." SecurityMicrosoft security may be an oxymoron today, but the
company is undergoing a dramatic change in the way it
approaches security, and Windows Server 2003 will be the
first major OS release from the company that was
produced in the wake of its Trustworthy Computing code
review, which occurred in February-March 2002. "Windows Server is secure by design, secure by default, and
secure in deployment," Veghte said.
To protect systems after deployment, a new Software
Restriction Policies (SRP) feature lets administrators
determine which applications can--and can not--execute
in their environment. Windows Server 2003 also supports
Smartcard technologies, so that admins can logon with a
normal account but swipe the card when they need to
perform secure administrative tasks under admin
privileges. Communications and NetworkingEven Microsoft's earliest server products, of
course, offered various communications and networking
technologies. But with the ever-increasing importance of
the Internet and interoperability, Windows Server
2003 has been enhanced to support the latest communications
technologies, including IPv6, network bridging and
Internet Connection Sharing (ICS), IPSec, NAT
transversal, IP over Firewire, and so on. Active DirectoryMicrosoft's move to Active Directory (AD) directory
services in Windows 2000 has met with mixed results,
though most customers agree that AD is surprisingly
full-featured for a 1.0 product. In Windows Server
2003,
the goal for AD is refinement, and to ensure that they
get it right, 240 of Microsoft's 250 domain controllers
are already running Windows Server 2003 beta code (fun fact:
The other 10 are using Windows 2000 for interoperability
testing reasons only). ManagementTechnically, manageability is one of the many abilities that Microsoft likes to tout in Windows Server 2003. But management is so fundamental to the server that I've broken it out separately here. In Windows Server 2003, Microsoft has identified several "pillars" of manageability, including: Easier deployment and configurationWindows Server 2003 now supports Remote Installation Services (RIS) for the rapid installation of a small number servers; this feature was previous available only on Windows desktop systems. New Manage Your Server and Configure Your Server wizards simplify the process of assigning server roles, a new concept for this release: You might configure a server to be a file server, print server, Web server, and so on, and can easily assign multiple roles where appropriate.
Staying up to date and secureWindows Server 2003 supports Software Update Services (SUS, formerly Windows Update Corporate) and AutoUpdate, to ensure that servers are kept up-to-date, and automatically. The new Software Restriction Policies (SRP) feature creates a virtual sandbox that prevents unauthorized code execution. SRP is policy-based.
Managing many as oneA new Group Policy Management Console (GPMC) provides a scriptable interface for managing group policies. The GPMC is an MMC snap-in built onto those interfaces and designed directly from customer feedback. Microsoft says that GPMC will not be included in the final RTM version of Windows Server 2003, but will ship soon thereafter as a separate, but free, Web download. One nice feature of this tool is its integration with Resultant Set of Policies (RSoP), which lets admins generate reports to view what policies have been applied to specific users and machines, and test policy changes before implementing them live. Enable richer administrative control and flexibility"We wanted to give administrators more control," said Michael Dennis, the Lead Program Manager of the Windows Server Management Group. "There was just a lot of stuff we didn't think of originally. But customers were asking for more command line tools, headless server mode, task-based administration tools, command line access to WMI (Windows Management Infrastructure), and emergency server access, which lets you access the server when the keyboard and mouse won't work. We implemented all of this in Windows Server." File System and Storage
Windows Server 2003 includes various improvements to
the NTFS file system and storage subsystem. David Golds,
the Group Program Manager for the Core File System Team,
says that his favorite new feature is Volume Shadow
Copies. Essentially a network-based System Restore
feature, Volume Shadow Copies lets you access older
versions of files on the network after they've been
changed or deleted. "It's the largest single bet in Windows
Server 2003," Golds said. "We create a permanent or temporary
volume representing a snapshot of an existing volume at
a certain point in time, and then freeze that point in
time, and let you come back to it. It's not arbitrary."
The Volume Shadow Copy Service (VSS) required for this
feature represents the first time Microsoft has created
a backup framework, one that can be extended by third
parties. Terminal ServerTo improve Terminal Server (previously Terminal Services), Windows Server 2003 will ship with Remote Desktop Protocol (RDP) 5.2, an upgrade to the RDP 5.1 version that shipped in Windows XP. Terminal Server, as before, supports two modes: A single user mode for administration purposes, and a multi-user mode for full Terminal Server functionality, where users are accessing a desktop or specific applications remotely. Windows Server 2003 also supports the Remote Assistance functionality from XP.
New to this release are file redirection, high color support, resolutions up to 1600x1200, a cleaner user interface, enhanced management through WMI and Group Policies, better scalability, and a new Remote Desktop Client, which supports execution of remote desktops within a window, an IE browser, or the MMC. XP users working off of a Windows Server 2003-based Terminal Server will also get a handy auto-reconnect feature. Windows Media Services 9 SeriesOne of the most exciting advances in Windows Server 2003 is its integrated Windows Media Services (WMS) Series 9 server, code-named Corona Server. WMS 9 Series features a new Fast Streaming feature and dynamic content programming, and will work with prior Windows Media Player versions, but better with the upcoming Windows Media 9 Series Player. Note that WMS is included in the Standard, Enterprise, and Datacenter editions of Windows Server 2003, but not as part of Web Server Edition. Windows Server 2003 Enterprise and Datacenter Editions include unique WMS features such as cache/proxy server support and multicast content delivery. Application ServerDespite the fact that Microsoft's application server
is one of the most often-used parts of Windows Server,
it's an ill-defined and misunderstood component. John
Montgomery, the Group Product Manager of the Developer
Platform and Evangelism Group, says that application
server integration with Windows Server began in 1997,
when the company shipped the NT 4.0 Option Pack. At the
time, integrating an application server with the OS
seemed foolish to certain analysts, but now everyone is
doing it: Sun and HP both ship their app server products
in the box with their UNIX OSes. Internet Information Services (IIS) 6.0IIS 6.0 is the poster child for Windows Server
2003 security: The server ships with IIS disabled by default
for the first time, and when users do manually install
this feature, its several handicapped by default.
According to Andrew Cushman, the IIS Group Product
Manager, this situation will prevent enterprises from
exposing themselves to risk when installing Windows Server 2003.
"IIS 6 is locked down and more secure than previous
versions," Cushman said. "It's locked down by default,
and not installed by default. IIS 6 will serve only
static content by default when installed, and it runs
on a lower privilege account than before. We have more
secure default settings, include no sample code, have
more aggressive limits and timeouts, and stronger ACLs." Looking ForwardMicrosoft delivered Windows Server 2003 Release
Candidate 1 (RC1) in late July, and RC2
in December 2002. The company then completed the product development in late
March 2003 and
will launch the product April 24, 2003. But the completion of
Windows Server 2003 will only trigger a new round of
enterprise server products from Microsoft, all of which
will be "infused" with support for XML Web services. Goffe said that future versions of the Windows Server
family, the .NET Enterprise Servers, Windows desktop
versions, and even Microsoft Office will be largely
reworked around this concept. Pricing
Conclusions
Windows Server 2003 is a surprisingly full-featured release, but
because it builds on the strong base of Windows 2000
Server, it will be a simple in-place upgrade for those
customers. Thanks to its new upgrade features, it should
also prove to be a simpler upgrade for the large crowd
of NT 4.0 Server holdouts, though we'll have to test
that functionality before passing final judgment. In part two of my review, I take a look at Windows Server in the real world.
--Paul Thurrott |