Subscribe to Windows IT Pro
March 27, 2008 12:00 AM

Windows Server 2008 Installation—It’s a Snap!

Explore the ins and outs of image-based installation
Windows IT Pro
InstantDoc ID #98081
Rating: (4)
Downloads
98081.zip

The next window prompts for the type of installation you want to perform: Upgrade or Custom (advanced). Because you’re doing a clean installation from media, the Upgrade option is disabled (i.e., grayed out), and you must select Custom (advanced). Note that if you run the installation process from within Windows Server 2003, both options will be enabled.

A new window opens that asks one final question: Where do you want to install Windows? A dialog box displays partitions and unallocated space. You can add or remove partitions, reformat a previously used hard drive before installing Server 2008, and load additional drivers as needed. Select the partition for the installation, then click Next to install the OS. If the partition isn’t formatted, the installation process quickly formats the partition as NTFS and proceeds.

That’s it. You’re done—no more questions. You can go have a drink. But don’t go too far! Because the installation is image-based, it doesn’t take long to complete. A window displays the progress of the installation, and the server reboots twice during the process.

Configuration
So, what about all the things you never configured during installation: server name, time zone, administrator password, IP configuration? A server has a lot of default settings, DHCP-assigned IP address, automatically assigned server name, and so forth that you need to configure after the installation process has completed. This is starting to sound worse than what you had to do previously to install Windows Server! In the past, you installed and configured the OS in one process. Now, do you have to root through different Control Panel applets to configure the server? Fortunately, no.

As Figure 3 shows, the first thing you see after the installation is a window that tells you the user’s password must be changed before logging on for the first time. In the Server 2008 installation process, the Administrator account is created with a blank password, so the first action is to set a new Administrator password. Once you’ve set the new Administrator password, you are logged on as the Administrator.

If you ever had to install Windows Server 2003 with Service Pack 1 (SP1) slipstreamed after installation, you know that the Post Setup Security Updates (PSSU) Wizard forced you to patch your server and set an update schedule. With Server 2008, you get a beefed-up PSSU-type process in the form of the Initial Configuration Tasks (ICT) interface.

As you can see in Figure 4, the ICT guides you through all the main configuration items for a server with a new installation of Server 2008. The current values are displayed, and clicking an item opens the appropriate Control Panel applet for the value you want to set. For example, when you click the icon to set the computer name and domain, the Control Panel System applet opens automatically.

In Server 2008, Windows Firewall is enabled and Remote Desktop is disabled by default so that the server is secure from the start. Furthermore, Windows Firewall is fully integrated with the OS. Server 2008 offers several server roles (e.g., DHCP server, DNS server, domain controller) and features (e.g., backup, clustering) that help the server perform the role you select. (You add roles and features in section 3 of the ICT interface via the “Add roles” and “Add features” links.) When you enable a role and its supporting features, the various ports required by the role and its features are opened automatically in Windows Firewall; no additional configuration is required. (To maintain the Windows Firewall settings over time, you’ll want to use the Security Configuration Wizard—SCW— to create templates that let you continuously monitor Windows Firewall.)

Once you’ve configured the server, select the “Do not show this window at logon” check box and click Close. If you want to perform further configuration or role and feature maintenance, use Server 2008’s new role-based management tool, Server Manager.

Beyond Manual Installation
So that’s a walkthrough of the basic Server 2008 installation experience. As you’ve seen, you don’t really have much to do, but unless you need to install the OS on just a few servers, you’ll want to automate the installation process.

To create an unattended answer file for use in an automated process, first download Microsoft’s free Windows Automated Installation Kit (www.microsoft.com/downloads/details.aspx?FamilyID=c7d4bc6d-15f3-4284-
9123-679830d629f2&DisplayLang=en
). The WAIK contains the Windows System Image Manager application, which you’ll use to create your answer file. You can use the answer file with services such as Windows Deployment Services to automate your installations, or you can name the answer file autounattend.xml, place it on a floppy disk or USB drive, and insert it as the Server 2008 installation process begins. The process will read and use the answer file to automate the installation.

The WAIK documentation details the minimum requirements you need to specify for an automated installation. Web Listing 1 (Download a .zip file at the top of the page this page) provides an example of an autounattend. xml file that will partition the disk and install the full version of Server 2008 Enterprise. To use this file, you need to set the product key and also the local Administrator password value via the Windows System Image Manager as the local Administrator password is encrypted. (Note that there are other options—for example, a key management system—that don’t require you to hand out the product key in an autounattend file.)

Related Content:

ARTICLE TOOLS

Comments
  • Anne
    4 years ago
    Apr 16, 2008

    muraty, thanks for your feedback. Here's John Savill's response: "Thanks for writing. I appreciate your comments and maybe I was not clear enough.

    With no GUI we are less open to security risks because the GUI itself is code, e.g. explorer.exe. The code contains vulnerabilities and if we look at many of the windows fixes they often relate to things like Internet Explorer, Explorer etc. So no GUI is more secure because we don’t have those components in the operating system and there we don’t have the vulnerabilities associated with those components.

    In terms of upgrade vs fresh install I still stick with fresh install is the best option. There may be some specific roles where you can upgrade providing we don’t have certain applications or services installed that don’t support an upgrade. Maybe if a server was just a file server or a domain controller this would be an option however in the real-world most companies perform a hardware refresh at the same time as this type of OS upgrade so a migration of resources and services is common. When you add in changes to drivers, the likely switch to 64-bit with Windows Server 2008 and other new 2008 versions I think a fresh install makes the most sense for customers especially from a fallback situation if something goes wrong. From a settings perspective hopefully we are using group policies etc for the majority of our configuration or answer files for other components which is a best practice anyway incase a server “goes bang” and we have to recreate. I hope this clears things up."

  • Murat
    4 years ago
    Apr 14, 2008

    John, you say "with no GUI, they're less open to security risks". How can a GUI make an OS more open to risks? The belief that command line systems are securer is just a hoax. And you say the clean installation, not the upgrade is the best option. No, it is not the best option in the real-life scenarios. You would want to retain all your settings after a new OS, so the upgrade is the best option.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.