Microsoft Small Business Server 2003 Unleashed - page 69


Deploying and managing Terminal Services in a Windows network environment can be complicated, and this chapter did not address all possible scenarios that you might encounter if you choose to implement Terminal Services in your SBS network. However, getting a terminal server up and running is not rocket science, and the basic steps to set one up are fairly straightforward. First, you have to install a separate server to run Terminal Services in Application mode. The SBS server supports only Remote Administration mode starting with SBS 2003. After you have the basic server OS installed, you will install Terminal Services on the new server, install Terminal Server Licensing on the SBS server, and then install your TS CALs.

Managing the terminal server is also not difficult and will mostly be done through the Terminal Services Management console. Through this console, you can remotely control other users' sessions, view the status of existing sessions, and clear out disconnected sessions as needed. The Terminal Services Configuration console provides an interface for you to configure other aspects of the terminal server environment for your users.

With the advent of RWW and the push to allow users to work remotely, you may find yourself in a position to need Terminal Services even in a very small business environment. Knowing the basics of configuring and managing a terminal server may be more of a necessity than an option as the use of SBS continues to grow around the world.

Best Practice Summary

  • Running Terminal Server Licensing on the SBS ServerFor performance and fault-tolerance reasons, install the Terminal Server Licensing services on the SBS server and not on the terminal server.

  • Installing Microsoft Office on a terminal serverIf you need to install Office on a terminal server, read the Office Deployment whitepaper and make sure that you have appropriate Office licensing.

  • Internet Explorer Enhanced Security Configuration and administratorsTo help protect the terminal server as much as possible, do not remove the IE enhanced security configuration for administrators on the terminal server. Only users should have this configuration removed.

Part IV: Security



CHAPTER 9 Server Security


CHAPTER 10 Workstation Security

Chapter 9. Server Security


  • Physical Security

  • File-Level Security

  • Share-Level Security

  • Password Security

  • Troubleshooting Security Issues

Given that the intent with SBS is to have all the main business operations residing on a single server, securing that server against accidental and deliberate damage becomes even more important than in a more traditional multiserver Windows environment. In some small business environments, physical security of the server may be lacking or even nonexistent. Many companies encounter problems with employees who steal or sabotage company data. With the added risk of all the network-based attacks the server will be subjected to simply by connecting it to the Internet, keeping a server secured is more of a challenge than just a few years ago.

This chapter covers four main aspects of security as it relates to the SBS server: physical security, file security, share security, and password security. It also documents some commonly encountered security problems and offers ways to troubleshoot and resolve those problems quickly.