Best Practice Summary

• Always install SBS manuallyEven if SBS comes preinstalled on a new server, reinstall the system from scratch to ensure that the server is optimally configured for its environment.

• Location of data foldersNon-OS data, including Exchange and ISA logs and databases, should be placed on a drive other than C:. Ideally, multiple fault-tolerant disks would be used to store each type of data.

• Dealing with PPPoEIf the broadband network access is provided through a PPPoE account, use a third-party hardware router/firewall to maintain the PPPoE account connection instead of the external NIC of the SBS server.

• Be cautious when setting up VPN access into the SBS networkLook at all the security implementations and limitations before deciding to implement VPN into your SBS network. Review the VPN Quarantine features of ISA 2004 to plan the best VPN implementation if you do choose to go this route.

• Do not configure Automatic Updates to automatically install updates at a scheduled timeUpdates can be configured to download automatically, but the system administrator should only install updates manually.

• Install SBS three timesBefore you attempt your first production installation of SBS 2003 SP1, run through the installation process three times on a test box or in a virtual environment to become familiar with the installation process.

• Use err.exe to translate Microsoft hexadecimal error codeserr.exe can help you figure out what the error code means, which can help you track down the possible sources of the problem.