Dude, Who Stole my GUI

 For too long Microsoft has continually been lowering the bar in terms of who was capable of administrating Windows servers. Long ago the Mystical Order of the Computer Priesthood was strong and healthy but alas, as ever more have come into IT, we have become overpopulated and weakened. We are no longer nerds and geeks. It is time for a return to the old ways. It is time for us to admit something that our UNIX brethren have known for decades... "Real operating systems dont' have GUI's."

Ok... enough of the melodramatics... Let's talk about Microsoft Windows 2008 Server Core installations.

A core server installation is a scaled-back version of the full server install. All system administration is done via command prompt. There is no GUI. Once the server is on the network though it can be administrated remotely via Microsoft Management Console (MMC).



A server core will not include.Net Framework, Internet Explorer, or any other feature not critical to server operations. After installing the core the adminitrator has the ability to configure it for one or more of many basic roles: domain controller, DNS server, DHCP server, file server, print server, Windows media server, terminal services Gateway, Web server, and virtualization server.

There are two main compelling reasons why we will see the entire industry rapidly adopting core installations. The first has to do with security and the second with availability.

By introducing core installations in Windows Server 2008 Microsoft has dramatically reduced the possible surface area for an attack. In previous versions, by default, the operating system was installed with the vast majority of its functionality enabled. This meant, that features installed on a server, but not actively being used, might be exploited to gained access to the system and it's data. Personally, I feel that getting rid of the GUI was taking this to a bit of an extreme, however it does show how serious of a commitment Microsoft is made to security these days.

The second reason to consider core installations is server availability. One of the largest causes of scheduled system unavailability is the requirement to keep your servers patched. When Microsoft reduced the surface area of the operating system it also reduced what needed to be patched. Now, instead of having to apply patches for Internet Explorer or IIS, you only have to patch for the core install, any roles that have been added, and software running on top of the operating system. This could potentially cut in half the amount of patching required.

The bottom line is that in spite of the whining you will hear from your system administrators core installs are going to be the way to go. (It's also quite possible regulatory considerations and auditors will give you no choice in the matter.) Any inefficiencies introduced on the system administration side will be more than offset by the savings you will gain from increased system availability.

Below is a list of configuration commands I used when setting the core installation demo:

netsh interface ipv4 show interfaces

netsh interface ipv4 set address name="2" source=static address=192.168.1.4 mask=255.255.255.0 gateway=192.168.1.1

netsh interface ipv4 add dnsserver name="2" address=192.168.1.3 index=1

netdom renamecomputer win-43215454 /NewName:lab2

For a step-by-step guide on configuring a server core go to the following link:

http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74-e13c-46de-8d30-ad0afb1eaffc1033.mspx?mfr=true

 del.icio.us  Stumbleupon  Technorati  Digg 

 

What did you think of this article?




Trackbacks
  • No trackbacks exist for this entry.
Comments

  • 1/14/2008 5:24 AM Mark Wilson wrote:
    Hi Paul - particularly liked the opening paragraph

    You might find my post on a">http://www.markwilson.co.uk/blog/2007/08/a-few-commands-to-get-started-with-windows-server-core.htm">a few commands to get started with Server Core useful?

    Cheers, Mark
    Reply to this
    1. 1/14/2008 11:02 AM Mark Wilson wrote:
      (looks like that URL got mangled by a plugin... should be http://www.markwilson.co.uk/blog/2007/08/a-few-commands-to-get-started-with-windows-server-core.htm).
      Reply to this
      1. 1/14/2008 11:05 AM Paul Shearer wrote:
        Good site Mark.  A lot of good information.
        Reply to this
  • 1/14/2008 10:41 AM Carl wrote:
    Isn't this what Netware was doing 15 years ago? When MS decided everything should be GUI at the server.
    Reply to this
    1. 1/14/2008 10:56 AM Paul Shearer wrote:
      Exactly, never discounted good idea just because it's old.  Computing technology seems to be such a cyclical. 

      First we had the monolithic model where there was one giant server that processed everything for a company.  Then came the personal computer which revolutionized computing and made it a viable option for midsize companies.  A few years of personal computers resulted in the client/server model.  Due to the proliferation of these servers we got a new consolidation wave with virtualization technology and now are headed back to the monolithic model.

      -Paul
      Reply to this
  • 1/19/2008 2:01 PM Roger Carter wrote:
    Paul, nice blog and interesting article. I guess it's true that MS is serious about security, even if they are getting here kicking and screaming. As an Oracle guy I find it interesting to compare/contrast the concept of "core installations" when it comes to Oracle. These days Oracle is all about the GUI, one-button install - and the default install loves to burden the database with a whole slew of options and frankly, "Oracrap" as I call it. Then the DBA has the next decade to manage, patch, and scratch his head as he attempts to keep the inner-workings functional -- all the while having no idea what pieces and parts are really needed by the application.

    So Hopefully the trend toward "core installations" isn't limited to operating systems but covers the entire technology stack. I sort of doubt it, but one can be hopeful.

    And by the way, long live command line!
    Reply to this
  • 12/8/2009 10:55 AM bespoke software wrote:
    Hey, that was interesting,

    Keep up the good work,

    Anyway, thanks for the post
    Reply to this
Leave a comment

Submitted comments will be subject to moderation before being displayed.

 Enter the above security code (required)

 Name

 Email (will not be published)

 Website

Your comment is 0 characters limited to 3000 characters.