Windows Server 2012 R2The Essentials Experience

Part 6 of 7User & Computer Management

Agenda

User management

Creating and editing user accounts

Overview of the client connector

Managing client computers

User management

User management and identity• Active Directory Domain Services provides

authentication and authorization‐ User accounts are assigned

usernames & passwords

‐ Password policy is enforced

‐ Simplified for smallerenvironments

• Accounts can be Standarduser or Administrator user

• Built-in “Administrator”account is disabled

Managing user accounts• Users page shows every user account in the environment

• Tasks that apply to all accounts:‐ Add new user account‐ Set global password policy‐ Manage File History settings‐ Export log of remote connections‐ Manage online services

• Tasks for specific user accounts:‐ View user account properties‐ Deactivate/remove a user account‐ Change password‐ Manage online services

User access level & password policy• Level of access for user accounts:

‐ Standard

‐ Administrator

• Password strength/complexity:‐ Weak

‐ Medium

‐ Medium Strong

‐ Strong

Security and distribution groups• New for Windows Server 2012 R2

• User groups can be used to controlaccess to network sources

• When optional email integrationis enabled, distribution groupscan be created

Creating & editing user accounts

Creating user accounts• Add User wizard provides streamlined process:

‐ Enter user’s full name; accept default usernameor modify as desired

‐ Enter password, which must meetpolicy requirements

‐ Specify access level:Standard or Administrator

‐ Optionally create mailbox ife-mail integration has been installed

‐ Assign to user groups

‐ Assign access rights to shared folders

‐ Select Anywhere Access settings

User account properties• User Account Properties

‐ First and last name‐ Switch between Standard &

Administrator access level‐ Change the password‐ Disable/enable an account;

different than removing‐ Join/leave user groups‐ Manage shared folder and

Anywhere Access settings‐ Optionally manage mailbox

settings ife-mail integration has been installed

‐ Specify which computers a user can connect to remotely

Client Connector

Connect computer wizard• Easily connect client computers

• Now supports Windows Servercomputers, 2008 R2 and later

• Automates difficult concepts, such asActive Directory domain join

• Simplify user profile migration forWindows Pro SKUs

• Connect wizard is launched from aweb page, either locally or remotely

‐ Remote users connect via VPN that is automatically established

‐ No media to distribute or SMB share to access

Connecting client computers• Benefits for connected computers:

‐ Health monitoring

‐ Automatic backup to Essentials server

‐ Ability to manage Essentials server from the client

• Getting connected:‐ Launch wizard from a web page

http://servername/connect

https://remote.internet-domain-name/connect

‐ First step is to verify and install prerequisites May require a reboot

Connecting client computers, continued• User provides their credentials

‐ Check for admin account, if so warn the user• Optionally move user’s settings and data (business SKUs only)

‐ Greatly eases the transition from peer-to-peer networks to Essentials‐ User retains their familiar working environment

• Enter a computer description

Connecting client computers, continued• Wake client computer to perform backups to the server?

‐ All connected PCs are backed up according to the schedule defined on the Dashboard’s Computers and Backups page

‐ Administrators can exclude PCs from being backed up• Optionally launch the Dashboard once connected

Supported clients• Check TechNet documentation for latest info:

‐ http://technet.microsoft.com/en-us/library/jj713528.aspx

• Windows 7 operating systems ‐ Windows 7 Home Basic and Home Premium (x86

and x64)‐ Windows 7 Professional (x86 and x64)‐ Windows 7 Ultimate (x86 and x64)‐ Windows 7 Enterprise (x86 and x64)‐ Windows 7 Starter (x86)

• Windows 8 operating systems ‐ Windows 8 / Windows 8.1‐ Windows 8 Pro / Windows 8.1 Pro‐ Windows 8 Enterprise / Windows 8.1 Enterprise

• Mac OS X 10.5 thru 10.8

Managingclient computers

Managing client computers• Devices page shows every computer

and server in the environment

• Tasks that apply to all computers:‐ Customize client backup‐ Help with connecting computers‐ Implement/modify group policy

• Tasks for specific computers:‐ View computer properties‐ Backup and restore tasks‐ Customize selected computer’s backup‐ Establish Remote Desktop connection‐ Remove computer‐ View Best Practices Analyzer results (for Essentials server

only)

• Easily configure security settings with the Security Template

• Easily provide real-time data protection with Folder Redirection

Professional + Group Policies

Professional

• Adds better productivity with business features

• Adds better management with domain join and support for group policy

• Adds better connectivity with Single Sign-On and Remote Desktop Host

Using the right Windows client• Home vs. Professional

‐ PCs running Home SKUs of Windows can connect to the Essentials environment

‐ Additional value is provided when using Professional SKUs‐ Implementing group policy with Professional clients:

Enables redirection of user data to the server Simplifies the activation and configuration of security settings

• Basic connectivity for accessing, sharing, and editing network files and resources

• Users must provide credentials every time they access a specific network resource

Home

Group Policy folder redirection• Automatically store and protect critical business

data on the server‐ Folder redirection lets users

continue to work and savedata in a way that’s familiar

‐ Folder contents are stored onthe server:

Desktop

Documents

Favorites

Downloads, etc.

Group Policy security settings• Enforce best practices security policies for client

computers‐ Configure consistent

security policies throughoutthe domain

‐ Enables Windows Update toapply the latest securitypatches and critical updates

‐ Windows Defender protectsagainst malware attacks

‐ Prevent users from exposingthe network to attack byenforcing the use ofWindows Firewall

Next steps

Resources

Windows Server Essentials Tech Centerhttp://technet.microsoft.com/en-US/sbs/jj159331

Windows Server Essentials and Small Business Server bloghttp://blogs.technet.com/b/sbs/

Windows Server Essentials support forumhttp://social.technet.microsoft.com/forums/en-us/winserveressentials/threads

Windows Server 2012 R2 product pagehttp://www.microsoft.com/en-us/server-cloud/products/windows-server-2012-r2/default.aspx

Windows Server 2012 R2 Essentials product pagehttp://www.microsoft.com/en-us/server-cloud/products/windows-server-2012-r2-essentials/default.aspx

Be Lean & Stay LeanUnderstand how virtualization opens the door to value-added services and offerings.

Business AnywhereFind out how you can support the expanding SMB remote and mobile workforce.

Tap Your Data GoldmineHelp SMBs use data to their advantage in three easy steps.

Ahead of the Game Campaign Resources

24

Leverage Server and Cloud Solutions to dramatically increase margin and keep SMB customers ahead of the game

Get started today! Visit http://aka.ms/AheadoftheGame to find the marketing materials and sales tools you need get SMB customers ahead of the game.