business , compliances , o-s

Generic Windows 200x Server Setup

July 4, 2011

Install Software

Always license NT 2k / 2k3, 2008 with the PER SEAT option (9999) and all drives should be formatted NTFS.

When servers use Raid always use Raid 5

Network – Check network – DNS server to determine available IP for a Server, which would have its own IP.

Set the following services to Manual Start

  • Alerter
  • License Logging (Until we are legitimate)
  • Messenger
  • Spooler

Other Settings

  • Run Disk Admin and allow it to write the signature to the beginning of the drive.
  • Assign drives space that you did not assign during installation of NT.
  • Check time zone and set.
  • Bootup time lowered to 5 seconds.
  • Move Pagefile off system partition.  Place on the second logical drive and make it 1.2 to 1.7 times the range of the RAM.  Leave 32 MB on System partition in case of HD failure.  (Only on machines that REALLY need to clean up some space)
  • Change the Administrator account name to admin with a password of Workscape.
  • Add Domain Admins to the local Administrator group.
  • Setup auditing in User Manager to check the following;
  • All Failures
  • Security Policy Changes (Success and Failure)
  • Go to Server Services and set to Max Throughput for either (“File sharing” for Fileserver or “Network Applications” for SQL database net apps.
  • Activate screen saver – 10 minutes with Password Protection.
  • If machine will be a Domain Controller, see below.
  • Defragment with Diskeeper.
  • Label Machine.
  • Label Cabling at Back of Machine.
  • Add connection to the list of Switch connections in the IDF Layout Document.
  • Add to DNS.
  • Set BIOS to boot to Hard Drive First.
  • To eliminate the Master Browser – Windows NT — Open the registry key HKLMSystemCurrentControlSetServicesBrowserParameters. Set value to Auto, Yes, or No.  For Windows 9x — Right-click Network Neighborhood–Properties–Configuration. Select File and Print Sharing for Microsoft Networks. Click Properties–Advanced. Under Property select Browse Master. Under Value select Disabled. Click Ok. Click OK again.
  • Lockdown the repair disk information – go to winntrepair click on directory and replace all permissions to SYSTEM and Administrator accounts only, with Full Control.

www.bestitdocuments.com