Visit http://www.techsoup.org to access donated technology for nonprofits and libraries! Learn about the features and functionality of Microsoft's Windows Server. You get a peek "under the hood" to see some of the newest features from Microsoft's principal program manager for the Windows Server program, Jeff Woolsey.

1. Introduction to Windows Server for Nonprofits and Public
Libraries
Jeff Woolsey, Microsoft
January 10, 2017

2. . © TechSoup Global | All rights reserved2
Using ReadyTalk
• Chat to ask questions
• All lines are muted
• If you lose your Internet connection,
reconnect using the link emailed to you.
• If you lose your phone connection, re-dial
the phone number
and re-join.
• ReadyTalk support:
800-843-9166
Your audio will play through your computer’s speakers. Hear an echo? You may be
logged in twice and will need to close one instance of ReadyTalk.

3. . © TechSoup Global | All rights reserved3
You Are Being Recorded…
• You can find upcoming and past webinars on the TechSoup website:
www.techsoup.org/community/events-webinars
• You can also view recorded webinars and videos on our YouTube channel:
https://www.youtube.com/TechSoupVideo
• You will receive an email with this presentation, recording, and links within a few days.
• Tweet us @TechSoup or using hashtags: #tswebinars

4. . © TechSoup Global | All rights reserved4
Presenters
Becky Wiegand
Webinar Program Manager
TechSoup
Assisting with chat: Susan Hope Bard, TechSoup
Jeff Woolsey
Principal, Windows Server
Microsoft

5. . © TechSoup Global | All rights reserved5
Objectives

6. 6
About TechSoup

7. . © TechSoup Global | All rights reserved7
The Need Is Global – And So Are We
• TechSoup’s mission is to build a dynamic bridge that enables civil society organizations and social
change agents around the world to gain effective access to the resources they need to design and
implement solutions for a more equitable planet.
Countries Served TechSoup Partner Location NetSquared Local Group
Where are you on the map?

8. . © TechSoup Global | All rights reserved8
www.TechSoup.Global

9. January 2017

11. Windows
Server
2016
20 years of innovation
www.20yearsofwindowsserver.com

12. Windows Server
The foundation of our cloud

13. Cloud Services
Load Balancer
WEB ROLE
INSTANCES
Tables/NoSQL
TYPE Y
STORAGE SOLUTIONS
Database
CACHE
Blobs/Files
TYPE X
QUEUE
Virtual Machines
VIRTUAL MACHINES
STORAGE BLOBS / FILES (Virtual Disks)
…
Windows
Linux
SQL
GalleryLoad Balancer
VIRTUAL
NETWORK
COMPUTE
Virtual
Machines
Get full control over a server in the
cloud and maintain it as your
business requires.
Cloud
Services
Managed Virtual Machines with
specific web and worker roles that
are stateless
Batch
For running large scale parallel and
high performance computing
(HPC) applications
Scheduler
Create jobs that run reliably on
simple or complex schedules to
invoke any type of service.
Remote App
Access Windows apps that run
within the Service on VM’s from
any device and any location.
NETWORKING
Virtual
Network
Provision and manage VPNs in
Azure and securely link to your on-
premises IT infrastructure.
Express
Route
Connect on-premises and cloud
data centers directly through
dedicated, non-internet lines.
Traffic
Manager
Load-balance incoming global
traffic across multiple services
running in multiple data centers.
IDENTITY & ACCESS
Active
Directory
Identity and access management
for cloud applications and ability to
link to on-premises Server AD.
Multi-Factor
Authentication
Safeguard access to data and apps
with additional physical layer of
security control.
MEDIA & CDN
Content Delivery
Network (CDN)
Cache content for your apps at
100’s of edge locations to improve
user experiences.
Media
Services
Range of services that support
video on-demand and live
streaming workflows.
WEB & MOBILE
Web Apps
Managed web platform, get
started for free and scale as you
go using many tools/ languages.
Add backend capabilities to mobile
apps, with native client support on
most device platforms.
Mobile
Apps
API
Management
Publish and Manage APIs to
developers, partners and
employees securely and at scale.
Create and surface your app logic
as APIs for other services and apps
to consume.
API
Apps
Logic
Apps
Build/execute business processes
by linking your own custom API’s
with an API Gallery/Marketplace
Notification
Hubs
Deliver millions of cross platform
push notifications from any
application backend, anywhere.
GALLERY DEPLOY
YOUR
CODE
APP
TYPES
Load Balancer
API MARKETPLACE…
API APP WEB APPLOGIC APP MOBILE APP
Windows Phone
iOS
Android
Nokia X
Windows Store
iOS
Android
HTML5/JS
APP
INSTANCES
App Services
STORAGE & BACKUP
Backup
Managed service that handles
backup/restore of Windows Server
machines/backup agent.
StorSimple
Automated, policy driven solution
to extend on-premises primary
storage for backup / DR.
Site
Recovery
Coordinate replication and
recovery of System Center private
clouds
Storage Blobs
& Files
Store binary application data and
web content – store for dedicated
and shared virtual disks for VM’s
Import/Export
For massive data transfer – ship
encrypted disks to move data
in/out of blob storage.
DATA
SQL
Database
Managed relational database
service with high availability and
selectable performance levels.
DocumentDB
Store/retrieve millions of JSON
objects from a highly scalable
NoSQL document database.
Redis
Cache
Make applications scale and be
more responsive under load by
keeping data closer to app logic.
Search
Managed, scalable search service
for your apps, create tunable
search results and ranking models.
Tables
Massive scale for semi-structured
key/value type data in this
schema-less NoSQL store.
ANALYTICS
HDInsight
Big Data (based on Apache
Hadoop) analytics that integrate
easily with Microsoft Office.
Machine
Learning
Mine historical data with compute
power to predict future trends or
behavior.
Stream
Analytics
Process data streams in real-time
to discover and react to trends.
Data
Factory
Ingest data from multiple sources
to combine into a cloud based
Data Warehouse.
Event
Hubs
Ingest, persist, process millions of
events per second from millions of
devices.
Ingest, persist, process millions of
events per second from millions of
devices.
Mobile
Engagement
DEVELOPER SERVICES
Visual Studio
Online
Store code, plan and track
projects, build, deploy and test
apps in the cloud collaboratively.
Application
Insights
Analyze app usage, availability and
performance to detect issues and
solve problems proactively.
MANAGEMENT
Automation
Run durable PowerShell scripts to
automate frequent, long running,
complex Azure tasks.
Portal
Web based experience to
provision, control and monitor all
Azure services.
Operational
Insights
Analyze and troubleshoot on-
premises IT infrastructure without
using instrumented code.
Key
Vault
Safeguard and control keys and
secrets in cloud scale hardware
security modules.
HYBRID INTEGRATION
Biztalk
Services
Build EDI and Enterprise App
Integration (EAI) solutions in the
cloud.
Hybrid
Connections
Connect apps in Azure with on-
premises resources without a VPN
or dedicated line.
Service
Bus
Messaging capabilities (pub/sub,
queues) and on-premises to cloud
connectivity solution.
Storage
Queues
Simple message queue for
application de-coupling
architecture for scale out.
Store /
Marketplace
Find and manage other services
provided by third parties.
VM Depot
Find free open source VM images
that you can download and run in
Azure Virtual Machines.
COMMERCE

14. 500+
New releases in
the last 12 months

17. IT is being pulled in two directions
Support business agility
and innovation
Provide secure,
controlled IT resources
By 2017, 50% of total IT spending will be
spent outside of the formal IT organization*
*Source: Gartner Group, 2016

18. Demands on the overwhelmed IT department
CFO
CEO
Developers
Cheaper FasterBetter
Security is top
priority. I don’t
want to be the
next headline
for a breach.
We need apps
that keep us
ahead of the
competition.
We need to
run IT more
efficiently.
Where is that
compliance
report?
I can’t wait for IT
to get organized
when I can get it
done faster
outside.
But my app
worked great
when I handed
it off.

19. Windows Server design points
Provide layered
security for
emerging threats
1
Build the
software-defined
datacenter
2
Accelerate
business agility
with apps built
on Windows
Server
3

21. Privileged
identity
6

22. Malicious Attachment Execution
Browser or Doc Exploit Execution
Stolen Credential Use
Internet Service Compromise
Kernel-mode Malware
Kernel Exploits
Pass-the-Hash
Malicious Attachment Delivery
Browser or Doc Exploit Delivery
Phishing Attacks
ESPIONAGE, LOSS OF IPDATA THEFT RANSOMLOST PRODUCTIVITYBUSINESS DISRUPTION
Enter
Establish
Expand
Endgame
Network
Anatomy of an attack
User
Device

24. 3.

25. “The e-mail and Facebook accounts were set up with the ten
most common names in the age group of the targets. The
Facebook profiles had varying levels of publicly accessible
profile and timeline data—some with public photos and
profile photos, and others with minimal data. The messages
claimed the links were to photos taken at a New Year's Eve
party held a week before the study. Two sets of messages
were sent out: in the first, the targets were addressed by
their first name; in the second, they were not addressed by
name, but more general information about the event
allegedly photographed was given. Links sent resolved to a
webpage with the message "access denied," but the site
logged the clicks by each student.”
-Ars Technica, Sept. 2016

26. Challenges in protecting credentials
Ben Mary Jake Admin
Domain
admin
Typical administrator
Capability
Time
Social engineering leads
to credential theft.
Most attacks seek out and
leverage administrative
credentials.
Administrative credentials often
inadvertently provide more
privilege than necessary—and for
an unlimited time.
Privileged
identity

27. Typical administrator
Protecting privileged credentials
Ben Mary Jake Admin
Domain
admin
Just Enough and Just in Time administration
Capability
Time
Credential Guard
Prevents Pass-the-Hash and Pass-the-Ticket attacks
by protecting stored credentials through
virtualization-based security.
Remote Credential Guard
Works in conjunction with Credential Guard
for RDP sessions to deliver Single Sign-On (SSO),
eliminating the need to pass credentials to the RDP host.
Just Enough Administration
Limits administrative privileges to the bare-minimum
required set of actions (limited in space).
Just-in-Time Administration
Provides privileged access through a workflow
that is audited and limited in time.
Capability and
time needed
Privileged
identity

28. Works with Azure Multi-factor Authentication Privileged
identity
No on-premises Multi-factor
Authentication (MFA) server needed.
Use as primary or additional
authentication method.
Configure AD FS farm via PSH.
Then enable Azure MFA in AD FS policy
(as you would with other providers).
Users must proof up in AAD/O365
(no inline proofing in the AD FS user
experience).

29. Security
5

30. Challenges in protecting the OS
New exploits can attack the OS
boot-path all the way up through
applications operations.
Known and unknown threats need
to be blocked without impacting
legitimate workloads.
?
?
Security

31. Features to help protect the OS
Device Guard
Ensure that only permitted binaries can be
executed from the moment the OS is booted.
Windows Defender
Actively protects from known malware
without impacting workloads.
Control Flow Guard
Protects against unknown vulnerabilities
by helping prevent memory corruption
attacks.
Security

32. Challenges protecting virtual machines
Any compromised or
malicious fabric administrators
can access guest virtual
machines.
Health of hosts not taken into
account before running VMs.
Tenant’s VMs are exposed to
storage and network attacks.
Virtual machines can’t
take advantage of hardware-
rooted security capabilities
such as TPMs.
Security

33. Features to help protect virtual machines
Shielded Virtual Machines
Use BitLocker to encrypt the disk and state
of virtual machines protecting secrets from
compromised admins and malware.
Host Guardian Service
Attests to host health releasing the keys
required to boot or migrate a Shielded
VM only to healthy hosts.
Generation 2 VMs
Supports virtualized equivalents of
hardware security technologies (e.g., TPMs)
enabling BitLocker encryption for Shielded
Virtual Machines.
Hyper-V
Virtual machine
Computer room
Building perimeter
Physical machine
Hyper-V
Shielded virtual
machine

*
 
 
 
 
 
 
  
`
Security

34. Server
management
tools
4

35. Overview
Nano Server provides “Just
Enough” OS to reduce the
security and servicing
footprint of the OS, but
removes the familiar local
GUI that many admins use.
Server management tools
is a free toolset, hosted in
the Azure portal, that
enables you to manage
any Windows Server 2016
instance remotely,
alongside PowerShell or
other management tools.
Deployment is as simple as
installing a software
gateway in your
infrastructure, then adding
machines into the Azure
portal.
Server
Management
Tools (SMT)

36. Remote Server management tools
Web-based and cross-platform.
Includes replacements for local-
only tools, including:
Task Manager
Registry Editor
Event Viewer
Device Manager
Sconfig
Control Panel
Performance Monitor
Disk Management
Users/Groups Manager
File Explorer
Also manages Server Core
and Server with GUI.
Server
Management
Tools (SMT)

37. Use cases
Single location for
visibility to machines
on-premises or hosted
within Azure, and
accessible no matter
where the admin is.
Provides management
tools for GUI-less Nano
Server, ensuring that
admins can continue to
use familiar UX to
manage their machines
despite local GUI being
removed.
Supports cross-
platform management
allowing admins to use
their client of choice to
manage Windows
Server.
The service will
continue to be updated
frequently, adding new
tools and capabilities
without necessitating
upgrades to on-
premises infrastructure.
Server
Management
Tools (SMT)

38. Compute
3

39. Performance
“I need to remove bottlenecks and optimize resource utilization for all my
virtual machines.”
Reliability
“I need to perform updates without impacting any workloads, and make
sure hardware disruptions don’t turn into business disruptions.”
Flexibility
“I need to efficiently integrate more operating systems, storage types, and
hardware configurations into my solution and manage it seamlessly.”
Challenges customers face Compute

40. Windows Server 2016 Hyper-V scale limits
Capability
Windows Server 2012/2012 R2
Standard and Datacenter
Windows Server 2016
Standard and Datacenter
VMware vSphere 6.5
Enterprise Plus
Physical (Host)
Memory Support
Up to 4 TB per
physical server
Up to 24 TB per
physical server (6x)
Up to 6 TB per physical server
(12 TB for specific OEM certified platform)
Physical (Host) Logical
Processor Support
Up to 320 LPs Up to 512 LPs Up to 480 LPs
Virtual Machine
Memory Support
Up to 1 TB
per VM
Up to 12 TB
per VM (12x)
Up to 6 TB
per VM
Virtual Machine Virtual
Processor Support
Up to 64
VPs per VM
Up to 240 VPs
per VM (3.75x)
Up to 128
VPs per VM
Source: http://www.vmware.com/pdf/vsphere6/r60/vsphere-60-configuration-maximums.pdf
Compute

41. High-performance live migration
Complete virtual machine migration flexibility
Fast
Live migration over TCP/IP
FASTER
Live migration with compression
FASTEST
Live migration over SMB (direct)
Storage
Live migration
Shared Nothing
Live migration
Compute

42. Flexibility: Linux support on Hyper-V
Broad support: Run Red Hat, SUSE, OpenSUSE, CentOS, Ubuntu,
Debian and Oracle Linux, with full support.
Increased utilization: Run Windows and Linux side-by-side, driving
up utilization and reducing hardware costs.
Enhanced networking: Highest levels of networking performance
in Linux guests with virtual Receive Side Scaling (vRSS) support.
Storage enhancements: Hot-add and online-resize of storage for
enhanced administration flexibility.
Better protection: Better-than-physical backup support for
virtualized Linux guests on Hyper-V.
Simplified management: Single experience for managing,
monitoring, and operating the infrastructure.
PowerShell support: Use PowerShell Desired State Configuration
to declaratively specify the configuration of Linux servers.
Compute

43. Storage
2

44. Challenges customers face
Move faster
“Data volume grows faster than anything in my datacenter, and I have to be
able to move faster than it does. Scaling current storage systems takes a lot of
time and energy.”
Reduce cost
“Cost structure is too high for purchasing and maintaining SAN and NAS
arrays.”
Gain flexibility
“I want to assign storage for each application based on priority and budget.”
Storage

45. Choice
Partner SAN
Cloud-powered SAN
• Azure Site Recovery (ASR) management of hardware
replication and cross-site failover.
• Backup of traditional storage array to the cloud.
Single-pane-of-glass management
• End-to-end management with SCVMM.
• SMAPI for broad ecosystem interoperability.
• Deep health and availability insight of storage.
• Storage QoS for control of noisy neighbors.
Reducing disaster recovery costs
• In-box software replication with Storage Replica
• Lowering RPO with both sync and async replication
• Lowering RTO with Stretch Cluster and ASR automation
Fibre Channel/iSCSI/FCoE
Storage

46. Choice
On-premises storage
Storage
Microsoft offers industry leading portfolio for building on-premises clouds.
Microsoft embraces your choice of storage.
Microsoft offers solutions to reduce storage costs.
Storage Spaces
Direct
Storage Spaces
SAN Partners
Fibre Channel/iSCSI/FCoE NAS
SMB3
Microsoft Azure
Stack/Object Storage

47. Converged solution
On-premises disaggregated solution
Scale components separately
in this model.
Simultaneous scaling is possible
when compute (Hyper-V) and storage
components (Storage Spaces Direct)
reside on the same cluster.
Hyper-converged
Scale compute, storage simultaneously
Storage Software
SMB3
Virtual
machines on
Hyper-V host
Scale-out
file server
Storage Software
Virtual
Machines
Scale-out
file server
Storage Software
Storage

48. Storage Replica
Synchronous replication: Storage agnostic mirroring
of data in physical sites with crash-consistent
volumes ensuring zero data loss at the volume level.
Increase resilience: Unlocks new scenarios for metro-
distance cluster to cluster disaster recovery and
stretch failover clusters for automated high
availability.
Flexible: Server to server, cluster to cluster, and
stretch cluster. Local disks, Storage Spaces Direct,
clustered disks. NTFS, REFS, CSVFS. TCP, RDMA.
Synchronous and asynchronous.
Streamlined management: Graphical management
for individual nodes and clusters through Failover
Cluster Manager and Azure Site Recovery. Full
PowerShell and SMAPI support.
Site 1 Site 2
Storage

49. Remote Desktop
Services (RDS)
1

50. Challenges with desktop virtualization
Graphic-heavy apps can be slow to load and offer a
poor user experience.
Adding cloud-based capacity adds challenges for
managing and securing VMs.
Limited connections can lock out users at peak times.
Remote Desktop
Services (RDS)

51. Key Windows Server 2016 RDS improvements Remote Desktop
Services (RDS)
Better graphics experience
Increased performance and app
compatibility
Enhanced connection broker
Scale management, shared SQL
connections
More efficient cloud deployment
Reduced number of VMs needed
Support for cloud-managed
domain services

52. vGPU evolution Remote Desktop
Services (RDS)
vGPU
• OpenGL & OpenCL API
• 1GB dedicated VRAM
• Up to 4k resolution
• Server VM support
• Improved performance
DDA
• Full API Support
• Native GPU driver support
• Maximum Performance
vGPU
• Hyper-V integration
• DX 9 support
vGPU
• DX 11.0
• VM connect with vGPU
• GPU management
vGPU
• DX 11.1 support
• Higher video memory
• 2560 x 1600 resolution
• HCK conformant

53. Graphics enhancements – vGPU
Two ways to support vGPUs in WS 2016; DDA is new and differentiated
RemoteFX VGPU Direct device assignment
Para-virtualized
OpenGL/OpenCL/DX11
1GB VRAM/ 4K res
~30fps
Best scale
Host: WS 2016, Win 10
Guest: WS 2016, Win 10, Win 7 SP1, Win 8.1
1-1 Assignment to GPU
Full API support
Azure’s N-Series VMs supported
~60fps
Low scale
Host: WS 2016
Guest: WS 2016, WS 2012r2, Win 10 w/November
update and Linux
Remote Desktop
Services (RDS)

54. Graphics enhancement
Codec investments
High Quality 4:4:4 mode using
standard H.264/AVC 4:2:0
hardware decoders.
Windows 10 Remote Desktop
Clients use Hardware H.264/AVC
decoder when available.
Enabled by default for RemoteFX vGPU
RDP 10 sessions.
Group Policy to enable on Windows 10
1511 & Windows Server 2016 TP4.
Currently MSTSC.EXE only, other Remote
Desktop clients to follow.
Remote Desktop
Services (RDS)

55. High availability connection broker Remote Desktop
Services (RDS)
Use existing SQL Server cluster
or Azure SQL Database.
Improved connection handling
performance, 10K+concurrent
connection requests supported
in “log on storm” situations.

56. Optimized server VM architecture for the cloud Remote Desktop
Services (RDS)
Tenant 1
Tenant 1
VM
VM
Network
Storage
Compute
RDSH
VM
RDSH
VM
RDSH
VM
RDSH
VM
RDCB RDLic RDGW RDWeb
AP
Connector
Tenant1 Virtual Network
Azure
files
ADD
Domain
Services
Azure
SQL
Database
Other
tenant
services
Session desktop
collection
RemoteApp
collection (opt)
Management
portal
Load
balancer/VPN
AAD AP
Azure
services
Desktop
hosting
service
Azure
fabric
RDS 2012R2
Infrastructure
• 7 Role Services
• 8 VMs
RDS 2016+
• 4 Role Services
• 2 VMs
AAD App Proxy removes
external endpoints on
RDGW VM so RDCB, RDLic
can be combined into one
VM since the VM is no
longer exposed to the
public internet

57. Next steps
Take the next step:
www.microsoft.com/WindowsServer2016
Watch in-depth technical videos.
https://channel9.msdn.com/Blogs/windowsserver
Windows Server Blog:
http://blogs.technet.microsoft.com/windowsserver
Check out Office 365:
www.Office365.com
Check out Azure:
www.azure.Microsoft.com

58. © 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market
conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation.
MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

59. . © TechSoup Global | All rights reserved61
Where can my organization get Windows Server?

60. . © TechSoup Global | All rights reserved62

61. . © TechSoup Global | All rights reserved63
Windows Server 2016
www.techsoup.org/microsoft
www.techsoup.org/Microsoft-catalog--MSServers/MSWinServer

62. . © TechSoup Global | All rights reserved64
Microsoft Donations
http://www.techsoup.org/microsoft-software-nonprofits

63. 65
Questions?

64. . © TechSoup Global | All rights reserved66
Learn and Share!
• Chat in one thing that you
learned in today’s webinar or
will try to implement.
• Will you share this information
with your colleagues and within
your network?
• Please complete the post-event
survey that will pop up once the
webinar ends!

65. . © TechSoup Global | All rights reserved67
Get Your TechSoup Courses!

66. . © TechSoup Global | All rights reserved68
Upcoming Webinars and Events
• 1/12: I Didn't Know Adobe Acrobat Pro DC Could Do That!
• 1/19: Finding and Cultivating Local Tech Expertise and Support for
Nonprofits and Libraries
• 1/24: Get to Know GrantStation
• 1/26: Grant Writing 101: Practical Information to Help You Write
Successful Grants
• 2/1: 10 Ways TechSoup Can Help Museums and Historical Sites
• 2/8: You Can Do I.T.! How to Empower Library Staff with Basic
Tech Management Skills
Explore our webinar archives for more!

67. . © TechSoup Global | All rights reserved69
ReadyTalk offers dedicated product demos for
TechSoup organizations 4 times per week.
For more information: www.techsoup.org/readytalk
Please complete the post-event survey that will
pop up once you close this window.
Thank You to Our Webinar Sponsor!