Efficiently deploy secure servers

A quicker way to update all the hotfixes and SPs on a new Win2K installation.

Microsoft failed to meet their promised deadline for the release of SP3 for Windows 2000 Server. This has left system managers juggling the dozens of post SP2 hotfixes whenever they deploy a new system. The process of installing each hotfix individually can take hours, primarily due to the need to reboot after each hotfix.

Fortunately, there is an easier solution for deploying systems with all the latest hotfixes applied. Just think, wouldn't you love to turn on the power to a new system, make a few quick menu selections and then walk away to return later to a complexly installed, ready-for-deployment system? We all would.

To accomplish this seemingly Herculean task, all you need is a RIS server, the SP and hot fix files and a few utilities. One of the utilities is the Microsoft QCHAIN tool. QCHAIN is used to install multiple hotfixes with a single reboot (see Knowledge Base Document Q296861). You need to write a short script using QCHAIN to install the hotfixes as part of an automated install through RIS. The other utility is the RIS Menu Editor from 3Com. This tool is used to create an image file for RIS from a bootable installation disk. With these items at hand, you'll create a RIS image of Windows 2000 Server, add in your scripts, and you'll be ready to deploy a fully up-to-date Windows 2000 Server with little more effort than switching on the power supply.

But wait, you say RIS won't install Server product? Well, by design and right out of the box it can't. However, RIS can be easily fooled into installing just about any Microsoft OS using the right utilities -- the RIS Menu Editor for instance -- and a few configuration changes.

I wish I could take credit for this outstanding manipulation of RIS to offer functionality administrators have been screaming for. But I can't. However, I can sing the praises of the technical author who expounded upon this excellent exploitation of Microsoft technologies in his own online article. Mark Minasi's article "Roll Out Secure Servers" discusses the details of this activity. I highly recommend you take a few moments to read his material, especially if you want to learn the nitty-gritty details of how to accomplish this feat.

In addition to the primary article by Mark Minasi, you'll need to review three articles by Douglas Toombs that detail how to exploit RIS. Those articles are:

Superior RIS: Deploying Alternative OSs
Superior RIS: Automating Application Setups
Superior RIS: Customizing Win2K Installs

I hope this new capability will help save your time and your sanity. It sure has for me!


About the author
James Michael Stewart is a researcher and writer for Lanwrights, Inc.


This was first published in July 2002

Dig deeper on Windows Server Consolidation Strategies

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close