Introduction

Viewing from this standpoint, it will be to adjusting Windows LLC’s benefit if the Windows Server 2016 is assimilated and integrated into the zones of administration and security in the 3 cities where it has been established. Places such as Dallas, Houston, and Los Angeles with views to advance its spread through the country soon, in specific areas as well. The aim of this proposed network is so that the Win Server 2016 can be engaged to take up administrative details like Group Policy, Remote Services, Active Directory, File Services, and Windows Server Update Services. Also noted in the proposal are how significant sectors like the security of data, names of domains, maintenance of the windows package, and availability to remote offices are to be handled without affecting Fixing Windows LLC’s business targets and aims.

Active Directory

The domain sample of the region of the Fixing Windows LLC structure of an Active Directory is such that a point would be labeled as the forest root while the other points are labeled as the domain trees in the domain design. In this proposal, the Houston office will be taken as the domain root and the 2 others in Los Angeles and Dallas the regional domains, as revealed in Figure 1 below. It creates an avenue for Fixing Windows LLC to keep a balanced terrain with time (Technet).

 

 

 

 

 

 

 

 

 

 

 

Houston.corp.FixingWindows.com

Trust

 

DD     Domains

 

 

 

Dallas.corp.FixingWindows.com                                            La.corp.FixingWindows.com

Fig. 1

When giving the domain names, since the Houston office stands as the root domain, we would be naming it Houston.corp.Fixing Windows.com, the positioned office in Los Angeles would be called La.corp.Fixing Windows.com, and the Dallas office would be called Dallas.corp.Fixing Windows.com. So using a region-based domain model, for a single fresh office lunched in any position, a domain corresponding to it can be made to align the new office with the others in the company (Panek 2018). To reduce expenses, connections that are too many should not be found on the Wide Area Network servers with the aim of not causing traffic and jamming. To accomplish this at each of the three offices, there will be domain controllers, problematic processes to log in will be revised, and increased will be seen in the yield rate. With Houston and Dallas being the main offices, the Los Angeles office will have a Read-only Domain Controller. As given by Microsoft.com, these controllers are proficient for office parts that need secure steady, fast, and excellent services to perform authentication. Some of them also have qualities of security that disallow any installation of another controller with a writable domain (Technet). Therefore, the office at Houston will have a controller of the primary domain that has a remote access server while the Dallas office will possess a Read-only Domain Controller with a remote access server.

Group Policy

It is not an excellent idea to have the default password to a system, but it is even more crucial not to access it without a password as a network breach could cost the organization significantly. With Group Policy Objects (GPO), the configuration can be made to check complexities of password, how many times a user can try entering the wrong password before they are locked out of the system, and more. GPOs have the included significance of the alternative of which event log to use in making a report about incidents on the network. The setting up of User Account Control (UAC) for workstations can harden them to discard any malicious software trying to access the machine in the network without the right credential (Panek, 2018). It is always suitable for any default password to be replaced as fast as possible and more vital in this case because a simple hack could bring down the whole Server, which will endanger the company massively.

Domain Name Service (DNS)

Domain Name Service functions by assigning IP addresses to hostnames. To be functional for the company, the Domain Name Service name for external and public use will be Fixing Windows.com, and for those in the company, it will be intranet.Fixing Windows.com. With this, there is a chance for the Multimaster replication (“How to Install and Configure DNS on Windows Server 2016”, 2017), and the communication of Domain Name Service data is well guarded. Consequently, Domain Name Service is required by Active Directory Domain Service to permit clients to make use of domain controllers (Technet) with ease.

Files Services

The data security is hugely consequential to the company by the type of work done by Fixing Windows LLC. Password and Encryption security will be placed in drives to make sure that data is unreachable in the event of loss or theft. The totality of the network would be set up with New Technology File System security permissions to have files access control. With the usage of the New Technology File System, the hard drive space would be given to clients so they cannot go beyond their space (Panek 2018) and this checks the space usage and makes sure a client is not making use of more space on the storage server than the other. Since there are 3 different points where Fixing Windows LLC is placed and not just in a single location, it might be a necessity for each of the locations to be permitted to view and make use of files from the other 2 locations.

To achieve such a possibility with the location, Distributed File Services will be activated as it permits the alternative to place shared files from several servers in a group and give them to a single appropriate namespace that takes the form of one folder shared among servers and containing different subfolders in it (Technet 2013). Distributed File Services also avails a folder to be given to different servers across the 3 locations. Data from a server is then ordered to sync with that from others by duplicates among them (Kowalski, Dymora & Mazurek, 2017). Users will then be able to access files which their access gives them only with the aid of access based enumeration settings. Distributed File Services has lots of advantages, like a reduction on traffic and ensure smooth connection, the ability to allocate file access at random, to various hard drives to manage the workload on them, and gives a reply when there are many users at the same time (Technet 2013). Distributed File Services gives enhanced access and absorbs fault.

File Server Resource Manager will be fixed to check the disk quota. The File Server Resource Manager is one of the new advancements on the software in the File and Storage Services server group, and it helps the classification and management of data as they are being stored. It gives increase regulation power on folder quotas by giving the ability to examine files and delete undesirable ones and spontaneously creates a report on the storage following conditions and bounds set on it (Techtarget.com). Administrators can also utilize operations and functions according to stated limits based on their classification.

The regulation of the type of files users can put in the disk storage is regulated by file screening. It holds that if a specific user is not needed to put individual files of a particular format, with the aid of file screening, he can be choked off from storing them on the servers. Quota management is a desirable alternative to File Server Resource Manager because it records and takes note of space by figures used or by folder. Space of Storage is checked by calculating the number of space left at every point in time, so the real space left is known per time. A message of warning can be sent to the user’s mail when the space they are using up is getting near to their given space or if they are storing up data they are not permitted to or when they forfeit other restrictions stated already in the Server. It is candid for the administrator to take the user’s history log and make a report on their events.

Remote Services

The windows network proposal needs to have protected access distantly connected to the company at Houston for the sales personnel at Los Angeles. To achieve this, a Virtual Private Network will be created and installed on the Windows Server 2016 to connect them through reliable encryption. There are specific 4 criteria to be accomplished in using Virtual Private Network in security access. The Internet Key Exchange version two is the particular 1 to be used for Fixing Windows LLC. It has well specific security and enhanced methods of connection that reestablish active connections online as soon as possible in situations of loss of network. It also makes use of both smart card authentication and certificate authentication. Joined with it are lots of security protocols, including data confidentiality, data reliability, and data source authentication. It also has structures to take out possibilities of Denial of Service attacks and enhances security by utilizing number error modification, sequences, and acknowledgments (Juniper.net 2016).

A user can be granted access to log in safely from wherever the user is into the network whenever that particular user in the company is to work anywhere outside the company. At one instance or the other, there may be a hack on the Virtual Private Network’s security even though it is secure and encrypted. With such reason, users making use of the Server from a distance should be educated on the catastrophes that can come if they haphazardly leave their device around or in any way gets into the hands of hackers, and they excerpt confidential information from it. Making use of Routing and Remote Access Service assist to control and manage remote access servers. It is candid about setting up and can supervise all the events going on the Server and permitting them access for the purpose of the record and security (Panek 2018).

Windows Server Update Services (WSUS)

Windows Server Update Services permits administrative users to circulate and regulate necessary and essential advances to their windows environment (Panek 2018). It is essential to install Windows Server Update Services so that fresh features from Microsoft servers and Fixing Windows LLC’s servers are unexpectedly utilized and obtained. It allows no chance for the oversight of any significant update from Microsoft software. The practice of new features and essential patches should be examined in a protected space first before it is assimilated for use on the main servers. All of the Update Servers should be programmed to implement and acquire significant updates from Microsoft servers automatically. Clients’ devices can also be programmed to spontaneously get updates directly from the Microsoft update servers, also like the usage of bandwidth is not a deterrent at all on Fixing Windows LLC’s network, and it should be able to grip it.

Windows Deployment Services will be made to install a new server into the network. Administrative users generate Custom images as they make capture boot images. So the established format will be put in use once the purpose for a new server arises to be installed on Fixing Windows LLC’s network. By so doing, time in establishing a new server is saved by the administrative users, and thus, efficiency is maximized as the servers perform their duties properly.

Using Software Defined Networking and High-Performance Network

Enactment must be done using software-defined networking in Windows Server 2016. The center for data management manages the routers, switches, gateways, and virtual network devices through a single console. It tolerates easy control and central management of all devices. It typically entails of 3 layers; the virtual network or physical, the application layer, and the control system (Panek, 2018).

The high-performance networking solution is a central feature of the Windows Server 2016. It acts as a significant role in certifying real-time data processing. It is severe for disaster recovery and confirming high performance through distributed computing (Panek, 2018). High-performing networking is used when there is a call to move a bulk of data with low latency of the network. The high-performance network makes use of techniques such as NIC teaming, quality of service, Datacenter bridging, receive-side scaling and SMB multichannel

Conclusion

In conclusion, the proposal for Fixing Windows LLC to start to make usage of the Windows Server 2016 includes the secure management of Windows Server Update Services, Domain Name Service, Active Directory, Remote Services, and Group Policy. The Houston and Los Angeles locations will be configured to be the domains of the region. All locations are safely and securely connected with end-to-end encryption. All of the 3 locations will have their controller domain with the Los Angeles location possessing a Read-only domain controller.

 

 

 

 

 

 

How to Install and Configure DNS on Windows Server 2016. (2017). Retrieved 15 April 2020, from https://www.itechguides.com/how-to-install-and-configure-dns-on-windows-server-2016/

Juniper.net. (2016, March 23). Support: Juniper. Retrieved from Juniper.net: http://www.juniper.net/documentation/en_US/junos12.3×48/topics/concept/vpn-security-ikev2-understanding.html

Kowalski, D., Dymora, P., & Mazurek, M. (2017). Failover clustering in Microsoft Windows Server 2016. Scientific Journals Of Rzeszów University Of Technology, Series: Electrotechnics, 57-65. doi: 10.7862/re.2016.10

Technet. (n.d.). Technet.Mircrosoft.com. Retrieved from https://technet.microsoft.com/en-us/library/cc785975(v=ws.10).aspx

Technet. (2013, November 13). Technet.microsoft.com. Retrieved from https://technet.microsoft.com/en-us/library/jj127250(v=ws.11).aspx

Techtarget.com. (n.d.). SearchWindowsserver.TechTarget.com. Retrieved from http://searchwindowsserver.techtarget.com/definition/File-Server-Resource-Manager-FSRM

Panek, W. (2018). MCSA Windows Server 2016 Study Guide. Newark: John Wiley & Sons, Incorporated.