David Ziembicki on Infrastructure Architecture : System Center

TechReady9 Day 4 and 5 Wrap-up

davidzi — Sat, 01 Aug 2009 01:46:22 GMT

Day 4 and 5 of TechReady were action packed, I didn’t even have time to post yesterday. I skipped the first session timeslot on Thurs to prepare for the double session I was presenting with Citrix. The double session format basically allocates two sessions (3 hours) to one topic letting you get into a lot more detail. The session went very well and the feedback surveys so far have been very positive. We spent the first half of the session describing the Microsoft+Citrix VDI solution and its components. The second half was filled with demos of the solution with different types of clients accessing VDI sessions and walkthroughs of the administrator consoles.

After my session and some internal meetings, I attended a session on Microsoft’s Dynamic Datacenter Toolkit. I haven’t had much time to explore this yet but will be focusing on that a lot in the next couple months. For an example of a hosting partner using this solution, check out MaximumASP.com and their MaxV solution.

Finally on Day 4 I attended a session on the Remote Desktop Services (RDS) improvements in Windows Server 2008 R2, particularly the built-in VDI solution. I’ve been so focused on the Microsoft+Citrix solution that I haven’t had time to dig into the Microsoft in-box solution. This is being positioned toward branch and or lower complexity environments while the Microsoft+Citrix solution is targeted toward large or higher complexity implementations. The improvements to RDP and Hyper-V are the real enablers for the VDI scenarios in R2.

Day 5 opened with multiple demos of Office 2010 and Office Web Applications which are really going to open up completely new scenarios for rich collaboration. Next was a keynote from my favorite Microsoft executive, Bob Muglia, head of the Server and Tools Business. Bob covered improvements in Windows, Hyper-V, SharePoint, SQL. The thing TechReady is best for is stepping back and seeing the scope of this release of software we are going to have this year and the solid advancement in capability and features on almost all fronts simultaneously.

After taking care of some logistical items, I attended a session on Hyper-V security. Not much new info in that one, basically there is good security guidance for Hyper-V in the Windows Server 2008 Security Guide as well as the Hyper-V Resource kit. Finally, I attended a session on Windows 7 and Windows Server 2008 R2 branch office infrastructure. This covered the new Branch Cache feature which can substantially reduce bandwidth utilization in branches by caching content as well as other new features and improvements to SMB, DFS, etc.

All in all, TechReady9 was a great time. I’ve still got a list of sessions that I want to see that is longer than the list of sessions that I actually saw! I’m glad they were all recorded…

Tomorrow and Sunday I’ll be teaching a 2-day VDI class along with some MCS and Citrix colleagues. Should be a good class, the students will learn about and set up the entire Microsoft+Citrix VDI solution over the course of the two days. Then finally on Monday I will head home after almost two and half weeks on the mothership!

Completing 5 days of Forefront Protection Suite (Stirling) Training

davidzi — Tue, 28 Jul 2009 18:12:00 GMT

Last week I came out to Redmond for 5 days of training on the Forefront Protection Suite, formerly Forefront codenamed “Stirling”. The final name was announced at the Worldwide Partner Conference:

Forefront codename “Stirling” - the next generation of the Forefront Security Suite for integrated, comprehensive protection across endpoints, servers and the edge – will be officially known as Forefront Protection Suite (FPS).

FPS will include the products in the current suite, plus the Forefront Protection Manager (formerly known as the “Stirling” management console) and the Forefront Threat Management Gateway Web Security Service.

The training was pretty interesting. We covered most of the components of the suite, the console, and the integration between all the components. That integration is going to be the real differentiator. Client, Server, and Edge security can all be tightly integrated as well as Network Access Protection (NAP). The solution is built on top of PowerShell so there are significant automation capabilities even beyond the in box solutions.

With very capable component pieces and many integration points, there are a huge number of implementation scenarios and options. This can be very powerful but also a bit daunting until you gain experience with the products. The suite leverages the System Center infrastructure, particularly Operations Manager.

I came away from the 5 days pretty impressed with the suite and the scenarios it enables but also with a healthy respect for the effort required to implement the solution. If the appropriate time and resources are allocated, the end result can be a very robust security infrastructure and most importantly a single console providing situational awareness and reporting across the entire security infrastructure.

If you want to take a look at the suite yourself, the Beta2 release is available here both in installable form and in a pre-configured virtual machine.

Dynamically Provisioning Customized Virtual Machines with VMM

davidzi — Wed, 01 Jul 2009 02:46:07 GMT

There’s a good technical post over on Chris Adam’s blog about how to dynamically provision customized virtual machines by using System Center Virtual Machine Manager and unattend.xml. The unattend.xml file is used in combination with a sysprep’d image and applies customization (things like computer name, installed roles, etc) that are specified in the XML file. Chris’s post explains how this can be done very easily in VMM.

This post was timely as I have been working on some unattended installations and other automation for a customer I am working with. With all the focus on the back and forth with competitors at the virtualization layer, it almost seems like the workload and configuration inside the VM is “getting no respect”.

In any event, the unattended installation realm can be intimidating at first. There are multiple ways of accomplishing most tasks, there is an enormous amount of things in Windows that can be customized, etc. Microsoft makes a large number of resources available such as the Windows Automated Installation Kit, Microsoft Deployment Toolkit, etc. There are beta updates to these for Win7, R2, etc. that can be found on Bing.com.

For a very detailed treatment on all of these topics, check out the Deploying Vista series over on WindowsNetworking.com Most of the content is the same for Windows 2008 servers as well. This article on Technet is quick and direct step-by-step guide for a basic automated installation. Between the info Chris provided and some of these resources, you’ll be well on your way to dynamic VM provisioning.

Hyper-V and VMM: Scale Up, Out, and to the Cloud

davidzi — Fri, 15 May 2009 00:44:32 GMT

Between MMS and TechEd there have been a lot of announcements on the virtualization and cloud computing front. First, over on the Virtualization Team Blog, Jeff provided the announcement and details around some new capabilities coming in Hyper-V with Windows Server 2008 R2:

64 logical processor support. A 4x improvement over Hyper-V R1 and means that Hyper-V can take advantage of larger scale-up systems with greater amount of compute resources.

Support for up to 384 Concurrently Running Virtual Machines & 512 Virtual Processors PER SERVER. We are increasing the maximum number of concurrently running virtual machines to 384 per server and the maximum number of virtual processors to 512 for the highest virtual machine density on the market.

Processor Compatibility. Processor compatibility allows you to move a virtual machine up and down multiple processor generations from the same vendor. This does not mean you can live migrate between Intel and AMD nodes, just between different generations from the same vendor.

Not to be outdone, the VMM team announced a bunch of new features that will be in their Release Candidate coming out in a few weeks:

Storage Migration
Queuing of Live migrations
Rapid Provisioning
Host compatibility checks
Support for 3rd party CFS
Support for Veritas Volume Manager

Combined, these new features from both teams enable some key scenarios at both the entry level and high end of the spectrum. One of the major advantages of our stack is that it is very approachable from an entry level since it leverages so much of what your administrators already know and beginning with Microsoft Hyper-V Server 2008 R2 SKU, will be available with all of the high end features (Clustering, Live Migration, etc) for free. Within a couple hours a Windows admin can become proficient with the basics of Hyper-V and be up and running (for free!). Within a few days at most, the ability to implement basic clustering, HA, and Quick/Live migration can be achieved. At the high end, very advanced architectures can be implemented including VMM, OpsMgr, deep SAN integration, etc. This is where our technical guidance, solution accelerators, and service offerings come into play.

To see an example both of how this stack is being leveraged by commercial providers as well as an example use case for enterprises wishing to use the cloud as reserve capacity, check out the video below demoing a future version of VMM and how it will integrate private and public cloud capacity seamlessly:

Are Solid State Drives in your Windows 7 Future?

davidzi — Wed, 06 May 2009 00:15:13 GMT

The E7 blog has an interesting article on SSD performance and optimizations made in Windows 7 to take advantage of them. The E7 post also links to an in depth AnandTech article that goes into more detail on SSD’s and has some benchmark comparisons between various drives. I’m definitely planning to get an SSD drive when I get my new laptop in a couple months. I’ll likely be getting one of the large workstation class laptops like the Dell M6400 or the Lenovo W700. The only thing that might make me wait longer is if we get a release schedule from Intel on their Clarksdale mobile processors which are basically mobile Nehalems for laptops. I’m leaning toward the M6400 since it has dual internal hard drive bays and supports up to 16GB of RAM which is insane for a laptop. With the two drive bays I figure I’ll run an 80GB SSD for the OS and get a large 7200 RPM SATA for the other bay. I’ll go with 8GB of RAM initially for budget purposes and expand next year when the prices come down. I’ll be dual booting (or booting from VHD) between Windows 7 and Windows Server 2008 R2. With the OS and Apps on an SSD that setup should really fly.

A new scenario that may be interesting (and demo a good chunk of our virtualization and VDI capability would be to set up a full Windows Server 2008 R2 / VMM 2008 R2 infrastructure on this machine. Basically run 2 – 3 VMs for the infrastructure to present a Windows 7 VDI client virtual machine. Then from the physical OS use Remote Desktop Services to access the Windows 7 VM. With Aero remoting I should get a near desktop like experience.

Back to SSDs, in addition to desktop/laptop scenarios, I’m hearing more and more about them in enterprise storage scenarios. A lot of the big vendors have really evolved their architectures over the last five years to take advantage of and virtualize different tiers of disk architectures and SSD are getting slotted in as the next tier closest to the cache in a lot of cases. From a virtualization perspective this will be interesting as I think SSD’s will be an enabler for somewhat better density and a lot better performance. Since I’ve been doing a lot of work recently with Hyper-V and Citrix’s Provisioning Server, I’m especially interested in seeing how VDI performance on pooled (shared virtual disk) scenarios is improved using Windows 7 VMs and SSDs on the Provisioning Server.

MMS Keynote Streaming Live Now

davidzi — Tue, 28 Apr 2009 19:11:00 GMT

MMS Day 1 Keynote: Bob Kelly, Microsoft corporate vice president, April 28, 2009, 8:30 am PT

Is the CMDB just a dream?

davidzi — Mon, 27 Apr 2009 16:00:24 GMT

Glenn O'Donnell over at Forrester had a great post titled “Is a CMDB even possible?” that I just came across. As you may know, CMDB stands for Configuration Management Database and is typically defined as a single repository holding all configuration items (systems, applications, etc) and their relationships. The idea of a CMDB has been a core tenet ITIL for a long time. Late last year I invested a substantial amount of time over a couple months pursuing (and achieving) the ITIL Service Manager certification (ITIL v2). In earning that credential and interacting with a lot of other ITIL trained people over the years at various customers, the CMDB concept seams to be the one concept that resonates the most with people. I think this is because it is really the only area in ITIL v2 that has a bit of a technical nature to it whereas the primary focus is process. Since a lot of folks that participate in ITIL training are IT folks, I think they tent to naturally gravitate toward the technical.

In any event, while I haven’t had time to dig into ITIL v3 in any detail yet, one of the big changes is that it moves away from evangelizing a single, monolithic CMDB and toward a Configuration Management System (CMS) that may be made up of several different management systems. Glenn’s article goes into the reasoning for this and he has some thoughts on where this might be going in terms of federating different management systems.

The rush toward the holy grail of a single CMDB consumes a lot of people and resources when the newly “indoctrinated” come back from ITIL training. I think that outcome was the biggest flaw in the definition and delivery of ITIL v2 and I’m glad it has been changed in V3 to a much more feasible approach.

In terms of the Microsoft stack, obviously System Center is where these concepts are and will be instantiated. System Center Service Manager will be bringing a lot of capability in this space. This week at MMS there are at least 9 sessions on Service Manager.