Network Interface 나열

Netsh interface ipv4 show interfaces

(구성할 NIC의 IDX 번호 기억)

NIC의 IP 설정

Netsh interface ipv4 set address name=[IDX] source=static address=[static ip] mask=[subnet mask] gateway=[default gateway]

NIC의 DNS 서버 설정

Netsh interface ipv4 add dnsserver name=[IDX] address=[dnsip] index=1

원격 데스크탑 설정

Cscript c:\windows\system32\scregedit.wsf /ar 0

(0은 활성, 1은 비활성)

원격 데스크탑 설정 상태 보기

Cscript c:\windows\system32\scregedit.wsf /ar /v

(0은 활성, 1은 비활성)

원격 데스크탑의 보안 강화 레벨 비활성

Cscript c:\windows\system32\scregedit.wsf /cs 0

방화벽의 원격 데스크탑 허용

Netsh advfirewall firewall set rule group=”Remote Desktop” new enable=yes

방화벽의 파일 및 프린터 공유 허용

Netsh advfirewall firewall set rule group=”File and Printer sharing” new enable=yes

Administrator 암호 변경

Net user administrator *

서버 이름 설정

Netdom renamecomputer [currentcomputername] /NewName:[newcomputername]

도메인 참가

Netdom join [computername] /domain:[DomainName] /userd:[UserName] /password:*

도메인 탈퇴

Netdom remove

시간 설정

Control timedate.cpl

자동 업데이트 설정

Cscript c:\windows\system32\scregedit.wsf /au 4

자동 업데이트 끄기

Cscript c:\windows\system32\scregedit.wsf /au 1

자동 업데이트 설정 보기

Cscript c:\windows\system32\scregedit.wsf /au /v

서버 활성화 (정품 인증)

Slmgr.vbs –ipk [Product Key]  <- 제품키 입력

Slmgr.vbs –ato  <- Activation

Slmgr.vbs –dlv  <- 라이선스 상태 확인

페이징 파일 설정

Wmic pagefileset where name=[path/filename] set Initialsize=[initialsize],MaximumSize=[maxsize]

Active Directory Promotion

다음 내용을 TXT 파일로 저장 후 Dcpromo /unattend:[TXT 파일]

(DNS Server Role 설치, Functional Level : Windows Server 2008)

[DCInstall]

ReplicaOrNewDomain=Domain

NewDomain=Forest

NewDomainDNSName=DOMAIN.COM

ForestLevel=3

DomainNetbiosName=DOMAIN

DomainLevel=3

InstallDNS=Yes

ConfirmGc=Yes

CreateDNSDelegation=No

DatabasePath="C:\Windows\NTDS"

LogPath="C:\Windows\NTDS"

SYSVOLPath="C:\Windows\SYSVOL"

SafeModeAdminPassword=P@ssw0rd

DNS Reverse Lookup Zone 구성 (ex: 192.168.1.0)

dnscmd localhost /ZoneAdd 1.168.192.in-addr.arpa. /DSPrimary

net stop DNS

net start DNS

역할 설치

http://technet.microsoft.com/en-us/library/cc753802.aspx

Hyper-V Role 설치

Start /w ocsetup Microsoft-Hyper-V

기능 설치

start /w ocsetup <feature name>(대소문자 구분)

기능: Feature Name

Failover Cluster: FailoverCluster-Core

Network Load Balancing: NetworkLoadBalancingHeadlessServer

Subsystem for UNIX-bases applications: SUA

Multipath IO: Microsoft-Windows-MultipathIO

Removable Storage Management: Microsoft-Windows-RemovableStorageManagementCore

Bitlocker Drive Encryption: BitLocker

Backup: WindowsServerBackup

Simple Network Management Protocol (SNMP): SNMP-SC

WINS: WINS-SC

제공할 기능

추가할 서버 역할

사용 클라이언트

내부 사용자를 위한 IM과 상태정보 제공

추가 서버 없음

Communicator 2005/2007

On-premise Web Conferencing

Standard Edition:
추가 서버 없음

Enterprise Edition:
Web Conferencing Server
Web Components Server

Live Meeting 2007 client

Address Book Server

Standard Edition:
추가 서버 없음

Enterprise Edition:
Web Components Server

Archiving and Call Detail Records

Archiving and CDR Server

외부 사용자 접근

Access Edge Server
HTTP reverse proxy

Communicator 2005/2007

Federation

Public IM Connectivity(PIC)

외부사용자와의 Web conferencing

Web Conferencing Edge Server
HTTP reverse proxy

Live Meeting 2007 client

외부사용자와의 Audio/Video Conferencing

A/V Conferencing Edge Server

Live Meeting 2007 client

웹 브라우저 기반 클라이언트에 대한 IM과 상태정보 제공

Communicator Web Access Server

Communicator Web Access

Enterprise Voice

Mediation Server and basic media gateway
OR
basic-hybrid media gateway
(Mediation Server + basic media gateway)
OR
advanced media gateway
(Mediation server logic + gateway)

Communicator 2007
OR
Office Communicator 2007 Phone

Access Edge Server

Public IM, Federation, 내부 사용자의 원격 접근 지원, 내부에서 외부로 Conference, Voice 기능을 위해 연결 지원

Office Communications Server 2007 server or pool and, optionally, a Director

Session Initiation Protocol (SIP)

Web Conferencing Edge Server

External Web conferencing

Web Conferencing Server

Persistent Shared Object Model (PSOM)

A/V Edge Server

A/V conferences with external users Point-to-point A/V calls with external users

A/V Conferencing Server

RTP/RTCP, Simple Traversal of UDP through NAT (STUN)/

Reverse Proxy

Group Expansion(배포그룹 확장) 과 주소록 파일 다운로드에 필요. 웹 컨퍼런싱을 위한 회의 자료(ppt) 에 접근하기 위해 필요

Web server (IIS)

HTTP(s)

Standard Edition server

All server roles (which are collocated)

Enterprise CA.

FQDN of the Standard Edition Server

If you have multiple SIP domains and have enabled automatic client configuration, the certificate wizard detects and adds each supported SIP domain FQDNs. (The wizard detects any SIP domains you specified during setup and automatically adds them to the SAN)

Additionally, you must use the IIS administrative  snap-in to assign  the certificate used by the Web Component Server

Enterprise pool: consolidated

All server roles. Certificate configured on each Enterprise Edition Server

Enterprise  CA.

FQDN of the pool

For the Web Components Server role, the certificate must have the URL of the internal Web farm in the SN or SAN.

If you have multiple SIP domains and have enabled automatic client configuration, the wizard detects the SIP domains, adds them to the SAN, and then adds each supported SIP domain FQDN.

(The wizard detects any SIP domains you specified during setup and automatically adds them to the SAN)

For the Web Components Server role, the certificate must have the URL of the internal Web farm in the SAN (if the FQDN is different from the pool FQDN).

Certificate must be installed on each server in the pool.

Additionally, you must use the IIS administrative snap-in to assign the certificate used by the Web Component Server.

Enterprise pool: expanded

Front End

Enterprise CA

FQDN of the pool

If you have multiple SIP domains and have enabled automatic client configuration, add each supported SIP domain FQDN.

(The wizard detects any SIP domains you specified during setup and automatically adds them to the SAN)

Certificate must be installed on each server in the pool

Web Conferencing

Enterprise CA

FQDN of the pool

Certificate must be installed on each server in the pool

A/V Conferencing

Enterprise CA

FQDN of the pool

Certificate must be installed on each server in the pool

Web Components

Enterprise CA

FQDN of the VIP (virtual IP) of the load balancer used by the Web Components Server

SAN must contain the URL of the internal Web farm in the SAN (if the FQDN is different from the pool FQDN)

A certificate has to be configured in IIS on the all servers that are running the Web Component Services

Director,
Standard Edition

Director

Enterprise CA

FQDN of Standard Edition Server

If you have multiple SIP domains and have enabled automatic client configuration and all clients use this Director for logon, add each supported SIP domain FQDN.

(The wizard detects any SIP domains you specified during setup and automatically adds them to the SAN)

Director,
Enterprise pool

Director

Enterprise CA

FQDN of the pool

If you have multiple SIP domains and have enabled automatic client configuration and all clients use this Director for logon, add each supported SIP domain FQDN.

.

Array of Standard Edition Directors

Director

Enterprise CA.

FQDN of the Director Server

FQDN of Director Server and the FQDN of the virtual IP (VIP) used by the array

If you have multiple SIP domains and have enabled automatic client configuration and all clients use this Director for logon, add each supported SIP domain FQDNs.

FQDN of the server is in the SUBJECT field

FQDN of the Director VIP and the FQDN of the server must be in the SUBJECT_ALT_NAME as DNS values

Front End Servers

5060/5061

TCP

MTLS

Used by Standard Edition Servers and Enterprise pools for all internal SIP communications between servers and between servers and Office Communicator

Front End Servers

443

HTTPS

Communication from front-end servers to the Web farm FQDNs (the URLs used by Web Components)

Front End Servers

444

HTTPS

Communication between the focus (Office Communications Server component that manages conference state) and the conferencing servers

Front End Servers

135

DCOM and RPC

Used when a load balancer is deployed, port 135 is used by the Front End Servers for WMI operations and moving users (a remote DCOM-based database operation)

Web Components 

443

TCP

HTTPS traffic to the pool URLs

Web Conferencing Server

443

TLS

HTTPS communications to Web Components Servers

Web Conferencing Server

444

TLS

HTTPS between the Web Conferencing Server and the Front End Server

Web Conferencing Server

8057

TLS

Used to listen to direct PSOM connections from Live Meeting client

A/V Conferencing Server

5063

TCP

Used for incoming SIP listening requests

A/V Conferencing Server

49152 – 65535 media port range

UDP

Port range used for media requests sent.

Reverse Proxy

443

TCP

Used for SIP/TLS communications from external users on both the internal and external firewalls for external user access

Access Edge Server

5061

TCP

Used for SIP/MTLS communication for remote user access or federation.

Access Edge Server

443

TCP

Used for SIP/TLS communication for remote user access

Web Conferencing Edge Server

8057

TCP

Used to listen for PSOM/MTLS communications from the Web Conferencing Server  on the internal interface of the Web Conferencing Edge Server

Web Conferencing Edge Server

443

TCP

Used for inbound communications for access of remote, anonymous and federated users to access internal Web conferences

A/V Edge Server

443

TCP

Used for STUN/TCP inbound and outbound media communications to allow external users to access media and A/V sessions

A/V Edge Server

5062

TCP

Used for SIP/MTLS authentication of A/V users. Communications flow outbound through the internal firewall.

A/V Edge Server

3478

UDP

Used for STUN/UDP inbound and outbound media communications

A/V Edge Server

50,000-59,999

RTP/TCP

Used for inbound and outbound media transfer through the external firewall.

Office Communicator

5060

TCP (SIP)

Used by Office Communicator for SIP communications internally

Office Communicator

5061

TCP (SIP)

Used by Office Communicator for SIP communications internally and for SIP/MTLS authentication of A/V users. Communications flow outbound through the internal firewall

Office Communicator

443

TCP (HTTP)

Used by Communicator clients connecting from outside the intranet for SIP communications

Office Communicator

1024-65535

UDP/TCP

Port range used for inbound and outbound media transfer through the external firewall.

Office Communicator

6891-6901

TCP

Port ranged used by Office Communicator for file transfer.

Live Meeting 2007 client

443

TCP

Used by Live Meeting 2007 clients connecting from outside the intranet for:

SIP traffic sent to the Access Edge Server

PSOM traffic sent to the Web Conferencing Edge Server

Live Meeting 2007 client

8057

TCP

Used for outgoing PSOM traffic sent to the Web Conferencing Server

Live Meeting 2007 client

5061

TCP

Used for SIP/TLS communication between Live Meeting and the Front End Servers or the Access Edge Server and for SIP/MTLS authentication of A/V users. Communications flow outbound through the internal firewall

Live Meeting 2007 client

1024-65535

UDP/TCP

Port range used for inbound and outbound media transfer through the external firewall

Live Meeting 2007 client

6891-6901

TCP

Port ranged used by Live Meeting for file transfer