Roles in Windows Server2008 R2

AD Certificate Services

Official Note:

Active Directory Certificate Services (AD CS) provides customizable services for issuing and managing certificates in software security systems that use public key technologies. You can use AD CS to create one or more certification authorities (CAs) to receive certificate requests, verify the information in the request and the identity of the requester, issue certificates, revoke certificates, and publish certificate revocation data;

The areas of application supported by Active Directory Certificate Services include Secure/Multipurpose Internet Mail Extensions (S/MIME), secure wireless networks, virtual private network (VPN), IP Security (IPSEC), Encrypting File System (EFS), smart card logons, Secure Sockets Layer/Transport Layer Security (SSL/TLS) and digital signatures;

Personal notes:

AD Domain Services

Official Note:

Active Directory Domain Services (AD DS) stores information about users, computers, and other devices on the network. AD DS helps administrators securely manage this information and enable resource sharing and collaboration among users. Additionally, to install directory-enabled applications, such as Microsoft Exchange server, and to apply additional Windows Server technologies such as Group Policy, you also need to install AD DS on the network;

Personal notes:

AD Federation Services

Official Note:

Active Directory Federation Services (AD FS) provides single sign-on (SSO) technology that enables users to authenticate to multiple WEB applications using a single user account. AD FS accomplishes this by securely federating or sharing user identities and permissions among partner organizations in the form of digital declarations;

Personal notes:

AD Lightweight Directory Services

Official Note:

Active Directory Lightweight Directory Services (AD LDS) can be used as a way of storing data for organizations whose applications require directories to store application data. AD LDS runs as a non-operating system service. Therefore, AD LDS does not need to be deployed on a domain controller. Running as a non-operating system service allows multiple AD LDS instances to run concurrently on a single server, and can be configured separately for each instance to serve multiple applications;

Personal notes:

AD Right Management Services

Official Note:

Active Directory Rights Management Services is an information protection technology that works in conjunction with AD RMS-enabled applications to help protect digital information from unauthorized use. Content owners can define exactly how the recipient can use the information, such as who can open, change, print, forward, or perform other actions on the information. Organizations can create custom usage rights templates, such as "confidential-read-only", which can be applied directly to information such as financial statements, product specifications, customer data, and e-mails;

Personal notes:

Application Server

Official Note:

Application servers provide a complete solution for hosting and managing high-performance distributed business applications. such as the. NET Framework, Web server support, Message Queuing, COM +, Windows communication Foundation Integration services such as failover clustering help improve productivity throughout the application lifecycle, from design and development through deployment and operations;

Personal notes:

DHCP Server

Official Note:

Dynamic Host Configuration Protocol (DHCP) allows the server to assign IP addresses to computers and other devices that are enabled as DHCP clients, and to allow the server to lease IP addresses. By deploying a DHCP server on your network, you can automatically provide a valid IP address for your computer and other TCP/IP-based network devices, as well as other configuration parameters (called DHCP options) required by these devices, which allow them to connect to other network resources, such as DNS servers, WINS servers, and routers ；

Personal notes:

DNS Server

Official Note:

The Domain Name System (DNS) provides a standard way to associate a name with an Internet digital address. This allows the user to use the easily remembered name instead of a long list of numbers to access the network computer. You can integrate the Windows DNS service and the DHCP service so that you do not need to add DNS records when you add computers to the network;

Personal notes:

Fax Server

Official Note:

Fax servers can send and receive faxes, and allow you to manage fax resources on this computer or network, such as jobs, settings, reports, and fax devices;

Personal notes:

File Server

Official Note:

The file service provides technologies such as storage management, file replication, distributed namespace management, fast file search, and simplified client file access, such as UNIX-based client computers;

Personal notes:

Hyper-V

Official Note:

Hyper-V provides services that you can use to create and manage virtual computing environments and their resources. The virtual machine operates in an isolated operating environment. This allows you to run multiple operating systems at the same time. You can use a virtualized computing environment and use multiple hardware resources to improve the efficiency of your computing resources;

Personal notes:

Network Policy and Access Services

Official Note:

Network Policy and access services provide a number of different ways to provide users with local and remote network connections and to connect network segments, and allow network administrators to centrally manage network access and client health policies. Using the Network access service, you can deploy VPN servers, dial-up servers, routers, and wireless access protected by 802.11. You can also deploy RADIUS servers and proxies and use the Connection Manager Administration Toolkit to create remote access profiles that allow client computers to connect to the network;

Personal notes:

Print and Document Services

Official Note:

Print and file services allow you to centralize print server and network printer management tasks. With this role, you can also receive scanned documents from network scanners, sending documents to shared network resources, Windows SharePoint Services sites, or e-mail addresses;

Personal notes:

Remote Desktop Services

Official Note:

Remote Desktop Services provides technologies that allow users to access Windows-based programs installed on Remote Desktop servers from almost any computing device, or to access the Windows desktop itself. Users can connect to a Remote Desktop server to run programs and use network resources on that server;

Personal notes:

Web Server (IIS)

Official Note:

The WEB server (IIS) role in Windows server R2 allows you to share information with users on the Internet, Intranet, or Extranet. Windows Server R2 provides IIS 7.5, a unified Web platform that integrates IIS, ASP. NET, and Windows communication Foundation;

Personal notes:

The service that the server uses when building the website.

Window Deployment Services

Official Note:

You can use Windows Deployment Services to remotely install and configure the Windows operating system on a computer with a pre-boot execution Environment (PXE) boot ROM. The WDSMGMT Microsoft Management Console (MMC) snap-in manages all aspects of Windows deployment Services, and implementing the snap-in will reduce administrative overhead. Windows Deployment Services can also provide end users with an experience that is consistent with the use of Windows Installer;

Personal notes:

Window Server Update Services

Official Note:

Windows Server update Services allows network administrators to specify which Microsoft updates should be installed, to create separate groups of computers for different update groups, to obtain reports about the compatibility level of the computer, and the updates that must be installed;

Personal notes:

Roles in Windows Server2008 R2