Archive for the ‘Hyper-V’ Category
Hardening guide for Hyper-V on Windows 2008 R2 server core platform
OS installation phase
- Boot the server using Windows 2008 R2 bootable DVD.
- Specify the product ID -> click Next.
- From the installation option, choose “Windows Server 2008 R2 (Server Core Installation)” -> click Next.
- Accept the license agreement -> click Next.
- Choose “Custom (Advanced)” installation type -> specify the hard drive to install the operating system -> click Next.
- Allow the installation phase to continue and restart the server automatically.
- To login to the server for the first time, press CTRL+ALT+DELETE
- Choose “Administrator” account -> click OK to replace the account password -> specify complex password and confirm it -> press Enter -> Press OK.
- From the command prompt window, run the command bellow:
sconfig.cmd
- Press “2” to replace the computer name -> specify new computer name -> click “Yes” to restart the server.
- To login to the server, press CTRL+ALT+DELETE -> specify the “Administrator” account credentials.
- From the command prompt window, run the command bellow:
sconfig.cmd
- Press “1” to join the server to the domain -> press “D” to join to domain -> specify the domain name -> click “Yes” to restart the server.
- To login to the server, press CTRL+ALT+DELETE -> supply credentials of Domain admin account.
- From the command prompt window, run the command bellow:
sconfig.cmd
- Press “5” to configure “Windows Update Settings” -> select “A” for automatic -> click OK.
- Press “6” to download and install Windows Updates -> choose “A” to search for all updates -> Choose “A” to download and install all updates -> click “Yes” to restart the server.
- To login to the server, press CTRL+ALT+DELETE -> supply credentials of Domain admin account.
- From the command prompt window, run the command bellow:
sconfig.cmd
- In-case you need to use RDP to access and manage the server, press “7” to enable “Remote Desktop” -> choose “E” to enable -> choose either “1” or “2” according to your client settings -> Press OK.
- Press “8” to configure “Network settings” -> select the network adapter by its Index number -> press “1” to configure the IP settings -> choose “S” for static IP address -> specify the IP address, subnet mask and default gateway -> press “2” to configure the DNS servers -> click OK -> press “4” to return to the main menu.
- Press “9” to configure “Date and Time” -> choose the correct “date/time” and “time zone” -> click OK
- Press “11” to restart the server to make sure all settings take effect -> click “Yes” to restart the server.
- To login to the server, press CTRL+ALT+DELETE -> supply credentials of Domain admin account.
- To install the Hyper-V role, run the command bellow:
start /w ocsetup Microsoft-Hyper-V
- Click “Yes” to allow the server to restart.
- To login to the server, press CTRL+ALT+DELETE -> supply credentials of Domain admin account.
- To check that the installation completed, run the command:
oclist | find /i "Microsoft-Hyper-V"
- Run the commands bellow to enable remote management of the Hyper-V:
netsh advfirewall firewall set rule group="Remote Service Management" new enable=yes
netsh advfirewall firewall set rule group="Windows Management Instrumentation (WMI)" new enable=yes
- In case you install antivirus for Server Core, add the following to the antivirus exclusions:
- Virtual machine configuration files directory. By default, it is C:\ProgramData\Microsoft\Windows\Hyper-V.
- Virtual machine virtual hard disk files directory. By default, it is C:\Users\Public\Documents\Hyper-V\Virtual Hard Disks.
- Snapshot files directory. By default, it is %systemdrive%\ProgramData\Microsoft\Windows\Hyper-V\Snapshots.
- Vmms.exe
- Vmwp.exe
Manage Hyper-V VMs from Windows 7
- Login to a Windows 7 client using administrative account.
- Download and install the Remove Server Administration (RSAT) tools for Windows 7 from:
http://www.microsoft.com/downloads/details.aspx?FamilyID=7D2F6AD7-656B-4313-A005-4E344E43997D&displaylang=en - Open Control Panel and click Programs.
- Click Turn Window features on or off.
- Under Remote Server Administration Tools Role -> Administration Tools check Hyper-V Tools.
- Launch to tools by either typing Hyper-V Manager at the Start menu or go to Start ->Administrative Tools ->Hyper-V Manager.
Virtual Machine Servicing Tool 3.0
-
Virtual Machine Servicing Tool 3.0 helps to update offline virtual machines, templates, and virtual hard disks with the latest operating system and application patches.
Download link:
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23300
Using Authorization Manager for Hyper-V Security
-
Authorization Manager provides a flexible framework for integrating role-based access control into applications. It enables administrators who use those applications to provide access through assigned user roles that relate to job functions.
Link for more information:
http://technet.microsoft.com/en-us/library/cc726036.aspx