Windows Server 2008

Windows Server 2008 is a third server operating system produced by Microsoft and based on Windows NT 6.0. It was released to manufacturing on February 4, 2008, and reached general availability on February 27, 2008, about 13 months after the launch of the Windows Vista operating system. Windows Server 2008 is the successor of Windows Server 2003, the server version of Windows based on Windows XP, released nearly five years earlier.

History

Originally known as Windows Server Codename "Longhorn", Microsoft chairman Bill Gates announced its official title during his keynote address at WinHEC 16 May 2007.
Beta 1 was released on July 27, 2005; Beta 2 was announced and released on May 23, 2006, at WinHEC 2006 and Beta 3 was released publicly on April 25, 2007. Release Candidate 0 was released to the general public on September 24, 2007 and Release Candidate 1 was released to the general public on December 5, 2007. Windows Server 2008 was released to manufacturing on February 4, 2008, and officially launched on 27th of that month.

Features

Windows Server 2008 is built from the same codebase as Windows Vista and thus it shares much of the same architecture and functionality. Since the codebase is common, Windows Server 2008 inherits most of the technical, security, management and administrative features new to Windows Vista such as the rewritten networking stack ; improved image-based installation, deployment and recovery; improved diagnostics, monitoring, event logging and reporting tools; new security features such as BitLocker and address space layout randomization ; the improved Windows Firewall with secure default configuration;.NET Framework 3.0 technologies, specifically Windows Communication Foundation, Microsoft Message Queuing and Windows Workflow Foundation; and the core kernel, memory and file system improvements. Processors and memory devices are modeled as Plug and Play devices to allow hot-plugging of these devices. This allows the system resources to be partitioned dynamically using dynamic hardware partitioning - each partition has its own memory, processor and I/O host bridge devices independent of other partitions.

Server Core

Windows Server 2008 includes a variation of installation called Server Core. Server Core is a significantly scaled-back installation where no Windows Explorer shell is installed. All configuration and maintenance is done entirely through command-line interface windows, or by connecting to the machine remotely using Microsoft Management Console. However, Notepad and some control panel applets, such as Regional Settings, are available.
Server Core does not include the.NET Framework, Internet Explorer, Windows PowerShell or many other features not related to core server features. A Server Core installation can be configured for several basic roles, including the domain controller, Active Directory Lightweight Directory Services, DNS Server, DHCP server, file server, print server, Windows Media Server, Internet Information Services 7 web server and Hyper-V virtual server roles. Server Core can also be used to create a cluster with high availability using failover clustering or network load balancing.
Andrew Mason, a program manager on the Windows Server team, noted that a primary motivation for producing a Server Core variant of Windows Server 2008 was to reduce the attack surface of the operating system, and that about 70% of the security vulnerabilities in Microsoft Windows from the prior five years would not have affected Server Core.

Active Directory

The Active Directory domain functionality that was retained from Windows Server 2003 was renamed to Active Directory Domain Services.

Active Directory Federation Services enables enterprises to share credentials with trusted partners and customers, allowing a consultant to use their company user name and password to log in on a client's network.
Active Directory Lightweight Directory Services,
Active Directory Certificate Services allow administrators to manage user accounts and the digital certificates that allow them to access certain services and systems. Identity Integration Feature Pack is included as Active Directory Metadirectory Services.
Active Directory Rights Management Services
Read-only domain controllers, intended for use in branch office or other scenarios where a domain controller may reside in a low physical security environment. The RODC holds a non-writeable copy of Active Directory, and redirects all write attempts to a full domain controller. It replicates all accounts except sensitive ones. In RODC mode, credentials are not cached by default. Also, local administrators can be designated to log on to the machine to perform maintenance tasks without requiring administrative rights on the entire domain.
Restartable Active Directory allows ADDS to be stopped and restarted from the Management Console or the command-line without rebooting the domain controller. This reduces downtime for offline operations and reduces overall DC servicing requirements with Server Core. ADDS is implemented as a Domain Controller Service in Windows Server 2008.
All of the Group Policy improvements from Windows Vista are included. Group Policy Management Console is built-in. The Group Policy objects are indexed for search and can be commented on.
Policy-based networking with Network Access Protection, improved branch management and enhanced end user collaboration. Policies can be created to ensure greater Quality of Service for certain applications or services that require prioritization of network bandwidth between client and server.
Granular password settings within a single domain - ability to implement different password policies for administrative accounts on a "group" and "user" basis, instead of a single set of password settings to the whole domain.
Failover Clustering

Windows Server 2008 offers high availability to services and applications through Failover Clustering. Most server features and roles can be kept running with little to no downtime.
In Windows Server 2008, the way clusters are qualified changed significantly with the introduction of the cluster validation wizard. The cluster validation wizard is a feature that is integrated into failover clustering in Windows Server 2008. With the cluster validation wizard, an administrator can run a set of focused tests on a collection of servers that are intended to use as nodes in a cluster. This cluster validation process tests the underlying hardware and software directly, and individually, to obtain an accurate assessment of how well failover clustering can be supported on a given configuration.
This feature is only available in Enterprise and Datacenter editions of Windows Server.

Disk management and file storage

The ability to resize hard disk partitions without stopping the server, even the system partition. This applies only to simple and spanned volumes, not to striped volumes.
Shadow Copy based block-level backup which supports optical media, network shares and Windows Recovery Environment.
DFS enhancements - SYSVOL on DFS-R, Read-only Folder Replication Member. There is also support for domain-based DFS namespaces that exceed the previous size recommendation of 5,000 folders with targets in a namespace.
Several improvements to Failover Clustering.
Internet Storage Naming Server enables central registration, deregistration and queries for iSCSI hard drives.
Self-healing NTFS: In Windows versions prior to Windows Vista, if the operating system detected corruption in the file system of an NTFS volume, it marked the volume "dirty"; to correct errors on the volume, it had to be taken offline. With self-healing NTFS, an NTFS worker thread is spawned in the background which performs a localized fix-up of damaged data structures, with only the corrupted files/folders remaining unavailable without locking out the entire volume and needing the server to be taken down. S.M.A.R.T. detection techniques were added to help determine when a hard disk may fail.
Hyper-V

Hyper-V is hypervisor-based virtualization software, forming a core part of Microsoft's virtualization strategy. It virtualizes servers on an operating system's kernel layer. It can be thought of as partitioning a single physical server into multiple small computational partitions. Hyper-V includes the ability to act as a Xen virtualization hypervisor host allowing Xen-enabled guest operating systems to run virtualized. A beta version of Hyper-V shipped with certain x86-64 editions of Windows Server 2008, prior to Microsoft's release of the final version of Hyper-V on 26 June 2008 as a free download. Also, a standalone version of Hyper-V exists; this version supports only x86-64 architecture. While the IA-32 editions of Windows Server 2008 cannot run or install Hyper-V, they can run the MMC snap-in for managing Hyper-V.

Windows System Resource Manager

Windows System Resource Manager is integrated into Windows Server 2008. It provides resource management and can be used to control the amount of resources a process or a user can use based on business priorities. Process Matching Criteria, which is defined by the name, type or owner of the process, enforces restrictions on the resource usage by a process that matches the criteria. CPU time, bandwidth that it can use, number of processors it can be run on, and allocated to a process can be restricted. Restrictions can be set to be imposed only on certain dates as well.

Server Manager

Server Manager is a new roles-based management tool for Windows Server 2008. It is a combination of Manage Your Server and Security Configuration Wizard from Windows Server 2003. Server Manager is an improvement of the Configure my server dialog that launches by default on Windows Server 2003 machines. However, rather than serve only as a starting point to configuring new roles, Server Manager gathers together all of the operations users would want to conduct on the server, such as, getting a remote deployment method set up, adding more server roles etc., and provides a consolidated, portal-like view about the status of each role.

Protocol and cryptography

Support for 128- and 256-bit AES encryption for the Kerberos authentication protocol.
New cryptography API which supports elliptic curve cryptography and improved certificate management.
Secure Socket Tunneling Protocol, a new Microsoft proprietary VPN protocol.
AuthIP, a Microsoft proprietary extension of the IKE cryptographic protocol used in IPsec VPN networks.
Server Message Block 2.0 protocol in the new TCP/IP stack provides a number of communication enhancements, including greater performance when connecting to file shares over high-latency links and better security through the use of mutual authentication and message signing.
Miscellaneous
Fully componentized operating system.
Improved hot patching, a feature that allows non-kernel patches to occur without the need for a reboot.
Support for being booted from Extensible Firmware Interface -compliant firmware on x86-64 systems.
Dynamic Hardware Partitioning supports hot-addition or replacement of processors and memory, on capable hardware.
Windows Deployment Services replacing Automated Deployment Services Windows Server 2008 home entertainment and Remote Installation Services. Windows Deployment Services supports an enhanced multicast feature when deploying operating system images.
Internet Information Services 7 - Increased security, Robocopy deployment, improved diagnostic tools, delegated administration.
Windows Internal Database, a variant of SQL Server Express 2005, which serves as a common storage back-end for several other components such as Windows System Resource Manager, Windows SharePoint Services and Windows Server Update Services. It is not intended to be used by third-party applications.
An optional "desktop experience" component provides the same Windows Aero user interface as Windows Vista, both for local users, as well as remote users connecting through Remote Desktop.
Removed features
The Open Shortest Path First routing protocol component in Routing and Remote Access Service was removed.
Services for Macintosh, which provided file and print sharing via the now deprecated AppleTalk protocol, has been removed. Services for Macintosh were initially removed in Windows XP but were available in Windows Server 2003.
NTBackup is replaced by Windows Server Backup, and no longer supports backing up to tape drives. As a result of NTBackup removal, Exchange Server 2007 does not have volume snapshot backup functionality; however Exchange Server 2007 SP2 adds back an Exchange backup plug-in for Windows Server Backup which restores partial functionality. Windows Small Business Server and Windows Essential Business Server both include this Exchange backup component.
The POP3 service has been removed from Internet Information Services 7.0. The SMTP service is not available as a server role in IIS 7.0, it is a server feature managed through IIS 6.0.
NNTP is no longer part of Internet Information Services 7.0.
ReadyBoost, which is available in Windows Vista, is not supported in Windows Server 2008.
Editions

Most editions of Windows Server 2008 are available in x86-64 and IA-32 versions. These editions come in two DVDs: One for installing the IA-32 variant and the other for x64. Windows Server 2008 for Itanium-based Systems supports IA-64 processors. The IA-64 version is optimized for high-workload scenarios like database servers and Line of Business applications. As such, it is not optimized for use as a file server or media server. Windows Server 2008 is the last 32-bit Windows server operating system.
Editions of Windows Server 2008 include:

Windows Server 2008 Foundation for OEMs only
Windows Server 2008 Standard
Windows Server 2008 Enterprise
Windows Server 2008 Datacenter
Windows Server 2008 for Itanium-based Systems
Windows Web Server 2008
Windows HPC Server 2008
Windows Storage Server 2008
Windows Small Business Server 2008 for small businesses
Windows Essential Business Server 2008 for medium-sized businesses - this edition was discontinued in 2010.

The Microsoft Imagine program, known as DreamSpark at the time, used to provide verified students with the 32-bit variant of Windows Server 2008 Standard Edition, but the version has since then been removed. However, they still provide the R2 release.
The Server Core feature is available in the Web, Standard, Enterprise and Datacenter editions.

Updates

Windows Server 2008 shares most of its updates with Windows Vista due to being based on its codebase.

Service Pack 2

Due to the operating system being based on the same codebase as Windows Vista and being released on the same day as the initial release of Windows Vista Service Pack 1, the RTM release of Windows Server 2008 already includes Service Pack 1.
Service Pack 2 was initially announced on October 24, 2008 and released on May 26, 2009. Service Pack 2 added new features, such as Windows Search 4.0, support for Bluetooth 2.1, the ability to write to Blu-ray discs, and simpler Wi-Fi configuration. Windows Server 2008 specifically received the final release of Hyper-V 1.0, improved backwards compatibility with Terminal Server license keys and an approximate 10% reduction in power usage with this service pack.
Windows Vista and Windows Server 2008 share the same service pack update binary because the codebases of the two operating systems are unified - Windows Vista and Windows Server 2008 are the first Microsoft client and server operating systems to share the same codebase since the release of Windows 2000. The predecessors to Windows Vista and Windows Server 2008, Windows XP and Windows Server 2003, had unique codebases that used their own updates and service packs.

Platform Update

On October 27, 2009, Microsoft released the Platform Update for Windows Server 2008 and Windows Vista. It backports several APIs and libraries introduced in Windows Server 2008 R2 and Windows 7 to Windows Server 2008 and Windows Vista, including the Ribbon API, DirectX 11, the XPS library, the Windows Automation API and the Portable Device Platform. A supplemental update was released in 2011 to provide improvements and bug fixes.

Internet Explorer 9

Windows Server 2008 shipped with Internet Explorer 7, the same version that shipped with Windows Vista. The latest compatible version of the browser with Windows Server 2008 is Internet Explorer 9, released in 2011. Internet Explorer 9 was continually updated with cumulative monthly update rollups until support for Windows Server 2008 ended on January 14, 2020.

.NET Framework

The latest supported version of the.NET Framework officially is version 4.6, released on October 15, 2015.

TLS 1.1 and 1.2 support

In July 2017, Microsoft released an update to add TLS 1.1 and 1.2 support to Windows Server 2008, however it is disabled by default after installing the update.

SHA-2 signing support

Starting in March 2019, Microsoft began transitioning to exclusively signing Windows updates with the SHA-3 algorithm. As a result of this Microsoft released several updates throughout 2019 to add SHA-2 signing support to Windows Server 2008.

Monthly update rollups

In June 2018, Microsoft announced that they would be moving Windows Server 2008 to a monthly update model beginning with updates released in September 2018 - two years after Microsoft switched the rest of their supported operating systems to that model.
With the new update model, instead of updates being released as they became available, only two update packages were released on the second Tuesday of every month until Windows Server 2008 reached its end of life - one package containing security and quality updates, and a smaller package that contained only the security updates. Users could choose which package they wanted to install each month. Later in the month, another package would be released which was a preview of the next month’s security and quality update rollup.
Installing the preview rollup package released for Windows Server 2008 on March 19, 2019, or any later released rollup package, will update the operating system kernel’s build number from version 6.0.6002 to 6.0.6003. This change was made so Microsoft could continue to service the operating system while avoiding “version-related issues”.
The last non-extended security update rollup packages were released on January 14, 2020, the last day that Windows Server 2008 had extended support.

Extended Security Updates

Windows Server 2008 is eligible for the Extended Security Updates program. This program allows volume license customers to purchase, in yearly installments, security updates for the operating system until at most January 10, 2023. The licenses are paid for on a per-machine basis. If a user purchases an Extended Security Updates license in a later year of the program, they must pay for any previous years of Extended Security Updates as well. Extended Security Updates are released only as they become available.