My first SBS 2008 deployment

The past few days were rather busy – i’ve spent them revamping the current network and infrastructure of a small business – deploying new PCs and the first SBS 2008.

First, lets talk about the hardware. It’s important to know that small businesses handle their infrastructure completely differently than large businesses, and in my opinion there are some things that require “unusual” thinking.

Reliability: an SBS server is extremely critical for operation of a small business and they usually do not replace servers after three years

Maintainability: small businesses do not have dedicated IT personnel. Usually, most “heavy” tasks are done by an IT service provider, and the daily IT tasks are done inhouse by someone as a secondary job

Functionality: small businesses are sometimes just as demanding as larger companies – the small size requires setups that maximize the productivity of each employee

So, there are three main aspects one should focus on when deploying an SBS server.

Reliablity is a key aspect. An SBS server is critical for the business and this requires hardware that is highly capable and reliable. After all, an SBS server can serve a Business for up to five years without replacing the hardware. This is why it makes sense to buy really good hardware that lasts that long, combined with appropriate maintenance contracts to get it back up in case you run into problems.

In this case, we decided to use the following hardware:

IBM System x3500
Intel Quadcore 2.66 Ghz 12M (leaving 1 slot available)
10 GB Memory (leaving 6 slots available)
8 2.5″ 147GB 10kRPM SAS Disks (leaving 4 slots available)
ServeRAID 8k with 256MB BBWC (for the first 8 disks)
ServeRAID 8s with 256MB BBWC (for the other 4 disks)
Disk configuration:
RAID 1 consisting of two 147GB Disks
RAID 5 consisting of five 147GB Disks
Global Hotspare
IBM SAS HBA (for tapedrive)
LTO4 SAS attached HH internal tapedrive
Redundant fans & power
IBM Remote Supervisor Adapter II
5Y of IBM ServicePac with committed service option

As you can see, the system has lots of storage and redundancy. It’s also important to know that the SBS server does not run any third party applications (except those necessary for operation), the ERP runs on an IBM POWER machine. With SBS 2008, i would not recommend running any third party applications on the SBS itself – if necessary to run third party apps on a server, purchase SBS premium and run the third party apps on the second server.

The second aspect is ease of use, for which we should use software that can be automated as well as possible. SBS handles lots of things on his own, but we opted for a third party backup application because we still see tape backups as the best way to fulfill most of a customers needs. Especially since LTO drives have WORM media, that can help to comply with certain local laws.

As for the software, i’ve installed BackupExec 12.5 to handle the backups to tape. Tape backups are easier to handle for customers, offer superior performance, and make archival and external storage of data easy. Unfortunately, BackupExec 12.5 does not integrate with the SBS Console (yet?).

For virus scan, we’ve opted for McAfee VirusScan Enterprise. A central management application was unfortunately not yet available, so we deployed McAfee manually on each client, and on the server.

Exchange is protected using ForeFront for Exchange, which has served me well in the past.

SBS 2008 has a nice reporting function, but there are other important notifications: the RSA Adapter notifies for all hardware failures like power supplies, fans, etc. independently through e-mail (which can contact external adresses and even works if the failure killed the server), and allows remote troubleshooting in case the machine does not boot. ServeRAID manager and BackupExec also send daily reports to be viewed by the customer.

Last, but not least, is functionality. After all, customers aren’t like me that want an SBS because they like technology – no, they want an SBS to fulfill certain needs their business has.

In this case, there were several unique requirements regarding mailflow – thanks to the included Exchange 2007 server, which offers a very flexible transport rule system i was able to implement these requirements without having to purchase third party software or even program event sinks on our own.

So far, i’ve had zero issues with SBS 2008 – it worked without any problems and hardware support wasn’t a problem either. Looks like IBM got all the kinks figured out since the release of Windows Server 2008 at the beginning of the year.

The System x3500 is also very nice hardware – it looks like a tower variant of the x3650, which i also like very much. The only criticism i have for the machine is that installing the redundant fan kit is total pain in the ass, mostly because the documentation covers both the x3400 and x3500, and some parts don’t apply for the x3500 (but aren’t marked as such).

It shows that IBM can still deliver top notch hardware at affordable prices.

In case you couldn’t figure it out from reading this far, i really like SBS 2008, and it’s ready for action in a production environment. In case you’re thinking about deploying a new SBS, go with SBS 2008!

13 Comments

  1. Shaq:

    Would you mind disclosing some costs of hardware?

  2. Lukas Beeler:

    Shaq,

    I think it was around 10k.

  3. leon:

    It’s really complex, “Would you mind disclosing some costs of hardware?” me too…

  4. it security:

    It looks like will be only for businesses and corporations. well I think that 10K are not so much, having in mind what this “baby” can do for you and your biz. Also – share it with us: the real price – this will be great.

  5. lackum:

    can you do backups on the tape drive? I understand tape drives are not supported in SBS 2008

    tx,

  6. Jim:

    I setup a similar system, but I can’t get BE 12.5 to send me alerts. Is there something special that you need to do?

  7. varj:

    lackum: i really really dislike the backup-program bundled with 2008, but you can still use ntbackup: http://blog.crowe.co.nz/archive/2008/06/02/Windows-Server-2008–Exchange-Server-2007–NO-SUPPORTED.aspx

  8. phishtrader:

    Did you have any problems configuring Backup Exec 12.5 to backup Exchange 2007? I am using BE 12.5 in conjunction with removable USB drives at a client and so far I am not impressed. Using the USB drives with the native SBS 2008 backup utility was considerably easier and more reliable, however it does not offer any remote agents.

  9. Paul:

    We had problems with AD (domain [controller] not found) until we added the IPV6 address of the server to the DNS.
    Hope that helps someone saving time…

  10. acooljerk:

    Hi, I’m also using an x3500 machine, and planning to add an LTO4 SAS internal tape drive.
    However, I am still not sure where I will connect the SAS connector from the tape drive, since all SAS connectors (2) at the mainboard have been used.

    I read that you’re using a SAS HBA. Does the LTO4 SAS internal tape drive connect to that card?

    Many thanks.

  11. Lukas Beeler:

    acooljerk,

    Yes, you need to purchase a SAS HBA. The onboard ServeRAID 8k controller cannot drive tape drives, and it also has no connections for doing so.

  12. Bryan Linton:

    Regarding your comment about a centralized management application not being available for McAfee VirusScan Enterprise:

    I’ve been using VirusScan Enterprise for years, and they certainly DO provide centralized management software. Smaller businesses used to get ProtectionPilot as part of their Active Virus Defense SMB package. McAfee recently phased out that “lite” version of their centralized management software, so now all businesses, large and small, rely on the full, enterprise-class ePolicy Orchestrator as the management solution for McAfee products, including VirusScan Enterprise. They are currently at version 4.0. It’s a mature product and very full-featured, so some IT people will find it fairly complex to get up and running, but it works well. I rarely worry about my antivirus – when I configure a new machine on my network, the machine is detected, and the agent is automatically deployed to bring the machine under management, which then installs and configures all McAfee products automagically.

    My two cents.

  13. Dennis Henry:

    How did you get Backup Exec to push to tape? I can only configure it to create the restore points on an external drive. It doesn’t recognize the tape drive?

Leave a comment