As promised, this is the second post in a series of posts about work I\u2019m doing at the Swan Lake Christmas Hill Nature Sanctuary in Victoria. As you may recall from my first post, I said that I would document the good, the bad and the ugly! Well, here we go with some of everything!<\/p>\n
First off, SLCH is live on Office 365, at least for email. And they are reaping the benefits \u2026 phones connect, easy remote access (OWA), lots of configuration options (they are already leveraging the daylights out of Resource Calendars). Of course, a lot of this was available to them through their older SBS system but it had been misconfigured and many things simply didn\u2019t work. O365 has made it simpler and cleaner for them AND there are no worries about the backend. Win #1. Shortly they will start to leverage SharePoint and OneNote and Yammer. It\u2019s all baby steps, but steps in the right direction.<\/p>\n
I just completed a server migration and have moved them off of Server 2008 R2 Hyper-V and SBS2011 VM to Server 2012 R2 Hyper-V and a combo of two Server 2012 R2 VM\u2019s. One VM is the DC\/fileserver and the second is a RDS server to house certain apps that don\u2019t \u201cplay nice\u201d across the Internet (SLCH has two buildings connected by VPN). The DC has the \u201cServer 2012 R2 Essentials Experience\u201d role installed and we will be leveraging it to provide some friendly management tools (a la SBS) as well as friendly remote access to internal machines (again, a la SBS). The really big benefit, though, is the integrated management link with O365 that provides many of the benefits of DirSync without having to actually install and configure DirSync (or the newer versions such as AADconnect). The overall goal is to make most of the day-to-day management functions \u201ceasy\u201d and accessible to SLCH management staff without burdening them with the backend IT role.<\/p>\n
Now you may be wondering why I went ahead and built a fileserver when they have O365 and all of the cloud storage goodness that goes along with it. The biggest single reason is they have gobs of data and most of it is \u201ccruft\u201d that shouldn\u2019t go up to O365. Best to keep it local while they figure out what goes up to O365 and what should stay behind. Also, there are things that need to stay local (accounting backend, for example). In other words, they are like many other organizations that will need to run in a hybrid mode for sometime to come. I have no doubt that over the next year or so there will be a sea-change in how they look at their data and how they manage it. Having SharePoint and OneDrive and OneNote (backed by O365 storage) available will be total game changers and will allow them to change many of their processes which will change the way and the place they store data. I\u2019ll d my best to document how they leverage these tools.<\/p>\n
Like most non-profits, SLCH has \u201czero\u201d budget available so I\u2019ve had to get creative in order to provide some \u201csafeties\u201d in other areas. If you\u2019ve followed my blog you\u2019ll know that I am a Sonicwall \u201cguy\u201d, they are my firewall of choice. As there is zero budget available I\u2019ve had to look at other alternatives to Sonicwall as I really, really want to have gateway anti-virus and some of the other features of a UTM class firewall in place at SLCH. As there were available \u201csurplus\u201d PC\u2019s I turned to the opensource community for a solution \u2013 the Endian Community Firewall. While it isn\u2019t perfect by any means (what is?), the ECF provides a decent feature set including gateway a\/v, some intrusion prevention capabilities, \u201cscreened\u201d web proxy access (screens for viruses and does block a number of really bad websites) and decent VPN capabilities (we need site-to-site VPN). So, SLCH now has two ECF firewalls in place. It took a little bit to figure out the proper way to set up the site-to-site VPN but, other than that, it was a simple process to install and set up the firewall. I\u2019d still like to have Sonicwall\u2019s in place but the ECF\u2019s are way better than the Linksys\/Cisco firewalls that were previously in service simply because of the scanning capabilities. If you are strapped for funds and need firewalls, you could do worse than pick Endian. I\u2019ll also post updates on our experiences with these puppies.<\/p>\n
I\u2019m also playing with backup for the Hyper-V boxes. SLCH had Altaro Free installed (backs up two VM\u2019s, no cost) and I did reinstall the latest version of Altaro on the rebuilt Hyper-V host. Nice, simple interface and backups run reasonably fast. However, the free version does not allow for file-level restores so I am probably going to switch over to Veeam\u2019s free edition as they apparently do allow for file level restore. I\u2019m just waiting on confirmation form Veeam. Backup is critically important and being able to recover the VM in case of disaster is a major priority. But it is also critically important to be able to recover files, as well. Stayed tuned for more on this.<\/p>\n
So there you have it, major movement on a number of fronts. There will be lots more in the weeks and months ahead so keep checking back for updates!<\/p>\n","protected":false},"excerpt":{"rendered":"