Chapter 4: Configuring Network Application Services
There are two more server roles that you need to study in order to prepare for exam 70-643: Windows Media Server and Windows SharePoint Services. These are distinct from other server roles in that they provide unique network services and each has its own requirements for installation and maintenance. Another technology covered in this chapter is Windows Media Rights Manager, which is designed to apply digital rights management policies on video and audio media. One characteristic all of these share is that none is included on the Windows Server 2008 installation media, they are available as free downloads from Microsoft’s website.
Windows Media Server is a streaming media server that organization’s can use to deliver both live and prerecorded digital media over the Internet and internal networks. It includes support for both Windows Media Video (WMV) and Windows Media Audio (WMA) formats. Windows SharePoint Services is a flexible technology designed to improve productivity by helping teams of all sizes to communicate and collaborate more efficiently and effectively. Windows SharePoint Services facilitates the sharing of different types of information including documents, schedules, and project plans across organizational boundaries. In this chapter you will learn how to:
There are 32-bit and 64-bit versions of Windows Media Server available for full installations of Windows Server 2008 and Server Core installations. You will need to download the appropriate file from the list here: http://www.microsoft.com/downloads/details.aspx?FamilyId=9CCF6312-723B-4577-BE58-7CAAB2E1C5B7&displaylang=en. They vary in size between 10 and 17 megabytes. For your practice lab I suggest you download the appropriate version for a full installation on Windows Server 2008. Windows Media Server uses port 80 for some functionality, before proceeding I suggest that you completely remove the Web Server server role and anything that requires it if you had previously installed it on the server. Alternatively, you can bind Windows Media Server and IIS to different ports and IP addresses. Execute the downloaded file, after you complete the installation wizard Server Manager will be updated with information about the Streaming Media Services server role, you may need to restart Server Manager. When you install the new role in your practice lab only add the Windows Media Server role service and install both data transfer protocols: Real Time Streaming Protocol (RTSP) and Hypertext Transfer Protocol (HTTP).
RTSP was designed for unicast streaming of digital content, it supports user-friendly features such as stopping, rewinding, and fast-forwarding but it is only available in Windows Media Player 9 or later and Windows Media Services 9 or later. HTTP is supported over a wider variety of clients and network architectures but it does not support as many features. The URL to the stream determines client behavior, if it includes RTSP (e.g. rtsp://media1/vid.wmv) then the client will automatically negotiate the best protocol to use. If the URL includes RTSPU (e.g. rtspu://media1/vid.wmv) then the client will be forced to use RTSP, you should avoid forcing the protocol whenever possible.
Open Windows Media Services from the Administrative Tools folder. Expand the server and all of its nodes in the navigation tree, as shown in figure 1. The two major services that Windows Media Services provides is hosting streaming media and acting as a caching and proxy server, you can see nodes for managing each of these capabilities in the navigation tree. You can see several tabs in the details pane, and at the bottom of the details pane a row of action buttons that you click to perform tasks such as stopping the service or blocking additional clients.

Figure 1: The Windows Media Services Management Tool.
Windows Media Services uses the term publishing point to describe a streaming media event. A publishing point can consist of a live stream of audio or video, one or more static files that clients can play in whatever order they prefer, or a playlist that includes live streams or static files played in the sequence you specify. There are two default publishing points which you can examine to get an idea of what the server role can do. For practice, create a new one by doing the following:
You probably do not have Media Player installed on your practice server, so you cannot use the feature for testing your announcement. Select the publishing point you just created in the navigation tree. You can see a summary report of how the publishing point is being used by selecting the Monitor tab. Note the functions of each button at the bottom of the details pane. Click the Source tab to see the list of files in the playlist, you may have noticed that the buttons at the bottom of the page are different, this is the case with each tab. Some of the buttons on this page are only accessible when the publishing point is stopped. Click the Advertising tab. There are links you can click to learn more about configuring advertising in general and interstitial advertising in particular but you can configure wrapper advertisements on this tab. You can configure and run unicast and multicast announcements on when you access the Announce tab. The Properties tab is the most complex of all; you select an item from the Category list, right-click on a Property, and then choose a command such as Enable, Disable, or Properties to modify it, as shown in figure 2.

Figure 2: Configuring Publishing Point Properties.
This is another case where you do not need to memorize every detail of the user interface, but you should understand how to navigate the management tool and remember that it works differently than the other tools you worked with in previous chapters. To make it easier for users to find your streaming content you can create an announcement using the Unicast Announcement Wizard and the Broadcast Announcement Wizard. The announcement is a Windows Media metafile with information about how to connect to the stream.
What we have discussed so far is the process of creating and managing on demand content, that is, digital media that has already been recorded. Another important feature of Windows Media Services is streaming live content in real-time. This introduces several new elements: the event being observed, the microphone or camera recording the event, and the encoding computer attached to the recording device. The encoding computer takes the digital content from the camera or microphone and converts it into the Windows Media Format which it then publishes on a URL that Windows Media Services accesses. Figure 3 shows an example of live event made available to both unicast and multicast clients.

Figure 3: Example of Streaming of Live Content.
Note: Multicast streaming is not available on the Standard Edition of Windows Server 2008.
Windows Media server can be configured as a cache/proxy server or as a reverse proxy server to ease the workload on other Windows Media server. To enable this feature select the server in the navigation tree, select Cache/Proxy Management in the Category list, right-click WMS Cache Proxy in the Plug-in list and click Enable as shown in figure 4.

Figure 4: Enabling WMS Cache Proxy.
To configure WMS Cache Proxy right-click WMS Cache Proxy in the Plug-in list and select Properties. You can specify which protocol the WMS Cache Proxy plug-in will use on the General tab. Select the Cache tab to configure how much disk space the plug-in can utilize, the cache location, and the caching speed. You also use this tab to enable Play While Archiving, which allows the server to start streaming content to clients before the content has been completely cached from the source server. To specify whether the server is a standard proxy, proxy redirect, or reverse proxy click the Proxy tab. Select the Prestuff tab to configure the server to cache streaming content from the origin server even if no clients have requested it, this can improve the users’ experience by limiting delays when they do request the prestuffed content. Use the Query tab to find and delete cached files from the server.
How frequently the caching servers update content is configured on the origin server, to do so do the following:
Who knew Windows sysadmins would be creating digital media and protecting the content with digital rights management (DRM)? Well, I never expected to and was surprised to see DRM on the list of objectives for exam 70-643. If you think I am joking take a look for yourself: http://www.microsoft.com/learning/exams/70-643.mspx. Granted, it is a small part, but its there! The software is called Windows Media Rights Manager (WMRM), but Microsoft strictly limits distribution of this product. I cannot get a copy of it, it would probably be a waste of your time to try to get one. There is some documentation online, for example, Windows Media Rights Manager 10 SDK. For the exam I do not think that you need to know how to install and configure WMRM, but you should understand what its purpose is and how it can be used to protect digital content from unauthorized use.
WMRM is a digital rights management (DRM) platform that can be used to distribute digital media while limiting what viewers can do with the content. Digital media files are packaged in an encrypted format, with a file header that includes usage and distribution rules. The process is shown in figure 5, and described below:

Figure 5: Creating and Delivering Content with WMRM
As the systems administrator for either the distributor or clearinghouse you would download WMRM; install WMRM; get a license, certificate list, and revocation list from Microsoft; create a script to install the license keys; and customize the WMRM web site that is created during the installation process. At that point you should be able to start the packaging and licensing process by accessing the sample pages, located at http://web.dillard.test/wm/package.asp, substituting your server name for mine. You are presented with a form where you specify the file to be packaged, the output file to create, and the type of License acquisition URL. Then you click Package to create the encrypted file. Other sample pages and scripts are included for creating different types of licenses, batch processing, and other common procedures. You publish the packaged file so that users can acquire it. Then you deploy another WMRM server that runs the licensing service, users request licenses from this service as described in step 6 above.
Windows SharePoint Services is a Windows Server 2008 server role, however you have to download the installation package. There are separate downloads for 32-bit and 64-bit Windows, each is over 100 megabytes:
Windows SharePoint Services has several prerequisites to be aware of. You need to install the package which includes service pack 1, using an earlier version of the installer that is not bundled with service pack 1 will cause the installation to fail. You must install the .NET Framework version 3.0 before installing this server role. Windows SharePoint Services also requires the Web Server role and the Windows Internal Database, these will be installed automatically if they are not already present. If you are using the same server for Windows SharePoint Services that you used for Windows Media Services you should uninstall that server role or shut down the service in order to avoid contention over TCP port 80. Launch the Windows SharePoint Services installer, accept the terms of Microsoft’s software license then choose the Basic install and complete the wizard. The SharePoint Products and Technologies Configuration Wizard should start automatically, if it does not you need to open it from the Administrative Tools folder before proceeding. Accept the defaults and complete the wizard. Now you need to Add the SharePoint site to the list of trusted sites by doing the following:
Internet Explorer will open and render the SharePoint site, you could start customizing it and adding content if you wished.
There are some things you can configure by connecting to the SharePoint site with an account that has administrative privileges, such as granting accounts permissions to access and manage the site. Click People and Groups from the menu on the left, select the desired group on the left, then click New and select either Add Users or New Group as shown in figure 5. There are 3 built-in team site groups: Members can contribute content, Owners have full control over the site, and Visitors and view content. The other changes you can make to the site are all related to adding and modifying content and the appearance of the site, which I believe are outside of the scope of this exam. SharePoint is great technology for collaboration though, I encourage you to explorer it further to see if its something your organization can take advantage of.

Figure 6: Configuring SharePoint Users and Groups.
All other SharePoint administration is accomplished using the server’s administrative website. Open SharePoint 3.0 Central Administration from the administrative tools folder, provide administrative credentials if prompted to log in.
You can use Windows Server Backup to backup Windows SharePoint Services sites, services, and data. For many organizations this will be the ideal solution to ensure the content is backed up daily. You can also use the backup features built into Windows SharePoint Services. Both approaches are discussed in this section.
You need to adjust some registry keys in order to use Windows Server Backup with SharePoint. Use the Registry Editor to create a new key named WindowsServerBackup at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\. Select the new key and create a key called Application Support, select it and create a new key called {c2f52614-5e53-4858-a589-38eeb25c6184}. Select this key and create a new string value called Application Identifier and set it to Windows SharePoint Services. Create a new DWORD (32-bit) value called UseSameVssContext and set it to 00000001. In summary, you should have two new values as follows:
After making these changes Windows Server Backup should be able to backup Windows SharePoint Services data and content reliably. For information on using Windows Server Backup refer to Maintaining the Active Directory Environment in the section called Configure Backup and Recovery; and Configuring File and Print Services in the section called Configure Backup and Restore.
To use the backup and restore features included in Windows SharePoint Services open SharePoint 3.0 Central Administration, click the Operations tab, click Perform a backup or Restore from backup as appropriate. When you perform a backup you are presented with a tree that represents the SharePoint farm and the applications hosted on it. You enable checkboxes to specify what to backup, then you click Continue to Backup Options to select either full or differential backup and a location to store the backup. Once you start the backup you can refresh the Backup and Restore Status page to see how it is progressing, it will automatically refresh periodically too. Restore operations are not complex, to perform a restore do the following:
For these settings to take effect an antivirus scanner that is compatible with Windows SharePoint Services must be installed on the server. To configure Windows SharePoint Services for an anti-virus scanner open SharePoint 3.0 Central Administration, click the Operations tab, click Antivirus in the Security Configuration section and enable one or more of the following:
You can also configure the time out and number of threads for the antivirus scanner.
There are two ways you can configure Windows SharePoint Services to receive incoming email: You can install the SMTP service on the same server or you configure a drop folder on a different SMPT server where Windows SharePoint Services can periodically pull messages. Microsoft recommends against using drop folders because of the possibility that the administrator of the SMTP server may reconfigure it and cause the folder to become unavailable. I disagree with this concern, in a properly managed network the SMTP server should be very reliable.
To configure Windows SharePoint Services and the SMTP service on the same server do the following:

Figure 7: Configuring Incoming Email Settings.
To configure Windows SharePoint Services to use a drop folder on a different server do the following:

Figure 8: Configuring Incoming Email Settings.
After configuring email for the server email enabled lists and document libraries can be configured on the SharePoint sites. You can also enable the SharePoint Directory Management Service to create distribution groups and contacts. Doing so makes it possible to create and manage email distribution groups within SharePoint sites. It also makes it possible for people to find email enabled SharePoint lists in their address books. You will need to create an organizational unit (OU) in Active Directory and configure delegation for the Central Administration application pool account, as described in the Configure Active Directory section of Configure incoming e-mail settings. With regards to the exam, you should understand this capability but I do not think you need to memorize the all of the steps required to configure the OU.
Setting up outgoing email for Windows SharePoint Services is less complicated, however the SMTP service must be installed on the same server.

Figure 9: Configuring Outbound Email Settings.
SharePoint-based applications can be large and complex, Windows SharePoint Services is capable of logging detailed information about errors in the Windows event log and the trace logs. To configure diagnostic logging open SharePoint 3.0 Central Administration, click the Operations tab, then click Diagnostic Logging. There are several sections:

Figure 10: Configuring Event Throttling and Trace Logging.
There are many other less significant procedures that may arise in a production environment. They are well documented in the SharePoint help files, which you can access by clicking the question mark symbol in the upper right-hand corner of the SharePoint 3.0 Central Administration website. There is also a lot of useful information available in the list of Administrator Tasks, which you can access on the Home tab of SharePoint 3.0 Central Administration. I do not think that these are procedures that you need to memorize for the exam, but when you are ready to deploy Windows SharePoint Services on your production network you should explore them all and review the links provided in the References section at the end of the chapter. I suggest that you take a quick look at each of the links on the Operations tab and also spend some time exploring the Application Management tab before moving on.
One of the more interesting features is integration of Windows SharePoint Services with Active Directory Rights Management Services (AD RMS), for more information on installing and configuring AD RMS see Configuring Additional Active Directory Server Roles. Windows SharePoint Services relies on IIS, so many management tasks can be performed using IIS Manager. It also requires the Windows Internal Database, but the data can be stored in a Microsoft SQL Server-based database instead, so a production deployment may require administration of SQL Server too.
Windows SharePoint Services uses Web applications, site collections, and sites to organize content. A Web application can contain one or more site collections. A site collection includes a top-level Web site and a hierarchy of subsites. Control over the content of the subsites can be delegated in whatever way is needed to accommodate the people using it.
Before you can create a new site or site collection you have to create a Web application, which is an IIS site with its own application pool. If you need to have different users access content using different domains you can extend the Web application to another IIS site. To create a Web application using SharePoint 3.0 Central Administration do the following:
To extend an existing Web application to another IIS site do the following:

Figure 11: Extending a Web Application.
Now that you have created a Web application its time to create a new site, to do so you must first define a new site collection. Click the Application Management tab, then click Create site collection. Specify which Web application to use for the collection, provide a title, description, URL, select a template, provide the names for the site administrators, and select a quota template from the dropdown list if desired. When you are done entering information click OK to create the collection. You have now created a site collection and the top-level site.
You do not create subsites using Central Administration, connect to the top-level site using web browser, then click Sites in the left-hand menu. Click the Create button, then select the kind of subsite to create, for practice select Document Library. Enter a name and description, configure the other settings as desired, and click Create when ready, as shown in figure 11. The information you are prompted to supply may vary depending upon the type of site you are creating.
Figure 12: Creating a Site.
You can limit how much data can be stored in a site collection by implementing quota templates. When the limit is reached an alert will be emailed to the site collection administrator. You create and manage quota templates using SharePoint 3.0 Central Administration, on the Application Management tab click Quota Templates, then click the desired command. Each quota has a name, a site storage limit, and an email warning limit. After you have created one ore more quota templates you can apply them to new and existing site collections.
Another important feature are workflows, you can enable users to create their own workflows. using SharePoint 3.0 Central Administration, click the Application Management tab, then click Workflow Settings. Select a web application from the dropdown list then configure the desired settings for it.
This chapter has covered the major implementation and management tasks for Windows SharePoint Services, I have tried to introduce everything that I think is likely to appear on the exam. There are others that you can explore the others on the Operations and Management tabs. There is also a great deal of information available in the help files included with Windows SharePoint Services.
Tip: While it has nothing to do with the exam, Microsoft’s Office SharePoint Server is even more powerful than Windows SharePoint Services. It is a fully featured collaborative solution that includes numerous features not available in Windows SharePoint Services. If your organization is looking for ways to foster cooperation across business groups and improve the effectiveness of all types of project teams Office SharePoint Server has a lot to offer. Your organization may already own it too, it is commonly part of the license agreements offered to customers who purchase several Microsoft products.
This chapter examined two Windows Server 2008 features that you can install by downloading them from Microsoft’s websites: Windows Media Server and Windows SharePoint Services. Each of these server roles are powerful tools that extend the capabilities of Windows Server 2008. Windows Media Server can be used to publish both live and recorded digital audio and video. Windows SharePoint Services has become a very popular collaboration solution.
This section presents a list of review questions designed to help reinforce the knowledge presented earlier in the chapter. To persuade you to explore the management tools more deeply a few questions may require you to examine those tools further rather than rereading the chapter.
How to Install Windows Media Services in Windows Server 2008.
Windows Media Rights Manager 10 SDK.
Microsoft SharePoint Team Blog: Windows Server 2008 and SharePoint Resources.
Windows Server 2008 Resource Center for SharePoint Products and Technologies.
Upgrading to Windows Server 2008 for Windows SharePoint Services 3.0 with SP1.
Install a stand-alone server on Windows Server 2008 (Windows SharePoint Services).