Windows 2012 Roles

Functionality and services are added to a server using the Add Roles and Features Wizard. The software is categorized as follows:

  • A role is a set of software features that provides a specific server function. Examples of roles include DNS Server, DHCP Server, File and Storage Services, and Print and Document Services.
  • Role services are specific programs that provide the functions of a role. Some roles, like DNS Server, have a single role service. Other roles, like Print and Document Services, have multiple role services such as the Distributed Scan Server and Internet Printing. Role services are sub-components of a role.
  • A feature is a software program that is not directly related to a server role, but which adds functionality to the entire server. Features include management tools, communication protocols or clients, and clustering support.

    All roles, role services and features are added using the wizard. You remove a role using the Add Roles and Features Wizard.

Roles in Windows Server 2012 include:

Role Description
Active Directory Domain Services (AD DS) AD DS is a distributed database that stores and manages information about network resources such as users, computers, and printers. The AD DS role:

  • Helps administrators securely manage information.
  • Facilitates resource sharing and collaboration between users.
  • Is required for directory-enabled applications such as Microsoft Exchange Server and for applying Windows Server technologies, such as Group Policy.
Active Directory Certificate Services (AD CS) AD CS is an identity and access control feature that creates and manages public key certificates used in software security systems. The AD CS role:

  • Provides customizable services for creating and managing public key certificates.
  • Enhances security by binding the identity of a person, device, or service to a corresponding private key.
  • Includes features that allow you to manage certificate enrollment and revocation in a variety of scalable environments.
DNS Server The DNS service maps IP addresses to logical hostnames. DNS servers provide name resolution services, providing IP addresses for known hostnames or hostnames for known IP addresses. Beginning with Windows Server 2008, the DNS service provides support for IPv6 addresses.
DHCP Server The DHCP service provides IP addresses and other IP configuration information for network hosts. Host computers contact the DHCP server at startup to obtain IP address, default gateway, DNS server, and other configuration information. Beginning with Windows Server 2008, the DHCP service supports IPv6 addressing and configuration information.
File and Storage Services File and Storage Services includes technologies that help you set up and manage one or more file servers. This role is useful when users need access to the same files and applications, or if centralized backup and file management are important to the organization. New features/functionality includes:

  • Storage Spaces and storage pools enable you to virtualize storage.
  • Unified remote management of File and Storage Services in Server Manager enables you to remotely manage multiple file servers.
  • Windows PowerShell cmdlets for File and Storage Services allow you to perform the majority of administration tasks for file and storage servers.

    The File and Storage Services role is installed by default on Windows Server 2012.

Hyper-V The Windows hypervisor provides the layer of software necessary for the installation of virtual guest operating systems.
Print and Document Services The Print and Document Services role provides the print management console that allows you to manage printers on multiple servers. Beginning with Windows Server 2008, you can also publish printers in Active Directory, thereby creating printing objects on client computers automatically for shared or network printers.
Network Policy and Access Services Network Policy and Access Services, formerly Network Access Protection (NAP), are a collection of components that allow administrators to regulate network access or communication based on a computer’s compliance with health requirement policies. Network Policy and Access Services give you the ability to restrict access for non-compliant computers as well as to provide access to updates or health update resources to allow computers to become compliant.
Web Server (IIS) Web Server (IIS) is the Web server service. Use IIS to host internal and external Web sites or services that communicate using HTTP and to provide support for ASP.NET applications accessed through a Web browser. IIS is also used by many other roles to provide Web-based administration or access.
Windows Deployment Services (WDS) Windows Deployment Services (WDS) is a disk imaging solution that you can use for remote deployment and automated installation of Windows Server 2012, Windows 8, and earlier versions of Microsoft operating systems.
Windows Server Update Server The WSUS server allows administrators to manage and distribute updates through a management console. A WSUS server can also be used to update other WSUS servers within the organization.

Role services in Windows Server 2012 include:

Services Description
Distributed Scan Server The Distributed Scan Server provides services that route documents scanned on network scanners. The Distributed Scan Server includes the Scan Management snap-in for configuring and managing network scanners.
Network Policy Server (NPS) Network Policy Server (NPS) allows you to centrally manage network access through a variety of network access servers such as VPN servers, 802.1X Ethernet switches, and RADIUS-compliant 802.1X wireless access points.

  • NPS contains Network Access Protection components.
  • NPS allows you to use Protected Extensible Authentication Protocol (PEAP)-MS-CHAP2 for secure password authentication on wireless connections.
Host Credential Authorization Protocol (HCAP) Host Credential Authorization Protocol (HCAP) allows you to perform client health evaluations and authorization of Cisco 802.1X access clients on networks integrating NPS and NAP with Cisco Network Access Control Server.
Health Registration Authority (HRA) Health Registration Authority (HRA) issues health certificates to clients on networks using NAP IPsec enforcement.

Features in Windows Server 2012 include:

Features Description
Failover Clustering Failover clusters provide high availability and scalability to servers including server applications such as Microsoft Exchange Server, Hyper-V, and Microsoft SQL Server. The server applications can run on physical servers or virtual machines. Failover clusters can scale to 64 physical nodes and to 8,000 virtual machines.
Group Policy Group Policy allows you to specify configurations for users and computers through Group Policy settings.

  • Whenever the Group Policy Management Console (GPMC) is installed, the Windows PowerShell module is also installed.
  • If you install the Remote Server Administration Tools pack, the latest Windows PowerShell cmdlets for Group Policy are also installed.
Network Load Balancing By managing two or more servers as a single virtual cluster, Network Load Balancing (NLB) enhances the availability and scalability of Internet server applications such as those used on web, FTP, firewall, proxy, virtual private network (VPN), and other mission-critical servers.

  • NLB allows all of the computers in the cluster to be addressed by the same set of IP addresses.
  • NLB maintains a set of unique, dedicated IP addresses for each host.
BitLocker Drive Encryption BitLocker Drive Encryption is a security feature that protects a server by encrypting the operating system volume and verifying the integrity of other startup components. BitLocker is also called full volume encryption.
Remote Assistance Remote Assistance enables a support person to offer assistance or reply to requests for assistance from desktop users. With Remote Assistance, the helper can connect to the computer desktop to watch or perform tasks to troubleshoot and correct desktop problems.
SMTP Server The Simple Mail Transfer Protocol (SMTP) is used for transferring mail between e-mail systems and some e-mail clients. Add the SMTP Server feature to add e-mail support to other server roles such as IIS.
Windows Server Backup Windows Server Backup provides backup and recovery for Windows Server 2008 and Windows Server 2012. It replaces the NTbackup.exe backup utility in previous Windows versions. Windows Server Backup allows you to manage backup and recovery from either the command line or the Windows Server Backup console snap-in.

When Windows Server 2012 is installed, the source files for all server programs, including all roles and features, are installed on the server. Features on Demand is a new feature in Windows Server 2012 that allows you to remove the source files of unneeded roles and features in order to conserve disk space. Features on Demand also allows you to re-install source files for roles and features that may have been removed. With Features on Demand, you can:

  • Add or remove role and feature source files on a remote computer.
  • Add feature files to or remove feature files from Windows image (WIM) files or offline virtual hard disks (VHDs) to create a custom Windows Server 2012 configuration.
  • Remove feature files from running physical or virtual computers.
  • Obtain the files to install from:
    • A shared folder that contains feature files and is available to the computer
    • Windows Update
    • Installation media
Coaching
© Data Coincide, LLC 2010-2019