Daniel Frome Senior System and Database Administrator III

Transcription

1 Daniel Frome Senior System and Database Administrator III 1

2 Scripting Video Walkthrough Setup Video Walkthrough Migration 2

3 3

4 Doing the same thing over and over again, but expecting different results Doing the same thing over and over again (manually), wanting the same result 4

5 WS2012 is displayed Will be adding admin IT sections to migration/installation guide May require external microsoft programs, e.g. sysprep. All options have /? Or? Understand the usage of the commands 5

6 Runs off C:\InstallTemp2012 folder SQL 2012 is going to be installed on same machine Assumes OS C, Application D drives Is connected to the internet, or has OS Disc available Fair amount of trouble in WS2012 if you are not connected to the internet when setting up machines 6

7 Since it is a batch file, information is NOT secure, and in the clear. Information should be removed after setup has been completed 7

8 Includes what you need to set up a new server environment Added several Best Practice steps Adds users to machine Set Time Zone Configure Windows Updates Installs SQL and Patches Turns off UAC Installs.NET features/telnet Client Installs.NET Installs Silverlight Setups up IE local intranet settings 8

9 REM Add Users net user escsupport /add /comment:"escsupport Account" /passwordchg:no WMIC USERACCOUNT WHERE "Name='escsupport'" SET PasswordExpires=FALSE net user reportuser /add /comment:"report User Account" /passwordchg:no WMIC USERACCOUNT WHERE "Name='reportuser'" SET PasswordExpires=FALSE net user Plantadmin /add /comment:"admin Account" /passwordchg:no WMIC USERACCOUNT WHERE "Name='Plantadmin'" SET PasswordExpires=FALSE net user Plantuser /add /comment:"basic User Account" /passwordchg:no WMIC USERACCOUNT WHERE "Name='Plantuser'" SET PasswordExpires=FALSE Usage net user /? 9

10 net localgroup "Administrators" "escsupport" /add net localgroup "Administrators" "Plantadmin" /add Can add domain users as well E.g. net localgroup administrators domain\username /add 10

11 No_DST! tzutil /s "Central Standard Time_dstoff Usage: tzutil /? 11

12 Dism.exe /online /Enable Feature /FeatureName:IIS WebServerRole /FeatureName:IIS WebServer /FeatureName:WAS WindowsActivationService /FeatureName:WAS ProcessModel /FeatureName:WAS NetFxEnvironment /FeatureName:WAS ConfigurationAPI /FeatureName:IIS StaticContent /FeatureName:IIS DirectoryBrowsing /FeatureName:IIS CommonHttpFeatures /FeatureName:IIS HttpErrors /FeatureName:IIS HttpRedirect /FeatureName:IIS ApplicationDevelopment /FeatureName:IIS Security /FeatureName:IIS RequestFiltering /FeatureName:IIS HealthAndDiagnostics /FeatureName:IIS HttpLogging /FeatureName:IIS LoggingLibraries /FeatureName:IIS RequestMonitor /FeatureName:IIS HttpTracing /FeatureName:IIS Performance /FeatureName:IIS WebServerManagementTools /FeatureName:IIS IIS6ManagementCompatibility /FeatureName:IIS Metabase /FeatureName:IIS ISAPIExtensions /FeatureName:IIS ISAPIFilter /FeatureName:IIS StaticContent /FeatureName:IIS DefaultDocument /FeatureName:IIS ASPNET /FeatureName:IIS ASPNET45 /FeatureName:IIS BasicAuthentication /FeatureName:IIS WindowsAuthentication /FeatureName:IIS HttpCompressionStatic /FeatureName:IIS HttpCompressionDynamic /FeatureName:IIS ManagementConsole /FeatureName:IIS WMICompatibility /FeatureName:WCF Services45 /FeatureName:WCF HTTP Activation45 /FeatureName:WCF TCP Activation45 /FeatureName:WCF TCP PortSharing45 /FeatureName:NetFx3ServerFeatures /FeatureName:NetFx4ServerFeatures /FeatureName:IIS LegacySnapIn /FeatureName:NetFx3 /FeatureName:NetFx4 /FeatureName:NetFx4Extended ASPNET45 /FeatureName:WCF HTTP Activation /FeatureName:WCF NonHTTP Activation /FeatureName:TelnetClient /FeatureName:IIS ClientCertificateMappingAuthentication /FeatureName:IIS IISCertificateMappingAuthentication /FeatureName:TelnetClient /FeatureName:InkAndHandwritingServices /FeatureName:DesktopExperience /all /Quiet /NoRestart 12

13 Assumes you have downloaded.net and placed it inside C:\InstallTemp2012 folder, for brevity s sake I renamed it to just.net452.exe C:\InstallTemp2012\NET452.exe /passive /norestart Will run through GUI silently C:\InstallTemp2012\Silverlight_x64.exe /q Silent/Quiet Install, no GUI 13

14 When you install SQL from GUI it creates a Configuraiton.INI file, you can use this as a template for same installations. Passwords in the CLEAR (e.g. SA). 14

15 Create a batch file Assumes E: has SQL Install Media Assume SQL2012 SP2 patch exists E:\Setup.exe /ConfigurationFile=C:\InstallTemp2012\Config urationfile.ini C:\InstallTemp2012\SQLServer2012SP2 KB x64 ENU.EXE /IACCEPTSQLSERVERLICENSETERMS="TRUE" /allinstances /quiet 15

16 Assumes configuration.ini is in C:\InstallTemp, and SQLInstall.bat is created CALL C:\InstallTemp2012\SQLInstall.bat Why do we use CALL? 16

17 REM Set Power Options High Performance powercfg.exe /setactive 8c5e7fda e8bf 4a96 9a85 a6e23a8c635c REM Set Page file on C:\ to 4096MB wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False wmic pagefileset where name="c:\\pagefile.sys" set InitialSize=4096,MaximumSize=4096 REM put MSVCR71.dll in SysWow64 (for emulation)... xcopy C:\InstallTemp2012\MSVCR71.dll C:\Windows\SysWOW64 /Y xcopy C:\InstallTemp2012\MSVCR71.dll C:\Windows\System32 /Y Assumes you have MSVCR71.dll copied over to C:\Install2012 REM Create Stackvision Folder on D:\ md D:\Stackvision 17

18 REM Disable UAC C:\Windows\System32\cmd.exe /k %windir%\system32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f\ Turning off UAC for user, apparently does no turn off UAC, registry edit was only option REM Configure Windows Updates (Check, but don't download, and don't install) REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wi ndowsupdate\auto Update" /v AUOptions /t REG_DWORD /d 2 /f 18

19 Add to local intranet IE is USER specific First launch of IE requires user to enable intranet settings (bar at bottom). 19

20 REM Add to IE Local Intranet for ALL Users SETLOCAL SET REG="%WINDIR%\system32\reg.exe" SET INTRANET_DOMAINS= IF EXIST "%USERPROFILE%\..\Default User\NTUSER.DAT" SET NTUSER="%USERPROFILE%\..\Default User\NTUSER.DAT" IF EXIST "%USERPROFILE%\..\Default\NTUSER.DAT" SET NTUSER="%USERPROFILE%\..\Default\NTUSER.DAT" IF DEFINED PROGRAMFILES(x86) SET X64=TRUE ECHO Adding domains to Intranet Zone for HKEY_LOCAL_MACHINE FOR %%D IN (%INTRANET_DOMAINS%) DO ( ECHO ^> %%D %REG% add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%%D" /v * /t REG_DWORD /d 1 /f %REG% add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\%%D" /v * /t REG_DWORD /d 1 /f IF DEFINED X64 %REG% add "HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%%D" /v * /t REG_DWORD /d 1 /f IF DEFINED X64 %REG% add "HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\%%D" /v * /t REG_DWORD /d 1 /f ) IF DEFINED NTUSER ECHO Loading registry defaults for new user from %NTUSER% IF DEFINED NTUSER %REG% load HKU\.NTUSER %NTUSER% FOR /f "usebackq tokens=1,2 delims=_" %%A IN (`%REG% query HKU`) DO ( ECHO Adding domains to Intranet Zone for %%A_%%B FOR %%D IN (%INTRANET_DOMAINS%) DO ( ECHO ^> %%D %REG% add "%%A_%%B\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%%D" /v * /t REG_DWORD /d 1 /f %REG% add "%%A_%%B\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\%%D" /v * /t REG_DWORD /d 1 /f IF DEFINED X64 %REG% add "%%A_%%B\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%%D" /v * /t REG_DWORD /d 1 /f IF DEFINED X64 %REG% add "%%A_%%B\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\%%D" /v * /t REG_DWORD /d 1 /f ) ) IF DEFINED NTUSER ECHO Unloading new user registry defaults IF DEFINED NTUSER %REG% unload HKU\.NTUSER ENDLOCAL 20