My First Server: Build Basics
-
@zuphzuph said in My First Server: Build Basics:
Awesome utility for reboot scheduling purposes. https://remoterebootx.com/
Don't forget to delete System32 before you reboot. Just saying...
-
I don't like install Antivirus in Windows Servers, just install it in very specific case. terribles experiences with Gdata and Nod32
-
@iroal said in My First Server: Build Basics:
I don't like install Antivirus in Windows Servers, just install it in very specific case. terribles experiences with Gdata and Nod32
I've run AV from 5 different big name providers on servers, only 1 of them caused serious issues, the rest are fine.
None of those 5 were ESET products or GData though.
You can and should use security products on a server (Notice I did not say antivirus)
-
@iroal said in My First Server: Build Basics:
I don't like install Antivirus in Windows Servers, just install it in very specific case. terribles experiences with Gdata and Nod32
I would just address the bad programs or vendors rather than abandoning the ecosystem. Nod32 is ESET and not just a problematic product but a known bad actor company. I've never heard of Gdata. But good vendors, like Webroot, we don't see those issues and you really do want them installed with only the rarest of exceptions.
-
I'm really starting to change my mind on the need for AV. They don't really seem to do that much for us any more. I suppose it's possible they protect us from known threats until the software vendors create fixes for the flaws in their software, but I really wonder how good the AV products are at even that?
A solution that does what Webroot does, journal files touched by untrusted applications is definitely nice, but that can wreak havoc on storage.
-
@Dashrender said in My First Server: Build Basics:
I'm really starting to change my mind on the need for AV. They don't really seem to do that much for us any more. I suppose it's possible they protect us from known threats until the software vendors create fixes for the flaws in their software, but I really wonder how good the AV products are at even that?
A solution that does what Webroot does, journal files touched by untrusted applications is definitely nice, but that can wreak havoc on storage.
This is why.
Edit, whoops forgot to obscure..
Edit 2, this.
-
@Dashrender said in My First Server: Build Basics:
I'm really starting to change my mind on the need for AV. They don't really seem to do that much for us any more. I suppose it's possible they protect us from known threats until the software vendors create fixes for the flaws in their software, but I really wonder how good the AV products are at even that?
A solution that does what Webroot does, journal files touched by untrusted applications is definitely nice, but that can wreak havoc on storage.
If you have truly isolated servers that have no user logins and do very controlled operations, you can do without them. If you are running Nano or something, you probably have to. But if you are using "normal" servers, I would not consider going without.
-
I'm a huge fan of #4. If you're running an HP server with iLO, be sure to buy an "advanced license". They generally retail for around $200, but you can find them on Amazon for $25. We just bought 10 copies for our ProLiant servers and have already taken advantage of the "remote console" feature multiple times. It's worth it for that feature alone.
A few more recommendations I would make:
-
It might seem obvious, but always make sure you have redundant power supplies if your server supports it (I can't think of any modern day servers that don't)
-
If there's money in the budget, it's worth it to make sure you have both CPU sockets populated with whatever you can afford in terms of model/speed.
-
The same goes for RAM: You don't necessarily need to buy 384GB, but if you think your server could benefit from extra RAM (96-192GB for example), it's worth it to get more than you may initially think you need. I think it happens more often than admins would like to admit: you buy what you think will be enough, only to realize later on down the road that you really should've just bought more to begin with (especially since the cost of RAM is so much more affordable nowadays).
-
-
Good post Scott and very relevant.
-
@StuartJordan said in My First Server: Build Basics:
Good post Scott and very relevant.
Thank you, sir.
