Microsoft® Windows Server™ 2003 Service Pack 1 (SP1) incorporates a set of
security enhancements and tools designed to help administrators more effectively
manage the security of their server installations when upgrading to SP1 on
Windows Server 2003 systems or installing Windows Server 2003 with SP1
integrated. This article provides recommendations on the deployment process
for Dell™ PowerEdge™ servers and discusses the key security features and remote
management changes implemented in Windows Server 2003 SP1.
Deploying Microsoft Windows Server 2003 Service
Pack 1 (SP1) can help enhance security and reliability,
and simplify administrative tasks in environments using
systems such as the Dell PowerEdge 1850, PowerEdge
2850, PowerEdge 6650, and PowerEdge 6850 servers
as well as the PowerEdge 1855 blade server. Windows
Server 2003 SP1 is the first cumulative service pack
upgrade for the Windows Server System™ 2003 release.
Although many of the security enhancements in SP1
have already been introduced in Microsoft Windows® XP
Service Pack 2 (SP2) for the client environment, the server
environment is characterized by specific traits that necessitated
the SP1 release for Windows Server 2003. SP1
introduces certain features that require hardware-level
support in the server, including data execution prevention
(DEP) and demand-based switching (DBS).
Dell and Microsoft engineers worked together closely to
support holistic SP1 software and hardware development,
and performed extensive testing across supported Dell
PowerEdge servers and Dell PowerVault™ network attached
storage (NAS) servers to help ensure the compatibility and
stability of Dell software and hardware. In addition, Dell
plans to release version 4.4 of the Dell OpenManage™ infrastructure
in May 2005 to support the security enhancements
and features in Windows Server 2003 SP1.
Dell supports Windows Server 2003 SP1 on server
platforms that support the original Windows Server 2003
release—including third-generation through seventhgeneration
Dell PowerEdge servers as well as eighthgeneration
PowerEdge servers. This article is intended
to help guide administrators in deploying SP1 on Dell
PowerEdge servers and PowerVault NAS servers by examining
two deployment scenarios: upgrading to SP1 on
existing Windows Server 2003 systems and installing
Windows Server 2003 with SP1 integrated.
In addition, this article addresses application compatibility
and server manageability issues relating to the
following major technologies in SP1:
The DEP feature
• Windows Firewall
• Remote systems management
Best practices for SP1 deployment
The first step in any deployment process is a careful evaluation
of the existing IT environment. Documenting infrastructure—such
as system BIOS, system and device firmware, and device driver
versions; applications; and network components—is key to a successful
service pack upgrade. In addition, administrators must first
back up critical data and check systems for spyware and other
unwanted software before upgrading to another service pack.
Performing essential housecleaning before deployment also
helps smooth the migration process. Administrators should always
perform BIOS, firmware, and driver updates prior to an OS upgrade.1
The latest BIOS, firmware, and drivers are available from the Dell
Web site or the Dell OpenManage management suite.
Besides updating BIOS, firmware, and drivers, administrators
should check application compatibility before deploying any service
pack. For an application compatibility evaluation, administrators can
visit the Microsoft Windows Application Compatibility Web site and
download the latest Application Compatibility Toolkit.2
Deployment path for upgrading to SP1
on existing Windows Server 2003 systems
Before proceeding with deployment, administrators should note
that specific Dell PowerEdge hardware configurations with factoryinstalled
Windows Server 2003 operating systems may have a
registry issue with the Windows Server 2003 SP1 upgrade. Administrators
should run the Dell Registry Preparation tool (regprep)
for these configurations prior to upgrading to SP1. For more information
about the regprep utility and which servers may require
preparation, visit support.dell.com/support/topics/global.aspx/support/
kb/en/document?c=us&cs=555&DN=1092292&l=en&s=biz.
When upgrading current Windows Server 2003 systems to SP1,
administrators have the following options:
• Upgrade from local media using the SP1 installation CD
• Install from a network share containing the installation files
• Upgrade over the Internet using Microsoft Windows Update3
• Automate the deployment process by using an enterprise
software deployment tool such as Microsoft Systems
Management Server 2003 (SMS 2003)
Upgrading from local media is the simplest method
of installing Windows Server 2003 SP1. Upgrading
from a network share is also a simple installation
method and eliminates the need for media.
To use Microsoft Windows Update for SP1 deployment,
administrators should go to the Windows Update Web site, install
the update plug-in for Internet Explorer, and then install SP1.
Service packs are listed in the High Priority Updates section.
Administrators can configure updates to download automatically
and then install applicable service packs and hot fixes either
automatically or manually.
Each of the three preceding options—upgrading from local
media, installing from a network share, and upgrading over the
Internet using Windows Update—may entail a lengthy process
for organizations that have many servers to upgrade. Thus, the
fourth option—automating the process using an enterprise software
deployment tool—is the preferred method for most large
and midsize organizations. Many enterprise management tools
exist; however, Microsoft SMS 2003 is designed to streamline SP1
upgrades with its integrated Distribute Software Updates Wizard.
After authorizing Microsoft Windows Server 2003 SP1 in the
SMS 2003 administration console, administrators can configure
SMS 2003 to identify any systems joining the managed network
and then deploy SP1 without manual intervention. Administrators
can also configure SP1 settings by establishing group policies or
by using an additional package distributed by SMS.4
To upgrade to SP1 on an existing system running Windows
Server 2003, Dell supports the two following deployment paths:
• Dell OpenManage 4.3: Administrators should run the
regprep tool;5 update the system BIOS, system and device
firmware, and device drivers; install the Dell OpenManage
service pack for version 4.4 (which will be available at support.
dell.com); and then install SP1 (see Figure 1).