Reasons To Encrypt Server Disks In Locked Server Room or Data Center?

Our servers' local disks contain mostly just the OS and minimal software. Actual data is usually on a SAN.
Is it necessary, recommended or even feasible to install full disk encryption on local disks of Windows Server 2008R2 and 2012R2 servers?
What about encryption on disks running from a SAN?

Hi,
Is it necessary, recommended or even feasible to install full disk encryption on local disks of Windows Server 2008R2 and 2012R2 servers?
Encrypted Hard Drives are a new class of hard drives that are self-encrypting at a hardware level and allow for full disk hardware encryption. Windows 8 and Windows Server 2012 support installing to these devices without additional modification.
As for if it is necessary, depends on the importance and confidential level of the data stored.
What about encryption on disks running from a SAN?
You may need to consult with corresponding vendor support to get feasible solution.
More information for you:
Encrypted Hard Drive
https://technet.microsoft.com/en-us/library/hh831627.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Similar Messages

When trying to start my Windows server 2008 R2 Data Center, I am getting "ramdisk device creation failed due to insufficient memory",

I have the following:-
VMWare workstation version 9 , with windows server 2008 R2 data center installed.
- I have installed the windows 2008 R2 inside the VM using an iso image.
- The host is windows 7.
I use to work well with the VM, but after adding a new VM to the same workstation . I start getting the following error when starting my old VM
ramdisk device creation failed sue to insufficient memory.
And on the windows boot manger screen they mentioned to :-
inset my windows installation dis and restart my PC.
click “repair your computer”
but not sure if this will fix the problem , baring in mind that the RAM assigned to the VM
is 24 GB & 80 GB hard disk.
The error is
Link.
so can any one advice what is causing this error?
Thanks

You might start by checking the RAM.
http://windows.microsoft.com/en-US/windows7/Diagnosing-memory-problems-on-your-computer
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Exchange site resilience 2010 (2 MB Server in each Data Center)

Here is Scenrio:
2 MB servers in Primary Data Center (DC)
2 MB Servers in Secondary DC
With one DAG Across Sites, DAG has IP 2 Addresses (One for Each DC Subnets).
Witness server: Primary DC Server
Alternate Witness: Secodary DC Server
Cluster: Node and File Share Majority
DatacenterActivationMode: DAGonly
================================================
Issue:
Last Night Secondary DC Power Goes Down and all System Shutdown.
So I was Not able to access Email even the Primary DC was up and Exchange Server was runnign fine, I Check the Maibox Databases and It has shown the Database "Dismounted" on Primary DC Exchange Server with Activation Pref =1
I check the Cluster and Cluster Was Down.
As FSW was Up and Accessible, and Two Nodes in Primary Site were UP then Why It happend?
Screen Shots are Attached.

Hi Genius1985,
To solve Event ID 7024, please try to install
http://support.microsoft.com/kb/975486 .
More details:
The Cluster services fail on all nodes after you shut down the cluster node that owns the quorum disk resource in Windows Server 2008 SP2
This issue occurs because of a deadlock that causes a timer to expire. This timer terminates the Cluster services.
To solve Event ID 7031, please configure the antivirus program so that it does not scan the MSCS folder on the quorum disk.
More information:
Event ID 1177 — Quorum and Connectivity Needed for Quorum
The Cluster Service May Experience a "MoveFileExW Failed" Error
Event 1135, 7031, or 7036 when the cluster service stops in Windows Server 2012
Thanks
Mavis Huang
TechNet Community Support

Server Requirements - Always On in a single server? - Needs clustering even one server on another Data Center?

Hello:
I have been asking this questions to different forums and got different responses, so I wanted to know if asking to "Microsoft" will give me some good directions. (All in SQL Server 2012, including the OS)
Question 1.- Always On "HAS" to be configured on a WSFC node? How about in a Single SQL Server. (NO Clustering)?.
Question 2.- What about our mirroring processes configured and running in single servers, do we have to have WSFC installed before we can upgrade them to Always On?.
Question 3.- In a case I have WSFC, and configure Always On, can my second or third replica reside in a single SQL Server? (No WSFC). What if I can not have Clustering in a DR Data Center? or I do have only VM's on the DR Center?
Any help will be greatly appreciated.
Thanks
Oscar Campanini

Hi Oscar,
Please find the answers below.
Question 1.- Always On "HAS" to be configured on a WSFC node? How about in a Single SQL Server. (NO Clustering)?.
                - Yes . Each replica must be on a different node of a WSFC cluster. Without WSFC Cluster you cannot create always on as it relies on the failover capabilities of the
cluster.
Question 2.- What about our mirroring processes configured and running in single servers, do we have to have WSFC installed before we can upgrade them to Always On?.
                 - You cannot really upgrade a Database mirroring configuration to Always on , both are different and works differently. Again for Always on each participating
replica must be on a WSFC cluster
Question 3.- In a case I have WSFC, and configure Always On, can my second or third replica reside in a single SQL Server? (No WSFC). What if I can not have Clustering in a DR Data Center? or I do have only VM's on the DR Center?
               - NO all replicas have to be in single nodes of WSFC cluster.
Note: SQL Server doesnt have to be clustered.
Consider the following scenario. YOu need to create Always on with a 3 node topology ie 1 Primary, I secondary and 1 readonly secondary.
YOu need to have all these three nodes a part of Windows Server Failover Cluster. The clustering needs to be done only in the windows level. YOu can install standalone SQL Servers on all these 3 nodes and then condigure them as replica's in ALways on.
Read these links to clear your questions -
http://technet.microsoft.com/en-gb/sqlserver/gg490638.aspx
http://technet.microsoft.com/en-us/library/hh510230(v=SQL.110).aspx
http://technet.microsoft.com/en-us/library/ff878487(v=sql.110).aspx#ServerInstance
Note: When I said Always ON I was reffering to Availability Groups.
Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

HT5390 have a Mac mini server in the data center no physical access. Is it possible to configure a remote "console" that allows shutdown and reboot remotely ?

A mini mac used for building sits in the data center normally we access via VNC network connection.
I want to have "console" access to shutdown and reboot system.
Reason. Updated to Mountain Lion OS X from 10.7.x and lost VNC connections, now host is down with no physical access.
Alternate is to call data center and see if someone can cycls the power ?

As mentioned by Linc there is no 'lights out' management for the Mac mini (or any current Mac). If the Mac is still running you can initiate a reboot via the GUI or commandline. If however it is completely crashed then there is a solution you could consider which is to get a managed power distribution strip. With this the power strip has its own network connection and lets you remotely turn off (and on) individual power sockets. This would then let you 'hard reboot' the Mac mini even if crashed.
See http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=ap7921& tab=features

BI4 server Migration one Data Center to other

Hi All,
We are currenlty Planing to move the BI4 Server along with SQL DB, Can you please let me know if any best practices to move the server Location.
Regards,
Santhosh

Hi Denis,
We have an issue in the below step :
"create new SIA pointing to CMS DB which was moved from old server.
start it."
After we do this and open CMC
we could all the services like CMS, I/p & O/P respositories, Adattive processing server etc pointing to the actual(old) BI4 servers instead of new servers
After this if you login to the any one of the server we can able see all the nodes in new and old servers.
Any idea on what the issue would be ?
Regards,
Santhosh

Where to buy Windows Server data Center (BOX) (Retail)

Hey Everyone ,
Can somebody please point me to the right direction of buying windows server 2012 R2 Data Center edition in a box ?
I want the retail one .. the OEM's are everywhere like in amazon or HP or ..
but I think the OEM is not suitable for me because I have a variety of hard wares like IBM , Cisco and HP so OEM is out of the question .
I searched everywhere but there is no retail version at sight .
Oh I find the Standard edition on Microsoft Store . but there where no data Center .
If anyone have any document that says there's no retail version of DC edition it would be very much appreciated as well .
thanks again .
Good Day .

You can't buy the datacenter edition as retail.
Check the licensing datasheet:
http://download.microsoft.com/download/F/3/9/F39124F7-0177-463C-8A08-582463F96C9D/Windows_Server_2012_R2_Licensing_Datasheet.pdf

Moving production server one data center to other

Hi all,
Actually we have one Production server all the scenarios are working fine, now we want to creat one new server in another data center and replace the old production server(transfer all the scenarios) .what are the roles(for PI Consultant) involved in this case .
Please advise me.
Thanks in advance.

Build a transport in DEV for all your objects and get basis to apply them and activate the changes in PROD. You shouldnt need more than monitoring access in any production system except in error situations.

NPS SQL missing reason-code in Server 2012 R2

Hi
It seems like several SQL fields in the 2012 R2 version of NPS logging has been removed.
Amongst others the Reason-Code field.
Most people only refer to log files to see why someone can't connect to the vpn server.
In previous versions we had a web front end for an sql view that gave you the reason why the server denied access so that we do not need to give helpdesk personnel access to the log files and we also filter which operations vpn sessions they can see (via
multiple vpn nps policies and then filter the sql view based on their permissions).
Is there any way to restore the logging of this field to SQL as well as logging the source IP address of the request (our investors requires this and we get audited on it) with the issued IP (non DHCP). We are not allowed to run DHCP on this server since
it is situated in the 3rd party datacenter.
Regards
Johan

And this is what Server 2008R2 had parsed in the default stored procedure:
FROM
OPENXML(@idoc,
'/Event')
WITH
    Computer_Name
nvarchar(255)
'./Computer-Name',
    Packet_Type
int
'./Packet-Type',
    [User_Name]
nvarchar(255)
'./User-Name',
    F_Q_User_Name
nvarchar(255)
'./Fully-Qualifed-User-Name',
    Called_Station_Id
nvarchar(255)
'./Called-Station-Id',
    Calling_Station_Id
nvarchar(255)
'./Calling-Station-Id',
    Callback_Number
nvarchar(255)
'./Callback-Number',
    Framed_IP_Address
nvarchar(15)
'./Framed-IP-Address',
    NAS_Identifier
nvarchar(255)
'./NAS-Identifier',
    NAS_IP_Address
nvarchar(15)
'./NAS-IP-Address',
    NAS_Port
int
'./NAS-Port',
    Client_Vendor
int
'./Client-Vendor',
    Client_IP_Address
nvarchar(15)
'./Client-IP-Address',
    Client_Friendly_Name
nvarchar(255)
'./Client-Friendly-Name',
    Event_Timestamp
datetime
'./Event-Timestamp',
    Port_Limit
int
'./Port-Limit',
    NAS_Port_Type
int
'./NAS-Port-Type',
    Connect_Info
nvarchar(255)
'./Connect-Info',
    Framed_Protocol
int
'./Framed-Protocol',
    Service_Type
int
'./Service-Type',
    Authentication_Type
int
'./Authentication-Type',
    NP_Policy_Name
nvarchar(255)
'./NP-Policy-Name',
    Reason_Code
int
'./Reason-Code',
    Class
nvarchar(255)
'./Class',
Session_Timeout
int
'./Session-Timeout',
    Idle_Timeout
int
'./Idle-Timeout',
    Termination_Action
int
'./Termination-Action',
    EAP_Friendly_Name
nvarchar(255)
'./EAP-Friendly-Name',
    Acct_Status_Type
int
'./Acct-Status-Type',
    Acct_Delay_Time
int
'./Acct-Delay-Time',
    Acct_Input_Octets
int
'./Acct-Input-Octets',
    Acct_Output_Octets
int
'./Acct-Output-Octets',
    Acct_Session_Id
nvarchar(255)
'./Acct-Session-Id',
    Acct_Authentic
int
'./Acct-Authentic',
    Acct_Session_Time
int
'./Acct-Session-Time',
    Acct_Input_Packets
int
'./Acct-Input-Packets',
    Acct_Output_Packets
int
'./Acct-Output-Packets',
    Acct_Terminate_Cause
int
'./Acct-Terminate-Cause',
    Acct_Multi_Session_Id
nvarchar(255)
'./Acct-Multi-Session-Id',
    Acct_Link_Count
int
'./Acct-Link-Count',
    Acct_Interim_Interval
int
'./Acct-Interim-Interval',
    Tunnel_Type
int
'./Tunnel-Type',
    Tunnel_Medium_Type
int
'./Tunnel-Medium-Type',
    Tunnel_Client_Endpoint
nvarchar(255)
'./Tunnel-Client-Endpt',
    Tunnel_Server_Endpoint
nvarchar(255)
'./Tunnel-Server-Endpt',
    Acct_Tunnel_Connection
nvarchar(255)
'./Acct-Tunnel-Connection',
    Tunnel_Pvt_Group_Id
nvarchar(255)
'./Tunnel-Pvt-Group-Id',
    Tunnel_Assignment_Id
nvarchar(255)
'./Tunnel-Assignment-Id',
    Tunnel_Preference
int
'./Tunnel-Preference',
    MS_Acct_Auth_Type
int
'./MS-Acct-Auth-Type',
    MS_Acct_EAP_Type
int
'./MS-Acct-EAP-Type',
    MS_RAS_Version
nvarchar(255)
'./MS-RAS-Version',
    MS_RAS_Vendor
int
'./MS-RAS-Vendor',
    MS_CHAP_Error
nvarchar(255)
'./MS-CHAP-Error',
    MS_CHAP_Domain
nvarchar(255)
'./MS-CHAP-Domain',
MS_MPPE_Encryption_Types
int
'./MS-MPPE-Encryption-Types',
MS_MPPE_Encryption_Policy
int
'./MS-MPPE-Encryption-Policy',
    Proxy_Policy_Name
nvarchar(255)
'./Proxy-Policy-Name',
    Provider_Type
int
'./Provider-Type',
    Provider_Name
nvarchar(255)
'./Provider-Name',
    Remote_Server_Address
nvarchar(15)
'./Remote-Server-Address',
    MS_RAS_Client_Name
nvarchar(255)
'./MS-RAS-Client-Name',
    MS_RAS_Client_Version
nvarchar(255)
'./MS-RAS-Client-Version',
    NAP-specific information, available from NPS starting with Windows Server 2008.

Non-SysAdmins get error 18456 Severity 14 State 11 Login Failed for user _ Reason Token-based server access validation failed with an infrastructure error.

I have a SQL 2008 R2 system (10.50.4000) where I'm having problems connecting any user that is not a SysAdmin. Example: I setup a new SQL Login to use Windows Authentication and grant that user db_datareader on the target database. The user attempts
to connect using Excel client or Access or SQL Management Studio and receives Error 18456. The SQL Server Logs shows Error 18456 Severity 14 State 11 Login Failed for user _ Reason Token-based server access validation failed with an infrastructure error.
The strange part is that if I temporarily grant the user the sysadmin server role then the user can connect successfully and retrieve data. But, if I take away that sysadmin server role then the user can no longer connect but again receives the Error
18456 Severity 14 State 11 Login Failed for user _ Reason Token-based server access validation failed with an infrastructure error.
We've turned off UAC on the client machine to see if that was the problem, but no change.
I have dropped and re-added the user's SQL Login (and the related database user login info). No success.
The Ring Buffers output shows:
The Calling API Name: LookupAccountSidInternal
API Name: LookupAccountSid
Error Code: 0x534
Thanks for any help.
-Walt

Yes, you understand correctly. The user is logging onto a workstation (not the server) with a Windows Authenticated id. The user is using either Excel or Access or SSMS and connecting to the server using a Windows Authenticated SQL Login account.
If the account has sysadmin role (which is only for testing) then the connection is successful. If I take away sysadmin role from the account then the connection is unsuccessful and the SQL Server Log shows Error
18456 Severity 14 State 11 Login Failed for user _ Reason Token-based server access validation failed with an infrastructure error.
(SQL Authentication is not an option here. I must use Windows Authentication).
Any other troubleshooting assistance you can offer would be appreciated. Thanks.
-Walt

What would be the reason for sql server agent [MSSQLSERVER] service terminated unexpectedly?

What would be the reason for sql server agent [MSSQLSERVER] service terminated unexpectedly?
only below details found in error log
07:26:44.170 spid60
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
07:26:45.720 spid51
Configuration option 'Agent XPs' changed from 0 to 1. Run the RECONFIGURE statement to install.
07:26:45.730 spid51
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
07:28:57.840 spid64
Configuration option 'Agent XPs' changed from 1 to 0. Run the RECONFIGURE statement to install.
07:28:57.840 spid64
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
and below error on agent log
2014-01-01 07:26:28 - ? [131] SQLSERVERAGENT service stopping due to a stop request from a user, process, or the OS...
2014-01-01 07:26:43 - + [188] Scheduler engine timed out (after 15 seconds) waiting for 1 jobs(s) to stop
2014-01-01 07:26:44 - + [098] SQLServerAgent terminated (forcefully)
Rahul

What would be the reason for sql server agent [MSSQLSERVER] service terminated unexpectedly?
only below details found in error log
07:26:44.170 spid60
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
07:26:45.720 spid51
Configuration option 'Agent XPs' changed from 0 to 1. Run the RECONFIGURE statement to install.
07:26:45.730 spid51
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
07:28:57.840 spid64
Configuration option 'Agent XPs' changed from 1 to 0. Run the RECONFIGURE statement to install.
07:28:57.840 spid64
FILESTREAM: effective level = 3, configured level = 3, file system access share name = 'MSSQLSERVER'.
and below error on agent log
2014-01-01 07:26:28 - ? [131] SQLSERVERAGENT service stopping due to a stop request from a user, process, or the OS...
2014-01-01 07:26:43 - + [188] Scheduler engine timed out (after 15 seconds) waiting for 1 jobs(s) to stop
2014-01-01 07:26:44 - + [098] SQLServerAgent terminated (forcefully)
Rahul
Can you post the output of below query
select @@version.
If you are using SQl server express edition ,SQL server agent feature is not available.It seems from errorlog that you can start it but actually you cannot.But first confirm what is version and edition of your SQL server
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

Common reason for Mirage Server Failure in Clustered Environment and how clients will be switched to other server in a cluster

Hi,
Can Anybody share me the information regarding Common reason for Mirage Server Failure in Clustered Environment.
And how clients will be switched to other server in a cluster to continue their operations from the failed server.
Regards,
Bathesha C

Hello,
if you have more than one mirage server configured with Load balancing (LB or MSFTNLB) the client would disconnect from the faulting server and then reconnect to an other server to progress with the action as before.
All Mirage server are stateless and share the same SIS (single instance store) so any server can update or create CVD file set for an client.
Hope that helps.

Mount: failed reason given by server: Permission denied

Hi,
I am getting this error when tried to mount
# mount sfxdb01:/db01/u20/oracle/prodarch /db01/u20/oracle/prodarch
mount: sfxdb01:/db01/u20/oracle/prodarch failed, reason given by server: Permission denied
What is the reason?
Thanks,
Kavitha

kavi wrote:
Thank you chad.
How can check the remote server is denying the permissions?
Which file shows the error message in /var/log?
If it is denying permissions, how can I give the permissions?
Regards,
KavithaYou'll need access to the remote server to do this - I'm going to assume that this server (to you) really is 'remote', so the best thing to do is to contact the system administrator; this isn't an error you can solve if you don't have administrative rights to the remote server.

Critical shutdown was invoked. Reason is: Enque Server was restarted ...

Hello,
the following Error appears and the Portal restarts automatically. I don't know how do solve this issue.
Critical shutdown was invoked. Reason is: Enque Server was restarted without restarting the J2EE engine.
/usr/sap/<sid>/SCS*/work:
[Thr 1] Mon May 4 21:18:12 2009
[Thr 1] ShadowTable:attach: ShmCreate - pool doesn't exist
[Thr 1] Enqueue: EnqMemStartupAction Utc=1241464692
[Thr 1] Enqueue Info: replication enabled
[Thr 1] Enqueue Info: enque/replication_dll not set
[Thr 1] ShadowTable:attach: ShmCreate - pool doesn't exist
[Thr 1] *** ERROR => EnqRepAttachOldTable: failed to get information on old replication table: rc=-1 [enxxmrdt.h 393]
[Thr 1] EnqRepRestoreFromReplica: failed to attach to old replication table: rc=-1
[Thr 1] enque/backup_file disabled in enserver environment
[Thr 1] Mon May 4 17:04:31 2009
[Thr 1] *** ERROR => MsSRead: NiBufReceive (rc=NIECONN_BROKEN) [msxxserv_mt. 10598]
[Thr 1] *** ERROR => MsSClientHandle: MsSRead C2 (J2EE526266050), MSEINTERN [msxxserv_mt. 4166]
[Thr 1] MsJ2EE_AddDisconnectedNode: add node [526266050] into disconnect list
[Thr 1] *** ERROR => MsSRead: NiBufReceive (rc=NIECONN_BROKEN) [msxxserv_mt. 10598]
[Thr 1] *** ERROR => MsSClientHandle: MsSRead C3 (J2EE548308450), MSEINTERN [msxxserv_mt. 4166]
[Thr 1] MsJ2EE_AddDisconnectedNode: add node [548308450] into disconnect list
regards

Hi Michael,
enqueue server is part of the central services (SCS). If SCS is restarted the J2EE Engine will restart also by automatical process.
The error means enqueue did not find a replication table on the host where it was started - maybe after a failover. So either there was no replication table at all (because the replication server was not started prior to the failover), or the OS did not start the enqueue server on the host the replication server was running on or the replication server was started with a different instance number than the enqueue server.
Check those points of your configuration and review note 1249256.
You may also try changing the following row in the replication start profiles to see if it helps:
eg: Start_Program_01 =local $(_ER) pf=$(DIR_PROFILE)/P01_ERS01_hseep01en NR=00
You can take note 39876 as reference to this string.
Hope this helps.
Cheers, Anja

(Error disabled. Reason:Disabled by Server Mgr triggered)

I´ve some ports in my Nexus 5k going to err-disable with the following message:
(Error disabled. Reason:Disabled by Server Mgr triggered)
These ports are connected in HPBlade 7000 through FEX Nexus B22 does someone know about this errors ?

Hi,
Not sure if you already found the root cause of the issue,but this message generally comes from blade FEX's when there is an internal communication error or no connection between the FEX HIF's and the server chassis/software. This might come when a port is made "admin up" while is not configured or mapped blade from server perspective.
Thanks,
Ivan.

Reasons To Encrypt Server Disks In Locked Server Room or Data Center?

Similar Messages

Maybe you are looking for