Shulou(Shulou.com)06/03 Report--

Production environment:

Operating System: Windows Server 2008 R2

Database System:SQL Serve 2005

Web Server Software:IIS 7.0

Background: Received a red-headed document from the superior, requesting to ensure the safety of network information operation between National Days.

Policy: Take security measures for the server, such as: prohibit remote connection, prohibit remote connection to the database, strengthen firewall and other measures.

Problem: Server "over-protection" prevents recovery of remote connection to server and remote connection to database system.

Solution 1:

First, all corresponding services and port numbers are enabled, but when the terminal connects to the remote server, it displays a login refusal, as shown in the following figure:

Remote cannot connect to the database, as shown in the following figure:

Solving both problems: It took about three afternoons to solve.

In order to maintain the convenience of peacetime, we have to find a way to solve.

Solution 2:

Considering that there are more than a dozen websites hanging under IIS, backup IIS first. The backup method is as follows:

IIS How to configure export and import

1. Export Configuration:

1)First open IIS Manager, then select the server node, and select "Shared Configuration" on the right, as shown in the following figure:

2)Select Export Configuration, define the export path, and enter the encryption password. Click OK to export the configuration, as shown in the following figure:

3)Find backup files under the path to settings and save them. The names are administration.config, applicationHost.config, configEncKey.key, as shown in the following figure:

After exporting the configuration file, you can import it after installing the system and IIS. Before importing, it is recommended that users backup the newly installed IIS configuration in the new server, so that problems can be restored.

2. Import Configuration:

1) Open IIS Manager, select the server node, select Shared Configuration, check Enable Shared Configuration, select the configuration file directory to be imported in the Physical Path column, click Apply, enter the password set during export, and click OK, as shown in the following figure:

2)Then restart IIS services as shown below:

3)Then enter "Shared Configuration" again, remove the check mark before "Enable Shared Configuration", select "Yes" for all, and finally restart IIS for the second time, and the configuration import can be completed.

The backup and recovery of IIS mentioned above is convenient for us to recover the operating system and quickly restore the Web server IIS production environment.

3. Recovery of operating system: Next, I restored the operating system backed up a few years ago. It took more than two hours to complete the recovery. I forgot my password when logging in to the operating system. After cracking the password, I found other problems, such as the browser could not be opened, IIS could not be installed, and the database could not be installed, indicating that the backup system was damaged or infected.

Solution 3:

In the above two ways can not solve the case, finally only choose to reinstall the system, in fact, reinstall the system is a lot of risk, for example: there are important data on the server, can not be lost; whether can quickly install the system; in fact, in the installation of the entire system process, find the driver to find the most difficult, after finding many times to try to install the operating system, the key final step, must remember to start through the local hard disk.

The installation process is shown below:

The driver must load successfully before installation can proceed.

At this point, the operating system is installed. It was about 18:00 p.m. before I came home from work, so it was quite hard to do technical work, especially operation and maintenance work.

The third floor of the school

Road scenery

When you get home, continue configuring your production environment remotely:

1. To install the database system, be sure to choose a mixed installation:

2. Install IIS, backup the original IIS first, and then restore the IIS backup before installing the operating system. The process is very successful; however, after restoring IIS, several errors are reported:

IIS installation success interface

The above IIS several problems, you go to the Internet to check, found that the problem scenario is consistent, but the final solution to the problem is completely different, I am by removing the web.conf configuration file "index.aspx" code segment, to solve the problem.

Today is a tired day, late at night to write a blog, the above write more miscellaneous, the following is a summary of actual combat experience:

1. It is recommended to purchase a unified brand server, so that the familiarity with the server is high, and there is no need to disperse too much energy to study one by one;

2. Where can the driver corresponding to the server be obtained and backed up, and it can be quickly and easily found when needed;

3. Server corresponding driver, it is recommended to save a cloud disk, office computer, internal FTP server, CD backup, learn to download from the official website;

4. Make more backups of data, programs, and configuration files on the server, preferably physical isolation backups, to facilitate rapid recovery when data is damaged or lost;

5. After installing the operating system on the server, install the necessary drivers first, then modify the host name and domain, connect to the network, and then install antivirus software and security guards for rapid or comprehensive antivirus;

6. After completing the above steps, you can install the database system, install the database to choose mixed installation, do not install unnecessary services as much as possible, try not to open, consider resource consumption and security issues;

7. IIS installation, IIS services are many, do not need to install, production environment using minimal installation;

8. After completing the above steps, you can attach the database and publish the website, and you need to do the permission minimization setting;

9. The implementation of protective strategies must be studied and tested in advance, and recorded after implementation to facilitate recovery afterwards;

10. It is recommended to adopt virtual machines and do more testing and research to avoid unnecessary risks on production machines;

11. Production environment, it is recommended not to restore the system, less installation of the system, to have stability, durability;

12. It is very important to assign special personnel for special posts. If the administrative posts and technical posts continue for a long time, the pressure will be very high. Today, standing in the computer room for a day, this kind of work scene has become normal.

13. The work of management, standardization, system, process, training (going out for further study) and investment (software and hardware) must be carried out in depth, otherwise it will be difficult for informatization construction and application to be implemented for teaching, scientific research, management and life services.

14. Article 13 above will have a much greater impact than the technical professionals themselves.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.