Share via

Windows Server Solutions BPA Checklist

  • Article

[Today's post comes to us courtesy of David Copeland from Commercial Technical Support]

Earlier this month we published a post introducing the new Windows Server Solutions BPA, which is currently available for download.  Below is a list of the checks, broken down by each product supported, that the Windows Server Solutions Best Practices Analyzer (BPA) performs as of 4/25/2011.  We will publish updates to this list as new checks are added in the future:

Small Business Server 2011 Standard Edition

Checks the following service’s start mode:

  • DNS Client – DNSClientStartModeSection
  • DHCP Client – DHCPClientStartModeSection
  • IIS Admin Service – IISAdminStartModeSection
  • Remote Registry – RemoteRegistryStartModeSection
  • Remote Desktop Gateway – TSGatestartModeSection
  • Windows Update – AutoUpdatestartModeSection
  • Distributed Transaction Coordinator – DTCStartModeSection
  • Netlogon – NetlogonStartModeSection
  • DNS Server – DNSServerStartModeSection
  • Windows SBS Manager - SBSMgrstartModeSection

Checks that the following services are started:

  • DNS Client – DNSClientStartedSection
  • Windows Update – AutoUpdatesStartedSection
  • DHCP Client – DHCPClientStartedSection
  • IIS Admin Service – IISAdminStartedSection
  • World Wide Web Publishing Service – W3SVCStartedSection
  • Remote Registry – RemoteRegStartedSection
  • Remote Desktop Gateway – TSGateStartedSection
  • Windows Time – W32TimeStartedSection
  • Distributed Transaction Coordinator – DTCStartedSection
  • Netlogon – NetlogonStartedSection
  • DNS Server – DNSServerStartedSection
  • Windows SBS Manager - SBSmgrStartedSection

Checks the following service’s logon account:

  • DNS Client – DNSClientStartNameSection
  • Windows Update – AutoUpdatesStartNameSection
  • DHCP Client – DHCPClientStartNameSection
  • World Wide Web Publishing Service – W3SVCStartNameSection
  • Remote Desktop Gateway – TSGatewayStartNameSection
  • Windows Time – W32TimeStartNameSection
  • Distributed Transaction Coordinator – DTCStartNameSection
  • Netlogon – NetlogonStartNameSection
  • DNS Server – DNSServerStartNameSection
  • Windows SBS Manager - SBSMgrStartNameSection

Other Checks:

  • SKUsFoundSection – Returns the Operating System Platform name
  • PingDefGtwySection – Checks to see if the server is not able to ping the default gateway
  • PingDefGtwyOKSection – Checks to see if the server is able to ping the default gateway
  • Check2IPsSection – Checks to see if there are multiple IP addresses on the network card
  • IPFilteringSection – Checks to see if IP Filtering is enabled
  • HyperVSection – Checks to see if the Hyper-V role is installed
  • IPv6Section – Check to see if IPv6 appears to be improperly disabled
  • KernelAuthEnabledSection – Check to see if Kernel Mode Authentication is enabled in the applicationhost.config for IIS
Small Business Server 2011 Essentials

Checks the following service’s start mode:

  • DNS Client – DNSClientStartModeSection
  • DHCP Client – DHCPClientStartModeSection
  • IIS Admin Service – IISAdminStartModeSection
  • World Wide Web Publishing Service – W3SVCStartModeSection
  • Remote Registry – RemoteRegistryStartModeSection
  • Remote Desktop Gateway – TSGatestartModeSection
  • Windows Time – W32TimestartModeSection
  • Windows Update – AutoUpdatestartModeSection
  • Distributed Transaction Coordinator – DTCStartModeSection
  • Netlogon – NetlogonStartModeSection
  • DNS Server - DNSServerStartModeSection

Checks that the following services are started:

  • DNS Client – DNSClientStartedSection
  • Windows Update – AutoUpdatesStartedSectio
  • DHCP Client – DHCPClientStartedSection
  • IIS Admin Service – IISAdminStartedSection
  • World Wide Web Publishing Service – W3SVCStartedSection
  • Remote Registry – RemoteRegStartedSection
  • Remote Desktop Gateway – TSGateStartedSection
  • Windows Time – W32TimeStartedSection
  • Distributed Transaction Coordinator – DTCStartedSection
  • Netlogon – NetlogonStartedSection
  • DNS Server - DNSServerStartedSection

Checks the following service’s logon account:

  • DNS Client – DNSClientStartNameSection
  • Windows Update – AutoUpdatesStartNameSection
  • DHCP Client – DHCPClientStartNameSection
  • IIS Admin Service – IISAdminStartNameSection
  • World Wide Web Publishing Service – W3SVCStartNameSection
  • Remote Desktop Gateway – TSGatewayStartNameSection
  • Windows Time – W32TimeStartNameSection
  • Distributed Transaction Coordinator – DTCStartNameSection
  • Netlogon – NetlogonStartNameSection
  • DNS Server - DNSServerStartNameSection

Other Checks:

  • SKUsFoundSection – Returns the Operating System Platform name
  • PingDefGtwySection – Checks to see if the server is not able to ping the default gateway
  • PingDefGtwyOKSection – Checks to see if the server is able to ping the default gateway
  • Check2IPsSection – Checks to see if there are multiple IP addresses on the network card
  • IPFilteringSection – Checks to see if IP Filtering is enabled
  • HyperVSection – Checks to see if the Hyper-V role is installed
Windows Storage Server 2008 R2 Essentials

Checks the following service’s start mode:

  • DNS Client – DNSClientStartModeSection
  • DHCP Client – DHCPClientStartModeSection
  • IIS Admin Service – IISAdminStartModeSection
  • World Wide Web Publishing Service – W3SVCStartModeSection
  • Remote Registry – RemoteRegistryStartModeSection
  • Remote Desktop Gateway – TSGatestartModeSection
  • Windows Time – W32TimestartModeSection
  • Windows Update – AutoUpdatestartModeSection

Checks that the following services are started:

  • DNS Client – DNSClientStartedSection
  • Windows Update – AutoUpdatesStartedSection
  • DHCP Client – DHCPClientStartedSection
  • IIS Admin Service – IISAdminStartedSection
  • World Wide Web Publishing Service – W3SVCStartedSection
  • Remote Registry – RemoteRegStartedSection
  • Remote Desktop Gateway – TSGateStartedSection
  • Windows Time - W32TimeStartedSection

Checks the following service’s logon account:

  • DNS Client – DNSClientStartNameSection
  • Windows Update – AutoUpdatesStartNameSection
  • DHCP Client – DHCPClientStartNameSection
  • IIS Admin Service – IISAdminStartNameSection
  • World Wide Web Publishing Service – W3SVCStartNameSection
  • Remote Desktop Gateway – TSGatewayStartNameSection
  • Windows Time - W32TimeStartNameSection

Other Checks:

  • PingDefGtwySection – Checks to see if the server is not able to ping the default gateway
  • PingDefGtwyOKSection – Checks to see if the server is able to ping the default gateway
Windows MultiPoint Server 2011

Checks the following service’s start mode:

  • Windows MultiPoint Server Host Service - WMSSvcStartModeSection

Checks that the following services are started:

  • Windows MultiPoint Server Host Service – WMSSvcStartedSection
  • Remote Desktop Services - TermServiceStartedSection

Checks the following service’s logon account:

  • Windows MultiPoint Server Host Service - WMSSvcStartNameSection

Other Checks:

  • SRCShellAccountExistsSection – Verifies the SRCShell local account exist

Comments