Advice on a single server small network

I am trying to do a bit of reasearch into a good SME network setup for under 5 users.

I want to know what server you all recommend (I will probably end up going for a Dell unless there are any other ideas here as money is always a factor)

I also want to know about running Exchange / AV / and backup programs all on one box. Can you run all these on 1 box? should you?
What kind of router would you advise? Maybe one that has AV and mail scanning on it to avoid having to put AV onto the server ....

Any suggestions are welcome. Basically I want a robust small network for under 5 users that take the following into consideration
1) Antivirus and spyware and spam
2) Network email
3) Backup & Disatster Recovery
4) Anything else I have missed that you know of!

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
I predsume you are looking at SBS server - it would be ideal.
As for AV software then whatever router you have i would put AV on the server . I use Mcafee and and happy with the results.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
We don't have much info to rely on, but, with only 5 users, it wouldn't be a good idea to put up more than one server. For now, the servers are that powerfull they can handle mail, printserver, fileserver and more.
There is more. Not even a Xeon is needed for 5 users. Under 10 users, a Core2Duo is more than enough. (Don't go for Celeron, but I guess you know the history). Don't go for AMD either, it is not a good ideo for the server.
Further, you can install a 64bit edition of Windows server and put, say, 4GB Ram in it. Ram is more important than the processorspeed is.

The router: When you want to use good security with no worries: you better use an appliance instead of just a router. Fortigate does a good job. It is automatically updates, stops virusses, stops spam, has integrated firewall etc. You can by example configure it this kind even chat programs are blocked.
A Fortigate you can get as small or as large as you want (there are models fot 10 users to models for 5.000 users). Check out
Fortigate is not the only one, there are appliances from Symantec, McAfee, ... Fortigate is the only one IU am expirienced with.

For 5 users, Small Business server is a good idea (the new one will be 64bit only).

Lamont77Author Commented:
- Yes its definately going to be 2003 SBS.
- Its also definately just going to be 1 server

- when dealing with 64bit OS is there anything I need to be aware of? I have no experience with 64bit OS's. Is there a problem with compatibility or driver issues ... basically what do I need to take into consideration when dealing with 64bit OS's?

I have heard of Fortinet and they do sound like exactly what I need. I also heard that Draytek's are pretty good in this area too? Can anyone go into a bit of detail on the comparrison for me (this isnt too important)?

So basically so far I can say that I will be buying 1 server that will have 2003 Small Business Server, Anti-virus (Trend proabably), and backup software ... maybe commvault.

ONE MORE QUESTION - On a different area .... When setting up DNS on the server Do I need to use the DNS snap-in or can I just leave the router/TCP/IP properties to manage this? Also how do I avoid having an open realy when settnig up the exchange server?

Cheers guys
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

Fortigate is the only one I am expirienced with. We have a few of those, and they do the trick.
I live by the rule "never change a winning team", so I never tried others.

For the 64 bit issue: For now, the drivers are there. Expecially buing a new machine, they are delivered with. Shure so for branded PC's like Acer, Dell, HP, ...
Further: it is a server, there is no need to connect "older" hardware like camera's, scanners etc.
There will be no need for those drivers.
The technology for the server is transparant for the workstations. Using 32 or 64 bit, the workstations act the same.

Regarding your DNS question. I assume your server will be a domain controller.
Best thing to do is making the server a DHCP server, a DNS server and a WINS server.
The workstations should refer to the server only as DNS server.
This is needed for Active Directory to work.

Let's state this by an example:
You have a domain "";
the mail will be on your server, in domain ""

your workstations state "" as POP and SMTP servers.
When a workstation tries to send a mail, it consults the DNS to resolve the name ""
When the DNS server is your domain controller, all goes fine. Active directory will pass your serveradress.
When it is the router, it gets out to resolve the domain, and in the best case, it sees its own WAN adress (if you registered the domain).

This is one of the reasons your server shoud do DNS resolving.

The server needs a fixed IP adress too. It is easy to make the server DHCP server and give the router an ip adress in the same range, but out of the scope of the DHCP.

By example: your server =
It is DHCP and has the scope to
Your router can be
This is the default gateway for the workstations. You enter this adress as routeradress in the DHCP options.

Brian PiercePhotographerCommented:
You should disable DHCP on any routers and use only your SBS server to provide DHCP, DNS and WINS (if you need WINS at all).
I also like fortinet.  The fortigate 60B is probably what you are looking for.  The protection bundle gives you antivirus, antispam, ips, and content filtering.

Windows sbs 2003 is also a great choice.  The standard edition comes with 5 cals and has exchange built into it. 64 bit would give you the ability for higher ram capacities, but for 5 users the 4GB max for the sbs should be enough.  If you are worried about 64bit then I would just install the 32bit version and be done with it.

You mentioned Trend as the av solution.  Their client server messaging for smb is a quality product.  the new version has anti-spyware built in, and exchange server protection.

Windows sbs has to have an internal domain controller, so you will need an internal dns to resolve inside that forwards to an external one for internet name resolution.  The sbs setup out of the box also prevents your exchange from being an open relay.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.