Solved

Server 2008 R2 Auditing - Hardware requirements?

Posted on 2013-02-05
5
649 Views
Last Modified: 2016-11-23
Hi Guys

I'm looking to upgrade a client from Server 2003 to 2008 R2 (or I may use 2012 if it's compatible with their database - database is simple program and does not use sql).
I'll be running 1x server with 2x visualized server installs.
(1x domain controller, 1x terminal server - not running in-house exchange)
Hardware most likely: Dell server box: 2x 2ghz Xeon processors, 24-32GB ram, sas raid0 for OS, sas raid5 for data.

I would like to enable auditing for login's, file access, file changes etc. I'm not sure of the load that Auditing will put on the hardware as I've never used it before.

How much impact should auditing have on my server hardware? Do I need to over budget on the hardware spec? Do I need a separate server box just for auditing?

Any help/pointers would be greatly appreciated.

Kind Regards
Aaron
0
Comment
Question by:moncomp
  • 2
  • 2
5 Comments
 
LVL 47

Expert Comment

by:dlethe
ID: 38857995
RAID0?  No. Totally unacceptable.  RAID1, RAID10, or RAID5/6, or any mix.  Anything but RAID0.

Your bottleneck will be I/O, not CPU or memory.  You have a baseline now, so use it.  I assume auditing is turned off on the client's system.  So exactly what do they have now, and is end-user perspective that it is too slow, just right, or plenty fast.  Run perfmon and look at the I/O queue depth, throughput, and I/Os per second.

You can't make an informed decision on what somebody needs based on what little information you supplied.  Use the end-user's own performance details to be the baseline.
0
 
LVL 1

Expert Comment

by:Sitaram Pamarthi
ID: 38858037
Aaron, In my experience I haven't noticed any significant impact on IO/CPU/Memory when auditing is enabled. It is fairly decent and haven't imposed any problems even on high end systems with SQL and heavy IO.
0
 

Author Comment

by:moncomp
ID: 38858052
Hi dlethe

Thanks for your reply :)
I'll try to answer as best I can.

Currently they have an old 2003 SBS server with 10x users. Auditing is not enabled on that server. Server is currently not overloaded cpu/ram or I/O.
The server is quite old so it will be phased out and a new server will be put in. On the new server the client is asking for auditing to be enabled help track who has accessed what and when. I figure 10x users, small file share, small database share program and no exchange shouldn't require a lot of I/O.

For the new server I was going to use Raid0 for the Hyper-V OS install and then raid5 for the VM machines.

I did not realize that Raid0 for the Hyper-V OS would cause I/O issues.
Would you recommend having Raid1 for the Hyper-V OS or Raid5/6/10? I thought Raid0 had better performance than Raid1 but less redundancy, only if used for the Hyper-V OS (not the VM machines)?

For the VM machine partitions which would you recommend Raid5/6/10, based upon such a small network?

Kind Regards
Aaron
0
 
LVL 47

Accepted Solution

by:
dlethe earned 500 total points
ID: 38858062
I don't recommend RAID0 for anything other than video streaming HDTV or data capture.  If you want speed, then RAID1 is nearly twice as fast as RAID0 in real-world testing on reads.  Why? Because every byte of data is in two places, and the O/S + hardware can load balance.

I also don't recommend RAID5, I go with RAID6 due to the extra redundancy.  Specifically, I prefer RAID6 for database, and a pair of SSDs in a RAID1 configuration for O/S, swap, and scratch table space.  

Auditing is typically statistically insignificant amount of overhead.
0
 

Author Comment

by:moncomp
ID: 38858083
Hi dlethe

That really makes good sense. Thanks for your help :)

Kind Regards
Aaron
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now