PDS communication is encrypted by default, which is a nice to see (not enough business apps encrypt communications). Of course since its an externally facing application, its important to ensure good passwords are being used by all employees.

The other important thing is backup - PDS uses an MS SQL database which requires a bit of experience to backup. We decided to use BackupAssist with the SQL plugin to push the files out to their Nitix server’s Intelligent Disk Backup.

Unlike other small business servers which make you pick the pieces and integrate them yourself, NitixBlue bundles one of the strongest sets of antispam tools around. NitixBlue has for years integrated the Vircom content scanning, but to better fight the growth of spam they’ve now added Engate’s network-level scanning.

Engate’s MailSentinel catches spam by evaluating profiling the network properties of a message. For example lets say you get a message from accounts@paypal.com, Engate will see if that message originated from a Paypal server or spoofed the data - then tosses out the illegitimate emails.

The results? By combining both industry leading network and content level antispam, small businesses can get 99% or greater effectiveness from their antispam protection. Unlike other solutions this doesn’t require an expensive additional filtering box, no complex setup, and simple inexpensive licensing.

The first question any small business should ask themselves when looking at a server is what functionality are you seeking? The reality is most small businesses use their servers for a few simple tasks - file storage and sharing, backup, user login authentication, calendar sharing, maybe email (often they use the webhost), and firewall/remote access. Lets look to see if Windows SBS actually fulfills these needs efficiently.

File Storage and Sharing
Windows SBS does a fine job of serving up files, but is lacking in ease of setup. It seems obvious that if you add a user you’d want to give that user straightforward access to their file share, Windows desktop does that by mapping the drive - but Windows SBS doesn’t make that a simple option! The same goes for groups to share data. Making using the server more difficult to the end user leads to people not storing data on the server but rather their desktop - meaning its probably not being backed up.

Backup
Windows SBS backup is largely worthless. I’ll give one simple example - Windows SBS backup can’t even backup Exchange data properly - and Exchange is integrated in the system! Don’t even get me started on SQL, open files, etc. Realistically recovery from a hard drive crash is days of work and thousands of dollars. Of course this can be solved by integrating third party hardware and software, at additional cost.

User Login Authentication
Windows does fine here, Active Directory is certainly complex and overkill, but not too difficult to manage or full of pitfalls.

Calendar Sharing and Email
This falls under the loved and hated Exchange component of SBS. Exchange is both powerful and complex, so much so that some people’s careers are dedicated to just Exchange administration and multiple magazines focus solely on this component. My favorite example of the difficulties of Exchange is the article “My Thirteen Days in Exchange Hell” detailing Outlook Power Magazine’s own experience in restoring their backups after their Exchange server crashed. If a magazine dedicated to Exchange power users can’t prevent or recover from a crash in a timely manner - what chance does an average small business have?

Of course no email system is complete without antivirus and antispam, which means more third party integration.

Firewall/Remote Access
Windows SBS Standard doesn’t include a firewall and while Premium does, I wouldn’t recommend trusting any security issue to Windows given the poor security history of the product. In which case if you use a third party hardware firewall, most include great VPN remote access capabilities - so while Windows SBS does include VPN remote access its best left to the firewall.

The Integration Problem
In cases of backup, antivirus and antispam, and firewall you’ll need to integrate third party systems to make everything work - thats where the costs and risks multiply. Third party solutions mean more setup time, more testing time, and a greater risk of conflicts. No longer is Windows SBS an off the shelf solution but instead a do-it-yourself project. Since no one vendor is testing the whole custom package, you end up paying your consultants to do this work.

The Real World
What we see in the real world is most Windows SBS installations have serious problems. In most cases they start out with the best intent, but the project snowballs and gets cut off, because unfortunately few consultants really know how to do Windows SBS right (or quote accurately) and fewer companies know what to expect or desire to pay so much to get it done right.

The often humorous oversights, lack of valuable integration, and overwhelming ability to do things wrong with Windows SBS makes it truly impractical for most small businesses. Windows SBS gives you nearly unlimited ability but at high cost and risk - ultimately limited ability that small businesses truly need in a secure and integrated package is far more desirable.