Operating System Management

Benefits of Operating System Management

We manage servers that run Windows Server, Debian GNU/Linux and other Linux distributions.

Windows Server licensing: CSP and SPLA

As a Microsoft CSP partner we provide the Windows Server license for your own server. On servers that we host, we provide the Windows Server license through Microsoft SPLA on a monthly rental basis. Details: Software Licensing.

What does operating system management cover?

Operating system management means running the installation, configuration, updates and monitoring of servers through a regular process. We manage physical servers and virtual machines with the same process.

• Installation and configuration: we install the operating system and configure server roles and services as needed.
• User and permission management: we restrict administrator accounts and grant permissions by job role.
• Disk and storage: we monitor disk usage and plan partition and capacity changes.
• Logs and monitoring: we connect system logs and resource usage to the monitoring platform. Details: Monitoring and Alarm Management.
• Virtualization: we manage virtual servers on Proxmox VE, Microsoft Hyper-V and VMware vSphere.
• Version upgrades: we prepare an upgrade or migration plan for versions that reach end of support.

What is server hardening?

Server hardening is configuration work that reduces the attack surface of a server. Published guides such as the CIS Benchmarks list secure configuration settings for Windows Server and Linux distributions. We select the hardening steps by the role of the server and test them before we apply them.

• Remove unused services and software packages.
• Restrict remote management access (RDP, SSH) to authorized networks and accounts.
• Use keys instead of passwords for SSH access on Linux servers.
• Define password and account lockout policies.
• Open only the required ports in the operating system firewall.
• Write sign-ins and permission changes to audit logs.

Why are end-of-support operating systems a risk?

The vendor does not release regular security updates for an operating system version that has reached end of support. A new vulnerability in that version stays open.

Microsoft defines mainstream support and extended support phases in the product lifecycle. When extended support ends, the product no longer receives regular security updates. In Debian, the security support of each stable release lasts for a limited time. The Debian LTS project extends this support for a further period.

We track the end-of-support date of each server in the inventory. We plan the version upgrade or the move to a new server before support ends.

How does the management process work?

1. Discovery and inventory: we list the servers, operating system versions, roles and end-of-support dates.
2. Status report: we report missing updates, end-of-support versions and configuration risks.
3. Remediation: we fix priority risks in maintenance windows that we agree with you.
4. Monitoring and backup: we define monitoring rules and backup jobs and test restores.
5. Regular maintenance: we apply updates in a planned maintenance window after testing.
6. Reporting: we report the maintenance work done and the open risks periodically.

Our Partners