Installing Network/Server for a Small Business.... Need Professional Advice

88keys

Golden Member
Aug 24, 2012
1,854
12
81
The place I work isnt really big enough to have a professional IT person so that pretty much means that duty falls upon me because I'm by far the most technically proficient employee they have when it comes to this stuff. In a nutshell, I recently started work for this company of 25 employees which primarily does in research and development and therefore deals with sensitive information. The current network they have now is a hodge podge of consumer end equipment which isn't really up to the task which it is performing, so once I get a full scope (which I will be looking into Friday) of what they need and want of their computer system.

But as of right now, here the things I know I will need and hence some of the questions I have right now:

Needs:

Network Cables:
Installed network cables plenty of times, some (though very little) of this will be through drywall which Implies that plenum cables will be needed. But I don't know if the building codes are different in commercial/industrial buildings and whether shielded is desired or necessary. Generally speaking Cat5e would suffice as I plan to install a gigabit lan, but I'm considering Cat6/6a as I would expect that prices on 1gbps+ networking equipment to come down as Wireless devices have now reached gigabit speeds.

Network Switch:
A single 24 port gigabit switch should suffice as they have about 10 total PCs and several additional network capable devices that may get network access someday, but my experience with this stuff is in the consumer end.

Router:
I've been running DD-WRT for many years and I'm quite used to it. I know it's rather robust compared to typical consumer router firmware, but I dont know how comprable it is to a professional end router. I've also tinkered with Open WRT x86 for a month or so. I really liked it and found it easy to work with. Only reason I stopped using it was because I had a problem dedicating a PC as a home use router. Not sure if it's an appropriate solution for this, but I thought that I'd mention it.

Firewall/Security:
I
personally have never resorted to anything fancy in regards to this beyond high end consumer routers. My solution is that I just don't do stupid things and back my computer up regularly. I don't even run anti-virus. If things start going awry, I just reload the most recent image and carry on. So in that sense, I have no clue as to what is appropriate for a small business.

Backup/Imaging Solutions for Client PCs:
This is important and needs to be done yesterday. Some PCs perform very critical functions and if they went down it would be a disaster. Therefore I need something that can get one up and running quickly in the event of failure. Personally, I use Clonezilla to install from images hosted on my Nas4Free server. It's easy and works great. Never used Norton Ghost or any other paid program. I know that some can re-image PCs remotely which could be nice, but I have no clue how that is setup. The closest thing I have done in regards to that is that I once had a PXE server hosting Windows XP installation files back when I fixed PCs all the time. But that wasn't a system image and it was kind of a pain to setup as I recall, but it was a long time ago so that may have improved since. Ideally it would be nice to have a solution which is intergated with a server and naively supports imaging to different size drives without having to resize partitions later (if that exists).


Backup/Imaging Solutions for Server Files:
This is also very important as there is alot of important data that they can't afford to lose. I personally use raid 1 on my server, and the last HDD failure that I've encountered was on a 10GB Maxtor in 1999. Didn't know shit back then because if I did, I would't have bought a Maxtor. In any case, I would like a robust solution that would involve an offline backup of some kind in case of a massive failure to the server itself. Perhaps raid 1 in conjuntion with an offline backup via an external drive, unless there is an affordable/reliable tape solution. Another thing is that I'm not sure how much storage space is really needed here. Roughly speaking I'd guesstimate about 10TB, but there could be more depending on how much space the HDD images for each would take.

Server/File Shares:
This is the most pressing need at this time, they claim to have a 'server', but my suspicion is that it's just a Windows PC with shared folders because they don't use it as a server and file transfer speeds are horrendously slow, so they transfer most things with flash drives which is time consuming as hell for them. In my home, I've used Nas4free/FreeNAS for years and based on my personal experience; I would expect it to work well for simple file sharing. However Nas4free/FreeNAS is limited, though you can expand it's functionality running apps in a jail. However, my personal experience with FreeNAS is that it works well when you perform the tasks which it was intended to perform, and the further you stray away from those tasks, the more problems you will encounter.
So basically we don't have alot of room for growth so to speak and I try to think forward when I'm setting things up because the need to host a few thin clients could come up in the near future. To put it another way, I'll pave a road because it's what I need today, but I like to have the foresight to leave room for extra lanes and traffic lights when the time comes.
Having said that I'm looking at Windows Server Essentials. I'd look at Ubuntu Server, but I'm not well versed enough with Linux to ever work on a system like that beyond just tinkering with it on my own time. I need things to work and I can't spend all day getting it to work when something goes wrong as IT is not my primary duty with this company.


Maintaining Confidential Information on Client PCs/Server Shares/etc:
Very important this is done right because HR and Operations both deal with confidential information so I would like to know the best way to ensure that lower lever users can only access what they need to access and nothing more. One of my former employers had professional IT and they were HORRIBLE at doing this. HR is the main concern and my plan is to let that be it's own world and not have any HR related info shared on the server including the system images of that client. However HR does perform some tasks for operations so they would need access to the server. I would like every PC that deals with sensitive information to be able to see the network, but not to allow any of the other PCs to see them. I'm guessing this is the best way to make sure these clients won't be compromised via LAN.

WiFi
The plan for this is to only have it for internet access. That being said, I suppose the best solution is to establish a separate LAN just for this. However, the place as a rather large footprint (about the size of a large convenience store) and I seriously doubt that even a high end consumer wireless router would provide adequate coverage. That being said, would the better solution be a good conumer router a few repeaters, or would a professional solution be order?

Some things that I'm looking at:

Printers/Scanners:
Right, they have a couple of (higher end) inkjet printers for everything, but I know this is costing them a fortune in ink. Generally speaking, one color and one black and white printer should suffice along with two scanners that would handle the workload of a small business.

Email Services:
Don't really have a clue in regards to this, but they have had to switch email providers a few times because certain customers don't like certain providers (i.e. yahoo) for obvious reasons. Either way, I feel that something uniform even if it's just for several people would be a good idea going forward. Don't know what exchange services cost, but I know that google provides a similar alternative service tailored to small business. There is also the possibility of hosting your own email, but I've never done that and I know that it's not as simple as hosting a website.


Other Stuff:

Printers/Scanners:
Right, they have a couple of (higher end) inkjet printers for everything, but I know this is costing them a fortune in ink. Generally speaking, one color and one black and white printer should suffice along with two scanners that would handle the workload of a small business.

Helpful Tips:
I'm not a networking/IT professional, I'm just a long time enthusiast who cares about things being right even if I'm not sue what I'm getting into. I'm not dealing with the most computer savvy people here so It's important that things are simple and easy for the end user, but secure and functional under the hood (think iOS). So all that being said, I would like to some tips regarding good practices to keep things running smoothly without it taking an excessive amount of time. If a PC goes down, I would like to be able to have it or a replacement running within an hour or so.
 
Last edited:

Genx87

Lifer
Apr 8, 2002
41,095
513
126
Network Cables: Does the building not have network cables installed? I would hire somebody to run the cabling. Cat 6a is optional. Unless you really plan to get nice APs. The dream of achieving over 1Gbps per client is not going to happen.

Network Switch: For a 25 person business a lower end HP pro-curve will work.

Router\Firewall: Sophos UTM 9 imo

Backup/Imaging Solutions for Client PCs: If you want the ability to create a base of each client then add in incrementals. I believe Acronis can do this.

Backup/Imaging Solutions for Server Files: Consider virtualizing production on a single host using VMWare of Hyper-V. And using something like Veeam to backup to an external device. You will also want to have a rotation of disks that go off site in case of DR.

Server/File Shares: Are you running active directory? If so then Windows server for the file shares.

Maintaining Confidential Information on Client PCs/Server Shares/etc: If using Active Directory windows file shares have permissions. You can also encrypt client machines drives with bitlocker

WiFi: Im a huge proponent of Meraki. A bit spendy but very easy to use and the radios are solid.

Printers/Scanners: For 25 people lease a single color\B&W multi-function printer.

Email Services: Office365.
 

sdifox

No Lifer
Sep 30, 2005
93,785
14,335
126
If the place can't afford one full time it employee, what makes you think it is willing to spend that kind of cash?
 
  • Like
Reactions: boomerang

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,098
126
Ask local professional do this for the business, you can supervise the process and learn, doing this yourself is asking for trouble.

Sign a contract and let the pro do onsite or remote service for whatever length until everything stabilized.

===

If you go with Windows Server route, your client PC must have Windows Pro/Enterprise installed. Home edition can't join a domain.

Without joining a domain, many client PC settings can't be controlled, then you negate the purpose of running a Windows Server.

Windows Server Essentials supports up to 25 users. Should be OK since you have only 10 PC.

If you don't want to use Windows Server, then Synology is a great choice.

Create network share folder and force everyone to save his/her stuff on the server, no exception. This can be done using Windows Group Policy, don't think Synology can do this.

Backup your server & everything will be backed up. Backing up individual PC makes no sense.

Do not host Exchange yourself, it's complex and you need to purchase and maintain antivirus server software , everyone will ask your help for his / her simplest email problem. Besides, you need yet another Windows Server to run Exchange if you are running Essentials.

===

Did not notice you have PC running critical programs. Then yes, you need client PC backup. Macrium is good.

===

Replace inkjet with brother color laser printer or color laser AIO, you absolutely need duplex function

https://www.amazon.com/Brother-HL-3170CDW-Wireless-Networking-Replenishment/dp/B00BQU141C

https://www.amazon.com/dp/B00C6MNQ92?ref=emc_b_5_i

and you need brother B/W laser with duplex too.
 
Last edited:

[DHT]Osiris

Lifer
Dec 15, 2015
13,148
10,970
146
The place I work isnt really big enough to have a professional IT person so that pretty much means that duty falls upon me because I'm by far the most technically proficient employee they have when it comes to this stuff. In a nutshell, I recently started work for this company of 25 employees which primarily does in research and development and therefore deals with sensitive information. The current network they have now is a hodge podge of consumer end equipment which isn't really up to the task which it is performing, so once I get a full scope (which I will be looking into Friday) of what they need and want of their computer system.

But as of right now, here the things I know I will need and hence some of the questions I have right now:

Needs:

Network Cables:
Installed network cables plenty of times, some (though very little) of this will be through drywall which Implies that plenum cables will be needed. But I don't know if the building codes are different in commercial/industrial buildings and whether shielded is desired or necessary. Generally speaking Cat5e would suffice as I plan to install a gigabit lan, but I'm considering Cat6/6a as I would expect that prices on 1gbps+ networking equipment to come down as Wireless devices have now reached gigabit speeds.

Network Switch:
A single 24 port gigabit switch should suffice as they have about 10 total PCs and several additional network capable devices that may get network access someday, but my experience with this stuff is in the consumer end.

Router:
I've been running DD-WRT for many years and I'm quite used to it. I know it's rather robust compared to typical consumer router firmware, but I dont know how comprable it is to a professional end router. I've also tinkered with Open WRT x86 for a month or so. I really liked it and found it easy to work with. Only reason I stopped using it was because I had a problem dedicating a PC as a home use router. Not sure if it's an appropriate solution for this, but I thought that I'd mention it.

Firewall/Security:
I
personally have never resorted to anything fancy in regards to this beyond high end consumer routers. My solution is that I just don't do stupid things and back my computer up regularly. I don't even run anti-virus. If things start going awry, I just reload the most recent image and carry on. So in that sense, I have no clue as to what is appropriate for a small business.

Backup/Imaging Solutions for Client PCs:
This is important and needs to be done yesterday. Some PCs perform very critical functions and if they went down it would be a disaster. Therefore I need something that can get one up and running quickly in the event of failure. Personally, I use Clonezilla to install from images hosted on my Nas4Free server. It's easy and works great. Never used Norton Ghost or any other paid program. I know that some can re-image PCs remotely which could be nice, but I have no clue how that is setup. The closest thing I have done in regards to that is that I once had a PXE server hosting Windows XP installation files back when I fixed PCs all the time. But that wasn't a system image and it was kind of a pain to setup as I recall, but it was a long time ago so that may have improved since. Ideally it would be nice to have a solution which is intergated with a server and naively supports imaging to different size drives without having to resize partitions later (if that exists).


Backup/Imaging Solutions for Server Files:
This is also very important as there is alot of important data that they can't afford to lose. I personally use raid 1 on my server, and the last HDD failure that I've encountered was on a 10GB Maxtor in 1999. Didn't know shit back then because if I did, I would't have bought a Maxtor. In any case, I would like a robust solution that would involve an offline backup of some kind in case of a massive failure to the server itself. Perhaps raid 1 in conjuntion with an offline backup via an external drive, unless there is an affordable/reliable tape solution. Another thing is that I'm not sure how much storage space is really needed here. Roughly speaking I'd guesstimate about 10TB, but there could be more depending on how much space the HDD images for each would take.

Server/File Shares:
This is the most pressing need at this time, they claim to have a 'server', but my suspicion is that it's just a Windows PC with shared folders because they don't use it as a server and file transfer speeds are horrendously slow, so they transfer most things with flash drives which is time consuming as hell for them. In my home, I've used Nas4free/FreeNAS for years and based on my personal experience; I would expect it to work well for simple file sharing. However Nas4free/FreeNAS is limited, though you can expand it's functionality running apps in a jail. However, my personal experience with FreeNAS is that it works well when you perform the tasks which it was intended to perform, and the further you stray away from those tasks, the more problems you will encounter.
So basically we don't have alot of room for growth so to speak and I try to think forward when I'm setting things up because the need to host a few thin clients could come up in the near future. To put it another way, I'll pave a road because it's what I need today, but I like to have the foresight to leave room for extra lanes and traffic lights when the time comes.
Having said that I'm looking at Windows Server Essentials. I'd look at Ubuntu Server, but I'm not well versed enough with Linux to ever work on a system like that beyond just tinkering with it on my own time. I need things to work and I can't spend all day getting it to work when something goes wrong as IT is not my primary duty with this company.


Maintaining Confidential Information on Client PCs/Server Shares/etc:
Very important this is done right because HR and Operations both deal with confidential information so I would like to know the best way to ensure that lower lever users can only access what they need to access and nothing more. One of my former employers had professional IT and they were HORRIBLE at doing this. HR is the main concern and my plan is to let that be it's own world and not have any HR related info shared on the server including the system images of that client. However HR does perform some tasks for operations so they would need access to the server. I would like every PC that deals with sensitive information to be able to see the network, but not to allow any of the other PCs to see them. I'm guessing this is the best way to make sure these clients won't be compromised via LAN.

WiFi
The plan for this is to only have it for internet access. That being said, I suppose the best solution is to establish a separate LAN just for this. However, the place as a rather large footprint (about the size of a large convenience store) and I seriously doubt that even a high end consumer wireless router would provide adequate coverage. That being said, would the better solution be a good conumer router a few repeaters, or would a professional solution be order?

Some things that I'm looking at:

Printers/Scanners:
Right, they have a couple of (higher end) inkjet printers for everything, but I know this is costing them a fortune in ink. Generally speaking, one color and one black and white printer should suffice along with two scanners that would handle the workload of a small business.

Email Services:
Don't really have a clue in regards to this, but they have had to switch email providers a few times because certain customers don't like certain providers (i.e. yahoo) for obvious reasons. Either way, I feel that something uniform even if it's just for several people would be a good idea going forward. Don't know what exchange services cost, but I know that google provides a similar alternative service tailored to small business. There is also the possibility of hosting your own email, but I've never done that and I know that it's not as simple as hosting a website.


Other Stuff:

Printers/Scanners:
Right, they have a couple of (higher end) inkjet printers for everything, but I know this is costing them a fortune in ink. Generally speaking, one color and one black and white printer should suffice along with two scanners that would handle the workload of a small business.

Helpful Tips:
I'm not a networking/IT professional, I'm just a long time enthusiast who cares about things being right even if I'm not sue what I'm getting into. I'm not dealing with the most computer savvy people here so It's important that things are simple and easy for the end user, but secure and functional under the hood (think iOS). So all that being said, I would like to some tips regarding good practices to keep things running smoothly without it taking an excessive amount of time. If a PC goes down, I would like to be able to have it or a replacement running within an hour or so.


Yeah... I'd be curious what the budget was for this stuff if they aren't willing to hire anyone. A high-tempo junior admin could take on this project (preferably supervised) for a ~$50k/yr range, depending on COL in the area. If they can't dough up for that you might be looking at getting shot down with any recommendation you make, because a full solution suite for something like this isn't going to be cheap.

You're either looking at setting up an MS domain infrastructure (virtual or physical), or a very convoluted third party/open source buildout which you will be the only person who knows how to maintain it, at which point it becomes your job (as well as whatever your other jobs are). Don't do this.

I'd very, VERY strongly recommend they take a look at what it would cost them to lose some/all of this research, and how much it would cost them to hire an IT person as well as some infrastructure, and weigh those against each other. Clarify to them that while things have been 'cheap' in the past, they're one common hardware failure away from a very, very bad day. If they absolutely positively refuse...

Wiring: Just go cat6, if you can realistically keep it aware from electrical wiring you might be fine with unshielded for that small of a build, I'd go shielded though since it's (reasonably) important data. Either pay someone to run it (quick, expensive) or you do it (slow, now your 'job').

Switching/Routing: Depends on the layout, but skip the consumer garbage and get a low-end HP or Cisco business device. Someone is gonna need to know how to configure it at least to some extent though (surprise, that's you).

Firewall Stuff: You can gimp it with the router if you do ACLs but it's an incomplete solution and asking for liability. Gonna have to pony up some scratch for a real firewall with a real support contract, or roll your own with some dual-nic *nix box and a ton of configuration (tada, also your job now, either way).

Backup/Imaging: Windows has built-in backup, you'll need a ton of storage to support it though. There's some dedupable backup solutions ($) or you can, again, roll your own with some reading/configuration (time, your job now). It needs to be offsite'd, which means more $ (not bad with cloud solutions though). Imaging is pretty much going to be Microsoft Deployment Toolkit (MDT) or a third party cloning thing, both of which are $ and your new job (seeing a theme here?)

Server/file shares: Might be worth looking to just offsite this from the getgo with Amazon S3 or something if reliability is more important than speed. If speed is a primary factor, time to roll your own. Pony up for a dell server or something ($) or roll your own (I think you know this one at this point).

File access restrictions: Say hello to Identity Management, probably looking at Active Directory w/NTFS permissions (along with auditing), which is $/Time.

Wifi: Probably the easiest part of this project. Gonna have problems if you try to do internal network -> wired and external network -> wireless though. I probably wouldn't bother unless it was for phones and tablets and crap.

Printers: By all means, find a way to save them money on printer ink so they can afford everything else they need.

Email: Given all the other crap you have to take care of, just get them to use gmail unless there's a VERY good reason not to (I don't like it doesn't qualify). This should be the last thing you're worrying about at this point.

Very roughly, I'd start with a budget of $40k. This is without knowing enough of the infrastructure though so that could be much higher or lower. If you're a non-profit, some companies will fork over free low-end stuff for you (vendor lock, tax writeoffs, goodfeels) which can save a TON of scratch. Hit up a few firewall manufacturers namely, their stuff is expensive and they love to give handouts.
 

XavierMace

Diamond Member
Apr 20, 2013
4,307
450
126
Network Cables: Does the building not have network cables installed? I would hire somebody to run the cabling. Cat 6a is optional. Unless you really plan to get nice APs. The dream of achieving over 1Gbps per client is not going to happen.

Network Switch: For a 25 person business a lower end HP pro-curve will work.

Router\Firewall: Sophos UTM 9 imo

Backup/Imaging Solutions for Client PCs: If you want the ability to create a base of each client then add in incrementals. I believe Acronis can do this.

Backup/Imaging Solutions for Server Files: Consider virtualizing production on a single host using VMWare of Hyper-V. And using something like Veeam to backup to an external device. You will also want to have a rotation of disks that go off site in case of DR.

Server/File Shares: Are you running active directory? If so then Windows server for the file shares.

Maintaining Confidential Information on Client PCs/Server Shares/etc: If using Active Directory windows file shares have permissions. You can also encrypt client machines drives with bitlocker

WiFi: Im a huge proponent of Meraki. A bit spendy but very easy to use and the radios are solid.

Printers/Scanners: For 25 people lease a single color\B&W multi-function printer.

Email Services: Office365.

Pretty much all of this, other than I'd say if you're going Sophos UTM for the router/firewall, I'd use their Access Points too. Makes life much easier and I find the range on their entry level modes to be better than the entry level Meraki's.