A server role in Windows Server 2008 R2 is defined as a service, feature, or program which allows a specific job function within a computer network. Many of these services are optional and do not come installed with Windows Server 2008 by default. Once roles are properly installed and configured they can become automated at a System Administrator’s disposal. The server roles available in Windows Server 2008 R2 are listed as follows:
Active Directory Certificate Services
This service is used for assigning and managing digital certificates used in software such as Adobe PDF’s. The AD-CS service is an excellent way to offer an extra layer of security among documents and files. Security layers consist of file encryption, digital signatures, and key authentication. AD-CS can also aid with Hyper Text Transfer Protocol Service (HTTPS) and authentication for employees using VPN services.

Active Directory Domain Services
Active Directory Domain Services allows computer, user, and device information to be stored. This allows for an easier, visual based management in a tree structured format; the domain is the host controller. AD-DS makes IT administration easier by allocating resources in one central, secure location.
Active Directory Federation Services (ADFS)
ADFS is a service which authenticates users in-between two parties over an extranet. This server provides user identity which recognizes and authenticates a user between two different servers, businesses, or locations in order to share access rights.
Application Server
Manages applications and operations between commonly used applications, servers, and users within a database.
Dynamic Host Configuration Protocol (DHCP) Server
DHCP services allows one static IP from an ISP to be allocated into multiple, dynamic IP addresses. This allows multiple computers to connect and access the internet; each one being assigned a unique ID to prevent packet conflicts between multiple devices.
DNS Server
DNS service resolves IP addresses into host names for IPv4 and IPv6 protocols. This makes it convenient for employees and users to enter a web address (www) instead of an IP address to connect.
Hyper-V
These services allow PC or Server virtualization directly within Windows Sever 2008. Services are utilized to run multiple virtual servers directly from one physical server. This can reduce cost, moving parts, and power consumption.
Network Policy and Access Services
Allows multiple protocols to manage network access among clients and employees. Anything ranging from routers to VPN access, to remote connectivity. Network Policy enables IT administration the capabilities to enforce network authentication and authorization.
Print Services
Somewhat self-explanatory; printer services allows the management of printer and print services over a network. Printers can be managed along with printer spool services. Print queues (spool services) and printer sharing can also be managed with Print Services.
Terminal Services
Provides the ability to host multiple sessions of Windows Server. Terminal Services can reduce total cost of ownership with this method. Terminal Services can also be used to deploy Windows applications or to administer Window OS computers.
Kudler Fine Food’s Virtual organization most likely has the following services installed as a minimum:
Active Directory Domain Services: Allows IT administration to manage and store information based on Kudler employees and computers.
Application Server: Some applications might be run or installed directly from a server to ensure all employees have the most current version with direct access to availability.
Dynamic Host Configuration Protocol (DHCP) Server: Allows Kudler employees to connect to the internet through one static IP address; each user is allocated a dynamic address. This helps IT know who is connecting to your system and helps IT administration maintain a secure network.
DNS Server: Used for Intranet and Extranet websites, storage systems, FTP servers, and more. This allows employees to directly connect to a website or application name instead of trying to track down the IP address associated.
Hyper-V: A virtual organization must include virtual host machines. VPN clients who work from home can connect to virtual desktops to ensure maximum security. Exchange or Web servers can be run through Hyper-V terminals to allow easier management and to reduce cost.
Network Policy and Access Services: Helps IT management to ensure users or clients are maintaining basic network policies. IT can block pages such as Facebook or Youtube; any unauthorized websites during work hours.
Print Services: Enables the ability to assign a printer a static routed IP address so Kudler employees can see available printers, queued print jobs, and printer availability. Printer spools can be managed through Print Services such as a printer that is awaiting paper, thus holding up the printer spool.

Windows Security in Windows Server 2008 R2 can offer:
AppLocker: Reduces malicious software or unrecognized software from preforming action in a PC or network environment. This can also prevent users from installing un-approved applications at work.
Biometrics: Fingerprint, voice, face recognition for authorization (Example: Biometric password)
User Account Control: Aids against automated viruses, applications, or any unauthorized action on a PC or Windows 2008 server. UAC will ask permission (and await prompt) before any change is made to your system.