Mission Critical! Windows 2000 Server Administration (pdf document) free file download at fliiby.com

"”This book is perfect for administrators who need an advanced Windows 2000 reference. I will turn to it again and again.“ –Eric Livingston, Vice President and Chief Technology Officer AppNet, Inc. If it’s a impact, highigh-risk,fail situation, h tmust-no RITICAL! ISSION C it’s M FREE Monthly Technology Updates One-year Vendor Product Upgrade Protection Plan FREE Membership to Access.Globalknowledge Robin Walshaw, MCSE Technical Editor: D. Lynn White, MCPS, MCSE, MCT, MCP+I solutions@syngress.com With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created solutions@syngress.com, a service that includes the following features: s A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difﬁcult topics, written by content experts exclusively for solutions@syngress.com. Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. s s s Once you've purchased this book, browse to www.syngress.com/solutions. To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. MISSION CRITICAL! WINDOWS 2000 SERVER ADMINISTRATION Syngress Publishing, Inc., the author(s), and any person or ﬁrm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of proﬁts, lost savings, or other incidental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and ﬁles. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY 001 002 003 004 005 006 007 008 009 010 SERIAL NUMBER 9TATW2ADSE NF4TRA7TC4 CDE3C28FV7 DC5C8NVT4N Z745QQE2BR PF62RT652H DTP252ZX44 NT3F743RTG 6532M977LS SMWR8P554N PUBLISHED BY Syngress Publishing, Inc. 800 Hingham Street Rockland, MA 02370 Mission Critical Windows 2000 Server Administration Copyright © 2000 by Syngress Publishing, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1234567890 ISBN: 1-928994-16-4 Copy edit by: Beth Roberts Technical edit by: D. Lynn White Index by: Robert Saigh Co-Publisher: Richard Kristof Distributed by Publishers Group West Proofreading by: Fred Lanigan Page Layout and Art by: Reuben Kantor and Shannon Tozier Acknowledgments We would like to acknowledge the following people for their kindness and support in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Rhonda Harmon, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Callisma for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise networks. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their help. David Buckland, Wendi Wong, David Loh, Marie Chieng, Lucy Chong, Leslie Lim, Audrey Gan, and Joseph Chan of Transquest Publishers for the enthusiasm with which they receive our books. Kwon Sung June at Acorn Publishing for his support. Ethan Atkin at Cranbury International for his help in expanding the Syngress program. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certiﬁcation Press series. v From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from providing instructor-led training to hundreds of thousands of students worldwide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the ﬁrst time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Ofﬁcer, Global Knowledge vi About the Author Robin Walshaw (B.Sc Computer Science, MCSE, DPPM) is an independent consultant who delivers strategic Windows 2000 solutions to large corporations around the globe. Born in England, Robin spent the majority of his earlier years in Scotland and South Africa. One of the ﬁrst MCSEs in Africa, he enjoys being at the forefront of new developments in network and operating system architecture. With a ﬂair for developing strategic IT solutions for diverse clients, he has worked in the world of computers in eight countries, and has traveled to over thirty countries in the last ten years. A veteran of numerous global projects, Robin has honed his skills across of a wide variety of platforms and technologies. Though an industrious computer professional by day, by ‘night’ Robin is an experienced mountain guide. Robin is a keen sportsman and has managed to balance work with a passion for climbing the world’s highest mountains, culminating in an attempt on the North Ridge of Mount Everest. Residing with his wife, Natalie, in London and South Africa, Robin can be contacted via email at rwalshaw@hotmail.com. Displaying Herculean resolve, Natalie simultaneously manages to keep Robin’s feet on the ground and a smile on his face. Some men just have all the luck. vii Contributors Melissa Craft (CCNA, MCSE, Network+, CNE-3, CNE-4, CNE-5, CNE-GW, MCNE, Citrix) is a Director of e-Business Offering Development for MicroAge. MicroAge is a global systems integrator headquartered in Tempe, Arizona. MicroAge provides IT design, project management and support for distributed computing systems. Melissa develops enterprise-wide technology solutions and methodologies for client organizations. These technology solutions touch every part of a system’s lifecycle—from network design, testing and implementation to operational management and strategic planning. Melissa holds a bachelor’s degree from the University of Michigan and is a member of the IEEE, the Society of Women Engineers and American MENSA, Ltd. Melissa currently resides in Phoenix, Arizona with her family, Dan, Justine and Taylor, and her two dogs, Marmaduke and Pooka. Debra Littlejohn Shinder (MCSE, MCP+I, MCT) is an Instructor in the AATP program at Eastﬁeld College, Dallas County Community College District, where she has taught since 1992. She is Webmaster for the cities of Seagoville and Sunnyvale, Texas, as well as the family Web site at www.shinder.net. She and her husband, Dr. Thomas W. Shinder, provide consulting and technical support services to Dallas area organizations. She is also the proud mom of a daughter, Kristen, who is currently serving in the U.S. Navy in Italy, and a son, Kris, who is a high school chess champion. Deb has been a writer for most her life, and has published numerous articles in both technical and nontechnical ﬁelds. She can be contacted at deb@shinder.net. Thomas W. Shinder, M.D. (MCSE, MCP+I, MCT) is a Technology Trainer and Consultant in the Dallas-Ft. Worth metroplex. Dr. Shinder has consulted with major ﬁrms, including Xerox, Lucent Technologies, and FINA Oil, assisting in the development and implementation of IP-based communications strategies. Dr. Shinder attended medical school at the University of Illinois in Chicago, and trained in neurology at the Oregon Health Sciences Center in Portland, Oregon. His fascination with interneuronal communication ultimately melded with his interest in internetworking and led him to focus on systems engineering. Tom works passionately with his beloved wife, Deb Shinder, to design elegant and cost-efﬁcient solutions for small- and medium-sized businesses based on Windows NT/2000 platforms. viii Technical Editor D. Lynn White (MCPS, MCSE, MCT, MCP+I) is President of Independent Network Consultants, Inc. Lynn has more than 14 years experience in networking and programming. She has been a system manager in the mainframe environment as well as a software developer for a process control company. She is a technical author, editor, trainer, and consultant in networking and computer-related technologies. Lynn has been delivering mainframe, Microsoft-ofﬁcial curriculum and other networking coursed in and outside the United States for more than 12 years. ix Contents Chapter 1: Introduction to Windows 2000 Server Introduction What’s New in Windows 2000 Server? The Key to Unlocking Your Network: Active Directory Why Should I Use the Active Directory? Change and Configuration Management Group Policies Windows 2000 Security Why the Change? Differences in Windows 2000 Server Security Windows 2000 Network Services Managing and Supporting Windows 2000 Server Integrated Directory Services Comprehensive Management Solutions Comprehensive File, Print, and Web Services What’s Not New in Windows 2000 Server? Core Architecture Application Support User Interface Client Support Windows 2000 Challenges Summary FAQs 1 2 3 5 6 7 10 11 12 12 13 14 15 15 17 20 21 21 21 22 22 24 25 Chapter 2: Active Directory—The Heart of Windows 2000 Server Introduction Mission-Critical Active Directory Concepts Where Active Directory Fits in the Overall Windows 2000 Architecture Active Directory Concepts What’s in a Name? The Architecture of Active Directory Putting the Pieces Together 27 28 29 30 30 30 34 36 xi xii Contents Developing a Naming Strategy Active Directory’s Integration with DNS How Active Directory Uses DNS Forest Plan Domain and DNS Strategy Organizational Units (OUs) Site Topology Naming Conventions Defining DNS Names Defining DNS Zones Naming Conventions for Active Directory Virtual Containers Designing Active Directory Domains Forest Plan Domain Plan Including DNS Strategy Organizational Unit Strategy Organizational Unit Structure OU Objects in the Active Directory Group Policy and OUs Delegating Administration Site Topology Summary FAQs 40 41 43 45 48 49 52 53 53 55 55 56 56 58 58 60 60 60 60 61 62 63 64 Chapter 3: Migrating to Windows 2000 Server Introduction Server Migration Strategies Primary Domain Controllers (PDCs) Changes Required when Upgrading a Domain Controller Backup Domain Controllers (BDCs) Member Servers Promoting Member Servers with DCPROMO Upgrading with the Windows 2000 Setup Wizard Installing Active Directory Services Interim Mixed Domains Mixed Mode Native Mode Migrating Components Using Organizational Units (OUs) to Create a Hierarchical Structure User Accounts Machine Accounts 67 68 69 76 78 79 81 81 82 84 87 88 88 90 91 92 94 Contents xiii Nested Groups Global Groups Delegating Administrative Authority Insert into the Replication Topology Migrating from Novell Directory Services Upgrade Clients to Windows 2000 Professional Summary FAQs 94 95 95 96 97 98 100 102 Chapter 4: Implementing Domains, Trees and Forests Introduction Implementing a Domain Installing the First Domain in Active Directory Active Directory Wizard Integrating DNS into the Active Directory Configuring DNS Active Directory Integrated Zones About Zones Service Resource Record Registration Creating Organizational Units Managing Objects in Active Directory Managing User Accounts Managing Groups Managing Computers Managing Shares Managing Printers Common Object Management Nesting Groups Role-Based Administration Microsoft Management Console Administrative Roles Delegating Administration Object-Based Access Control Building Trees and Forests Forest Characteristics Common Schema Common Configuration Global Catalog Contiguous Namespace Trust Relationships Planning a Forest Structure The Domain Tree Structure Adding a Child Domain 103 104 104 105 106 110 111 112 112 114 114 115 116 117 119 120 121 122 122 123 123 123 124 126 127 128 128 128 128 129 129 134 137 139 xiv Contents Sizing the Active Directory Store Managing the Forest Summary FAQs 139 142 145 147 Chapter 5: Planning and Implementing Active Directory Sites Introduction The Function of Sites in Active Directory Default-First-Site-Name Replicated Active Directory Components Domain Partitions Global Catalog Schema and Configuration Containers Modifying the Schema Configuring Site Replication Components Creating Site Objects Creating Connection Objects Creating Site Links Creating Site Link Bridges Replication Protocols Replication in Active Directory Replication Topology Planning a Site Structure Placing Domain Controllers Where to Place Global Catalog Servers Implementing a Site Structure in Active Directory Replication Utilities Replication Monitor (REPLMON) Replication Administrator (REPADMIN) DSASTAT Understanding Time Synchronization in Active Directory Summary FAQs 149 150 150 153 153 153 154 155 155 166 166 167 167 168 169 170 171 174 177 177 178 183 183 183 183 184 185 187 Chapter 6: Advanced Active Directory Introduction Interfacing with Active Directory ADSI RPC Windows Sockets DCOM Exchange Server Active Directory Connector Synchronizing with the Novell Directory Service 189 190 190 190 192 192 193 193 195 Contents xv Microsoft’s Metadirectory VIA Architecture Implementing a Disaster Recovery Plan Modeling Sites with Disaster Recovery in Mind The Active Directory Database File Structure Backup Creating an Emergency Repair Disk Recovering a Failed Domain Controller Authoritative Restore of Deleted Objects Startup Options The Recovery Console For Experts PDC Emulation and Native Mode How Active Directory Prevents Unnecessary Replication How an LDAP Query Accesses Active Directory Renaming Domains Add a Server to Two Different Sites Simultaneously Removing Phantom Objects Phantom Domains Transferring FSMO Roles Troubleshooting Tips Avoiding Errors When Migrating a Domain Remote Procedure Call (RPC) Errors Summary FAQs 195 199 200 201 204 205 206 208 208 209 210 211 211 212 213 214 214 215 215 216 219 220 220 221 222 Chapter 7: Configuring IntelliMirror Introduction What Is IntelliMirror? Configuring Group Policies How Group Policies Are Applied Refresh Interval Blocking and Enforcing Group Policy Information Storage Administrative Templates Registry.pol Group Policy Settings Computer Configuration User Configuration Designing a Group Policy Strategy Group Policy in WAN Environments Implementing Group Policy Strategies Configuring Group Policy Objects 223 224 224 226 229 230 230 231 232 233 233 235 235 236 237 240 240 xvi Contents Link a Group Policy Object to a Container Keeping Groups from Growing Over Time Delegating Control of Group Policy Troubleshooting Group Policies Policy Does Not Execute Policy Executes in the Wrong Way Logging On Takes a Long Time Security Groups Group Strategy Viewing Security Features in Active Directory Users and Computers Domain Security Console Account Policies Local Policies Event Log Restricted Groups System Services Registry File System Public Key Policies IP Security Policies on Active Directory Security Templates Object Protection Access Control Lists (ACLs) Access Control Entries (ACEs) Security Descriptor Security Identifier (SID) Summary FAQs 241 242 243 245 245 246 246 247 247 249 250 250 250 254 254 255 255 255 255 256 256 256 256 256 257 258 259 260 261 Chapter 8: Managing Settings, Software, and User Data with IntelliMirror Introduction Deploying Software with Group Policies Assigning Software User Assignments Computer Assignments Publishing Software Enhancements within Add/Remove Programs Packaging an Application Windows Installer Creating a Package Repackaging 263 264 264 265 265 266 266 266 268 269 272 272 Contents xvii ZAP Files Customizing a Package Creating Distribution Points Targeting Software and Using the Software MMC Snap-In Using the Software Policy MMC Snap-In Using Group Policy to Assign or Publish an Application Managing Software with Group Policies Upgrading Software Upgrading Windows 2000 Removing Software Redeploying Software Software Installation Options Group Policy Settings Application Deployment Walkthrough Deployment Methods Managing User and Computer Settings Using Administrative Templates Assigning Registry-Based Policies Creating Custom Administrative Templates Adding Administrative Templates Using Scripts Assigning Script Policies to Users and Computers Folder Redirection Summary FAQs 273 273 274 274 275 276 277 278 279 280 281 281 283 285 287 287 288 290 293 299 300 301 303 305 306 Chapter 9: Managing Users and Groups Introduction Setting Up User Accounts Defining an Acceptable Use Policy Requirements for New User Accounts Default User Account Settings Logon Mechanics Creating User Accounts Setting Account Policies Account Policy Configuration Modifying Properties for User Accounts Managing User Accounts Deleting User Accounts Resetting Passwords Disabling an Account Enabling an Account 309 310 310 310 312 313 313 314 315 315 317 319 319 319 320 320 xviii Contents Other Active Directory Users and Computers Functions Moving User Accounts Mapping a Certificate to a User Using Groups to Organize User Accounts Group Types Security Groups Distribution Lists Group Scope Local Domain Local Global Universal Implementing Groups Creating a Group Assigning Users to a Group Adding Users..."

You need to upgrade your Flash Player , or try to enable javascript in order see this document properly.