Multimedia Logon and Authentication
This activity presents information about Difference between local and domain authentic alio 11 How to perform a secondary logon Contents of an access token File location To start the Logon and Authentication activity, open the Web page on the Student Materials compact disc, click Multimedia, and then click the title of the activity. Questions Review the information and processes in Logon and Authentication, and then 1. What is the difference between authentication of a local logon and...
How to Create User Accounts
Yo u r i n structor wi 11 de rrio n strate how to Create a domain user account Create a local use account Introduction Domain user accounts enable users to log on to a domain and access resources anywhere on the network, and local user accounts enable users to log on and access resources only on the computer on which you create the local user account. As a systems administrator, you must create domain and local user accounts to manage your network environment. Important You cannot create local...
What Are Domain Functional Levels
W rdows N Server 4,0, lAlrdows mo, Definition The characteristics of groups in Active Directory depend on the domain functional level. Domain functionality enables features that will affect the entire domain and that domain only. Three domain functional levels are available Microsoft Windows 2000 mixed, Windows 2000 native, and Microsoft Windows Server 2003. By default, domains operate at the Windows 2000 mixed functional level. You can raise the domain functional level to either Windows 2000...
Testing the High CPU Usage Alert
In this exercise, you will test the high CPU usage alert. Start the following program In Performance, view System Monitor. In the CPU Stress dialog box, change the activity for Thread 1 to Maximum. When the CPU usage exceeds 50 , the alert will trigger a message every 5 seconds. Close CPU Stress to stop the messages.
Practice Delegating Control of an Organizational Unit
Delegate control of Tie Computers organizational unit Test delegated permissions iaryour Computers organizational unit Delegate control of lie Users organizational unit Test delegated permissions for your Users organizational unit Delegate control of the Computers organizational unit. Test delegated permissions for your Computers organizational unit. Delegate control of the Users organizational unit. Test delegated permissions for your Users organizational unit. Log on to the domain by using...
Practice Enabling and Disabling User and Computer Accounts
in this practice, you will enable and disable a user account and computer account In this exercise, you will disable and enable a user account and a computer account. Log on to the domain by using the ComputerNameUser account. Open CustomMMC with the Run as command. Use the user account Nwtraders ComputerNameAdmm Example LondonAdmin . Ensure that CustomMMC contains Active Directory Users and Computers. Review the procedures in this lesson that describe how to perform this task. The security...
Permissions Inheritance for Active Directory Object Permissions
Users As5- n d Acc s Permission for Pi rent Ctrntaiier Benefits of permissions A parent object is any object that has a relationship with another object called a inheritance child. A child object inherits permissions from the parent object. Permissions inheritance in Active Directory minimizes the number of times that you need to grant permissions for objects. Permissions inheritance in Windows Server 2003 simplifies the task of managing permissions in the following ways You do not need to...
Lesson Changing the Location of the Print Spooler
Why Change the Location of the Print Spooler How to Change the Location of the Print Spooler Introduction This lesson introduces you to the skills and knowledge that you need to change Lesson objectives After completing this lesson, you will be able to Explain the purpose of the print spooler. Explain situations that require you to change the location of the print spooler. Change the location of the print spooler. An executable file that manages the printing process, which Involve Retrieving...
What Are Local Groups
Local Uaaf asrnUrts fem tiie computer Definition A local group is a collection of user accounts or domain groups created on a member server or a stand-alone server. You can create local groups to grant permissions for resources residing on the local computer. Windows 2000 or Windows Server 2003 creates local groups in the local security database. Local groups can contain users, computers, global groups, universal groups, and other domain local groups. Because groups with a domain local scope...
Active Directory Terms
Introduction To manage a Windows Server 2003 environment, you must understand which operating system edition is appropriate for different computer roles. You must also understand the purpose of a directory service and how Active Directory directory service provides a structure for the Windows Server 2003 environment. Lesson objectives After completing this lesson, you will be able to Describe the different computer roles in a Windows Server 2003 environment. Describe the uses of the different...
Active Directory Terms 1
The logical structure of Active Directory is flexible and provides a method for designing a hierarchy within Active Directory that is comprehensible to both The logical components of the Active Directory structure include the following Domain. The core unit of the logical structure in Active Directory is the domain. A domain is a collection of computers, defined by an administrator, that share a common directory database. A domain has a unique name and provides access to the centralized user...
How to Configure MMC to Manage a Server Remotely
Your instructor will demonstrate how to configure MMC to manage a server remotely Introduction Systems administrators are often required to work off-site. As a systems administrator, you may be located at one site but must perform maintenance on a server at a second site. In this case, you can use an MMC console to remotely manage a server. For example, you can start or stop services on a remote server, review the event log, manage shares, or manage disks. Procedure To configure MMC to manage a...
How to Identify and Resolve Memory Bottlenecks
h nd llw process tiat li cajsmg patjinu Ato RAM fclitiirmirp sfKfco total memay FneHhf prxKa tnat is ushg RAM A t RAM Frfttj t-ipt 4 utiflg RAM Ad RAM rndrhe- prxess tiat ia eatiwig paging flat RAM Introduction The most common resource bottleneck in servers is caused by lack of memory. Adding memory is the most effective way to improve server performance. Paged and nonpaged In Microsoft Windows Server 2003, RAM is divided into two categories paged RAM and nonpaged. Paged RAM is virtual memory,...
Organizational Unit Hierarchical Models
As a systems administrator, you do not select the design of the Active Directory structure for your organization. However, it is important to know the characteristics and ramifications of each structure. This knowledge may be critical to you when performing systems administrator tasks within the Active Directory structure. This topic describes the four basic hierarchy designs. The function-based hierarchy is based on only the business functions of the organization, without regard to...
Practice Configuring MMC to Manage Files on a Remote Server
Configure IVMC to manage aid monitor a local server arid a remote server Configure MMC to manage and monitor a local server and a remote server. Use the Run as command to open MMC. You are the systems administrator for an organizational unit on a network. You are responsible for managing and monitoring the shared folders on your server and on a remote server. You will create an MMC snap-in that allows you to manage and monitor shared folders on both servers simultaneously. You will also create...
How to Create a GPO Link
Your instructor will demonstrate how to create a GPO Sink Procedure for creating and linking a GPO Use the following procedures to create and link GPOs, link existing GPOs, unlink a GPO, delete a GPO link, delete a GPO, and disable a GPO. 1. In Group Policy Management, in the console tree, expand the forest containing the domain in which you want to create and link a GPO, expand Domains, and then do one of the following To create a GPO and link it to a domain, right-click the domain, and then...
How to Enable and Disable User and Computer Accounts
Your instructor will demonstrate how to enable and disable user and computer accounts flddtD a q'fl-p m MHMwai I rij gt lilf ttotfit J Introduction When an account is disabled, the user cannot log on. The account appears in the details pane with an X on the account icon. Procedure To enable and disable a user or computer account by using Active Directory 1. In Active Directory Users and Computers, in the console tree, select the container or the user that contains the account to be enabled or...
How to Determine the Effective Permissions on Combined Shared Folder and NTFS
Your instructor will demonstrate how to determine effective permissions on combined shared folder and NTFS permissions Use Windows Explorer to view effective permissions on shared folders. To determine effective permissions, you need to first determine the maximum NTFS and the shared folder permissions and then compare the permissions. To determine the maximum permissions a user has for a file on an NTFS volume 1. In Windows Explorer, locate the file or folder for which you want to view...
Lab A Implementing Group Policy
Link a GPQ to an organizational unit Identify he effects of Inheritaiee when multiple GPOs are assigned Fcrce a GPO tn be applied ta child organizational units Filter a GPQ so that i is applied to selected users and groups in an organizational unit After completing this lab, you will be able to Link a GPO to an organizational unit. Identify the effects of inheritance when multiple GPOs are assigned. Block Group Policy inheritance. Force a GPO to be applied to child organizational units. Filter...
Exporting Disk Quota Entries
In this exercise, you will export the disk quota entries that you created to a binary file. 1. Export disk quota entries to a binary file. In Disk Management, highlight the new quota entries that you created in the previous exercise, and then on the Quota menu, click Export. Name the quota entries file export.bin and then save the file in C MOC 2275 Labfiles. Close the Quota Entries for New Volume D window, close the New Volume D Properties dialog box, and then click OK to close the remaining...
Why Monitor Server Memory
Monitor server memory to determine whether any of the following conditions exist Memory bottleriecki Insufficient memory -- Excessive paging Memory leaks Introduction Lack of memory is the most common cause of serious performance problems in computer systems. Even if you suspect other problems, check memory counters to rule out a memory shortage. Conditions to look for Monitor server memory to assess the amount of available memory and the level of paging, and to observe the effects of a memory...
Types of Backup
Backup types define what data is backed up Backup types use archive attributes that show ttiefile has charged sin the last backup Seleiled files and folcera that changed since Ihe aet normal incremental backup Sebrled filss and falcers that changed Gincs Ihe astbEckijs Sslested liles and fDlceia tost changed durirg h3 dHy The Backup utility provides five backup types that specify what data is backed up, such as only files that have changed since the last backup. Some backup types use an archive...
Lesson Managing Access to Shared Files Using Offline Caching
What Is Offline Files How Offline Files Are Synchranized Offline Caching Options How to Us Offline Caching Introduction The information in this lesson presents the skills and knowledge that you need to manage access to shared files by using offline caching. Lesson objectives After completing this lesson, you will be able to Explain what Offline Files is. Explain how offline files are synchronized. Explain the offline file caching modes.
What Is a Counter Log
Each performance object provides performance counters that represent data about specific aspects of a sytem or server Counter logs define what data is stored in the log file gj t Oiwi hiTH.r BCndwv b Iff - JE ff i H, - r. gt M vu The cwpifr log prowl bwy- frf.n fp-flfcwt. Introduction Windows Server 2003 collects data about system resources, such as disks, memory, processors, and network components. Also, applications and services that you run on your system, such as Microsoft Exchange Server,...
How to Set Up Run As Shortcuts
Your instructor will demonstrate how to set up a Run as shortcut to. Performance Computer Management Device Manager Disk Manager Active Directory MMC To save time, you can configure Run as desktop shortcuts to the administrative To set up a Run as shortcut to Performance 1. Right-click the desktop, point to New, and then click Shortcut. 2. On the Create Shortcut page, in the Type the location of the item box, type runas user Nwtraders administrator mmc windir system32 perfmon.msc and then click...
What Is a Signed Device Driver
Digital signature indicates that the device driver meets a certain level of testing and that It has not been altered by another program's installation process lt Use signed device drivers to ensure the performance and stability of your system To ensure that device drivers and system files remain iri their original, dig tally-signed state, Windows provides Introduction Each device driver and operating system file that is included with Windows has a digital signature. The digital signature...
Role of MMC in Remote Administration
Provides an interface to snap-ins fiat manage hardware, software, and network services for servers running Windows Server 003 and computers running Windows XP Why Use MMC in remote administration Use for tasks frequently accompli shed on remote Use to manage similar tasks- on many remote computers Introduction Microsoft Management Console MMC provides an interface that you can use to create, save, and open administrative tools, called snap-ins, that manage the hardware, software, and network...
How to Create a Group
Your instructor will demonstrate how to Create a group in a domain Create a local group on a member server i Create a group by using the command line Delete a group Delete a group by using lie command line Introduction In most corporate environments, you will create groups in domains. Active Directory has security and tracking features that limit the addition of users to groups. Active Directory also gives corporations the flexibility to use groups on member servers. Corporations often have...
How to Identify and Resolve Processor Bottlenecks
nd pretil jsing erHEsina pnocessinime Lpgra e or add anoufce' procesar pgrace or add additions pnoceaszr 'ind prccesa jsing exKsswe procesar lim ijpgrace or add anortba' pnrcessir ind c i t amp IIm'sad benefiting irlcrupTS Introduction Just about every activity that occurs on a server involves the processor. The processor on an application server is generally busier than the processor on a file and print server. As a result, the level of processor activity, and what is considered normal, is...
Lesson Determining Applied GPOs
What Is Gp update What Is Gpresult What Is Group Policy Reporting How to Use Group Policy Reporting What Is Group Policy Modeling Haw to Use Group Policy Modeling What la Group Policy Results How to Use Group Policy Results Introduction Group Policy is the primary administrative tool for defining and controlling how programs, network resources, and the operating system operate for users and computers in an organization. In an Active Directory environment, Group Policy is applied to users or...
Importing Disk Quota Entries
In this exercise, you will import the disk quota entries on drive E. 1. Import disk quota entries to another drive. a. In Computer Management, open the Properties dialog box for New Volume E drive. b. On the Quota tab, select the Enable quota management check box, and then open the Quota Entries window. c. Open the Import Quota Settings dialog box, and then import the export.bin file. 2. Verify that the three quota entries are displayed. In the Quota Entries for New Volume E window, verify that...
NTFS File and Folder Permissions
Read S Execute Write Fsad Lis Folder Contents NTFS permissions are used to specify which users, groups, and computers can access files and folders. NTFS permissions also dictate what users, groups, and computers can do with the contents of the file or folder. The following table lists the standard NTFS file permissions that you can grant and the type of access that each permission provides. Change permissions, take ownership, and perform the actions permitted by all other NTFS file permissions...
How to Delegate Control of an Organizational Unit
Your instructor wifl de mon strate how tu delegate control of an organizational unit Procedure for delegating control for common tasks To grant permissions at the organizational unit level, use the Delegation of Control Wizard. You can grant permissions for managing objects, or you can grant permissions for managing specific attributes of those objects. Using the Delegation of Control Wizard is the preferred method for delegating control, because it reduces the possibility of unwanted effects...
How to Monitor Processor Usage
Your instructor will demonstrate how to Monitor processor usage by using Perfomnance Monitor processor usage by using Tesk Manager Procedure for monitoring processor usage by using Performance Procedure for monitoring processor usage by using Task Manager To keep your system running efficiently, you must monitor the system's processor to detect any bottlenecks from time to time. Bottlenecks occur only when the processor is so busy that it cannot respond to requests on time. These situations are...
What Is a GPO Link
Introduction All GPOs are stored in a container in Active Directory called Group Policy Objects. When a GPO is used by a site, domain, or organizational unit, the GPO is linked to the Group Policy Objects container. As a result, you can centrally administer and deploy the GPOs to many domains or organizational units. Creating a linked GPO When you create a GPO linked to a site, domain, or organizational unit, you actually perform two separate operations creating the new GPO, and then linking it...
What Are Effective Permissions for Active Directory Objects
Permissions are cum dative Deny permissions override all other permissions Object owners can always change permissions Retrieving effective permissions Introduction You can use the Effective Permissions tool to determine what the permissions for an Active Directory object are. The tool calculates the permissions that are granted to the specified user or group and takes into account the permissions that are in effect from group memberships and any permissions inherited from parent objects....
Computer Account Options
There are two optional features that you can enable when creating a computer account. You can assign a computer account as a Pre-Windows 2000 computer or as a backup domain controller BDC . Select the Assign this computer account as a pre-Windows 2000 computer check box to assign a password based on the computer name. If you do not select this check box, a random password is assigned as the initial password for the computer account. The password automatically changes every five days between the...
How to Install and Share a Network Printer
Your instructor wil' demonstrate how to install and Introduction In larger organizations, most print devices have a network interface. Using these print devices has several advantages. There is greater flexibility in where you locate your printers. In addition, network connections transfer data quicker than printer cable connections. Procedure for installing To install a network printer a network printer 1. In the Printers and Faxes folder, double-click Add Printer. 2. In the Add Printer...
How to Enable and Disable Disk Quotas
Your instructor will demonstrate how to Enable disk quotas by using Windows Explorer Disable disk quotas gt y using Windows Explprer Use the following procedures to enable and disable disk quotas. To enable disk quotas 1. In Windows Explorer, right-click the disk volume for which you want to enable disk quotas, and then click Properties. 2. In the Properties dialog box, on the Quota tab, select the Enable quota management check box. 3. Select one or more of the following options a. Deny disk...
Multimedia Introduction to Managing a Microsoft Windows Server Environment
This presentation describes the primary job functions of administering accounts and resources and defines basic concepts of Active Directory In this presentation, you are introduced to the primary job functions of administering accounts and resources in a Windows Server 2003 environment. The tasks and concepts in this presentation are explained in more detail throughout the course. To view the Introduction to Administering Accounts and Resources presentation, open the Web page on the Student...
What Are Administrative Tools
Commonly used administrative tools Active Directory Users anc Computers Active Directory Sites and Seivicas Active Directory Domains and Trusts Computer ManaijerriBni DNS Remote Desktops install to perform remote administration Introduction Administrative tools enable network administrators to add, search, and change computer and network settings and Active Directory objects. You can install the administrative tools for managing a Windows Server 2003 environment on computers running Microsoft...
How to Set File Parameters for a Counter Log
Your instructor will demonstrate how to set file parameters for a coulter log Introduction When you set file parameters for a counter log, you must select a log file format. Select the log file format that is most appropriate for your environment. For example, if you are responsible for a few servers, the text file or the binary file format is best choice. If you are responsible for a hundred servers, logging your data to a SQL database is the best choice. Procedure To set file parameters for a...
Lesson Determining Effective Permissions
What Are Effective Permissions on NTFS Files and Folders How to Determine Effective Permissions on NTFS Files and Poitiers Effects of Combined Shared Folder and NTFS Permissions How to Determine the Effective Permissions on Combined Shared Folder and NTFS Permissions Introduction If you grant NTFS permissions to an individual user account and a group to which the user belongs, then you grant multiple permissions to the user. There are rules for how NTFS combines these multiple permissions to...
How to Reactivate an Offline Disk
Your instructor will demonstrate how to reactivate an offline disk Introduction Use the following steps when you have moved a disk, but it appears in Disk Management as Missing or Offline. By reactivating the disk, you are changing the disk status to Online. Procedure To reactivate an offline disk by using Disk Management 1. In Computer Management, open Disk Management. 2. Right-click the disk marked Missing or Offline, and then click Reactivate Disk.
Lesson Creating Groups
What Are Domain Functional Levels What Are Global Groups What Are Universal Groups What Are Domain Local Groups What Are Local Groups Whereto Create Groups Naming Guidelines for Groups How to Create a Group Introduction The information in this lesson presents the skills and knowledge that you need Lesson objectives After completing this lesson, you will be able to Explain the purpose of groups, group types, and group scopes. Identify the domain functional levels. Describe domain local groups....
Lesson Using Device Driver Rollback
What Is Device Driver Roll back How to Restore and Update Device Drivers UninstalHng Devices and Device Drivers How to Uninstall a Device Driver Introduction If a device stops functioning after you install an updated device driver for the device, you can use the Roll Back Driver feature to restore the previous version of the driver. By using this feature, you can avoid spending hours searching for a copy of the original driver that was installed. However, you cannot roll back a driver more than...
Effects on NTFS Permissions When Copying and Moving Files and Folders
When you copy files and folders, they inherit permissions of the destination folder When you move files and folders within the same partition, they retain their permissions When you move files and folders to a different partition, they inherit the permissions of the destination folder Introduction When you copy or move a file or folder, the permissions may change depending on where you move the file or folder. It is important to understand the changes that the permissions undergo when being...
Practice Configuring the Administrative Tools
Create a cjstnm MMC that contains the following nT'CL-ler WanageTient Local Compiler MWfegwwil GIb k lt otve Directory Users and CorTputei Save the MMC as C MOC CusfomMMC.irrac Log on to the domain by using the ComputerNameAdmin account. Review the procedures in this lesson that describe how to perform this task. Your manager instructs you that you will be adding domain user accounts on the member server that supports your city and an additional server called Glasgow. Configure the support...
Practice Logging on Using a Local Computer Account
In this practice, you will log on to a computer by using a lota computer account In this practice, you will log on to a computer by using a local computer account. You have just been hired by Northwind Traders to help with the administration of computers, users, and resources for a city location in the Northwind Traders global network. You will also be responsible for a member server in your city and will occasionally log on with the local Administrator account on the member server. Log on to...
Practice Modifying User and Computer Account Properties
in this practice, you wiil modify user and computer account properties In this practice, you will modify user and computer account properties. Before you begin this practice Log on to the domain by using the ComputerNameUser account. Open CustomMMC with the Run as command. Use the user account Nwtraders ComputerNameAdmm Example LondonAdmin . Ensure that CustomMMC contains Active Directory Users and Computers. Review the procedures in this lesson that describe how to perform this task. The...