Windows Server Guides

Chapter Deploying Certificates Certificate Security Windows Server 2003

Tue, 27 Sep 2011 05:55:29 GMT

1. Assume that a custom version 2 certificate template is created for code signing that requires CA certificate manager approval. What enrollment method should you use for deploying the custom code signing certificates to the three members of the Quality Assurance team The Certificate Services Web Enrollment site method is recommended because the Web site implements cookies to allow the user to return and complete a pending certificate request. 2. Assume that a custom version 2 certificate...

Note Answers Mwd Learning Windows Server 2008

Tue, 27 Sep 2011 03:38:35 GMT

Answers to these questions and explanations of why each answer choice is right or wrong are located in the Answers section at the end of the book. 1. NAP using the IPsec enforcement method has been deployed at your organization. You are attempting to resolve a problem. A computer, running Windows Vista, that you are working on has antivirus software that is six weeks out of date, yet the computer is able to obtain a system health certificate and can successfully connect to protected servers ....

Active Directory Hosting Its Own DNS Namespace Designing Infrastructure Windows Server 2003

Tue, 27 Sep 2011 03:35:32 GMT

The next option is similar in design to the option just described, with the exception that the Active Directory namespace connects to another internal rather than an external namespace. Active Directory-integrated zones can be used for the Active Directory namespace, but in the event that the Active Directory-integrated namespace needs to replicate with a non-Active Directory namespace, standard zones must be used for replication between the Active Directory namespace and the third-party...

About the Authors Network Planning Windows Server 2003

Tue, 27 Sep 2011 02:26:51 GMT

J.C. Mackin MCSA, MCSE, MCT is an author, editor, consultant, and trainer who has been working with Microsoft networks since 1997. He holds a master's degree in telecommunications and network management. Ian McLean MCSE, MCDBA, MCT has over 35 years of experience in industry, commerce, and education. He started his career as an electronics engineer before going into distance learning and then education as a university professor. He currently runs his own consultancy company. Ian has written 15...

Understanding Group Policy Administration Practice Windows Server 2003

Tue, 27 Sep 2011 02:21:21 GMT

The change-control tool on Windows Server 2003 is the Group Policy Object Editor GPOE or just GPE . Shown in Figure 14-2, this application is an MMC snap-in from which policy can be applied to the security principals computer, users, and groups of a Windows 2000 and Windows Server 2003 network. 2 Login Scripts jacsOI .HQ.LATirW S Computer Configuration ffl l Software Settings Windows Settings B AdWiinistrative Templates B LJ Windows Componer NetMeeting T l Internet Explorer I l Application Com...

Multimedia Logon and Authentication Maintaining Windows Server 2003

Tue, 27 Sep 2011 02:20:00 GMT

This activity presents information about Difference between local and domain authentic alio 11 How to perform a secondary logon Contents of an access token File location To start the Logon and Authentication activity, open the Web page on the Student Materials compact disc, click Multimedia, and then click the title of the activity. Questions Review the information and processes in Logon and Authentication, and then 1. What is the difference between authentication of a local logon and...

Failover Cluster Infrastructure Requirements Clustering Windows Server 2008

Tue, 27 Sep 2011 02:09:07 GMT

Failover clusters depend on infrastructure services, and require that each server node must be in the same Active Directory domain and, if you use DNS, the nodes should use the same Domain Name System DNS servers for name resolution. We recommend that you install the same Windows Server 2008 features and roles on each node. In addition, you should not install the Active Directory Domain Services AD DS role on any of the cluster nodes. If you install the AD DS role on one of the nodes, you must...

The Cluster Validation Test Storage Clustering Windows Server 2008

Tue, 27 Sep 2011 01:53:03 GMT

The storage test validates Disk access latency SCSI device vital product data VPD The storage tests list and test the capabilities of all disks available to the cluster. These tests are comprehensive however, some specific tests may not run after the cluster is running nor in a multi-site cluster. The Validate a Configuration Wizard performs the following storage validation Lists all disks that are visible to one or more tested servers. The test lists Disks that can support clustering and can...

Guidelines for Placing the Infrastructure Master Active Directory Planning Windows Server 2003

Mon, 26 Sep 2011 23:27:46 GMT

The infrastructure master does not need to be a highly available or high-capacity domain controller, and it should not host the global catalog The infrastructure master is responsible for making fast updates of cross-domain references, such as membership changes in a group that contains user accounts from other domains. There is only one infrastructure master in a domain. Apply the following guidelines to determine the placement of the infrastructure master Do not require that the...

For more information see Whats New in Failover Clusters in Windows Server Azq Clustering Windows Server 2008

Mon, 26 Sep 2011 23:13:11 GMT

Storage features include the following features Parallel SCSI, which previous versions of server clusters supported, is no longer supported for shared disk devices in a failover cluster. In Windows Server 2008, the cluster disk driver is a stand-alone component that communicates with the Partition Manager driver PartMgr.sys , for managing clustered disks. During the installation process, the driver is registered as a system Plug-n-Play PNP device, and is started during the normal Windows...

How to Create User Accounts Maintaining Windows Server 2003

Mon, 26 Sep 2011 23:06:36 GMT

Yo u r i n structor wi 11 de rrio n strate how to Create a domain user account Create a local use account Introduction Domain user accounts enable users to log on to a domain and access resources anywhere on the network, and local user accounts enable users to log on and access resources only on the computer on which you create the local user account. As a systems administrator, you must create domain and local user accounts to manage your network environment. Important You cannot create local...

What Is a User Account Template Managing Windows Server 2003

Mon, 26 Sep 2011 22:55:39 GMT

A user account template is a user account that contains ihe properties that apply to users with common requirements User ac count tem plates m a ke creati n g u ser ac counts with standardized configurations more efficient Definition You can simplify the process of creating domain user accounts by creating a user account template. A user account template is an account that has commonly used settings and properties already configured. Using account templates For each new user account, you only...

WSUS on Disconnected Networks Learning Windows Server 2008

Mon, 26 Sep 2011 19:31:21 GMT

Some organizations have networks partitioned from the Internet but which also host computers that need updates regularly applied. Although you can apply updates to all these computers manually, some isolated networks have so many hosts on them that such an approach is impractical. In this situation, you can deploy WSUS in disconnected mode, which enables you to use WSUS when the WSUS server is unable to obtain updates from an upstream server. In essence, you transfer updates and metadata from...

Delegation and Security Issues Active Directory Windows Server 2008

Mon, 26 Sep 2011 19:08:26 GMT

You have two methods for transferring administrative permissions to selected users you can use the Delegation of Control Wizard, or you can add access control entries ACEs to discretionary access control lists DACLs of individual OUs. The Delegation of Control Wizard appears to be easier to use although this is rather subjective . This wizard takes you step-by-step through the delegation process whereas manual configuration is more susceptible to human error and may take more time. To delegate...

Capturing Data with Network Monitor Learning Windows Server 2008

Mon, 26 Sep 2011 18:59:52 GMT

To capture network data from the Network Monitor interface, click Create A New Capture Tab. Clicking Play starts a capture, clicking Pause pauses a capture, and clicking Stop finishes a capture. You are most likely to use Network Monitor when trying to diagnose a network-related problem with the server on which you have installed the network monitor. When doing this, start a Network Monitor capture, attempt to replicate the problem, finish the capture, and then analyze the capture data....

Domain Modes and Functional Levels Domains Windows Server 2003

Mon, 26 Sep 2011 18:44:43 GMT

Let us first discuss certain general domain and forest functionalities that, to some degree, are common for both Windows 2000 and Windows .NET domains. Windows 2000 domains can operate in either default mixed mode when a domain can contain Windows 4.0 Backup Domain Controllers, BDC or native mode when a domain contains only Windows 2000-based domain controllers . When a domain's mode is changed to native, the following considerations should be taken into account Domain controllers DC no longer...

What Are Domain Functional Levels Maintaining Windows Server 2003

Mon, 26 Sep 2011 18:39:52 GMT

W rdows N Server 4,0, lAlrdows mo, Definition The characteristics of groups in Active Directory depend on the domain functional level. Domain functionality enables features that will affect the entire domain and that domain only. Three domain functional levels are available Microsoft Windows 2000 mixed, Windows 2000 native, and Microsoft Windows Server 2003. By default, domains operate at the Windows 2000 mixed functional level. You can raise the domain functional level to either Windows 2000...

Server Specifications Configuration Windows Small Business Server 2003

Mon, 26 Sep 2011 17:34:01 GMT

This section displays high-level information about the server hardware, including the processor type and frequency, and the total amount of RAM. It also displays the operating system name and OS service pack number that is installed on the server. Both the OS name and service pack number will be collected from WMI not from the monitoring database when the report is generated. If the server has multiple CPUs, the report will list a single string with the CPU information separated by commas. If...

Objective Answers Xax Windows Server 2003 Guide 2

Mon, 26 Sep 2011 17:02:46 GMT

A. Incorrect This command has the correct distinguished name syntax but is missing the computer keyword. B. Incorrect This command has the correct computer keyword but does not list the computer to be reset with the correct distinguished name syntax. C. Incorrect This command omits the computer keyword and fails to use the correct distinguished name syntax. D. Correct This command correctly uses the computer keyword and distinguished name syntax. A. Incorrect This action would be appropriate...

Testing the High CPU Usage Alert Maintaining Windows Server 2003

Mon, 26 Sep 2011 16:48:05 GMT

In this exercise, you will test the high CPU usage alert. Start the following program In Performance, view System Monitor. In the CPU Stress dialog box, change the activity for Thread 1 to Maximum. When the CPU usage exceeds 50 , the alert will trigger a message every 5 seconds. Close CPU Stress to stop the messages.

Application isolation settings 1 Deploying Windows Server 2003

Mon, 26 Sep 2011 16:34:27 GMT

Earlier versions of IIS can host Web sites and applications in pooled or isolated process configurations. For information about how to view the current application isolation mode, see View Application Isolation Configuration in IIS Deployment Procedures in this book. If you are running IIS 4.0 on Windows NT Server 4.0, your applications are isolated in one of the following ways In-process running in-process with Inetinfo.exe Isolated running under MTS If you are running IIS 5.0 on Windows 2000,...

Backup Operator Certificate Security Windows Server 2003

Mon, 26 Sep 2011 16:07:54 GMT

Performs backups of the CA database, the CA configuration, and the CA's private and public key pair also known as a key pair . Note If the CA's private and public key pair is stored on a hardware secu rity module HSM , backup operators can only back up the CA key pair if the HSM's security context allows this ability. You can use one of the following methods to perform the backup of CA information Windows Server 2003 backup utility. By including the System State in the backup set, you ensure...

Delegating Administrative Control Domains Windows Server 2003

Mon, 26 Sep 2011 15:35:11 GMT

One of the most remarkable features that Active Directory realizes is the possibility of delegating all or part of administrative power over an OU or a directory container to a group or a user in both Windows 2000 and Windows .NET domains . Delegation of control is essentially the same thing as wizard-aided granting of permissions on Active Directory objects to a user or group. You can manually assign the permissions necessary for performing this administrative task to a user or group, but this...

Configure Group Policy to Support EFS Implementing Windows Server 2003 Network

Mon, 26 Sep 2011 15:21:46 GMT

In this exercise, you will configure Group Policy settings relating to EFS. Ensure the 2823_DC1 and 2823_Client1 virtual machines are started. Perform tasks from the 2823_Client1 virtual machine as the user Don Hall unless otherwise directed. Don Hall's username is donh cohovineyard.com and his password is P ssw0rd. Don Hall does not have any administrative rights. Perform all administrative tasks by using the RUNAS command or the secondary logon service. When performing administrative tasks,...

Group Scopes Network Security Windows Server 2003

Mon, 26 Sep 2011 14:49:45 GMT

Each group in Windows Server 2003 has a scope attribute, which determines which security principals can be members of the group and where you can use that group in a multidomain or multiforest environment. Windows Server 2003 supports the following group scopes Tip Security groups do everything distribution groups do, and more. However, distribution groups should be used whenever possible because they do not become part of a user's security token. This makes the authentication process quicker...

Intersite Replication Essentials Solutions Windows Server 2003

Mon, 26 Sep 2011 14:29:37 GMT

While intrasite replication is focused on speed, intersite replication is focused on efficiency. The primary goal of intersite replication is to transfer replication information between sites while making the most efficient use of the available resources. With efficiency as a goal, intersite replication traffic uses designated bridgehead servers and a default configuration that is scheduled rather than automatic, and compressed rather than uncompressed. With designated bridgehead servers, the...

Terminal Services Gateway Learning Windows Server 2008

Mon, 26 Sep 2011 14:22:23 GMT

Terminal Services Gateway enables you to access RDP servers on your protected network from clients on the Internet without implementing a full VPN solution. Although you will use this technology primarily to grant remote access to Terminal Services servers, it is also possible to allow Remote Desktop access to clients and servers through TS Gateway. Hence, a person can connect from his or her home computer over the Internet to his or her workstation or to a Terminal Services server in the...

Microsoft Cluster Server relies heavily on the underlying components Cluster Windows 2000 Advanced Server

Mon, 26 Sep 2011 14:10:08 GMT

- Local and shared storage -Multi-homed networks Fibre Channel, SSA, or ServeRAID Systems management software -Microsoft Cluster Administrator -IBM Cluster Systems Manager ICSM Microsoft Cluster Server relies heavily on properly configured hardware and software. It is important, therefore, that you configure and test each device and software application before attempting to install MSCS. The same is true for determining problems. MSCS is designed to interact with the hardware and software...

Controlling Printer Security Windows Server 2003 Guide 2

Mon, 26 Sep 2011 13:35:17 GMT

Windows Server 2003 allows you to control printer usage and administration by assigning permissions through the Security tab of the printer's Properties dialog box. You can assign permissions to control who can use a printer and who can administer the printer or documents processed by the printer. A typical printer Security tab of a printer's Properties dialog box is shown in Figure 8-5. General Sharing Ports Advanced Security Device Settings Group or user names J3 Administrators C0NT0S0...

Publishing to Active Directory Certificate Security Windows Server 2003

Mon, 26 Sep 2011 13:12:38 GMT

The certificate object is published automatically into the CN AIA,CN Public Key container as a CrossCA object. The certificate is never distributed to the target CA in the other organization's CA hierarchy. Instead, it is downloaded via autoenrollment to all domain member computers so that the Cross Certification Authority certificate can be used to build certificate chains between the two CA hierarchies. This allows recognition of the partner CA's certificates that meet the qualified...

Identifying DNS Record Requirements Designing Infrastructure Windows Server 2003

Mon, 26 Sep 2011 12:59:42 GMT

Address Record Maps FQDN to 32-bit IPv6 address record Maps FQDN to 128-bit IPv6 address Maps a DNS domain name in the owner field to an ATM address referenced in the atm_address field. Maps an FQDN to an ISDN RFC1183 telephone number Contains a public key that is associated with a zone. In full DNSSEC defined later in this chapter implementation, resolvers, and servers use KEY resource records to authenticate SIG resource records received from signed zones. KEY resource records are signed by...

CommandLine Method Configuring Windows Storage Server 2003

Mon, 26 Sep 2011 12:40:57 GMT

To install the NAS components from a command line 1. If you're installing from the CD, insert the Server Appliance Kit 3.0 CD into the CD-ROM drive. Alternatively, you can install from a network directory. 2. At a command prompt, type the following note that while the syntax is printed here on multiple lines, this is actually a single command msiexec i path sasetup30.msi ARPHELPLINK support_URL qn The fully qualified path of the NAS sasetup30.msi file. If the sasetup30.msi file is in the...

Note Semantic Database Analysis Learning Windows Server 2008

Mon, 26 Sep 2011 11:52:36 GMT

You can optionally carry out a further check on the Ntds.dit database by performing a semantic database analysis. This analyzes data with respect to Active Directory semantics similar to checking a program file for syntax errors. To carry out this check directly after you have checked integrity, type quit to exit from the file maintenance prompt. At this point, the AD DS database is still stopped, and the activate instance is set to ntds. Enter semantic database analysis, followed by go fixup....

ADSI Access to User Parameters Terminal Services Windows Server 2003

Mon, 26 Sep 2011 10:27:10 GMT

Under Win2K, the only Terminal Services parameter of a user object that was accessible from the command line was the Terminal Services Profile Path attribute accessing this attribute required the TSPROF tool. WS2K3 exposes all Terminal Services attributes to ADSI. Using the Windows Script Host WSH and your preferred scripting language, you can now easily configure users' Terminal Services settings. I'll discuss the ADSI objects and provide some sample scripts in Chapter 4, but for now, here is...

Designing Applications and Proper Bandwidth Load Balancing Windows Server 2003

Mon, 26 Sep 2011 10:16:07 GMT

What will you be running on this cluster This is going to bring you back to planning your hardware solution appropriately. In each of the following chapters, you'll be given a set of basic requirements, which you'll need to get your job done with the solution you're implementing. Of course, when you add services on top of the cluster itself, you'll also need to consider adding resources to the hardware. You should also consider the bandwidth connections based on the application. Bandwidth and...

Figure Unidirectional trust relationship between two domains Administration Practice Windows Server 2003

Mon, 26 Sep 2011 09:39:40 GMT

When the trust is mutual, the trust relationship becomes bi-directional, or two-way. Bi-directional trust enables the users or devices in each domain to access resources in the other's domains see Figure 3-3 . Windows NT trusts are limited by the underlying database and security technology, which endows the operating system with a less than suitable cognitive ability. In other words, Windows NT domains are always mistrusting and as such, whenever two domains need to interoperate, explicit...

For the Default Web Site Configuration Windows Small Business Server 2003

Mon, 26 Sep 2011 09:29:52 GMT

1. Disable socket pooling by setting MD_DISABLE_SOCKET_POOLING at the W3SVC level. 2. Modify the IIS metabase to only listen on the IP address of the internal network adapter, and include support for the localhost alias by adding the 127.0.0.1 IP. 3. Configure IIS to allow a maximum of 500 concurrent connections. For the SharePoint Web Site 1. Disable socket pooling by setting MD_DISABLE_SOCKET_POOLING at the W3SVC level. 2. Modify the IIS metabase to only listen on the IP address of the...

Group Policy User Security Active Directory Windows Server 2008

Mon, 26 Sep 2011 09:20:47 GMT

You can find associated security policies in the Computer Configuration section I Policies I Windows Settings I Security Settings I Account Policies, which contain three main groups of settings Password Policy, Account Lockout Policy, and Kerberos Policy. Let's reiterate once again, that these settings cannot be modified on an organizational unit or site level settings defined in the domain policy will become effective. Password policy, account lockout policy, and Kerberos policy were reviewed...

Enabling ActiveX Controls Certificate Security Windows Server 2003

Mon, 26 Sep 2011 09:09:30 GMT

The Certificate Services Web Enrollment site must be defined as a Local intranet site for all computers in the forest. This allows the automatic passing of authentication credentials to the CA by using Windows Integrated authentication. In addition, the download settings for ActiveX controls must be modified to allow the activation and use of required ActiveX controls. Note For smart card deployment, the ActiveX control settings are only required at the smart card enrollment station. But, if...

Troubleshooting WINS Servers Network Infrastructure Windows Server 2003

Mon, 26 Sep 2011 09:08:34 GMT

Troubleshooting WINS server problems can be largely avoided by making sure you understand and correctly set up and configure your WINS database topology. Following are a few key clues that you may come across that point to a server-side WINS problem. All of these were discussed throughout the chapter, so we just reference them here as things to be aware of when troubleshooting your WINS server. To go over the configuration steps refer back to the related section of the chapter. WINS replication...

Namespace Considerations Active Directory Windows Server 2008

Mon, 26 Sep 2011 08:42:28 GMT

AD uses the DNS namespace as the basis for naming AD domains. Careful planning of the namespace will invariably make it easier to expand AD into new trees and domains, and will also make it easier to access resources using intuitive names. Ease of adding child domains as your network grows will prove critical in the Active Directory namespace life cycle. Choosing a naming structure most appropriate for your organization will undoubtedly be influenced by the business factors. Obviously, domain...

Terminal Services Manager Terminal Services Windows Server 2003

Mon, 26 Sep 2011 06:09:27 GMT

When you launch the Terminal Services Manger administrative tool, you are presented with a list of all servers that have Terminal Services enabled in the domain. Using this tool, you can easily see to which servers users are connected, from which client devices they're accessing the servers, and which processes and applications they are running in their sessions. Figure 4.16 shows the Terminal Services Manger interface. pf TS2K3 - Terminal Services Manager lt amp RDP-Tcp listener -SJj Console...

Determining the Host Capacity of a n Network Network Planning Windows Server 2003

Mon, 26 Sep 2011 05:47:57 GMT

To determine the host capacity of a network whose subnet mask is expressed in slash notation as n, use the following formula c 2 32_n - 2, where c represents the number of computers that can be accommodated by a given network, and n represents the number of bits in the network ID of that network. For example, in a 20 network, n 20. Therefore c 2 32-20 - 2, or 212 - 2, or 4096 - 2, or 4094. So, a 20 network can accommodate 4094 computers. Here is another example In a 28 network, n 28. Therefore,...

More Info Windows Authentication Learning Windows Server 2008

Mon, 26 Sep 2011 05:44:07 GMT

To learn more about Windows authentication, see the following page on TechNet 1. What is the default authentication protocol Windows Server 2008 uses in a domain environment 2. To which Active Directory objects can you apply fine-grained password policies Quick Check Answers 1. Kerberos version 5 is the default authentication protocol. NTLMv2 is used when Kerberos version 5 cannot be used. 2. Fine-grained password policies can be applied to user accounts and global security groups.

Scenario Jje Network Security Windows Server 2003

Mon, 26 Sep 2011 04:52:12 GMT

A user is attempting to use Web enrollment to install a certificate, using a certificate template that you recently created. After following the instructions you provided for enrollment, the user is receiving the error Your certificate request was denied, as shown in Figure 7.21. Microsoft Certificate Services - Microsoft Internet Explorer 1 File Edit View Favorites Tools Help QBack T O T 0 i Search Favorites Media lt Address http computer 1 certsrv certfnsh. asp 1 Microsoft Certificate...

Understanding Automatic Private IP Addressing APIPA Ymz Network Infrastructure Windows Server 2003

Mon, 26 Sep 2011 04:44:32 GMT

12. You are the systems administrator for a small network of fewer than 10 users on a single network segment, which is configured for peer-to-peer network resource sharing.You are using Windows XP and Windows 2000 on all of your client desktops and you decide to avoid the hassle of installing DHCP or manually configuring static IP addresses by using APIPA.You are using two file servers, both running Windows Server 2003, which also have the ability to use APIPA. Everything is running smoothly...

Note Yxh Network Infrastructure Windows Server 2003

Mon, 26 Sep 2011 04:18:56 GMT

PEAP uses Transport Layer Security TLS to provide an added layer of protection. PEAP also provides other benefits including an encryption channel that protects other EAP methods running within PEAP, fast reconnect the capability to reconnect to a wireless access point using cached session keys facilitating quick roaming between wireless access points, TLS-generated dynamic keying material, and server authentication that prevents deployment of unauthorized wireless access points. Figure 8.55...

Extending a Basic Volume Windows Server 2003 Guide

Mon, 26 Sep 2011 03:25:04 GMT

Even though you cannot use Disk Management to extend a basic volume, let's open it anyway so that we can see our volume as it gets extended. We will use diskpart.exe to actually do the extending. For this exercise we will be extending the primary partition F on Disk 2. 1. Open Computer Management by right-clicking My Computer and choosing Manage. 2. Expand Storage and click Disk Management. This will give you the window shown in Figure 2.37. Use this window to see the before and after of...

Scenario RRAS Passes Requests to Another DHCP Server Network Infrastructure Windows Server 2003

Mon, 26 Sep 2011 00:40:03 GMT

Scenario 2 assumes that you have chosen the Dynamic Host Configuration Protocol DHCP radio button in Figure 3.41.When you choose this option, all DHCP lease traffic is sent through the RRAS server by means of the DHCP Relay Agent.The DHCP server configured in the DHCP Relay Agent's properties is responsible for carrying out the entire DHCP lease process with the client, again by means of the DHCP Relay Agent. Both the client IP address and all IP configured options are distributed by the...

Conclusion Rdk Load Balancing Windows Server 2003

Sun, 25 Sep 2011 23:43:22 GMT

In this chapter, you learned the advanced topics of creating Highly Available solutions with Windows Server 2003. You built on the concepts learned in Chapters 1 and 3 to build load-balanced solutions. In this chapter, you took this a step further and learned the process of proper design and configuration, not only of the NLB cluster, but also regarding security and high availability. These are important concepts you need to master before you roll out a Windows Server 2003 clustered solution....

Quick Tip Uph Enterprise Deployments Windows Server 2003

Sun, 25 Sep 2011 18:07:10 GMT

It is very important to assign appropriate quota levels to users. It is highly recommended to validate the space required on a per user basis before assigning quota levels. Do not deny disk space to users exceeding quota limits to test required quota levels. To test these limits, you will need to monitor quota usage through the use of the Quota Entries button at the bottom of the dialog box. Select both Log event when a user exceeds their quota limit and Log event when a user exceeds their...

Managing Shares with the Shared Folders Utility Upgrading Windows Server 2003

Sun, 25 Sep 2011 16:55:29 GMT

Shared Folders is a computer management utility for creating and managing shared folders on the computer. The Shared Folders window displays all of the shares that have been created on the computer, the user sessions that are open on each share, and the files that are currently open, listed by user. To access Shared Folders, select Administrative Tools gt Computer Management, expand System Tools, and then expand Shared Folders. In the following sections you will learn how to use the Shared...

The Sybex Test Engine Security Administration Windows Server 2003

Sun, 25 Sep 2011 16:04:02 GMT

These are a collection of multiple-choice questions that will help you prepare for your exam. There are three sets of questions Two bonus exams designed to simulate the actual live exam All the questions from the Study Guide, presented in a test engine for your review Here is a sample screen from the Sybex MCSE test engine Here is a sample screen from the Sybex MCSE test engine

Establishing an IPsec Connection Learning Windows Server 2008

Sun, 25 Sep 2011 14:55:00 GMT

The Internet Key Exchange IKE protocol establishes SAs dynamically between IPsec peers . IKE sets up a mutually agreeable policy that defines the SA . This policy defines security services, protection mechanisms, and cryptographic keys between communicating peers . In establishing the SA, IKE provides the security keys and negotiation for the AH and ESP IPsec security protocols . IKE performs a two-phase negotiation operation, each phase with its own SAs . Phase 1 negotiation is known as main...

Adding Counters in the Performance Monitor Upgrading Windows Server 2003 to 2008

Sun, 25 Sep 2011 13:57:14 GMT

1. Open Reliability and Performance Monitor either by clicking Start Administrative Tools Reliability and Performance Monitor or Start Run. Type perfmon and press Enter. 2. In the console tree, click Monitoring Tools Performance Monitor. This will open the Performance Monitor. 3. Click the green plus sign in the Details pane and the Add Counters screen should come up and start loading a list of counters. 4. Now it's time to select the counters. We will be setting up counters to help us set up a...

Understanding How EFS Works Under the Hood Windows Server 2003 Guide

Sun, 25 Sep 2011 12:53:58 GMT

Instead of using passwords that the user must remember each time he or she wants to access a file, EFS uses a system of keys based on public key technology.When a user encrypts a file on an EFS-enabled NTFS volume, several keys are created related to the file. First, if the user does not have a digital certificate suitable for EFS, one is automatically created by the system, which also generates a public key for the user based on the certificate. Next, a randomly generated key is created and...

Use to access previous versions of files Maintaining Windows Server 2003 2

Sun, 25 Sep 2011 12:22:01 GMT

Previous versions on client computers Before users can use and access shadow copies, they must install the client software for shadow copies. The client software allows users to access previous versions of their files and folders from a shared folder. Shadow copies are copies of files that are located on the server and appear as previous versions on the client computers. Shadow copies can be used on both servers and clients to view and locate previous versions of files. Both views are created...

Figure Lzf Active Directory Planning Windows Server 2008

Sun, 25 Sep 2011 12:06:57 GMT

Specifying the application directory partition name After specifying what you will use for an application directory partition, you have the option to specify where the data files for AD LDS will be stored. This is the same data-file technology as in Exchange Server, SQL Server, and Active Directory databases. As you can see in Figure 10.19, the Data Files text box lets you specify where the database data file will be located, and the Data Recovery Files text box is used to specify where the...

Introduction Cpo Network Infrastructure Windows Server 2003

Sun, 25 Sep 2011 11:30:09 GMT

In the previous chapter, we looked at the VPN capabilities of Windows Server 2003.We reviewed the importance of network infrastructure design and connectivity requirements when designing and implementing a VPN. Primary connectivity for Windows Server 2003 relies on Transmission Control Protocol Internet Protocol TCP IP .The Internet relies on TCP IP and consequently, the growth of the Internet has driven the use of this open protocol. Through this growth, other standards have developed to...

Configuring DNS Zone Transfers Active Directory Windows Server 2008

Sun, 25 Sep 2011 11:06:26 GMT

Zone transfers are configured in the properties of the primary zones, and during secondary zone setup. Zone transfers may be denied altogether or allowed to any server, only the servers that are listed on the name servers tab to other authoritative servers of the zone , or other designated servers which are not necessarily authoritative for the zone . Allowing transfers to any server is a pretty dangerous setting, and it is not recommended. Typically, DNS zones should be configured as...

Info Bqv Windows Server 2003 Environment

Sun, 25 Sep 2011 09:26:53 GMT

J Seemly Settings Account Pokies - Local Pofcifrs StJ Audt account logon events He auditing SSftudlt account management Ho audnig LMP Rigr Assignment W JS Security Opt tori _1 Software Restriction PcJicies IP Security Poioes on Local Computer . J Audit policy change Ho judirtng j t AuQt tyum events Ho ao amp ftu

Note Communicate With The Other Administrator Learning Windows Server 2008

Sun, 25 Sep 2011 06:59:21 GMT

If you are setting up a federation partnership with another organization, your first step should be to get in touch with your counterpart in that organization to determine how you will exchange policy files while setting up the partnership. In the case study, the tailspintoys.com account domain uses the following Windows Server 2008 servers in its AD FS deployment TailspinToysDC The AD DS domain controller for tailspintoys.com. TailspinToysFed The federation server for tailspintoys.com . This...

Configuring Automatic Private IP Addressing APIPA Problem Networking Guide Windows Server 2003

Sun, 25 Sep 2011 06:21:40 GMT

You want to enable or disable Automatic Private IP Addressing APIPA on a Windows Server 2003 computer. To disable APIPA for a particular adapter, create the following Registry value GUID gt To disable APIPA for all adapters installed in a particular computer, create the following Registry value no reboot is necessary Note If either of these Registry entries is not present, the operating system assumes a default value of 1. This means that APIPA is turned on and enabled on all Windows Server...

Conclusion Network Infrastructure Windows Server 2003

Sun, 25 Sep 2011 05:04:35 GMT

IP routing involves using both direct and indirect routes to deliver packets to their intended destinations. Static and dynamic routing tables are used to determine how to best send the packet. With the use of the IP protocol and other associated protocols Application layer protocols, UDP datagrams, ICMP messages, routing protocols , messages are reliably and quickly encoded, sent, and decoded. Many of the topics covered in this section will be discussed in even greater detail in subsequent...

RIS Answer Files Solutions Windows Server 2003

Sun, 25 Sep 2011 04:08:51 GMT

RIS answer files are highly similar to Unattend.txt files, with just a few additional or changed entries. During the RIS image creation processes, default answer files are created for each OS image RISetup creates a default answer file called Ristndrd.sif. RIPrep creates its own answer file named Riprep.sif by default. The easiest way to create an optional answer file Remboot.sif by default for RIS is by using the Setup Manager Wizard Setupmgr.exe in Deploy.cab located in the Support Tools...

Installing the Remote Desktops MMC SnapIn Windows Server 2003 Guide

Sat, 24 Sep 2011 18:04:20 GMT

To prepare the Remote Desktops MMC snap-in for use, you begin by opening a blank MMC console. Click Start Run and type MMC in the Open dialog box. In the MMC window that appears, click File Add Remove Snap-in. In the Add Remove Snap-in dialog box, click the Add button. Select Remote Desktops from the Available Standalone Snap-ins list in the Add Standalone Snap-in dialog box and click the Add button followed by the Close button. In the Add Remove Snap-in dialog box, click the OK button. Remote...

Installing Windows Server as a Domain Controller Upgrading Windows Server 2003

Sat, 24 Sep 2011 18:01:15 GMT

For the exercises to work properly, you should make sure that the computer that will act as your server meets the list of requirements specified in Table 1.2. Your server should have a network card installed, and it should have at least a 2.5GB drive that is configured with the minimum space requirements and partitions. Other exercises in this book assume that your server is configured as follows 2GB about 2000MB C primary partition with the NTFS file system 500MB of free space you will create...

Folder Redirection in General Configuration Windows Small Business Server 2003

Sat, 24 Sep 2011 17:36:53 GMT

You can use Folder Redirection to redirect certain special folders to network locations. Special folders are those folders, such as Applications Data, Desktop, My Documents, My Pictures, and Start Menu, which are located under Documents and Settings. Folder Redirection is located under User Configuration in the console tree of Group Policy Object Editor. There are several basic options for Folder Redirection. For each basic option, there is an advanced version of that option. The advanced...

Figure Yvb Configuration Windows 2000 Server

Sat, 24 Sep 2011 16:54:30 GMT

Choose a way of contacting the Microsoft clearinghouse to get an activation code and valid license packs. NOTE If you choose to contact the licensing people via telephone or fax, the next screen of the wizard will display a list of countries to choose from so that you've got a shot at making a toll-free call. The United States is not the default choice, which is international-minded of Microsoft but inconvenient to those of us not used to having to browse all the way to U. If you're licensing...

Setting Up a Broadband Connection with a Local Router Planning Windows Small Business Server 2003

Sat, 24 Sep 2011 16:48:19 GMT

A broadband connection using a local router can be set up with either one or two network adapters in the server. Figure 6-3 shows the arrangement when you have two network adapters. In this setup, your server is the default gateway and default firewall. Figure 6-3. How the network is connected using two network adapters on your Windows Small Business Server. Tip Using one network adapter, the router becomes the default gateway and the Windows Small Business Server firewall can't be configured....

Practice Delegating Control of an Organizational Unit Maintaining Windows Server 2003

Sat, 24 Sep 2011 15:54:27 GMT

Delegate control of Tie Computers organizational unit Test delegated permissions iaryour Computers organizational unit Delegate control of lie Users organizational unit Test delegated permissions for your Users organizational unit Delegate control of the Computers organizational unit. Test delegated permissions for your Computers organizational unit. Delegate control of the Users organizational unit. Test delegated permissions for your Users organizational unit. Log on to the domain by using...

Enabling Auditing of Object Access Windows Server 2003 Guide

Sat, 24 Sep 2011 14:25:13 GMT

In addition to defining an audit policy as you learned to do in the exercises, you must enable auditing on each particular object for which you want to audit access. In this section, we will discuss how to enable auditing on objects, files, and folders. Objects include Registry keys, printers, files, folders, and so forth. Every Windows object has a security information object attached to it. It is referred as the security descriptor of the object. The security descriptor contains permission...

Recovering from a Mirrored Volume Failure 1 Upgrading Windows Server 2003

Sat, 24 Sep 2011 13:36:05 GMT

1. Power down your computer and remove the data cable from the second drive that you configured in the mirrored volume set. 3. In the Disk Management utility, right-click the failed mirrored volume marked as Failed Redundancy and choose Remove Mirror. 4. In the Remove Mirror dialog box, select the disk that will be removed from the mirrored volume and click the Remove Mirror button. 5. In the next dialog box, click Yes to confirm that you want to remove the mirror. 6. Power down your computer...

Types of Security Templates Network Infrastructure Windows Server 2003

Sat, 24 Sep 2011 13:22:34 GMT

Microsoft offers several preconfigured security templates through the Security Configuration and Analysis management console as well as online.You can apply a precon-figured security template to your system or use it to compare your existing configuration settings to predetermined settings provided by the security template. Templates are available for several configuration scenarios. Microsoft provides templates for the following Default security Setup security.inf System root security...

The Dedicated Root Domain Designing Infrastructure Windows Server 2003

Sat, 24 Sep 2011 11:22:38 GMT

The first domain deployed into any forest is known as the root domain. While in many respects it can be viewed as just another domain, since it must adhere to naming rules and so forth, it has unique properties that no other domain in the forest has. The root domain is where special forestwide groups live Schema Admins and Enterprise Admins.These two groups are used to manage forestwide operations, such as the addition of domains and modifications to the schema. It is necessary, therefore, to...

TestKingcom Windows Server 2003 Environment

Sat, 24 Sep 2011 11:18:44 GMT

Insert the Emergency Repair disk into TestKini 41. Insert the ASR disk into TestKing41. Press the DELETE key when you are prompted. You are the network administrator for TestKing. All network severs run Windows Server 2003. Business hours are 9 00 A.M. to 5 00 P.M., Monday through Friday A file server named TestKingB is configured to create a shadow copy every morning at 1 00 A.M. TestKingB hosts several shared folders. One shared folder has the configuration shown in the following table. For...

List Group Members Active Directory Planning Windows Server 2008

Sat, 24 Sep 2011 11:18:22 GMT

This script lists the immediate members of a group. Start by binding to the group, then set a variable equal to the Members property. This property returns a Dictionary object containing a list of group members in the Key field. The value field will contain 0. lt script 1anguage VBScript src inc1udes GroupC1ass.vbs gt Dim GroupObject, GroupMembers, Member Set GroupObject New GroupClass GroupObject.BindToGroup Set GroupMembers GroupObject.Members For Each Member In GroupMembers.Keys

Key Counters to Track for Memory Management Upgrading Windows Server 2003

Sat, 24 Sep 2011 10:43:45 GMT

The following are the three most important counters for monitoring memory Memory gt Available Mbytes Measures the amount of physical memory that is available to run processes on the computer. If this number is less than 4MB, you should add more memory. Memory gt Pages Sec added to System Monitor by default Shows the number of times that the requested information was not in memory and the request had to be retrieved from disk. This counter's value should be below 10. For optimal performance,...

Nonclassful Classless Subnet Masking Network Infrastructure Windows Server 2003

Sat, 24 Sep 2011 08:22:47 GMT

In classful subnetting, each subnet has the same number of host addresses. In many cases, this is not an optimal solution because we often need some segments that have only a few IP addresses and other segments that have hundreds. For example, administrators commonly group resources that are in physical proximity to one another on the same segment. However, you might want routers and gateways on small segments that are isolated from the rest of the network through subnetting. With classful...

Creating User Objects with Active Directory Users And Computers Windows Server 2003 Guide 2

Sat, 24 Sep 2011 05:49:23 GMT

You can create a user object with the Active Directory Users And Computers snap-in. Although you can create user objects in the root of the domain or any of the default containers, it is best to create a user in an organizational unit, so that you can fully leverage administrative delegation and Group Policy Objects GPOs . To create a user object, select the OU or container in which you want to create the object, click the Action menu, then choose New and choose User. You must be a member of...

Exporting Keys Network Security Windows Server 2003

Sat, 24 Sep 2011 00:27:32 GMT

The simplest method for backing up a key pair is to manually export the key, protect it with a password, and store the export media in a secure location. A PKI uses several formats for importing and exporting certificates, certificate chains, and private keys. When a user exports a certificate by using the Certificates console, the Certification Authority console, Certutil.exe, or Internet Explorer, the PKCS 7 and PKCS 12 export formats are available. The PKCS 7 format, also known as the...

Note Providing Backup Redundancy Learning Windows Server 2008

Fri, 23 Sep 2011 21:47:52 GMT

If you have multiple external disks connected to a server, you can write the same backup to each disk during the same backup operation. This provides redundancy if a target disk fails. You must also decide how frequently particular volumes are backed up . You can use Storage Reports to discover how often files on a particular volume are altered. A folder that holds marketing brochures that are updated only occasionally does not need to be backed up every night. If you move this shared folder to...

Chapter Primer to PKI Certificate Security Windows Server 2003

Fri, 23 Sep 2011 21:40:58 GMT

1. What version is the certificate The certificate is an X.509 version 3 certificate. You can verify this by viewing the Version field on the Details tab. 2. What is the name of the issuing CA The name of the issuing CA is CN adatumCA,DC adatum,DC msft. You can verify this by viewing the Issuer field on the Details tab. 3. What is the subject name of the certificate The subject name of the certificate is CN SCUser1, OU Module09, OU Labs, DC adatum, DC msft. You can verify this by viewing the...

View or Change Client Computer Settings Configuration Windows Small Business Server 2003

Fri, 23 Sep 2011 19:55:51 GMT

After you deploy software to the client through Set Up Computer Wizard, you can click View Computer Settings from the Server Management console Client Computer node, or run the command sbsprogramdir ClientSetup ViewCli.exe to see a list of changes made by Set Up Computer Wizard. The feature allows you to enable or disable the client settings, and remove the programs that are configured in the Set Up Computer Wizard. However, existing programs on client computers cannot be removed. For example,...

Booting into Directory Services Restore Mode Learning Windows Server 2008

Fri, 23 Sep 2011 19:44:08 GMT

Three methods of booting into DSRM exist. The first is to press F8 during the boot process and then to select Directory Services Restore Mode from the prompt, as shown in Figure 8-7. Choose Advanced Options for Windows Setup Use the arrow keys to highlight your choice. Safe Mode with Networking Safe Mode with Command Prompt Enable low-resolution video 640x480 Last Known Good Configuration advanced Disable automatic restart on system failure Disable Driver Signature Enforcement Description Start...

Case Scenario Create AD LDS Instances 1 Learning Windows Server 2008

Fri, 23 Sep 2011 19:21:49 GMT

1. Instance names identify the instance on the local computer as well as name the files that make up the instance and the service that supports it. You should therefore always use meaningful names to identify instances, for example, the name of the application that is tied to the instance. Names cannot include spaces or special characters. 2. Install a data drive on each server that hosts AD LDS instances. The servers will be hosting directory stores, and these stores should not be placed on a...

Case Scenario Create AD LDS Instances Learning Windows Server 2008

Fri, 23 Sep 2011 19:19:58 GMT

Trey Research has upgraded all its domain controllers to Windows Server 2008, and the company wants to use AD LDS to support its applications Specifically, they want each application to be an AD LDS instance Trey has employed you as a consultant to carry out this task Answer the following questions 1. How should you name each instance 2. Where should you store the files related to each instance 3. Why should you use application directory partitions 4. Which ports should you use to connect to...

Delegation of Zones Active Directory Windows Server 2008

Fri, 23 Sep 2011 18:02:45 GMT

A DNS server configured with one zone and a domain can self-sufficiently serve all requests for records contained in the subdomain, providing that the subdomain has also been created. You can create resource records in the subdomain exactly as you would in the parent domain. However, if your domain name contains a large amount of records or you simply want to have someone else administer the subdomain, you could also delegate authority for the subdomain to a separate DNS server. Delegation was...

Reinstating Inheritance Windows Server 2003 Guide 2

Fri, 23 Sep 2011 17:54:49 GMT

Inheritance can be reinstated in two ways from the child resource or from the parent folder. The results differ slightly. You might reinstate inheritance on a resource if you disallowed inheritance accidentally or if business requirements have changed. Simply reselect the Allow Inheritable Permissions option in the Advanced Security Settings dialog box. Inheritable permissions from the parent will now apply to the resource. All explicit permissions you assigned to the resource remain, however....

Creating URL Authorization Rules Learning Windows Server 2008

Fri, 23 Sep 2011 17:16:04 GMT

You must enable UrlAuthorizationModule to enable URL authorization. Authorization rules can be configured for specific Web sites, for specific Web applications, and for specific files based on a complete URL path . URL authorization rules use inheritance so that lower-level objects inherit authorization settings from their parent objects unless these settings are specifically overridden . To configure authorization settings, open IIS Manager and select the appropriate object in the left pane....

Domain Controller Sizing and Specification Designing Infrastructure Windows Server 2003

Fri, 23 Sep 2011 17:12:19 GMT

We have examined how the Domain and Application Directory partitions influence the size of the Active Directory database and how to estimate the size of domain partitions based on number of users within each domain. In this section, we focus on the DCs housing this database and how they should be best configured, promoted, and placed for optimum performance and service. We begin by looking at best practices for DC hardware configuration, focusing on components such as disk, memory, and CPU....

Advantages of Using WSUS Network Implementation Windows Server 2003

Fri, 23 Sep 2011 16:46:30 GMT

There are many advantages to using WSUS WSUS allows an internal server within a private intranet to act as a virtual Windows Update server. Administrators have selective control over what updates are posted and deployed from the public Windows Update site. No updates are deployed to client computers unless they are first approved by an administrator. Administrators can control the synchronization of updates from the public Windows Update site to the WSUS server either manually or automatically....

Configuration Virtual Server Settings Specifying Virtual Server Settings Configuration Windows Small Business Server 2003

Fri, 23 Sep 2011 16:02:25 GMT

Virtual Server settings can be specified to override the global settings made earlier. In some cases, these settings can only be specified at a Virtual Server level. To access the settings for a Virtual Server, follow the steps below 1. Click Start, select All Programs, select Administrative Tools, and then click SharePoint Central Administration. 2. Under the Virtual Server Configuration section, click Configure virtual server settings. 3. On the Virtual Server List page, select a Virtual...

Practice Enabling and Disabling User and Computer Accounts Maintaining Windows Server 2003

Fri, 23 Sep 2011 15:58:36 GMT

in this practice, you will enable and disable a user account and computer account In this exercise, you will disable and enable a user account and a computer account. Log on to the domain by using the ComputerNameUser account. Open CustomMMC with the Run as command. Use the user account Nwtraders ComputerNameAdmm Example LondonAdmin . Ensure that CustomMMC contains Active Directory Users and Computers. Review the procedures in this lesson that describe how to perform this task. The security...

Managing Cluster Nodes Clustering Windows Server 2008

Fri, 23 Sep 2011 15:14:27 GMT

Add nodes after you create a cluster Pause nodes, which prevents resources from running on that node Evict nodes from a cluster, which removes the node from the cluster configuration All of these actions are available from the Failover Cluster Management Actions pane There are three aspects to managing cluster nodes You can add a node to an established failover cluster by selecting Add Node from the Failover Cluster Management Actions pane. The Add Node Wizard will prompt you for information...

NtfsDisableLastAccessUpdate Configuring Windows Storage Server 2003

Fri, 23 Sep 2011 15:02:40 GMT

Description Determines whether NTFS updates the last-access time stamp on folders and files. Updating time stamps can consume a considerable percentage of overall I O bandwidth, particularly in cases in which a program accesses a large number of folders or files is quick succession. Disabling the updates increases file access speed. If the value of this entry is set to 1, NTFS does not update last-access times. Once the updates have been disabled, existing files retain the last time stamp...

I Wam Network Infrastructure Windows Server 2003

Fri, 23 Sep 2011 14:14:39 GMT

Debug Logging j Event Logging Monitoring j Interfaces 1 Forwarders Advanced Root Hints 1 Disable recursion also disables Forwarders Secure cache against pollution Name checking i Multibyte UTF8 j Load zone data on startup From Active Directory and registry J Enable automatic scavenging oF stale records Scavenging period o days Next, you see Server Options, listed here and described in Table 6.2. Disable recursion also disables forwarders This option is off by default. BIND secondaries This...

Implementing Terminal Services in an Extranet Environment Terminal Server Windows 2000

Fri, 23 Sep 2011 14:09:37 GMT

As a result of the many complex data flows required by today's business-to-business B2B marketplace, many enterprises are building extranets at the periphery of their LANs. This setup enables them to place systems in a buffer zone in which they have control over access from both the external networks as well as the intranet. If you are deploying a vertical application to which both internal and external users require access, then an extranet may be the perfect solution. Think of an extranet as...

Security Concerning the DNSUpdateProxy Group Network Infrastructure Windows Server 2003

Fri, 23 Sep 2011 13:36:16 GMT

There are some security concerns to be aware of when putting the DNSUpdateProxy Group into action. If you put your DHCP servers in this group, all records updated by those servers are not secure in your DNS database. If your DHCP server is a domain controller as those in many branch office configurations are , all the service location SRV , and forward lookup A records registered when starting the Netlogon service will not be secure.What can you do to address these concerns 1. Do not put any of...

Arp Rarp Network Infrastructure Windows Server 2003

Fri, 23 Sep 2011 13:19:39 GMT

Root BPDU Prio NS Query req. ARP Request, Ti Root BPDU Prio ARP Request, T Protocol EIG-RP Query req. Query req. Query req. Query req. Root BPDU Prior NS Query req. NS Query req. f ARP Request, T Root BPDU Prio Protocol EICRP ARP Request, T Root BPDU Root BPDU Root BPDU NS Query req. ARP Request, Ti .rget IP 192.168 ity 0x8000, Port .rget IP 192.168 Packet ID 0 or SLOPPY.VIGIL.1 or SLEEPY.VIGIL.1 or SLOPPY.VIGIL.l or SLEEPY.VIGIL.l ity 0x8000, Port or SLOPPY.VIGIL.l or SLEEPY.VIGIL.1 .rget IP...

Integrating the Windows Server DNS Server with DHCP 1 Network Infrastructure Windows Server 2003

Fri, 23 Sep 2011 12:48:51 GMT

5. Your company has a Windows Server 2003 domain. All of your servers run Windows Server 2003 and all of your workstations run Windows XP Professional.Your DHCP server is configured with the default settings and all of your Windows XP machines are configured as DHCP clients with the default DHCP client settings.You want to use DNS dynamic updates to automatically register the host record and PTR record for all of your workstations. Which of the following must you do to accomplish your goal A....