thuchanh_qtm.pdf

Bi tp thc hnh Qun tr mng Windows Server 2003

Trung tm cntt Lu hnh ni b Trang 1

Bi 1: LOCAL USER AND GROUP

1. TO LOCAL USER

Bc 1: Click nt phi chut trn My Computer chn Manage chn System tools chn Local user and group chn User Bc 2: Click nt phi chut trn User Chn New chn Users Bc 3: Nhp tn U1 va User name , Nhp Password l hui12345 vo Password, nhp li Password vo Confirm Password, b du chn User must change Password at next logon chn Create.



Bc 4: Lp li bc Bc 2 v 3 to thm 2 User : U2, U3 v U4 Bc 5: Start chn Shutdown chn Log off Administrtor chn OK Bc 6: Logon U1: n Ctrl+Alt+Delete Nhp tn U1 vo Username nhp Password ca U1 vo Password chn OK Bc 7 : Logoff U1, Log on bng Administrtor Bc 8: Click nt phi chut trn My Computer chn Manage chn System tool chn Local user and group chn User Click nt phi chut vo U1 chn Properties Ti tab General nh du vo User must change Password at next logon Chn OK



Bc 9: Logoff Administrator Chn Logoff U1 Bc 10: H thng s yu cu U1 i Password Nhp Password hin ti hui12345 vo Old Password sau nhp Password mi l newhui12345 vo 2 New Password v Confirm Password Chn OK Bc 11: Logoff U1 Chn vo Logoff Administrator Bc 12: Lm li Bc 8,9,10 Cho user U2,U3,U4 BI 2: TO LOCAL GROUP B1: Logon Administrator B2: Click nt phi chut trn My Computer chn Manage chn System tool chn Local user and group chn Group



B3: Click nt phi chut ln Group chn New Group B4: Trong Group Name g G1 chn Create chn Close Lm li B2 v B3 to thm 3 group l : G2, G3 V G4 B5: Trong Group Click nt phi chut trn Group G1 Chn Properties chn Add Chn Advanced



Chn find Now tm User U1 Chn U1 chn OK (Lc by user U1 l thnh vin ca Group G1) B6: Lm tng t B5: U2 l thnh vin ca G2, U3 l thnh vin ca G3 v U4 l thnh vin ca G4 BI 3: SHARE PERMISSION Chun b:

- S dng t nht 2 my tnh - Bo m ng truyn thng I. Share Permisson 1. To Share Folder

B1: My 1 khi ng vo windows server 2003 Vo D:\ To th mc DATA



B2: Click phi chut vo th mc Data chn Properties chn tab Sharing trong tab Sharing nh du chn mc Share this Folder trong Share name Gi mc nh l data nh du vo mc Maximum allowed B3: Vo th mc Data to file dulieumay1.txt m file dulieumay1.txt g ni dung vo B4: My 2: vo Start chn Run g \\ tn my 1 hoc a ch IP my 1 (v d: \\ H3220) 2. To Share Folder n B1: My 1 Vo D:\ to th mc tn BIMAT B2: Click phi chut vo th mc BIMAT chn Properties chn tab Sharing trong tab Sharing nh du chn mc Share this Folder trong Share name Sa BIMAT thnh BIMAT $ nh du vo mc Maximum allowed chn Apply



Chn permission cho Everyone quyn Full Control B3: My 2: vo Start chn Run g \\ tn my 1 (v d: \\ h3220)

S khng thy th mc BIMAT ca my 1



B4: My 2: vo Start chn Run g \\ tn my 1\BIMAT$ (v d: \\ h3220\BIMAT$)

S thy th mc BIMAT ca my 1

3. PHN QUYN TRN TH MC SHARE B1: My 1 to ra 3 user Giamdoc, U1,U2 Password c 3 user l p@may1 B2: Vo D:\ Click phi chut vo th mc DATA chn Properties chn tab Sharing chn Permission chn Remove Group Everyone ang c

-

- Trong hp thoi Permission chn Add trong hp thoi Select Users or

Group tm v add 3 users Giamdoc, U1,U2



Trong hp thoi Permission for Data Click chn user U1 nh du chn vo Read trong ct Allow chn Apply Click chn user U2 nh du chn vo Read v Change trong ct Allow chn Apply



Click chn user Giamdoc nh du chn vo Full control, Read v Change trong ct Allow chn Apply B3: My 2 Logoff v Logon Administrator vo Start chn Run g \\ tn my 2 (v d: \\ h3220) Trong hp thoi chng thc g U1 vo Username, g P@may1 vo Password Chn OK Vo th mc Data Click chut phi ln dulieumay1.txt chn Rename Sa thnh dulieumay2.txt nhn Enter my s bo li Access is denied (Lu : U1 ch c quyn c) B4: My 2 Logoff v Logon Administrator vo Start chn Run g \\ tn my 2 (v d: \\ h3220) Trong hp thoi chng thc g U2 vo Username, g P@may1 vo Password Chn OK Vo th mc Data Click chut phi ln dulieumay1.txt chn Rename Sa thnh dulieumay2.txt nhn Enter dulieumay1.txt i tn thnh dulieumay2.txt (Lu : U2 ch c quyn thay i)



B5: My 2 Logoff v Logon Administrator vo Start chn Run g \\ tn my 2 (v d: \\ h3220) Trong hp thoi chng thc g Giamdoc vo Username, g P@may1 vo Password Chn OK Vo th mc Data Click chut phi ln dulieumay2.txt chn Rename Sa thnh dulieuchung.txt nhn Enter (Lu : Giamdoc c quyn thay i full Control) Bi tp: 1 phng c 10 my tnh (Client) v 1 my ch (Server) c ci my in. To th mc DATA trn a D:\ ca my server, trong th mc DATA to mi my tnh (Client) mt th mc v to 1 th mc tn l DATA_CHUNG: Thc hin phn quyn cho cc my Client sao cho gia cc my Client khng ly c d liu ca nhau m ch ly c d liu th mc DATA_CHUNG v Share my in cho tt c cc Client. 4. MAP NETWORK DRIVER nh x th mc c chia s ca cc my tnh khc trn mng lm a ca my mnh B1: Share th mc Data Sau Click chut phi vo th mc Data chn Tools Chn Map network Driver Trong ca s Map network Driver ti mc Driver chn X: chn Finish



B2: ng tt c ca s- Click chut phi trn My Computer chn Explore trong Windows Explore hin c X: tng ng vi th mc Data ca my 1 BI 4: CI T MY IN MNG

my tnh c kt ni trc tip my in B1: Start Chn Settings Chn Control Panel Chn Printers and Faxes Chn All Printer Chn Next



my tnh khng c my in mun kt ni in c Thc hin: Start chn Run g \\ tn my tnh c ci my in (v d : \\server BI 5: LOCAL POLICY & LOCAL SECURITY POLICY

I. LOCAL POLICY

1. Gii thiu Local Policy B1: Khi ng my chn Windows server 2003 chn Logon Administrator chn Start chn Run , g lnh MMC Chn OK

- Xut hin mn hnh Console1

- Chn vo File chn Add/Remove Snap-in Chn Add



- Trong mn hnh Add Stadalone Snap-in chn mc Group pilicy Object Editor Chn Add Finish

- Close ng mn hnh Add Stadalone Snap-in chn OK ng mn hnh Add/Remove Snap-in.



B2: mn hnh Console1 Click du + pha trc cc tiu xem ni dung bn trong

- Chn File chn Save Trong mc Save in Chn Desktop trong mc File name g Local policy chn Save



-Trong mn hnh Desktop by gi xut hin biu tng Local Policy 2. Thc thi mt s Policy trn computer v User V d: lm bin mt Control Panel B1: Vo Local Policy trn mn hnh Desktop Chn Local computer Policy chn User Configuration chn Administrative Templates chn Control Panel Qua ca s bn phi chn Prohibit access to the Control Panel

- Right click trn Prohibit access to the Control Panel chn Properties nh

du vo options Enabled chn Apple chn OK



B2: ng tt c ca s ang c chn Start chn Run g cmd chn OK

- Trong mn hnh command line g gpupdate/force sau g Enter Lu : Sau mi ln chnh sa Policy cn phi nh lnh gpupdate/force cp nhp Policy B3: Start chn Setting. By gi Control Panel mt

3. Thc thi Policy trn computer: V d 2: Lm n cc option ca tab Automatic Updates Right click trn My computer chn properties Chn tab Automatic Updates



B1: Vo Local Policy trn mn hnh Desktop Chn Local computer Policy chn com puter Configuration chn Administrative Templates chn Windows components chn windows Update chn Configuration Automatic Updates ca s bn phi - Right click trn Configuration Automatic Updates chn Properties chn Enable chn Apple chn ok



B2: ng tt c ca s chn Start chn Run g cmd chn Ok trong mn hnh command line g gpupdate/force Khi h thng yu cu Restart li g Y ri nhn Enter ( thc thi policy ) My s t ng Restart li B3: Sau khi my Restart li Logon Administrator right click trn My computer chn properties chn vo Automatic Updates By gi Tab Automatic Updates n v khng th chnh sa. T THC HNH MT S LOCAL POLICY THNG DNG Cu 1: Remove My Computer icon on the Desktop (User Configuration chn Administrative Templates chn Desktop) Nu bt chc nng Enabled th s n biu tng My computer trn mn hnh Desktop ca User. Cn Disabled hoc Not Configue th ngc li. Cu 2: Hide and Disabled all items on the Desktop (User Configuration chn Administrative Templates chn Desktop) Nu bt chc nng Enabled th s xa ht cc biu tng c trn mn hnh Desktop ca User. Cn Disabled hoc Not Configue th ngc li.

II. GII THIU LOCAL SECURITY POLICY Mc ch: Thit lp chnh sch bo mt trn mt my n Chun b:

- Logon vo Administrator, To user c tn U1 t Password l u1



- Logoff Administrator sau Logon vo U1 - Logoff U1 sau Logon Administrator 1. Local Security Settings Start chn Programes chn Administrators Tools chn Local Security settings Trong Local Security policy Bung cacs daaus + pha trc cc tiu xem ni dung bn trong 2. t chnh sch Password trn mt my n:



V d 3: Quy nh Password ca mt user c chiu di l 5 k t, v c phc tp B1: Account Policies Chn Mininum password length ca s bn phi Click chut phi trn Mininum password length chn Properties gi tr chiu di password l 5 (h hnh v) chn Apply chn Ok B2: Right click trn password must meet Complexity repuirement chn Properties chn Enable chn Apple chn OK B3: ng cc ca s ang c chn Start chn g cmd chn OK trong mn hnh Command line g gpupdate/force B4: To user U2 v Password u2 ( By gi my xut hin thng bo li, yu cu bn phi nhp li Password cho User u2 vi chiu di ti thiu l 5 v c phc tp



- Ok g Password cho u2 l hui@123 chn Create chn Close B5: Logon U2 vi Password l hui@123 3. Thit lp security cho mt my tnh n V d 4: Cho mt User U1 cos quyn shutdown trn my B1: Logoff U2 sau Logon U1 B2: Start chn shutdown (Lu : U1 khng c quyn shutdown) B3: Logoff U1 v Logon Administrator



B4: Start chn Programes chn Administrators Tools chn Local Security policy chn Local Policies chn User Right Assignment Right click trn shutdown the Systems chn Properties -Chn Add User and Group



-Chn Advanced -Chn FindNow tm user U1 Chn U1 OK



-Chn Apply chn OK B5: ng cc ca s ang c Start chn Run g cmd Chn OK g gpupdate/force B6: Logoff Administrator sau Logon U1 lc ny U1 c quyn shutdown V d 5: i tn Administrator ca mt my B1: Logoff U1 v Logon Administrator B2: Start chn Programes chn Administrators Tools chn Local Security policy chn Local Policies chn Security Options Right click trn Account:Rename Administrators Account sau chn Properties B3: Sa tn Administrators thnh quanly chn apply chn OK



B4: ng ca s hin c sau cp nhp Policy (gpupdate/force) B5: Logoff Administrator sau Logon bng user Quanly Lu : user Administrator c i tn thnh Quanly BI 6: DOMAIN CONTROLLER

M t: Trong bi ny chng ta cn t nht 2 my: 1 my lm Domain Controller v mt my lm Workstation. Chun b:

- My Windows Server lm Domain Controller - My Windows XP hoc Windows Vista lm Workstation - Bo m ng truyn thng

1. Ci t my Domain Controller

B1: Khi ng my chn Windows Server 2003 v Logon Administrator B2: Nhn phi chut trn My Network Places chn Properties Nhn nt phi chut trn Card LAN chn Properties chn Internet Protocol chn Properties sau chnh gi tr Preferred DNS server cho ging gi tr IP address chn OK



B3: t tn cho Domain Controller nhn nt phi chut trn My computer chn Properties chn Tab Computer name chn ChangeSa Computer name thnh Server chn Ok My s yu cu Reset chn Yes khi ng li my. B4: Sau khi khi ng li my Logon Administrator B5: Start chn Run g dcpromo chn OK Ti ca s Welcome chn next ti ca s Operrating System Compatibility chn next ti ca s Domain Controller type nh du vo Domain Controller for a new Domain chn next ti ca s Create New Domain nh du vo Domain in a new forest chn next ti ca s New Domain Name g tn l: ithui.com chn next.



Ti ca s NetBIOS Domain Name chn next Ti ca s Database and Log Folder chn Next Ti ca s shared System Volume chn Next Ti ca s DNS Registration Diagnostics nh du vo Install and configure the DNS server on this computer, and set this computer to use this DNS server as its preferred DNS server chn next Ti ca s Permissions nh du vo Permissions compatible only with windows 2000 or windows server 2003 operating systems chn next ti ca s Directory services Restore Mode Administrator Password chn next ti ca s summany chn next qa trnh nng cp Domain Controller bt u din ra.



- Khi h thng yu cu a CD windows server 2003 chn Ok chn Browse ch ng dn ti th mc I386 trong a CD windows server 2003

vd: D:\W2K3\I386 - Khi ch xong ng dn nhn Ok tip tc qu trnh ci t hon tt chn

Finish h thng yu cu restart my chn Restart Now B6: Sau khi Restart li my ti ca s Log on chn Options ti y ta thy c thm Log on to chn Log on Administrator B7: Start chn Programs chn Administrative Tools chn Active Directory Users and computer Click du + ca mc user ra nhn nt phi chut trn users chn new chn user



Trong ca s new Object user trong first name v full name in U1 trong user logon name v user logon name (Pre-windows 2000) in U1 chn next

Trong password v Confirm password in hui@123 b du chn ti User must change password ats next logon chn next chn Finsh ng cc ca s li



BI 7: DOMAIN USER & DOMAIN GROUP Chun b: Khi ng my chn windows server 2003 nng cp ln Domain contronller

- TO OU (Organizational Unit) -

B1: Log on Administrator chn Start chn Programs chn Administrative Tools chn Active Directory Users and computer Click chut phi vo ITHUI.COM Chn New chn Organizational Unit Trong ca s New Object- Organizational Unit trong Name: g TTCNTT nhn OK



Ou TTCNTT c to trong Domain ITHUI.COM

1. TO GROUP TRONG OU TTCNTT

B1: Click chut phi vo OU TTCNTT Chn New chn Group B2: Nhp tn Group vo Group Name (Group scope option mc nh l Global v Group type option mc nh l Security) nhn OK



2. TO CC USER TRONG OU B1: Click chut phi vo OU TTCNTT Chn New chn User B2: Nhp tn user vo First name: u1 v user logon name: u1 chn next



B3: Nhp mt khu l hui@123 ln lc vo 2 password v Confirm password b du check ti User must change password ats next logon chn next chn Finsh B4: Lp li cc bc 1 n 4 to cc user account sau y: User u2: Password : hui@112 User u3: Password : hui@113 User u4: Password : hui@114 User u5: Password : hui@115

3. A CC USER VO TRONG GROUP B1: a user u1 vo Group HocVien Click chut phi vo u1 chn properties



Trong ca s properties ca u1 chn tab Member of chn Add nhp vo Enter the object name to selec: Hoc

- Checkname chn Ok chn Apple chn Ok

B2: a cc user u2,u3,u4,u5 vo Group HocVien Click chut phi vo Group HocVien chn properties chn tab Member chn Add



nhp vo Enter the object name to selec u2,u3,u4,u5 Checkname chn Ok, Ok Cc u2,u3,u4 v u5 l thnh vin ca Group HocVien: Apple chn Ok 4. Chnh policy cc user thuc Group HocVien c php log on locally vo my domain controller



B1: Log on Administrator ng tt c ca s ang c chn Start chn Programs chn Administrative Tools chn Domain controller Security Policy

- Security settings chn Local policies chn User Right Assigment chn Allow log on localy chn properties

- Chn Add user or Group chn Browse Chn ok Chn Advanced tm v chn Group HocVien



Ti hp thoi Select users.Click Ok Ti hp thoi Add users.Click Ok B2: ng tt c ca s ang c chn Start chn Run g cmd trong ca s command line g gpupdate/force B3: Log on ln lc cc users: u1,u2,u3,u4,u5

BI 8: NTFS Chun b:

- Khi ng my chn windows server 2003 nng cp Domain Controller - B gii hn Password (Domain Security Policy chn Account Policies chn

Password Policy) - Vo C:\To cy th mc nh sau: - To OU KETOAN v OU NHANSU - Trong OU KETOAN to Group Ketoan. Ta cc user KT1,KT2,KT3 v

Password l abc@123, Add cc user KT1,KT2,KT3 vo Group Ketoan. - - Trong OU NHANSU to Group Nhansu. Ta cc user NS1, NS2, NS3 v

Password l abc@123, Add cc user NS1, NS2, NS3vo Group Nhansu. - Cho Group Ketoan v Nhansu quyn Allow Logon Locally (Domain Controller Security Policy chn Local Policies chn User Right Assignment) - goupdate/force

C:\



Mc ch: Phn quyn cho cc Group sau - Trn th mc Data:

Group Ketoan v Nhansu c quyn Read - Trn th mc Chung:

Group Ketoan v Nhansu c quyn Full - Trn th mc Ketoan:

Group Ketoan c quyn Full Group Nhansu khng c quyn

- Trn th mc Nhansu: Group Nhansu c quyn Full Group Ketoan khng c quyn

I. STANDARD PERMISSION

1. Phn quyn trn th mc DATA

B1: Logon Administrator Chn C:\ click chut phi trn th mc DATA chn Properties vo tab Security chn Advanced B du chn ti mc Allow Inheritable permisson ..(Nh trong hnh)



Trong hp thoi Security chn Copy chn Apply chn OK B2: Trong hp thoi Data Properties chn users(ITHUI\ users) CHN Remove chn Advanced



Trong hp thoi Advanced Security Settings for Data nh du chn ti Replece Permission( nh trong hnh) chn OK chn Yes B3: Trong tab Security Chn Add tm Add 2 group Ketoan v Nhansu Trong hp thoi DATA properties kim tra Ketoan v Nhansu ang c quyn Read chn Apple chn Ok



2. PHN QUYN TRN TH MC CHUNG

B1: Vo C:\DATA Click chut phi trn th mc chung chn Properties vo tab security click chn Group Ketoan nh du vo Full Control trong ct Allow( Nh trong hnh) Apply



B2: Trong hp thoi chung Properties click chn Group Nhansu nh du vo Full Control trong ct Allow( Nh trong hnh) Apply 3. PHN QUYN TRN TH MC KETOAN

B1: Vo C:\DATA Click chut phi trn th mc Ketoan chn Properties vo tab security click chn Advanced



Trong tab Permission b du check Allow inheritable permission.(nh hnh v) Trong hp thoi Security chn Copy chn Apply chn OK B2: Trong tab Security chn Group nhansu chn Remove



- Click vo nt Ketoan nh du chn vo Full control ca ct Allow ( Nh trong hnh) chn Apply chn OK 4. PHN QUYN TRN TH MC NHANSU

B1: Vo C:\DATA Click chut phi trn th mc Nhansu chn Properties vo tab security click chn Advanced



Trong tab Permission b du check Allow inheritable permission.(nh hnh v) Trong hp thoi Security chn Copy chn Apply chn OK B2: Trong tab Security chn Group nhansu chn Remove



- Click vo nt Nhansu nh du chn vo Full control ca ct Allow ( Nh

trong hnh) chn Apply chn OK

BI 9: KT HP SHARE PERMISSION V NTFS PERMISSION B1: Trn my Domain Controller share th mc C:\DATA cho Everyone quyn Full Controll B2: My Windows Vista hoc XP Logon vo KT1 B3: Start chn Run g \\ PCXX (PCXX l tn my Domain Controller) chn OK



- Vo th mc \\ PCXX\DATA\Chung To mt file DataKT1.txt - Vo th mc \\ PCXX\DATA\Ketoan To mt file DataKT1.txt - Vo th mc \\ PCXX\DATA\Nhansu To mt file DataKT1.txt H thng

s thng bo li (nh hnh v) Ok

B4: KT2 V KT3 lm tng t nh B2 v B3 B5: Logon NS1 B6: Start chn Run g \\ PCXX (PCXX l tn my Domain Controller) chn OK - Vo th mc \\ PCXX\DATA\Chung To mt file DataNS1.txt - Vo th mc \\ PCXX\DATA\Ketoan To mt file DataNS1.txt - Vo th mc \\ PCXX\DATA\Nhansu To mt file DataNS1.txt H thng

s thng bo li (nh hnh v) Ok



BI 10: CHUN B SN SNG GIM ST VN HNH CA MY CH

Bi tp 1 La chn k thut gim st thch hp

Start All Programs Administrative Tools Performance Chn counter chn add counters i tng Logical Disk



Chn %Free Space

Dng phng php Report xem kt qu BI 11: OU DELEGATE CONTROL I. TO OU (Ogannization Unit) B1: Log on Administrator Chn Start Chn Programs Chn Administrative Tools Chn Active Derectory Users and Computer Cick chut phi trn ITHUI.COM Properties Chn New Chn Ogannization Unit



Trong ca s New Object- Ogannization Unit trong name : G ITHUI chn Ok B2: Click Chut phi trn OU ITHUI New chn Ogannization Unit trong ca s New Object- Ogannization Unit trong Name Ketoan chn OK B3: Click Chut phi trn OU ITHUI New chn Ogannization Unit trong ca s New Object- Ogannization Unit trong Name Nhansu chn OK B4: Click Chut phi trn OU Ketoan chn New chn User trong ca s New Object User trong First name v Fullname in KT1 trong user logon name v user logon name(Pre- windows 200) in KT1 chn next.



Trong ca s Password v Confirm Password in abc@123 b du chn ti User must change Password at next logon chn next chn Finish

B5: trong OU ketoan to user KT2 (tng t nh B4) B6: Click Chut phi trn OU Nhansu chn New chn User trong ca s New Object-User trong First name v Fullname in NS1 trong user logon name v user logon name(Pre- windows 200) in KT1 chn next.



Trong ca s Password v Confirm Password in abc@123 b du chn ti User must change Password at next logon chn next chn Finish B7: Trong OU Ketoan to user NS2(Tng t nh B6) II. Delegate Control

Giamdoc

Ketoanc KT1

KT2 Nhansu

u NS1

NS2

ITHUI



Mc ch: trong m hnh OU ny ta phn quyn nh sau -User KT1 c quyn qun l user account trong OU Ketoan -User NS1 c quyn qun l user account v Group trong OU Nhansu -User Giamdoc c quyn qun OU ITHUI, Ketoan, Nhansu Chun b: Cho group users c quyn Allow log on localy Logon Administrator vo Start Chn Programs Chn Administrative Tools Chn Domain Controller Security Policy Chn Local Policies Chn User Right Assignment Click chut phi trn Allow log on locally Chn Properties Chn Add User or Group .Browse g users Chn Check Names Chn Ok Chn Ok

- ng ca s ang c Start Chn run g cmd trong ca s command line g gpupdate/force

1. Phn quyn cho user KT1 qun l cc user accounts trong OU ketoan

B1: Logon Administrator vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU Ketoan chn Delegate Control. Trong ca s Wellcome chn next trong ca s user or Group chn Add g KT1 chn Check name chn next

Trong ca s Tasks to Delegate nh du chn vo Delegate the following common tasks nh du chn vo Create, delete, and manage user account chn next chn Finish



B2: Logoff Administrator log on KT1vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU Ketoan chn New chn user Lu : Lu KT1 c quyn to User

Trong ca s New Object User to user KT3 next trong Password v Confirm Password in abc@123 b du chn ti User must change Password at next logon chn next chn Finish



B3: Click chut phi trn user KT2 chn Reset Password. To Password mi cho KT2 chn OK. B4: Click chut phi trn user KT2 chn Delete chn Yes

2. Phn quyn cho user NS1 qun l cc user accounts cc Group trong OU Nhansu

B1: Logon Administrator vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU Nhansu chn Delegate Control. Trong ca s Wellcome chn next trong ca s user or Group chn Add g NS1 chn Check name chn next



Trong ca s Tasks to Delegate nh du chn vo Delegate the following common tasks nh du chn vo Create, delete, and manage user account v Create, delete, and manage Group chn next chn Finish

B2: Logoff Administrator log on NS1vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU Nhansu chn New chn Group Lu : Lu NS1 c quyn to User v Group



Trong ca s New Object Group to Group Nhansu trong Group scope chn Global trong Group type chn Security chn OK B3: Click chut phi trn Group nhansu chn Properties trong Properties chn tab Member chn Add.. trong hp thoi Select Users, Contacts, or Computers G NS2 check name chn OK chn OK

B4: Click chut phi vo Group Nhansu chn Delete chn Yes Click chut phi trn OU Ketoan

3. Cho user Giamdoc quyn Full Control trn cc OU ITHUI, Ketoan, Nhansu

B1: Logon Administrator vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU ITHUI chn Delegate Control. Trong ca s Wellcome chn next trong ca s user or Group chn Add g Giamdoc chn Check name chn next



Trong ca s Tasks to Delegate nh du chn vo Create a custom task to delegate chn next Trong hp thoi Active Directory Object type chn This Foeder, existing chn next



Trong hp thoi Permissons nh du vo General chn Property specific, Create/ deletion of specific child objects nh du vo Full control chn next chn Finish B2: Logoff Administrator log on Giamdoc vo Start Chn Programs Chn Administrative Tools chn AD Click chut phi trn OU ITHUI chn New chn User to user U1 ( Tng t nh cc bc ca phn trn)

Lu : user Giamdoc c quyn to trn OU ITHUI



B3: Click Chut phi trn OU Ketoan chn New chn Group To Group ( Tng t nh cc bc ca phn trn)

Click Chut phi trn user KT1 chn Reset Password i Password cho KT1 Lu : user Giamdoc c ton trn OU Ketoan

B4: Vo menu View chn Advanced Features B5: Click Chut phi trn OU Nhansu chn Properties chn tab Security chn user Giamdoc

Lu : user Giamdoc c ton trn OU Nhansu



BI 12: TRNH NG DNG REMOTE DESKTOP S dng Remote Desktop trn my tnh server Trc khi 1 my tnh Client no mun thc hin mt kt ni t xa n my tnh server, bn phi tin hnh cho php s dng Remote Desktop trn my tnh server B1: Right click vo Icon My computer trn mn hnh Desktop, chn properties Hp thoi System properties s xut hin hnh 1.



B2: Click vo tab Remote nh du vo mc Allow users to connecr remotely to this comperter trong khung RemoteDesktop, cc bc th hin nh hnh 2 B3: Click Apply ri chn OK dng hp thoi System Properties S dng RemoteDesktop Connection trn my tnh Client B1: Click vo Start chn Program Click Accessories chn Commuunication v click vo RemoteDesktop Connection nh sau:



B2: nh i ch IP ca server m bn mun Connect ti nh hnh sau BI 12: Sao lu d phng d liu ( h thng v User) v khi phc d liu khi h thng b s c hng hc 1. Backup v Restore d liu thng B1: M Backup bng cch Start Chn Programs Chn Accessories Chn System Tools Chn chng trnh Backup nh hnh sau Chng trnh s xut hin hp thoi hng dn bn bn cch lm bng Wizard



sao lu d liu bn chn Back up files and setting sao phc hi d liu bn chn Restore files and setting Ch : Bn phi Back up d liu trc th mi thc hin chc nng Restore nh du vo Let me choose What to back up cho php bn chn ti liu cn phi Backup chn next Trong hp thoi Items to back up, click m rng My comperter click m rng a chn th mc bn mun backup nhn next tip tc



Trong hp thoi Backup Type, Destination, and name Bn Click vo nt Browse chn ni lu file Backup. Trong th mc Type a name for th Backup bn c th g tn file bn mun. Tin trnh Backup s thc hin nh trong hp thoi Backup Progress



Restore file Backup trn my Domain Controller khi phc li d liu B1: Click vo nt Start Chn Programs Chn Accessories Chn System Tools Chn chng trnh Backup. B2: Trong hp thoi Welcom to the Backup Or Restore Wizard click Next B3: Trong hp thoi, Click chn phng Restore file and settings chn next



Trong hp thoi What to Restore, click vo nt Browser chn file Backup.bkf mm bn copy t my tnh Cliend. Trong hp thoi What to Restore, M rng file Backup.bkf M rng a C: ri m rng th mc backup trong khu vc bn phi, tip tc nhn next



Trong hp thoi Completing the backup or Restore wizard click vo nt Advanced khai bo thm mt s thng s trong qu trnh khi phc file Trong hp thoi Completing the backup or Restore wizard click vo nt Finish hon thnh qu trnh Restore. Sau click vo nt Close hon thnh qu trnh Restore Bi tp: Lp lch Backup t ng cho h thng (SV t lm) Vo Start chn Run G ntbackup s hin ln Menu



BI 13: Qun l thit b

Mc ch - Ci t cc thit b phn cng - Xc nh ti nguyn h thng - Cu hnh Hardware Profile

Trnh t I. Ci t phn cng bng cch dng Add Hardware Wizard. II. Xc nh ti nguyn phn cng bng cch s dng Devic Manager. III. Cu hnh Hardware profile.

Cch lm I. Ci t phn cng bng cch s dng Add Hardware Wizard. Hng dn ci t Modem 56Kbps 1. Vo Control Panel\Add Hardware 2. Trong trang Welcome click vo Next, Window s tm kim mt cht 3. Trn trang Is The Hardware Connected, chn Yes, I Have Already ConnectedThe Hardware, sau chn Next 4. Trong trang The Following Hardware Is Already Installed On Your Computer, ko thanh cun xung chn Add a new Hardware Device nh hnh bn di, chn Next 5. Trong trang The Wizard Can Help You Install Other Hardware, chn Install The Hardware That I Manual Select From A List, click Next 6. Trong trang From The List Below chn Modems, click Next



7. Trong trang Install New Modem, chn Donot Detect My Modem, I Will Select It From A List, click Next 8. Trong trang Install New Modem, trong danh sch Modems chn Standard 56000 bps Modem, click Next 9. Trong trang Install New Modem chn COM1, click Next 10. Click vo Finish trong trang tip theo cho thy hon thnh. 11. ng cc ca s li, cng vic ci Modem hon tt.

II. Xc nh ti nguyn phn cng bng cch s dng Device Manager. 12. Click phi vo My Computer ( trn Desktop) chn Manage 13. Chn Device Manager 14. Trong ca s Device Manager, click Mice And Other Pointing Devices 15. Click phi Mouse, chn Properties 16. Trong trang Mouse Properties click tab Resource 17. Xc nh Mouse ang s dng ti nguyn g (IRQ bao nhiu) 18. ng hp thoi Mouse Properties 19. M rng Keyboards, Click phi vo Keyboard chn Properties 20. Trong trang Keyboard Properties click vo tab Resource 21. Xem v xc nh ti nguyn bn phm ang s dng l g (IRQ I/O ranges l g?)

III. Cu hnh Hardware Profile. 22. Trn Desktop, click phi ln My Computer chn Propertie 23. Trn tab Hardware click vo Hardware Profiles 24. Trong hp thoi Hardware Profiles click Copy



25. Trong hp thoi Copy Profie, nhp ni dung l Test Trong khung To, click OK 26. Trong hp thoi Hardware Profiles click OK 27. Khi ng my li 28. Khi c nhc chn Test Hardware Profile 29. Lc ny User ang logOn bng Hardware profile l Test BI 14: Cu hnh v qun l my in

Mc ch - Ci t v cu hnh Printer - Qun l truy xut ti my in. - Chia s my in Trnh t I. Ci t mt SharedPrinter. II. Truy xut Shared Printer. III. S dng Add Printer Wizard Add mt my in chia s trn mng. IV. Cu hnh in n qua Web (IPP). V. Gn quyn truy xut my in (Printer Permissions). VI. Printer Pooling. Cch lm

I. Ci t mt Shared Printer.



Cc bc sau s ci t v chia s mt my in 1. T Start Menu, chn Printers and Faxes 2. Trong trang Printers and Faxes, trong khung Printer Tasks bn tri, chn Add A Printer 3. Trong hp thoi Add Printer Wizard, trn trang Welcome, chn Next 4. Trn trang Local Or Network Printer, chn Local Printer Attached To This Computer v xo chn Automatically Detect And Install My Plug And Play Printer, click Next 5. Trn trang Select A Printer Port, trong danh sch Use The Following Port, chn FILE: (Print To File), click Next



6. Trn trang Install Printer Software, trong danh sch Manufacturer, chn Generic 7. Trong danh sch Printer, chn Generic/ Text Only, click Next 8. Trn trang Name Your Printer, nhp tn Printer1, click Next 9. Trong trang Printer Sharing, chp nhn tn mc nh, click Next 10. Trong trang Location And Comment, click Next 11. Trong trang Print Test Page, chn Yes v click Next 12. Trong trang Completing the Add Printer Wizard, click Finish 13. Trong hp thoi Print To File, nhp Test.txt, click OK 14. Click Ok hp thoi tip theo 15. ng ca s Printer And Faxes 16. T Start menu chn My Computer 17. Duyt ti ng dn sau: C:\Documents and Settings\administrator 18. M tp tin test.txt, y l tp tin in th c my in va to in ra 19. ng tt c cc ca s li, vic ci my in hon tt

II. Truy xut Shared Printer.

1. LogOn vo mt my khc 2. T Start menu chn My computer 3. Trong My computer , trong khung Other Places, click My Network Places 4. Trong My Network Places, di Other Places, click Entire Network 5. Trong ca s Entire Network, double-click vo Microsoft Windows Network 6. Trong ca s Microsoft Windows Network, double-click tn Domain (hoc Workgroup ni cha my in) 7. Double click vo computer ri double-click vo my in Printer1 8. Trong ca s Printer1, trn Printer menu, chn Properies 9. Trong ca s Printer1 Properties trong tab General, click Print test page 10. Trong hp thoi Print To File , nh tn remotetest.txt vo dng Output File Name, click Ok 11. ng tt c cc ca s li 12. Quay tr li Print Server ta thy tp tin Remotetest.txt c to ng ch tp tin test.txt lc ban u. 13. V lc ny my tnh con c ci mt Printer trn ti local my con nhng ta thy rng nhng file in u c gi ti Print Server.

III. S dng Add Printer Wizard Add mt my in chia s trn mng.

1. M Add Printer Wizard 2. Trong trang Add Printer Wizard, trn trang Welcome click Next 3. Trong trang Local Or Network Printer, click Next 4. Trong trang Specify A Printer, chn Find A Printer In The Directory, click Next 5. Trong hp thoi Find Printers Click Next



6. Trong trang search Result, chn my in va tm c, click Ok 7. Trong trang Default Printer , chn No, click Next 8. Trong trang Completing The Add Printer Wizard, click Finish

IV. Cu hnh in n qua Web (IPP).

1. T Start menu, chn Control panel 2. Trong Control Panel, chn Add Or Remove Programs 3. Trong trang Add Or Remove Programs, chn Add/Remove Windows Components khung bn tri 4. Trong trang Windows Components Wizard, chn Internet Information Services(IIS), nhng ng nh du chn m chn Details 5. Trong hp thoi IIS, chn World Wide Web Service (ng nh du vo) sau chn Details

Bi tp thc hnh Qun tr mng Windows Server 2003 TT CNTT


6. Trong trang World Wide Web Service, chn Printer Virtual Directory, click OK 7. Trong trang IIS, click Ok 8. Trong trang Windows Components Wizard, click Next 9. Click Finish hon tt vic ci IPP 10. Restart my li 11. truy xut ti Printer bng Web ta ch cn g a ch sau: http://ComputerName/Printers 12. Trn y ta c th qun l mi th nu c quyn hn ca ngi qun tr.

V. Gn quyn truy xut my in (Printer Permissions).

1. T Start menu chn Printer And Faxes 2. Trong ca s Printer And Faxes chn my in ri chn Properties 3. Trong Printer Properties, trong tab Security, click Add 4. Trong hp thoi Select User, Computers, Or Groups, nh tn user mun gn quyn vo, click Check Names 5. Trong hp thoi Printer Properties chc l user c gn vo, Trong danh sch Permissions For , Click vo du check Allow Manager Documents. 6. Click Ok

VI. Printer pooling

. 1. T Start Menu, chn Printer And Faxes 2. Trong ca s Printer And Faxes click phi vo Logical Printer (HPLaserJet 4) chn Properties 3. Trong trang HP LaserJet 4 Properties, trong tab Port nh du chn Enable Printer Pooling, click Add Port 4. Trong hp thoi Printer Ports, chn Standard TCP/IP Port, click New Port 5. Trong trang Add Standard TCP/IP Printer Port, trn trang Welcome, click Next 6. Trn trang Add Port, nh a ch 10.1.1.201 trong Printer Name Or IP address, click Next 7. Trong trang Additional Port Information Required chp nhn mc nh, click



Next 8. Trn trang Completing The Add Standard TCP/IP Printer Port Wizard, click Finish 9. Lp li t bc 4 ti bc 8 hai ln cho i ch 10.1.1.202 v 10.1.1.203 10. Trong hp thoi Printer Port click Close. 11. Trong HP LaserJet Properties, trong Tab Port nh du chn vo cc Port 10.1.1.202,10.1.1.203,10.1.1.201 (mc nh c chn ri), Click Apply ri click Ok.

BI 15: Cu hnh v qun l Shared Folder

Mc ch - Chia s ti nguyn trn mi trng mng - Gim st chia s ti nguyn Trnh t I. Chia s mt Folder trn mng bng cch dng Create A Shared Folder

Wizard. II. Gim st Shared Folder. III. Chia s Folder vi nhiu tn khc nhau.



Cch lm I. Chia s mt Folder trn mng bng cch dng Create A Shared Folder Wizard.

1. LogOn bng quyn Administrator 2. T Start menu, click phi vo My Computer chn Manage 3. Trong trang Computer Management, di System Tools, m rng Shared Folders, click Shares 4. T Action menu, chn New share 5. Trong trang Welcome Click Next 6. Trong trang Setup A Shared Folder nhp C:\Accounting Data trong khung Folder To Share 7. Trong khung Share Name nhp Accounting Data 8. Trong hp thoi Create A Shared Folder, click Yes to Folder Accounting Data 9. Trong trang Shared Folder Permissions, chn Customize Permission 10. Click Custom 11. Click Remove ri Click Add 12. Trong hp thoi Select User, Computers, Or Groups, nhp tn group Accountants, click Check Name ri click OK 13. Trong trang Customize Permission Properties, nh du chn vo Allow Change Permission. 14. Chn nt Add mt ln na chn group Administrators 15. Cho Group Administrators c quyn Full Control. Click Ok 16. Click Ok ri click Next v click Finish.

II. Gim st Shared Folder. 1. LogOn nh ngi qun tr 2. T Start menu click phi ln My Computer chn Manage 3. Di System Tools click Shared Folders, chn Sessions (ni ny cho php ta gim st tt c nhng phin kt ni ti cc Shared Folder trn my tnh hin hnh). 4. Click vo Open Files s cho ta gim st tt c cc tp tin ang c truy xut thng qua mng.



III. Chia s Folder vi nhiu tn khc nhau. 1. LogOn nh ngi qun tr 2. T Start menu, chn My Computer 3. T C: click phi ln Sales Projections chn Properties 4. Trn tab Share chn New Share. 5. Trong hp thoi New Share nhp tn mi l Sales Projections Admin$ click Ok. 6. Trong trang Sales Projections Properties trong danh sch Share Name chc l Sales Projections Admin$ c chn click Permissions

7. G b nhng user c trc , sau thm ch group Administrators v cho quyn l Full Control.

8. Trong trang Sales Projections Properties trong danh sch Share Name chn Sales Projections click Permissions 9. G b tt c v ch thm group Accountants v gn quyn cho Accountants l Read permission, click OK.

thuchanh_qtm.pdf

Documents

european colinization of latin america

do you admire leonardo da vinci?

daniel zanella and alexander weygers

minne hävisivät soneran rahat

bodybuilding - the rock hard challenge (month 1 training)

cakes recipes

xcdc14a

how computer monitors work

who killed god

fortran

barclays1

18 tricks to teach your body

introduction to six sigma

the best american humorous short stories

heidegger kritik

chapter 23

basic buffer overflows explained

plato - symposium

compressing and decompressing folders

keyboard shortcuts for the opera browser for mac os x