lesson 19 – administering windows 2000 server : the basics

Lesson 19 – ADMINISTERING WINDOWS 2000 SERVER : THE BASICS

Network security

Working with user accounts

Working with groups

Working with shares

Working with printers

Working with backups

OVERVIEW

Predict server administration.

Determine Network security needs.

Balance productivity and security.

Long run strong security should be avoided.

NETWORK SECURITY

Adding a user.

Modifying a user account.

Deleting/ disabling a user account.

WORKING WITH USER ACCOUNTS

Working with user accounts

Active Directory Users and Computers console.

Steps:

Select the users container in the left pane.

Right-click the users container.

Choose New from the pop-up menu.

Choose user from the submenu.

Adding a user

Adding a user

Use the Create New Object (User) dialog box

Steps:

Click the Next button.

In the second dialog box enter the initial password that the

account will use.

Adding a user

Adding a user

The second dialog box for adding a new user

Second dialog box:

User Must Change password at Next Logon.

User Cannot Change Password.

Password Never Expires.

Account Disabled.

Adding a user

Steps:

Click Next to continue.

Click Next to create the account.

Adding a user

Modifying a user account


User’s Properties dialog box

Important user account options:

Windows 2000 user’s logon name

Windows 2000 domain

Windows NT logon name

Logon Hours

Logon To button

Account Options

Member Of



Account tab of a user’s Properties dialog box


Setting logon time restrictions for a user


Restricting the computers to which a user can log on

Deleting/ disabling a user account

Steps:

Right-click the user and choose Delete.

Open the Action pull-down menu and choose Delete.

Select the user account, right-click it, and choose Disable

Account.

Open the Action pull-down menu and choose Disable

Account.

WORKING WITH GROUPS

Creating groups

Maintaining group membership

Working with groups

Controlling a user’s membership in groups

Creating groups

Create groups using the same console as the one used for

users: the Active Directory Users and Computers.

Creating groups

Groups appear in two of the domain’s containers – Built-in

and users.

Built-In groups are fixed.

Creating groups

List of Built-In groups

Creating groups

Default groups in the Users container

Creating groups

To add a new group:

Select the users container in the left pane.

Open the Action pull-down menu.

Choose New.

Choose Group.

Creating groups

Create New Object (Group) dialog box

Creating groups

Create New Object (Group) dialog box:

Enter the name of the group in the field provided.

Select from the available option buttons.

Select Security or Distribution group.


To set group membership:

Select the group.

Open its Properties dialog box.

Click the Members tab.

Click the Add button.

Select members to be added to the group.

Click the Add button.


Members tab of the group properties dialog box

WORKING WITH SHARES

Understanding share security

Creating shares

Mapping drives


Distinct shared resources (or shares) can be set on drives

and folders.

Permissions on an NTFS-formatted drive can be set on

folders and files.


Rules:

The most restrictive file or folder permission takes over.

Permissions are cumulative.

No Access permission takes over when permission conflicts

occur.

Creating shares

To create a new share:

Use My Computer or Windows Explorer.

Right-click the folder/drive to be shared.

Choose Sharing from the pop-up menu.

Click the Share This Folder button.

Creating shares

Sharing tab of a folder’s Properties dialog box

Creating shares

To create a new share:

Assign a share name and a comment for the share.

Select a limit for simultaneous access to share.

Review the share permissions.

Browse share through Network Neighborhood/My Network

Places.

Creating shares

Setting a share’s permissions

Mapping drives

Steps:

Open Network Neighborhood from the client computer.

Right-click the share to be mapped.

Choose Map Network Drive.

Select appropriate drive letter for the mapping.

Click OK.

Mapping drives

To connect to a hidden share:

Right-click Network Neighborhood (or My Network Places

for Windows 2000).

Choose Map Network Drive.

Choose a drive letter.

Enter the complete share name (with the appended dollar

sign).

Click OK.

Mapping drives

Map drives with NET:

Type NET USE.

Press ENTER to list currently mapped drives.

Type: NET USE drive_letter: UNC_for_share

WORKING WITH PRINTERS

Components involved in Network printing.

Setting Up a Network Printer.


Network printing components:

Print job

Print driver

Printer port

Printer queue

Print servers


Overview of the Network printing process

Setting up a Network printer

For high-throughput requirements, use printer pooling.

To set the permissions for a shared printer, use the Security

tab in the printer’s properties dialog box.


Enabling printer pooling


Enabling printer sharing


Setting a shared printer’s permissions


Loading additional print drivers for a shared printer

WORKING WITH BACKUPS

Different types of backups.

Backup schema.

Using Windows 2000 Server’s backup software.

Different types of backups

Normal backups

Copy backups

Incremental backups

Differential backups

Daily backups


Normal backups:

Backs up everything selected regardless of whether the

archive bits are set.

All archive bits are set to “off” as each file is backed up.


Copy backups:

Backs up everything selected regardless of whether the

archive bits are set.

Does not change the state of the archive bits.

Used to make a backup without disturbing sequence of

other backups. .


Incremental backups:

Backs up files that have their archive bits set within the

selection set.

Backup clears the archive bits.


Differential backups:

Backs up files that have their archive bits set.

Backup leaves the archive bits unchanged.


Daily backups:

Special backup in Windows 2000 Server.

Similar to Differential backup (backs up files modified on a

given day).

Backup schema

Simple backup

Combination backups

Backup schema

Simple backup:

Run Normal backups every night and rotate tapes.

Backup schema

Combination backups:

Full (Normal) backups of the system once a week and

Incremental backups each other night.

Full (Normal) backups of the system once a week and

Differential backups each other night.

Using Windows 2000 Server’s backup software

To access backup program:

Open the Start menu

Choose Programs

Accessories

System Tools

Backup


Windows 2000 Server’s backup program


A backup:

Backs up files.

Restores those files.

Assists in preparation for a total system rebuild in case of

failure.


Backup Wizard


Setting up a backup:

Click Backup Wizard.

Click Next.

Select data to backup.


Selecting backup data



Click Next

Choose type of media to backup to.


Selecting backup destination



Click Next.

After completing the Advanced settings, click Next.

Use Restore tab/Restore Wizard to restore data.

SUMMARY

Network security.

Working with user accounts:

Adding a user.

Modifying a user account.

Deleting/disabling a user account.

Summary

Working with groups:

Creating groups.

Maintaining group membership.

Summary

Working with shares:

Understanding share security.

Creating shares.

Mapping drives.

Summary

Working with printers:

Components involved in Network printing.

Setting up a Network printer.

Summary

Working with backups:

Different types of backups.

Backup schema.

Using Windows 2000 Server’s Backup Software.

lesson 19 – administering windows 2000 server : the basics

Documents

user account slide

new user slide

groups groups

group membership slide

users container slide

user account steps

network security slide

groups default groups