Windows Networking ICCM 2004 Tim Young

What does networking give you? Peer to Peer Networking: Sharing one backup system Sharing printers Sharing some databases Making administration easier Allowing the same files to be available to multiple people. Peer to Peer

What does networking give you? Client/Server Networking Everything that Peer-to-Peer gives you Better security Enforce users & passwords Who can log into which computer Per-File security. Who can access which files. More active connections Win XP only allows 10 connections And share specific network services Client / Server

Network Fundimentals No not use: Use TCP/IP NetBEUI IPX /SPX Use TCP/IP More efficient with a slightly larger network You will be using it anyway for your Internet Make sure you have a default protocol set! More about this later

Peer to Peer Peer-To-Peer Basics: Most people use P2P when they first start networking their computers. Peer to Peer means that all the computers are “equal” But because there needs to be some “leadership,” the computers “elect” a temporary “leader” every few minutes. This leader is called the browsemaster

Broadcast Packets Peer to Peer Most communication should be from one computer to another. Peer to Peer But Broadcast packets go from one computer to all computers

Broadcast Packets Most communication should be from one computer to another. But Broadcast packets go from one computer to all computers

Peer-To-Peer The Browsemaster Holds the list of computers in the “network Neighborhood” Calls for a “census” every so often New computers “register” themselves with the browsmaster when they connect to the network. Is elected from amongst the “peers”

Peer-To-Peer The Electoral process Any computer can “force an election.” Computers vote for themselves according to their own self-worth. Takes into consideration operating system Takes into consideration computer speed The winner remains browsemaster until the next election. This process makes lots of broadcast “noise”

Peer-To-Peer Growing and shrinking neighborhoods. This may be due to not having default protocols Whoever becomes the browsemaster requires other computers to use it’s default protocol. If other computers do not have that protocol then they do not appear in the browse-list Until the leadership changes to a protocol that all computers understand, the list will be short.

Client Server There are two types of Windows client server networking: Active Directory (2000, XP, 2003) Non Active Directory (Pre Windows 2000) Client computers can function under the leadership of either type. Performance is greatly degraded if the client was not originally created for that system. Security is lost, computers are inefficient.

Client Server Non Active Directory Users, groups, file permissions The browsemaster is still elected but the server always wins You can turn off the election process. (look at the properties of the file and print sharing)

Client Server Non Active Directory Works best with Windows 95, 98, and ME Windows 2000 and XP are inefficient. They default to Active directory methods After those fail, they will fall back to the older style resolution.

Client Server Active Directory On large networks the non Active Directory system is very inefficient Active Directory (AD) was created after the problems with the old system were understood. AD is based off standard Internet services that have been modified slightly.

Client Server Active Directory AD is complex, but runs much smoother AD requires an AD server Windows 2000 server, XP Server, 2003server Linux does part of what the Windows servers do, but not all.

Client Server Active Directory AD uses DNS Also known as DDNS, Dynamic Domain Name Service (or System) AD uses LDAP Lightweight Directory Access Protocol AD uses Kerberos A secure authentication scheme

Client Server Active Directory DDNS Instead of using a broadcast system for finding computers, the client queries the server The list contains more information than just the browse-list Clients register network services also So it is possible to search the network for particular services by querying the DDNS server.

Client Server Active Directory LDAP It is simply important to know it exists and that AD uses LDAP. Advanced users will need to understand LDAP Kerberos AD uses kerberos authentication. Basic users need to be aware of this Advanced users will need to understand some of it.

Client Server Active Directory Setting up AD There are wizards to help you set this up The biggest issue is that you MUST have proper DNS set up for it to work. The PDF has links to Microsoft web-sites We recommend the hands-on Windows Server install Today during ICCM (6/3/2004)

Client Server Adding Servers If you had a Peer to Peer network previously and wish to add a server There are significant issues to be aware of On XP and 2000, Domain users are distinct from local users even if the names are the same. This causes grief with user profiles file permissions program accessibility and functionality

Notes: Win98 & AD Windows 9x computers do not receive the full benefit of an AD environment You miss out on some of the security You miss most of the management functions You can download a file from Microsoft to allow Win9x to have some of the AD functions.

Notes: XP with non-AD XP works well with either peer-to-peer or non AD environments, though it is inefficient. XP by default broadcasts to locate other computers and services on the network. You can disable this functionality.

Notes: XP Home vs. XP Pro XP Home is “unmanaged” Pro comes with a lot of helpful management tools XP Home does not work with AD XP Home does not join a domain XP (Home and Pro) have a connection limit of 10 that cannot be changed. Windows 98 had a connection limit of 100 that is changeable

Which Session Next? Hands-On: Windows Server Install If you are using Active Directory If you think you will be moving to AD Basic: Networking 101 If you are doing peer-to-peer If you will probably continue doing P2P Security 101 Good for everyone.