Lesson 19 – ADMINISTERING WINDOWS 2000 SERVER : THE BASICS

Network security Working with user accounts Working with groups Working with shares Working with printers Working with backups OVERVIEW

Predict server administration. Determine Network security needs. Balance productivity and security. Long run strong security should be avoided. NETWORK SECURITY

Adding a user. Modifying a user account. Deleting/ disabling a user account. WORKING WITH USER ACCOUNTS

Working with user accounts Active Directory Users and Computers console.

Steps: Select the users container in the left pane. Right-click the users container. Choose New from the pop-up menu. Choose user from the submenu. Adding a user

Use the Create New Object (User) dialog box

Steps: Click the Next button. In the second dialog box enter the initial password that the account will use. Adding a user

The second dialog box for adding a new user

Second dialog box: User Must Change password at Next Logon. User Cannot Change Password. Password Never Expires. Account Disabled. Adding a user

Steps: Click Next to continue. Click Next to create the account. Adding a user

Modifying a user account

User’s Properties dialog box

Important user account options: Windows 2000 user’s logon name Windows 2000 domain Windows NT logon name Logon Hours Logon To button Account Options Member Of Modifying a user account

Account tab of a user’s Properties dialog box

Modifying a user account Setting logon time restrictions for a user

Modifying a user account Restricting the computers to which a user can log on

Deleting/ disabling a user account Steps: Right-click the user and choose Delete. Open the Action pull-down menu and choose Delete. Select the user account, right-click it, and choose Disable Account. Open the Action pull-down menu and choose Disable Account.

WORKING WITH GROUPS Creating groups Maintaining group membership

Working with groups Controlling a user’s membership in groups

Creating groups Create groups using the same console as the one used for users: the Active Directory Users and Computers.

Creating groups Groups appear in two of the domain’s containers – Built-in and users. Built-In groups are fixed.

Creating groups List of Built-In groups

Creating groups Default groups in the Users container

Creating groups To add a new group: Select the users container in the left pane. Open the Action pull-down menu. Choose New. Choose Group.

Creating groups Create New Object (Group) dialog box

Creating groups Create New Object (Group) dialog box: Enter the name of the group in the field provided. Select from the available option buttons. Select Security or Distribution group.

Maintaining group membership To set group membership: Select the group. Open its Properties dialog box. Click the Members tab. Click the Add button. Select members to be added to the group. Click the Add button.

Maintaining group membership Members tab of the group properties dialog box

WORKING WITH SHARES Understanding share security Creating shares Mapping drives

Understanding share security Distinct shared resources (or shares) can be set on drives and folders. Permissions on an NTFS-formatted drive can be set on folders and files.

Understanding share security Rules: The most restrictive file or folder permission takes over. Permissions are cumulative. No Access permission takes over when permission conflicts occur.

Creating shares To create a new share: Use My Computer or Windows Explorer. Right-click the folder/drive to be shared. Choose Sharing from the pop-up menu. Click the Share This Folder button.

Creating shares Sharing tab of a folder’s Properties dialog box

Creating shares To create a new share: Assign a share name and a comment for the share. Select a limit for simultaneous access to share. Review the share permissions. Browse share through Network Neighborhood/My Network Places.

Creating shares Setting a share’s permissions

Mapping drives Steps: Open Network Neighborhood from the client computer. Right-click the share to be mapped. Choose Map Network Drive. Select appropriate drive letter for the mapping. Click OK.

Mapping drives To connect to a hidden share: Right-click Network Neighborhood (or My Network Places for Windows 2000). Choose Map Network Drive. Choose a drive letter. Enter the complete share name (with the appended dollar sign). Click OK.

Mapping drives Map drives with NET: Type NET USE. Press ENTER to list currently mapped drives. Type: NET USE drive_letter: UNC_for_share

WORKING WITH PRINTERS Components involved in Network printing. Setting Up a Network Printer.

Working with printers Network printing components: Print job Print driver Printer port Printer queue Print servers

Working with printers Overview of the Network printing process

Setting up a Network printer For high-throughput requirements, use printer pooling. To set the permissions for a shared printer, use the Security tab in the printer’s properties dialog box.

Setting up a Network printer Enabling printer pooling

Setting up a Network printer Enabling printer sharing

Setting up a Network printer

Setting a shared printer’s permissions

Setting up a Network printer Loading additional print drivers for a shared printer

WORKING WITH BACKUPS Different types of backups. Backup schema. Using Windows 2000 Server’s backup software.

Different types of backups Normal backups Copy backups Incremental backups Differential backups Daily backups

Different types of backups Normal backups: Backs up everything selected regardless of whether the archive bits are set. All archive bits are set to “off” as each file is backed up.

Different types of backups Copy backups: Backs up everything selected regardless of whether the archive bits are set. Does not change the state of the archive bits. Used to make a backup without disturbing sequence of other backups..

Different types of backups Incremental backups: Backs up files that have their archive bits set within the selection set. Backup clears the archive bits.

Different types of backups Differential backups: Backs up files that have their archive bits set. Backup leaves the archive bits unchanged.

Different types of backups Daily backups: Special backup in Windows 2000 Server. Similar to Differential backup (backs up files modified on a given day).

Backup schema Simple backup Combination backups

Backup schema Simple backup: Run Normal backups every night and rotate tapes.

Backup schema Combination backups: Full (Normal) backups of the system once a week and Incremental backups each other night. Full (Normal) backups of the system once a week and Differential backups each other night.

Using Windows 2000 Server’s backup software To access backup program: Open the Start menu Choose Programs Accessories System Tools Backup

Using Windows 2000 Server’s backup software Windows 2000 Server’s backup program

Using Windows 2000 Server’s backup software A backup: Backs up files. Restores those files. Assists in preparation for a total system rebuild in case of failure.

Using Windows 2000 Server’s backup software Backup Wizard

Using Windows 2000 Server’s backup software Setting up a backup: Click Backup Wizard. Click Next. Select data to backup.

Using Windows 2000 Server’s backup software Selecting backup data

Using Windows 2000 Server’s backup software Setting up a backup: Click Next Choose type of media to backup to.

Using Windows 2000 Server’s backup software Selecting backup destination

Using Windows 2000 Server’s backup software Setting up a backup: Click Next. After completing the Advanced settings, click Next. Use Restore tab/Restore Wizard to restore data.

SUMMARY Network security. Working with user accounts: Adding a user. Modifying a user account. Deleting/disabling a user account.

Summary Working with groups: Creating groups. Maintaining group membership.

Summary Working with shares: Understanding share security. Creating shares. Mapping drives.

Summary Working with printers: Components involved in Network printing. Setting up a Network printer.

Summary Working with backups: Different types of backups. Backup schema. Using Windows 2000 Server’s Backup Software.