1. 1 Chapter Overview Creating Drive and Folder Shares Using Distributed File System Installing Network Printers Administering Network Printers Managing Share Permissions

2. 2 Creating Drive and Folder Shares A shared drive or folder is called a share. A share on the network can be accessed by users with the appropriate permissions from any workstation on the network.

3. 3 Requirements for Sharing Folders You must be a member of one of these groups: Administrators Server Operators Power Users group If the folder is on an NT file system (NTFS) volume, a user must have at least the NTFS Read permission for the folder in order to share it.

4. 4 Administrative Shared Folders Microsoft Windows 2000 automatically shares certain folders for administrative purposes. Administrative shares are appended with a dollar sign ($). \C$, \D$, \E$, and so on (the root of each volume) \Admin$ \Print$ You can also create additional shared folders and append the share names with a dollar sign to hide them.

5. 5 Sharing a Folder When you share a folder, you must assign it a share name. You can add a comment to Describe the folder and its contents Limit the number of users who can access the folder Assign access permissions Share the same folder multiple times To share a folder, open Windows Explorer, right-click the folder you want to share, click Properties, click the Sharing tab, and then click Share This Folder.

6. 6 The Sharing Tab for a Folder

7. 7 Sharing a Volume Sharing a volume is slightly different from sharing a folder. Because an administrative share for the volume already exists, in order to create a public share for the entire volume you need to create a new share. To share a volume, open Windows Explorer, right-click the volume you want to share, click Properties, click the Sharing tab, and then click New Share.

8. 8 The Sharing Tab for a Volume

9. 9 The New Share Dialog Box

10. 10 Modifying Shared Folders Use the Sharing tab in the Properties dialog box of a folder to Stop sharing a folder Add a share name Remove a share name Modify share permissions Modify caching parameters

11. 11 Caching Windows 2000 can store copies of files on the local drive of a client computer in the cache. When you share a folder, you can permit others to make the shared folder available offline. In the Sharing tab, click Caching to display the Caching Settings dialog box.

12. 12 The Caching Settings Dialog Box

13. 13 Connecting to a Shared Folder Four ways to access a shared folder from another computer running Windows 2000 on the network: Map to a network drive. Add a network place. Connect using the Run command. Connect using My Network Places.

14. 14 Connecting to a Shared Folder Using the Map Network Drive Wizard You can access a shared folder over the network by mapping a network drive. To start the Map Network Drive Wizard, from the desktop, right-click My Network Places, and then click Map Network Drive.

15. 15 The Map Network Drive Dialog Box

16. 16 Connecting to a Shared Folder Using the Add Network Place Wizard You can access a shared folder over the network by adding a network place. To start the Add Network Place Wizard, from the desktop, double-click My Network Places, and then double-click Add Network Place.

17. 17 The Add Network Place Wizard

18. 18 Connecting to a Shared Folder Using the Run Command You can use the Run command to create a one-time connection to a shared folder on the network. To start the Run command, from the desktop, click Start, and then click Run.

19. 19 Connecting to a Shared Folder Using My Network Places Another quick way to access a shared folder is to use My Network Places to browse the network. To start My Network Places, either double- click My Network Places on the desktop, or open Windows Explorer and expand the My Network Places icon.

20. 20 Lesson Summary Members of the Administrators, Server Operators, and Power Users groups can share folders. Windows 2000 automatically creates administrative shares. Use Windows Explorer to share a folder by accessing the Sharing tab in the Properties dialog box of the folder. You can connect to a shared folder by Mapping a network drive Adding a network place Using the Run command Using My Network Places

21. 21 Understanding the Distributed File System The Microsoft distributed file system (Dfs) for Windows 2000 Server lets a single folder serve as an access point to other shared folders on the network. Dfs makes it possible to organize shared folders on different computers into a single composite directory structure. Because of this, files located on multiple servers appear to users as though they all reside in one place on the network.

22. 22 Overview of Dfs

23. 23 Dfs Organization Dfs organizes a network’s shared resources into a hierarchy, the base unit of which is called a Dfs share. You can use the Dfs console to view this hierarchy structure. The first step in creating a Dfs share is to create a Dfs root. A Dfs root is a container for Dfs links. There are two types of Dfs roots: A domain root stores the Dfs topology as part of the Active Directory service. A stand-alone root stores the Dfs topology on a single computer, not in Active Directory. Dfs links are pointers to shared folders located elsewhere on the network.

24. 24 Dfs Functionality Dfs functionality is transparent to users. Only client computers with Dfs client software can access Dfs resources. Dfs preserves permissions assigned to shared folders.

25. 25 Implementing Dfs You must complete two procedures to implement Dfs: Create a Dfs root Create at least one Dfs link Optionally, you can create replicas of links and configure replication policy for the links.

26. 26 Creating a Dfs Root Use the Distributed File System console to create a Dfs root. To access this console, from the desktop, click Start, point to Programs, point to Administrative Tools, and then click Distributed File System.

27. 27 The Distributed File System Console

28. 28 The Select The Dfs Root Type Page

29. 29 The Select The Host Domain For The Dfs Root Page

30. 30 The Specify The Host Server For The Dfs Root Page

31. 31 The Specify The Dfs Root Share Page

32. 32 The Name The Dfs Root Page

33. 33 The Distributed File System Console with a New Dfs Root

34. 34 Creating Dfs Links After you create a Dfs root, create Dfs links. You can assign up to 1,000 Dfs links to a Dfs root. To create Dfs links, use the Distributed File System console.

35. 35 The Create A New Dfs Link Dialog Box

36. 36 The Distributed File System Console with a Dfs Root and a Dfs Link

37. 37 Replicating Dfs You can configure Dfs to use replication to provide fault tolerance. This ensures that shares remain available to users even if the server hosting Dfs links or a Dfs root fails. Use the Distributed File System console to replicate a Dfs root to another server in the domain.

38. 38 Replicating a Shared Folder For each Dfs link, create a set of replicated Dfs shares that the Dfs link points to. You add the first folder to the set when you create the Dfs link. You can create up to 32 replicas of that folder on servers throughout the network. Use the Distributed File System console to create replicas of the shared folder associated with a Dfs link.

39. 39 Setting Replication Policy To ensure that the content of shared folders is always available to users, replicate that content to other roots or Dfs shares. Choose manual or automatic replication. Make sure you meet the requirements for automatic replication. Use of a domain Dfs root All replicas stored on NTFS 5.0 volumes Use the Distributed File System console to configure replication policy.

40. 40 The Replication Policy Dialog Box

41. 41 Lesson Summary Dfs enables a single folder to serve as an access point to other shared folders on the network. To implement Dfs, create a Dfs root and at least one Dfs link. Use the Distributed File System console to create and manage Dfs objects. You can create replicas of Dfs roots and links and configure Windows 2000 to automatically replicate the files.

42. 42 Installing Network Printers Windows 2000 is designed for network printing. Client applications can send print jobs to printers either Attached to a computer running Windows 2000 Attached directly to the network by using a dedicated print server device

43. 43 Understanding Printing Terminology Important Windows 2000 printing terms Printer: the software interface between the operating system and the print device Print device: the hardware device Print server: the computer where printers reside Printer driver: files used by Windows 2000 to convert application print commands into page description language (PDL)

44. 44 Printing Terminology

45. 45 Requirements for Network Printing Requirements for implementing printing on a Windows 2000 network At least one computer to be the print server Sufficient random access memory (RAM) on the print server to process documents Sufficient disk space on the print server to store documents

46. 46 Printing Configurations: A Nonremote Local Print Device

47. 47 Printing Configurations: A Nonremote Network Print Device

48. 48 Printing Configurations: A Remote Local Print Device

49. 49 Printing Configurations: Remote Network Print Devices

50. 50 Installing a Print Device The printer must be installed on the print server. Use the Add Printer Wizard to specify the location of the print device and select a printer driver. 1. To start the Add Printer Wizard, from the desktop, select Start, point to Settings, and then click Printers. 2. In the Printers window, double-click Add Printer.

51. 51 The Local Or Network Printer Page of the Add Printer Wizard

52. 52 Sharing a Printer You must share a printer to make it available on the network. You can share a printer either During installation, by using the Add Printer Wizard After installation, by using the Sharing tab in the printer’s Properties dialog box

53. 53 The Sharing Tab in the Properties Dialog Box of a Printer

54. 54 Lesson Summary Windows 2000 network printing requires a print device, a printer, a print server, and a printer driver. A printer is the software interface between the operating system and the print device; it is installed on the print server. To install a printer, use the Add Printer Wizard to specify the location of the print device and select a printer driver. You must share a printer to make it available on the network.

55. 55 Administering Network Printers Printers require more regular maintenance than most network components. You must ensure that printers are available when users need them and that users can easily print their documents.

56. 56 Managing Printers The primary Windows 2000 print management tool is the Printers window. To access the Printers window, do one of the following: In Control Panel, double-click Printers. From the desktop, click Start, point to Settings, and then click Printers.

57. 57 Installing Additional Printer Drivers When you share a printer on a network, you might need to install additional printer drivers to accommodate client computers running other operating systems. You can use the Printers window to install additional printer drivers on the print server.

58. 58 The Additional Drivers Dialog Box

59. 59 Setting a Separator Page A separator page is a file that contains print device commands. Separator pages identify and separate printed documents. Separator pages can also switch between print modes.

60. 60 Setting a Separator Page (Cont.) Windows 2000 Separator Page Files FilenameFunction Pcl.sep Switches the print mode to PCL for HP-series print devices and prints a page before each document. Pscript.sep Switches the print mode to PostScript for HP-series print devices but does not print a page before each document. Sysprint.sep Prints a page before each document. Is Compatible with PostScript print devices. Sysprtj.sep A version of Sysprint.sep that uses Japanese characters.

61. 61 Setting a Separator Page (Cont.) You can create or customize.sep files to meet your needs. To implement a separator page, open the Printers window, and use the Properties dialog box of the printer that you want to implement a separator page for.

62. 62 Pausing, Resuming, and Canceling Documents If a print job has a problem, you might need to pause and resume the printer or cancel all pending documents in the queue. To pause a printer or cancel all pending documents, right-click the printer’s icon in the Printers window, and then select Pause Printing or Cancel All Documents from the menu.

63. 63 Redirecting Documents to a Different Printer If a printer is connected to a faulty print device, you can redirect all queued print jobs to another print device (as long as this device uses the same printer driver as the first device). To redirect documents, in the Printers window: 1. Right-click the printer, and then click Properties. 2. In the Ports tab, clear the port for the current print device, and then select the port that the replacement print device is connected to.

64. 64 The Ports Tab of a Properties Dialog Box for a Printer

65. 65 Pausing, Restarting, and Canceling a Document You can pause and resume printing a specific document. You can also restart or cancel a document. To do any of these tasks: 1. In the Printers folder, double-click the printer’s icon. 2. Select a document in the printer window, and then choose the appropriate command (Pause, Resume, Restart, or Cancel) from the Document menu.

66. 66 A Windows 2000 Printer Window

67. 67 Setting Notification, Priority, and Printing Time You can manage the documents in a printer’s print queue individually by setting their notification, priority, and printing time parameters. You must have the Manage Documents permission for the printer to configure these settings. Use the Printers window to access and then configure the Properties dialog box of the document.

68. 68 The Properties Dialog Box of a Document in the Print Queue

69. 69 Administering Printers from a Web Browser You can manage printers from any computer running a Web browser. You can view Web pages that display the status of a Windows 2000 print server and its connected printers. To support this functionality, the computer that the printer resides on must have Microsoft Internet Information Services (IIS) installed.

70. 70 The Windows 2000 Web-Based Printer Management Interface

71. 71 Using a Web Browser for Printer Administration To use a Web browser to display a list of all of the printers on a Windows 2000 print server, use the URL http://printserver/printers where printserver is the name of the computer hosting the printers.

72. 72 Setting Up a Printer Pool A printer pool exists when one printer is connected to multiple (and usually identical) print devices, each using a different port on the print server. A print job waiting in the queue is sent to the first available print device in the printer pool. You can enable printer pooling in the printer’s Properties dialog box.

73. 73 A Printer Pool

74. 74 Setting Printer Priorities You can assign the same port (and print device) to multiple printers and configure a different priority for each printer. You can then instruct different groups of users to print to different printers (or have users send different types of documents to different printers).

75. 75 Lesson Summary A Windows 2000 print server can supply printer drivers to client computers running a variety of operating systems. Separator pages let users easily identify their print jobs. Use the Printers window to perform printing management tasks. You can manage printers on a Windows 2000 print server from any computer with a Web browser. A printer pool exists when one printer is connected to multiple (and usually identical) print devices, each using a different port.

76. 76 Managing Share Permissions Share permissions are similar to, but independent from, NTFS permissions.

77. 77 Understanding Shared Folder Permissions Key characteristics of shared folder permissions Apply to folders, not individual files Do not restrict access to users working at the local computer where the folder is stored (only apply to users who connect to the folder over the network) Only way to secure resources on file allocation table (FAT) or FAT32 volumes

78. 78 Understanding Shared Folder Permissions (Cont.) The shared folder permissions are Read, Change, and Full Control. The default shared folder permission is Full Control granted to the Everyone group. You can allow or deny shared folder permissions. It is usually best to allow permissions and to assign permissions at the group level.

79. 79 How Windows 2000 Applies Shared Folder Permissions Multiple permissions combine for effective permissions. Denials override other permissions. NTFS permissions are required on NTFS volumes. Copied, moved, or renamed shared folders are no longer shared.

80. 80 Guidelines for Shared Folder Permissions Determine which groups need access to each resource and the level of access that they require. Assign permissions to groups instead of users. Assign the most restrictive permission that still enables users to perform required tasks. Organize folders with the same security requirements by placing them in the same folder. Use intuitive share names. Consider the length of the share name and folder name that can be recognized by client computers.

81. 81 Combining Shared Folder Permissions and NTFS Permissions When share permissions and NTFS permissions combine, the more restrictive permission becomes the user’s effective permission.

82. 82 Combining Shared Folder Permissions and NTFS Permissions (Cont.)

83. 83 Assigning Shared Folder Permissions After you share a folder, specify which users have access to it by assigning shared folder permissions to selected users and groups. In Windows Explorer, use the Sharing tab in a shared folder’s Properties dialog box to assign shared folder permissions.

84. 84 The Sharing Tab of a Shared Folder

85. 85 The Permissions Dialog Box for a Shared Folder

86. 86 Controlling Printer Access You can control who uses a printer by configuring permissions in the Security tab in a printer’s Properties dialog box. The Windows 2000 printer permissions are Print Manage Documents Manage Printers

87. 87 The Security Tab of a Printer’s Properties Dialog Box

88. 88 Taking Ownership of a Printer The user who installs a printer is its owner, by default. If the original owner can no longer administer the printer, another user should take ownership. The following users can take ownership of a printer: A user or a member of a group with the Manage Printers permission for the printer Members of the Administrators, Print Operators, Server Operators, and Power Users groups

89. 89 Taking Ownership of a Printer (Cont.) To take ownership of a printer: 1. Open the Printers folder, right-click the printer’s icon, and then select Properties. 2. Click the Security tab, click Advanced, and then click the Owner tab. 3. In the Access Control Settings dialog box, in the Change Owner To list, select a user or group to be the new owner of the printer, and then click OK.

90. 90 Lesson Summary Shared folder permissions control access to shared folders that users access over the network. The shared folder permissions are Read, Change, and Full Control. Deny permissions always override allow permissions. When shared folder and NTFS permissions combine, the most restrictive permission is the user’s effective permission. Shared printer permissions control access to network printers. The printer permissions are Print, Manage Documents, and Manage Printers.