OBJECTIVES 1. Install Windows NT 4.0 and Windows 2000 to new systems. 2. Upgrade systems from Windows 9x or Windows NT 4.0 to Windows 2000. 3. Describe

OBJECTIVESOBJECTIVES

1. Install Windows NT 4.0 and Windows 2000 to new systems. 2. Upgrade systems from Windows 9x or Windows NT 4.0 to Windows 2000. 3. Describe the bootup sequence employed by Windows NT/2000. 4. Navigate through the Windows NT/2000 system, including the Internet Explorer. 5. Explain the structure of Windows NT/2000. 6. List the core files in the Windows NT and Windows 2000 structures. 7. Identify the components of the Windows NT/2000 Registry structure. 8. Install and access printers in Windows NT 4.0 and 2000. 9. Install and access software applications in Windows NT and 2000.10. Install and configure hardware devices and drivers in Windows NT and 2000.11. Install and configure Local Area Networking functions in Windows NT and 2000.12. Install and configure Wide Area Networking and Internet functions in Windows NT 4.0 and 2000.

It was built around a new operating system It was built around a new operating system kernel that focused on enhanced reliability, kernel that focused on enhanced reliability, scalability, and security elements required scalability, and security elements required for corporate applications, while retaining for corporate applications, while retaining the strengths of the Windows operating the strengths of the Windows operating system. system.

A Workstation operating system

The Windows NT operating system actually exists as three distinct products:

A Server operating system

An Extended Server operating system to manage large enterprise networks

Figure 10-1: A (Client/Server or Domain-based) Network

The Windows NT 4.0 Server package The Windows NT 4.0 Server package provides the same features and functions provides the same features and functions found in the Windows NT Workstation. found in the Windows NT Workstation. However, the Server package also However, the Server package also provides the tools necessary to provides the tools necessary to administer and control a network from administer and control a network from its central location. its central location.

z

Figure 10-2: A PDC/BDC Arrangement in a Network

Enterprise networks are those networks Enterprise networks are those networks designed to facilitate business-to-business, designed to facilitate business-to-business, or business-to-customer operations. or business-to-customer operations. Because monetary transactions and Because monetary transactions and customers’ personal information travel customers’ personal information travel across the network in these environments, across the network in these environments, enterprise networks feature facilities for enterprise networks feature facilities for additional, highly protective security additional, highly protective security functions.functions.

An intranet is a network built on the An intranet is a network built on the TCP/IP protocol that belongs to a single TCP/IP protocol that belongs to a single organization. It is in essence a private organization. It is in essence a private Internet. Like the Internet, intranets are Internet. Like the Internet, intranets are designed to share information and are designed to share information and are accessible only to the organization’s accessible only to the organization’s members, with authorization. members, with authorization.

Windows 2000 is the successor of the Windows 2000 is the successor of the Windows NT 4.0 operating system. As a Windows NT 4.0 operating system. As a matter of fact, it was originally titled matter of fact, it was originally titled Windows NT 5. This operating system Windows NT 5. This operating system brings together the stability and security brings together the stability and security of Windows NT 4.0 and the Plug-and-of Windows NT 4.0 and the Plug-and-Play capabilities of Windows 9x. Play capabilities of Windows 9x.

Like previous NT versions, Windows 2000 Like previous NT versions, Windows 2000 comes in two basic variations: the corporate comes in two basic variations: the corporate workstation version, titled Windows 2000 workstation version, titled Windows 2000 Professional, and the network server Professional, and the network server version, called Windows 2000 Server. The version, called Windows 2000 Server. The server product is also available in two server product is also available in two extended enterprise versions — Windows extended enterprise versions — Windows 2000 Advanced Server and Windows 2000 2000 Advanced Server and Windows 2000 Datacenter Server.Datacenter Server.

The standard Windows 2000 Server The standard Windows 2000 Server package can manage up to 4 GB of RAM package can manage up to 4 GB of RAM and is capable of distributing work and is capable of distributing work between two microprocessors at a time. between two microprocessors at a time. This type of operation is referred to as This type of operation is referred to as Symmetrical Microprocessing (SMP). If Symmetrical Microprocessing (SMP). If Windows 2000 Server has been installed Windows 2000 Server has been installed as an upgrade to an existing Windows NT as an upgrade to an existing Windows NT 4.0 Server, it can support up to four 4.0 Server, it can support up to four different microprocessors simultaneously.different microprocessors simultaneously.

Recall that an intranet is simply a private, web-based network, typically established by an organization for the purpose of running an exclusive web site not open to the public (i.e., company web sites for internal company use only). Intranets can be based on local or wide area networks, or constructed as combinations of the two.

NOTENOTE

The Advanced Server edition can The Advanced Server edition can support up to 8 symmetrical processors support up to 8 symmetrical processors and up to 8 GB of memory. These and up to 8 GB of memory. These features enable it to function well in features enable it to function well in medium size networks running between medium size networks running between 100 and 500 concurrent users.100 and 500 concurrent users.

The Windows 2000 Datacenter Server The Windows 2000 Datacenter Server edition can handle up to 64 GB of RAM edition can handle up to 64 GB of RAM and 32 processors. This will enable it to and 32 processors. This will enable it to support up to 1000 simultaneous users support up to 1000 simultaneous users with heavy processing demands.with heavy processing demands.

Figure 10-3: Fail-Over Operations

Figure 10-4: Windows 2000 Desktop

A network share is an existing shared A network share is an existing shared resource (i.e., printer, drive, modem, resource (i.e., printer, drive, modem, or folder) located on a remote system.or folder) located on a remote system.

Locating, accessing and retrieving Locating, accessing and retrieving information in Windows NT is information in Windows NT is virtually the same as with the virtually the same as with the Windows 9x operating systems. Windows 9x operating systems.

My Computer

Start menu

Windows Explorer

Internet Explorer

My Network Places

Windows 2000 dialog boxes (windows)

The major Windows 2000 user interfaces are:

Instead of simply truncating the Instead of simply truncating the filename, inserting a tilde, and then filename, inserting a tilde, and then assigning a number to the end of the assigning a number to the end of the filename, Windows NT performs a filename, Windows NT performs a mathematical operation on the long mathematical operation on the long name to generate a truly unique name to generate a truly unique MS-DOS compatible filename.MS-DOS compatible filename.

However, when five or more names are However, when five or more names are generated that would result in duplicate generated that would result in duplicate short names, Windows NT changes its short names, Windows NT changes its truncation method. Beginning with the truncation method. Beginning with the sixth filename, the first two characters sixth filename, the first two characters of the name are retained, the next four of the name are retained, the next four characters are generated through the characters are generated through the mathematical algorithm, and, finally, a mathematical algorithm, and, finally, a tilde with an ID number is attached to tilde with an ID number is attached to the end of the name.the end of the name.

Figure 10-5: Windows NT Right-Click Menus

Windows 2000 offers extended common Windows 2000 offers extended common dialog boxes for File/Open, File/Print, dialog boxes for File/Open, File/Print, and File/Save options. These dialog boxes and File/Save options. These dialog boxes provide easy organization and navigation provide easy organization and navigation of the system’s hard drives, as well as of the system’s hard drives, as well as providing navigation columns that grant providing navigation columns that grant quick access to frequently used folders, quick access to frequently used folders, such as the My Documents and My such as the My Documents and My Pictures folders.Pictures folders.

Figure 10-6: Windows 2000 Common Dialog Boxes

Figure 10-7: Windows 2000 Explorer Toolbar

For Files and Folders11

On the Internet22

For People33

The Search feature provides three distinct search options:

Know which characters can legally be used in a Windows 2000 filename.

TEST TIPTEST TIP

Figure 10-8: Encrypting a File

Figure 10-9: Compressing a File

When fully installed, the Windows NT When fully installed, the Windows NT logical structure exists. It is a modular logical structure exists. It is a modular operating system that allows for operating system that allows for advances in computing technology to be advances in computing technology to be integrated into the system. The operating integrated into the system. The operating system exists in two basic layers referred system exists in two basic layers referred to as Modes. These two levels are the to as Modes. These two levels are the Kernel Mode and the User Mode.Kernel Mode and the User Mode.

Basically, the operating system runs in Basically, the operating system runs in the Kernel Mode while applications run the Kernel Mode while applications run in User Mode. The User Mode is a more in User Mode. The User Mode is a more restrictive operating mode where there restrictive operating mode where there is no direct access of hardware is no direct access of hardware permitted.permitted.

Figure 10-10: The Windows NT Organizational Structure

APIs are routines, protocols, and APIs are routines, protocols, and tools built into the operating system tools built into the operating system that provide application designers that provide application designers with consistent building blocks to with consistent building blocks to design their applications with. For design their applications with. For the user, these building blocks lead the user, these building blocks lead to consistent interfaces being to consistent interfaces being designed for all applications.designed for all applications.

Figure 10-11: Windows 2000 Organizational Structure

The Kernel Mode is the operating mode The Kernel Mode is the operating mode where the program has unlimited access where the program has unlimited access to all memory, including those of system to all memory, including those of system hardware, the User Mode applications, hardware, the User Mode applications, and other processes (such as I/O and other processes (such as I/O operations). operations).

The Windows NT HAL is a library of The Windows NT HAL is a library of hardware drivers that operate between hardware drivers that operate between the actual hardware and the rest of the the actual hardware and the rest of the system. These software routines act to system. These software routines act to make every architecture look the same make every architecture look the same to the operating system.to the operating system.

The Microkernel works closely with The Microkernel works closely with the HAL to keep the system’s the HAL to keep the system’s microprocessor as busy as possible. microprocessor as busy as possible. It does this by scheduling threads It does this by scheduling threads for introduction to the for introduction to the microprocessor on a priority basis.microprocessor on a priority basis.

The Win32k Executive Services block The Win32k Executive Services block provides all the basic operating system provides all the basic operating system functions for the NT environment.functions for the NT environment.

I/O Manager

Object Manager

Security Reference Manager

Process Manager

Virtual Memory Manager

Window Manager

Graphic Device Interface

Graphic Device Drivers

The Win32k Executive Services block is made up of a number of managers that include:

Figure 10-12: The Protected Subsystems

As its name indicates, the Windows NT As its name indicates, the Windows NT I/O Manager manages all input and I/O Manager manages all input and output functions for the operating output functions for the operating system. Its major function involves system. Its major function involves controlling communications between file controlling communications between file system drivers, hardware device drivers, system drivers, hardware device drivers, and network drivers and the system.and network drivers and the system.

Directory Objects

File Objects

Port Objects

Process and Thread Objects

Symbolic Link Objects

Event Objects

and Others

Windows NT 4.0 objects include:

Figure 10-13: The Windows NT Virtual Memory System

Figure 10-14: Virtual Memory in Windows NT

The other basic Windows NT layer is The other basic Windows NT layer is referred to as the User Mode. This referred to as the User Mode. This mode is a collection of subsystems that mode is a collection of subsystems that interact with users and applications. interact with users and applications.

Figure 10-15: The User Mode Subsystems

Figure 10-16: The NTVDMs and WOWs

Figure 10-17: Movement of Information in Windows NT

However, the Windows NT Registry is However, the Windows NT Registry is not compatible with the Windows 9x not compatible with the Windows 9x Registries.Registries.

Figure 10-18: The Windows NT/2000 Registry

The contents of the Registry are The contents of the Registry are physically stored in five files physically stored in five files referred to as Hives. Hives referred to as Hives. Hives represent the major divisions of represent the major divisions of all the Registry’s keys, subkeys, all the Registry’s keys, subkeys, subtrees, and values.subtrees, and values.

The SAM hive

The Security hive

The Software hive

The System hive

The Default hive

The hives of the Windows NT Registry are:

These files are stored in the \These files are stored in the \Winnt\System32\Config directory Winnt\System32\Config directory along with a backup copy and log along with a backup copy and log file for each hive. file for each hive.

Table 10-1: Major Windows NT Hives and Their Files

Know how to make a backup copy of the Registry in Windows NT 4.0.

TEST TIPTEST TIP

Be aware of the utility used to directly edit Registry entries of the various operating systems.

TEST TIPTEST TIP

The central feature of the Windows 2000 The central feature of the Windows 2000 architecture is the Active Directory (AD) architecture is the Active Directory (AD) structure. Active Directory is a structure. Active Directory is a distributed database of user and resource distributed database of user and resource information that describes the makeup of information that describes the makeup of the network (i.e., users and application the network (i.e., users and application settings).settings).

The Active Directory arranges domains The Active Directory arranges domains in a hierarchy and establishes trust in a hierarchy and establishes trust relationships among all of the domains relationships among all of the domains in a tree-like structure. in a tree-like structure.

Figure 10-19: Basic Active Directory Structure

A tree is a collection of objects that A tree is a collection of objects that share the same DNS name. Active share the same DNS name. Active Directory can subdivide domains into Directory can subdivide domains into organizational units (i.e., sales, admin, organizational units (i.e., sales, admin, etc.) that contain other units, or leaf etc.) that contain other units, or leaf objects, such as printers, users, etc.objects, such as printers, users, etc.

Conversely, Windows 2000 can create an Conversely, Windows 2000 can create an organizational structure containing more organizational structure containing more than one tree. This structure is referred than one tree. This structure is referred to as a forest. Figure 10-20 expands the to as a forest. Figure 10-20 expands the AD structure to demonstrate these AD structure to demonstrate these relationships.relationships.

Figure 10-20: Active Directory Relationships

Trusts are relationships that enable Trusts are relationships that enable users to move between domains and users to move between domains and perform prescribed types of perform prescribed types of operations.operations.

Rights are the permission settings that Rights are the permission settings that control a user’s (or groups of users’) control a user’s (or groups of users’) authority to access objects and authority to access objects and perform operations (such as reading or perform operations (such as reading or writing a file). Administrative Rights writing a file). Administrative Rights provide authority to users down to the provide authority to users down to the Organizational Unit level.Organizational Unit level.

Figure 10-21: Active Directory Users and Computers

System Policies

User Profiles

Groups

Network Shares

NTFS Rights

To empower the network administrator, Windows 2000 furnishes five powerful administrative tools:

System Tools

Storage

Services and Applications

The console includes three primary Microsoft Management Consoles (MMCs):

Figure 10-22: The Windows 2000 Computer Management

Figure 10-23: The Windows 2000 Device Manager

In Windows 2000, Policies are established In Windows 2000, Policies are established through the Group Policy Editor (GPE). through the Group Policy Editor (GPE). Administrators use this editor to establish Administrators use this editor to establish which applications different users have which applications different users have access to, as well as to control applications access to, as well as to control applications on the user’s desktop.on the user’s desktop.

Figure 10-24: The Windows 2000 Group Policy Editor

With Group Policies, administrators With Group Policies, administrators can institute a large number of can institute a large number of detailed settings for users throughout detailed settings for users throughout an enterprise, without establishing an enterprise, without establishing each setting manually.each setting manually.

Software Installation Settings

Windows Settings

Administrative Templates

GPOs can be used to apply a large number of changes to machines and users through the Active Directory. These changes appear in the GPE under three headings:

Figure 10-25: Computer Administrative Templates

In addition, Windows NT offers its own In addition, Windows NT offers its own proprietary Windows NT File System proprietary Windows NT File System (NTFS). The NTFS structure is designed (NTFS). The NTFS structure is designed to provide better data security and to to provide better data security and to operate more efficiently with larger hard operate more efficiently with larger hard drives than FAT systems do.drives than FAT systems do.

Header information

Standard information

Filename

Security information

Data

The Master File Table (MFT) replaces the FAT in a MS-DOS compatible system and contains information about each file being stored on the disk. In order of occurrence, this information includes:

The system files produced during the NTFS formatting process include:

0/1. A pair of MFT files (the real one and a shorter backup version).0/1. A pair of MFT files (the real one and a shorter backup version). 2. A Log file to maintain transaction steps for recovery purposes.2. A Log file to maintain transaction steps for recovery purposes. 3. A Volume file that includes the volume name, NTFS version, 3. A Volume file that includes the volume name, NTFS version, and other key volume information. and other key volume information. 4. An Attribute definition table file.4. An Attribute definition table file. 5. A Root Filename file that serves as the drive’s root folder.5. A Root Filename file that serves as the drive’s root folder. 6. A Cluster Bitmap that represents the volume and shows which6. A Cluster Bitmap that represents the volume and shows which clusters are in use. clusters are in use. 7. The partition boot sector file.7. The partition boot sector file. 8. A Bad Cluster file containing the locations of all bad sectors 8. A Bad Cluster file containing the locations of all bad sectors identified on the disk. identified on the disk. 9. A Quota Table for tracking allowable storage space on the disk 9. A Quota Table for tracking allowable storage space on the disk for each user. for each user. 10. An Upper Case Table for converting lowercase characters to 10. An Upper Case Table for converting lowercase characters to Unicode uppercase character. Unicode uppercase character.

Figure 10-26: The Organization of an NTFS Disk Volume

Figure 10-27: Basic NTFS Master File Table Record

Figure 10-28: Extended MFT Record Organization

Table 10-2: NTFS Cluster Sizes

The Windows NT file system provides The Windows NT file system provides security for each file in the system, as security for each file in the system, as well as supplying complete file access well as supplying complete file access auditing information to the system auditing information to the system administrator. NTFS files and folders administrator. NTFS files and folders can have permissions assigned to them can have permissions assigned to them whether they are shared or not.whether they are shared or not.

The NTFS system includes security The NTFS system includes security features that enable permission features that enable permission levels to be assigned to files and levels to be assigned to files and folders on the disk. These folders on the disk. These permissions set parameters for permissions set parameters for activities that users can conduct activities that users can conduct with the designated file or folder.with the designated file or folder.

Read (R). This permission enables the file or folder to be displayed along with its attributes and permissions.

Standard NTFS permissions include:

Write (W). This permission enables the user to add files or folders, change file and folder attributes, add data to an existing file, and change display attributes.

Execute (X). The Execute permission enables users to make changes to subfolders, display attributes and permissions, as well as to run executable file types.

Delete (D). The Delete permission makes it possible for users to remove files and folders.

Standard NTFS permissions include: (continued)

Change Permission (P). This permission enables users to change permission assignments of files and folders.

Take Ownership (O). Ownership permission enables the user to take ownership of the file or folder.

No Access (none). File and Folder level

Read (RX). File and Folder level

Change (RWXD). File and Folder level

Add (WX). Folder level only

Add & Read (RWX). Folder level (RX) File level

List (RX). Folder level only

Full Control (RWXDPO). File and Folder level

Some combinations of the permissions are woven together in Standard NTFS file and folder permissions. These include:

Figure 10-29: Windows NT Partitions

Windows 2000 features an improved NTFS Windows 2000 features an improved NTFS referred to as NTFS5. This version enables referred to as NTFS5. This version enables administrators to establish user hard disk administrators to establish user hard disk quotas limiting the amount of hard drive quotas limiting the amount of hard drive space users can have access to. The new space users can have access to. The new NTFS system also offers enhanced system NTFS system also offers enhanced system security. Windows 2000 NTFS provides an security. Windows 2000 NTFS provides an encrypted file system and secure network encrypted file system and secure network protocol and authentication standards.protocol and authentication standards.

Figure 10-30: Windows 2000 Hierarchical Storage Management

Simple

Spanned

Mirrored

Striped

RAID 5

There are five different types of dynamic volumes:

Know what is required to install Windows 2000 in a dynamic volume.

TEST TIPTEST TIP

Figure 10-31: Windows 2000 Disk Management Snap In

More efficient drive management due to its smaller cluster size capabilities

In most other situations, the NTFS system offers:

Support for very large drives made possible by its 64-bit clustering arrangement

Increased folder and file security capabilities

Recoverable file system capabilities

Built-in RAID support

Microprocessor – 133 MHz Pentium (P5 equivalent or better)

The minimum hardware requirements for installing Windows 2000 Professional on a PC-compatible system are:

RAM – 64 MB (4 GB maximum)

HDD Space – 650 MB or more free on a 2 GB drive

VGA Monitor

For installation from a CD-ROM, a 12x For installation from a CD-ROM, a 12x drive is required. If the CD-ROM drive drive is required. If the CD-ROM drive is not bootable, a high-density 3.5-inch is not bootable, a high-density 3.5-inch floppy drive is also required.floppy drive is also required.

Know what to do if you encounter hardware devices not listed on the Windows 2000 HCL.

TEST TIPTEST TIP

If Windows Professional is to be installed If Windows Professional is to be installed across a network, a Windows 2000 across a network, a Windows 2000 Professional-compatible NIC is required.Professional-compatible NIC is required.

To initiate the installation from a floppy disk,turn the system off, place the Windows 2000professional Startup Disk #1 in the floppydrive, and turn the system on.

11

When the Setup program starts, it brings theWindows 2000 Setup Wizard to the screen. The Setup Wizard collects information, includingNames, Passwords, and Regional Settings, and writes the information to files on the hard drive. Afterwards, the Wizard checks the system’s hardware and properly configures the installation.

To conduct a New Windows 2000 Professional installation from a floppy disk:

The first step in the Setup process is to choose whether the installation is a Clean Install or an Upgrade. If a new installation is being performed, the Setup program will install the Windows 2000 files in the \WINNT folder.

22

To conduct a New Windows 2000 Professional installation from a floppy disk: (continued)

Follow the instructions the Wizard places on the screen, entering any information required. The choice made concerning the type of setup being performed and user-provided input determines the exact path the installation process will take.

33

Figure 10-32: Windows 2000 Setup Wizard

For a CD-ROM install, boot the system to the existing operating system and then insert the Windows 2000 Professional distribution CD in the CD-ROM drive.

11

To conduct a New Windows 2000 Professional installation from a CD-ROM:

If the system detects the CD in the drive, simply click the Install Windows 2000 option. If not, start Setup through the Run command. In Windows 9x and NT 4.0, click Start and then Run. In Windows 3.x and NT 3.51 click File and the Run.

22

At the prompt, enter the location on the Windows 2000 start file (Winnt.exe or Winnt32.exe) on the distribution CD (i.e., d:\i386\Winnt32.exe). In the case of Windows 3.x, the Winnt.exe option should be used.

33

To conduct a New Windows 2000 Professional installation from a CD-ROM: (continued)

Choose whether the installation is a New Install or an Upgrade.

44

Follow the instructions the Wizard places on the screen, entering any information required.

55

Boot the local unit to the existing operating system and establish a connection with the remote unit.

11

To conduct a New Windows 2000 Professional installation across a network:

At the command prompt, enter the path to the remote Winnt32.exe file (use the Winnt.exe file if an older 16-bit operating system is being used on the local unit).

22

Choose whether the installation is a Clean Install or an Upgrade.

33

Follow the instructions the Setup Wizard places on the screen, entering any information required.

44

Systems can be upgraded to Windows 2000 Systems can be upgraded to Windows 2000 Professional from Windows 3.x and 9x, as Professional from Windows 3.x and 9x, as well as Windows NT 3.5 and 4.0 well as Windows NT 3.5 and 4.0 workstations. This includes older NTFS, workstations. This includes older NTFS, FAT16, and FAT32 installations. When FAT16, and FAT32 installations. When you install Windows 2000, it can recognize you install Windows 2000, it can recognize all three of these file system types.all three of these file system types.

As with previous Windows NT products, As with previous Windows NT products, Windows 2000 does not attempt to Windows 2000 does not attempt to remain compatible with older hardware remain compatible with older hardware and software. Therefore, some and software. Therefore, some applications may not be compatible with applications may not be compatible with Windows 2000 and may run poorly, or Windows 2000 and may run poorly, or fail completely after an upgrade.fail completely after an upgrade.

To upgrade a system to Windows 2000 from a previous operating system using a CD-ROM install, boot the system to the existing operating system and then insert the Windows 2000 Professional distribution CD in the CD-ROM drive.

11

To upgrade Windows 2000 Professional from a previous operating system using a CD-ROM install:

If the system detects the CD in the drive, simply click the Install Windows 2000 option. If not, start Setup through the Run command. In Windows 9x and NT 4.0, click Start and then Run. In Windows 3.x and NT 3.51, click File and then Run.

22

To upgrade Windows 2000 Professional from a previous operating system using a CD-ROM install: (continued)

At the prompt, enter the location on the Windows 2000 start file (Winnt.exe or Winnt32.exe) on the distribution CD (i.e., d:\i386\Winnt32.exe). In the case of Windows 3.x, the Winnt.exe option should be used.

33

To upgrade Windows 2000 Professional from a previous operating system using a CD-ROM install: (continued)

Choose whether the installation is a Clean Install or an Upgrade.

44

Follow the instructions the Wizard places on the screen, entering any information required.

55

Boot the local unit to the existing operating system and establish a connection with the remote unit.

11

To upgrade Windows 2000 Professional from a previous operating system across a network:

At the command prompt, enter the path to the remote Winnt32.exe file (use the Winnt.exe file if an 16-bit older operating system is being used on the local unit). The Winnt command is used with 16-bit operating systems such as DOS or Windows 3x. The Winnt32 version is used with 32-bit operating systems including Windows 95, 98, NT3.5, NT4.0

22

Choose the “Upgrade your computer to Windows 2000” option.

33

To upgrade Windows 2000 Professional from a previous operating system across a network: (continued)

Follow the instructions the Setup Wizard places on the screen, entering any information required.

44

By establishing a dual-boot configuration, By establishing a dual-boot configuration, it is possible to install Windows 9x, or it is possible to install Windows 9x, or some other operating system on an some other operating system on an existing system and still retain the existing system and still retain the original operating system. The first step original operating system. The first step in establishing a dual-boot system is to in establishing a dual-boot system is to install the Windows 9x operating system install the Windows 9x operating system into a new directory.into a new directory.

Machine ID

Bus Types

Keyboard

Mouse

Video Type

Floppy Drives

Parallel Ports

COMM Ports

In particular, the NTDETECT program checks for information concerning:

Know what the swap file in Windows NT/2000 is called.

TEST TIPTEST TIP

The Ntoskrnl.exe file is loaded.11

The Hal.dll file is loaded.22

The Bootvid.DLL file is loaded.33

The Netdetect.com file is loaded.44

The System Hive portion of the Registry is loaded.

55

The Starting Windows 2000 message is displayed.

66

When Windows NT starts, several major events occur in the system. These include the following:

The Temporary Hardware Hive is created.77

The Session Manager starts along with memory paging function.

88

WINLOGON loads LSASS and the Logon screen is displayed.

99

WINLOGON loads SCREG, which loads the Windows NT shell and desktop files.

1010

When Windows NT starts, several major events occur in the system. These include the following: (continued)

Remember the files involved the Windows 2000 startup process and the order of their execution.

TEST TIPTEST TIP

Figure 10-33: The Windows NT Logon Dialog Box

The Windows NT logon allows the The Windows NT logon allows the operating system to configure itself operating system to configure itself for specific users. Normal logon for specific users. Normal logon involves entering a user name and involves entering a user name and password. If no logon information is password. If no logon information is entered, then default values will be entered, then default values will be loaded into the system.loaded into the system.

Figure 10-34: Microsoft 2000 Drivers Page

To determine what components Windows NT supports, it is necessary to consult the Hardware Compatibility List for the version of Windows NT/2000 being used. This information can be obtained from the Microsoft web site (www.microsoft.com/st/hcl).

NOTENOTE

Windows 2000 supports a wide array Windows 2000 supports a wide array of newer hardware devices. These of newer hardware devices. These devices include DVD, USB, and devices include DVD, USB, and IEEE 1394 devices. Microsoft works IEEE 1394 devices. Microsoft works with hardware vendors to certify with hardware vendors to certify their drivers. These drivers are their drivers. These drivers are digitally signed so that they can be digitally signed so that they can be loaded automatically by the system.loaded automatically by the system.

Figure 10-35: Windows 2000 Control Panel Icons

Windows 2000 employs a print spooler Windows 2000 employs a print spooler processing architecture similar to that processing architecture similar to that found in Windows 9x. This structure found in Windows 9x. This structure provides smooth printing in a provides smooth printing in a background mode and quick return-to-background mode and quick return-to-application time.application time.

Figure 10-36: The Windows 2000 Print Spooler

Figure 10-37: Printing from My Computer Pop-up Menu

Figure 10-38: Windows 2000 Print Queue

Windows 2000 Professional also supports Windows 2000 Professional also supports a new universal font format called a new universal font format called OpenType. This font type combines the OpenType. This font type combines the best features of TrueType and Type 1 best features of TrueType and Type 1 fonts. OpenType is supported by fonts. OpenType is supported by subsetting and compression technology subsetting and compression technology that makes it efficient for transmission that makes it efficient for transmission over the Internet.over the Internet.

Figure 10-39: The Windows 2000 Add Printer Wizard

Know how to install device drivers in Windows 2000 if the particular device is not listed in the standard Windows driver listings.

TEST TIPTEST TIP

Figure 10-40: A List of Printer Manufacturers and Models

Printer Properties are all of the defining Printer Properties are all of the defining features about a selected printer and features about a selected printer and include information that ranges from include information that ranges from which port it uses to what security which port it uses to what security features have been implemented with it.features have been implemented with it.

Figure 10-41: Printer Properties Sheet

Figure 10-42: Windows 2000 Printer Properties/Device Settings Tab

Figure 10-43: Windows 2000 Add/Remove Programs Icon

Know the consequences of running DOS utilities from a Windows environment and how to solve problems associated with DOS applications running in the Windows environment.

TEST TIPTEST TIP

Figure 10-44: The Microsoft Hierarchical Storage Management System

Select the application from the extended Start menu, click the folder containing the application, and double-click its filename.

In Windows 2000 there are several acceptable methods of launching an application. These include:

Select the Run entry from the Start menu, and then enter the full path and filename for the desired executable file.

Double-click the application’s filename in the Windows Explorer or in My Computer.

Click the File menu option from the My Computer Menu Bar, or through the Windows Explorer, and select the Open option. (You can also alternate-click on the application and choose Open).

In Windows 2000 there are several acceptable methods of launching an application. These include: (continued)

Create a shortcut icon on the desktop for the application, so that it may be started by simply double-clicking on its icon.

Figure 10-45: The Windows 2000 Open With Dialog Box

Figure 10-46: Windows NT PIF Settings Dialog Box

Figure 10-46: Windows NT PIF Settings Dialog Box

In the Windows 2000 system, the Network In the Windows 2000 system, the Network Neighborhood folder has been replaced Neighborhood folder has been replaced with a more powerful My Network Places with a more powerful My Network Places folder. The new folder includes new folder. The new folder includes new Recently Visited Places and Computers Recently Visited Places and Computers Near Me views. The Add Network Place Near Me views. The Add Network Place options enable you to more easily establish options enable you to more easily establish connections to other servers on the connections to other servers on the network. The user can establish shortcuts network. The user can establish shortcuts to virtually every server on the network. to virtually every server on the network.

Figure 10-48: My Network Places

Know the specifications for setting up computer names in a given operating system.

TEST TIPTEST TIP

Figure 10-49: A Mapped Drive Display

The primary reason to map a drive in a The primary reason to map a drive in a network environment is because some network environment is because some applications cannot recognize volume applications cannot recognize volume names. They can see only drive letters. names. They can see only drive letters. In Windows, the number of In Windows, the number of recognizable drive letters is 26 (A–Z).recognizable drive letters is 26 (A–Z).

Figure 10-50: The Network and Dial-Up Connections Window

Figure 10-51: Windows 2000 Local Area Connections Dialog Box

Services. Used to add, remove, or configure network services such as DNS, WINS, and DHCP functions.

The functions associated with the Windows 2000 Local Area Connections Properties include the following:

Protocols. Used to add, remove, or configure network protocols for specific types of network environments.

Adapters. Used to add, remove, or configure NIC cards for operation with the system. This includes loading drivers and assigning system resources to the adapter.

Network Identification. Specifies the computer name and the workgroup or domain name to which it belongs. Under TCP/IP, computer names can be up to 63 characters but should be limited to 15 characters or less. They can use the numbers 0-9, letters A-Z (and a-z) as well as hyphens. Using other characters may prevent other nodes from finding your computer or the network. This option is located under the System icon in the Control Panel.

Other functions affecting the Networking and Dial-Up connections in Windows 2000 include the following:

Bindings. Sets a potential pathway between a given network service, a network protocol, and a given network adapter. The order of the bindings can affect the efficiency of the system’s networking operations. To establish bindings, access the Network and Dial-Up Connections page and click the Advanced entry on its drop-down menu bar. Then select the Advanced Settings option from the menu.

Other functions affecting the Networking and Dial-Up connections in Windows 2000 include the following: (continued)

Figure 10-52: Installing a Network Printer in Windows 2000

Windows 2000 includes a printing feature Windows 2000 includes a printing feature called Autopublish (or point and print). called Autopublish (or point and print). This feature enables the user to install a This feature enables the user to install a printer driver on a client PC from any printer driver on a client PC from any application. The Active Directory also application. The Active Directory also enables the user to browse the network enables the user to browse the network for a specific printer type or location.for a specific printer type or location.

Figure 10-53: The Windows 2000 File/Print Window

Figure 10-54: Sharing a Printer in Windows 2000

Know how to correctly write a UNC path to a shared directory located on a remote computer.

TEST TIPTEST TIP

Windows 2000 replaces the Network Windows 2000 replaces the Network Settings item from the Windows NT 4.0 Settings item from the Windows NT 4.0 Control Panel with a New Network Control Panel with a New Network Connections folder, located in the My Connections folder, located in the My Computer window. Computer window.

Figure 10-55: The Windows 2000 Phone and Modem Options/New Dialog Window

The ISP’s name

The user name and password

The ISP’s dial-in access number

To create the Internet connection to an existing account with an ISP, you need to know the following:

Figure 10-56: The Internet Connection Wizard

Figure 10-57: The Location Information Dialog Box

Windows 2000 makes it possible to share Windows 2000 makes it possible to share resources such as printers, folders, and resources such as printers, folders, and Internet connections across a network.Internet connections across a network.

Figure 10-58: The Internet Connection Sharing Screen

Since its creation, one of the main Since its creation, one of the main features of the Windows 2000 operating features of the Windows 2000 operating system has been its security capabilities. system has been its security capabilities. As an operating system designed to work As an operating system designed to work in business networks, data security is one in business networks, data security is one of its most important functions.of its most important functions.

User security in the form of User Logon and Passwords required to access the system

Windows 2000 provides security in four forms:

User security between users of the same computer to control access to local data

Identification of attempted security breaches through audit trails

Memory usage protection between applications running on the same hardware

The administrator has rights and The administrator has rights and permissions to all of the system’s permissions to all of the system’s hardware and software resources. hardware and software resources. The administrator in turn grants The administrator in turn grants rights and permissions to other rights and permissions to other users as necessary.users as necessary.

Figure 10-59: The New User Window

Figure 10-60: The Group Memberships Dialog Box

Authentication is a process that Authentication is a process that determines that users on the determines that users on the network are who they say they are.network are who they say they are.

Figure 10-61: Kerberos Protocol Operations

Digital certificates are password-Digital certificates are password-protected, encrypted data files that protected, encrypted data files that include data that identifies the include data that identifies the transmitting system and can be used transmitting system and can be used to authenticate external users to the to authenticate external users to the network through Virtual Private network through Virtual Private Networks (VPNs). Networks (VPNs).

Figure 10-62: IP Security Protocol Operations

Figure 10-63: Windows 2000 Synchronization Manager

KEY POINTSKEY POINTS

While Microsoft improved the Windows 3.x and Windows 9x products for use by the general population, it also developed a more robust and complicated Windows New Technology, or Windows NT, operating system for corporate client/server networking installations.


It was built around a new operating system kernel that focused on enhanced reliability, scalability, and security elements required for corporate applications, while retaining the strengths of the Windows operating system.


The Windows NT Server package provides the same features and functions found in the Workstation, except the Server package also provides the tools necessary to administer and control a network from a central location.


Enterprise networks are designed to facilitate business-to-business, or business-to-customer operations. Because monetary transactions and personal information travels across the network in these environments, enterprise networks feature facilities for additional, highly protective security functions.


An intranet is a network built on the TCP/IP protocol that belongs to a single organization — in essence a private Internet. Like the Internet, intranets are designed to share information and are only accessible to the organization’s members, with authorization.


Windows 2000 is the successor of the Windows NT 4.0 operating system. It brings together the stability and security of Windows NT 4.0 and the Plug-and-Play capabilities of Windows 9x.


The Windows 2000 Server product is also available in two extended enterprise versions — Windows 2000 Advanced Server and Windows 2000 Datacenter Server.


The standard server package supports four-way Symmetrical Microprocessor operations (i.e., it can distribute work between four different microprocessors at a time) and can manage up to 4 GB of RAM.


The Advanced Server edition can support up to 8 symmetrical processors and up to 8 GB of memory. These features enable it to function well in medium-size networks running between 100 and 500 concurrent users.


The Windows 2000 Datacenter Server edition can handle up to 64 GB of RAM and 32 processors. This will enable it to support up to 1000 simultaneous users with heavy processing demands.


The Windows NT desktop includes most of the same features found in its Windows 9x counterpart (i.e., My Computer, Network Neighborhood, Inbox, and the Recycle Bin).


The Windows NT Start Menu contains Programs, Documents, Settings, Find, Help, Run, and Shut Down options.


Locating, accessing, and retrieving information in Windows NT is virtually the same as with the Windows 9x operating systems.


Instead of simply truncating the filename, inserting a tilde, and then assigning a number to the end of the filename, Windows NT performs a mathematical operation on the long name to generate a truly unique MS-DOS compatible filename.


When five or more names are generated that would result in duplicate short names, Windows NT changes its truncation method. Beginning with the sixth filename, the first two characters of the name are retained, the next four characters are generated through the mathematical algorithm, and, finally, a tilde with an ID number is attached to the end of the name.


Windows 2000 features an intelligent, personalized Programs menu. It monitors the user’s program usage, and after the first six accesses, arranges the menu options according to those most frequently used.


A network share is an existing shared resource (i.e., printer, drive, modem, or folder) located on a remote system.


Windows 2000 offers extended common dialog boxes for File/Open, File/Print, and File/Save options. These dialog boxes provide easy organization and navigation of the system’s hard drives, as well as providing navigation columns that grant quick access to frequently used folders.


The Windows NT logical structure is a modular system that allows for advances in computing technology to be integrated into the system. It exists in two basic layers referred to as Modes — the Kernel Mode and the User Mode.


Basically, the operating system runs in the Kernel Mode while applications run in User Mode. User Mode is a more restrictive operating mode where no direct access of hardware is permitted.


APIs are routines, protocols, and tools built into the operating system that provide application designers with consistent building blocks to design their applications with. For the user, these building blocks lead to consistent interfaces being designed for all applications.


The Kernel Mode is an operating mode where the program has unlimited access to all memory, including those of system hardware, the user mode applications, and other processes (such as I/O operations).


The Windows NT HAL is a library of hardware drivers that operate between the actual hardware and the rest of the system. These software routines act to make every architecture look the same to the operating system.


The Microkernel works closely with the HAL to keep the system’s microprocessor as busy as possible. It does this by scheduling threads for introduction to the microprocessor on a priority basis.


The Win32k Executive Services block provides all the basic operating system functions for the NT system.


The Windows NT I/O Manager manages all input and output functions for the operating system. Its major function involves controlling communications between file system drivers, hardware device drivers, and network drivers and the system.


Windows NT User Mode is a collection of subsystems that interact with users and applications.


The Windows NT Registry is not compatible with the Windows 9x Registries.


The contents of the Registry are physically stored in five files referred to as Hives. Hives represent the major divisions of all the Registry’s keys, subkeys, subtrees, and values.


The NT Registry hive files are stored in the \Winnt\System32\Config directory along with a backup copy and log file for each hive.


The contents of the Registry can be edited directly using Regedit32.exe. This file is located in the \Winnt\System32 folder. As with the Windows 9x packages, most changes to the Registry should be accomplished through the Wizards in the Windows NT Control Panel.


The Rdisk.exe utility, located in the \Winnt\System32 folder can be used to create a backup copy of the Registry in the \Winnt\Repair folder.


The overall operation of Windows NT 4.0 is governed by System Policies that give administrators control over users. Using System Policies, the network administrator can give or limit users’ access to local resources, such as drives and network connections.


The Windows 2000 structure adds two additional managers to the Executive section — the Plug-and-Play Manager and the Power Manager.


The central feature of the Windows 2000 architecture is the Active Directory structure. Active Directory is a distributed database of user and resource information that describes the makeup of the network (i.e., users and application settings).


In Windows 2000, Policies are established through the Group Policy Editor. Administrators use this editor to establish which applications different users have access to, as well as to control applications on the user’s desktop.


With Group Policies, administrators can institute a large number of detailed settings for users throughout an enterprise, without establishing each setting manually.


Windows NT offers its own proprietary NTFS file system that is designed to provide better data security and to operate more efficiently with larger hard drives than FAT systems do.


The Windows NT file system provides security for each file in the system, as well as supplying complete file access auditing information to the system administrator. NTFS files and folders can have permissions assigned to them whether they are shared or not.


The NTFS system includes security features that allow permission levels to be assigned to files and folders on the disk. These permissions set parameters for activities that users can conduct with the designated file or folder.


Windows 2000 includes a Hierarchical Storage Management system that enables the system to shift seldom-used data to selected backup media. When a user requests a file from a server, the server checks to see if the file is still in residence.


A member server is most often referred to as a standalone server. As such, the member server maintains a local domain database that only it uses. These servers are most commonly used as application and file servers.


The Primary Domain Controller server is the first domain controller installed in a Windows NT domain and maintains the working security and account databases for the domain.


The Backup Domain Controller server maintains backup copies of the PDC’s security and account databases. These copies are used to assist in authenticating user account logins.


The minimum hardware requirements for installing Windows 2000 Professional on a PC-compatible system are:

Microprocessor – 133 MHz Pentium (P5 equivalent or better)

RAM – 64 MB (4 GB maximum)

HDD Space – 650 MB or more free on a 2 GB drive

VGA Monitor


For installation from a CD-ROM, a 12x drive is required. If the CD-ROM drive is not bootable, a high-density 3.5-inch floppy drive is also required. If Windows Professional is to be installed across a network, a Windows 2000 Professional-compatible NIC is required.


If Windows NT is placed on an under powered system, it will very likely run slower than the same machine running Windows 9x operating systems.


Systems can be upgraded to Windows 2000 Professional from Windows 3.x and 9x, as well as Windows NT 3.5 and 4.0 workstations. This includes older NTFS, FAT16, and FAT32 installations. When you install Windows 2000, it can recognize all three of these file system types.


As with previous Windows NT products, Windows 2000 does not attempt to remain compatible with older hardware and software. Therefore, some applications may not be compatible with Windows 2000 and may run poorly, or fail completely after an upgrade.


Windows NT can be set up to dual-boot with DOS or Windows 9x operating systems.


The best recovery method is to boot the system to a floppy, run FDISK to repartition the drive, format the drive, and run the Windows NT Setup utility — provided your data was backed up beforehand.


The Windows NT logon allows the operating system to configure itself for specific users. Normal logon involves entering a user name and password. If no logon information is entered, then default values will be loaded into the system.


Windows 2000 supports a wide array of newer hardware devices. These devices include DVD, USB, and IEEE 1394 devices. Microsoft works with hardware vendors to certify their drivers. These drivers are digitally signed so that they can be loaded automatically by the system.


Windows NT employs a print spooler processing architecture similar to that found in Windows 9x. This structure provides smooth printing in a background mode and quick return-to-application time.


Windows 2000 Professional also supports a new universal font format called OpenType. This font type combines the best features of TrueType and Type 1 fonts and is supported by subsetting and compression technology that makes it efficient for transmission over the Internet.


Printer Properties are all of the defining features about a selected printer and include information that ranges from which port it should use, to what security features have been implemented with it.


Active Directory arranges domains in a hierarchy and establishes trust relationships among all of the domains in a tree-like structure.


In AD, a tree is a collection of objects that share the same DNS name. Active directory can subdivide domains into organizational units that contain other units, or leaf objects, such as printers, users, etc.


Windows 2000 can create an organizational structure containing more than one tree. This structure is referred to as a forest.


Trusts are relationships that enable users to move between domains and perform prescribed types of operations.


Rights are the permission settings that control a user’s (or groups of users’) authority to access objects and perform operations (such as reading or writing a file). Administrative Rights provide authority to users down to the Organizational Unit level.


In the Windows 2000 system, the Network Neighborhood folder has been replaced with a more powerful My Network Places folder. The new folder includes new Recently Visited Places and Computers Near Me views.


The primary reason for mapping a drive in a network environment is that some applications cannot recognize volume names. They can only see drive letters. In Windows NT, the number of recognizable drive letters is 26 (A-Z).


Windows 2000 includes a printing feature called Autopublish (or point and print). This feature enables the user to install a printer driver on a client PC from any application. The Active Directory also enables the user to browse the network for a specific printer type, or location.


Windows 2000 replaces the Network Settings item from the Windows NT 4.0 Control Panel with a New Network Connections folder, located in the My Computer window.


Windows 2000 makes it possible to share resources such as printers, folders, and Internet connections across a network. Sharing the connection allows several computers to access the Internet through a single dial-up connection. These connections can be made individually, or simultaneously, with each user maintaining the ability to use the same services it did when it was connected directly to the Internet.


Since its creation, one of the main features of the Windows NT operating system has been its security capabilities. As an operating system designed to work in business networks, data security is one of its most important functions.


The administrator has rights and permissions to all of the system’s hardware and software resources. The administrator in turn grants rights and permissions to other users as necessary.


Authentication is a process that determines that users on the network are who they say they are.


Digital certificates are password-protected, encrypted data files that include data that identifies the transmitting system and can be used to authenticate external users to the network through Virtual Private Networks.

REVIEW QUESTIONSREVIEW QUESTIONS

The presence of what type of device indicates a domain structure?

11


List the two types of domain controllers employed in Windows NT networks.

22


Describe four types of security found in the Windows 2000 environment.

33


What is the core component of the NTFS system, and what is its counterpart in a FAT system?

44


Describe the sequence of events required to upgrade a Windows 95 Registry HKEY to a Windows NT HKEY.

55


How much memory is required to install Windows 2000 Professional?

66


Where are the Windows NT Hive files stored?

77


Which file contains the user-related configuration information forWindows NT?

88


Where should changes to Registry items be made from?

99


Where does the Windows 2000 setup utility install the Windows 2000 OS files in a typical installation?

1010


What is the function of the BOOT.INI file in a Windows NT system?

1111


Name two factors that must be taken into account when considering upgrading a system to a Windows NT or Windows 2000 operating system.

1212


________ are the Windows 2000 tool for implementing changes for computers and users throughout an enterprise.

1313


Name three advantages of the Windows NT file system over FAT16 and FAT32 file management structures.

1414


Which Windows 2000 utility can be used to create a backup copy of the Registry? Where is the utility located and where will the backup copy be stored?

1515

EXAM QUESTIONSEXAM QUESTIONS

Which Windows NT file is responsible for guiding the Windows NT bootup process?

a. NTLDRb. NTDETECT.COMc. NTOSKRNL.EXEd. BOOT.INI

11


Which types of applications can communicate directly with the Win32 Services block?

a. 16-bit DOS applicationsb. 16-bit Windows 3.x applicationsc. 32-bit Windows 9x applicationsd. 64-bit POSIX applications

22


What is the basic unit of storage in an NTFS system?

a. The fileb. The clusterc. The MFTd. The organizational unit

33


In the Windows NT environment, ______ is a collection of objects that share the same domain name.

a. a leafb. an organizational unitc. a treed. a forest

44


_____ are relationships that enable users to move between domains and perform certain types of operations.

a. Trustsb. Permissionsc. Rightsd. Privileges

55


The portion of the Windows NT structure that communicates directly with the system hardware is ________.

a. the Win32 Executiveb. the User Modec. the HALd. the Hardware Subsystem

66


How many drives can be mapped in a Windows 2000 system?

a. 10b. 26c. 4d. 16

77


What is the maximum length of a Windows 2000 filename?

a. 8 charactersb. 16 charactersc. 256 charactersd. 1024 characters

88


Where will the Windows NT Setup utility install the Windows NT files in a typical installation?

a. The \Winnt directoryb. The \I386 folderc. The \Windows\system folderd. The \Windows directory

99


The members of a _______ share a common directory database and are organized in levels.

a. workgroupb. treec. groupd. domain

1010