Server Usefull Notes

8/8/2019 Server Usefull Notes

http://slidepdf.com/reader/full/server-usefull-notes 1/53



Disadvantage:

No Administrative Account

Network Traffic is high

Security less

Client / Server: System are configured in a single Domain

System OS Server System has (Windows 2000 Server, 2003 Server, NT)

Client System has (Windows 95, windows 98, XP, 2000 Pro)

Administrative Account to administrate the domain

Security will be high.

Domain Structure:ADS – Active Directory Service:

Active directory service to maintain, organize and create the object.

It’s collection of information about object that is related in 1 another in some

way To maintain the object centralized

Objects:

Object is a distinguish name set of attributes which represents in a network.

Object represents to

User account

Group account

Computer account

Printer

Share folders / resource

Attributes:Attributes are characteristic of object in an active directory.

Object Attributes:

SID – Security Identifier

RID – relative Identifier

Login name

Etc...

Directory object:

The data stored in a Active directory such as information about User, Printer,

Group, Computers, DC and security policy is organize in to object.Domain Structure:

New Domain in a new forest

Child Domain in a existing forest

New tree in a existing forest

Active Directory installation:

Start Programs Administrative ToolsManage your Server

Start Run Dcpromo (typed)

Typical setting:

This setting automatically installs the ADS, DNS, and DHCP in your server machine.

2



Customs setting:

Need to install all the required components by selecting the appropriate

services

IIS need to install with this Custom Setting

Global Catalog Serve

3

Domain Forest

Domain Tree

India.com

(Domain Controller)

Chennai.India.com

(Additional Domain

Controller)

India.com

(Additional Domain

Controller)

Domain Tree

yahoo.com

(Domain Controller)



Forest Means:

Group of Tree

Tree Means:

Group of Domain

Domain Means:

Group of Clients

Requirement for Active Directory Service: Its must be an member server ( in computer technology the member

server is a freshly installed server)

Domain Name Server ( DNS )

At least one NTFS partition with 1GB free space ( for NTDS.DIT,

SYSVOL files)

Static IP Address ( IP must be assigned manually by the administrator not

by the DHCP are any other server)

From Command Prompt:

The ADS can be installed by typing the dcpromo from the run

To uninstall the ADS type dcpromo /forceremoval from the runFully Qualified Domain Name (FQDN):

A fully qualified domain name is a valid domain name which can be used to

identify the computer in the internet. A fully qualified domain name has a unique

name with .com, .net, .org etc... Extension (i.e. indiatimes.co.in)

NetBIOS name:

NetBIOS name is used to identify the host in the older version of

OS (95, 98) the NetBIOS name will have the unique name without any .extension

(i.e. Indiatimes).

Folder that has been created by the ADS is:NTDS.DIT -Database file and the log file

-This is not a shared folder

-For the best performance of the server it is recommended to create

The folder in the separate drive other than the system root directory

SYSVOL -Sysvol has the logon script

-Group policy information

-Sysvol is a shared folder

How to check whether an Active Directory Service is installed in a server are

not?

Press F8 option at the time of rebooting there you will find the optionDOMAIN CONTROL RESTORE MODE.

4

mail.yahoo.com

(Additional Domain

Controller)

Chat.yahoo.com

(Additional Domain

Controller)



Check whether the SYSVOL and NTDS folder are created in the specified

directory are not.

You can find the three extra tools in the Administrative tools (ACTIVE

DIRECTORY USERS AND COMPUTERS, DOMAIN TRUST,

DOMAIN SITES).

*Type NET SHARE in the command prompt if you find the SYSVOLFOLDER is shared then the ADS is installed in the server.

*Open the My Network Place Click on the Entire Network Icon

Click on the Microsoft Windows Network Click on the Domain

Name Where you can see the Names of computers which are connected

to the Domain and the Domain Server Name then right click on the

Domain server and Click on the Properties tab which shows the

WINDOWS 2000 PRIMARY / WINDOWS 2003 PRIMARY then you

can be know that this is an Domain Controller.

*(Important and quick methods to find the current system has ADS installed are not.)

2nd Class: Windows 2003 server Dated: 03/09/06

Difference between Windows NT and Windows2003 Server?

Windows NT Server Windows 2003 Server

Non Plug and Play Operating ( Device

need to configured manually using the

driver cd)

Plug and Play ( Devices are configured

automatically by the OS and the default

drivers has been installed )

Primary Domain Controller -1 Nos

Backup Domain Controller – 12 to 13

Nos

Domain Controller & no limitation for

Additional Domain Controller

Sam Size 40 MB , So only 40000 users

can be created

SAM size can be extended because of

Service Extensible Storage Engine (ESE).

40 Mb to 60 GB

Only one Primary Domain Controller for

the Entire Organization.( the NT server

won’t support the Tree and Forest

Structure so its impossible to configure

the Additional domain controller in the

NT server)

Multiple Domain Controller can be

Present Because of tree like Structure

Domain Users are identified and created

asDomain\Username

Domain user are identified and created in

the User Principle Name [email protected]

5



Example for Arunaigateway domain the

exam1 user is created as

i.e. Arunaigateway\exam1

User Management:

Creating User Account7th Pages

User Profile 9th Pages

User Security Authentication and Audit Policy14th Pages

Groups 23rd Pages

Creating User Accounts:

1. Local User Account

2. Domain (or) Global User Account

3. Built In user Account

1. Local User Account:

These users are created in the Client Machine can be used to access the local

machine, these account are restricted within the client system and are not used for

Domain Login.

2. Domain (or) Global User:

These types are user are created in the Domain Controller by the Domain

Administrator and these accounts are used to login in to the Domain from any client

machine.

3. Built In user Account:

Administrator

Guest

These type of user are created by default when you are installing the server

normally the administrator Password will be asked at the time of installation but the

Guest account will be in disabled mode.

These built in account are created in both the local as well as domain

controller

The main use of the guest account is for those who are the temporary user of thecomputer (e.g. Service engineers whose comes ones in a year for system servicing).

Security Constraints for using Administrator account safe:

For the security purpose better change the Administrator name to some other

name

To install the administrator toll in the client PC is:

Copy: \windows\system32\adminpak.msi to the client machine and the install

the Adminpak.msi so that you can get the total administrative tool installed client

machine

6



For uninstalling the administrative tool go to the Add or Remove program

properties from the control panel then click on the remove option of the windows

administration tool where you can find in the program installed.

Practical => logon the user then default open the notepad or any script file in client

System.1) Then do first open the Server in Active Directory Users and Computers

User Right Click Open the Properties in Open the Profile in Logon

Script type the scripts file (E.g: Notepad, WinWord…)

2) Then next do the Server System in C:/Winnt/Sysvol/Sysvol/(Server Domain

Name) Example: Arunaigateway/Scripts/(Particular Scripts File Notepad or

Any File) in Inside

3) Now Open the logon user first appear screen in Scripts file (Notepad or any)

3rd Class Windows 2003 Server Date: 10/09/2006

User Profiles:

Local User Profile

Roaming User Profile

Mandatory Roaming user Profile

The Profile is nothing the setting that each user wish to have for there login

session which includes Control Panel setting, Desktop Setting i.e. Back ground, wall

paper, screen saver, shortcuts and some folders that as stored in the desktop.

These profiles are normally created inside the “%systemroot%/ Document and

settings/” directory default there will be only one profile created that is the All user

profile which is created at the time of installation, when the administrator login for

the first time the All user profile will be copied to administrator.

The profile will be created for the entire user who logging in to the machine, the

default All user profile will be copied and user profile will be created in the login

name of the user. Once user logged in and do desire modification on the desktop such

as changing the background, changing the shortcut and creating some shortcuts onlythose changes will be saved addition to the default user profile neither the complete

profile will not be saved. These settings are applicable only to the machine where the

profile has been created and saved. If the user tries to login to the other machine the

default All User Profile will be created in that local machine not the saved profile

which is available in some other machine.

Local User Profile:

These profiles are created in the client machine when user tries to login. The

required modification of the setting by the user will be applicable only to that client

machine not to other client machine, all the settings that the user done are saved

locally in that client pc when the user tries to login to the same client pc then all those

setting will be applicable when the user tries to login to the other client machine only

the default all user profile will be displayed.

7



Roaming User Profile:

In some case where the user need to have the same type of setting appears in

all the client machine he logs in, this is not possible with local profile so the profile

need to be created for roaming which is nothing but the Roaming User Profile.

The Roaming user profiles are nothing but the copy of the local user profile

created by the user in a particular machine and these profiles are copied to the

Domain Controller by the Administrator using the Domain Administrator account.

Ways to creating the Roaming user Profile:

First Login in the Server then Create a New User in Active Directory Users

and Computers and Share Folder in full Rights in the folder and Same (Share

Folder) Local Disk Drive Full Sharing

Create New in Start Programs Administrative Tools Active

Directory

Users and Computers or Start Run Type it dsa.msc

Then Next Login in the Client System in Same User (Server Create a User)

then

8



Logoff the User in Client System and Again login an Administrator in Domain

Controller (DC) in a Client System. Right click the My computer icon then Select a

Properties Tab In the Properties window in Advanced Click then select the User

profile and Click the Settings Button.

Select the Particular User and then Click Copy to Box. In the Copy to

Window See Copy Profile to in a Box then Type it \\Server Name\Share Folder

Name\User Name.

Bottom Permitted to Use in Change icon Click it and Select a Particular User

9



10



Then Click in Ok Button.

Next Login in the Server then Already Create a User Open it Profile Window

(User Right Click Open the Properties tap then Select the user Profile Button).

To See the User Profile in Profile Path Box then Type it a \\Server Name\Share

Folder Name\User Name

Then Click the Apply Button first then next click it Ok Button. Login the Particular User in Client System.

11



Right click in my computer icon then Select a Properties tab In the

Properties

Window in Advanced Click then select the User profile and Click the Settings

Button.

To See the Roaming Profile in a Particular User.

12



Once you have assign the Roaming User Profile to the Domain user then

the local Machine will get the profile from the Domain server shared profile

folder (Share Folder Particular User ) not from the Default All User profile.

User can allow to modify the setting that is they can change there desktop

appearance and shortcuts with the Roaming Profile. Once the user logged off the only the changed profile setting will be saved

to the Domain controller server not the entire profile.

Group Profile Setting:

(You create in any user then see Server System Sharing Folder inside that

user Profile) Same setting in Roaming Profile Just only one Changing a Final Stage

for Server Side only EX: ADS Create a Group 10 user Inside so u All ready

create a Roaming user (lk ) Then Put it for 10 User so totally 11 user then All

Selected Right Click Properties Total Profile then Profile Path Put it the this

word \\Server Name\Share Folder Name\%Username% then apply after ok

finished Now u check it Group inside (All user EX: 11 User) Roaming UserMandatory User Profile:

The Mandatory user Profile is the same as the Roaming user profile the only

different is here in Mandatory User Profile only the saved settings will be applied to

user for each times he logs in, where he has the permission to the change the setting

but the settings will not be saved to the Domain Controller server.

The procedure to convert the Roaming User Profile to the Mandatory User

Profile is by renaming the ntuser.dat file in the profile directory to ntuser.man file.

Copy user:

(You create in any user then see Server System Sharing Folder inside that

user Profile) ADS User and Computer Already one User (Lak) then RightClick Select Copy Option then suddenly open the User creating Window then

13



New User Name provide it (kiru) then After (Kiru) User Right Click

Properties then open the Profile you see the Same of (Lak) User Why? Because

Automatic Created in (Lak) to (Kiru) then (Kiru) user Login to Client System

Automatically Server System (Already Sharing Folder in Lak User Profile Already is

there) now see Kiru User Profile Same in Lak User Profile

User Security Authentication and Audit Police:

Default Domain Security Policy User and Computer

(Minimum Password Length– 0 set it then, Password Must Meet Complexity

Requirement Disable it then not provide for password any user )

Default Domain Controller Security Policy DC and ADC

* Start Programs Administrative Tools Then to See the Domain Security

Policy and Domain Controller Security Policy

Default Domain Security Policy:

a. Password Policy

b. Account Lockout Policyc. Keberose Policy

a. Password Policy:

Enforce Password History:

This Policy define the Maximum number of privacy password that as to be

stored in the active directory.

Maximum Password Age:

This policy define the Maximum days the password, can remind the same

(Default Value Password 42days)

Minimum Password Age:

This policy define the Minimum days before each the password can’t change

(Default Value Password 1days)

Minimum Password Length :

This policy define the Minimum number of character that should be define in

the password

(Default Value Length 7 Character)

Password Must Meet Complexity Requirement:

This policy defines the password should be a complex one with minimum of

three types of characteristics used it

Store Password using Reversible Encryption for All User in the Domain:This password define whether the should be stored has the Reversible or

irreversible formats

*This has to be Apple machine

b. Account Lockout Policy

Account Locket Derivation:

This policy define the minimum time derivation that has to fast before account

is Open

(Default 30 minuets)

Account Lockout Threshold:

This Policy define the maximum number of bad password that can be tolerant(Default Value 5)

14



Reset Account Lockout Counter After:

This Policy Define the account lockout threshold value should be value

change “0”

(Default Value 30minuets)

NOTES:

To refresh the policy that I have the command “GPUPDATE” should

executed in 2003 and XP Operating System but 2000 Server or Propositional in

“SECEDIT.EXE”

Start Programs Administrative tools Domain Controller Security Policy

Local Policy:

• Audit Policy:

o Audit Account Logon Events:

This Policy define user logon and logoff the logs must be generate in the

Domain controller (DC) this policy define default DC policy

(Domain Controller Security Policy

Set the policy)o Audit Account Management:

Security Log Generated.

o Audit Logon Events:

This policy define the logon and logoff user account logs should be

Maintained and generated at the local machine from where each login you see

the Logs File Then Event Viewer Security view Filter.

Domain Controller Security Policy & Domain Security Policy (Same

Side)

• User Right Assignment:

o

Allow logon locally –> Right Click then go to the Properties policy SettingEnabled then Add user (Administrator, Administrators, Everyone)

XP to XP Sharing for peer to peer Connection:

When the Connect in Peer to peer connection Most important?

• TCP/IP Enable it and IP Address install it

• Internet connection Firewall Disable (Control panel Network Connection

local area Connection Advanced tab then No Click the Internet Firewall

Connection Box)

• My Computer Right click the Mouse Properties Remote Tab then Enable

the Remote Desktop and Remote Assistance• Control panel Administrative tools Services Internet connection firewall

then Disable it

15



• Control panel Administrative tools Local Security Settings Security

Settings Local Policies Security Options Disable it

Disable the Accounts. Then sharing the user Login in blank password

Practical => *1. Server Name= Server,

*2. Share Folder Name= lak,*3. User Name= lakshman,

*4. Batch File Name= lk.bat

1) How to map multiple for the single user login?

*All Work in Server System

There will be only one mapping drive option available for the single user, but

for

The case where we need multiple drives has to be mapped for the single user which is

impossible with this option.

But this is possible by writing the logon scripts to MAP the multiple drives.

The procedure is

First you Open the Server System then type Notepad [net use x (any letter

you

create but you already don’t this letter): “\\(Server name)\(share folder name orany Local Disk Drive)”] then you how many drive you take same procedure then

next you must type the extension in .bat

Example:net use z: “\\servername(server)\share folder name(lak) Or local disk drive (C, D, E) any”

net use y: “\\servername(server)\share folder name(lak) Or local disk drive (C, D, E) any”

net use x: “\\servername(server)\share folder name(lak) Or local disk drive (C, D, E) any”

Then notepad Save as is lk.bat

Important:

Any Share Folder Name you create but you Already don’t this Name or

Local Disk Drive

Then Share the Folder or Local Disk Must Full Sharing Create a batch file

name lk.bat and save as the Server System Winnt SYSVOLSysvol Domain name (arunaigateway.com) Script then save the file

lk.bat Then Server System you create a USER (lakshman) Right Click

open the Properties Open the Profile Window Then Login ScriptBox Then Type Batch file lk.bat

16



*Then Working in Client System

Logon on the User (lakshman) in Client System then MAP Drive to see it

2) How can you create a Home folder?


First you create a User (lakshman) Right click Properties Open the

Profile

Window Then Local Path Box you choice the(Client System Open the

Command Prompt First Icon Bilking C: / or D: / then any Windows etc...) Type it

(D: /) Close the Profile Window.


Logon the Client System in Particular User. Then open it Command Prompt

to

See Bilking in D: / icon.

3) How to Local Disk map for the single user login?*All Work in Server System


Profile

Window Then Connect Icon Two Box First one is Drive (z or x, f, any..)

Then next one is type it \\server name (server)\\ (Any Local Disk Drive you Map it)

But Particular Local Disk Drive Must Full Sharing \\user name (lakshman) then

Close the Profile Window.


Logon on the User (lakshman) in Client System to see the Same Drive in

Single Map Drive

4) How to map for the single user login?



Profile

Window Then Connect Icon Two Box First one is Drive (z or x, f, any..)

Then next one is type it \\server name (server)\\ Share Folder Name (lak) (But

Share Folder Must Full Sharing) \\user name (lakshman) then Close the Profile

Window.


Logon on the User (lakshman) in Client System to see the Single Map Drive

in a

Share Folder

Windows 2003 Server

Common Class: Date: 17/09/06Windows 2003 server comes with 4 different types of editions:

1. Standard Edition*

2. Enterprise Edition

3. Web Edition4. Data center Edition

17



Difference between the 4 types of Windows 2003 Server:

COMMON WEB STANDARD ENTERPRISE DATACENTER XP Sp2

HDD

Minimum

Space

1.5 GB 1.5 GB 1.5 GB

(2GB Itanium)

1.5GB

(2GBItanium)

1.5 GB

Processor

Speed

Minimum

Pentium

133 MHz

Pentium

133 MHz

Pentium

133 MHz

Pentium

400 MHz

Pentium

233 MHz

Processor

Speed

Recommend

Pentium

550 MHz

Pentium

550 MHz

Pentium

733 MHz

Pentium

733 MHz

Pentium

550 MHz

Minimum

Ram

128MB 128MB 128MB 512MB 64MB

Ram

Recommend

256MB 256MB 256MB 1GB 128MB

Maximum

Ram

2GB 4GB 32MB

(64GB

Itanium)

64GB

(512GB

Itanium)

4GB

Processor

Support

2 Processor 4 Processor 8 Processor

(32 Itanium)

32 Processor

(64 Itanium)

2 Processor

(1 Processor

With out Sp2

support)

Domain

Controller /

Member

Server

Member

Server

DC /

Member

Server

DC / Member

Server

DC / Member

Server

Client only

Itanium

Support

No No Yes Yes Yes

Clustering No No Yes Yes No

Usage Web

Service

Usage

Small

Business

Usage

Medium

Business

Usage

Large

Business

Usage

Client

Usage

Feature in 2003 Basic:1. Volume Shadow Copy (VSS)

2. Remote Desktop (Remote Administration)

3. Remote Assistance4. Default Folder Share Permission

5. Roll – Back Driver

6. Drag and Drop Options

7. Multiple Object Selection

8. IIS Version6

9. Domain Renaming

10. ASR(Automatic System Recovery)

1. Volume Shadow Copy (VSS) Services:

Server System Local Disk (D): Drive Then Enable the VSS Enable and

Create a Folder in a File F1, F2, and F3… Server System

18



Client System To Sharing the Server system and Access the file F1, F2, F3,

and F4…Then Delete the File.

Delete a File You Restore a Simple Method Client System Then Same User

Tab Key (Previous version) 60 Pages Stored the Tab Key then Restore File

F1, F2, F3…….

2. Remote Desktop:

Remote Desktop in That Name of 2000 Server Means – Terminal Server

But 2003 Server is Remote Desktop

System Access in Every Place (Reducing the TCO – Total Cast of Ownership)

3. Remote Assistance:

That Means Remote Help then ( Not allowed in the 2000)

4. Default Folder Share Permission(Base Line Security):

Full Control in Security in 2003 Server System. You Do the Everyone

Permission (Security) Means Read only Permission Don’t Change the Permission in

2003 Server. But 2000 Server is That Permission in Full Control.5. Roll – Back Driver Option:

Example: NIC Card Driver Failed in System So Do the NIC Properties

Roll Back Option Then Click on and Restore the driver

6. Drag and Drop Option:

2003 Server System Active Drive User and Computer (Object)

Organization Unit Staff User1 and User2 Then Move the User1 and User2 in

Drag and Drop Option. In The 2003 Server System But 2000 Server System Not

Drag and Drop in the Option.

7. Multiple Object Selection:

Organization Unit (Object) Staff User1, User2 and User3…. At the time(Ctrl+A) Selected the Users All Right Click on the Mouse Then Properties Full

Work in The Properties

Example: All User Selected (Ctrl+A) At the Time Reset the Password in the

2003 Server System. But Not Allowed the 2000 Server System

8. IIS Version6:

Internet Information Service in 2003 Server System Allowed the Version6

But Not Allowed Version6 in 2000 Server System. Allowed Version5 only

9. Domain Renaming:

Domain Name Change the Only 2003 Server system (Tips: 2003 Server

CD then Value RENDOM.EXE File). But Not Allowed in 2000 Server CDExample: Arunaigateway.com Rename the Lak.com

10. ASR – Automatic System Recovery:

Two Parts of Backup One is Tape Another one is Floppy

Tape Local Disk Drive C, D, E…..Backup in ASR

Floppy System Setting (Operating System) Backup in ASR

Example: Start Run NTBACKUP Backup the File and ASR

4th Class Windows 2003 Server Date: 24/09/2006GROUPS:

A. Groups Types

1) Security

to Provide Access Permission to a Network

19



Resource (Only for Network)

2) Distribution to Distribute Mail (Only for Network)

B. Groups Scopes1) Domain Local

2) Domain Global

3) Domain Universal

Groups

Scopes

Who all can be

Member

What all the Resource they can

AccessDomain Local All Members, from the

local Domain

Only Local Domain

All Members from the

Domain Of the some

Forest

All members from the

Trusted Forest (Trusted

means= DC to DC

Communication)

Domain

Global

Only Member from the

Local Domain

All the Resource in the Local Domain &

From the Domain in the Same Forest

Domain

Universal

All Members from the

Same Forest Trusted

Forest

The entire Domain in the Forest and

Trusted Forest.

*Security Not Create in Domain Universal

Domain Functional Level:

a. Windows 2000 Mixed – DC with NT, 2000, 2003.

b. Windows Itanium – DC with NT, 2003.

c. Windows Native2000 – DC with 2000, 2003.d. Windows 2003 – Only DC with 2003

a. Windows 2000 Mixed – DC with NT, 2000, 2003:

Default in ADS (Active Directory Service) install in the Level (Default in

Standard Edition)

b. Windows Native 2000 – DC with 2000, 2003:

Default in ADS (Active Directory Service) install in the Level (Default inEnterprise Edition. To See the Windows Native)

20



Active Directory User and Computers Domain Controller Name

Arunaigateway.com Right Click the Mouse then Raise Mode to see it)}

File ManagementThere are 5 Methods of Shard Files:

21





1. When we have two level of Permission set as Two Access Control List 2 Same

a User from will only apply then most restricted.

Same User

Share Level Security Level

Which Permission Most Restricted is then Apply the Level.

Example: Share Level Permission is Only Read Permission. But Security Level

Permission is Full Control So Most Restricted Permission is Share Level (Only

Read) Then Apply the Share Level Permission that User.

2. When in Same User is in two different groups and the two different groups

have two different level of permission to a same folder then the cumulative of

permission will apply.

1. Group 2. Group

Same User

1st Group User Permission is Write Permission only.

2nd Group User Permission is Read Permission only.

But Same User in Groups So the User (Lakshman) Permission is Read and Write will

apply

3. Same in 2 Rules

When in Same User is in two different groups and the two different groups have two

different levels

1. Group 2. Group

Same User

1st Group User Permission is Full Control Permission.

2nd Group User Permission is Read in Deny Permission.

But Same User in Groups So the User (Lakshman) Permission is Read in Deny

Permission will apply (Deny Permission is Most restricted Permission)

23

Full Control No

Change No

Read Yes

Full Control Yes

Modify No

Read & Execute No

List Folder Contents No

Read No

Write No

Special Permissions No

Lakshman Lakshman

Lakshman Lakshman



Then Click on Advanced Button

24



Then Click the Option to Permission in a Current Folder

To remove the option then opens a Security Dialog Box

Copy to Allow the Permission in Current Folder.

Remove to All Permission Removed in the Current Folder.

25



Different Level of Permission will be deleted.

Add the User Then Double Click the user to see the Window

26



Then Chouse the option and click the Successful & failed. Then Next Step is.

Start Programs Administrative tools Domain Controller Security

Policy Local Policy Audit Object Access

Right Click Properties

Then login the any user and delete the any file or folder to generate the log file. Then

see the log file “Start Programs Administrative Tools Event viewer Security” then See the Particular Item is “View Filter” it

27



5th Class Windows 2003 Server Date: 08/10/2006

NTFS FEACTURE: 1) Compression

2) Encryption 2000 Server Feature Only

3) Disk Quota

4) Shadow Volume Copy (VSS=>Volume Shadow Copy Services) Only For

2003 Server

1) Compression:

• Save the Disk Space by compressing files and folder store in HDD only NTFS

Format (Example: 14mb Size in Folder after Compress the Folder in 8mb

Size)• Then Attribute Are “C” generated and then compress file or folder is Color

Changed

• Right click the Folder then properties in General window for advanced tap to

see the Compress option.

2) Encryption:

• Provide Security and Compress the data and store in the HDD

• Encryption only access by the user who encrypted the file and folder

• Recovery data agent is a policy level group and this is a only group which is a

able to retry encrypted file by any user.

• Then encrypted File or Folder is Green Color Changed

• Then Public Key Domain Controller Security

• Right click the Folder then properties in General window for advanced tap to

see the Encryption option.

28



3) Disk Quota:

• This Feature Only in Disk Drive (Example: C, D, E …)

• Disk Quota Means – Sharing User or Local Users to use or Access in Disk

Quota Hard disk then allocate the Hard disk Space to use

• Example C: Drive 40GB and D: Drive 40GB Then Create a Disk Quota in

(Sharing User or Local User) D: Drive 10 GB So Access in User for D: Drive

use Must only 10 GB or 10 GB More then insert the Data the Disk is Full

intimate But Show the All Content in Drive 10 GB More then Read Only

(Example 30GB or any)

1. Then Create a Disk Quota for Local Users:

First D: Disk Drive then right click it Properties tab open the Properties

window and then click a Disk Quota tab.

You to Allocate the Disk Quota for Enable the Quota Management Box click it

29



Log Generated Disk Quota Option (User more then Disk Space use)

(StartProgramsAdministrative tollsEvent Viewer to See)

Log Generated Disk Quota Option to Warning Level

(StartProgramsAdministrative tollsEvent Viewer to See)

User more then Disk Space use then Warning level Option

2. Then Create a Disk Quota for Sharing Users:

Sharing user you create a Disk quota then click a Quota Entries Button then open a

Disk quota window

Then click a New Quota Entries and open a Select users Window.

30



Then Click an Advanced Button and open a Select users Window. Then Find Now

Button clicks it and Select a Particular user [Example: Any Users (lak) but NotAdministrator user]

Then Click an Ok Button.

31



Then Click an Ok Button.

That User (lak) you allocate the Disk Space (Example: 5GB) so you have Create it

The lak user Share Level Access in D: Drive More then 5GB only

32



4) Shadow Volume Copy:

• Only Featured in 2003 Server

• This Feature Only in Local Disk Drive (Example: C, D, E …)

• Shadow Volume Copy Help to retry the previous Versions

Practical => Server SystemMy Computer C:\ (System files)Windows or

Winnt System32 Clients Twclients X86 TWCLI32.MSI

1) TWCLI32.MSI Patch File Then copy to Clients System Install it

33





6th Class Windows 2003 Server Date: 15/10/2006REMOTE MANAGEMENT:There are three Types:

1) Microsoft Management Console (MMC)2) Terminal Server

3) Remote Assistance

1) Microsoft Management Console (MMC):

Start Run then type it MMC after that open a MMC Window

Then Click it Add/Remove Snap-in

Then Click Add Button and open an Add Standalone Snap-in next you want Choice it

(Example Computer Management)

35





g) Then do it XP-Professional System My Computer

PropertiesRemote Remote Desktop Connection Enable it

h) Then do Connect in Server To XP (Remote Desktop Connection) then

logout the XP and then Login the XP in Server System then Disconnect the

XP in Server System next you normal login the XP Professional.

i) But Connect in XP To Server (Remote Desktop Connection) thenLogin the Server System in XP but not Logout to Server System

j) Then open the Terminal Server Start Programs Administrative

tools Terminal Server Configuration then see the how many number of

Connect in Remote (Maximum Two Numbers)

k) Then open the RDP in Start Programs Administrative tools

Terminal Server Configuration

Then Click the RDP in Properties tab

2. Application Sever Mode:

a. Application Installed in a Terminal Server can be Remote utilized

b. User Account Own Traditional (Must Remote Desktop Group then Only

Access in User Account traditional)

37



c. One RDP Connection in 7 to 8 Mb Ram Space Occupy in your Sysetm

RDP means Remote Desktop Protocols then how many number you can

connect in Remote Desktop Connection then Occupy the Ram Space.

d. Administrative Task is Available only for Admin Traditional User.

e. Terminal Server to Change the Application Server in Start Control Panel

Add or Remove Programs Add Windows Component Terminal Server

Then Click Next Icon

Then Finish it.

Terminal Server Console:

i. Terminal Service Manager

ii. Terminal Service Configuration (to see the RDP Connection)

iii. Terminal Licensing Server (The Application Server Mode Enable the Call

Licensing )

38



3) Remote Assistances:

First Do in My Computer Properties Remote then Enable Remote

Assistance & Remote Desktop.

Then Client Open it XP-Professional Press F1 Open the Help Window

Then click Invite someone again next click Ask the Password u given it

Final Save the file and transfer the Server System in Folder then folder Full Sharing it

again run the file then ask the Password. You put it same password now you see not

logout in the Xp (Must Remote Desktop Connection Enable it)

DFS (Distributor File System):

EX: Part 1 in A Computer, Part 2 B Computer, Part 3 C Computer so you See

the All Part in Main Computer At the Time Part 1,2,3 Suppose C Computer Any Fault

So Change the Another System B Computer Now B Computer is Part 2 & 3

Start Programs Administrative Tools Distribute File System then

open the DFS Right Click for Left Side Corner New Root (There are two types

(i)Standalone (ii)Domain Root) Domain Root Domain Name (ADS) Server Name (Computer Name) Root Name (Any one Name Put it) You

Choice it Local hard disk (D,E,F,….) then Created.

39

A

Computer

Main

Computer

B

Computer

C

Computer




Disk Management:

IDE : Integrate device Electronics that’s commonly use.

SATA: Start with 10000, 15000, 16000 RPM

SCSI : Small Computer System Interfacethat’s More Advantage

Second Generation scsi like fast SCSI support and runs at a speed of

15,000rpm and transfer rate of 20Mbs while IDE support 7200rpm and transfer rate

16.7Mbs.

SCSI 16 to 64 up to 32 hard disk Connected at the time (Multi pack

Connect Single Cable) Storage Capacity Increase

What are the Characters of Hard disk?

There are two Character of Hard disks 1. Basic 2.Dynamic

Basic Disk:

Basic Disk in the 1st

Sector we have using MBR and it maintain FAT installedin Default then Basic created in hard disk most but it’s always danger to get corrupted

(or) Damaged.

Maximum 4 Partition can be created.

i. Primary Partisan:

That all Bootable, Every System need at least one primary Partisan then

Entire Hard disk Space can be Partisan as a Single. Primary Partisan.

ii. Extend Partisan:

Extend Partisan it’s not a bootable can create unlimited Logical Drivers

iii. Logical Partisan:

Logical Partisan its simple area of usable space and a Physical Disk it will beassigned with Drive Letter’s can locate in Winnt Directory in logical Drive.

Dynamic Disk:

Manually you can Change the Basic to Dynamic then automatically create it

SIMPLE VOLUME (Right Click DISK 0)

40



VOLUMES: ( NTFS Partisan Only)

There are Five Types of Volumes.

1 Simple Volume

2 Spanned Volume

3 Stripped Volume (Raid 0)4 Mired Volume (Raid 1) Raid Configuration

5 Striped with priority (Raid 5)

Notes:

• Dynamic Disk Manually need to update

• Support fall tolerance an available in data stored in it

• Hear logical Disk manager service maintain the configuration info of volumes

• Maintains 1Mb Database and each disk that contains information of all other

Hard disk

•

Dynamic Disk are less likely to fail, it fails more likely Broad cost again(Then Fail the Hard disk Easy to Retry it)

• Dynamic Disk can be Reconfiguring with out Restart (or) Reboot.

• Only NTFS Partisan can be Created (For Backward Compatibility we can later

Changes FAT or FAT32)

Formula in FAT to NTFS Converted:

CMD [format (Space) X (X Means Local Drive D,E,F,… ):(Space)/fs:y(Y

Means FAT or NTFS)

System Disaster: Two are Method

1. Software Failure:

• Virus Failure,

• OS Corrupted…

Sole the Problem (Backup & Restore, Recovery Console, and ASR Mode)

2. Hardware Failure:

• Power Failure,

• Hard disk Failure….

Sole the Problem (Batteries, Raid Configuration)

RAID: R edundancy Array and Inexpensive Disk

RAID Means When the Multiple Hard Disks in your PC that is RAID

Configuration & Any Hard Disk Failure then Easy to retry it that Feature of the RAIDMethod. Only for Available in Dynamic Disk.

SIMPLE VOLUME:

Manually you can Change the Basic to Dynamic then automatically create it

SIMPLE VOLUME

• Simple Volume Can be Created Using One Hard disk

• Volume can be Extended in the Same Hard disk

• Volume Sizes can be Different

• It’s Doesn’t Support fall Tolerance

• System Fails and Boot Fails can be Stored in this Volumes.

41

C:\



SPANNED VOLUME:

(Extend Volume then next Hard disk put it)

Example: If Disk 0 (C :\) has more then 10 GB then you Extend Disk 1(C: \)

• Spanned Volumes Required Minimum 2 to 32 Hard Disk

• It can have Extended Volumes. It Multiple Hard Disk.

• Volume Sizes Can is Different in Different Hard Disk.

• Doesn’t Support Fall Tolerance

STRIPPED VOLUMES RAID 0: (Mother of the Raid Configuration)

Here Writing Speed is Very Faster than other Volumes

Disk 0 Disk1

Example:

If Disk 0 (1 Block) 10 GB so All hard disk Block Are percent in Same

Volume 10 GB that is Sequences Method. then Any Data put it your hard disk

suppose 7 data put here 1 Data Percent in DISK 0 (1) 2 Data Percent in DISK 1 (2) 3

Data Percent in DISK 0 (3) 4 Data Percent in DISK 1 (4) 5 Data Percent in DISK 0

(5) 6 Data Percent in DISK1 (6) 7 Data is put it again DISK 0 (1)…..

• It Required Minimum 2 Hard Disk and Support 32 Hard Disk

• But Partition Sizes Must be Same in the All Hard Disk of the Stripped Volumes

• System Files and Boot Files Can’t be Stored

• Doesn’t Provide Fall Tolerance

• Here Data will be divided into Blocks and Written Sequentional in all the Hard

Disk Participating in this Raid Volumes.

MIRRORED VOLUMESRAID 1:

DISK 0 DISK 1

Disk 0 & Disk 1 Copy of the Same Data

C:\

System

Files

1

SameVolume

3

SameVolume

5

SameVolume

2

SameVolume

4

SameVolume

C:\

APPA

D:\

AMMA

E:\

LAK

C:\

APPA

D:\

AMMA

E:\

LAK

42

C:\ DISK 0 C:\ DISK 1 C:\ DISK 2



Volume Size Must be Same

Example:

If any Data Disk 0 is there Then Disk 1 Same Data is Automatic Copied

(Must be Same Volume (Capacity) Two Hard Disk DISK0 and DISK1) Mirror Volume Support is DISK 0 40GB Same Size in DISK 1 40GB

• Mirror Volume Required Minimum 2 Hard Disk to Maximum 32 Hard Disk

• System Files and Boot Files then All Files Stored in Same Hard Disk

• This Volume Support in Fall Tolerance

• Mirrored Volume Disadvantage is 50% of the Disk Space Wasted Because

Copying of the Same Information in Two Hard Disk.

STRIPPED WITH PARITY VOLUMES RAID 5:

All Disk Volume Size Must be Same

30% of the Disk Space Wasted

Example:

Disk 0, Disk 1 and Disk 2 also must be Same Size in Hard disk Space

Three Hard Disk Space is 100MB Size. If 100MB Space is Disk0 67MB Hard Disk

Space Use in Data. Remaining 33MB Space Parity so wastage only 30% that’s all

A, B, C, D, E,.... Data is there if 1st Disk0 is A Data Store it. Then B Data is

Disk0 parity Stored but not in use Disk 1 is B Data stored then C Data is Parity Stored

then Again Disk2 is C Data stored then D Data is Parity Stored Rotating Again Disk 0

is D Data stored then E Data is Parity Stored…… So Any one Hard Disk Failure

(Particular Disk 1) B and C Failed then retry to Disk 0 Parity B Data then Disk 2 C

Data Used So Easily to retry

A, D

B

C

B. E C D, A

• It Required 3 Hard Disk & Maximum Support 64 Hard Disk Available Here

• Volume Sizes Must be Same in All Hard Disk Space

• This Volume Fall Tolerance Support Only one Hard Disk

• Like Stripped Volumes Data will be Divided into Blocks and Return to

Sequentially in all the Hard Disk Participating Raid Configuration

67MB

Disk 0

33MB

67MB

Disk 1

33MB

67MB

Disk 2

33MB

43



• System Files and Boot Files Can be Stored (Not recommend)

• Read Performance will be better then Mirror Volumes when all the Participating

the Hard Disk Function Properly.

BACKUP & RESTORE:

Start Run NTBACKUP Type it then Enter

Start Programs Accessories System Tools Backup

Five Types of Backup:

1. Normal

2. Copy

3. Incremental

4. Differential5. Copy

Archive Means One files or Folder Archive Mark Possible Create it (New Folder

or File you Created then Archive Mark is Presented)

Type Of

Backup T o t a l

F i l e s

A r c h i v e

F i l e s

U n A r c h i v e

F

i l e s

Before

Backup

Check the

Archive

Mark

F i l t e r

After Backup

Remove the

Archive

Mark

F i l t e r

Last

Backup

Files

Normal

Backup

35 20 15 Doesn’t

UN CHK35 N o F i l t e r

Does

Remove A N o F i l t e r

Re A=20,

Unarchived

is 20+15=35

Copy

Backup

35 20 15 Doesn’t

UN CHK35 N o F i l t e r

Doesn’t

Un Re A F i l t e r

A = 2 0

Only

Unarchived

15

Incremental

Backup

35 20 15 Does

CHK 20 F i l t e r

U n A = 1 5

Does

Remove A N o F i l t e r

Only

Unarchived

20

Differential

Backup

35 20 15 Does

CHK 20 F i l t e r

U n A = 1 5

Doesn’t

Un Re A N o F i l t e r

Only

Archived

20

44



Daily Its Takes only Backup of the Files and Folder Created or Modified on a

Today

What are the Different between Incremental Backup & Differential Backup?It is Same Archive File Only Taken Backup but Restore the Incremental

Backup is Same File but Unachieved All File. Differential Backup is Same File and

Same Archive Mark is there


ASR Backup: (Automatic System Recovery Backup) Current Status Backup it

Using Backup Component is Two:

1. Floppy Disk 2. Hard Disk

Hints:

• In 2000 Server Available on 3 Floppy

• Then 2003 & XP also Available for 1 Floppy

• Start Run NTBACKUP (Typed then Enter) Go to Advanced Mode or

Start Programs Accessories System Tools BACKUP

• After Run The ASR is Insert the 2003 CD Boot it Then Show the Blue

Screen Immediately Press F2 then ask the ASR Floppy

• Then Open the wizard and Next Button Click it.

45



• Then Where you put your Backup files in System Data (Files) you Chose it

• Then Next Button Click it After Backup for where your put it place is saved your System Data (Files)

46



• After Completed the System Data Files then ask the Floppy Because Backup of

Floppy Disk in System Settings Then Not Put it Floppy then Show the Error

Message

• Then Click the Ok Button After Show the Error

47



Notes:

• ASR Backup It’s used to Bring the System to the Most current Status it Created

There are Two Backup it

1. Floppy Disk 2. Hard Disk

• The Floppy Disk Created it’s not a Boot Floppy it’s Create a 2 Files one is

ASRPMP.SIF Then Another one is ASR.SIF and SETUP.LOG

• After Run The ASR is Insert the 2003 CD Boot it Then Show the Blue

Screen Immediately Press F2 then ask the ASR Floppy

Not Sure: Backup Only ADS How?

Backup System Statethen ADS Only Backup it

Restore System Boot Processing then Press F8 Safe Mode, Command

Mode, Reboot the OS, you see the Active Directory Restore Mode then Press it

Recovery Console: (Only for 2003 Server and XP Os that is working for Recovery

Console)

First you insert the CD then Start Run Command Type it Then CD

Drive letter D, E, F or G Any Drive Mention the Command Prompted Ex: G Drive

ok then G:\ cd i386 Enter it G:\i386>Winnt32 /cmdcons Enter it now just wait

for few Seconds Then Show the Windows Setup Wizard Down see the Wizard

48



Yes click it

49



After Completed the Wizard Press Ok Button now Completed the Recovery Console

Notes:

With the use of Recovery Console we can Start and Stop the Service Partition

the Hard Disk Format the Hard Disk Change the Setup the Partition Change an Fix

MBR (Master Boot Record)

After Install the Recovery console then so many of Commands given it

Command is:

C:\Windows>bootcfg /list to view the details of the Default OS

C:\Windows>disable to Disable the Service

C:\Windows>listsvc All Service View it

C:\Windows>enable messenger Service auto start Start the Enable Messenger

C:\Windows>logon to logon the OS (Which OS you login It. to View the login

Screen)

C:\Windows>diskpart Format the Disk

C:\Windows>map to display the drive with File System Capacity (NTFS or FAT)

C:\Windows>systemroot to Place the Curser at the Directory. When the OS is

Present it.

Uninstall the Recovery Console:There are two types:

• My Computer %Systemroot%(C Disk) then Hidden file Show it Tools

Folder Option Click it then Click the View Tap

50



Show Hidden Files and Folder Click it

Default Mark is there But you can do Unmark

Default Mark is there But you can do Unmark Then only Show the Hidden Files C Drive Open it then Show the Boot.ini Files Open

the Notepad then see the Second line in Recovery Console then Deleted Or

• My Computer Right Click the Properties Advanced Tap Click it

Startup and Recovery Click it then Edit Tap Click it then see the Second line

in Recovery Console then Deleted.

RIS: Remote Installation Services

Server Side:

• New Partition for the Image File

• Install the Remote Install Components Through Add Remove Programs AddRemove Windows Components

• DNS and DHCP Properly Configured

• Run Command Risetup to take the image and OS files

• Prepare the Boot Floppy where Remote install folder Admin Folder then

i386 rbfg.exe

Client System:

• Boot from Floppy

• If Support for Boot Rom PXE (then Boot from LAN then Press F2)

51



NETWORK PRINTER:

There are three types:

1. Network Printer

2. Network Interface Printer

3. Internet Printing1. Network Printing:

Start Settings Control Panel Add Remove ProgramsAdd Remove

Windows Components Application Server IISDetails Install it After

Network printer working

There are two Types: Pooling and Spooling

Printer Method is Printer, Print Device and Print Server

I. Printer:

It’s Software its Convert Data into Printer Readable Format

II. Print Device:

Physical Machine

III. Print Server:

Manage Multiple Print Device

a) POOLING

• Single Printer or Single Server with Multiple Print Devices its Calls Print

Pooling,

• All Printers Should be Same Manufacturing

• Here the Print Job Will not be Queue

b)SPOOLING

• Multiple Printers With Single Print Device its calls Print Spooling

• Here you Can Priority Scheduling for the Uses here the Job will be unique

• Here the Print Job will be Stored the Server Hard Disk then Provide to thePrint Device According to the Print Scheduling

Permission:

i. Print

ii. Manage Document

iii. Manage Printers

i. Print

User can Connected the Printer, User Provide Print Job then User can Start,

Stop the Printer

ii. Manage Document:

All the Permission Carry Addition then Print Job will be deleted.

iii. Manage Printers:

The Permission of Print and Manage Document will Apply Additional User

can change the Spooling setting printer priority additional printer Device

2. Network Interface Printer:

• Network Interface Printer is connected to LAN IP Address is set at the Print

Devices Like Hub and Switch

• In Network interface Printer we have the NIC Card so the IP Address an port

Address are Assigned Directory in the print Device (Printer throw LAN

Connection)

3. Internet Printing:

•Both Print Servers, Clients Must Have Net Connection.

• Client User Must have the Permission Print Server

52



• IP Address of the Print Server Must be Know

Documents

Server Usefull Notes