Windows 2000 Server System Administration Handbook | Syngress Syngress, Paperback, Published November 1999, 802 pages, ISBN 1928994091 | List Price: $51.95 Our Price: $29.50 You Save: $22.45 (43% Off)
| | | Availability: In-Stock |
Be the First to Write a Review and tell the world about this title!Books on similar topics, in best-seller order: Books from the same publisher, in best-seller order:
As an NT
administrator, you must quickly master Windows 2000 Server's new administration
tools. Don't be left behind on Microsoft Management Console (MMC), Active Directory,
IP routing, Kerberos security, and the many other features of Windows 2000 Server. Windows
2000 Server System Administration Handbook is the one book you'll need to quickly
become proficient in configuring and running a Windows 2000 network.
Table of Contents
CHAPTER 1 The Windows 2000 System Administration Migration Path
Brief Overview of Windows 2000 Server
Windows 2000 System Administration Overview
Increased Reliability, Availability, and Scalability
Core Operating System Services
Fault Tolerance
Disaster and System Recovery
Reliable Storage
Avoiding Crashes and Reboots
High-Availability Solutions
Improved Scalability
Easier Management and Lower Costs
Integrated Directory Services
Comprehensive Management Solutions
Comprehensive File, Print, and Web Services
Comprehensive Internet and Application Server
Application Services
Communications and Networking Services
Why the Change?
Migrating to Windows 2000 Server
Getting Ready
Streamlining
Planning
Architecture
Costs
Plan of Action
Timeline
Testing
Deployment
Setting Up Windows 2000 Server
Installing Windows 2000 Server
Upgrading to Windows 2000 Server
Summary
FAQs
CHAPTER 2
Overview of Windows 2000 Administration
Introduction to Network Administration
Designing and Setting Up the Network
Managing the Network
Protecting the Network
Documenting the Network
Microsoft Management Console
Introduction to Active Directory
Key Concepts
Directory Service
Domains
Namespace
Global Catalog
Organizational Units
Groups
Name
Features and Benefits of Active Directory
Simplified Management
Added Security
Scalability
Replication of Information
Extended Interoperability
Integration with DNS
Beyond Active Directory
Volume Management
Disk Quotas
Defragmentation
Backup and Recovery
Hierarchical Storage Management
File Service Management
Distributed File System
Using Windows 2000 Help
Summary
FAQs
CHAPTER 3
Setting Up User Accounts
Defining an Acceptable Use Policy
Template: Acceptable Use/Security Policy
Purpose
Interpretation
Definitions
Responsibility
Introduction to User Accounts
Requirements for New User Accounts
Default User Account Settings
Creating a Domain User Account
Active Directory Users and Computers
Creating User Accounts
Setting Password Requirements
Security Templates
Loading Security Snap-ins into the MMC
Loading the Security Templates
Changing Account (Password) Policies
Setting Properties for User Accounts
Modifying User Accounts
General
Address
Account
Profile
Telephones/Notes
Organization
Dial-in
Managing User Accounts
Deleting User Accounts
Changing User Passwords
Enabling an Account
Disabling an Account
Other Active Directory Users and Computers Functions
Moving User Accounts
Mapping a Certificate to a User
Best Practices
Using Active Directory Users and Computers
Advanced Features
Filters
Administrative Logon
Account (Password) Policies
Summary
FAQs
CHAPTER 4
Using Groups to Organize User Accounts
Introduction to Groups
Group Type
Security Groups
Distribution Lists
Group Scope
Domain Local
Global
Universal
Implementing Group Strategies
Why Use Groups?
Structuring Groups
Implementing Groups
Preparing to Create Groups
Information Needed to Create a Group
Creating a Group
Assigning Users to a Group
Adding Users through the Group Setting
Adding User through the User Settings
Configuring Group Settings
General
Members
Member Of
Managed By
Object
Security
Managing Groups
Changing a Groups Scope
Finding a Group
Deleting a Group
Implementing Local Groups
Preparing to Create Local Groups
Creating a Local Group
Implementing Built-in Groups
Built-in Domain Local Groups
Built-in Global Groups
Built-in Local Groups
Built-in System Groups
Built-in Group Behavior
Best Practices
Managing Groups
Using Universal Groups
Switching Modes
Summary
FAQs
CHAPTER 5
Administering File Resources
Introduction
Using Microsoft Windows NT File System (NTFS) Permissions
NTFS Folder Permissions
NTFS File Permissions
How Windows 2000 Applies NTFS Permissions
Access Control Lists
Combining NTFS Permissions
Permissions Are Cumulative
File Permissions Override Folder Permissions
Deny Overrides All Other Permissions
Permission Inheritance
Assigning NTFS Permissions
Planning NTFS Permissions
Managing NTFS Permissions
Special Access Permissions
Take Ownership
Change Permissions
Other Special Permissions
Using Special Access Permissions
Setting the Special Access Permissions
Taking Ownership of Files and Folders
Changing NTFS Permissions
Copying and Moving Files and Folders
Copying Files
Moving Files
Sharing Resources
Securing Network Resources
Shared Folder Permissions
Creating Shared Folders
Developing a Shared Folder Strategy
Shared Applications
Shared Data
Sharing Folders
Administrative Shares
Creating a Shared Folder
Assigning Permissions to a Shared Folder
Managing Shared Folders
Connecting to a Shared Folder
NTFS Permissions and Shared Folders
Troubleshooting Access Problems
Solving Permission Problems
Typical Permission-Related Access Problems
Solving Permission-Related Access Problems
Best Practices
Avoiding Permission-Related Access Problems
Guidelines for Managing Shared Folder Permissions
Summary
FAQs
CHAPTER 6
Administering User Accounts
Managing User Profiles
User Profiles Overview
Types of User Profiles
Contents of a User Profile
All Users
Settings Saved in a User Profile
Local User Profiles
Roaming User Profiles
Creating Individualized Roaming User Profiles
Mandatory Profiles
Setting Up a Roaming User Profile
Assigning Customized Roaming Profiles
Creating Home Folders
Home Directories and My Documents
Creating Home Directories
Introduction to Group Policies
Applying Group Policy
Order of Application
Filtering Policy Based on Security Group Membership
Blocking Policy Inheritance
Enforcing Policy from Above
Best Practices
Allowing for Different Hardware Configurations
Combining the Power of Profiles and Policies
Tightening Security on Home Directories
Summary
FAQs
CHAPTER 7
Administering Printer Resources
Introduction to Administering Printers
Terminology
Planning the Print Environment
Dedicated vs. Non-dedicated Print Servers
Local, Remote, and Network Printers
Creating the Print Environment
Installing a Local Printer
Installing a Network Printer
Installing a Printer from Another Server
Other Types of Network Printers
Loading Printer Drivers
Printer Properties
General
Sharing
Ports
Advanced
Security
Device Settings
Managing Printer Permissions
Security/Sharing Permissions
Printer Ownership
Managing Printers
Assigning Forms to Paper Trays
Assigning Separator Pages
Creating a Printer Pool
Specifying Printer Priorities
Redirecting a Printer
Removing Printer Drivers
Managing Documents in a Print Queue
Setting Priority, Notification, Printing Time
Administering Printers by Using a Web Browser
Best Practices
Organize Printers by Business Function or Geographic Location
Put Print Devices on a Separate Network
Allow Clients Access to Web Printing Interfaces
Restart Print Spool Service Periodically
FAQs
CHAPTER 8
Managing Storage Data
Managing Data Compression
Compressing Files and Folders
Determining Compression Status
Disk Space Requirements
Compression State
Compression Rules
Copying and Moving Compressed Files and Folders
Managing Disk Quotas
Encrypting Data
File Encryption
Decryption of Files
Storing Encrypted Files on Remote Servers
Accessing Encrypted Data
Moving and Renaming Encrypted Data
Decrypting Data
The Recovery Agent
Using Disk Defragmenter
Analyzing a Drive
Viewing Reports
Defragmenting NTFS File System Partitions
Troubleshooting Data Storage
Best Practices
FAQs
CHAPTER 9
Monitoring Event Logs
Introduction to Monitoring Event Logs
Viewing Event Logs
Monitoring Security Events
Auditing Files and Folders
Auditing Registry Entries
Analyzing Security Events
Managing Event Logs
Best Practices
Summary
FAQs
CHAPTER 10
Backing Up and Restoring Data
Introduction to Backing Up and Recovering Data
Types of Backups
Normal Backup
Daily Backup
Copy Backup
Incremental Backup
Differential Backup
Necessary Permissions and User Rights
System State Data
Emergency Repair Disk
Back Up and Restore Options
Advanced Options
Backing Up Data
Back Up Files to File or a Tape
Scheduling
Using Batch Files
Restoring Data
Restore Files from a File or Tape
Restore System State Data
Authoritative Restore
Maintaining Media
Best Practices
Summary
FAQs
CHAPTER 11
Advanced Administration of Windows 2000
Administering Windows 2000
Microsoft Management Console
Windows 2000 System Administration
Computer Management Console
Event Viewer
License Manager
Performance
Windows 2000 Network Administration
Adapters and Protocols
Configuring Adapters and Protocols
DHCP Manager
DNS Management
Windows Internet Naming Service (WINS)
Terminal Services
Quality of Service
Routing and Remote Access
Remote Access Service Dial Out
Virtual Private Networks
Demand Dial Routing
Network Address Translation (NAT)
Internet Authentication Service
Connection Manager Administration Kit
Customizing Windows 2000 Tools for Your Environment
Creating Custom MMC Consoles
Using the Task Scheduler
Understanding the Logon Process
Logon Authentication
Secondary Logon Services
Windows 2000 Resource Kit
Direct X Diagnostic Utility
Command Line Kill
Sysprep
Setup Manager
Sysdiff
Dependency Walker
Shutdown
Netdiag
Summary
FAQs
CHAPTER 12
Administering Active Directory
Introduction to Administering Active Directory
Active Directory Concepts
Directory
Namespace
Naming Conventions
Schema
Global Catalog
Replication
Client Software
Active Directory Components
Objects
Site
Domain
Trees and Forests
Using Active Directory Management Utilities
DCPromo
Active Directory Users and Computers
Active Directory Domains and Trusts
Active Directory Sites and Services
Publishing Objects in Active Directory
Sharing Resources
Locating Objects in Active Directory
Controlling Access to Objects
User Authentication
Object-based Access Control
Active Directory Permissions
Delegating Administrative Control of Objects
Delegation of Control Wizard
Overview of Active Directory Service Interface (ADSI)
Best Practices
Summary
FAQs
CHAPTER 13
Implementing Group Policy
Introduction to Windows 2000 Group Policy
Group Policy Structure
Types of Configurations
Computer Configuration
User Configuration
Configuration Subfolders
Type of Group Policies
Software Deployment
Software Policies
Desktop File\Folder Management
Scripts
Security
Group Policy Objects
Group Policy Containers
Group Policy Templates
GPT Contents
GPT.INI
How Group Policy Is Applied in Active Directory
Order of Inheritance
Creating a Group Policy Object
Group Policy and Slow Networks
Filtering the Scope of GPO
Modifying Group Policy Inheritance
Modifying Group Policy
Group Policy Tab
Group Policy Editor
Adding Administrative Templates
Using the Group Policy Management Snap-in
Group Policy Configuration Example
Delegating Administrative Control of a Group Policy Object
Creating a Group Policy Object
Modifying a Group Policy Object
Managing a Group Policy Object Link to a Site, Domain, or Organizational Unit
Guidelines for Implementing Group Policy
Best Practices
Summary
FAQs
CHAPTER 14
Managing User Environments Using Group Policy
Introduction to Managing User Environments
Types of Group Policy for Managing User Environments
Group Policy Snap-In for the Microsoft Management Console
Using Administrative Templates
Assigning Registry-Based Policies
Creating Custom Administrative Templates
Adding Administrative Templates
Using Scripts
Assigning Script Policies to Users and Computers
Folder Redirection
FAQs
CHAPTER 15
Managing Software by Using Group Policy
Introduction
Introduction to Managing Software Deployment
Deploying Software
Creating Software Packages
Creating a Non-Windows Installer Package File
Managing Software
Maintaining Software
Upgrading Software
Removing Software
Summary
FAQs
CHAPTER 16
Administering User Accounts and Groups
Introduction to Administration of User Accounts and Groups
Creating Multiple User Accounts
Migrating Users from an NT 4.0 Domain
Creating New Active Directory Users in Bulk
How Does the Script Work?
Importing Users from Novell Directory Services (NDS)
Administering Logon Names
Lockout Settings
Password Requirements
Configuring Account Policies Using Group Policy
Troubleshooting User Logon Problems
Unable to Find a Domain Controller
Unable to Load the User Profile
Missing Computer Account
Redirecting User Data to a Network Share
Setting Up Accounts for Mobile Users
Multilink and Bandwidth Allocation Protocol (BAP)
Using Universal Groups
Windows NT 3.x and 4.x Groups Types
Windows 2000 Group Types
Best Practices
Summary
FAQs
CHAPTER 17
Implementing Security in a Windows 2000 Network
Introduction to Securing a Windows 2000 Network
Applying Security Policies
The Security Settings Extension to Group Policy
Order of Precedence
Creating, Modifying, and Analyzing Security Configurations
Security Configuration and Analysis Snap-in
SECEDIT.EXE
Configuring an Audit Policy
Audit Event Types
Analyzing Security Configurations
Security Configuration Templates
Implementing Public Key Security
Components of Public Key Services
Certificates
Certificate Authority
Group Policies
Hardware Add-ons
Using Public Key Services
Enabling and Administering File Encryption
Encrypted File System Architecture
Encryption and Decryption
Data Recovery
Using the Encrypted File System
Guidelines for Using EFS
Best Practices
Summary
FAQs
CHAPTER 18
Sharing File Resources by Using DFS
Introduction to DFS
Setting Up a Fault-Tolerant DFS Root
Setting Up a Stand-Alone DFS Root
Setting Up Child Nodes
Configuring Child Nodes as Replica Sets
Administering DFS
Connecting to an Existing DFS Root
Command-Line Administration
Removing DFS Roots and Nodes
Removing a Child Node
Removing a DFS Root
Forced Removal of DFS Information
Client Interactions with DFS
Security Concerns
Best Practices
Summary
FAQs
CHAPTER 19
Implementing Disaster Protection
Introduction
Protecting a Windows 2000 Network from Disasters
Backing Up Data
The Recovery Console
Advanced Startup Options
Recovering from a System Failure
Repairing and Restoring Active Directory
Authoritative Restore
Summary
FAQs
Index
|