Microsoft® Windows® Server 2003 Administrator's Pocket Consultant

Author William R. Stanek Pages 576 Disk N/A Level All Levels Published 03/12/2003 ISBN 9780735613546 ISBN-10 0-7356-1354-0 Price(USD) $29.99 To see this book's discounted price, select a reseller below.	More Information About the Book Table of Contents Sample Chapter Index Related Series Related Books About the Author Support: Book & CD Rate this book

Table of Contents

Acknowledgments	xxv
Introduction	xxvii
PART I  MICROSOFT WINDOWS SERVER 2003 ADMINISTRATION FUNDAMENTALS
1  Overview of Microsoft Windows Server 2003 System Administration	3
Microsoft Windows Server 2003	4
Domain Controllers and Member Servers	5
Understanding and Using Server Roles	6
Other Windows Server 2003 Resources	8
Frequently Used Tools	10
Using Control Panel Utilities	11
Using Graphical Administrative Tools	12
Key Graphical Administrative Tools	12
Tools and Configuration	14
Using Command-Line Utilities	15
Utilities to Know	15
Using NET Tools	15
2  Managing Servers Running Microsoft Windows Server 2003	17
Managing Networked Systems	17
Connecting to Other Computers	18
Sending Console Messages	19
Exporting Information Lists	20
Using Computer Management System Tools	20
Using Computer Management Storage Tools	21
Working with Services and Applications	21
Managing System Environments, Profiles, and Properties	21
The General Tab	22
The Computer Name Tab	22
The Hardware Tab	23
The Advanced Tab	25
Configuring System and User Environment Variables	29
Creating an Environment Variable	29
Configuring System Startup and Recovery	30
Enabling and Disabling Error Reporting	32
The Automatic Updates Tab	34
The Remote Tab	35
Managing Hardware Devices and Drivers	35
Working with Signed and Unsigned Device Drivers	35
Viewing and Managing Hardware Devices	36
Configuring Device Drivers	37
Managing Hardware	41
Managing Dynamic-Link Libraries	44
3  Monitoring Processes, Services, and Events	45
Managing Applications, Processes, and Performance	45
Task Manager	45
Administering Applications	46
Administering Processes	47
Viewing and Managing System Performance	49
Viewing and Managing Networking Performance	52
Viewing and Managing Remote User Sessions	53
Managing System Services	54
Starting, Stopping, and Pausing Services	55
Configuring Service Startup	56
Configuring Service Logon	57
Configuring Service Recovery	58
Disabling Unnecessary Services	59
Event Logging and Viewing	60
Accessing and Using the Event Logs	61
Setting Event Log Options	62
Clearing Event Logs	64
Archiving Event Logs	64
Monitoring Server Performance and Activity	66
Why Monitor Your Server?	66
Getting Ready to Monitor	66
Using Performance Monitor	67
Choosing Counters to Monitor	67
Using Performance Logs	69
Viewing and Replaying Performance Logs	75
Configuring Alerts for Performance Counters	75
Running Scripts as Actions	78
Tuning System Performance	79
Monitoring and Tuning Memory Usage	79
Monitoring and Tuning Processor Usage	82
Monitoring and Tuning Disk I/O	83
Monitoring and Tuning Network Bandwidth and Connectivity	83
4  Automating Administrative Tasks, Policies, and Procedures	85
Group Policy Management	85
Understanding Group Policies	86
In What Order Are Multiple Policies Applied?	87
When Are Group Policies Applied?	87
Group Policy Requirements and Version Compatibility	88
Managing Local Group Policies	89
Managing Site, Domain, and Unit Policies	90
Working with Group Policies	94
Getting to Know the Group Policy Console	94
Centrally Managing Special Folders	96
Using Administrative Templates to Set Policies	100
User and Computer Script Management	102
Assigning Computer Startup and Shutdown Scripts	103
Assigning User Logon and Logoff Scripts	104
Applying Security Policy Through Templates	106
Understanding Security Policies and Administration Tools	106
Applying Security Templates	108
Scheduling Tasks	108
Utilities for Scheduling Tasks	109
Preparing to Schedule Tasks	109
Scheduling Tasks with the Scheduled Task Wizard	110
5  Working with Support Services and Remote Desktop	113
Introducing Support Services	113
Working with the Automated Help System	114
Using the Help and Support Center	114
Introducing the Application Framework	116
Monitoring System Health	116
Understanding and Using Automatic Updates	118
An Overview of Automatic Updates	118
Configuring Automatic Updates	119
Configuring Update Servers	121
Downloading and Installing Automatic Updates	122
Removing Automatic Updates to Recover from Problems	123
Managing Remote Access to Servers	123
Configuring Remote Assistance	123
Configuring Remote Desktop Access	125
Making Remote Desktop Connections	125
Configuring Windows Time	127
Windows Time and Windows Server 2003	128
Enabling and Disabling Windows Time on Stand-alone and Member Servers	129
PART II  MICROSOFT WINDOWS SERVER 2003 DIRECTORY SERVICE ADMINISTRATION
6  Using Active Directory	133
Introducing Active Directory	133
Active Directory and DNS	133
Getting Started with Active Directory	134
Working with Domain Structures	135
Understanding Domains	135
Understanding Domain Forests and Domain Trees	136
Understanding Organizational Units	137
Understanding Sites and Subnets	138
Working with Active Directory Domains	140
Using Windows Server 2003, Windows XP, and Windows 2000 Computers with Active Directory	140
Using Windows 95 and Windows 98 with Active Directory	141
Using Windows NT and Windows 2000 Domains with Active Directory	143
Raising Domain and Forest Functionality	146
Understanding the Directory Structure	148
Exploring the Data Store	148
Exploring Global Catalogs	149
Universal Group Membership Caching	150
Replication and Active Directory	151
Active Directory and LDAP	152
Understanding Operations Master Roles	152
7  Core Active Directory Administration	155
Tools for Managing Active Directory	155
Active Directory Administration Tools	155
Active Directory Command-Line Tools	156
Active Directory Support Tools	157
Using the Active Directory Users And Computers Tool	158
Starting Active Directory Users And Computers	158
Getting Started with Active Directory Users And Computers	158
Connecting to a Domain Controller	159
Connecting to a Domain	160
Searching for Accounts and Shared Resources	160
Managing Computer Accounts	162
Creating Computer Accounts on a Workstation or Server	162
Creating Computer Accounts in Active Directory Users And Computers	163
Viewing and Editing Computer Account Properties	164
Deleting, Disabling, and Enabling Computer Accounts	164
Resetting Locked Computer Accounts	164
Moving Computer Accounts	165
Managing Computers	166
Joining a Computer to a Domain or Workgroup	166
Managing Domain Controllers, Roles, and Catalogs	168
Installing and Demoting Domain Controllers	168
Viewing and Transferring Domain-Wide Roles	169
Viewing and Transferring the Domain Naming Master Role	170
Viewing and Transferring Schema Master Roles	171
Transferring Roles Using the Command Line	171
Seizing Roles Using the Command Line	172
Configuring Global Catalogs	173
Configuring Universal Group Membership Caching	174
Managing Organizational Units	174
Creating Organizational Units	174
Viewing and Editing Organizational Unit Properties	175
Renaming and Deleting Organizational Units	175
Moving Organizational Units	175
8  Understanding User and Group Accounts	177
The Windows Server 2003 Security Model	177
Authentication Protocols	177
Access Controls	178
Differences Between User and Group Accounts	179
User Accounts	179
Groups	181
Default User Accounts and Groups	185
Built-In User Accounts	185
Predefined User Accounts	186
Built-In and Predefined Groups	188
Implicit Groups and Special Identities	188
Account Capabilities	189
Privileges	190
Logon Rights	191
Built-In Capabilities for Groups in Active Directory	192
Using Default Group Accounts	196
Groups Used by Administrators	196
Implicit Groups and Identities	197
9  Creating User and Group Accounts	199
User Account Setup and Organization	199
Account Naming Policies	199
Password and Account Policies	201
Configuring Account Policies	205
Configuring Password Policies	205
Configuring Account Lockout Policies	207
Configuring Kerberos Policies	209
Configuring User Rights Policies	210
Configuring User Rights Globally	211
Configuring User Rights Locally	212
Adding a User Account	213
Creating Domain User Accounts	213
Creating Local User Accounts	215
Adding a Group Account	217
Creating a Global Group	217
Creating a Local Group and Assigning Members	218
Handling Global Group Membership	219
Managing Individual Membership	219
Managing Multiple Memberships in a Group	220
Setting the Primary Group for Users and Computers	220
10  Managing Existing User and Group Accounts	223
Managing User Contact Information	223
Setting Contact Information	223
Searching for Users and Creating Address Book Entries	225
Configuring the User's Environment Settings	226
System Environment Variables	227
Logon Scripts	228
Assigning Home Directories	229
Setting Account Options and Restrictions	230
Managing Logon Hours	230
Setting Permitted Logon Workstations	232
Setting Dial-In and VPN Privileges	233
Setting Account Security Options	235
Managing User Profiles	236
Local, Roaming, and Mandatory Profiles	236
Using the System Utility to Manage Local Profiles	238
Updating User and Group Accounts	242
Renaming User and Group Accounts	243
Copying Domain User Accounts	244
Deleting User and Group Accounts	245
Changing and Resetting Passwords	245
Enabling User Accounts	246
Managing Multiple User Accounts	247
Setting Profiles for Multiple Accounts	248
Setting Logon Hours for Multiple Accounts	249
Setting Permitted Logon Workstations for Multiple Accounts	249
Setting Logon, Password, and Expiration Properties for Multiple Accounts	250
Troubleshooting Logon Problems	250
Setting Advanced Active Directory Permissions	251
Understanding Advanced User, Group, and Computer Permissions	251
PART III  MICROSOFT WINDOWS SERVER 2003 DATA ADMINISTRATION
11  Managing File Systems and Drives	255
Adding Hard Disk Drives	255
Physical Drives	256
Preparing a Drive for Use	257
Installing and Checking for a New Drive	259
Understanding Drive Status	259
Working with Basic and Dynamic Disks	260
Using Basic and Dynamic Disks	261
Special Considerations for Basic and Dynamic Disks	262
Marking an Active Partition	262
Changing Drive Types	262
Reactivating Dynamic Disks	264
Rescanning Disks	264
Moving a Dynamic Disk to a New System	265
Using Basic Disks and Partitions	265
Partitioning Basics	265
Creating Partitions	266
Formatting Partitions	269
Updating the Boot Disk	270
Managing Existing Partitions and Drives	271
Assigning Drive Letters and Paths	271
Changing or Deleting the Volume Label	272
Deleting Partitions and Drives	273
Converting a Volume to NTFS	273
Checking a Drive for Errors and Bad Sectors	275
Defragmenting Disks	276
Compressing Drives and Data	277
Encrypting Drives and Data	279
Understanding Encryption and the Encrypting File System	280
Working with Encrypted Files and Folders	282
Configuring Recovery Policy	283
Recovering Disk Space	285
12  Administering Volume Sets and RAID Arrays	287
Using Volumes and Volume Sets	287
Volume Basics	288
Understanding Volume Sets	289
Creating Volumes and Volume Sets	290
Deleting Volumes and Volume Sets	293
Extending a Simple or Spanned Volume	294
Managing Volumes	294
Improved Performance and Fault Tolerance with RAIDs	295
Implementing RAID on Windows Server 2003	296
Implementing RAID 0: Disk Striping	296
Implementing RAID 1: Disk Mirroring	297
Implementing RAID 5: Disk Striping with Parity	299
Managing RAIDs and Recovering from Failures	300
Breaking a Mirrored Set	300
Resynchronizing and Repairing a Mirrored Set	301
Repairing a Mirrored System Volume to Enable Boot	302
Removing a Mirrored Set	303
Repairing a Striped Set Without Parity	303
Regenerating a Striped Set with Parity	303
13  Managing Files and Folders	305
Windows Server 2003 File Structures	305
Major Features of FAT and NTFS	305
File Naming	307
Accessing Long File Names Under MS-DOS	308
Quick Tips for Managing Files, Folders, and Disk Drives	309
Examining File and Folder Properties	309
Displaying Hidden and Compressed Files in Windows Explorer	310
Tips for Selecting Multiple Files and Folders	311
Tips for Copying and Moving Resources	311
Tips for Copying Resources to Locations That Aren't Displayed	312
Tips for Copying and Pasting Files	312
Moving Files by Cutting and Pasting	313
Formatting Floppy Disks and Removable Disks	313
Copying Floppy Disks	313
14  Data Sharing, Security, and Auditing	315
Sharing Folders on Local and Remote Systems	315
Viewing Existing Shares	315
Creating Shared Folders	316
Creating Additional Shares on an Existing Share	319
Managing Share Permissions	320
The Different Share Permissions	320
Viewing Share Permissions	320
Configuring Share Permissions	321
Modifying Existing Share Permissions	322
Removing Share Permissions for Users and Groups	323
Managing Existing Shares	323
Understanding Special Shares	323
Connecting to Special Shares	324
Viewing User and Computer Sessions	325
Stopping File and Folder Sharing	327
Using Shadow Copies	328
Understanding Shadow Copies	328
Creating Shadow Copies	329
Deleting Shadow Copies	329
Disabling Shadow Copies	329
Connecting to Network Drives	330
Mapping a Network Drive	330
Disconnecting a Network Drive	331
Object Management, Ownership, and Inheritance	331
Objects and Object Managers	331
Object Ownership and Transfer	331
Object Inheritance	333
File and Folder Permissions	333
Understanding File and Folder Permissions	334
Setting File and Folder Permissions	336
Auditing System Resources	338
Setting Auditing Policies	338
Auditing Files and Folders	340
Auditing Active Directory Objects	342
Using, Configuring, and Managing Disk Quotas	342
Understanding Disk Quotas and How Quotas Are Used	342
Setting Disk Quota Policies	344
Enabling Disk Quotas on NTFS Volumes	346
Viewing Disk Quota Entries	348
Creating Disk Quota Entries	349
Deleting Disk Quota Entries	350
Exporting and Importing Disk Quota Settings	351
Disabling Disk Quotas	352
15  Data Backup and Recovery	353
Creating a Backup and Recovery Plan	353
Figuring Out a Backup Plan	353
The Basic Types of Backup	354
Differential and Incremental Backups	355
Selecting Backup Devices and Media	356
Common Backup Solutions	356
Buying and Using Tapes	358
Backing Up Your Data	358
Getting Started with the Backup Utility	358
Setting Default Options for Backup	360
Backing Up Data with the Backup Wizard	364
Backing Up Files Without the Wizard	366
Recovering Data Using the Restore Wizard	369
Recovering Data Without the Wizard	371
Restoring Active Directory	373
Backing Up and Restoring Data on Remote Systems	373
Viewing Backup Logs	374
Managing Encryption Recovery Policy	374
Understanding Encryption Certificates and Recovery Policy	374
Configuring the EFS Recovery Policy	376
Backing Up and Restoring Encrypted Data and Certificates	377
Backing Up Encryption Certificates	378
Restoring Encryption Certificates	378
Disaster Recovery and Preparation	379
Creating System Recovery Data	379
Starting a System in Safe Mode	380
Using the Recovery Data to Restore a System	381
Working with the Recovery Console	382
Managing Media Pools	384
Understanding Media Pools	384
Preparing Media for Use in the Free Media Pool	385
Moving Media to a Different Media Pool	385
Creating Application Media Pools	385
Changing the Media Type in a Media Pool	386
Setting Allocation and Deallocation Policies	386
Working with Access Permissions for Removable Storage	387
Deleting Application Media Pools	389
Managing Work Queues, Requests, and Operators	389
Using Work Queue	389
Troubleshooting Waiting Operations	390
Changing Mount Operations	390
Controlling When Operations Are Deleted	391
Using the Operator Requests Queue	392
PART IV  MICROSOFT WINDOWS SERVER 2003 NETWORK ADMINISTRATION
16  Managing TCP/IP Networking	395
Installing TCP/IP Networking	395
Installing Network Interface Cards	396
Installing the TCP/IP Protocol	396
Configuring TCP/IP Networking	397
Configuring Static IP Addresses	398
Configuring Dynamic IP Addresses	400
Configuring Alternate Private IP Addresses	400
Configuring Multiple IP Addresses and Gateways	402
Configuring DNS Resolution	404
Configuring WINS Resolution	406
Configuring Additional Networking Components	407
Installing and Uninstalling Networking Components	407
Installing Optional Networking Components	409
Managing Network Connections	410
Creating Network Connections	410
Managing Security for Remote Access Connections	412
Checking the Status, Speed, and Activity of Local Area Connections	413
Viewing Network Configuration Information	414
Duplicating Network Connections	415
Enabling and Disabling Network Connections	415
Deleting Network Connections	415
Renaming Local Area Connections	415
Repairing Local Area Connections	416
Troubleshooting and Testing Network Settings	416
Performing Basic Network Tests	416
Releasing and Renewing DHCP Settings	417
Registering and Flushing DNS	417
Performing Detailed Network Diagnostics	419
17  Administering Network Printers and Print Services	421
Troubleshooting Printer Problems	421
Installing Printers	423
Using Local and Network Printers	423
Installing Physically Attached Print Devices	424
Installing Network-Attached Print Devices	427
Connecting to Printers Created on the Network	430
Solving Spooling Problems	431
Configuring Printer Properties	432
Adding Comments and Location Information	432
Managing Printer Drivers	433
Setting a Separator Page and Changing Print Device Mode	433
Changing the Printer Port	434
Scheduling and Prioritizing Print Jobs	434
Starting and Stopping Printer Sharing	436
Setting Printer Access Permissions	436
Auditing Print Jobs	437
Setting Document Defaults	437
Configuring Print Server Properties	438
Locating the Spool Folder and Enabling Printing on NTFS	438
Managing High Volume Printing	438
Logging Printer Events	439
Removing Print Job Completion and Notification	439
Managing Print Jobs on Local and Remote Printers	439
Using the Print Management Window	439
Pausing the Printer and Resuming Printing	440
Emptying the Print Queue	440
Pausing, Resuming, and Restarting Individual Document Printing	440
Removing a Document and Canceling a Print Job	441
Checking the Properties of Documents in the Printer	441
Setting the Priority of Individual Documents	441
Scheduling the Printing of Individual Documents	441
18  Running DHCP Clients and Servers	443
Understanding DHCP	443
The DHCP Client and the IP Address	443
Checking IP Address Assignment	444
Understanding Scopes	445
Installing a DHCP Server	446
Installing DHCP Components	446
Starting and Using the DHCP Console	446
Connecting to Remote DHCP Servers	447
Starting and Stopping a DHCP Server	448
Authorizing a DHCP Server in Active Directory	448
Configuring DHCP Servers	449
Binding a DHCP Server with Multiple Network Interface Cards to a Specific IP Address	449
Updating DHCP Statistics	450
DHCP Auditing and Troubleshooting	450
Integrating DHCP and DNS	452
Avoiding IP Address Conflicts	453
Saving and Restoring the DHCP Configuration	453
Managing DHCP Scopes	454
Creating and Managing Superscopes	454
Creating and Managing Scopes	455
Managing the Address Pool, Leases, and Reservations	462
Viewing Scope Statistics	462
Setting a New Exclusion Range	463
Deleting an Exclusion Range	463
Reserving DHCP Addresses	463
Modifying Reservation Properties	464
Deleting Leases and Reservations	465
Backing Up and Restoring the DHCP Database	465
Backing Up the DHCP Database	465
Restoring the DHCP Database from Backup	466
Using Backup and Restore to Move the DHCP Database to a New Server	466
Repairing the DHCP Database	467
Forcing the DHCP Server Service to Regenerate the DHCP Database	467
Reconciling Leases and Reservations	468
19  Maintaining WINS	469
Understanding WINS and NetBIOS Over TCP/IP	470
Configuring WINS Clients and Servers	470
Name Resolution Methods	471
Using the WINS Console	472
Getting to Know the WINS Console	472
Adding a WINS Server to the WINS Console	472
Starting and Stopping a WINS Server	473
Viewing Server Statistics	473
Configuring WINS Servers	474
Updating WINS Statistics	475
Managing Name Registration, Renewal, and Release	475
Logging WINS Events in the Windows Event Logs	476
Setting the Version ID for the WINS Database	477
Configuring Burst Handling of Name Registrations	477
Saving and Restoring the WINS Configuration	478
Configuring WINS Database Replication	478
Setting Default Replication Parameters	479
Creating Push and Pull Partners	481
Changing Replication Type and Settings for Partners	482
Triggering Database Replication	483
Managing the WINS Database	483
Examining WINS Database Mappings	483
Cleaning and Scavenging the WINS Database	484
Verifying the Consistency of the WINS Database	484
Backing Up and Restoring the WINS Database	485
Clearing Out WINS and Starting with a Fresh Database	486
20  Optimizing DNS	487
Understanding DNS	487
Integrating Active Directory and DNS	488
Enabling DNS on the Network	488
Installing DNS Servers	489
Installing the DNS Server Service	489
Configuring a Primary DNS Server	490
Configuring a Secondary DNS Server	493
Configuring Reverse Lookups	494
Managing DNS Servers	495
Adding Remote Servers to the DNS Console	496
Removing a Server from the DNS Console	497
Starting and Stopping a DNS Server	497
Creating Child Domains Within Zones	497
Creating Child Domains in Separate Zones	498
Deleting a Domain or Subnet	499
Managing DNS Records	499
Adding Address and Pointer Records	500
Adding DNS Aliases with CNAME	502
Adding Mail Exchange Servers	502
Adding Name Servers	504
Viewing and Updating DNS Records	505
Updating Zone Properties and the SOA Record	505
Modifying the SOA Record	505
Allowing and Restricting Zone Transfers	507
Notifying Secondaries of Changes	508
Setting the Zone Type	509
Enabling and Disabling Dynamic Updates	509
Managing DNS Server Configuration and Security	510
Enabling and Disabling IP Addresses for a DNS Server	510
Controlling Access to DNS Servers Outside the Organization	510
Enabling and Disabling Event Logging	512
Using Debug Logging to Track DNS Activity	512
Monitoring DNS Server	513
Integrating WINS with DNS	514
Configuring WINS Lookups in DNS	514
Configuring Reverse WINS Lookups in DNS	515
Setting Caching and Time-Out Values for WINS in DNS	515
Configuring Full Integration with NetBIOS Scopes	516
TABLES
1-1.  Quick Reference for Key Windows Server 2003 Administration Tools	13
3-1.  Uncovering Memory-Related Bottlenecks	81
3-2.  Uncovering Processor-Related Bottlenecks	82
3-3.  Uncovering Drive-Related Bottlenecks	83
7-1.  Quick Reference for Active Directory Support Tools	157
8-1.  How Group Scope Affects Group Capabilities	182
8-2.  Availability of Implicit Groups Based on the Type of Network Resource	188
8-3.  Windows Server 2003 Privileges for Users and Groups	190
8-4.  Windows Server 2003 Logon Rights for Users and Groups	192
8-5.  Default User Rights for Groups in Active Directory	192
8-6.  Default User Rights for Workgroups and Member Servers	194
8-7.  Other Capabilities for Built-In and Local Groups	195
8-8.  Administrator Groups Overview	196
10-1.  Logon Hours Features	231
11-2.  Common Drive Status Values and Their Meaning	260
12-1.  Understanding and Resolving Volume Status Issues	289
12-2.  Windows Server 2003 Support for RAID	295
13-1.  FAT and FAT32 Features Comparison	306
13-2.  NTFS 4.0 and NTFS 5.0 Features Comparison	307
14-1.  Special Shares Used by Windows Server 2003	323
14-2.  Windows Server 2003 Objects	331
14-3.  File and Folder Permissions Used by Windows Server 2003	334
14-4.  Special Permissions for Files	335
14-5.  Special Permissions for Folders	336
14-6.  Policies for Setting Disk Quotas	345
15-1.  Incremental and Differential Backup Techniques	356
15-2.  General Backup Options	361
15-3.  Restore, Backup Type, and Backup Log Options	362
15-4.  Access Permissions for Removable Storage	387
16-1.  Private Network Addresses	398
16-2.  Network Components Available on Windows Server 2003	407
16-3.  Optional Network Components Available on Windows Server 2003	409
17-1.  Printer Permissions Used by Windows Server 2003	436
17-2.  Special Permissions for Printers	437

Last Updated: February 26, 2003

Top of Page