Table of Contents
PART I: DEPLOYMENT( Page 1)
CHAPTER 1: Planning Deployments( Page 3)
Overview of the Deployment Process( Page 4)
Defining Project Scope and Objectives( Page 4)
Assessing Your Current Environment( Page 5)
Testing and Piloting the Deployment Plan( Page 5)
Rolling Out Your Deployment( Page 6)
Mapping Windows XP Professional to Your Business Needs( Page 7)
Assessing Your Current Configuration( Page 11)
Hardware Requirements and Compatibility( Page 12)
Application Compatibility( Page 15)
Using Check Upgrade Only Mode( Page 19)
Network Infrastructure( Page 20)
Planning Your Preferred Client Configuration( Page 22)
Determining Deskto Page Management Strategies( Page 22)
Determining a Client Connectivity Strategy( Page 25)
Determining Security Strategies( Page 28)
Determining Client Administration and Configuration Strategies( Page 31)
Planning Installations( Page 38)
Upgrading vs. Clean Installation( Page 38)
Choosing an Installation Method( Page 40)
Determining How Many Operating Systems to Install( Page 41)
Planning for Dynamic Update( Page 45)
Planning for Windows Product Activation( Page 46)
Additional Resources( Page 47)
CHAPTER 2: Automating and Customizing Installations( Page 49)
Overview of Automated and Customized Installations( Page 50)
Design an Automated and Customized Installation( Page 51)
Windows Product Activation( Page 52)
Dynamic Update( Page 53)
Choosing an Automated Installation and Customization Tool( Page 54)
Unattended Installation( Page 57)
System Preparation Tool( Page 58)
Remote Installation Services( Page 60)
Systems Management Server( Page 61)
Where to Find the Tools and Related Information( Page 62)
Preparing for the Installations( Page 63)
Verify Hardware and Software Requirements( Page 63)
Create a Distribution Folder( Page 64)
Customizing the Installations( Page 68)
Using Windows XP Professional Customization Tools( Page 71)
Creating an Answer File Manually( Page 87)
Customizing Components and Features( Page 88)
Installing the Operating System( Page 108)
Unattended Installations( Page 108)
Sysprep( Page 113)
RIS( Page 126)
Additional Resources( Page 135)
CHAPTER 3: Multilingual Solutions for Global Business( Page 137)
Overview of Multilingual Solutions for Global Business( Page 138)
New Multilingual Features in Windows XP Professional( Page 140)
Multilingual Features in Windows XP Professional( Page 141)
Built-In Language Support( Page 142)
Locales( Page 143)
Standards and Formats (User Locales)( Page 143)
Input Method Editors, Input Languages, and Keyboard Layouts( Page 143)
Unicode and Code Pages( Page 145)
Language for Non-Unicode Programs (System Locale)( Page 146)
User Interface Language Options (MUI Pack Only)( Page 146)
Windows XP Professional Language Versions( Page 146)
Planning a Multilingual Deployment( Page 149)
Determining Language and Regional Requirements( Page 149)
Assessing Hardware Requirements for Multilingual Support( Page 150)
Determining Roaming User Needs( Page 152)
Upgrading from Earlier Versions of Windows( Page 152)
Deploying a Single Global Image( Page 153)
Creating Regional Builds( Page 154)
Configuring Desktops( Page 155)
Configuring Regional and Language Options( Page 155)
Configuring Localized Content( Page 157)
Simplifying Multiple Language Access on Desktops( Page 158)
Entering Special Characters or Code Points( Page 159)
Controlling Desktops by Using Grou Page Policy Settings( Page 159)
Using Unattended Installations and Silent Configurations( Page 159)
Creating Unattended Installations( Page 160)
Using Silent Configurations( Page 170)
Using Windows Installer Packages for OnDemand Installations (MUI Pack Only)( Page 171)
Supporting Multilingual Applications( Page 172)
Supporting World-Ready Applications( Page 172)
Supporting Non-Unicode Applications( Page 172)
Determining the Compatibility of Your Current Applications( Page 173)
Developing Multilingual Applications( Page 174)
Developing Multilingual Web Sites( Page 174)
Ensuring Multilingual Compatibility( Page 175)
Multilingual Compatibility with Active Directory Objects, Clients, and Domain Controllers( Page 175)
Using Office XP and Windows XP Professional Together( Page 176)
Troubleshooting Multilingual Issues( Page 177)
Tools for Troubleshooting Multilingual Issues( Page 177)
Problems Inputting or Displaying Multiple Languages( Page 177)
Verifying Application Compatibility( Page 179)
Additional Resources( Page 180)
CHAPTER 4: Supporting Installations( Page 181)
The Setu Page Process( Page 182)
New Setu Page Features( Page 182)
Running Setup( Page 183)
Support Tools( Page 185)
Installing Service Packs and Hotfixes( Page 186)
Service Pack and Hotfix Setu Page Programs( Page 186)
Update Installation( Page 191)
Integrated Installation( Page 196)
Combination Installation( Page 198)
Uninstalling a Service Pack or Hotfix( Page 201)
Uninstalling a Service Pack( Page 201)
Uninstalling a Hotfix( Page 202)
Troubleshooting Windows XP Professional Setup( Page 202)
Additional Resources( Page 204)
PART II: DESKTOP MANAGEMENT( Page 205)
CHAPTER 5: Managing Desktops( Page 207)
Managing Desktops in Various Network Environments( Page 208)
Managing Desktops in an Active Directory Environment( Page 209)
Implementing IntelliMirror( Page 210)
Using IntelliMirror to Manage Desktops( Page 212)
Using Grou Page Policy to Manage Desktops( Page 217)
Managing Desktops Without Active Directory( Page 227)
Roaming User Profiles and Logon Scripts( Page 228)
My Documents Redirection( Page 228)
Internet Explorer Maintenance( Page 228)
System Policy( Page 228)
Local Grou Page Policy Object( Page 234)
Managing Desktops in UNIX and Novell Environments( Page 235)
Creating and Managing Standard Deskto Page Configurations( Page 237)
Additional Resources( Page 245)
CHAPTER 6: Managing Files and Folders( Page 247)
Overview of Managing Files and Folders( Page 248)
Managing Documents with Folder Redirection( Page 249)
Selecting Folders for Redirection( Page 250)
Tools for Configuring Folder Redirection( Page 251)
Using Offline Files( Page 252)
Implementing Offline Files( Page 253)
Reconnecting to the Network Resource( Page 255)
Synchronizing Files( Page 256)
Deleting Files and Folders( Page 258)
Grou Page Policy Settings That Affect Offline Files( Page 259)
Sharing Files and Folders( Page 262)
Configuring Shared Folder Permissions( Page 263)
Simple Sharing and ForceGuest( Page 265)
Searching for Files, Folders, and Network Resources( Page 267)
Connecting to Network Shares( Page 268)
Using Indexing Service( Page 268)
Searching for Network Resources in an Active Directory Environment( Page 269)
Troubleshooting Files and Folders Management( Page 270)
Additional Resources( Page 277)
CHAPTER 7: Supporting Mobile Users( Page 279)
Overview of Windows XP Professional Support for Mobile Users( Page 280)
Setting U Page a Portable Computer( Page 283)
Managing Hardware on Portable Computers( Page 285)
Hardware Profile Creation( Page 286)
Dynamic Device Configuration( Page 286)
Docking and Undocking( Page 287)
Configuring Power Management( Page 288)
ACPI Power Management( Page 288)
APM Power Management( Page 290)
Power Management Schemes and Options( Page 292)
Configuring Roaming User Profiles and Folder Redirection( Page 298)
Roaming User Profiles in Windows XP Professional( Page 299)
Combining Folder Redirection with Roaming User Profiles( Page 301)
Configuring Offline Files for Portable Computers( Page 304)
Configuring Files on a Network Share for Offline Use( Page 305)
Configuring Synchronization for Offline Files( Page 306)
Securing Offline Files( Page 309)
Managing the Offline Files Folder( Page 311)
Securing Portable Computers( Page 311)
Securely Undocking Portable Computers( Page 311)
Windows XP Professional BIOS Security( Page 313)
Using Infrared Hardware and Video Devices with Portable Computers( Page 313)
Wireless Networking( Page 315)
WPAN( Page 315)
WLAN( Page 317)
802.11 Architecture( Page 318)
802.11 Security( Page 320)
Windows XP Professional Wireless Support( Page 325)
Additional Resources( Page 330)
CHAPTER 8: Configuring Remote Desktop( Page 331)
Remote Deskto Page Overview( Page 332)
Remote Deskto Page Components( Page 332)
Remote Deskto Page Features( Page 334)
Deploying Remote Desktop( Page 336)
Installing Client Software( Page 338)
Establishing a Remote Deskto Page Session( Page 341)
Keyboard Shortcuts in a Remote Deskto Page Session( Page 344)
Security and Encryption in Remote Desktop( Page 345)
Using Grou Page Policy with Remote Desktop( Page 347)
Troubleshooting Remote Desktop( Page 349)
Additional Resources( Page 350)
CHAPTER 9: Managing Devices( Page 351)
Plug and Play Overview( Page 352)
Device Manager( Page 354)
Plug and Play Device Detection( Page 358)
Allocating System Resources( Page 359)
Safe Removal of Plug and Play Devices( Page 361)
Device Drivers( Page 362)
Driver Signing( Page 363)
Windows Update( Page 364)
Enterprise-Wide Driver Update Using Windows Update( Page 365)
Driver Ranking( Page 366)
Windows Driver Protection( Page 366)
Driver Search Policy( Page 367)
Device Drivers in the Driver.cab File( Page 368)
Supported Hardware( Page 369)
Universal Serial Bus( Page 369)
IEEE 1394( Page 374)
Other Bus Support( Page 376)
Other Hardware Support( Page 377)
Device Installation( Page 388)
Installing a Device in Windows XP Professional( Page 388)
Installing Drivers( Page 389)
Setting Plug and Play BIOS Settings( Page 390)
Configuring Device Settings( Page 391)
Using Hardware Profiles for Alternate Configurations( Page 393)
Changing Hardware Acceleration Settings for Digital Audio( Page 393)
Configuring the Display( Page 394)
Using Multiple Monitors( Page 398)
Configuring Communications Resources( Page 400)
Configuring Scanners and Cameras( Page 402)
Power Management( Page 403)
Power Management Features( Page 403)
Power Policy Overview( Page 404)
Using the Power Management Interface( Page 405)
Hardware Troubleshooting( Page 405)
Troubleshooting Hardware by Using Device Manager( Page 406)
Troubleshooting Network and Other Internal Adapters( Page 406)
Troubleshooting Modems( Page 408)
Troubleshooting Video Adapters( Page 409)
Troubleshooting a Universal Serial Bus Device( Page 411)
Troubleshooting IEEE 1394 Bus Devices( Page 414)
Additional Resources( Page 415)
CHAPTER 10: Managing Digital Media( Page 417)
Digital Media Components Overview( Page 418)
DirectX 8.1( Page 418)
DVD Formats and Devices( Page 420)
Windows Media Technologies( Page 427)
Accelerated Graphics Port( Page 431)
Optimizing Workstations for Digital Media( Page 432)
Configuring Sounds and Video( Page 432)
Configuring Animations, Sounds, and Videos in Internet Explorer( Page 434)
Configuring Digital Media Devices( Page 435)
Using Digital Media( Page 436)
Playing Digital Media( Page 436)
Creating Digital Media( Page 438)
Troubleshooting Digital Media( Page 444)
Common Problems with Playing Digital Media( Page 445)
Troubleshooting Playback of WAV Files( Page 447)
Troubleshooting MIDI Files( Page 447)
Troubleshooting DVD( Page 448)
Troubleshooting an Audio CD( Page 448)
Troubleshooting CD Recording( Page 450)
Additional Resources( Page 451)
CHAPTER 11: Enabling Printing and Faxing( Page 453)
New to Enabling Printing and Faxing( Page 454)
Using Active Directory to Find Printers( Page 454)
Searching Active Directory Fields( Page 455)
Searching Active Directory Locations( Page 456)
Installing Printers( Page 457)
Installing Network and Internet Printers( Page 458)
Installing Local Printers( Page 459)
Printer Installation Considerations( Page 461)
Printing from Other Operating Systems( Page 462)
Printing Preferences( Page 464)
Print Queue Security Options( Page 465)
Scheduling Printing( Page 466)
Spooler Settings( Page 469)
Creating and Sending Print Jobs( Page 469)
Modifications to the Print Dialog Box( Page 470)
Printer Drivers( Page 470)
Image Color Management 2.0( Page 471)
Methods of Sending Print Jobs( Page 471)
Monitoring and Managing Internet Print Jobs( Page 475)
Printing Concepts( Page 476)
Printer Pooling( Page 476)
Printing Processes( Page 476)
Printer Components( Page 478)
Printing Over the Internet( Page 482)
Print Job Formats( Page 483)
Troubleshooting Printing Problems( Page 484)
Common Printing Problems( Page 484)
Troubleshooting the Printing Process( Page 487)
Troubleshooting Printing from an Operating System Other Than Windows( Page 488)
Troubleshooting Font-Related Printing Problems( Page 488)
Faxing in Windows XP Professional( Page 489)
Configuring Fax Service( Page 489)
Additional Resources( Page 492)
CHAPTER 12: Disk Management( Page 493)
New in Disk Management( Page 494)
Disk Management Overview( Page 495)
Basic and Dynamic Disks and Volumes( Page 498)
Basic Disks( Page 498)
Basic Volumes( Page 498)
Dynamic Disks( Page 499)
Dynamic Volumes( Page 500)
Converting Basic Disks to Dynamic Disks( Page 502)
Managing Volumes During Windows XP Professional Setup( Page 509)
Preparing Multidisk Volumes for Windows XP Professional( Page 510)
Creating Volumes During Windows XP Professional Setup( Page 511)
Installing Windows XP Professional on Dynamic Disks( Page 513)
Adding, Moving, and Importing Disks( Page 514)
Adding New Disks to a Computer( Page 514)
Moving Disks( Page 514)
Importing Foreign Disks( Page 518)
Managing GPT Disks in Itanium-based Computers( Page 520)
Required Partitions on GPT Disks( Page 522)
Creating Partitions During Setu Page of Windows XP 64-Bit Edition( Page 525)
Remote Disk and Command-Line Disk Management( Page 526)
Managing Disks on Remote Computers( Page 527)
Managing Disks from the Command Line by Using DiskPart( Page 528)
Managing Disks from the Command Line by Using Fsutil( Page 532)
Guidelines for Maintaining Disks and Volumes( Page 533)
Additional Resources( Page 534)
CHAPTER 13: File Systems( Page 535)
New in File Systems( Page 536)
File Systems Overview( Page 537)
Advantages of Using NTFS( Page 538)
When to Use FAT( Page 540)
Cluster Size( Page 541)
Size Limitations in NTFS and FAT File Systems( Page 543)
Formatting a Volume( Page 545)
NTFS File System( Page 547)
Features Available on NTFS Volumes( Page 547)
Converting Volumes to NTFS( Page 576)
Defragmenting NTFS Volumes( Page 582)
Optimizing NTFS Performance( Page 583)
NTFS Compatibility with Windows NT 4.0( Page 587)
Cleanu Page Operations on Windows NT Volumes( Page 588)
NTFS Recoverability( Page 589)
NTFS Data Structures( Page 591)
MS–DOS-Readable File Names on NTFS Volumes( Page 596)
FAT File System( Page 596)
Comparing FAT File Systems( Page 597)
FAT16 File System( Page 598)
FAT32 File System( Page 601)
File Names on FAT Volumes( Page 602)
Compact Disc File System( Page 603)
Universal Disk Format( Page 604)
File System Tools( Page 605)
File Names in Windows XP Professional( Page 606)
Additional Resources( Page 609)
CHAPTER 14: Backu Page and Restore( Page 611)
Technology Features( Page 612)
Backu Page Overview( Page 612)
Backu Page Types( Page 612)
Storage and Media( Page 613)
Security Considerations( Page 614)
Establishing a Backu Page Plan( Page 617)
Stand-Alone Computer( Page 619)
LAN Workgroups( Page 620)
Documenting Backup-and-Restore Procedures( Page 621)
Verify Operations( Page 622)
Backing U Page System State Data( Page 622)
Boot and System Files( Page 623)
Using the Backu Page Tool( Page 624)
Files Skipped During Backup( Page 626)
Volume Shadow Copy Technology( Page 626)
Automated System Recovery( Page 627)
Removable Storage( Page 629)
Available Backu Page Media( Page 633)
Encrypted Files( Page 634)
Backing U Page Files on Your Local Computer( Page 634)
Backing U Page Files on Remote Computers( Page 634)
Restoring Data( Page 635)
Restoring System State Data( Page 635)
Files from Third-Party Backu Page Programs( Page 636)
File Security Settings( Page 636)
Additional Resources( Page 636)
PART III: SECURITY( Page 637)
CHAPTER 15: Logon and Authentication( Page 639)
Authentication Overview( Page 640)
New in Windows XP Professional( Page 640)
Credentials and Validation( Page 642)
Security Principals( Page 643)
Security Groups( Page 645)
Types of Logon( Page 645)
Using RunAs to Start a Program( Page 647)
Authentication Protocols( Page 649)
Protocol Selection( Page 650)
NTLM( Page 651)
Kerberos V5 Authentication Protocol( Page 653)
Managing Credentials( Page 658)
Password Management( Page 660)
Smart Cards( Page 665)
Automating Logon( Page 667)
Authentication Policy Options( Page 669)
Account Policies( Page 670)
Local Policies( Page 672)
Auditing and Troubleshooting( Page 677)
Security Options( Page 677)
Audit Policy( Page 677)
Security Event Messages( Page 679)
Additional Resources( Page 680)
CHAPTER 16: Authorization and Access Control( Page 681)
Overview of Access Control( Page 682)
Important Terms( Page 682)
Key Concepts( Page 684)
Planning for Effective Access Control( Page 687)
User Accounts and Security Groups( Page 689)
User Account Creation( Page 689)
Types of Security Groups( Page 690)
Managing Permissions by Nesting Groups( Page 701)
Working with Access Control Lists( Page 702)
Access Control Entries( Page 706)
How Access Control Is Applied to New Objects( Page 707)
Default Permissions( Page 709)
Using CACLs( Page 714)
Managing User Rights by Using Security Groups( Page 714)
Security Grou Page Upgrade from Windows NT 4.0( Page 715)
Security Grou Page Creation in a Clean Installation( Page 715)
Managing Anonymous Logons( Page 718)
Managing Network Authentication( Page 718)
Using Security Policy( Page 721)
Software Restriction Policies( Page 722)
Security Templates( Page 724)
Working with Local Security Policy( Page 728)
Auditing and Analyzing Access Control( Page 735)
Enabling Auditing Policies( Page 736)
Using the Event Viewer( Page 739)
Using the Security Configuration and Analysis Snap-in( Page 740)
Configuring and Analyzing Operations by Using Secedit.exe( Page 745)
Additional Resources( Page 746)
CHAPTER 17: Encrypting File System( Page 747)
Overview of EFS( Page 748)
Components of EFS( Page 750)
Encrypting And Decrypting By Using EFS( Page 752)
What Can Be Encrypted( Page 753)
How Files Are Encrypted( Page 753)
Working with Encryption and Decryption( Page 758)
Remote EFS Operations on File Shares and Web Folders( Page 763)
Remote EFS Operations in a File Share Environment( Page 764)
Remote EFS Operations in a Web Folder Environment( Page 769)
Delivering EFS Certificates to Users( Page 771)
How EFS Uses Certificates( Page 771)
Determining Whether an EFS Certificate Exists( Page 772)
Obtaining an EFS Certificate in a Stand-Alone Environment( Page 772)
Using Enterprise Certification Authorities to Issue Certificates( Page 773)
Renewing Certificates and Keys( Page 774)
Replacing Self-Signed Certificates with CA-issued Certificates( Page 775)
Authorizing Multi-User Access to Encrypted Files( Page 776)
How Users Are Authorized for Access to Encrypted Files( Page 776)
Considerations for Sharing Encrypted Files( Page 778)
Sharing Encrypted Files( Page 779)
Taking Recovery Precautions( Page 780)
Data Recovery and Data Recovery Agents( Page 780)
Configuring Data Recovery Policy in a Stand-Alone Environment( Page 785)
Exporting and Importing EFS and DRA Certificates and Private Keys( Page 786)
Backing U Page and Restoring Encrypted Files or Folders( Page 788)
Recovering Encrypted Files( Page 789)
Strengthening Key and File Security( Page 789)
Certificate and Public Key Storage( Page 790)
Private Key Storage( Page 790)
Master Key Storage and Security( Page 791)
Enabling the Startu Page Key( Page 792)
Enabling 3DES( Page 794)
Increasing Security for Open Encrypted Files( Page 795)
Disabling EFS( Page 797)
Tips for Implementing EFS( Page 798)
Troubleshooting EFS( Page 800)
Unable to Encrypt Files( Page 800)
Unable to Decrypt Remote Files( Page 801)
Unable to Open Encrypted Files( Page 801)
Encrypted File Is Unencrypted When Copied or Moved( Page 803)
Virus Check Program Cannot Check All Files( Page 804)
Common Error Messages( Page 804)
Additional Resources( Page 805)
PART IV: NETWORKING( Page 807)
CHAPTER 18: Connecting Clients to Windows Networks( Page 809)
Microsoft Networking Overview( Page 810)
New in Microsoft Networking( Page 810)
Fundamental Configuration Tasks( Page 811)
Microsoft Network Environments( Page 813)
Peer-to-Peer Network Environment( Page 814)
Windows Domain Environment( Page 815)
Account Authentication( Page 820)
Authentication Methods( Page 820)
Logon Names( Page 821)
TCP/IP and Other Network Protocols( Page 822)
Benefits of TCP/IP( Page 822)
Configuring the Protocol Binding Order( Page 823)
Locating Resources by Publishing Objects( Page 824)
Computer Browser and Browsing Roles( Page 824)
Logon Scripts( Page 828)
Grou Page Policy and System Policy Settings( Page 829)
System Policy and Grou Page Policy Coexistence( Page 830)
Checking Local and Domain Policy Compatibility( Page 832)
Grou Page Policy Settings for Network Connections( Page 833)
Joining the Network Environment( Page 839)
Network Identification Wizard( Page 839)
Changing Windows Workgrou Page Membership( Page 840)
Manually Joining a Windows Domain( Page 840)
Confirming Domain and Workgrou Page Membership( Page 841)
Testing a Workgrou Page User Account( Page 841)
Testing a Domain User Account( Page 841)
Establishing a Secure Channel( Page 842)
Troubleshooting Microsoft Networking( Page 843)
Tools for Troubleshooting( Page 843)
Troubleshooting Joining Networks( Page 846)
Troubleshooting Logon Problems( Page 848)
Troubleshooting Grou Page Policy and System Policy( Page 850)
Troubleshooting My Network Places( Page 850)
Additional Resources( Page 850)
CHAPTER 19: Configuring TCP/IP( Page 851)
Overview of Windows XP Professional TCP/IP( Page 852)
Defining TCP/IP( Page 853)
TCP/IP Features in Windows XP Professional( Page 854)
Determining Network Requirements for TCP/IP( Page 856)
Installing and Configuring TCP/IP( Page 856)
Default and Manual Installation of TCP/IP( Page 856)
Configuring IP Properties( Page 857)
Verifying IP Installation( Page 858)
Using Netsh to Configure and Monitor Computers( Page 860)
Advanced IP Configuration( Page 863)
Understanding Internetwork Routing Strategy( Page 863)
IP Packet Transmission( Page 863)
Configuring the Local IP Routing Table( Page 864)
IP Security and Filtering( Page 871)
IPSec( Page 871)
Configuring IPSec Policies( Page 875)
TCP/IP Filtering( Page 878)
Configuring Multihoming( Page 879)
Configuring Multiple Network Adapters or Media Types( Page 880)
Multihoming Considerations( Page 881)
TCP/IP Troubleshooting( Page 883)
TCP/IP Troubleshooting Tools( Page 883)
Troubleshooting Routing( Page 888)
Troubleshooting Gateways( Page 889)
Additional Resources( Page 890)
CHAPTER 20: Configuring IP Addressing and Name Resolution( Page 891)
Overview of Addressing and Name Resolution( Page 892)
Types of IP Addresses( Page 892)
Types of IP Address Assignment( Page 893)
Types of TCP/IP Name Resolution( Page 894)
Enabling IP Address Assignment( Page 894)
Choosing an IP Address Assignment Method( Page 895)
Configuring DHCP( Page 896)
Configuring APIPA( Page 898)
Configuring an IP Address Manually( Page 900)
Configuring Multiple IP Addresses on a Network Adapter( Page 901)
Configuring an Alternate IP Address( Page 903)
Configuring TCP/IP Name Resolution( Page 904)
Choosing a Name Resolution Method( Page 905)
Configuring DNS to Resolve Host Names and Domain Names( Page 906)
Configuring Dynamic Update( Page 927)
Editing Hosts Files( Page 931)
Configuring NetBIOS Name Resolution( Page 931)
Troubleshooting Name Resolution and Addressing( Page 941)
Troubleshooting IP Addressing( Page 945)
Additional Resources( Page 946)
CHAPTER 21: Connecting Remote Offices( Page 947)
Remote Office Overview( Page 948)
Local Connections in a Remote Office( Page 948)
Remote Connections to a Private Network( Page 949)
Connecting to the Internet( Page 949)
What’s New( Page 949)
Connection Types( Page 950)
Remote Access Connection Types( Page 951)
VPN Connection Types( Page 953)
Local Connection Types( Page 954)
Direct Cable Connections( Page 957)
Wide Area Network Connection Types( Page 958)
Incoming Connection Types( Page 960)
Connection-defined Connections( Page 960)
Managing Outgoing Connections( Page 961)
Using the New Connection Wizard to Choose Connection Types( Page 962)
What Can I Configure?( Page 965)
Configuring Remote Connections( Page 966)
Configuring Advanced Settings( Page 966)
Deploying Connection Manager( Page 972)
Accessing Network Resources( Page 973)
Managing Incoming Connections( Page 974)
Configuring Home Networks( Page 976)
Home Network Hardware Requirements( Page 977)
Home Network Configuration Instructions( Page 978)
Home and Small Office Local Connections( Page 979)
Remote Network Security( Page 982)
Authentication( Page 983)
Authentication Protocols( Page 985)
Data Encryption( Page 989)
Internet Connection Sharing( Page 991)
Using DHCP with ICS( Page 993)
ICS Scenario: Connecting Your Branch Office’s Intranet to the Internet( Page 994)
Internet Connection Firewalls( Page 1000)
Troubleshooting Remote Office Network Connections( Page 1001)
Troubleshooting Tools( Page 1001)
Troubleshooting Common Local Area Configuration Problems( Page 1003)
Troubleshooting Common Remote Access Configuration Problems( Page 1003)
Troubleshooting Common Internet Access Configuration Problems( Page 1008)
Additional Resources( Page 1010)
CHAPTER 22: Configuring Telephony and Conferencing( Page 1011)
Overview of Telephony and Conferencing( Page 1012)
Telephony Environments( Page 1012)
TAPI 3.1( Page 1018)
Quality of Service( Page 1021)
Configuring Telephony and Conferencing( Page 1022)
Configuring Modems( Page 1023)
Configuring ISDN Support( Page 1030)
Configuring Client/Server Telephony Support( Page 1032)
Configuring TAPI IP Telephony( Page 1033)
Troubleshooting Telephony and Conferencing( Page 1036)
Troubleshooting Modems( Page 1036)
Troubleshooting PSTN Telephony( Page 1038)
Troubleshooting Conferencing Applications( Page 1039)
Additional Resources( Page 1041)
PART V: INTEROPERABILITY( Page 1043)
CHAPTER 23: Interoperating with UNIX( Page 1045)
Overview of Windows XP Professional and UNIX Connectivity( Page 1046)
Integrating Windows XP Professional into a UNIX Environment by Using Services for UNIX( Page 1046)
Migrating UNIX Applications by Using Interix 2.2( Page 1047)
Services for UNIX( Page 1050)
File Access( Page 1050)
User Authentication and Account Management( Page 1052)
UNIX Printing( Page 1055)
Choosing Services for UNIX Components( Page 1057)
Administration and Scripting( Page 1058)
Microsoft Management Console (MMC)( Page 1059)
Nfsadmin Tool( Page 1060)
Nisadmin Tool( Page 1060)
Korn Shell( Page 1060)
UNIX Tools( Page 1070)
Scripting( Page 1076)
Troubleshooting( Page 1076)
Commonly Encountered Errors( Page 1076)
Additional Resources( Page 1079)
CHAPTER 24: Interoperating with NetWare( Page 1079)
Overview of Windows XP Professional and NetWare Connectivity( Page 1080)
Client Service( Page 1080)
Network Protocols( Page 1083)
Configuring Client Service for NetWare( Page 1088)
Setting the Preferred Server or Default Tree and Context( Page 1091)
Running Login Scripts( Page 1093)
Accessing NetWare Resources( Page 1096)
Accessing NetWare Volumes( Page 1097)
Accessing NetWare Printers( Page 1099)
Administering NetWare Servers Through Windows XP Professional( Page 1100)
Windows XP Professional and NetWare Security( Page 1103)
Comparing Windows XP Professional and NetWare Security( Page 1104)
NDS Object and Property Rights( Page 1106)
Troubleshooting Windows XP Professional and NetWare Connectivity( Page 1107)
Using Windows XP Professional Troubleshooting Tools( Page 1107)
Troubleshooting Connectivity Problems( Page 1108)
Troubleshooting NetWare Login Scripts( Page 1114)
Troubleshooting Other Problems( Page 1115)
Additional Resources( Page 1116)
CHAPTER 25: Interoperating with IBM Host Systems( Page 1117)
Overview of Interoperability with IBM Host Systems( Page 1118)
Host Integration Server 2000( Page 1120)
IBM Systems Network Architecture( Page 1122)
Host Integration Server 2000 Client Software Components( Page 1124)
Installing Host Integration Server 2000 Client Software and Components( Page 1125)
Managing Host Integration Server 2000( Page 1127)
Windows XP Professional and IBM Host Security( Page 1128)
Authentication( Page 1129)
Host Resource Allocation( Page 1130)
Data Encryption( Page 1131)
Troubleshooting( Page 1132)
Troubleshooting Connectivity Problems( Page 1132)
Changing the Locally Administered Address( Page 1136)
Additional Resources( Page 1136)
PART VI: SYSTEM TROUBLESHOOTING( Page 1137)
CHAPTER 26: Troubleshooting Concepts and Strategies( Page 1139)
Troubleshooting Overview( Page 1140)
Troubleshooting Concepts( Page 1141)
Identify Problem Symptoms( Page 1141)
Check Technical Information Resources( Page 1143)
Review Your System’s History( Page 1146)
Check Firmware Versions( Page 1148)
Troubleshooting Strategies( Page 1152)
Isolate and Resolve Hardware Problems( Page 1152)
Isolate and Resolve Software Issues( Page 1153)
Avoid Common Pitfalls( Page 1154)
Document and Evaluate the Results( Page 1159)
Take Proactive Measures( Page 1160)
Summary and Checklist( Page 1162)
Additional Resources( Page 1164)
CHAPTER 27: Troubleshooting Disks and File Systems( Page 1165)
New in Troubleshooting Disks and File Systems( Page 1166)
Maintenance and Troubleshooting Tools( Page 1167)
Chkdsk( Page 1168)
Disk Defragmenter( Page 1182)
Recovery Console( Page 1188)
Automated System Recovery( Page 1188)
DiskProbe( Page 1189)
Dmdiag( Page 1190)
Disk and Volume Status Descriptions( Page 1191)
Disk Status Descriptions( Page 1192)
Volume Status Descriptions( Page 1194)
Viruses That Affect the MBR and Boot Sectors( Page 1196)
MBR Viruses( Page 1196)
Boot Sector Viruses( Page 1197)
How MBR and Boot Sector Viruses Affect Windows XP Professional( Page 1197)
Guidelines for Avoiding Viruses( Page 1198)
Treating an MBR or Boot Sector Virus Infection( Page 1199)
Repairing Damaged MBRs and Boot Sectors in x86-based Computers( Page 1200)
Restoring the MBR( Page 1201)
Replacing the Boot Sector( Page 1203)
Sto Page Messages for Disks and File Systems( Page 1205)
Other Disk Problems( Page 1206)
Disk Sectors Critical to Startup( Page 1207)
Disk Sectors on MBR Disks( Page 1208)
Disk Sectors on GPT Disks( Page 1230)
Additional Resources( Page 1239)
CHAPTER 28: Troubleshooting Startup( Page 1241)
Understanding the Startu Page Process( Page 1242)
Startu Page Phases for x86-based Systems( Page 1242)
Startu Page Phases for Itanium-based Systems( Page 1256)
Summary of the Startu Page Process( Page 1261)
Following a Process for Startu Page and Recovery( Page 1262)
Restoring to the Last Known Good Configuration( Page 1263)
Starting in Safe Mode( Page 1265)
Rolling Back Drivers( Page 1266)
Using System Restore to Undo Changes( Page 1267)
Temporarily Disabling Applications and Processes( Page 1267)
Temporarily Disabling Services( Page 1275)
Uninstalling Software( Page 1282)
Using Recovery Console( Page 1282)
Reviewing and Correcting Boot.ini Settings on x86-based Systems( Page 1286)
Reviewing and Correcting NVRAM Startu Page Settings on Itanium-based Systems( Page 1295)
Performing a Parallel Windows XP Professional Installation( Page 1297)
Saving System Files and Settings by Using Automated System Recovery( Page 1297)
Recovering from Hardware-related Problems( Page 1298)
Checking Your Hardware( Page 1298)
Simplifying Your Hardware Configuration( Page 1302)
Checking the Operating System Configuration( Page 1303)
Diagnosing Disk-related Problems( Page 1303)
Resolving Shutdown Problems( Page 1305)
Resolving Power Management Problems on x86-based Systems( Page 1306)
Additional Resources( Page 1310)
PART VII: APPENDICES( Page 1311)
APPENDIX A: System Files Reference( Page 1313)
System Files( Page 1314)
Startu Page Files( Page 1314)
Folders on the Local Disk( Page 1315)
Windows Folder( Page 1316)
System32 Folder( Page 1317)
Extracting Files from the Operating System CD( Page 1319)
Additional Resources( Page 1321)
APPENDIX B: User Rights( Page 1323)
Logon Rights( Page 1324)
Privileges( Page 1326)
APPENDIX C: Common Sto Page Messages for Troubleshooting( Page 1333)
Sto Page Message Overview( Page 1334)
Defining Terms( Page 1335)
Sto Page Message Screen Sections( Page 1337)
Types of Sto Page Messages( Page 1339)
Memory Dum Page Files( Page 1343)
Using Memory Dum Page Files to Analyze Sto Page Errors( Page 1348)
Sto Page Message System Event Log Reporting( Page 1352)
Preventing System Restarts After a Sto Page Error( Page 1352)
Common Sto Page Messages( Page 1353)
Sto Page 0x0000000A or IRQL_NOT_LESS_OR_EQUAL( Page 1353)
Sto Page 0x0000001E or KMODE_EXCEPTION_NOT_HANDLED( Page 1354)
Sto Page 0x00000024 or NTFS_FILE_SYSTEM( Page 1357)
Sto Page 0x0000002E or DATA_BUS_ERROR( Page 1358)
Sto Page 0x0000003F or NO_MORE_SYSTEM_PTES( Page 1359)
Sto Page 0x00000050 or PAGE_FAULT_IN_NONPAGED_AREA( Page 1361)
Sto Page 0x00000077 or KERNEL_STACK_INPAGE_ERROR( Page 1362)
Sto Page 0x00000079 or MISMATCHED_HAL( Page 1364)
Sto Page 0x0000007A or KERNEL_DATA_INPAGE_ERROR( Page 1365)
Sto Page 0x0000007B or INACCESSIBLE_BOOT_DEVICE( Page 1367)
Sto Page 0x0000007F or UNEXPECTED_KERNEL_MODE_TRAP( Page 1369)
Sto Page 0x0000009F or DRIVER_POWER_STATE_FAILURE( Page 1371)
Sto Page 0xBE or ATTEMPTED_WRITE_TO_READONLY_MEMORY( Page 1373)
Sto Page 0xC2 or BAD_POOL_CALLER( Page 1373)
Sto Page 0x000000CE or DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS( Page 1375)
Sto Page 0x000000D1 or DRIVER_IRQL_NOT_LESS_OR_EQUAL( Page 1376)
Sto Page 0x000000D8 or DRIVER_USED_EXCESSIVE_PTES( Page 1377)
Sto Page 0x000000EA or THREAD_STUCK_IN_DEVICE_DRIVER( Page 1377)
Sto Page 0x000000ED or UNMOUNTABLE_BOOT_VOLUME( Page 1378)
Sto Page 0x000000F2 or HARDWARE_INTERRUPT_STORM( Page 1379)
Sto Page 0xC000021A or STATUS_SYSTEM_PROCESS_TERMINATED( Page 1381)
Sto Page 0xC0000221 or STATUS_IMAGE_CHECKSUM_MISMATCH( Page 1383)
Hardware Malfunction Messages( Page 1384)
Sto Page Message Checklist( Page 1384)
Check Your Software( Page 1385)
Check Your Hardware( Page 1388)
Additional Resources( Page 1390)
APPENDIX D: Tools for Troubleshooting( Page 1393)
Using This Appendix( Page 1394)
Installing and Running Troubleshooting Tools( Page 1394)
Installing Tools( Page 1395)
Tool Interface Types( Page 1396)
Hel Page and Support Center( Page 1399)
Disaster Recovery Tools( Page 1400)
Last Known Good Configuration( Page 1402)
Using Safe Mode( Page 1404)
Device Driver Roll Back( Page 1407)
System Restore( Page 1408)
Using System Restore( Page 1410)
Add or Remove Programs( Page 1416)
Recovery Console( Page 1417)
Backup( Page 1434)
Automated System Recovery( Page 1435)
Application and Service Tools( Page 1435)
Bootcfg( Page 1438)
Boot Logging( Page 1439)
Dependency Walker( Page 1440)
Device Manager( Page 1440)
DirectX Diagnostic Tool( Page 1440)
Dr. Watson( Page 1443)
Error Reporting( Page 1444)
Event Query( Page 1445)
Event Triggers( Page 1445)
Event Viewer( Page 1445)
Global Flags Editor( Page 1446)
Grou Page Policy Snap-in( Page 1447)
Grou Page Policy Results( Page 1447)
Grou Page Policy Update( Page 1448)
Kernel Debugger( Page 1448)
Memory Pool Monitor( Page 1449)
Online Crash Analysis Web Site( Page 1449)
OpenFiles( Page 1449)
Performance Snap-in( Page 1449)
Process and Thread Status( Page 1450)
Program Compatibility Wizard( Page 1450)
Registry Editor( Page 1451)
Resultant Set of Policy( Page 1453)
RunAs (Command-Line Tool)( Page 1454)
RunAs (GUI Feature)( Page 1454)
SC( Page 1454)
Services Snap-in( Page 1455)
Shutdown Event Tracker( Page 1455)
System Configuration Utility( Page 1457)
Systeminfo( Page 1460)
System Information( Page 1460)
Task Kill( Page 1463)
Task List( Page 1464)
Task Manager( Page 1464)
Uninstall Windows XP Professional( Page 1465)
Remote Management Tools( Page 1466)
Computer Management Tool( Page 1467)
Remote Desktop( Page 1467)
Remote Assistance( Page 1469)
Telnet( Page 1474)
Disk and Maintenance Tools( Page 1474)
Chkdsk( Page 1475)
Disk Cleanup( Page 1476)
Disk Defragmenter( Page 1477)
Disk Management and DiskPart( Page 1477)
Fsutil.exe( Page 1478)
My Computer Information in Hel Page and Support Center( Page 1478)
Windows Update( Page 1479)
System File Tools( Page 1481)
Driver Signing and Digital Signatures( Page 1481)
Driver Query( Page 1484)
Windows File Protection( Page 1486)
Networking Tools( Page 1487)
GetMac( Page 1488)
IP Config( Page 1489)
IP Security Monitor( Page 1489)
NetBT Statistics( Page 1490)
Netsh( Page 1490)
Netstat( Page 1490)
Network Connectivity Tester( Page 1491)
Network Diagnostics( Page 1491)
Network Monitor Capture Utility( Page 1491)
NSLookup( Page 1492)
PathPing( Page 1492)
Additional Resources( Page 1493)
APPENDIX E: Security Event Messages( Page 1495)
Viewing Security Event Messages( Page 1496)
System Event Messages( Page 1497)
Logon Events( Page 1498)
Object Access Events( Page 1504)
Privilege Use Events( Page 1506)
Detailed Tracking Events( Page 1506)
Policy Change Events( Page 1508)
User Management Events( Page 1512)
Account Logon Events( Page 1522)
Directory Service Access Events( Page 1525)
APPENDIX F: Device Manager Error Codes( Page 1527)
Additional Resources( Page 1534)
APPENDIX G: Differences with Windows XP Home Edition( Page 1535)
Windows XP Home Edition Overview( Page 1536)
Comparing Windows XP Home Edition and Windows XP Professional Feature Differences( Page 1537)
Corporate Management( Page 1538)
Corporate Security( Page 1538)
Networking Features( Page 1539)
File System Features( Page 1540)
User Interface Features( Page 1540)
Advanced or Power-User Features( Page 1541)
Additional Resources( Page 1541)
APPENDIX H: Differences with Windows XP 64-Bit Edition( Page 1543)
Overview of Windows XP 64-Bit Edition( Page 1544)
Features Not Supported in Windows XP 64-Bit Edition( Page 1545)
Windows XP 64-Bit Edition Requirements( Page 1547)
Additional Resources( Page 1549)
APPENDIX I: Accessibility for People with Disabilities( Page 1551)
Customizing for Accessibility( Page 1552)
Windows Installer( Page 1552)
Grou Page Policy( Page 1552)
User Profiles( Page 1552)
Customizing the Desktop( Page 1554)
Utility Manager( Page 1554)
Configuring Accessibility Features( Page 1555)
Setting Accessibility Options by Type of Disability( Page 1556)
Options for Users with Vision Impairments( Page 1557)
Options for Users with Mobility Impairments( Page 1562)
Options for Users with Hearing Impairments( Page 1570)
Options for Users with Cognitive Disabilities( Page 1572)
Options for Users Who Experience Seizures( Page 1573)
Adding Assistive Technology Products( Page 1574)
Additional Resources( Page 1576)
GLOSSARY( Page 1577)
INDEX( Page 1625)
Read an Excerpt
Chapter 7: Supporting Mobile Users
For organizations that support mobile users, important considerations are hardware, power management, and security on portable computers. In addition, some administrative concerns are relevant to roaming users in organizations that use roaming user profiles or Folder Redirection. Microsoft
® Windows
® XP Professional can be configured and administered to provide support for mobile users, and includes features and tools that are designed specifically for portable computer users.
Related Information
- For more information about remote networking, see "Connecting Remote Offices" in this book.
- For more information about IntelliMirror® management technologies such as Offline Files, Folder Redirection, and roaming user profiles, see "Managing Files and Folders" in this book.
Overview of Windows XP Professional Support for Mobile Users
Windows XP Professional offers several new features for mobile users. In addition, several Microsoft
® Windows NT
® version 4.0 and Microsoft
® Windows
® 2000 features, as well as processes such as starting, hibernating, standby, and resuming, are enhanced in Windows XP Professional in order to increase functionality for mobile users.
Fast system startup
Windows XP Professional provides improved system boot and resume performance, resulting in fast system startup. The standby feature reduces power consumption by turning off the display, hard disk, and other system components while preserving the contents of memory. Standby also allows you to return to work quickly after waking the system. The hibernate feature saves the entire system state to the hard disk and turns off the computer. When the system restarts from hibernation, the desktop and all applications are restored to their previous state.
Folder Redirection
Folder Redirection allows the administrator to direct the contents of special shell folders, such as My Documents, to an alternate location on a server or a network share. When Folder Redirection is applied to these special folders, the redirection is transparent to the user; he or she can continue to work with documents on the server as if the documents are on the local drive. Folder Redirection is best used in conjunction with Offline Files.
Offline Files
The Offline Files feature allows users to disconnect from the network and work as if they are still connected. When the computer is offline, files and folders appear in the same directory that they appear in online. By using Offline Files, users can continue to work with copies of files that are available on a network when they are not connected to the network. Offline Files stores the data in the computer's cache to make network files available offline. When users reconnect to the network, Offline Files synchronizes the files stored on the local drive with the files on the network.
Hibernation
The hibernation feature allows the Microsoft® Windows® desktop to be restored quickly after a computer is shut down. When a computer is put into hibernation, the current system state is saved to the hard disk before the computer is turned off. Then, when a user restarts the computer, Windows restarts any programs that were running when the computer entered hibernation, and restores all previous network connections.
ACPI and APM support
Windows XP Professional supports the Advanced Configuration and Power Interface (ACPI) specification for robust power management and system configuration. Windows XP Professional also provides some power management features for portable computers with a legacy Advanced Power Management (APM) version 1.2–based BIOS.
Enhanced battery life
Windows XP Professional provides several new features to enhance battery life. Windows XP Professional automatically dims a laptop’s display when it is switched to battery power, and turns off the display panel when the laptop’s lid is closed. In addition, Windows XP Professional features intelligent processor throttling to reduce CPU power consumption. Windows XP Professional also provides more accurate estimates of remaining battery life.
Processor performance control
Windows XP Professional provides native support for processor performance control technologies such as Intel® SpeedStep® Technology, AMD® PowerNow!, and Transmeta® LongRun. Windows XP Professional also features an adaptive processor performance control algorithm that dynamically balances system performance and power consumption, based on the current CPU workload and remaining battery life.
Battery and processor metrics
Windows XP Professional displays information about processor performance and battery activity in System Monitor. The processor performance data available includes the current processor frequency and power consumption. Battery information provided includes the charge and discharge rates, voltage, and remaining capacity.
Wake-on-critical battery
Windows XP Professional supports wake-on-critical battery for portable computers that implement this feature. This allows a computer to awaken from standby when battery power becomes critically low and switch to hibernation to prevent data loss.
Dynamic configuration of hot added devices
When you insert and remove devices such as CardBus cards or Universal Serial Bus (USB) devices, Windows XP Professional detects and configures them without requiring you to restart the computer.
Hot and cold docking or undocking
With your portable computer fully powered, you can dock to a docking station and undock from a docking station without shutting down the computer.
Table 7.1 lists the new or enhanced features in Windows XP Professional that support mobile users, and indicates which of these features are available in Microsoft® Windows® 95, Microsoft® Windows® 98, Microsoft® Windows NT® Workstation 4.0, and Microsoft® Windows® 2000 Professional.
Table 7.1 Mobile User Profile Computing Features in Windows XP Professional
| Windows XP Professional Feature | Windows 95 | Windows 98 | Windows NT 4.0 | Windows 2000 Professional | Windows XP Professional |
| Offline Files | | | | X | X |
| Folder Redirection | | | | X | X |
| Roaming User Profiles | | | X | X | X |
| Briefcase | X | X | X | X | X |
| Hibernate | | | | X | X |
| Power management | X | X | | X | X |
| ACPI support | | X | | X | X |
| APM support | X | X | | X | X |
| Standby (APM and ACPI only) | X | X | | X | X |
| Battery management (APM and ACPI only) | | X | | X | X |
| Dynamic configuration of PC Cards | X | X | | X | X |
| Hot and cold docking or undocking | X | X | | X | X |
| Hot insertion and removal of devices in hot swappable module bays | | X | | X | X |
Setting Up a Portable Computer
Before you can make use of mobile computing in your organization, you need to identify the critical operating system components, properties, and features that you will need to configure on your portable computers. You must also ensure that you address critical configuration issues that are specific to portable computers.
Check BIOS Compatibility
Windows XP Professional supports the Advanced Configuration and Power Interface (ACPI) specification, which enables reliable system configuration and power management features. If a portable computer has an ACPI-compliant BIOS, use the Hardware Compatibility List (HCL) to verify that it is compatible with Windows XP Professional. If it is not, upgrade the BIOS to the latest available version. If you upgrade to an ACPI-based BIOS on your portable computer after you install Windows XP Professional, and your old BIOS was either not ACPI-compliant or not compatible with Windows XP Professional, you must reinstall Windows XP Professional in order to enable ACPI and the power management features that it supports. For more information about hardware compatibility, see the Hardware Compatibility List link on the Web Resources page at http://www.microsoft.com/windows/reskits/webresources. For more information about upgrading the BIOS in a portable computer, see the Hardware Update link on the Web Resources page at http://www.microsoft.com/windows/reskits/webresources.
If a portable computer has an APM-based BIOS, run the Apmstat.exe support tool to determine whether the BIOS has any known problems. If the APM BIOS is known to be compatible with Windows XP Professional, APM power management is enabled by default. You can install Apmstat by running Setup.exe, which is located in the \Support\Tools folder on the Windows XP Professional operating system CD.
Grant Installation and Configuration Rights
If you configure a portable computer for a user who travels frequently, add this user to the Power Users group. The user can then install, uninstall, and configure software. If a hardware device fails or needs to be reinstalled while not connected to the network, a member of the Power Users Group can reinstall the device, but only if the driver package meets the following conditions:
- Is present on the system (that is, it does not need to be installed from media, such as a CD provided by a vendor).
- Is digitally signed. For more information about driver signing, see "Managing Devices" in this book.
- Can be installed without any user interface.
If a user must be able to add hardware even if the driver package does not meet these conditions, add this user to the Administrators group.
All other types of users should be members of the Users group, which does not allow them to install, uninstall, or configure software and hardware, except when the above three conditions are true. In general, no Users should be members of the Administrators group unless they need to install, uninstall, and configure non-Plug and Play hardware and drivers. For more information about driver signing or configuring hardware and drivers see "Managing Devices" in this book.
Verify Hardware Configuration
After you install new hardware on a portable computer, you need to verify that all devices function when the computer is both docked and undocked. Log on in turn as a member of the Power Users and the Users groups to test the devices, as well as the docking and undocking functionality. This testing is necessary because some hardware can be fully installed only by a member of the Administrators group. When members of the Power Users or Users group add the devices, the driver packages might not be installed.
Windows XP Professional uses one hardware profile to load drivers when the portable computer is docked (the Docked Profile) and another when the computer is undocked (the Undocked Profile). Verify that the properties are set correctly for both the Docked Profile and the Undocked Profile. For more information about docked and undocked profiles, see "Managing Hardware on Portable Computers" later in this chapter.
Configure Power Management Options
Windows power management is based on the concept of power schemes. A power scheme is a group of preset power options that are passed to the operating system to control a computer's power management behavior. Power schemes are presented to the user in the Power Management Control Panel option.
The power policy used when the computer is powered by AC (utility) power can be different than the policy that is used when the computer is powered by a battery.
Verify that the power schemes that are available are appropriate for the target user environments. The most useful power schemes for portable computers are Portable/Laptop, Presentation, and Max Battery. Using the default power scheme settings might not always be the best configuration. You might need to explore the best configuration for the user's needs.
Install Applications
All software and software components must be installed locally and run locally on portable computers. You must therefore make sure that you do not have any partially installed programs or distributed programs installed on a portable computer that is frequently used offline. Only Administrators can install software for personal digital assistants (PDA) because some PDA software cannot be installed by members of the Power Users group. Also, only members of the Administrators group can use the Internet Connection wizard to configure an Internet connection.
Configure Offline File Storing
If you have files and folders that you want to make available offline for mobile users, enable and configure file-storing settings on the server or network share. This is particularly important for folders such as My Documents that have been redirected to a network share or a server. Also, make sure that you have configured all offline files settings, including synchronization settings, on the portable computer.
If a user uses an e-mail program or a Web browser, be sure to configure the e-mail program and the Web browser for offline content.
Configure Security
Because portable computers are vulnerable to theft, you must ensure that they are configured securely. Format all hard disks as NTFS and apply the appropriate permissions to files and folders that contain sensitive data. Also, encrypt files and folders that contain sensitive data, and require users to use strong passwords for logging on both locally and on the network. You might also want to encrypt the Offline Files cache, so that any network files made available offline are also encrypted. For more information about encrypting files and folders, see "Encrypting File System" in this book.
Configure Roaming User Profiles and Folder Redirection
If you are supporting roaming desktop users or portable computer users who are connected directly to a network most of the time, configuring roaming user profiles and Folder Redirection can provide a number of advantages, such as fast computer replacement and the storage of backup copies of data on the network. If portable computers in your organization are rarely connected to the network or are connected remotely most of the time, however, do not use roaming user profiles or Folder Redirection. For more information about roaming user profiles and Folder Redirection, see "Configuring Roaming User Profiles and Folder Redirection" later in this chapter....