(Other Format - BK&CD ROM)
This official MCSE Training Kit teaches IT professionals how to install, configure, and administer the Windows 2000 Server operating system -- as they prepare for the corresponding MCP exam. Topics include administering system resources such as printers, files and folders, applications, and web sites; configuring and managing client computers, server computers, and other hardware devices and drivers; and optimizing the system components that provide high availability, load balancing, and disaster recovery capabilities. Students learn through an integrated system of skills-based tutorials and hands-on lab exercises. An economical alternative to classroom instruction, this kit enables students to set their own pace and learn by doing.
Provides from-the-source information and hands-on practice supporting Microsoft’s next-generation server operating system -- including preparation for the corresponding MCP exam
Written for information technology professionals who plan to take the Microsoft Certified Professional exam 70-215: Installing, Configuring, and Administering Microsoft Windows 2000 Server. Topics include unattended installations, file systems, active directory services, network protocols, security, and other issues. The CD-ROM contains supplemental articles and files for use in hands-on exercises. Annotation c. Book News, Inc., Portland, OR (booknews.com)
More Reviews and RecommendationsFounded in 1975, Microsoft (Nasdaq 'MSFT') is the worldwide leader in software for personal and business computing. The company offers a wide range of products and services designed to empower people through great software-any time, any place, and on any device.
Reader Rating:
See Detailed Ratings
August 24, 2000: Like always Microsoft Press' books are long, that's nothing new. They do cover a lot of material that is not the test, and they do forget some points. Anyway, the book was not bad, it got me to pass the test. You do need the evaluation copy of the Windows 2000 server in order to follow up with the exercises, but you can do what I did. I went with my book to one of the local Microsoft offices and explained my case, and they kindly gave me an evaluation copy. I do recommend PRACTICE, you do need the experience to pass the test. There is no way that you can do it exclusively by studying one book. Microsoft has made the tests really hard, so you do have to study and practice in order to pass. GOOD LUCK!!!
Reader Rating:
See Detailed Ratings
July 21, 2000: If you are well-experienced with personal computers and have at least a reasonable networking experience, you can probably handle the material presented here. This book is aimed at the person who is working on Microsoft certification. As such it does the best job of any tools currently available in preparing you for the 70-215 (Server) test. To take full advantage of the material and exercises, you will need two computers capable of running Win2k advanced server. They will need to be connected by hub or switch. Don't be fooled by the title. Even if you are not interested in certification, this is still a good book of the network administrator. Topics that I felt were well covered are user profiles, unatteded installations, and group policies. Topics that could have used more treatment included shared/NTFS permissions and remote administration. Perhaps these topics are covered more in other books in the series. As do other books in the series, this one has an outline of the tested material and pointers to where the material can be found. These books are much like the Microsoft Official Curriculum with the addition of an index. This index was a little lean, I felt. The book in general was quite clean and almost error-free; including the hands-on exercises which were very helpful. This alone would make the book outstanding in view of the bulk of the books in this genre being full of errors.
This official MCSE Training Kit teaches IT professionals how to install, configure, and administer the Windows 2000 Server operating system-asthey prepare for the corresponding MCP exam. Topics include administering system resources such as printers, files and folders, applications, andWeb sites; configuring and managing client computers, server computers, and other hardware devices and drivers; and optimizing the systemcomponents that provide high availability, load balancing, and disaster recovery capabilities. Students learn through an integrated system of skills-based tutorials and hands-on lab exercises. An economical alternative to classroom instruction, this kit enables students to set their own pace andlearn by doing.
Written for information technology professionals who plan to take the Microsoft Certified Professional exam 70-215: Installing, Configuring, and Administering Microsoft Windows 2000 Server. Topics include unattended installations, file systems, active directory services, network protocols, security, and other issues. The CD-ROM contains supplemental articles and files for use in hands-on exercises. Annotation c. Book News, Inc., Portland, OR (booknews.com)
Loading...A
Access Control Entries (ACLs), 26
access concentrator, 593-594
accessing
Add/Remove Hardware Wizard, 702
ATM, 461
backups, 722
Device Manager snap-in, 703
files/folders, 687-688
GPOs, 377
group accounts, 358
hardware profiles, 707
IIS, 828
metabases, 844
printers, 428-429, 688
Recovery Console, 745
RRAS server, 574, 584-586
security, 674
Terminal Services, 884
User mode, 313
VPNs, 600
Web sites, 854-856
WebDAV, 869
accounts. See group accounts; user accounts
ACLs (Access Control Entries), 26
Action menu (MMC), 308
activating license servers, 890-891
Active Desktop, enabling, 892
Active Directory, 3, 4. See also directory services
administration, 300-301
auditing, 683, 686, 688
APIs, 248
data model, 247
database layer, 254
Delegation of Control wizard, 299-300
directory database, 272
distinguished names (DN), 244
DNS, 24
domains, 23, 26-27, 31, 294-295, 681
DSA, 252-254
Extensible Storage Engine (EXE), 254-255
Find drop-down menu, 292
forests, 28-29
global catalogs, 28, 242
globally unique identifier (GUID), 245
GPOs, 677
IIS, 844
In drop-down menu, 292
inheritance, 298
Installation Wizard, 269-271
Kerberos protocol, 663
LDAP, 24, 239, 250, 252
logon traffic, 268
Manager, 276
multimaster replication, 253
name formats, 24-25
namespaces
contiguous/disjointed, 243
external/internal, 257-260
first layer, 261-262
root domain, 261
second layer, 261-262
objects, 25-26, 287-288, 688
administration, 247, 298-299
creating, 288-290
deleting, 293
identification, 253
locating, 290-292
moving, 294-296
organizational units (OU), 26, 265, 285-286
orphan pruners, 445
permissions, 296-298
printing, 442-443
protocols, 248
publishing applications, 379
referrals, 254
relative distinguished name, 245
replication, 253, 268
results, 293
scalability, 23
schemas, 28, 241, 247
security model, 247
services, 240
sites, 32
stand-alone servers, 274
transaction processing, 253
trees, 27-28
trust relationships, 29-31
user principal name (UPN), 246
Users and Computers snap-in, 325
virtual containers, 250
Active Server Pages (ASP), 843-844, 850, 870
adding. See also installation
aliases, 611
applications, 893-894
components, 69
disks, 159
domain controllers, 270
FTP sites, 866
GPOs, 386
hardware, 701-702
memberships, 355, 362, 365, 371-373
objects, 285-287
resource records, 527
Server02, 277-278
sites, 387
snap-ins, 385-386
Web sites, 866
addresses
allocation, 573
editing, 333-334
network address translation (NAT), 556
private, 472-473
remote access, 573
static, 469-471, 576
VPNs, 599
administration, 247
Administrator account, 320-321
built-in accounts, 366, 368
certificates, 636-638
delegation, 829
Dfs, 215
domains, 23
group accounts, 360-361
IIS, 827
integrated tools, 5
objects, 298-299
passwords, 68
remote, 884
Web sites, 864-865
Administration tools
installation, 279-280
Telnet Service, 882-883
Terminal Services, 886, 892, 900-901
ADSL (Asymmetric Digital Subscriber Line), 568
advanced certificate configuration, 636
agents, 787
alerts, 802-803
algorithms, 622
alias files, 609, 611
allocation, addresses,573
Alpha-based operating systems, 12
analog connections
domains, 22
analysis, security, 674-676
anonymous authentication, 871
answer files, 99-105, 112, 139-140
anti-replay datagrams, 622
API (application programming interface), 248, 570, 863
AppleTalk, 463, 552, 558
Application layer (TCP/IP), 469
Application Server mode (Terminal Services), 884-885, 901-904
applications
adding, 893-894
answer files, 139-140
deployment, 894-895
distribution, 378
installation, 141
log files, 689
publishing, 379, 393-394
Readme.doc files, 41
remote sessions, 895
RRAS, 560
Task Manager, 815
architecture
authentication, 645
Certificate Services, 629-632
drivers, 14-18
environment subsystems, 9
Executive, 10, 11
GDI, 12
GPOs, 382
HAL, 12, 13
I/O Manager, 11
integral subsystems, 10
Interprocess Communication Manager, 11
kernal mode, 7, 8
Object Manager, 12
Plug and Play Manager, 12
Power Manager, 12
Process Manager, 12
Security reference monitor, 11
VMM, 11
user mode, 7, 8
archives, log files, 691
arp utility, 468, 473
ASP (Active Server Pages), 870
assigning
computer names, 76
folders, 350-352
profiles, 337, 341-342, 348-350
static IP addresses, 576
Asymmetric Digital Subscriber Line (ADSL), 568
Asychronous NetBEUI, 569
Asynchronous Transfer Mode (ATM) protocol, 458-459, 568
accessing, 461
ATM over xDSL, 460-461
attributes
certificates, 627
NTFS, 186
objects, 25
auditing, 685
Active Directory, 683, 686, 688
configuration, 684-686
domain controllers, 685
files, 683, 687-688
folders, 683, 687-688
group accounts, 683
log files, 690
logon events, 686
policies, 682-683, 687
printers, 688
security, 839
servers, 685
shutdown, 683
tracking, 684
user accounts, 683, 685-686
authentication
anonymous, 838
architecture, 645
basic, 837
clients, 635, 666, 871
computers, 621
digest, 837, 870-871
GPOs, 389
IAS, 573
IIS, 838
integrated, 837
installation, 57
Kerberos protocol, 663, 665, 667-668
mutual, 570, 666
NTLM, 881
PPTP, 595
private keys, 625
public keys, 625
RADIUS, 552-553, 559, 581
RRAS, 552-553, 612
servers (AS), 635, 666
Telnet Service, 876
user accounts, 319, 569
VPNs, 600-601
Windows, 580-581
Authenticode, 647, 648
Author mode (MMC), 313
authorization, RRAS, 491, 552-553
auto-enrollment, 398
Automatic Private IP Addressing (APIPA), 472-473, 478-479
automating
backups, 711
installation, 138-139
tasks, 379
tunnels, 594
availability
operating systems, 693
B
backup domain controllers. See BDCs; domains controllers
backups. See also Windows Backup
access rights, 722
automating, 711
built-in accounts, 369
catalogs, 750
combining, 717, 718
compression, 721
configuration, 717
copy, 716, 718
creating, 724
daily, 712, 716
data, 710
default settings, 714, 715
differential, 716, 718
DHCP, 499
domain controllers, 368
encryption, 649
files/folders, 712
closing, 718
before installation, 41
selecting, 719, 720
full/normal, 715, 718
IIS, 831-832
incremental, 716, 718
Iomega Zip drives, 712
local, 713
log files, 714, 721, 726
media, 722
monthly, 712
multiple, 717
naming, 722
networks, 713
permissions, 711
planning, 712
removable media devices, 719
scheduling, 722-723, 727-730
sets, 750
starting, 720-721
storing, 720-721, 725
tape, 712
user notification, 718
verification, 725
viewing, 729-730
weekly, 712
bandwidth, throttling, 825-826, 862
basic authentication, 871
basic input/output system (BIOS), 46
basic storage 150
batch files, 141-142, 396
BDCs (backup domain controllers), 22, 85
blocking inheritance, 391
BIOS (basic input/output system), 46
boot sectors, 48
NTFS, 185
repairing, 748
viruses, 42
bootable CD-ROM, 74, 120, 136-137
browsers, printers, 435-437, 449-450
built-in user accounts
Administrator, 320-321
domains, 367-368
global, 366
system, 370
business function-based organizational units, 265
C
cache
I/O Manager, 11
name servers, 522
callback feature, 571, 576
caller ID, 571, 576
CALs (Client Access Licenses), 50-51
canceling print jobs, 434
capture filters, 808
displaying, 810-812
protocols, 809
.cat files, 705
catalogs, 242, 750
CD-ROM
booting, 74, 120
CDFS, 147
drives, 92
installation, 53, 55-56
centralized administration of domains, 23
Certificate Services
architecture, 629-632
backups, 723
Component Object Model (COM), 632
databases, 631
exit modules, 631
extension handlers, 631
installation, 58, 635-636, 638-640
intermediary, 630, 631
log files, 631
policies, 628, 629, 631
private keys, 629
queues, 631
server engines, 630
standards, 629
certificates
administration, 636, 637, 638
attributes, 627
Certificate Authority (CA), 626-627, 634, 636
configuration, 636, 638-640
CTLs, 842
distribution, 635
drivers, 703-705
enrolling, 633
hierarchy, 628
IIS, 838
installation, 635
license servers, 890
requests, 632, 633
revocation lists (CRLs), 628, 631
running, 641, 642, 643
trusted, 398
user accounts, 334
Web sites, 638
X.507 standard, 627
Certutil.exe utility, 637
Challenge Handshake Authentication Protocol (CHAP), 569
Change Journal, NTFS, 181-182
Check Disk tool, 763-764
checking upgrades, 66
child objects
permissions, 388
policy containers, 391
windows, 308
cipher command-line utility, 653, 654
CISC (Complex Instruction Set Computing), 7
classes
drivers, 17
objects, 26
stores, 381
Client Creator (Terminal Services), 886
clients
authentication, 666, 871
certificates, 635
Client Access Licenses (CALs), 50-51
DHCP, 486
dial-in, 584-586
DNS, 533-534
installation, 69
licensing, 885, 888
memory, 891
monitoring, 337
printers, 448
remote access, 563
reservations, 490-491
scopes, 489
Terminal Services, 884
tunnels, 591, 593
user accounts, 336
WebDAV, 869
WINS, 505
closing files before backups, 718
clusters, 170, 172, 739
Cmdlines.txt file, 138-140
COM (Component Object Model), 632
combining backups, 717, 718
commands
prompts, 653
Net Shell utility, 610-611
communication
IPSec, 660
networks, 5
communities, SNMP, 785
Compact.exe utility, 767
Compaq drive array, 55
comparing
file systems, 49
mirrored volumes and striped volumes with parity, 738-739
compatibility
hardware installation, 43
IPSec, 658
NTFS, 189
Complex Instruction Set Computing (CISC), 7
Component Object Model (COM), 632
components
adding, 69
COM+, 843
deleting, 69
compression
backups, 721
files/folders, 767-769
HTTP, 833-834
NTFS, 47, 769-770
compulsory tunnels, 593-594
computers
authentication, 621
disasters, 731
GPOs, 385
names, 68, 76
physical address, 493
portable, 706
confidentiality of data, 622
configuration
audit policies, 683-687, 690
backups, 717
certificates, 636, 638-640
display settings, 79
domains, 654-656
GPOs, 384
installation, 68
printers, 415-418
restore settings, 751-752
roaming user profiles (RUP), 340-341
RRAS, 544-545
security, 674, 680-681
Security Template snap-in, 678-679
service packs, 708-709
software, 68
UPS, 732
Web sites, 852-854
Windows 2000 Server, 77
conflicts
child/parent policy containers, 391
GPOs, 378
connections
accepted, 578-579, 604
hardware, 695, 697
Internet, 590
Intranet, 590-591
licensing, 875
printers, 447
rejected, 602-604
TCP/IP, 474-477
Telnet Client, 880-882
Terminal Services, 901-904
consoles
Author mode, 313
customizing, 310, 314-318
folders, 316
MMC, 386
saving, 307
snap-ins, 311-312
User mode, 313
windows, 308
consolidation, domains, 89, 90
containers
GPOs, 380-381, 392
objects, 26
parents, 390
virtual, 250
contiguous namespaces, 243
conversion, FAT to NTFS, 187-188
copy backups, 716, 718
copying files/folders, 63, 66, 208, 769
counter log files, 797, 802-803
creating
answer files, 99-105
backups, 724
batch files, 141-142
consoles, 314-318, 386
Dfs, 281-282
directories, 870
domain controllers, 270-271
Emergency Repair Disk, 747
floppy disks, 886
folders, 344-345
FTP sites, 859-860
GPOs, 400-401
group accounts, 361, 364
local accounts, 332
organizational units, 263-265, 288-290
roaming user profiles, 347
scripts, 611
scopes, 487-491
security databases, 677-679
Setup disks, 54, 70, 71, 72
tunnels, 592
user accounts, 320, 324-325
virtual directories, 837-848
volumes, 738-739
Web sites, 845-846, 859-860
CRLs (certificate revocation lists), 631
cryptography, see decryption; encryption, 622
CSPs (cryptographic service providers), 647
customizing MMC consoles, 309-310, 314-318
D
DACLs (directory access control lists), 869, 872
daily backups, 712, 716
data
backups, 710
captured, 810-813
confidentiality, 622
configuration, 751-752
deleting, 752-755
encryption, 570, 623, 651
integrity, 621
mirrored volumes (RAID 1), 755-756
models, 247
protection, 649
recording, 40
recovering, 649, 651
restoring, 749-750
striped volumes with parity (RAID 5), 757
tunnels, 591-592
databases
directory, 272
layers, 254
security, 679
servers, 631
datagrams, anti-replay, 622
date and time
GUI mode, 76
installation, 69
DDF (Data Decryption Field), 651
DDNS (Dynamic DNS), 528-529, 531-532
debugging log files, 65, 535
decryption
command prompts, 653
EFS, 648, 651-652
folders, 653
dedicated lines, VPNs, 590
Default Domain Policy, 392
default gateway, 471
default settings
backups, 714-715
hardware profiles, 705
Mixed mode, 370
RRAS, 547-551
Safe mode, 742
defragmenting, disks, 764-766
delegation
administration, 829
Kerberos protocol, 667, 669-670
deleting
aliases, 611
components, 69
data, 752-755
Default Domain Policy, 392
Dfs root, 280
GPOs, 386
group accounts, 363-364
mirrored volumes (RAID 1), 735
objects, 293-294
spanned volumes, 158
user accounts, 343
Delegation of Control wizard, 299
delimiters, 851
demand-dial routing, 543, 558
department-based organizational units, 265
deployment, applications, 894-895
details pane (MMC), 309
detection, Plug and Play hardware, 78
device drivers
I/O Manager, 11
installation, 695
Plug and Play, 698
Device Manager snap-in (MMC), 702
access rights, 703
read-only mode, 703
devices. See also non-Plug and Play devices
enabling/disabling, 700, 706
installation, 699, 700
removable media, 719
uninstallation, 700
Dfs (domain file system), 233-234, 280-283
administration, 215
directories/shares, 222-223
limitation, 216
links, 220-221, 225
replication, 226-227
root, 218, 220-221
stand-alone, 217, 219, 224-225
DHCP (Dynamic Host Configuration Protocol), 59
authorization, 491
backups, 499
installation, 57, 485-486, 492
leases, 481-485
Relay Agent, 556
reservations, 490-491, 496
restoring, 499-500
scopes, 487-491, 494-495
servers, 508-509
snap-in, 486-487
starting, 480
testing, 498
WINS, 511
dial-in connections
allowing/denying, 582-583
client configuration, 584-586
permissions, 575
remote access, 558, 562
servers, 335, 577
TCP/IP configuration, 481
VPNs, 590
differential backups, 716, 718
Diffie-Hellman algorithm, 622
digest authentication, 837, 870-871
digital certificates/signing. See certificates
digital signals, 565
Digital Subscriber Lines (DSLs), 22
Directory System Agent (DSA), 252-254
directories, 19
access control lists (DACLs), 869, 872
databases, 272
Dfs, 222-223
domains, 22
home, 846-847
partitions, 20, 23
paths, 338
publishing, 870, 874
replication, 20, 268
virtual, 847-848
WebDAV, 868
directory services, 4, 19. See also Active Directory
domains, 20
security, 20
workgroups, 20-21
disabling, see enabling/disabling
disaster recovery, 731
disconnecting
BDC, 85
hardware, 697
PDCs, 85
UPS, 41
disjointed namespaces, 243
diskperf utility, 800
disks
adding, 159
defragmenting, 764-766
duplication, 126-127
duplexing, 736
mirroring, 41
partitions, 44-46, 165-167
permissions, 155-156
properties, 161-162
quotas, 771-773, 873
remote management, 164
space, 92
status, 774
storage, 156, 159-160
display settings
aliases, 611
captured data, 810-812
configuration, 79
filters, 811-812
refresh rates, 164
distinguished names (DN), 244-245
distribution
applications, 378
certificates, 635
DNS, 514
file system (Dfs), 280-283, 833
folders, 105-108, 115
group accounts, 354, 357
DLC protocol, 464-465
DNS (Domain Name System), 24. See also domains
Active Directory, 24-25, 28
cache, 522
clients, 533-534
debugging, 535
distribution, 514
domain names, 85
dynamic, 528-529, 531-532
foward lookup, 520-522, 525-526, 529-530
host, 517
installation, 40, 57, 59, 523-524
monitoring, 534
namespaces, 515-516
Nslookup, 535
resource records, 527
reverse look, 522-523, 526-527, 529-530
servers, 519-520
snap-in, 524-525
testing, 532-533
zones, 518-519
docking stations, 697
domain controllers
Active Directory, 31
adding, 270
application deployment, 894-895
auditing, 685
backups, 368
BDCs, 22
creating, 270-271
PDCs, 22
stand-alone servers, 274-275
troubleshooting, 93
upgrades, 86
domains, 22. See also DNS
Active Directory, 23, 26-27
administration, 23
analog connections, 22
built-in accounts, 367-368
consolidation, 89, 90
data recovery policy, 654-656
Digital Subscriber Lines (DSLs), 22
directories, 22
editing, 328-329
first layer, 261-262
GPOs, 387
group accounts, 357, 364, 373
inheritance, 391
ISDNs, 22
joining, 52
Kerberos, 671-673
LANs, 22
local group accounts, 355-356
logon, 23, 330-331
Mixed mode, 273, 362, 370-371
Native mode, 273, 370-371
nesting, 359
objects, 26
organizational units (OU), 320
passwords, 326-327
permission, 358
root, 516
scalability, 23
second layer, 261-262, 516
servers, 83, 277-278, 889
services, 20
top-level, 516
trust relationships, 29, 30, 31
user accounts, 89, 319, 324-325
viewing, 276
Windows 2000, 84
Windows NT, 83-84
downloading
files, 835
printer drivers, 450-451
DRF (Data Recovery Field), 651
drivers
.cat files, 705
installation, 703-705
IPSec, 660
kernal mode, 14-15, 17-18
printers, 450-451
signing, 703-705
testing, 705
Windows Driver Model (WDM), 13, 15-16
drives, uncompression before installation, 41
DSA (Directory Service Agent), 252-254
DSLs (Digital Subscriber Lines), 22
dual-booting, 46, 152
duplication, disks, 126-127
DVD (digital video disc), 182-184
dynamic compulsory tunnels, 594-595
dynamic disks, 151, 154
Dynamic Host Configuration Protocol. See DHCP
E
eavesdroppers, 627
editing
domains, 329
GPOs, 389
group accounts, 363
organizational units (OU), 403
profiles, 339
Recovery Console, 745
registry settings, 614
security, 401-402
shared folders, 200-201
software policies, 403-404
Telnet Service, 878-879
user accounts, 327-328, 333-334
editions of Windows 2000. See specific editions
EDRP (Encrypted Data Recovery Policy), 649
EFS (Encrypting File System), 648
data protection, 649
decryption, 651-652
fault tolerance, 649
folders, 657
recovery, 652
EMA (Enterprise Memory Architecture), 9
Emergency Repair Disk
creating, 747
installation, 746-748
starting, 748
enabling/disabling
Active Desktop, 892
auditing, 685
Automatic Private IP Addressing (APIPA), 472-473
devices, 700, 706
dial-in connections, 335
disk mirroring, 41
event logging, 613
FRS, 282
GPOs, 383, 392
Guest account, 321
license servers, 889
NetBIOS, 324
Recovery Console edits, 745
log files, 583
Process Accounting, 829-830
RRAS, 545-547, 552
smart cards, 647
smooth scrolling, 892
Telnet Service, 881-882
user accounts, 343
encapsulation. See ESP; tunnels
encryption. See also EDRP; EFS; security
algorithms, 622
backups, 649
command prompts, 653
data, 570
digital signing, 624
files, 649
folders, 649, 653, 657
NTFS, 47, 191, 4648
PPP, 597
public keys, 623
secret keys, 627
engines, servers, 630
enrolling certificates, 633
Enterprise license servers, 889
Enterporse Subordinate CA, 636
Enterprise Memory Architecture (EMA), 9
Enterprise Root CA, 636
environment subsystems (user mode), 9
error messages, 831-832
ESP (Encapsulating Security Payload), 597-598
Event Log service
error logging, 613
hardware, 707
Event Viewer, 688
application log files, 689
archives, 691
audit log files, 690
editing, 690
filters, 690
searches, 690
security log files, 689-690
SNMP, 789
system log files, 689
excluding file from backups, 714
Everyone group accounts, 369
Executive, the (kernal mode), 10-12
exit modules, 631
expiration, user accounts, 324
extended partitions, 153
Extensible Authentication Protocol (EAP), 569
Extensible Storage Engine (EXE), 254-255
extensions
handlers, 631
schemas, 241
snap-ins, 312
spanned volumes, 158
external namespaces, 258-260
F
FAT16/FAT32
compatibility, 154, 172
conversion, 187-188
NTFS, 49
partitions, 173-174
sectors, 170
storage, 169
structure, 171
fault tolerance (RAID), 649, 733
hardware, 733, 734
mirrored volumes (RAID 1), 733-737
software, 733
striped volumes with parity (RAID 5), 733-738
Favorites menu (MMC), 308
FEK (file encryption key), 649
file systems. See also FAT 16; FAT32; NTFS
comparing, 49
I/O Manager, 11
installation, 55
Text mode, 67
upgrades, 81
Windows NT, 84
files
access rights, 687, 688
alias, 609
attributes, 186
auditing, 683, 687-688
backups, 712
closing before, 718
excluding, 714
before installation, 41
selecting, 719, 720
compression, 767-769
copying, 66, 208
defragmenting, 764-766
downloading, 835
encryptions, 649
location, 62, 64
moving, 208
profiles, 339
replication, 229-230
Sysprep, 128-129
temporary, 62, 64
tracing, 614-615
uploading, 865
filters
capture, 808-810
display, 811-812
events, 690
IPSec, 659
ISAPI, 863
finding, see searches
finger utility, 474
floppy disks
creating, 886
driver installation, 55
folders
access rights, 687, 688
assigning, 350-352
auditing, 683, 687, 688
backups, 712, 719-720
compression, 767-759
copying, 63, 208
creating, 344-345
defragmenting, 764-766
distribution, 105-108, 115
encryption, 649, 653, 657
installation, 63
moving, 208
naming, 316, 346
optional, 63
permissions, 193-196
profiles, 339
redirection, 399
sharing, 197-200
forests, Active Directory, 28-29
formats
Active Directory, 24-25
boot partitions, 48
system partitions, 48
Fortezza security, 836
forward lookup queries, 520-522, 525-526
forwarding, 556-557
FQDN (Fully Qualified Domain Name), 336
frame types, 462-463
FrontPage, 832
FRS replication, 229-230
FTP sites
adding, 866
creating, 859-860
downloading, 835
home directories, 846-847
Restart, 865
ftp utility, 474
Full Access user mode, 313
full backups, 715, 718
G
GDI (graphical device interface), 12
geography-based organizational units, 265
global settings
built-in accounts, 366
catalogs, 28, 242
group accounts, 356-358
memberships, 371-373
globally unique identifier (GUID), 245
Gpedit.msc file, 387
GPOs (group policy objects). See also group accounts; policies
architecture, 382
adding, 386
conflicts, 378
consoles, 386
containers, 380-381
creating, 400-401
deleting, 386
editing, 389
enabling/disabling, 383, 392
inheritance, 390-391
local, 381
monitoring, 377
organizational units (OU), 387, 391
overrides, 391, 405
permissions, 388-390
printers, 446
Registry.pol file, 383
RIS, 380
scripts, 379
security, 378-379, 681
shortcuts, 379
site configuration, 384
snap-in, 384-386
templates, 380-381, 398-399
user accounts, 385
versions, 383
Gpt.ini file, 383
granting tickets, 665-666
graphical device interface (GDI), 12
Graphical Indentification and Authentication DLL, 671
graphs, monitoring, 796
group accounts. See also GPOs; user accounts
administration, 361
auditing, 683
built-in, 368
deleting, 363-364
distribution, 354
domains, 367, 373
global, 356, 366, 371-373
local, 355-356, 364-365
membership, 357, 360, 362
naming, 361
nesting, 357-358
NTFS, 374-375
publishing, 393-394
scopes, 355-356, 363
security, 354
system, 370
universal, 356, 360
VPNs, 600
Guest accounts, 321, 366, 369
GUI mode (installation), 67, 74
clients, 69
computer names, 68, 76
configuration, 68
date and time, 69, 76
licensing, 68, 75
network adapters, 69
Optional Component Manager, 69
passwords, 68, 76
protocols, 69
regional settings, 68
services, 69
GUID (globally unique identifier), 245
H
HAL (Hardware Abstraction Layer), 12-13, 55
hard disk, 696
BIOS, 46
configuration, 149
error-checking, 763-764
partitions, 44-46
storage, 149-151
hardware
Add/Remove Hardware Wizard, 701-702
compression, 721
connections, 697
devices
drivers, 695
enabling/disabling, 706
installation, 698-700
disconnection, 697
docking stations, 697
Driver Signing, 703-705
Event Log service, 707
hard disks, 696
installation, 42-44
management, 703
modems, 696
parallel ports, 697
PC Cards, 697
Plug and Play devices, 78, 697-698
profiles, 705-707
RAID, 733-734
resource settings, 703
serial ports, 697
sound cards, 696
support, 5
types, 696
USB, 697
video display cards, 696
Hardware Abstraction Layer. See HAL
Hardware Compatibility Tests (HCTs), 43
hash/hashing, 623, 837
Help files
Net Shell utility, 610
IIS, 864
Recovery Console, 746
Telnet Client, 881
hierarchy, certificates, 628
highest-level drivers, 15
HMAC-Message Digest function 5 (MD5), 623
HMAC-Secure Hash Algorithm (SHA), 623
home directories/folders, 344-345, 350-352, 846-847
hosting Web sites, 825
hostname utility, 473
hot key sequences (Terminal Services), 892
HTTP (Hypertext Transfer Protocol), 629, 833-834
Human Interface Devices (HID), 18
Hypertext Transfer Protocol (HTTP), 629
I
IANA (Internet Assigned Numbers Authority), 472
IAS (Internet Authentication Service), 559, 573
ICMP router discovery, 468, 556
identifers
security (SIDs), 363
Setup.exe file, 65
identifiers, 63
idle time, sessions, 337
IEEE 1394 devices, 700
IGMP versions, 468, 556
IIS (Internet Information Service)
Active Directory Services, 844
administration, 827-828
auditing, 839
authentication, 838, 871
backups, 831-832, 868
bandwidth, 825-826
certificates, 842
Component Services (COM+), 843
distributed file system (Dfs), 833
error messages, 831-832
FTP sites, 835
Indexing Service, 865
installation, 58, 844-845
Kerberos protocol, 870
performance, 823
permissions, 840-841
Process Accounting, 829-830
protection, 824
scripts, 830, 850
security, 836-837
server extensions, 832
SSI, 849-850
starting, 867
Terminal Services, 864
virtual directories, 848
incremental backups, 716, 718
Indexed Sequential Access Method (ISAM), 254
Indexing Service (IIS), 865
inheritance
Active Directory, 298
GPOs, 390-391
permissions, 202
Web sites, 861-863
input/output (I/O), 7
installation, 58. See also adding; unattended installation
Administration tools, 279-280, 900-901
authentication services, 57
automating, 138-139
batch files, 141
boot partitions, 48
CD-ROM, 53, 55, 56
Certificate Services, 57-58, 635-640
Compaq drive array, 55
devices, 695-700
DHCP, 57, 485-486, 492
disk partitions, 44-46
display settings, 79
DNS, 40, 57, 59, 523-524
domains, 52
drivers, 55, 703-705
drives, 41
dual-booting, 46
Emergency Repair Disk, 746-748
files, 41, 66
folders, 63
HAL, 55
hardware, 42-44
IEEE 1394 devices, 700
IIS, 58, 844-845
licensing, 50, 51, 891, 898-899
log files, 65
Management and Monitoring Tools, 58
management tools, 57
Message Queuing Services, 58
Microsoft Indexing Service, 58
Microsoft Script Debugger, 59
mirrored volumes, 46
monitoring tools, 57, 807
Networking Services, 59
networks, 53, 56
partitions, 48
Plug and Play devices, 78, 698
preparation, 37, 39
Readme.doc files, 41
rebooting, 699
recording data, 40
Remote Installation Services, 60
repairing, 741
Recovery Console, 743-746
RRAS, 544-545
Safe mode, 742-743
SCSI devices, 698
service packs, 708
Setup boot disk, 53-55, 61
Smartdrv.exe file, 57
SNMP, 786
software, 68
System Policy Editor, 392
Terminal Services, 58, 60, 895-897
troubleshooting, 92-93
upgrades, 66
UPS, 41
USB, 700
Windows 2000 Server, 61
existing, 67
file systems, 67
GUI mode, 67-69, 74-76
licensing, 67
networking, 77
partitions, 67, 74
Pre-Copy Phase, 66, 72-74
Setup.exe file, 61
Text mode, 67, 72-74
Windows 95/98, 56
Windows Media Services, 60
Winnt.exe file, 61-63
Winnt32.exe file, 61-66
WINS, 57, 59, 506, 510
workgroups, 51
Installation Wizard (Active Directory), 269-271
integral subsystems (user mode), 10
Integrated Services Digital Networks (ISDNs), 22, 566
integration, administration tools, 5
integrity of data, 621
Integrity Value Check, 598
Intel-based operating systems, 12
interface, MMC, 307
intermediary Certificate Services, 630-631
intermediate drivers, 15
internal namespaces, 258-260
Internet. See also IGMP; IIS
Assigned Numbers Authority (IANA), 472
authentication (IAS), 559, 573
connections, 590
TCP/IP interface layer, 467-468
Internet Explorer, certificate validation, 634
Internet Services Manager (HTML)
certificates, 840
permissions, 841
running, 827
virtual directories, 848
Web sites, 854
Interprocess Communication Manager (kernal mode), 11
interrupt request levels. See IRQLs, 10
inter-site replication, 234
Intranet
connections, 590-591
Web sites, 860
I/O Manager (kernal mode), 11
Iomega Zip drives, 712
IP addresses
multicast support, 556-557
packet filtering, 556
static, 469-471, 555, 576
IP protocol, 468
IP-IP (IP in IP) protocol, 599
IP over ATM protocol, 460
ipconfig utility, 473-476, 484-496
IPSec (IP Security), 658
communication, 660
compatibility, 658
drivers, 660
filters, 659
negotiation, 658
packets, 661
policies, 658
Policy Agent Service, 660
tunnels, 597-598
IPX routing, 542, 557, 779, 789-790
IrDA protocol, 465
IRQLs (interrupt request levels), 11
ISAKMP/Oakley (IKE) protocols, 660
ISAM (Indexed Sequential Access Method), 254
ISAPI (Internet Server API), 863
ISDN (Integrated Services Digital Network), 22, 566
J
joining
domains, 52
workgroups, 51
JScript, 396
K
Kerberos protocol, 663
authentication, 665, 667-668
configuration, 397
delegation, 667, 669-670
domain interactive logon, 671-673
IIS, 870
key distribution center (KDC), 663, 665
logon, 670-673
principals, 664
privilege attribute certificate (PAC), 665
public keys, 673
realms, 664
RFC standards, 666
secret keys, 664
servers, 666
session keys, 664
ticket, 663
tickets, 664-665
granting, 665-666
transitive trusts, 667
User Data Program (UDP), 668
Kerberos transitive trust, 29
kernal mode
architecture, 7-8
drivers, 14-18
Executive, the, 10-11
GDI, 12
HAL, 12-13
Kernel Mode Security Support Provider Interface (SSPI), 672
key distribution center (KDC) Kerberos protocol, 665
Knowledge Consistency Checker (KCC), 231-232
L
L2TP (Layer 2 Tunneling Protocol (L2TP), 596-597
LANs (local area networks)
domains, 22
Emulation protocol, 460
PPTP, 595
protocols, 569
RRAS, 544
LDAP (Lightweight Directory Access Protocol), 24, 239
leases (DHCP)
process, 481-483
renewal, 484-485
legends, 797
licensing
activating, 890-891
CALs, 50-51
GUI mode, 75
installation, 50-51, 68
Per seat, 50
Per Server, 50
servers, 888-889
Telnet Service, 875
Terminal Services, 50, 60, 891, 898-899
Text mode, 67
Windows 2000 Server, 67
limitations, dynamic disks, 154
Limited Access, Multiple/Single Window user mode, 313
links, tracking, 180
local items. See also LANs
backups, 713
built-in accounts, 320, 364, 368
GPOs, 381
group accounts, 365
logon, 330-331, 670-671
NTFS permissions, 374-375
Local Service Authority (LSA), 671-673
Local Users and Groups snap-in, 332, 338, 340
location, files, 62, 64
lockdown policy, 385
locking/unlocking user accounts, 344, 571-572
log files
applications, 689
archives, 691
backups, 714, 721, 726
debugging, 65, 535
events, 613, 707
monitoring, 802-803
operating systems, 689
remote accounts, 612
RRAS, 583
security, 689, 691
servers, 631
system, 689
logical structure (Active Directory)
domains, 26-27
forests, 28-29
global catalogs, 28
LogicalDisk objects, 800
namespaces, 28
objects, 25-26
orgranizational units (OU), 26
schemas, 28
trees, 27-28
trust relationships, 29-31
logon
domains, 23
events, 686
interactive, 671-673
Kerberos protocol, 670-673
performance, 341
Server01, 329-330
smart cards, 647
Terminal Services, 336
traffic, 268
user accounts, 323, 330
lowest-level drivers, 15
M
maintenance, tunnels, 591-592
management, hardware profiles, 703, 706
Management and Monitoring tools, 57-58
Manager tool (Terminal Services), 886
mandatory roaming user profiles (RUP), 340, 342, 348-350
Master File Table (MFT), 185-186
media
backups, 722
errors, 92
memberships
global, 356, 371
group accounts, 355, 357, 360, 362
security, 674
universal, 356
VPNs, 600
memory
available, 57
clients, 891
menubar (MMC), 307
Message Queueing Services, 58
messages, SNMP, 783-784
Metadata, 185-186
metabases, 844, 861
MetaFrame (Terminal Services), 893
MIB (Management Information Bas
e), 560, 782
Microsoft Certificate Services. See Certificate Services
Microsoft Clearinghouse, 887
Microsoft Challenge Handshake Authentication Protocol (MS-CHAP), 569
Microsoft Indexing Service, 58
Microsoft Management Console, see MMC
Microsoft Script Debugger, 59
miniport drivers, 17
mirrored volumes (RAID 1), 733-734, 737
data recovery, 755-756
deleting, 735
disk duplexing, 736
installation, 46
performance, 735
Recovery Console, 744
upgrades, 153
Mixed mode
configuration, 370-371
distribution group accounts, 357
domains, 273, 362
scopes, 363
MMC (Microsoft Management Console)
Action menu, 308
Administrator, 321
Author mode, 313
consoles, 307-308, 314-318
customizing, 310
details pane, 309
Device Manager snap-in, 702-703
Favorites menu, 308
folders, 316
Group Policy snap-in, 681
operating systems, 306
options, 312
Security Configuration And Analysis snap-in (MMC), 674-676
Security Templates snap-in, 676-677
snap-ins, 309-310
trees, 309
User mode, 313
versions, 307
View menu, 308
modems, 696
modules
exit, 631
policies, 631
monitoring
clients, 337
DNS, 534
graphs, 796
group account membership, 357
networks, 798-800, 805-806
remote access, 586-588
tool installation, 57
monitors, refresh rate, 79
monthly backups, 712
mounting volumes, 190
moving
domain user accounts, 89
files/folders, 208, 769
objects, 294-296
servers, 90
multibooting, 189
multicast boundaries/forwarding, 556-557
multiplatforming operating systems, 9
multiple backups, 717
mutual authentication, 570
N
name resolution, 501
queries, 504
registration, 502-503
namespaces. See DNS
naming. See also renaming
backups, 722
computers, 76
folders, 316, 346
group accounts, 361
user accounts, 321-322
Web sites, 866-867
NAS (Network Access Server), 590
Native Structured Storage (NSS), 178-179
Native mode, 273, 370-371
nbtstat utility, 473
negotiation, IPSec, 658
nesting group accounts, 357-358
Net Shell command-line utility, 609-612
NetBIOS
disabling, 324
over IPX, 557
name resolution, 508
NetBEUI protocol, 463
NetBT protocol, 469
netstat utility, 473
Network Access Server (NAS), 590
Network Monitor, 805-806, 808-810, 813
Network News Transfer Protocol (NNTP), 826
networks
adapters, 69
address translation (NAT), 556
backups, 713
installation, 53, 56, 77
monitoring, 798-800
printers, 414-415
services, 508
support, 5
NNTP (Network News Transfer Protocol), 826
non-Plug and Play devices. See also Plug and Play devices
installation, 698
uninstallation, 700
normal backups, 715
notification, backups, 718
Nslookup, 535
NTFS
boot sector, 185
CD-ROM, 182
Change Journal, 180-181
compatibility, 189
compression, 47, 769-770
conversions, 187-188
DACLs, 869
DVD, 182-184
EFS, 648
encryption, 47, 191
FAT16/FAT32, 49
file attributes, 186
inheritance, 202
link tracking, 180
Metadata/MFT, 185-186
Native Structured Storage (NSS), 178-179
object identifiers, 180
operating systems, 47
partitions, 45, 154
performance, 176
permissions, 193-196, 201-204, 374-375
quotas, 47, 179
reparse points, 47, 177-178, 191
security, 47
simple, 157
sparse files, 191
UDF, 182
USN, 181, 191
versions, 47
volumes, 184-185, 190
Windows 2000 Server, 67
NTLM, Telnet Client, 881
NWLink protocol, 461-462
O
Object Manager (kernal mode), 12
objects. See also GPOs
ACLs, 26
Active Directory, 25-26, 688
administration, 298-299
attributes, 25
auditing, 686
classes, 26
container, 26
deleting, 293-294
finding, 290-292
FQDN, 336
identifiers, 180, 191
moving, 294-296
organization units (OU), 26, 265
permissions, 297
offline/online mode
Net Shell utility, 610-611
printers, 425-426
Open Shortest Path First, 541, 555
opening
Add/Remove Hardware Wizard, 702
Device Manager snap-in, 702
System Properties dialog box, 701
Task Manager, 814
operating systems
Alpha, 12
availability, 693
group accounts, 370
Intel, 12
log files, 689
monitoring, 798-800
multiplatforming, 9
NTFS requirements, 47
partitions, 48
POSIX, 171
properties, 701
reinstallation, 741
reliability, 693
services, 11
shared volumes, 272
verification, 748
versions, 83
Optional Component Manager, 69
optional folders, 63
options, MMC, 312
organizational units (OU)
Active Directory, 26
creating, 263-265
domain user accounts, 392
GPOs, 387, 391
OS services layer, 17
OSPF (Open Shortest Path First), 541, 555
overrides, GPOs, 195, 391, 405
ownership, 4, 397413,
P
packets
assembler/disassembler (PAD), 566
filters, 556
input/output (I/O), 7
IPSec, 661
paper trays, 430
parallel ports, 697
parent containers, 390
parity, see striped volumes with parity
partitions
boot, 48
directories, 20, 23
disks, 44-46, 149, 165-167
extended, 152-153
FAT16/FAT32, 47-48, 173-174
files, 64
NTFS, 154
primary, 152
system, formatting, 48
Text mode, 67
Windows 2000 Server, 67, 74
passwords
domains, 327
GUI mode, 76
installation, 68
resetting, 344
user accounts, 323, 326
paths
folders, 345
home directories, 338
pausing
print jobs, 432, 434
Web sites, 865
PC Cards, 697
PCMCIA (Personal Computer Memory Card International Association), 699
PDCs (primary domain controllers), 22, 85
peer-to-peer networks. See workgroups, 20
Per Seat/Per Server licensing, 50, 68, 75
performance, 4
IIS, 823
logon, 341
mirrored volumes (RAID 1), 735
monitoring, 798-800
NTFS, 176
snap-in, 800-803
Task Manager, 817
permissions
Active Directory, 296-298
backups, 711
group accounts, 355-356, 358
Disk Management snap-in, 155-156
Everyone accounts, 369
GPOs, 388-390
home folders, 345
IIS, 840-841
NTFS, 203-204, 374-375
RAS servers, 575
shared folders, 193-196
special access, 204-207
troubleshooting, 209
user accounts, 336
Web sites, 871
Personal Computer Memory Card International Association, see PCMCIA, 699
physical structure (Active Directory), 31-32Q-R
quantization noise, 565
queues, 631
queries, 504, 520-523, 534
quotas
configuration, 772-773
disks, 771, 873
enforcing, 774-775
NTFS, 47
RADIUS
accounting, 582
authentication, 552-553, 559, 581
RAID (redundant array of independent disks)
hardware, 733-734
mirrored volumes (RAID 1), 733-734, 737
data recovery, 755-756
disk duplexing, 736
performance, 735
software, 733
striped volumes with parity (RAID 5), 733, 736-738
data recovery, 757
RCP (Remote Copy Protocol), 474
read-only mode
Device Manager snap-in, 703
Readme.doc files, 41
realms
Kerberos protocol, 664
rebooting after installation, 699
recording data for installation, 40
recovery
catalog files, 750
computer disasters, 731
data, 649, 749-750
configuration, 751, 752
deleting, 752-755
mirrored volumes (RAID 1), 755-756
policies, 654, 655, 656
striped volumes with parity (RAID 5), 757
EFS, 652
IIS, 868
Recovery Console
access rights, 745
editing, 745
Help files, 746
installation, 743, 745-746
mirrored volumes (RAID 1), 744
starting, 744
redirection
folders, 399
printers, 433
Reduced Instruction Set Computing (RISC), 7
redundant array of independent disks. See RAID
refresh rate, monitors, 79, 164
regional settings, GUI mode, 68
registration, names, 502-503
registry settings
editing, 614
GPOs, 383
Telnet Service, 877-879
Windows NT, 399-400
reinstallation over damaged operating systems, 741
relative distinguished names ,245
releases, name resolution, 504
reliability of operating systems, 693
Remote Access Server (RAS), 335
accepting connections, 578-579
account lockout, 571-572
addresses, 573
ADSL, 568
ATM, 568
authentication, 581
callback feature, 571, 576
caller-ID, 571, 576
clients, 563
configuration, 573
data encryption, 571
dial-in, 562, 577, 582-583
digital signals, 565
disks, 164
IP addresses, 576
ISDN 566
monitoring, 586-588
permissions, 575
policies, 576-577
protocols, 569
PSTN, 564
routing, 576, 608
RRAS, 543
scripts, 609
servers, 563
Terminal Services, 337
user accounts, 572, 574-575
V.90 connections, 565
VPNs, 562, 589, 605
Web sites, 864-865
X.25 standard, 566-567
Remote Administration mode (Terminal Services), 884-885
Remote Authentication Dial-In User Service. See RADIUS
Remote Desktop Protocol configuration (Terminal Services), 887
Remote Installation Service (RIS), 60, 380
remote sessions, 895
Remote Storage, 60
removable media devices, 719
renaming user accounts, 343
renewal, names, 503
repairing
boot sector, 748
installation, 741
Emergency Repair Disk, 746-748
Recovery Console, 743-746
Safe mode, 742-743
reparse points, 47, 177-178, 191
replay prevention. See anti-replay, 622
replication
built-in, 369
Dfs root domains 226-227, 233-234
directories, 20, 268
FRS, 229-230
inter-site, 234
sites, 230-231
SYSVOL, 233-234
user accounts, 320
requests for certificates, 632, 633
requirements
hardware installation, 42, 43, 44
NTFS operating systems, 47
rescanning displays, 164
resource records, 527
resource settings, 703
resetting, IIS, 824, 867
restoring, see recovery
restrictions, user accounts, 397, 775
resuming print jobs, 432, 434
reverse lookup queries, 522-523, 526-527, 529-530
revoking certificates, 628
REXEC (Remote execution), 474
RFC standards, 24, 666
RIP for IPX, 557
RIS (Remote Installation Service), 60, 380
RISC (Reduced Instruction Set Computing), 7
Rivest, Shamir, Adleman (RSA) algorithm, 622
roaming user profiles (RUP), 339-342, 347-348
root domains, 218, 224, 233-234, 261, 516
route utility, 473
Routing and Remote Access snap-in (RRAS), 608,
accessing, 584-586
AppleTalk, 552, 558
authentication, 552-553, 612
authorization, 552-553
configuration, 551
default settings, 547-551
demand-dial, 543, 558
dial-in connections, 558
enabling/disabling, 545-547, 552
IANA, 545
IGMP versions, 556
IPX, 542, 557
LANs, 544
log files, 583
multicast boundaries/forwarding, 556-557
OSPF, 541, 555
RADIUS, 559, 581
remote access, 543
SNMP, 560
unicast IP routing, 555
static, 576
tracing, 614-615
VPNs, 559
WANs, 544
RSH (Remote Shell), 474
running
certificates, 641-643
Internet Services Manager (HTML), 827
Network Monitor, 813
Setup Manager, 109-111
Sysprep, 125-126, 133-134
unattended installation, 116-117
S
Safe mode
default settings, 742
installation, 742-743
SAP for IPX, 557
saving MMC consoles, 307
scalability, 4, 23
SChannel (Secure Channel), 645-646
scheduling backups, 722-723, 727-730
schemas (Active Directory), 28, 241, 247
scopes
creating, 487-491, 494-495
editing, 363
group accounts, 355-356
options, 497
reservations, 496
scripts
administration, 830
creating, 611
delimiters, 850
GPOs, 379, 395
IIS, 850
multiple, 396
Net Shell utility, 609-612
running, 324
storing, 395
Web sites, 872-873
scrolling, 892
SCSI (small computer system interface), 699
searches
events, 690
GPOs, 386
objects, 291-293
WebDAV, 869
Windows NT Server, 82
Secedit command-line tool, 675
second-level domains, 516
secret keys, 626
encryption, 627
Kerberos protocol, 664
public keys, 626, 627
sectors, FAT16/FAT32, 170
Secure Channel (SChannel), 645-646
Secure Sockets Layer. See SSL
security, 247
access rights, 674
Active Directory, 296
Administrator accounts, 321
analysis, 674-676
anti-replay, 622
auditing, 839
authentication, 569, 389, 621
certificates, 636-640, 838, 842
confidentiality, 622
configuration, 674, 680-681
databases, 679
directory services, 20
eavesdroppers, 627
editing, 401
EFS, 648
GPOs, 378-379, 388, 681
group accounts, 354
identifiers (SIDs), 363
IIS, 836-837
integrity, 621
IPSec, 658-661
log files, 689-691
memberships, 674
NTFS, 47
permissions, 840
policies, 674-675
public key infrastructure (PKI), 619, 621
secret keys, 626
Secure Channel authentication package, 645
SNMP, 788-789
templates, 674-677
user accounts, 10, 323, 336
WebDAV, 869-870
Windows 2000, 3-4
Security Configuration And Analysis snap-in (MMC), 674-678
Security reference monitor (kernal mode), 11
Security Support Provider Interface (SSPI), 645
Security Template snap-in, 676-679
selecting files/folders for backups, 719-720
separator pages, print jobs, 431-432
Serial Line Interface Protocol (SLIP), 563, 569
serial ports, 697
Server01
logon, 329-330
security configuration, 680, 681
servers
auditing, 685
cache, 522
certification, 635
databases, 631
DHCP, 485, 508-509
dial-in connections, 335
domains, 83
engines, 630
Kerberos protocol, 666
licensing, 50
log files, 631
moving, 90
names, 519-520
queues, 631
remote access, 563
scopes, 489
scripts, 850
SSi, 849-850
stand-alone, 21, 83
Telnet Service, 876-877
tunnels, 591
upgrades, 82
user mode, 10
VPNs, 599
WINS, 505
service packs
configuration, 708, 709
installation, 708
slipstreaming, 708
service installation, 69
sessions
idle time, 337
keys, 664
user accounts, 336
sets, backups, 750
Setup Manager, 53-55. See also installation
answer files, 112
completion, 70
creating, 70-72
distribution folders, 115
identifiers, 63, 65
installation, 61
memory requirements, 113
running, 109-111
unattended, 63
shared secret key. See secret keys
shares
directories, 222-223
folders, 197-200, 345
permissions, 193-196
printers, 421-425
system volumes, 272
Shiva Password Authentication Protocol (SPAP), 569
shortcuts, GPOs, 379
shutdown
auditing, 683, 686
Windows NT Server, 79
signatures, certificates, 703-705
simple volumes, 153, 156-157
sites
Active Directory, 32
Knowledge Consistency Checker (KCC), 231-232
replication, 230-232
sizing disk partitions, 45
SLIP (Serial Line Interface Protocol), 563, 569
slipstreaming service packs, 708
small computer system interface, see SCSI
smart cards
enabling, 647
logon, 647
public keys, 646
X.25 standard, 567
Smartdrv.exe file, 57
SMS (Systems Management Server), unattended installation, 122, 135-136
SMTP Virtual Server, 845, 866
SNA (Systems Network Architecture) protocols, 457
snap-ins (MMC). See also specific snap-ins
adding, 385-386
DHCP, 486-487
DNS, 524-525
extensions, 312
stand-alone, 311
WINS, 506
SNMP (Simple Network Management Protocol Service)
Agent, 787
communities, 785
installation, 786
IPX, 779
messages, 783-784
MIB, 782
networks, 781
properties, 789
RRAS, 560
security, 788-789
traps, 788
trigger alarms, 780
troubleshooting, 789-791
sockets, IIS, 824-825
software
configuration, 68
GPOs, 379
mirrored volumes (RAID 1), 733-737
policies, 403-404
striped volumes with parity (RAID 5), 733-738
testing, 404
sound cards, 696
spanned volumes, 153, 157-158
sparse files, NTFS, 179-180, 191
special access permissions, 204-207
SSI (server-side includes), 849-850, 855-856
SSL (Secure Sockets Layer)
IIS, 836
public keys, 646
Stand-alone CAs, 636
stand-alone servers, 21, 83
standards (certificates), 627, 629
starting
backups, 720-721
DHCP, 480
Emergency Repair Disk process, 748
IIS, 867
MMC, 321
Recovery Console, 744
Telnet Service, 876-877
Web sites, 865
Windows Backup, 710
static configurations
compulsory tunnels, 594
IP address, 469-471, 478-479
mappings, 506-507
routes, 555, 576
stopping
IIS, 867
Telnet Service, 877
tunnels, 592
Web sites, 865
storage
backups, 720-721, 725
basic, 150
disks, 159-160
FAT16/FAT32, 169
files/folders, 45, 345
hard disks, 149-151
networks, 156
private keys, 646
public keys, 646
streaming kernal mode, 18
striped volumes with parity (RAID 5), 733, 736-738
creating, 158
data recovery, 757
free space, 154
structure
global group accounts, 371-373
subnet mask, 568
subsystems (user mode)
environment, 9
integral, 10
switches
Winnt.exe file, 62, 63
Winnt32.exe file, 63-66
Syspart, 123-125
Sysprep, 122
duplication, 126-127
files, 128-129
Mini-Setup Wizard, 130-132
running, 125-126, 133-134
systems. See operating systems
System Monitor, 794-796
System Policy Editor, 392
SYSVOL replication, 233
T
tape backups, 712
Task Manager
applications, 815
opening, 814
performance, 817
processes, 815-817
Task Scheduler
automating tasks, 379
backups, 727-730
tattooing, 399
TCO (total cost of ownership), 378
TCP/IP protocol, 458
Application layer, 469
automatic addressing, 478-479
configuration verification, 476-477
DHCP, 481
Internet layer, 467-468
static IP address, 469-471
suite of protocols, 466
testing, 474-477
Transport layer, 468
troubleshooting, 473
Telnet Client, 880-881
Telnet Service, 474
Administration tool, 877-879, 882-883
authentiction, 876
connection licensing, 875
enabling/disabling, 881-882
registry settings, 877-879
servers, 876-877
troubleshooting, 880
templates
architecture, 382
GPOs, 380-381, 398-399
roaming user profiles, 347-348
security, 674-677
temporary files, 62, 64
Terminal Services
accessing clients, 884
applications
adding, 893-894
certificates, 890
Client Creator, 892
Configuration tool, 887
connections, 901-904
hot key sequences, 892
IIS, 864
installation, 58, 60, 895-897
licensing, 50, 60, 887, 891, 898-899
logon, 336
Manager tool, 886
MetaFrame, 893
Microsoft Clearinghouse, 887
remote settings, 337, 885
running, 900-901
servers, 888-889
sessions, 886
Windows NT, 893
WinFrame, 893
terminating. See stopping
testing
DHCP, 498
DNS, 532-533
drivers, 705
printers, 425-426
restore capability, 749
software policies, 404
TCP/IP, 474-477
upgrades, 86
UPS, 732
Web sites, 857-858
WINS, 512-513
Text mode (installation), 67, 72-74
TFTP (Trivial File Transfer Protocol), 474
throttling bandwidth, 825-826, 862
tickets
granting service (TGS), 666
granting ticket, 666
Kerberos protocol, 663-665
time. See date and time
TLS (Transport Layer Security) 1.0 protocol, 646
toolbar (MMC), 307
top-level domains, 516
total cost of ownership (TCO), 378
tracert utility, 473
tracing
auditing, 684, 686
files, 614-615
logs, 802-803
tracking links, NTFS, 180
transitive trusts
Kerberos protocol, 667
relationships, 31
translation, network addresses, (NAT), 556
Transport layer (TCP/IP), 468, 646, 836
Transport mode (ESP), 598
traps, SNMP, 788
trees, Active Directory, 27-28
trigger alarms, 780
Triviial File Transfer Protocol (TFTP), 474
troubleshooting
CD-ROM drives, 92
computer disasters, 731
disk space, 92
domain controllers, 93
event logs, 613
installation, 92, 93
media errors, 92
permissions, 209
printers, 439-441
SNMP, 789-791
TCP/IP, 473
Telnet Service, 880
tunnels, 606
VPNs, 601
trust relationships
Active Directory, 29-31
certificates, 398
Kerberos, 29
Windows 2000, 31
tunnels
compulsory, 593-594
dynamic compulsory, 594-595
maintenance protocol, 591-592
static compulsory, 594
troubleshooting, 606
Tunnel mode (ESP), 598
voluntary, 593
U
UDF (Universal Disk Format), 137, 147, 182
UDP protocol, 468
unattended installation
bootable CD-ROM, 119-120, 136-137
running, 116-117
SMS, 122, 135-136
Syspart, 123-125
Sysprep, 122
duplication, 126-127
files, 128-129
Mini-Setup Wizard, 131-132
running, 125-126, 133-134
Winnt.exe/Winnt32.exe files, 120-121
uncompression, drives before installation, 41
unicast IP routing, 555-556
uninstallation
Administration tools, 900-901
devices, 700
Uninterruptible Power Supply. See UPS
Unique Database Files (UDFs), 137
Unique Sequence Number (USN), 181, 232, 336
Universal Disk Format (UDF), 137, 147, 182
universal group accounts, 356, 360
universal serial bus. See USB
unlocking, see locking/unlocking
unsupported CD-ROM drives, troubleshooting, 92
upgrades
checking, 66
domain controllers, 86
file systems, 81
IIS, 826
servers, 82
testing, 86
Windows 95/98, 56
Windows 2000 Server, 81
Windows NT, 53, 56, 81-82, 84-85
uploading files, 865
UPN (user principal name), 246
UPS (Uninterruptible Power Supply)
configuration, 732
disaster recovery, 731
disconnecting, 41
testing, 732
USB (universal serial bus), 5
hardware, 697
installation, 700
user accounts. See also group accounts
adding, 363
applications, 393-394
assigning, 348-350
auditing, 683, 685-686
authentication, 319
built-in, 320-321
dial-in connections, 335
disk quotas, 774
domains, 319, 324, 330
editing, 328-329, 333
expiration, 324
folders, 344-345, 350-352
FQDN objects, 336
GPOs, 385
local, 332, 338
logon, 323, 330-331
moving, 89
naming, 321-322, 346
notification, 718
organizational units (OU), 320
passwords, 326-327, 344
printers, 367
profiles, 339-342
properties, 333-334
remote access, 572, 574-575
restrictions, 775
security, 336
sessions, 337
Terminal Services, 336
VPNs, 599
workgroups, 21
User Data Program (UDP), Kerberos protocol, 668
User mode (MMC), 313
architecture, 7-8
subsystems, 9-10
user principal name (UPN), 246
USN (Unique Sequence Number), 171, 191, 232, 336
V
V.90 connections, 565
validation
Certificate Authority (CA), 634
value bars, 797
VBScript, 396
verification
backups, 725
boot sector, 42
caller ID, 576
TCP/IP, 476-477
versions
GPOs, 383
MMC, 307
NTFS, 47
operating systems, 83
video display carsds, 696
View menu (MMC), 308
viewing
backups, 729-730
domains, 276
security log files, 689-690
virtual directories, 847-848
Virtual Memory Manager (VMM), 11
virtual private networks, see VPNs
virtual servers, 859
virtualization drivers, 17
viruses
boot sector, 42
VMM (Virtual Memory Manager), 11
volumes. See also mirrored volumes; striped volumes with parity
creating, 738-739
defragmenting, 765-766
dynamic disks, 151, 153-154
mounting, 190
NTFS, 184-185
properties, 162-163
shared system, 272
simple, 157
spanned, 157-158
striped, 158-159
voluntary tunnels, 593
VPNs (virtual private networks)
accepted connections, 604
accessing, 600
addresses, 599
authentication, 600-601
dedicated lines, 590
DHCP, 605
dial-up lines, 590
IP address, 605
IP-IP, 599
IPSec, 597-598
L2TP, 596-597
permissions, 576
PPTP, 595-597
rejected connections, 602-604
remote access, 562, 589, 605
RRAS, 559
servers, 599
troubleshooting, 601
tunnels, 606
user accounts, 599
W
WANs (wide area networks)
ADSL, 568
ATMs, 568
digital signals, 565
ISDN, 566
PSTN, 564
RRAS, 544
V.90 connections, 565
X.25 standard, 566-567
Web browsers, printers, 435-437, 449-450
Web sites
accessing, 854-856
adding, 866
administration, 864-865
certificates, 638
configuration, 852-854
creating, 845-846, 859-860
DACLs, 872
FrontPage, 832
home directories, 846-847
hosting, 825
inheritance, 863
intranets, 860
naming, 866-867
pausing, 865
permissions, 871-872
properties, 861-862
scripts, 872-873
testing, 857-858
WebDAV
authoring, 833
directories, 868, 874
disk quotas, 873
permissions, 872
security, 869-870
weekly backups, 712
WHQL (Windows Hardware Quality Labs), 703
Win32 environment subsystem, 9
windows, consoles, 308
Windows 95/98
GPOs, 392
Kerberos protocol, 663
MMC, 306
printers, 448
upgrading, 56
Windows 2000. See also Active Directory
Advanced Server, 2-3, 739
authentication, 570
clients, 69
computer names, 68
configuration, 68
consoles, 310
Data Center, 2-3, 739
date and time, 69
domains, 84
existing, 67
GUI mode, 67, 74-76
IAS, 573
installation, 61
licensing, 67-68
MMC, 306
network adapters, 69, 77
new features, 4-5
NTFS, 67
Optional Component Manager, 69
ownerhsip, 4
partitions, 67, 74
passwords, 68
Pre-Copy Phase, 66, 72-74
protocols, 69
regional settings, 68
security, 3-4
services, 69
Setup, 70-72
Text mode, 67, 72-74
upgrades, 81
Winnt.exe file, 62-63
Winnt32.exe file, 63-66
Windows Accounting, 582
Windows Backup, 710
Windows Driver Model (WDM), 13-17
Windows Hardware Quality Labs (WHQL), 703
Windows Installer, 894-895
Windows Media Services, 58, 60
Windows NT
DNS domain names, 85
domains, 83-84
file systems, 84
finding, 82
GPOs, 392
MMC, 306
printers, 445, 448
RAS servers, 575
registry settings, 399-400
shutdown, 79
Terminal Services, 893
upgrades, 53, 56, 81-82, 84-85
Windows Script Host (WSH), 324
WinFrame, upgrading, 893
Winnt.exe file, 61-63, 120-121
Winnt32.exe file, 61, 63-66, 120-121
WINS, 57, 59, 789
clients, 505
DHCP, 511
installation, 506, 510
proxy agents, 508
registration, 502-503
releases, 504
resolution, 501-502
servers, 505
snap-in, 506
static mappings, 506-507
testing, 512-513
Winsock, 469
workgroups
directory services, 20-21
joining, 51
workstations
logon traffic, 268
user mode, 10
X-Z
X.25 standard, 566-567
X.498 Directory Access Protocol (DAP), 24
X.507 standard, 627
zones, domains, 518-519, 525-527
loading...
loading...
loading...
Terms of Use, Copyright, and Privacy Policy
© 1997-2009 Barnesandnoble.com llc
