Gorman, Stubbs, & CEP Inc. 1 Introduction to Operating Systems Lesson 12 Windows 2000 Server

Lesson 12 – Windows 2000 Server 2 Objectives Describe the differences between Windows 2000 Server and Windows 2000 Professional. Be able to install Windows 2000 Server successfully from CD-ROM. Be able to use the Control Panel to configure the operating system settings. Manage disks properly using basic and dynamic storage. Create and manage user accounts. Use FAT and NTFS file and folder security options.

Lesson 12 – Windows 2000 Server 3 Advantages of Windows 2000 Server The ability to handle unlimited users simultaneously depending upon the hardware capabilities. Windows 2000 Professional is designed for 10 simultaneous users. Network management Web-based management Network-wide security management Network storage management Remote network access Network printer management

Lesson 12 – Windows 2000 Server 4 Pre-installation of Windows 2000 Server Make sure you have the necessary hardware requirements. Make sure your hardware is on the Hardware Compatibility List (HCL). Decide how to partition the hard disk. Decide what file system to use. Decide what the server name will be. Decide what the password for the Administrator account will be. Decide what protocols will be used. Decide what licensing method will be used.

Lesson 12 – Windows 2000 Server 5 Hardware Requirements CPU166 MHz or faster Memory128 MB Hard Disk Space2 GB DisplayMonitor with VGA resolution or higher OtherCD-ROM drive, 12X or faster Floppy Disk Drive Network interface card Keyboard Mouse

Lesson 12 – Windows 2000 Server 6 File Systems Windows 2000 supports the NTFS, FAT32, and FAT file systems. – NTFS is good for file and folder security, allows for disk quotas, and allows for file encryption. – FAT and FAT32 are used when you want to set up the hard disk for dual booting.

Lesson 12 – Windows 2000 Server 7 Configuring Windows 2000 Server The Control Panel contains tools for configuring the operating system. Some of the commonly used tools are – Add/Remove Hardware – Add/Remove Programs – Administrative Tools – Date/Time – Display – Folder Options

Lesson 12 – Windows 2000 Server 8 Disk Management A basic disk is one that uses traditional disk management techniques such as partitioning. A dynamic disk is one that has no restriction to the number of volumes that can be created on one disk.

Lesson 12 – Windows 2000 Server 9 Basic Disk Traditional disk management involves partitioning and formatting. Each partition appears as a logical drive. When a drive is partitioned, a master boot record and a partition table are created at the beginning of the disk. A partition is created with the Disk Management tool.

Lesson 12 – Windows 2000 Server 10 Partitions A partition may be set as primary or extended. A primary partition is one from which you boot the operating system. An extended partition is created from space that is not partitioned and is added to a primary partition.

Lesson 12 – Windows 2000 Server 11 Dynamic Disks A simple volume is a portion of a disk or an entire disk that is set up as a dynamic disk. A spanned volume contains 2 to 32 dynamic disks that are treated as one volume. Striped volumes extend the life of hard disks by spreading data equally over two or more drives. A mirrored volume creates another copy of data on a backup disk. A RAID-5 Volume distributes information over 3 or more hard disks so that if one fails, the information on the disk can be recovered.

Lesson 12 – Windows 2000 Server 12 Disk Performance Disk fragmentation exists when files on a disk gradually become spread all over the hard drive. Defragmenting a disk is a process used to reorganize files and reduce the empty space between files.

Lesson 12 – Windows 2000 Server 13 Backups A full backup is a backup of the entire system. An incremental backup only backs up files that are new or have been modified. Differential backups are the same as incremental backups, but do not remove the archive attribute. Copy backups only back up files or folders selected. Daily backups back up only files that have been changed or updated on the day that the backup is performed.

Lesson 12 – Windows 2000 Server 14 Managing Users 1. Before creating user accounts, it is important to plan how you are going to name the users. 2. Some conventions for creating user names are – Last name followed by the first initial (SmithJ). – First name initial followed by the last name (Jsmith). – First name initial, middle name initial, and last name (JASmith).

Lesson 12 – Windows 2000 Server 15 Policies are security measures set up to protect the network. Some typical account policies are – Set password expiration periods, forcing users to change their password after so many days. – Require a minimum length for passwords. – Set a lockout to go into effect after so many unsuccessful logon attempts. Account Policies

Lesson 12 – Windows 2000 Server 16 Account Properties General Member Of Profile Environmental Sessions Remote Control Terminal Services

Lesson 12 – Windows 2000 Server 17 Security Attributes Share Permissions Web Permissions

Lesson 12 – Windows 2000 Server 18 Attributes Attributes are settings on files that are used as a form of security and file management. FAT attributes – Read-Only – Hidden – Archive NTFS attributes – Index – Encrypt – Compress

Lesson 12 – Windows 2000 Server 19 NTFS File Permissions You can assign file permissions to control the access that users have to files. – Read – Write – List Folder Contents – Read and Execute – Modify – Full Control

Lesson 12 – Windows 2000 Server 20 Planning Permissions To simplify administration, group files according to application, data, and home folders. Allow users only the level of access they require. Create groups according to the access that the group members require for resources, and then assign the appropriate permissions to the group. Use the Read and Execute permission when assigning permissions for working with data or application folders. Deny permission only when it is necessary to deny access to a specific user account or group. Encourage users to assign permissions to the files and folders that they create.

Lesson 12 – Windows 2000 Server 21 Auditing Accessing files and folders can be tracked by auditing. Auditing may be used on files and folders that contain confidential and/or sensitive information. When you set up auditing, the options for each type of access are to track successful and unsuccessful attempts. The Security log for these events is accessed in the Event Viewer.

Lesson 12 – Windows 2000 Server 22 Ownership Folders are owned by the account that creates them. Owners have the ability to change permissions on the folders that they create. Ownership can be transferred by having the Take Ownership special permission or the Full Control Permission. The Administrators group always has the ability to take control of any folder, regardless of permissions.

Lesson 12 – Windows 2000 Server 23 Event Viewer This allows you to view the audit logs generated by auditing events with an audit policy. It has three logs available for viewing: – Application log – Security log – System log

Lesson 12 – Windows 2000 Server 24 Summary Windows 2000 Server has improved network resource management. There are versions of Windows 2000 for servers and workstations. When you install Windows 2000 Server, preparation (including HCL verification and consideration of processor and hard disk capacity) will help you avoid potential problems. The Control Panel provides all of the tools for configuring the operating system.

Lesson 12 – Windows 2000 Server 25 Summary (continued) Windows 2000 Server treats disk storage according to two classifications: basic and dynamic. Two accounts, Administrator and Guest, are created when you install Windows 2000 Server. New accounts are set up in the Local Users and Groups tool.

Lesson 12 – Windows 2000 Server 26 Summary (continued) Three types of security are associated with Windows 2000 folders and files on a FAT-formatted drive: attributes, share permissions, and Web permissions. Folders and files on an NTFS-formatted drive have these security options plus three additional options: permissions, auditing, and ownership. The event viewer is used to track security events.