Module 3: Managing a Microsoft ® Windows ® Small Business Server Environment

Module 3: Managing a Small Business Server Environment Managing with the Windows® Small Business Server (SBS) Console User Account Management Modifying User Account Properties in the SBS Console Managing Groups in the SBS Console Managing User Roles in the SBS Console

Lesson 1: Managing with the Windows Small Business Server Console Accessing the SBS Console Managing with the Windows SBS Console Demo: Managing with the SBS Console

Accessing the SBS Console 1 3 2

Managing with the Windows SBS Console View high-level network status Manage users and groups on the network Manage computers, printers, faxes, and network connectivity Manage access and settings for shared folders and Web sites Manage users Manage backup, restore, and data storage Add and customize server reports Manage updates, antispyware, antispam, antivirus, and file-system antivirus settings Performing administrative tasks using the Windows SBS Console:

Managing with the Windows SBS Console Getting Started Tasks Network Essentials Summary Frequent Tasks and Community Links The Windows SBS Console home page

Demo: Managing with the SBS Console In this demonstration you will learn about administrative tasks that can be management from the SBS Console

Lesson 2: User Account Management Things Every Administrator Should Know Authentication Protocols Access Controls User Accounts Demonstration: Adding User Accounts

Things Every Administrator Should Know Why are Groups important?What is a Security ID (SID)?What is Access Control?How does user authentication work? What is a Discretionary Access Control List (DACL)? What is a system account?

Authentication Protocols Interactive logon Network authentication Windows Server authentication, a two- part process Kerberos version 5 (default standard) NTLM authentication (backward compatibility) LAN manager authentication (NTLMv2 response only) Authentication protocols Windows Server 2008 supports single sign-on

Access Controls Users Computers Groups Shared resources Active Directory is object-based List Users and Groups granted access to objects Specify permissions Track events Define ownership Access controls are applied to objects with security descriptors Individual entry in the security descriptor Access Control Entries (ACEs)

User Accounts Full logon name: SID S Full logon name: SID S Account management includes all aspects of creating, modifying, and deleting user accounts Account management includes all aspects of creating, modifying, and deleting user accounts In the Small Business Server domain, users may log on to any computer if they have: A Small Business Server domain user account Permission to access a computer In the Small Business Server domain, users may log on to any computer if they have: A Small Business Server domain user account Permission to access a computer

Demonstration: Adding User Accounts In this demonstration you will learn how to perform the following tasks using the SBS Console, and see a comparison using the Active Directory Users and Computers tool:  Add a user account  Add multiple user accounts

Lesson 3: Modifying User Account Properties in the SBS Console The Users Tab Demonstration: Modify User Account Properties Modifying User Account Properties

The Users Tab A list of user accounts A set of user account administrative tasks such as: Editing Disabling Removing user accounts Tasks that allow you to globally change settings for all user accounts in the network The Users tab provides:

Demonstration: Modify User Account Properties In this demonstration you will learn how to:  Reset a user account  Enable or disable a user account  Remove a user account  Edit user account properties

Modifying User Account Properties Remote access permissions? VPN permissions? information and mailbox quotas? Access to remote Web workplace? Access to Microsoft® Office Outlook® Web Access? Computer access? Access to internal shared folders? Group membership? Where do you modify:

Lesson 4: Managing Groups in the SBS Console Group Types Group Scope Preconfigured SBS Groups Demonstration: Creating a Group in the Small Business Server Console

Local groups Security groups Distribution groups Windows Server 2008 has three types of groups Group Types SID SAM

Group Scope Groups can have different scopes Domain local groups Built-in local groups Global groups Universal groups By default, all preconfigured Security and Distribution groups, are Universal groups in Small Business Server By default, all preconfigured Security and Distribution groups, are Universal groups in Small Business Server

Preconfigured SBS Groups Designated administrators of the domain Domain administrators Distribution list for Windows SBS administrators Windows SBS administrators (distribution) Members have access to the administration links that are available in the Remote Web Workplace and on their desktops Windows SBS administrator tools group Members can access the Link List in remote Web Workplace and the Desktop Links gadget Windows SBS link users

Preconfigured SBS Groups Members can use the Windows SBS fax service Windows SBS fax users Members can access the Remote Web Workplace Windows SBS Remote Web Workplace users Users who may add content to the internal Web site Windows SBS SharePoint_MembersGroup Members have administrative access to the internal Web site Windows SharePoint_OwnersGroup Distribution list for all users All users (distribution)

Demonstration: Creating a Group in the Small Business Server Console In this demonstration you will learn how to create a security and a distribution group in the Small Business Server Console

Lesson 5: Managing User Roles in the SBS Console Default SBS User Roles Possible User Roles Demonstration: Adding a User Role

Default SBS User Roles Standard users Windows SBS fax users Windows SBS link users Windows SBS SharePointMembersGroup Windows SBS Remote Web Workplace users Standard user with Administration Tools Windows SBS Administration tools group Network administrator Windows SBS Virtual Private Network users Windows SharePoint_OwnersGroup Windows SBS administrators Domain administrators User roles and their SBS Group membership

Possible User Roles Attorneys (Managing Partners) Paralegals Social Security claims Workers’ compensation Personal injury Medical malpractice Reception Intern Adatum Corporation

Demonstration: Adding a User Role In this demonstration you will learn how to add a user role using the SBS Console

Lab: Manage Users and Groups in the SBS Console Exercise 1: Adding new user accounts Exercise 2: Creating user groups Exercise 3: Creating user roles Exercise 4: Modifying user account properties Logon information Virtual machineSBS 2008 Server User nameGregory Password Pa$$w0rd Estimated time: 60 minutes

Lab Scenario In this lab you will set up user groups, roles and new user accounts for A.Datum Corporation using the SBS Console. You will modify user and group account properties and test the effect of the modifications.

Lab Review Why should the Add a New User Wizard be used to add user accounts? What is the purpose of creating user groups? What is the purpose of using user roles? Where can logon hours be restricted? What modifications can be performed on a user account?

Module Summary In this module, you have learned to:  Manage user accounts using the Windows SBS 2008 console  Perform administrative tasks required to add, edit, disable and remove user accounts  Modify account properties to configure access permissions  Work with user roles to create standardization  Manage user properties such as group membership, organizational unit placement, remote access permissions, disk space, quotas and SharePoint site membership  Create security and distribution groups

Module Review and Takeaways Review Questions Common Issues and Troubleshooting Tips Real-world Issues and Scenarios Best Practices Tools

A.Datum organizational/logical structure overlay Security Groups Attorneys User Roles Division 1 Division 2

A.Datum organizational/logical structure: User roles Attorneys User Roles Managing Partner Attorney Paralegal Receptionist Intern Division 1 Division 2

A.Datum organizational/logical structure overlay Security Groups Attorneys User Roles Division 1 Division 2