1. Chapter 13 Chapter 13: Managing Internet and Network Interoperability

2. Chapter 13 Learning Objectives n Install and configure a Web server and a Media Services server n Install and configure DNS and WINS servers n Install and configure a DHCP server

3. Chapter 13 Learning Objectives (continued) n Install and configure a terminal server n Configure a Telnet server n Install and configure a NetWare gateway

4. Chapter 13 Microsoft Internet Information Services n Internet Information Services (IIS): A Microsoft Windows 2000 Server component that provides Internet Web, FTP, mail, newsgroup, and other services, and that is particularly offered to set up a Web server

5. Chapter 13 Requirements for Installing a Web Server n Windows 2000 Server installed n TCP/IP installed n Access to an Internet service provider n Sufficient disk space for IIS-related files n Disk storage formatted for NTFS (recommended) n Name resolution software, such as DNS and WINS

6. Chapter 13 Installing IIS n IIS is a Windows component that is installed in one of two ways: u From the Control Panel Add/Remove Programs icon u From the Administrative Tools menu using the Configure Your Server tool

7. Chapter 13 IIS Components n Several IIS components can be installed, such as Web server, FTP server, NNTP service, and SNMP service u Network News Transfer Protocol (NNTP): A TCP/IP-based protocol used by NNTP servers to transfer news and informational messages to client subscribers who compose “newsgroups”

8. Chapter 13 Internet Information Services Components Table 13-1 Internet Information Services Components

9. Chapter 13 Internet Information Services Components (continued)

10. Chapter 13 Internet Information Services Components (continued)

11. Chapter 13 Selecting IIS Components for Installation Figure 13-1 Specifying Internet Information Services components

12. Chapter 13 Troubleshooting Tip n After the IIS components are installed in Windows 2000 Server, check all of the services associated with those components to make sure they are started and set to start automatically

13. Chapter 13 Configuring IIS n Use the Configure Your Server tool (in the Administrative Tools menu) to further configure IIS services, such as creating a virtual directory

14. Chapter 13 Configuring IIS Figure 13-2 Configuring an IIS Web server

15. Chapter 13 Virtual Directory n Virtual directory: A URL formatted address that provides an Internet location (virtual location) for an actual physical folder on a Web server that is used to publish Web documents

16. Chapter 13 Virtual Directory Security and Properties Settings n When you create a virtual directory on a Web server, be sure to configure the appropriate security and other properties of the directory

17. Chapter 13 Virtual Directory Security Options Table 13-2 Virtual Directory Security Options

18. Chapter 13 Virtual Directory Properties Tabs Table 13-2 Virtual Directory Security Options

19. Chapter 13 Configuring Virtual Directory Properties Figure 13-3 A virtual directory’s properties

20. Chapter 13 Managing an IIS Web Server n An IIS Web server is managed using the Internet Services Manager (also called the Internet Information Services tool) which is started from the Administrative Tools menu or as an MMC snap-in

21. Chapter 13 Elements Managed through the Internet Services Manager n The Internet Services Manager enables you to manage these elements: u Default Web site u Administration Web site u FTP site u SMTP virtual server u NNTP virtual server

22. Chapter 13 Using the Internet Services Manager Figure 13-4 Managing a Web site

23. Chapter 13 Default Web Site Properties n When a Web site is implemented, configure the Default Web site properties such as security, the home directory, managers of the Web site, and performance options

24. Chapter 13 Default Web Site Properties Tabs

25. Chapter 13 Default Web Site Properties Tabs (continued)

26. Chapter 13 Configuring a Web Site Figure 13-5 Configuring Web site properties

27. Chapter 13 Setting Web Site Security n In the Web site properties, click the Directory Security tab to configure the following authentication options: u Basic authentication (password is sent in clear text): For clients who cannot use an encrypted password u Digest authentication: For hashed security u Integrated Windows authentication: For a secret code security determined by a cryptographic formula

28. Chapter 13 Configuring IP Security Access for Intranets/VPNs n You can control access to a Web server by restricting it using any combination of the following: u IP addresses u subnets u domains

29. Chapter 13 Configuring IP Address Restrictions Figure 13-6 Configuring restricted IP access

30. Chapter 13 Troubleshooting IIS Table 13-5 Troubleshooting IIS

31. Chapter 13 Troubleshooting IIS (continued)

32. Chapter 13 Troubleshooting IIS (continued)

33. Chapter 13 Troubleshooting IIS (continued)

34. Chapter 13 Troubleshooting IIS (continued)

35. Chapter 13 Troubleshooting IIS (continued)

36. Chapter 13 Windows Media Services n Install Windows media services to offer voice and video multimedia services on a Web site, to enable the streaming mode, and to take advantage of multicasting u Streaming: Playing a multimedia audio, video, or combined file received over a network before the entire file is received at the client

37. Chapter 13 Configuring Windows Media Services n Use the Windows Media Services Administrator — accessed from the Administrative Tools menu — to configure Windows Media Services

38. Chapter 13 Using the Windows Media Server Administrator Figure 13-7 Windows Media Server Administrator

39. Chapter 13 Microsoft DNS Server n DNS server: A Microsoft service that resolves computer names to IP addresses, such as resolving the computer name Brown to IP address 129.77.1.10, and that resolves IP addresses to computer names

40. Chapter 13 Design Note n When you install Active Directory, you must have at least one DNS server n A DNS server is also needed for an IIS server

41. Chapter 13 Installing DNS Server n Install DNS as a Windows component from the Control Panel Add/Remove Programs icon n Double-click Networking Services in the Windows Components dialog box and select Domain Name System (DNS)

42. Chapter 13 Selecting DNS Figure 13-8 Installing Microsoft DNS

43. Chapter 13 Design Tip n Assign a static IP address to DNS servers n On medium and large sized networks, configure at least two DNS servers on the same or different networks in case one fails

44. Chapter 13 Configuring DNS n Configure a forward and reverse lookup zone in the DNS server: u Forward lookup zone: A DNS server zone or table that maps computer names to IP addresses u Reverse lookup zone: A DNS server zone or table that maps IP addresses to computer names n Zones are created and managed by using the DNS tool in the Administrative Tools menu

45. Chapter 13 Viewing a Forward Lookup Zone Figure 13-9 DNS Forward lookup zone

46. Chapter 13 Creating a Reverse Lookup Zone Figure 13-10 Creating a reverse lookup zone

47. Chapter 13 SubnetsSubnets n Folders can be created in a reverse lookup zone to reflect subnets

48. Chapter 13 Reverse Lookup Zone Subnet Folders Figure 13-11 Reverse lookup zone subfolders for subnets

49. Chapter 13 Forward Lookup Zone Records n A forward lookup zone typically contains a host address (A) resource record: u Host address (A) resource record: A record in a DNS forward lookup zone that consists of a computer name correlated to an IP version 4 address

50. Chapter 13 Configuring a Host Address (A) Resource Record Figure 13-12 Creating a host address (A) resource record

51. Chapter 13 Reverse Lookup Zone Records n A reverse lookup zone typically contains a pointer (PTR) resource record: u Pointer (PTR) resource record: A record in a DNS reverse lookup zone that consists of an IP (version 4 or 6) address correlated to a computer name

52. Chapter 13 Creating a PTR record Figure 13-13 Creating a PTR record

53. Chapter 13 Troubleshooting DNS n If DNS is not working, make sure that the DNS Server and DNS Client services are started and set to start automatically

54. Chapter 13 Using Microsoft WINS n Install and use Microsoft WINS to resolve NetBIOS computer names n WINS is installed as a Windows component via the Control Panel Add/Remove Programs tool u WINS is a subcomponent of the Networking Services Windows component

55. Chapter 13 DHCP n Install Microsoft DHCP to implement dynamic IP addressing on a network n DHCP is installed as a Windows component from the Control Panel Add/Remove Programs icon u Double-click Networking Services in the Windows Components dialog box and select Dynamic Host Configuration Protocol (DHCP)

56. Chapter 13 Scope n Configure one or more scopes after DHCP is installed: u Scope: A range of IP addresses that a DHCP server can assign to clients n Create scopes and manage DHCP by using the DHCP management tool from the Administrative Tools menu or as an MMC snap-in

57. Chapter 13 Specifying a Scope Figure 13-14 Creating a scope

58. Chapter 13 Authorizing a DHCP Server n Authorize a DHCP Server in the Active Directory via the DHCP management tool: u Right-click the server in the tree u Click Authorize

59. Chapter 13 Configure the DHCP Server to Update DNS Records n Configure the DHCP server so that it automatically registers new IP address in the DNS server (so you don’t have to) n To configure the DHCP server: u Open the DHCP management tool u Right-click the DHCP server and click Properties u Click the DNS tab

60. Chapter 13 Configuring DNS Updating Figure 13-15 Configuring automatic DNS registration

61. Chapter 13 Troubleshooting a DHCP Server

62. Chapter 13 Troubleshooting a DHCP Server (continued)

63. Chapter 13 Troubleshooting a DHCP Server (continued)

64. Chapter 13 Troubleshooting a DHCP Server (continued)

65. Chapter 13 Terminal Server Defined n Terminal server: A server configured to offer terminal services so that clients can run applications on the server, similar to having clients respond as terminals

66. Chapter 13 Reasons for Using a Terminal Server n To support thin clients n To centralize program access n To remotely administer Windows 2000 Server

67. Chapter 13 Thin Client Defined n Thin client: A specialized personal computer or terminal device that has a minimal Windows-based operating system. A thin client is designed to connect to a host computer that does most or all of the processing. The thin client is mainly responsible for providing a graphical user interface and network connectivity.

68. Chapter 13 Other Terminal Services Clients n Windows 2000 terminal services supports operating systems other than thin clients such as: u MS-DOS u Windows 3.x u Windows 95/98 u Windows NT and Windows 2000 u UNIX and X-terminals u Macintosh

69. Chapter 13 Design Tip n If you plan to have many clients running multiple sessions on a terminal server, use a server computer that has a fast CPU and ample RAM

70. Chapter 13 Terminal Services Components

71. Chapter 13 Installing Terminal Services n Terminal Services is a Windows component that is installed using the Control Panel Add/Remove Programs tool n Install both the Terminal Services and Terminal Services Licensing components

72. Chapter 13 Terminal Services Modes n When you install terminal services, select either the Remote administration mode (to remotely administer a server) or the Application server mode (for clients to run software on the server)

73. Chapter 13 Selecting the Mode Figure 13-16 Selecting the function of a terminal server

74. Chapter 13 Terminal Services Management Tools Table 13-8 Terminal Services Management Tools

75. Chapter 13 Terminal Services Components n Configure the Terminal Services properties such as permission security, client connection settings, session timeout settings, and others

76. Chapter 13 Terminal Services Components Table 13-9 Terminal Services Components

77. Chapter 13 Terminal Services Components (continued)

78. Chapter 13 Configuring Terminal Services Components Figure 13-17 Terminal service connection properties

79. Chapter 13 Terminal Services Permissions n The allow and deny permissions associated with terminal services are: u Full Control: For access that includes query, set information, reset server, remote control, logon, logoff, message, connect, disconnect, and virtual channel use u User Access: Enables access to query, connect, and send messages u Guest Access: Enables access to logon

80. Chapter 13 Terminal Services Encryption Options n The terminal services encryption options are: u Low: Data sent from the client to the server is encrypted u Medium: Data sent from the client to the server and from the server to the client is encrypted using the default server encryption u High: Data sent from the client to the server and from the server to the client is encrypted using the highest encryption level at the server

81. Chapter 13 Creating a Terminal Services Client Installation Disk n Use the Terminal Services Client Creator tool (from the Administrative Tools menu) to create a client installation disk

82. Chapter 13 Configuring a Client Installation Disk Figure 13-18 Creating a terminal services installation disk

83. Chapter 13 Installing Applications for Terminal Services n After installing and configuring Terminal Services, use the Control Panel Add/Remove Programs tool to install software applications that clients will access (and reinstall applications that were installed before Terminal Services)

84. Chapter 13 Planning Tip n Avoid running 16-bit programs through Terminal Services, because these create extra server overhead — reducing the number of connections by 60 percent and increasing demands on RAM by 50 percent

85. Chapter 13 Monitoring Terminal Services n Use the Terminal Services Manager (on the Administrative Tools menu) to monitor connection sessions, including: u Viewing a session’s status u Connecting to view a session u Logging off a user or resetting a session u Sending a message u Ending a process u Controlling a session remotely

86. Chapter 13 Troubleshooting a Terminal Server Table 13-10 Troubleshooting a Terminal Server

87. Chapter 13 Troubleshooting a Terminal Server (continued)

88. Chapter 13 Troubleshooting a Terminal Server (continued)

89. Chapter 13 Troubleshooting a Terminal Server (continued)

90. Chapter 13 Telnet Server n Another way for clients to access the resources on a Windows 2000 server is to configure it as a Telnet server n Telnet is TCP/IP-based and enables a computer to be set up as a network host to clients

91. Chapter 13 Configuring Telnet Server n To configure a Telnet server: u Use the Computer Management or Services tool to start the Telnet Server service u An alternative method is to open the Command Prompt window and enter net start tlntsvr

92. Chapter 13 Gateway Service for NetWare n Gateway Service for NetWare (GSNW): A service included with Windows NT and Windows 2000 Server that provides connectivity to NetWare resources for Windows NT and Windows 2000 servers and their clients with the Windows NT/2000 server acting as a gateway

93. Chapter 13 Installing and Configuring Gateway Service for NetWare n Install the Gateway Service for NetWare using the Network and Dial-up Connections tool n Use the GSNW icon on the Control Panel to configure Gateway Service for NetWare n Use the Add Printers tool to connect to NetWare print queues through the gateway

94. Chapter 13 Chapter Summary n A Windows 2000 Server can become a Web server by installing IIS n Install DNS and WINS to resolve computer names and IP addresses n Install DHCP to enable a Windows 2000 server to automatically assign IP addresses to clients

95. Chapter 13 Chapter Summary n Terminal services enable thin clients and other client operating systems to access Windows 2000 Server and run applications on the server n Terminal services are also used to enable an administrator to remotely manage a server

96. Chapter 13 Chapter Summary n Use Telnet server for basic TCP/IP client access n Gateway Services for NetWare enables Windows 2000 Server clients to access NetWare servers