About the Study Guide and DVD Training System xxxvii Chapter 1 Managing Users, Computers, and Groups 1 Introduction 2

Transcription

1 Contents Foreword xxix About the Study Guide and DVD Training System xxxvii Chapter 1 Managing Users, Computers, and Groups 1 Introduction Creating and Managing Groups 2 Group Types Group Scopes 6 Using Domain Local Groups 6 Using Global Groups 8 Using Universal Groups 8 Default Groups / Managing and Modifying Groups / 1.1.4/ Changing the Domain Functional Level Creating New Groups Adding Members to Group 19 Removing Members from Groups 23 Converting Group Type Changing Group Scope 26 Deleting Groups Modifying Group Properties Finding Groups in Which a Particular User is a Member 30 Assigning User Rights and Permissions to a Group /1.2.1/ Creating and Managing User Accounts xv

2 xvi Contents Default User Accounts 36 Managing and Modifying User Accounts / Creating New User Accounts Resetting the User Account Password 39 Copying a User Account 41 Disabling or Enabling A User Account 42 Configuring User Account Properties 44 The General Tab 44 The Address Tab 45 The Account Tab 45 The Profile Tab 48 The Telephones Tab 49 The Organization Tab 49 The Member Of Tab 50 Deleting User Accounts 50 Assigning User Rights and Permissions to a User Account Troubleshooting User Authentication Issues 52 Creating and Managing Computer Accounts 53 Creating and Modifying Computer Accounts Manually 54 Creating Computer Accounts by Joining to the Domain /1.2.2 Importing and Exporting Active Directory Data 58 /1.2.3 Summary of Exam Objectives 61 Exam Objectives Fast Track 61 Exam Objectives Frequently Asked Questions 64 Self Test 66 Self Test Quick Answer Key 71 Chapter 2 Managing and Maintaining 73 Terminal Services Access Introduction 74 The Need for Terminal Services: A Survey of Computing Environments 75 Centralized Computing versus Distributed Computing 75 Mixed Environments 80 Terminal Services Design Issues 81 Introduction to Windows Server 2003 Terminal Services 83 Terminal Server 83 Terminal Server Session Directory 86

3 Contents xvii Installing and Configuring a Terminal Server 87 Installing the Terminal Server /2.1.1/ Configuring the Terminal Server Using the Terminal Services Configuration Console 93 Configuring Server Settings with the Terminal Services Configuration Console 99 Using the Terminal Services Manager Console /2.1.1/ Advanced Terminal Server Configuration via Group Policy Terminal Services Computer Options Terminal Server Licensing 105 Using the Terminal Server Licensing Tool /2.1.1 Troubleshooting Terminal Services Not Automatically Logged On 110 This Initial Program Cannot be Started 111 Clipboard Problems 111 License Problems 111 Security Issues 112 Summary of Exam Objectives 114 Exam Objectives Fast Track 115 Exam Objectives Frequently Asked Questions 118 Self Test 120 Self Test Quick Answer Key 125 Chapter 3 Managing and Maintaining Remote Servers 127 Introduction Types of Management Tools 128 Administrative Tools Folder 129 Custom MMC Consoles 131 Command-Line Utilities 134 Wizards 134 Windows Resource Kits 135 The Run as Command 135 Administration Tools Pack (adminpak.msi) 136 Windows Management Instrumentation 136 Computer Management Console Using Terminal Services Components for Remote Administration 137

4 xviii Contents Terminal Services Components 137 Remote Desktop for Administration 138 Remote Assistance Using Remote Desktop for Administration 140 Configuring Remote Desktop for Administration 140 Allowing Users to Make Remote Desktop for Administration Connections 140 Advantages of Remote Desktop Administration over Other Remote Administration Methods 142 Remote Desktop Security Issues Using Remote Assistance 144 How Remote Assistance Works 144 Configuring Remote Assistance for Use 145 Asking for Assistance 146 Using Windows Messenger to Request Help 147 Using to Request Help 149 Using a Saved File to Request Help 152 Completing the Remote Assistance Connection 154 Managing Open Invitations 157 Remote Assistance Security Issues /3.2.2 Using Terminal Services Client Tools 160 Using the Remote Desktop Connection Utility 160 Installing the Remote Desktop Connection Utility 161 Launching and Using the Remote Desktop Connection Utility 162 Configuring the Remote Desktop Connection Utility 164 Using the Remote Desktops Console 170 Adding a New Connection 172 Configuring a Saved Remote Connection s Properties 173 Connecting and Disconnecting 175 Using the Remote Desktop Web Connection Utility 176 Installing the Remote Desktop Web Connection Utility 176 Using the Remote Desktop Web Connection Utility from a Client 177 Using Web Interface for Remote Administration Using Emergency Management Services 183 Summary of Exam Objectives 187 Exam Objectives Fast Track 188

5 Contents xix Exam Objectives Frequently Asked Questions 190 Self Test 192 Self Test Quick Answer Key 197 Chapter 4 Managing and Maintaining Web Servers 199 Introduction 200 What is New in IIS 6.0? 200 New Security Features 200 Advanced Digest Authentication 201 Server-Gated Cryptography 202 Selectable Cryptographic Service Provider 203 Configurable Worker Process Identity 203 Default Lockdown Status 203 New Authorization Framework 204 New Reliability Features 205 Health Detection 206 New Request Processing Architecture: HTTP.SYS Kernel Mode Driver 206 Other New Features 207 ASP.NET and IIS Integration 208 Unicode Transformation Format-8 (UTF-8) 208 XML Metabase 208 Installing and Configuring IIS Installation Methods 210 Using the Configure Your Server Wizard 210 Using the Windows Component Wizard to Install IIS Using Unattended Setup to Install IIS /3.3.1 Managing IIS Creating New Sites and Virtual Servers with IIS Manager 220 Creating New Web Sites Using the Web Site Creation Wizard 220 Creating New FTP Sites Using the FTP Site Creation Wizard 224 Creating New SMTP Virtual Servers Using the New SMTP Virtual Server Wizard 227 Creating New NNTP Virtual Servers Using the New NNTP Virtual Server Wizard 229 Common Administrative Tasks 232 Enabling Web Service Extensions 232

6 xx Contents Creating Virtual Directories 233 Hosting Multiple Web Sites 235 Configuring Web Site Performance 238 Working with ASP.NET 238 Backing Up and Restoring the IIS Metabase 239 Enabling Health Detection Managing IIS Security 243 User Authentication Methods 244 Anonymous Authentication 244 Basic Authentication 245 Integrated Windows Authentication 246 Digest Authentication 246.NET Passport Authentication 248 Using Client Certificate Mapping 248 Configuring User Authentication 249 Configuring IP Address/Domain Restrictions 252 Configuring SSL-Secured Communications Troubleshooting IIS Troubleshooting Content Errors 258 Static Files Return 404 Errors 258 Dynamic Content Returns a 404 Error 259 Sessions Lost Due to Worker Process Recycling 259 ASP.NET Pages are Returned as Static Files 260 Troubleshooting Connection Errors Errors Error Sub-authentication Error 262 Client Requests Timing Out 262 Troubleshooting Other Errors 263 File Not Found Errors for UNIX and Linux Files 263 ISAPI Filters Are Not Automatically Visible as Properties of the Web Site 263 The Scripts and Msadc Virtual Directories Are Not Found in IIS Summary of Exam Objectives 264 Exam Objectives Fast Track 266 Exam Objectives Frequently Asked Questions 266 Self Test 268 Self Test Quick Answer Key 273

7 Contents xxi Chapter 5 Managing and Implementing Disaster Recovery 275 Introduction 276 Creating a Backup Plan 276 Backup Basics 277 Backup Types 278 Backup Media 279 Media Types 280 Offsite Storage 282 Media Rotation Using the Windows Backup Utility Understanding System State Data Backup Configuration Options 289 Configuring the General Options 290 Configuring the Restore Options 292 Configuring the Backup Type Options 293 Configuring the Backup Log Options 293 Configuring the Exclude File Options Using the Backup Utility in Advanced Mode Using the Backup Utility in Wizard Mode Configuring Security for Backup Operations 308 Restoring Backup Data Using Automated System Recovery Working with Volume Shadow Copy 314 Making Shadow Copies of Shared Folders 315 Enabling Shadow Copies on the Shared Resource 315 Changing Settings for Shadow Copies 318 Deploying the Client Software for Shadow Copies 322 Restoring Previous Versions of a File 322 Shadow Copies Best Practices 324 Summary of Exam Objectives 325 Exam Objectives Fast Track 326 Exam Objectives Frequently Asked Questions 328 Self Test 329 Self Test Quick Answer Key 336

8 xxii Contents Chapter 6 Implementing, Managing, and Maintaining Name Resolution 337 Introduction Introducing and Planning the DNS Service 339 The DNS Hierarchical Namespace 340 Determining Namespace Requirements 342 Determining Zone Type Requirements Determining Forwarding Requirements 348 Installing the DNS Service Configuring DNS Server Options 360 The Interfaces Tab The Forwarders Tab 360 The Advanced Tab 363 The Root Hints Tab 365 The Debug Logging Tab 365 The Event Logging Tab 367 The Monitoring Tab Configuring Zone Options 368 Configuring Forward Lookup Zone Options 368 The General Tab 369 The Start of Authority (SOA) Tab 372 The Name Servers Tab 374 The WINS Tab 376 The Zone Transfers Tab 377 Configuring Reverse Lookup Zone Options 378 The General Tab 378 The SOA Tab 379 The Name Servers Tab 379 The WINS-R Tab 380 The Zone Transfers Tab Managing the DNS Service Managing DNS Server Options 381 Connecting to Remote DNS Servers 382 Removing Servers from the DNS Management Console 383 Configuring Aging and Scavenging for All Zones 383 Manually Initiating Record Scavenging 384 Updating the DNS Server Zone File 384 Clearing the DNS Server Local Cache 385

9 Contents xxiii Launching the nslookup Command 385 Starting, Stopping, or Pausing DNS Servers Managing DNS Zone Settings Managing DNS Record Settings 386 Summary of Exam Objectives 390 Exam Objectives Fast Track 391 Exam Objectives Frequently Asked Questions 395 Self Test 396 Self Test Quick Answer Key 402 Chapter 7 Implementing, Managing, and Maintaining Network Security 403 Introduction Using the Principle of Least Privilege /6.1.1 Implementing Security with Security Templates 405 Introduction to Security Templates 406 The Security Configuration Manager Tools 409 The Security Configuration and Analysis Snap-in 411 The Security Templates Snap-in 419 Group Policy Security Extensions 420 The secedit.exe Command 424 Configuring Security Templates 428 Account Policies 428 Local Policies 431 Event Log 442 Restricted Groups 443 System Services 448 Registry 450 File System 452 Deploying Security Templates via Group Policy / Auditing Security Events 458 Auditing Areas 458 Audit Account Logon Events 459 Audit Account Management 460 Audit Directory Service Access 462 Audit Logon Events 462 Audit Object Access 463 Audit Policy Change 465 Audit Privilege Use 466

10 xxiv Contents Audit Process Tracking 466 Audit System Events 467 Planning for Auditing 468 Configuring and Implementing Auditing 469 Summary of Exam Objectives 473 Exam Objectives Fast Track 474 Exam Objectives Frequently Asked Questions 476 Self Test 478 Self Test Quick Answer Key 485 Chapter 8 Managing and Implementing Software Updates 487 Introduction Installing, Configuring, and Managing the Software Update Infrastructure Installing Software Update Services Installing and Configuring the Automatic Update Client Managing Software Update Services 507 Viewing the Synchronization Logs 507 Viewing the Approval Logs 508 Monitoring the SUS Server 509 Examining the Event Logs 510 Viewing the SUS IIS Logs 512 Troubleshooting SUS and Automatic Updates Managing Updates for Legacy Clients 513 Windows Update 514 Windows Update Catalog 518 Systems Management Server and Third-party Applications 521 Summary of Exam Objectives 522 Exam Objectives Fast Track 523 Exam Objectives Frequently Asked Questions 524 Self Test 525 Self Test Quick Answer Key 534 Appendix A MCSA Command-Line Reference 535 Introduction 536 Active Directory Management 536 dsadd 537 dsadd computer 537

11 Contents xxv dsadd contact 538 dsadd group 539 dsadd ou 540 dsadd user 540 dsadd quota 542 dsmod 543 dsmod computer 543 dsmod contact 543 dsmod group 544 dsmod ou 545 dsmod server 546 dsmod user 546 dsmod quota 548 dsmod partition 548 dsrm 549 dsmove 549 dsquery 550 dsquery computer 550 dsquery contact 551 dsquery group 552 dsquery ou 553 dsquery site 553 dsquery server 554 dsquery user 555 dsquery quota 556 dsquery partition 556 dsquery * 557 dsget 558 dsget computer 558 dsget contact 559 dsget group 560 dsget ou 561 dsget server 562 dsget user 563 dsget subnet 564 dsget site 565 dsget quota 565 dsget partition 566

12 xxvi Contents gpresult 567 whoami 567 csvde and ldifde 568 DNS Management 570 dnscmd 570 dnscmd /ageallrecords 571 dnscmd /clearcache 572 dnscmd /config 572 dnscmd /createbuiltindirectorypartitions 578 dnscmd /createdirectorypartition 578 dnscmd /deletedirectorypartition 578 dnscmd /directorypartitioninfo 579 dnscmd /enlistdirectorypartition 579 dnscmd /enumdirectorypartitions 579 dnscmd /enumrecords 579 dnscmd /enumzones 580 dnscmd /info 581 dnscmd /nodedelete 581 dnscmd /recordadd 581 dnscmd /recorddelete 582 dnscmd /resetforwarders 582 dnscmd /resetlistenaddresses 583 dnscmd /startscavenging 583 dnscmd /statistics 583 dnscmd /unenlistdirectorypartition 584 dnscmd /writebackfiles 584 dnscmd /zoneadd 584 dnscmd /zonechangedirectorypartition 585 dnscmd /zonedelete 585 dnscmd /zoneexport 586 dnscmd /zoneinfo 586 dnscmd /zonepause 586 dnscmd /zoneprint 586 dnscmd /zoneresettype 586 dnscmd /zonerefresh 587 dnscmd /zonereload 587 dnscmd /zoneresetmasters 587 dnscmd /zoneresetscavengeservers 588

13 Contents xxvii dnscmd /zoneresetsecondaries 588 dnscmd /zoneresume 589 dnscmd /zoneupdatefromds 589 dnscmd /zonewriteback 589 dnslint 589 nslookup 590 IIS 6.0 Management 593 iisweb.vbs 593 iisweb /create 593 iisweb /delete, /start, /stop, /pause 594 iisweb /query 594 iisvdir.vbs 595 iisvdir /create 595 iisvdir /delete 595 iisvdir /query 596 iisftp.vbs 596 iisftp /create 596 iisftp /delete, /start, /stop, /pause 597 iisftp /query 597 iisftp /setadprop 598 iisftp /getadprop 598 iisftpdr.vbs 598 iisftpdr /create 598 iisftpdr /delete 599 iisftpdr /query 599 iisback.vbs 600 iisback /backup 600 iisback /restore 601 iisback /delete 601 iisback /list 601 iiscnfg.vbs 601 iiscnfg /export 602 iiscnfg /import 602 iiscnfg /copy 603 iiscnfg /save 603 Security Template Management 603 secedit 604 secedit /analyze 604

14 xxviii Contents secedit /configure 605 secedit /export 605 secedit /import 606 secedit /validate 607 secedit /GenerateRollback 607 Windows Backup Management 607 ntbackup 607 Self Test Appendix 609 Index 681