Gorman, Stubbs, & CEP Inc. 1 Introduction to Operating Systems Lesson 12 Windows 2000 Server

1Gorman, Stubbs, & CEP Inc.

Introduction to Operating Systems

Lesson 12

Windows 2000 Server

Lesson 12 – Windows 2000 Server2

Objectives

Describe the differences between Windows 2000 Server and Windows 2000 Professional.

Be able to install Windows 2000 Server successfully from CD-ROM.

Be able to use the Control Panel to configure the operating system settings.

Manage disks properly using basic and dynamic storage.

Create and manage user accounts. Use FAT and NTFS file and folder security options.


Advantages of Windows 2000 Server

The ability to handle unlimited users simultaneously depending upon the hardware capabilities. Windows 2000 Professional is designed for 10 simultaneous users.

Network management Web-based management Network-wide security management Network storage management Remote network access Network printer management


Pre-installation of Windows 2000 Server

Make sure you have the necessary hardware requirements. Make sure your hardware is on the Hardware Compatibility

List (HCL). Decide how to partition the hard disk. Decide what file system to use. Decide what the server name will be. Decide what the password for the Administrator account will

be. Decide what protocols will be used. Decide what licensing method will be used.


Hardware Requirements

CPU 166 MHz or faster

Memory 128 MB

Hard Disk Space 2 GB

Display Monitor with VGA resolution or higher

Other CD-ROM drive, 12X or faster

Floppy Disk Drive

Network interface card

Keyboard

Mouse


File Systems

Windows 2000 supports the NTFS, FAT32, and FAT file systems.– NTFS is good for file and folder security,

allows for disk quotas, and allows for file encryption.

– FAT and FAT32 are used when you want to set up the hard disk for dual booting.


Configuring Windows 2000 Server

The Control Panel contains tools for configuring the operating system.

Some of the commonly used tools are– Add/Remove Hardware– Add/Remove Programs– Administrative Tools– Date/Time– Display – Folder Options


Disk Management

A basic disk is one that uses traditional disk management techniques such as partitioning.

A dynamic disk is one that has no restriction to the number of volumes that can be created on one disk.


Basic Disk

Traditional disk management involves partitioning and formatting.

Each partition appears as a logical drive.When a drive is partitioned, a master boot

record and a partition table are created at the beginning of the disk.

A partition is created with the Disk Management tool.


Partitions

A partition may be set as primary or extended.

A primary partition is one from which you boot the operating system.

An extended partition is created from space that is not partitioned and is added to a primary partition.


Dynamic Disks

A simple volume is a portion of a disk or an entire disk that is set up as a dynamic disk.

A spanned volume contains 2 to 32 dynamic disks that are treated as one volume.

Striped volumes extend the life of hard disks by spreading data equally over two or more drives.

A mirrored volume creates another copy of data on a backup disk.

A RAID-5 Volume distributes information over 3 or more hard disks so that if one fails, the information on the disk can be recovered.


Disk Performance

Disk fragmentation exists when files on a disk gradually become spread all over the hard drive.

Defragmenting a disk is a process used to reorganize files and reduce the empty space between files.


Backups

A full backup is a backup of the entire system. An incremental backup only backs up files that are

new or have been modified. Differential backups are the same as incremental

backups, but do not remove the archive attribute. Copy backups only back up files or folders selected. Daily backups back up only files that have been

changed or updated on the day that the backup is performed.


Managing Users

1. Before creating user accounts, it is important to plan how you are going to name the users.

2. Some conventions for creating user names are– Last name followed by the first initial (SmithJ).– First name initial followed by the last name (Jsmith).– First name initial, middle name initial, and last name (JASmith).


Policies are security measures set up to protect the network.

Some typical account policies are– Set password expiration periods, forcing users to

change their password after so many days.– Require a minimum length for passwords.– Set a lockout to go into effect after so many

unsuccessful logon attempts.

Account Policies


Account Properties

General Member Of Profile Environmental Sessions Remote Control Terminal Services


Security

Attributes Share Permissions Web Permissions


Attributes

Attributes are settings on files that are used as a form of security and file management.

FAT attributes– Read-Only– Hidden– Archive

NTFS attributes– Index– Encrypt– Compress


NTFS File Permissions

You can assign file permissions to control the access that users have to files.– Read– Write– List Folder Contents– Read and Execute– Modify– Full Control


Planning Permissions

To simplify administration, group files according to application, data, and home folders.

Allow users only the level of access they require.

Create groups according to the access that the group members require for resources, and then assign the appropriate permissions to the group.

Use the Read and Execute permission when assigning permissions for working with data or application folders.

Deny permission only when it is necessary to deny access to a specific user account or group.

Encourage users to assign permissions to the files and folders that they create.


Auditing

Accessing files and folders can be tracked by auditing.

Auditing may be used on files and folders that contain confidential and/or sensitive information.

When you set up auditing, the options for each type of access are to track successful and unsuccessful attempts.

The Security log for these events is accessed in the Event Viewer.


Ownership

Folders are owned by the account that creates them.

Owners have the ability to change permissions on the folders that they create.

Ownership can be transferred by having the Take Ownership special permission or the Full Control Permission.

The Administrators group always has the ability to take control of any folder, regardless of permissions.


Event Viewer

This allows you to view the audit logs generated by auditing events with an audit policy.

It has three logs available for viewing:– Application log– Security log– System log


Summary

Windows 2000 Server has improved network resource management. There are versions of Windows 2000 for servers and workstations.

When you install Windows 2000 Server, preparation (including HCL verification and consideration of processor and hard disk capacity) will help you avoid potential problems.

The Control Panel provides all of the tools for configuring the operating system.


Summary (continued)

Windows 2000 Server treats disk storage according to two classifications: basic and dynamic.

Two accounts, Administrator and Guest, are created when you install Windows 2000 Server. New accounts are set up in the Local Users and Groups tool.


Summary (continued)

Three types of security are associated with Windows 2000 folders and files on a FAT-formatted drive: attributes, share permissions, and Web permissions. Folders and files on an NTFS-formatted drive have these security options plus three additional options: permissions, auditing, and ownership.

The event viewer is used to track security events.

Documents

Gorman, Stubbs, & CEP Inc. 1 Introduction to Operating Systems Lesson 12 Windows 2000 Server