Introduction to Windows Server 2003

Objectives

Differentiate between the different editions of Windows Server 2003 Explain Windows Server 2003 network models and server roles Identify concepts relating to Windows Server 2003 network management and maintenance Explain Windows Server 2003 Active Directory concepts
2

Windows Server 2003 Network Administration Goals

To ensure that network resources such as files, folders, and printers are available to users To secure the network so that available resources are only accessible to users who have been granted the proper permissions

Windows Server 2003 Editions

Multiple versions of Windows Server 2003 exist Each version is defined to meet the need of a certain market segment Versions Include:

Standard Edition Enterprise Edition Datacenter Edition Web Edition

Standard Edition

Designed for everyday needs of small to medium businesses or as a departmental server for larger organizations Provides file and print services, secure Internet connectivity, centralized management of network resources Logical upgrade path for Windows 2000 Server Can be used as a domain controller, member server, or standalone server
5

Standard Edition (continued)

Enterprise Edition

Generally used for medium to large businesses Designed for organizations that require better performance, reliability, and availability than Standard Edition provides Provides support for mission-critical applications Available in both 32 and 64-bit editions
7

Enterprise Edition (continued)

Enterprise Edition (continued)

Datacenter Edition

Designed for mission-critical applications, very large databases, and information access that requires the highest levels of availability
Can only be obtained from Original Equipment Manufacturers (OEMs)

10

Datacenter Edition Continued

11

Web Edition

Lower-cost edition
Designed for hosting and deploying Web services and applications Meant for small to large companies or departments that develop and/or deploy Web services Can only be obtained from Original Equipment Manufacturers (OEMs)
12

Web Edition (continued)

13

Four Types of Servers

14

Windows Networking Concepts Overview

Two different security models used in Windows environments

Workgroup Domain

Three roles for a Windows Server 2003 system in a network

Standalone server Member server Domain controller

Workgroups

A workgroup is a logical group of computers

Characterized by a decentralized security and and administration model Authentication provided by a local account database Security Accounts Manager (SAM) Users need unique accounts on each workstation Users manage their own accounts (security issues) Not very scalable

Limitations

16

Domains

A domain is a logical group of computers

Characterized by centralized authentication and administration

Member Servers

A member server

Has an account in a domain Is not configured as a domain controller Typically used for file, print, application, and host network services All 4 Windows Server 2003 Editions can be configured as member servers

18

AD Improvements

Forest to Forest Trusts

Not transitive Separate Global Catalogs (GC)

Elimination of DC piling on when a PDC is upgraded Max Number of Object 1,000,000,000 Site replication improved Application Partitions selective replication Domains can be renamed

rendom.exe

19

Remote Administration Upgrades

Remote Desktop Protocol

Remote Assistance Remote Desktop Support Access to local devices

Web Based Remote Control

20

Command Line Heaven

More command line programs Enables easier scripting and scheduling of administrative functions More tools available via telnet

21

Tightened Security

Optional services turned off by default NTFS

Everyone Group permissions

Trustworthy Computing Initiative

22

Domain Controllers

Explicitly configured to store a copy of Active Directory Service user authentication requests Service queries about domain objects May be a dedicated server but is not required to be

23

Domain Controllers (continued)

24

Computer Accounts

Assigned in Windows NT, 2000, XP, and 2003 Assigned when joining a domain Method for authentication and access auditing Accounts are represented as computer objects Accounts can be viewed using administrative tools

e.g., Active Directory Users and Computers

25

Using Active Directory Users and Computers to View a Computer Object

26

Network Management and Maintenance Overview

Five major focus areas of administrative tasks

Managing and maintaining physical and logical devices

Managing and maintaining a server environment

Managing and Maintaining Physical and Logical Devices

Network administrator responsibilities include:

Installing and configuring hardware devices Managing server disks Monitoring and managing performance Control panel applets Device Manager Disk Defragmenter
28

Tools include

Managing Users, Computers, and Groups

User accounts

Creation, maintenance, passwords

Group accounts

Assign network rights and permissions to multiple users Support e-mail distribution lists
Active Directory tools and utilities used to create and maintain computer accounts
29

Computer accounts

Managing and Maintaining Access to Resources

Server 2003 uses sharing technique Sharing setup

Through Windows Explorer interface and Computer Management administrative tool Shared folder and NTFS permissions Allows access to applications through a central server Allows access from desktops running different operating systems

Terminal services

30

Managing and Maintaining a Server Environment

Covers a wide variety of tasks including:

Managing Managing Managing Managing

server licensing patches and software updates Web servers printers, print queues, disk quotas

A wide variety of tools are available including:

Event Viewer and System Monitor Software Update Services Microsoft Management Console

31

Managing and Implementing Disaster Recovery

Main component of disaster recovery is system backup Backup tool provided is Windows Backup

Different types of backup Automated scheduling of backups Back up critical system state information Automated system Recovery Shadow Copies of Shared Folders

32

Other

Product Activation Licensing (CALs)

Per server Per user Per machine

Hardware Compatibility List (HCL) Recovery Console

25 employees, 40 PCs, 4 Servers

CAL Example

Per Seat

Per Server

40 Licenses

25 Licenses per Server Total 100 Licenses

34

35