Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network potx

Contents Overview 1 Lesson: Configuring Windows XP Professional for a Workgroup 2 Demonstration: Using the Computer Management Console 8 Practice: Joining a Workgroup 11 Practice: Configuring Fast User Switching 15 Lesson: Configuring Local Security 18 Lesson: Configuring Network Options in a Workgroup 27 Lesson: Joining a Domain 38 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2003 Microsoft Corporation. All rights reserved. Microsoft, MS-DOS, Windows, Windows NT, ActiveX, Active Directory, MSDN, PowerPoint, and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network iii Instructor Notes This module provides students with the skills to configure Microsoft® Windows ® XP Professional to operate in a workgroup or in a domain. The module explains user accounts and the Microsoft Management Console (MMC). After completing this module, students will be able to: ! Configure Microsoft Windows XP Professional for a workgroup. ! Configure security settings on individual accounts and computers. ! Use the Network Setup Wizard to configure network options when operating in a workgroup. ! Configure Microsoft Windows XP Professional for a domain. You need Microsoft PowerPoint® file 2285A_06.ppt. It is recommended that you use PowerPoint 2002 or later to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, some features of the slides may not appear correctly. To prepare for this module: ! Read all materials for this module. ! Complete the practices. ! Read all materials listed under Additional reading in this module. Presentation: 90 minutes Lab: 00 minutes Required materials Important Preparation tasks iv Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network How to Teach This Module This section contains information that will help you to teach this module. For some topics in this module, references to additional information appear in notes at the end of a topic. Read the additional information in preparation for teaching the module. During class, ensure that students are aware of the additional information. Lesson: Configuring Windows XP Professional for a Workgroup This section describes the instructional methods for teaching this lesson. Explain what a workgroup is. Define peer-to-peer network and stand-alone server. Ensure that students understand the advantages and limitations of workgroups. Describe the characteristics of a local user account. Describe the local Security Account Manager (SAM) and cite the resources listed under Additional reading. Describe the different types of accounts. Explain that the default types are created by using: ! Computer Management Console ! Control Panel In this topic, describe the Computer Management Console. When you list the tasks that the Computer Management Console performs, illustrate the tasks with examples. Demonstrate the process for creating user accounts, and then demonstrate how to create user accounts in the Computer Management Console. Emphasize that when you create accounts in the Computer Management Console, the default account type is an Administrator account with no password, and that this type of account can pose a security risk. Recommend the following guidelines to increase security: ! Users must change their passwords after their initial logons. ! The administrator must disable idle accounts. Before this demonstration, remove GLASGOW from the NWTRADERS domain and put it in the WORKGROUP workgroup. Describe the authentication process for local accounts. Explain what an access token is. Emphasize that changes to accounts in a workgroup must occur on all computers in the workgroup. Assign students to work in pairs for this practice. This practice takes approximately 10 minutes. What Is a Work g roup? What Is a Local User Account? Account Types and Account Privile g es What Is the Computer Mana g ement Console? Demonstration: Using the Computer Management Console Note The Authentication Process Practice: Joining a Work g roup Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network v List the options that are available only in Windows XP Professional when it operates in a workgroup. Explain that these options are not available in a domain. Fast User Switching is available only when you enable Use the Welcome Screen. If you disable Use the Welcome Screen as the easy logon option, you also disable the Use Fast User Switching option. You also cannot use Fast User Switching when Offline Files is enabled. Remind students that they must continue to work in pairs in this practice. This practice takes approximately 10 minutes. Lesson: Configuring Local Security Describe the MMC, and then give an overview of the process of configuring local security. Describe the settings that you can configure to increase security for Local Policies. Explain the differences between User Rights Assignments and Security Options. Describe the CTRL+ALT+DEL security template options. Explain each setting in the table. In this practice, the students use the tables as job aids to choose the correct settings for their Account Policies. Explain that students can use the procedures and the tables to choose the correct Account Policies for most circumstances. This practice takes approximately 10 minutes. Lesson: Configuring Network Options in a Workgroup Emphasize that you must configure the network before you can enable file- and print-sharing in a workgroup. Describe the tasks involved when you configure networking options in a workgroup. Mention the Home and Small Office Network Setup checklist and the computer description because you will not explain them later in the module. Describe how the Internet Connection Firewall (ICF) controls connections between the internal network and the Internet. Be prepared to illustrate how ICF can deny access to non-secure traffic from the Internet. Describe how Internet Connection Sharing works. Be prepared to answer questions from students who want to know more about the technology behind Internet Connection Sharing (ICS). In particular, mention Universal Plug and Play (UPnP), even though you will not present UPnP in the lesson. Logon Options in a Work g roup Note Practice: Configuring for Fast User Switching What Is Local Security Confi g uration? Guidelines for Configuring Local Policies Guidelines for Configuring CTRL+ALT+DEL Security Options Practice: Configuring Account Policies How Workgroup Confi g uration Works What Is Internet Connection Sharing? What Is the Internet Connection Firewall? Guidelines for Selecting an Internet Connection Method vi Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Describe the two methods of connecting to the Internet: ICS and the Other option in the Network Setup Wizard. Prepare real-life examples to illustrate each method. ICS Discovery and Control uses Universal Plug and Play (UPnP). ICS clients can discover the ICS host, control the connection status of the ICS host to the Internet Service Provider (ISP), and view basic statistical information about the Internet connection. Demonstrate how to enable ICS and ICF by using Control Panel. Ensure that each student has a Windows XP Professional compact disc. This practice takes approximately 15 minutes. Lesson: Joining a Domain Describe the differences between workgroups and domains, and explain the requirements of joining a domain. Explain how the Welcome screen differs from the Log on to Windows screen. Describe the authentication process in a domain. Explain what cached credentials are and how they are used. In this practice, students will join a domain. This practice takes approximately 15 minutes. Assessment This module has assessment questions for each lesson, which are located on the Student Materials compact disc. You can use them as pre-instruction assessments to help students identify areas of difficulty, or as post-instruction assessments to validate learning. Consider using assessment questions to reinforce learning at the end of the day. You can also use them at the beginning of the day as a review of the information that you taught on the previous day. Lab There are no labs for this module. Note Demonstration: Using Control Panel to Configure Network Options Practice: Configuring Network Options in a Work g roup What Is the Impact of Joinin g a Domain? How Users Log On to a Domain Practice: Joining a Domain Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network 1 Overview ***************************** ILLEGAL FOR NON-TRAINER USE****************************** To configure Microsoft ® Windows® XP Professional to operate in a workgroup or a domain, you must correctly create and configure user accounts, and configure the security of the network. As an Information Technology (IT) professional, you must understand the similarities and differences between workgroups and domains so that you can configure Windows XP Professional to operate properly in your network environment. After completing this module, you will be able to: ! Configure Windows XP Professional for a workgroup. ! Configure security settings on individual accounts and computers. ! Use the Network Setup Wizard to configure network options in a workgroup. ! Configure Windows XP Professional for a domain. Introduction Ob j ectives 2 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Lesson: Configuring Windows XP Professional for a Workgroup ***************************** ILLEGAL FOR NON-TRAINER USE****************************** To configure Windows XP Professional to operate in Microsoft Windows networks, you must understand how a workgroup environment affects configuration. You must also differentiate among the types of user accounts and their capabilities. After completing this lesson, you will be able to: ! Describe a workgroup. ! Describe local user accounts. ! Describe information about user accounts in a workgroup. ! Describe how the Computer Management Console works. ! Describe the authentication process in a domain. ! Join a workgroup. ! Change workgroup logon options. ! Configure Windows XP Professional for a workgroup. Introduction Lesson objectives Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network 3 What Is a Workgroup? ***************************** ILLEGAL FOR NON-TRAINER USE****************************** The advantages of a workgroup are: ! In smaller organizations where computers in a workgroup share resources, there is no need to dedicate a computer as a server. This saves the organization the expense of a server and server software. Standalone servers are computers running server software in a workgroup. ! Workgroups are appropriate for organizations with decentralized resource and account administration. The limitation of workgroups is that they are difficult to manage if more than 10 computers are on a network. In a workgroup, all user accounts are local user accounts. If five workers use five computers in a workgroup and they require access to each other’s resources, there are 25 user accounts in the workgroup because each computer duplicates the five user accounts. When you make a change to a user account in a workgroup, you must also make the change on each computer in the workgroup. Advantages Note Limitation 4 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network What Is a Local User Account? ***************************** ILLEGAL FOR NON-TRAINER USE****************************** ! A user account contains a user’s unique credentials. The user account enables a user to: • Use a specific computer in a workgroup to access resources on that computer. • Log on to a domain to access network resources. ! Local user accounts are created on the computer on which they are used, and enable the user to access resources on that computer. • A local user account resides in a security account database, called the Security Account Manager (SAM), on the computer on which the user account is created. Because the local user account resides locally, it controls access only to local resources, which are resources that reside on the local computer. • A local user account is authenticated against the credentials in the local SAM. For more information about administering user accounts, see Module 1, “Introduction to Windows 2000 Administration,” and Module 2, “Setting Up User Accounts,” in Course 2028, Basic Administration of Microsoft Windows 2000. Key points Additional reading [...]... password, and Windows XP Professional forwards the information to the SAM on the local computer • Windows XP Professional compares the logon information with the user information in the SAM • If the information matches and the user account is valid, Windows XP Professional creates an access token for the user ! An access token is the user’s identification for that local computer and contains the user’s... delete accounts • Make computerwide changes, and access all files on the computer • Install all hardware and software Note You cannot create a Standard user account by using Control Panel To grant a user the privileges of a Standard user, or Power user, you must add the user to the Power Users group in the Computer Management Console Module 6: Configuring Windows XP Professional to Operate in a Microsoft. .. workgroup name ! Configure folder sharing This enables users on the network to share folders ! Configure printer sharing This step enables users on the network to access printers on the network Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Additional reading For more information about configuring home and small networks, see the article Home or small office network overview... that a user must use before repeating a previous password Values are 0 to 24 At least 3 Maximum password age The maximum number of days that a user may use the same password Values are 0 (never expires) to 999 No more than 42 (default) Minimum password age The minimum number of days that a user must use the same password A value of zero indicates that the password may be changed immediately The value... settings These security settings enable the user to access resources and perform specific system tasks ! If you make a change to a user account, such as a password change, the workgroup authentication process requires you to make the same change on each computer to which the user requires access Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network 11 Practice: Joining a Workgroup... attempts to install an unsigned driver Warn, but allow installation 22 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Guidelines for Configuring CTRL+ALT+DEL Security Options *****************************ILLEGAL FOR NON-TRAINER USE****************************** To access CTRL+ALT+DEL Options: ! Open a customized console that contains the Local Computer Policy snap -in ! Expand... from Windows XP Professional Logging off prevents users from accessing necessary programs (for example, when a computer is set up as a kiosk on which many people must access particular programs and are not required to log on) 24 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Practice: Configuring Account Policies *****************************ILLEGAL FOR NON-TRAINER... Standalone Snap -in window, select Group Policy from the alphabetized list, and then click Add 6 In the Select Group Policy Object window, verify that Local Computer is displayed, and then click Finish 7 In the Add Standalone Snap -in window, select Local Users and Groups, and then click Add 8 Click Local computer, and then click Finish Module 6: Configuring Windows XP Professional to Operate in a Microsoft. .. right pane, and then clicking Properties 6 Click Create Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Changing account types To change the account type of a local user account in a workgroup: 1 Click Start, click Control Panel, click User Accounts, and then click Change an account 2 Select an account, then Click Change the account type 3 Select an account type, and then... where minimal security is acceptable 14 Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network Fast User Switching Fast User Switching enables users to switch among user accounts without closing programs or logging off The main features of Fast User Switching are: ! Fast User Switching is enabled by default ! When it is enabled, the user sees Switch User in the Log Off Windows . Authentication Process Practice: Joining a Work g roup Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network v List the options that are available only in Windows XP. Practice: Configuring Network Options in a Work g roup What Is the Impact of Joinin g a Domain? How Users Log On to a Domain Practice: Joining a Domain Module 6: Configuring Windows. Lesson: Configuring Local Security 18 Lesson: Configuring Network Options in a Workgroup 27 Lesson: Joining a Domain 38 Module 6: Configuring Windows XP Professional to Operate in a Microsoft