Planning the Terminal Services Configuration 561 installed on domain controllers. In workgroups or Windows NT 4 domains, domain license servers can be installed on any member server. In order to deploy Terminal Services, you will be required to obtain server and client licenses. The licenses you may need are described in Table 12.2. TABLE 12.2 Terminal Services Licenses License Description Windows 2000 Server license This server license is included when you purchase Windows 2000 Server. Windows 2000 Server Client Access license This license is required for all com- puters or Terminal Services clients that connect to a Windows 2000 server. This license is required by all connecting computers to use file, print, and other network ser- vices, regardless of whether they are using Terminal Services. Windows 2000 Terminal Services Client Access license or Windows 2000 Professional license Every Terminal Services client needs to have a Windows 2000 Terminal Services Client Access license in addition to a Windows 2000 Server Client Access license. This license provides each Terminal Services cli- ent the right to connect to a Terminal Services server and run applications on the server. Windows 2000 Profes- sional machines that are used as Ter- minal Services clients are automatically licensed to connect to Terminal Services. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com 562 Chapter 12 Administering Terminal Services Installing and Configuring the Terminal Services Server T he Terminal server controls all of the Terminal clients that are connected to it. All Terminal Services operations actually take place on the Terminal server. Windows 2000 Terminal Services Internet Connector license This license can be purchased and used separately from the client access licenses described above. This license allows up to 200 clients to connect anonymously from the Internet. This is useful for providing Windows-based applications to the public without porting them to a Web-based format. Users who access Terminal Services with this license must be nonemployees. Work at Home Windows 2000 Terminal Services Client Access license This license is required for users who want to use Terminal Services to access the Windows 2000 Desktop and applications from home. You can purchase a Work at Home Windows 2000 Terminal Services Client Access license for each Terminal Services Cli- ent Access license owned. The Work at Home license includes a Windows 2000 Server Client Access license, but does not include application licenses, which must be purchased separately. TABLE 12.2 Terminal Services Licenses (continued) License Description Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com Installing and Configuring the Terminal Services Server 563 The clients are nothing more than dummy windows that display information sent from the server and send mouse and keyboard information to the server. After you install Terminal Services, you can configure many settings that con- trol how users and sessions are handled by the Terminal server through the Ter- minal Server Configuration utility. You can use the Terminal Services Manager utility to view every server and session on the network and manually perform actions such as immediately disconnecting from or sending messages to sessions. Installing the Terminal Services Server You install Terminal Services through the Add/Remove Programs icon in Control Panel. Terminal Services can only be configured to support one mode at a time, either remote administration mode or application server mode. In the following sections, you will learn how to install both Terminal Services modes. Installing Terminal Services in Remote Administration Mode You should install Terminal Services in remote administration mode if you want to be able to perform administrative tasks from any client on the network, rather than needing to work from the server console. To install Terminal Services in remote administration mode, take the following steps: 1. Select Start Settings Control Panel. Double-click the Add/Remove Programs icon. 2. The Add/Remove Programs window appears. Click the Add/Remove Windows Components option. 3. The Windows Components Wizard starts. Check the Terminal Services box and click the Next button. Microsoft Exam Objective Install, configure, monitor, and troubleshoot Terminal Services. Remotely administer servers by using Terminal Services. Configure Terminal Services for application sharing. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com 564 Chapter 12 Administering Terminal Services 4. The Terminal Services Setup dialog box appears, as shown in Figure 12.1. Confirm that the Remote Administration Mode radio button is selected and click the Next button. FIGURE 12.1 Selecting the Terminal Services mode 5. The Configuring Components dialog box appears. If the Windows 2000 Server CD is not already in your CD-ROM drive, you will be prompted to insert the Windows 2000 Server CD. Files will be copied, and the Terminal Services components will be configured. This may take a few minutes. 6. The Completing the Windows Components Wizard dialog box appears. Click the Finish button. 7. You will be prompted to restart the computer for the changes to be effective. Click the Yes button to restart your computer. Installing Terminal Services in Application Server Mode If you want to give users remote access to applications running on the server, you should install Terminal Services in application server mode. Take the following steps to install Terminal Services in application server mode (this assumes that remote administration mode is not installed): 1. Select Start Settings Control Panel. Double-click the Add/Remove Programs icon. 2. The Add/Remove Programs window appears. Click the Add/Remove Windows Components option. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com Installing and Configuring the Terminal Services Server 565 3. The Windows Components Wizard starts. Check the Terminal Services box and click the Next button. 4. The first Terminal Services Setup dialog box appears (see Figure 12.1). Select the Application Server Mode radio button and click the Next button. 5. The second Terminal Services Setup dialog box appears, as shown in Figure 12.2. In this dialog box, you select the default permissions for application compatibility. The Permissions Compatible with Windows 2000 Users option provides the highest level of security. The Permissions Compatible with Terminal Services 4.0 Users option provides the highest compatibility for legacy applications. Make your selection and click the Next button. FIGURE 12.2 Selecting Terminal Services application permissions compatibility 6. You might be notified that certain applications may not work properly after installing Terminal Services in application server mode. You should reinstall these applications after Terminal Services Setup is complete. If the application does not support network access, it will not work with Terminal Services. Click the Next button. 7. The Configuring Components dialog box appears. If the Windows 2000 Server CD is not already in your CD-ROM drive, you will be prompted to insert the Windows 2000 Server CD. Files will be copied, and the Terminal Services components will be configured. This may take a few minutes. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com 566 Chapter 12 Administering Terminal Services 8. The Completing the Windows Components Wizard dialog box appears. Click the Finish button. 9. You will be prompted to restart the computer for the changes to be effective. Click the Yes button to restart your computer. In Exercise 12.1, you will install Terminal Services in application server mode on your domain controller. After you install Terminal Services, three new items are added to the Adminis- trative Tools program group: Terminal Services Client Creator, Terminal Services Configuration, and Terminal Services Manager. The Terminal Services Client Creator is used to create 32-bit and 16-bit client software diskettes for use with cli- ent machines, as explained in the “Installing and Configuring Terminal Services Clients” section later in the chapter. The following sections describe how to con- figure and manage Terminal Services with the Terminal Services Configuration and Terminal Services Manager utilities. EXERCISE 12.1 Installing Terminal Services on a Server 1. Select Start Settings Control Panel and double-click the Add/ Remove Programs icon. 2. In the Add/Remove Programs window, click Add/Remove Windows Components. 3. When the Windows Components Wizard begins, check the Terminal Services check box and click the Next button. 4. In the first Terminal Services Setup dialog box, click the Application Server Mode radio button and click the Next button. 5. In the next Terminal Services Setup dialog box, select the Per- missions Compatible with Windows 2000 Users radio button and click the Next button. 6. If you are notified that certain applications may not work properly after installing Terminal Services in application server mode, click the Next button. (You should reinstall these applications after you’ve installed Terminal Services.) 7. The appropriate files will be copied from the Windows 2000 Server CD. Reboot when prompted by clicking the Yes button. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com Installing and Configuring the Terminal Services Server 567 Configuring the Terminal Services Server With the Terminal Services Configuration utility, you can change the properties of the RDP-TCP (Remote Desktop Protocol-Transmission Control Protocol) connection that is created when you install Terminal Services. You can also add new connections with this utility. To open Terminal Services Configuration, select Start Programs Adminis- trative Tools Terminal Services Configuration. The main Terminal Services Configuration window is shown in Figure 12.3. FIGURE 12.3 The Terminal Services Configuration window Managing Connections To configure the properties for a specific connection, select the Connections folder, right-click the connection in the Terminal Services Configuration window, and select Properties from the pop-up menu. This brings up the RDP-Tcp Properties dialog box, as shown in Figure 12.4. This dialog box has eight tabs: General, Logon Settings, Sessions, Environment, Remote Control, Client Settings, Network Adapter, and Permissions. The options on these tabs are described in the following sections. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com 568 Chapter 12 Administering Terminal Services FIGURE 12.4 The General tab of the RDP-Tcp Properties dialog box Configuring General Properties The General tab (see Figure 12.4) shows the connection type and transport protocol. In this tab, you can specify a comment for the connection, select the encryption level that will be used, and choose whether or not standard Windows authentication will be used. You will see an option for another authentication method if another authentication package has been installed on the server. Terminal Services uses the standard RSA RC4 encryption method when transferring data between the server and clients. You can change the level of encryption depending on your needs. The Encryption Level drop-down list has three choices: The Low setting secures all data sent from the client to the server, but not from the server to the client. Windows 2000-based clients use a 56-bit key. Earlier versions of the client use a 40-bit key. The Medium setting secures data traveling in both directions. This encryption level uses the same keys as the Low setting. The High setting secures data traveling in both directions. This encryption level uses a 128-bit key. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com Installing and Configuring the Terminal Services Server 569 Configuring Logon Settings The Logon Settings tab, shown in Figure 12.5, allows you to specify whether the client will provide logon information or whether the logon information will be preconfigured. You can also specify whether the user will always be prompted for a password. FIGURE 12.5 The Logon Settings tab of the RDP-Tcp Properties dialog box Configuring Sessions Settings The Sessions tab, shown in Figure 12.6, allows you to configure session timeout and reconnection settings. You can limit the amount of time that active, idle, and disconnected sessions remain running on the server. You also can set whether the session should end or be disconnected when the time limit is reached. A disconnected session is saved on the server, and the disconnected user can reconnect from any client without losing any data. Ending a session closes all of the user’s applications immediately, usually resulting in lost data. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com 570 Chapter 12 Administering Terminal Services FIGURE 12.6 The Sessions tab of the RDP-Tcp Properties dialog box Configuring Environment Settings The Environment tab, shown in Figure 12.7, allows you to override the settings that are created in Client Connection Manager Wizard or the user profile and start a specific program when the user logs on. You can also specify that no wallpaper will be displayed on the client, which speeds up screen redrawing. Copyright ©2000 SYBEX , Inc., Alameda, CA www.sybex.com [...]... separately) Copyright 2000 SYBEX , Inc., Alameda, CA www.sybex.com 578 Chapter 12 Administering Terminal Services TABLE 12.4 Terminal Services Server Settings (continued) Setting Value Description Permission Compatibility Windows 2000/ Terminal Services 4.0 Specifies permission compatibility Terminal Server Mode Application Server/ Remote Administration Specifies the Terminal Server mode Use Temporary... to insert the Windows 2000 Server CD so that the necessary files can be copied 7 The Completing the Windows Components Wizard dialog box appears Click the Finish button Close the Add/Remove Windows Components window, and then close Control Panel 8 Select Start Programs Services Licensing Administrative Tools Terminal 9 The Terminal Service Licensing utility starts, as shown in Figure 12. 19 Right-click... the license server, and the keys will be available for use immediately after they are received by the license server Copyright 2000 SYBEX , Inc., Alameda, CA www.sybex.com Setting Up Terminal Services Clients 5 89 Setting Up Terminal Services Clients The Terminal Services client software is a relatively small package that allows a wide range of machines to connect to a Windows 2000 Terminal server The... attempts to log on to the Terminal server in application server mode, the server will recognize that the client has not been issued a license and will locate a license server to issue a license to the client This license is a digitally signed certificate that will remain with the client forever and cannot be used by any other client Before you can begin using a license server, you must activate it through... Services is running in application server mode) and click the Next button 5 The Terminal Services Licensing Setup dialog box appears, as shown in Figure 12.18 Specify if the license server will be available for your enterprise or for your domain or workgroup Click the Next button FIGURE 12.18 The Terminal Services Licensing Setup dialog box 6 If your Windows 2000 Server CD is not already in the CD-ROM... Services” later in this chapter Configuring Client Settings The Client Settings tab, shown in Figure 12 .9, allows you to configure connection settings and specify which options are disabled Copyright 2000 SYBEX , Inc., Alameda, CA www.sybex.com Installing and Configuring the Terminal Services Server FIGURE 12 .9 573 The Client Settings tab of the RDP-Tcp Properties dialog box By default, mappings that a user... Administrators and User Access to Users Managing Server Settings Through the Terminal Services Configuration utility, you can also configure settings that apply to the server Select the Server Settings folder in the Terminal Services Configuration window to see the settings available, as shown in Figure 12.12 These settings are described in Table 12.4 Copyright 2000 SYBEX , Inc., Alameda, CA www.sybex.com... Administrative Tools Terminal 9 The Terminal Service Licensing utility starts, as shown in Figure 12. 19 Right-click your license server and select Activate Server from the popup menu Copyright 2000 SYBEX , Inc., Alameda, CA www.sybex.com 586 Chapter 12 Administering Terminal Services FIGURE 12. 19 The Terminal Services Licensing window 10 The Licensing Wizard starts, as shown in Figure 12.20 Click the Next button... Terminal Services 13 The License Server Activation dialog box appears, as shown in Figure 12.23 Type in the license number provided by Microsoft (or leave this blank and provide a valid number within 90 days) Click the Next button FIGURE 12.23 The License Server Activation dialog box While you are waiting for the registration process to complete, you can issue temporary 90 -day licenses to clients who... who need to use Terminal Services immediately After a license server is activated, you can begin installing client license key packs The key packs are sets of client licenses that the license server distributes to your clients You install key packs either at the end of the license server activation process or by right-clicking a license server in the Terminal Services Licensing tool and selecting Install . Services Licenses License Description Windows 2000 Server license This server license is included when you purchase Windows 2000 Server. Windows 2000 Server Client Access license This license. a Windows 2000 Server Client Access license. This license provides each Terminal Services cli- ent the right to connect to a Terminal Services server and run applications on the server. Windows. Configuring Components dialog box appears. If the Windows 2000 Server CD is not already in your CD-ROM drive, you will be prompted to insert the Windows 2000 Server CD. Files will be copied, and the