A01T621527.fm Page Tuesday, January 11, 2005 8:54 PM PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2005 by Microsoft Corporation All rights reserved No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher Library of Congress Control Number 2004118216 Printed and bound in the United States of America QWT Distributed in Canada by H.B Fenn and Company Ltd A CIP catalogue record for this book is available from the British Library Microsoft Press books are available through booksellers and distributors worldwide For further information about international editions, contact your local Microsoft Corporation office or contact Microsoft Press International directly at fax (425) 936-7329 Visit our Web site at www.microsoft.com/ learning/ Send comments to tkinput@microsoft.com Microsoft, Active Directory, ActiveSync, ActiveX, DirectSound, DirectX, FrontPage, IntelliMirror, Microsoft Press, MSDN, MS-DOS, MSN, NetMeeting, Outlook, Visual InterDev, Visual Studio, Win32, Windows, Windows Media, Windows Mobile, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred Product Planner: Martine DelRe Content Development Manager: Marzena Makuta, Elise Morrison Technical Editor: Karena Lynch Project Manager: Julie Pickering Copy Editor: Nancy Sixsmith Indexer: Julie Hatley Body Part No X10-87059 For my wife, Susan Walter Glenn For my wife, Erica Tony Northrup About the Authors Walter Glenn, Microsoft Certified System Engineer (MCSE) and Microsoft Certified Trainer (MCT), has been a part of the computer industry for more than 17 years He currently works in Huntsville, Alabama, as a consultant, trainer, and writer Walter is the author or coauthor of more than 20 computer books, including Microsoft Exchange Server 2003 Administrator’s Companion (Microsoft Press, 2003), MCDST Self-Paced Training Kit (Exam 70-271): Supporting Users and Troubleshooting a Microsoft Windows XP Operating System (Microsoft Press, 2004), MCDST Self-Paced Training Kit (Exam 70-272): Supporting Users and Troubleshooting Desktop Applications on a Microsoft Windows XP Operating System (Microsoft Press, 2004), and MCSE Self-Paced Training Kit (Exam 70-297): Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure (Microsoft Press, 2003) He has also written a number of Webbased courses that are geared toward Microsoft certification training Tony Northrup, Certified Information Systems Security Professional (CISPP), MCSE, and Microsoft Most Valuable Professional (MVP), is a networking consultant and author living in the Boston, Massachusetts area During his seven years as principal systems architect at BBN/Genuity, he was ultimately responsible for the reliability and security of hundreds of Windows servers and dozens of Windows domains—all directly connected to the Internet Needless to say, Tony learned the hard way how to keep Windows systems safe and reliable in a hostile environment As a consultant, Tony has provided networking guidance to a wide variety of businesses, from Fortune 100 enterprises to small businesses When he is not consulting or writing, Tony enjoys cycling, hiking, and nature photography Table of Contents ix Contents at a Glance Part 1 10 11 12 13 14 15 16 17 18 19 20 Part 21 22 23 24 25 26 27 Learn at Your Own Pace Introduction to Windows XP Professional 1-3 Installing Windows XP Professional 2-1 Deploying Windows XP Professional 3-1 Modifying and Troubleshooting the Startup Process 4-1 Configuring Windows XP Professional 5-1 Installing, Managing, and Troubleshooting Hardware Devices and Drivers 6-1 Setting Up and Managing User Accounts 7-1 Securing Resources with NTFS Permissions 8-1 Administering Shared Folders 9-1 Managing Data Storage 10-1 Setting Up, Configuring, and Troubleshooting Printers 11-1 Managing Printers and Documents 12-1 Supporting TCP/IP 13-1 Overview of Active Directory Service 14-1 Configuring Network and Internet Connections 15-1 Configuring Security Settings and Internet Options 16-1 Monitoring and Managing Shared Folders by Using Computer Management 17-1 Using Windows XP Tools 18-1 Monitoring and Optimizing System Performance 19-1 Backing Up and Restoring Data 20-1 Prepare for the Exam Installing Windows XP Professional (1.0) 21-3 Implementing and Conducting Administration of Resources 22-1 Implementing, Managing, Monitoring, and Troubleshooting Hardware Devices and Drivers 23-1 Monitoring and Optimizing System Performance and Reliability 24-1 Configuring and Troubleshooting the Desktop Environment 25-1 Implementing, Managing, and Troubleshooting Network Protocols and Services 26-1 Configuring, Managing, and Troubleshooting Security 27-1 ix Contents Contents Acknowledgments xxxv About This Book xxxvii Intended Audience xxxvii Prerequisites xxxviii About the CD-ROM xxxviii Features of This Book xxxviii Part I: Learn at Your Own Pace xxxix Part II: Prepare for the Exam xxxix Informational Notes xl Notational Conventions xl Keyboard Conventions xli Getting Started xli Hardware Requirements .xli Software Requirements xlii Setup Instructions xlii The Microsoft Certified Professional Program xliii Certifications xliv Requirements for Becoming a Microsoft Certified Professional xliv Technical Support xlv Evaluation Edition Software Support xlvi Part 1 Learn at Your Own Pace Introduction to Windows XP Professional 1-3 Why This Chapter Matters 1-3 Before You Begin 1-3 Lesson 1: Explaining Windows XP 1-4 Available Windows XP Editions 1-4 Lesson Review 1-6 Lesson Summary 1-7 Lesson 2: Identifying Major Features of Windows XP Service Pack 1-8 How to Determine Whether Service Pack Is Installed 1-8 Major Enhancements Included in Windows XP Service Pack 1-9 Lesson Review 1-14 Lesson Summary 1-15 What you think of this book? We want to hear from you! Microsoft is interested in hearing your feedback about this publication so we can continually improve our books and learning resources for you To participate in a brief online survey, please visit: www.microsoft.com/learning/booksurvey/ ix x Contents Lesson 3: Identifying Key Characteristics of Workgroups and Domains 1-16 How Workgroups Work 1-16 How Domains Work 1-17 Lesson Review 1-19 Lesson Summary 1-20 Lesson 4: Logging On and Off Windows XP Professional 1-21 How to Log On Locally to the Computer Running Windows XP Professional 1-21 Windows XP Professional Authentication Process 1-24 How to Use a Password Reset Disk 1-25 How to Run Programs with Different User Credentials 1-26 The Purpose of Fast Logon Optimization 1-27 How to Log Off Windows XP Professional 1-27 Features of the Windows Security Dialog Box 1-27 Practice: Creating a Password Reset Disk 1-29 Lesson Review 1-30 Lesson Summary 1-31 Case Scenario Exercises 1-32 Scenario 1.1 1-32 Scenario 1.2 1-33 Troubleshooting Lab 1-33 Chapter Summary 1-33 Exam Highlights 1-34 Key Points 1-35 Key Terms 1-35 Questions and Answers 1-37 Installing Windows XP Professional 2-1 Why This Chapter Matters 2-1 Before You Begin 2-1 Lesson 1: Preparing for Installation 2-2 Overview of Preinstallation Tasks 2-2 Windows XP Professional Hardware Requirements 2-2 How to Verify Hardware Compatibility with the Windows Catalog 2-3 What Are Disk Partitions? 2-3 Guidelines for Choosing a File System 2-4 Guidelines for Choosing Domain or Workgroup Membership 2-7 How to Ensure You Have the Necessary Information Before Installing Windows XP Professional 2-8 How Microsoft Grants Software Licenses 2-9 2-34 Chapter Installing Windows XP Professional How to Upgrade Compatible Computers Running Windows 98 For client computers running Windows 98 that test as compatible with Windows XP Professional, you can upgrade using a setup wizard or by running Winnt32.exe to complete the upgrade To upgrade a computer running Windows 98 to Windows XP Professional using Winnt32.exe, complete the following steps: Insert the Windows XP Professional CD-ROM in the CD-ROM drive The Autorun program on the Windows XP Professional CD-ROM displays the Welcome To Microsoft Windows XP screen Note If you not want to use any switches with Winnt32.exe, click Install Windows XP and follow the prompts on your screen These steps are the same as Exercise in Lesson 2, “Installing Windows XP Professional from a CD-ROM.” Open the Command Prompt window, type d:\i386\winnt32.exe with any appropriate switches, and press ENTER Accept the license agreement If the computer is already a member of a domain, create a computer account in that domain Windows 98 clients not require a computer account, but Windows XP Professional clients Provide upgrade packs for applications that need them Upgrade packs update the software to work with Windows XP Professional These packs are available from the software vendor Upgrade to NTFS when prompted Select the upgrade if you not plan to set up the client computer to dual boot Continue with the upgrade if the Windows XP Professional Compatibility tool generates a report showing that the computer is compatible with Windows XP Professional The upgrade finishes without further intervention, and adds your computer to a domain or workgroup If the report shows that the computer is incompatible with Windows XP Professional, terminate the upgrade process, and then upgrade your hardware or software How to Upgrade Compatible Computers Running Windows NT 4.0 The upgrade process for computers running Windows NT 4.0 is similar to the upgrade process for computers running Windows 98 Before you perform the upgrade, use the Windows XP Professional Compatibility tool to verify that the systems are compatible with Windows XP Professional and to identify any potential problems Lesson Upgrading Earlier Versions of Windows to Windows XP Professional 2-35 Windows NT 4.0 computers that meet the hardware compatibility requirements can upgrade directly to Windows XP Professional To upgrade a computer running Windows NT 4.0 to Windows XP Professional using Winnt32.exe, complete the following steps: Insert the Windows XP Professional CD-ROM in the CD-ROM drive The Autorun program on the Windows XP Professional CD-ROM displays the Welcome To Microsoft Windows XP screen Note If you not want to use any switches with Winnt32.exe, click Install Windows XP and follow the prompts on your screen These steps are the same as those in Practice in Lesson 2 Open the Command Prompt window, type d:\i386\winnt32.exe with any appropriate switches, and press ENTER On the Welcome To Windows page, in the Installation Type drop-down list, select Upgrade, and then click Next On the License Agreement page, read the license agreement, click I Accept This Agreement, and then click Next On the Product Key page, enter your 25-character product key, which is located on the back of the Windows XP Professional CD-ROM case On the Windows XP Professional NTFS File System page, click Yes, Upgrade My Drive, and then click Next After Setup copies installation files, the computer restarts and the upgrade finishes without further user intervention necessary Lesson Review Use the following questions to help determine whether you have learned enough to move on to the next lesson If you have difficulty answering these questions, review the material in this lesson before beginning the next lesson You can find answers to these questions in the “Questions and Answers” section at the end of this chapter Which of the following operating systems can be upgraded directly to Windows XP Professional? Choose all that apply a Windows NT Workstation 4.0 b Windows NT 3.51 c Windows 2000 Professional d Windows NT Server 4.0 2-36 Chapter Installing Windows XP Professional How can you upgrade a computer running Windows 95 to Windows XP Professional? Before you upgrade a computer running Windows NT 4.0 Workstation, which of the following actions should you perform? Choose all that apply a Create a GB partition on which to install Windows XP Professional b Verify that the computer meets the minimum hardware requirements c Generate a hardware and software compatibility report d Format the partition containing Windows NT 4.0 so that you can install Windows XP Professional How can you verify that your computer is compatible with Windows XP Professional and therefore can be upgraded? Lesson Summary ■ Before you upgrade a client computer to Windows XP Professional, ensure that it meets the minimum hardware requirements ■ Use the Windows XP Professional Compatibility tool to generate a hardware and software compatibility report ■ For client systems that test as compatible with Windows XP Professional, run the Windows XP Professional Setup program (Winnt32.exe) to complete the upgrade Lesson Troubleshooting Windows XP Professional Setup 2-37 Lesson 5: Troubleshooting Windows XP Professional Setup The best way to avoid problems when installing Windows XP Professional is to fully prepare a computer for installation, choose the right kind of installation for your needs, and make sure that the hardware in the computer is compatible with Windows XP Professional prior to beginning the installation Although installations of Windows XP Professional complete without any problems most of the time, this lesson introduces you to some common reasons why an installation might fail and what you can to solve the problem After this lesson, you will be able to ■ Identify common setup failures and their solutions ■ Troubleshoot setup failures by using setup logs Estimated lesson time: 15 minutes Guidelines for Resolving Common Problems Fortunately, most installation problems are relatively minor issues that are simple to correct Table 2-6 lists some common installation problems and offers solutions to those problems Table 2-6 Troubleshooting Tips Problem Solution Media errors occur If you are installing from a CD-ROM, use a different CD-ROM To request a replacement CD-ROM, contact Microsoft or your vendor Try using a different computer and CD-ROM drive If you can read the CD-ROM on a different computer, you can perform an over-thenetwork installation If one of your Setup disks is not working, try using a different set of Setup disks CD-ROM drive is not supported Replace the CD-ROM drive with a supported drive If replacement is impossible, try another installation method such as installing over the network After you complete the installation, install the driver for the adapter card driver for the CD-ROM drive if it is available Computer cannot copy files from the CD-ROM Test the CD-ROM on another computer If you can copy the files using a different CD-ROM drive on a different computer, use the CDROM to copy the files to a network share or to the hard drive of the computer on which you want to install Windows XP Professional Sometimes, when you get an error stating that Setup cannot copy a particular file, the problem can actually be a failed RAM module If you test the CD and CD-ROM drive successfully, testing your memory should be the next step 2-38 Chapter Table 2-6 Installing Windows XP Professional Troubleshooting Tips Problem Insufficient disk space Solution Do one of the following: Use the Setup program to create a partition by using existing free space on the hard disk ■ Delete and create partitions as needed to create a partition that is large enough for installation ■ Reformat an existing partition to create more space ■ Setup failure during Verify that Windows XP supports the mass storage devices on the early text mode portion of computer If not, press F6 when prompted and supply the necessary Setup drivers for these devices from floppy disk Dependency service fails to start In the Windows XP Professional Setup Wizard, return to the Network Settings page and verify that you installed the correct protocol and network adapter Verify that the network adapter has the proper configuration settings, such as transceiver type, and that the local computer name is unique on the network During Setup, the comWhen Setup attempts to write to the boot sector to make the hard puter’s BIOS-based virus disk Windows XP-bootable, BIOS-based virus scanners might interscanner gives an error pret the action as an attempt by a virus to infect the system Disable message indicating that a the virus protection in the BIOS and enable it again after Windows virus is attempting to infect XP is fully installed the boot sector Setup fails Setup cannot connect to the domain controller Verify the following: The domain name is correct ■ The server running the DNS service and the domain controller are both running and online If you cannot locate a domain controller, install Windows XP Professional into a workgroup and then join the domain after installation ■ The network adapter card and protocol settings are set correctly If you are reinstalling Windows XP Professional and are using the same computer name, delete the computer account and re-create it ■ Windows XP Professional Verify the following: ■ Windows XP Professional is detecting all the hardware fails to install or start ■ All the hardware is in the Windows Catalog Try running Winnt32 /checkupgradeonly to verify that the hardware is compatible with Windows XP Professional Remove unsupported devices in an attempt to get past the error If you are unsure about which devices are unsupported, consider removing all devices during the installation (except those necessary to run the system, such as the motherboard, display adapter, memory, and so on) and then reconnecting them after Windows is installed Lesson Troubleshooting Windows XP Professional Setup 2-39 Guidelines for Troubleshooting Setup Failures Using the Windows XP Setup Logs During Setup, Windows XP Professional generates a number of log files containing installation information that can help you resolve any problems that occur after Setup is completed The action log and the error log are especially useful for troubleshooting Both are located in the installation folder (C:\Windows by default) Tip The logs are text documents that you can view in Notepad, WordPad, or Word Some of the documents are very large Consider searching the document for the word fail, which can help you locate instances in the log files that contain information on failed operations Action Log The action log records the actions that the Setup program performs in chronological order It includes actions such as copying files and creating Registry entries It also contains entries that are written to the Setup error log The action log is named Setupact.log If an installation fails, you can often pinpoint what was going on (for example, what file was being copied) when the installation failed Searching the Microsoft Knowledge Base using the description of the action as a keyword often yields solutions to the problem at hand Error Log The error log describes errors (and their severity) that occur during Setup Because the contents of this log are also included in the action log, you can think of the error log as a subset of the action log The error log is named Setuperr.log If errors occur, the log viewer displays the error log at the end of Setup If no errors occurred during installation, this file is empty See Also For additional information about troubleshooting installations, see Lesson 3, “Using Startup and Recovery Tools,” in Chapter 4, "Modifying and Troubleshooting the Startup Process." Troubleshooting Stop Errors Stop errors, also referred to as blue screen errors, occur when the system detects a condition from which it cannot recover The system stops responding and displays a screen of information on a blue background The most likely time during installation that you might experience stop errors is when the text mode stage of setup has finished, your computer restarts, and the Setup Wizard stage begins During this transi- 2-40 Chapter Installing Windows XP Professional tion, Windows XP loads the newly installed operating system kernel for the first time and initializes new hardware drivers Stop errors are identified by a 10-digit hexadecimal number The two most common stop errors you will encounter during Windows XP installation are described as follows: Stop: 0x0000000A Error This error usually indicates that Windows attempted to access a particular memory address at too high an internal request level (IRQL) This error usually occurs when a hardware driver uses an incorrect memory address, but can also indicate an incompatible device driver or a general hardware problem To troubleshoot this error, confirm that your hardware is listed in the Windows Catalog, make sure that your BIOS is compatible with Windows XP Professional, and perform general hardware troubleshooting You can learn more about troubleshooting this stop error by reading Microsoft Knowledge Base article 314063, “Troubleshooting a Stop 0x0000000A Error in Windows XP.” Stop: 0x0000007B Error This error normally indicates that you have an inaccessible boot device, meaning that Windows cannot access your hard disk The common causes for this type of error are a boot sector virus, bad or incompatible hardware, or missing hardware drivers You can learn more about troubleshooting this stop error by reading Microsoft Knowledge Base article 324103, “How to Troubleshoot ‘Stop 0x0000007B’ Errors in Windows XP.” Tip Although these are the two most common Stop errors you will see during Windows XP installation, you might encounter other Stop errors If you get a Stop error, write down the Stop error number Search the Microsoft Knowledge Base using the number as your keyword, and you can find information on how to resolve the error You can learn more about troubleshooting Stop errors by reading the article “Windows Server 2003 Troubleshooting Stop Errors,” which is available at http://www.microsoft.com/technet/prodtechnol/ windowsserver2003/operations/system/sptcestp.mspx Although the article is written for Windows Server 2003, it also applies to Windows XP Lesson Review Use the following questions to help determine whether you have learned enough to move on to the next lesson If you have difficulty answering these questions, review the material in this lesson before beginning the next lesson You can find answers to these questions in the “Questions and Answers” section at the end of this chapter Lesson Troubleshooting Windows XP Professional Setup 2-41 If you encounter an error during setup, which of the following log files should you check? Choose all that apply a Setuperr.log b Netsetup.log c Setup.log d Setupact.log If your computer cannot connect to the domain controller during installation, what should you do? If your computer cannot connect to read the CD-ROM during installation, what should you do? Lesson Summary ■ The action log, Setupact.log, records and describes in chronological order the actions that Setup performs ■ The error log, Setuperr.log, describes errors that occur during Setup and indicates the severity of each error ■ If a failed installation results in a stop error, you can search the Microsoft Knowledge Base for information on troubleshooting the problem 2-42 Chapter Installing Windows XP Professional Lesson 6: Activating and Updating Windows XP Professional After installing Windows XP for a home or small business user, you will need to activate Windows Unless activated, Windows can only be used only for 30 days Corporate installations typically not need to be activated because most corporations use a volume licensing system You will also need to install any available updates and preferably configure Windows to download and install critical updates automatically After this lesson, you will be able to ■ Activate Windows XP following installation ■ Scan a system and display available updates by using the Windows Update site ■ Configure Automatic Updates to download and install updates automatically ■ Explain the purpose of Software Update Services ■ Explain the purpose of service packs Estimated lesson time: 30 minutes Guidelines for Activating Windows Following Installation Unless you are working with an installation that is part of a volume licensing plan, Windows XP Professional requires that the operating system be activated with Microsoft within 30 days of installation Typically, if you install Windows XP Professional using an original installation CD, you need to activate it If the operating system is not activated within this time, Windows ceases to function until it is activated You are not allowed to log on to the system until you contact one of Microsoft’s product activation centers The first time you log on to Windows following installation, Windows prompts you to activate the product if activation is necessary If you not perform the activation, Windows continues to prompt you at regular intervals until you activate the product Windows Product Activation (WPA) requires each installation to have a unique product key When you enter the 25-character product key during Windows installation, the Setup program generates a 20-character product ID (PID) During activation, Windows combines the PID and a hardware ID to form an installation ID Windows sends this installation ID to a Microsoft license clearinghouse, where the PID is verified to ensure that it is valid and that it has not already been used to activate another installation If this check passes, the license clearinghouse sends a confirmation ID to your computer, and Windows XP Professional is activated If the check fails, activation fails Lesson Activating and Updating Windows XP Professional 2-43 How to Scan a System and Display Available Updates Using the Windows Update Site Windows Update is an online service that provides enhancements to the Windows family of operating systems Product updates such as critical and security updates, general Windows updates, and device driver updates are all easily accessible When you connect to the Windows Update website, the site scans your system (a process that happens locally without sending any information to Microsoft) to determine what is already installed, and then presents you with a list of available updates for your system You can access Windows Update in the following ways: ■ Through Internet Explorer by clicking Windows Update from the Tools menu ■ Through any Web browser by using the URL http://www.microsoft.com/windowsupdate ■ Through the Help And Support Center by clicking Windows Update ■ Through the Start menu by clicking All Programs and then Windows Update ■ Through Device Manager by clicking Update Driver in the Properties dialog box of any device Using the Windows Update Site To perform an Express Install from the Windows Update site, follow these steps: From the Start menu, click All Programs, and then click Windows Update On the Microsoft Windows Update website, click Express Install After the scan is complete (a process that is performed locally—no information is sent to Microsoft’s servers), click Install If you are prompted with an End User License Agreement (EULA), read the agreement and click I Accept Wait while the updates are downloaded and installed If you are prompted to restart your computer, click Restart Now If you are not prompted to restart, click Close How to Configure Automatic Updates Windows XP also supports Automatic Updates, a feature that automatically downloads and installs new updates when they become available You should configure the Automatic Updates feature in Windows XP to automatically download and install new updates according to a regular schedule To configure Automatic Updates, follow these steps: 2-44 Chapter Installing Windows XP Professional From the Start menu, click Control Panel In the Control Panel window, click Performance And Maintenance In the Performance And Maintenance window, click System On the Automatic Updates tab, click the Automatic option, as shown in Figure 2-9 Select how often and at what time of day updates should be downloaded and installed For users with dedicated connections (such as a cable modem), you should configure Windows to check for updates daily at a time when the user is not using the computer Users with dial-up connections might want to check less frequently if they are concerned about allowing their computers to connect to the Internet automatically F02US09 Figure 2-9 You should schedule Automatic Updates to download and install updates automatically Click OK ! Exam Tip Enabling Automatic Update and configuring it to download and install updates automatically according to a preset schedule is the recommended way for handling critical updates for Windows XP What Is Software Update Services? By default, Automatic Updates locates and downloads updates from Microsoft’s public update servers As an alternative, you can configure an update service to run on the local network and supply updates to clients This procedure provides better control over the specific updates made available to client computers Lesson Activating and Updating Windows XP Professional 2-45 Software Update Services (SUS) is a server component installed on a Windows 2000 or Windows 2003 server inside the corporate firewall SUS allows for the distribution of critical updates and security updates; it does not allow the distribution of Service Packs or driver updates, and it does not have a mechanism to deploy software packages outright SUS synchronizes with the public Windows Update site at Microsoft on behalf of your clients SUS, which is designed to support up to 15,000 clients, serves as a distribution point of updates to the clients in your organization in two ways: Automatically You can create an automatic content distribution point on the SUS server that will synchronize its content with the content from the Windows Update website This option offers clients the same updates as the public server, but cuts down on Internet traffic by providing the updates locally Manually You can also create a content distribution point on a server running Microsoft Internet Information Services (IIS) version 5.0 or later This option lets you specify which updates are available You can also control which server each Windows client connects to for updates (if you are running more than one SUS server across multiple sites), as well as schedule when the client should perform the installations of critical updates Installing SUS You can install the Software Update Services server component on a server running either Windows 2000 Server or Windows Server 2003 The computer should meet the following system requirements: ■ Pentium III 700 MHz or better processor ■ 512 MB of RAM ■ GB of available hard disk space formatted with NTFS ■ Windows 2000 Server (with Service Pack or later) or Windows Server 2003 ■ IIS 5.0 or later ■ Internet Explorer 6.0 or later The SUS component is available for download from (http://www.microsoft.com/ windows2000/windowsupdate/sus/default.asp) After the download is complete, double-click the setup file to begin the installation process and simply follow the menu prompts for a Typical installation (a Custom installation lets you choose the folder where the service is installed and the location where updates are stored) To Use Group Policy to Configure Clients to Access SUS After SUS is installed in your environment, you need to configure the client systems to use it—otherwise, they will just keep using the Windows Update public server instead 2-46 Chapter Installing Windows XP Professional You must use Group Policy to configure clients to use the SUS server You can set the policy at either the domain or organizational unit level Group Policy is explained in more detail in Chapter 16, “Configuring Security Settings and Internet Options.” To set the Group Policy, follow these steps: Log on as a domain administrator or open the Active Directory Users And Computers tool using the Run As command to enter the appropriate credentials Right-click the domain or organizational unit and choose Properties from the shortcut menu Switch to the Group Policy tab You could edit the default domain policy, but it is normally recommended that you create another one for these types of secondary settings To this, choose the New button and name the new policy that appears in the window After you have named the policy, click the Edit button to open the Group Policy Object Editor window Expand the Computer Configuration node, then the Administrative Templates node, then the Windows Components node, and then the Windows Update node Double-click the Configure Automatic Updates setting to specify any of the following: ❑ Notify The User Before Download And Before Installation ❑ Automatically Download And Notify The User Before Installation ❑ Automatically Download And Schedule An Automatic Installation Double-click the Specify Intranet Microsoft Update Service Location setting Change the setting to Enabled and enter the name of the internal SUS server that the clients in the domain should use into both fields This information can be entered by name or by IP address Double-click the Reschedule Automatic Updates scheduled installations setting to change the schedule for automatic installation on clients 10 Double-click the No Auto-Restart For Scheduled Automatic Updates installations to prevent clients from restarting after an automatic installation Note After Automatic Updates is configured by Group Policy, the Automatic Updates settings become unavailable to the user of the client computer What Are Service Packs? Microsoft periodically releases service packs for Windows XP A service pack is a collection of all updates released to that point, and often includes new features, as well Lesson Activating and Updating Windows XP Professional 2-47 You should be familiar with the deployment of service packs to ensure that all operating systems on the network are up-to-date and to avoid issues that you might encounter in the future Windows XP ships with a utility called Winver.exe, which you can use to determine what version of Windows you are running and what level of service pack (if any) is installed Figure 2-10 displays the output of Winver.exe prior to any service pack being installed If a service pack has been installed, the version will be noted after the build number F02US10 Figure 2-10 Use Winver.exe to determine the current Windows version and service pack To Obtain a Service Pack Service packs are free, and you can get them in the following ways: ■ Use Windows Update to update a single computer with a service pack ■ Download the service pack from Windows Update to deploy to many computers The download is a single large self-extracting executable, which will have a different name depending on the service pack version that you are installing The file is quite large (85 MB or more), so be sure that you have sufficient bandwidth available to support the download ■ Order the service pack CD You can order the service pack CD from Microsoft for a nominal fee that covers the cost of manufacture and shipping In addition to containing the service pack, the CD contains operating system enhancements and other advanced utilities ■ Use Microsoft subscription services Microsoft has several subscription services, such as Microsoft TechNet, which automatically provide you with service packs with the next issue after the release of the service pack 2-48 Chapter Installing Windows XP Professional To Install a Service Pack Service pack setup programs can have various names, though most Windows Service Packs use a program named Update.exe Regardless of the file name, though, most Windows updates support the same command-line parameters, which control how the service pack deploys Table 2-7 lists these parameters Table 2-7 Common Command-Line Parameters for Windows Updates Switch Function /f Forces all applications to close prior to restarting the system /n Does not back up uninstall files You cannot uninstall the service pack if this switch is used /o Overwrites OEM-provided files without prompting the user /q Installation runs in quiet mode with no user interaction required (requires /o to update OEM-supplied files) /s:[path to distribution folder] Creates an integration installation point /u Unattended installation (requires /o to update OEM-supplied files) /x Extracts files without starting Setup This is useful if you want to move installation files to another location /z Disables automatic restart when installation is finished Service pack installations require a significant amount of disk space (hundreds of megabytes) The uninstall folder consumes the majority of this disk space You can install a service pack without saving uninstall files by using the /n switch when installing the service pack You must choose an installation method from the following options: Update installation The service pack executable is started locally, across the network, or through Windows Update The service pack is installed on the existing operating system Integrated installation Also called slipstreaming, an integrated installation is one in which the service pack is applied to the installation files on a distribution server using the /s switch, integrating the installation files and the service pack into a single set of updated installation files New installations that included the service pack can then be performed from the integrated distribution point This eliminates the need to apply the service pack after the installation However, the service pack cannot be uninstalled if it is applied in this fashion Combination installation This involves installation using a combination of an integrated installation, an answer file to control the installation process, and a Cmdlines.txt file to launch additional application setup programs after the operating system setup has completed ... (Microsoft Press, 2003), MCDST Self- Paced Training Kit (Exam 7 0- 2 71) : Supporting Users and Troubleshooting a Microsoft Windows XP Operating System (Microsoft Press, 2004), MCDST Self- Paced Training. .. Training Kit (Exam 7 0- 272): Supporting Users and Troubleshooting Desktop Applications on a Microsoft Windows XP Operating System (Microsoft Press, 2004), and MCSE Self- Paced Training Kit (Exam 7 0- 297):... send them to Microsoft Learning using either of the following methods: E-mail: tkinput @microsoft. com Postal Mail: Microsoft Learning Attn: MCSE Self- Paced Training Kit (Exam 7 0- 270) : Installing,