This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] • • • • • Table of Contents Index Reviews Reader Reviews Errata Windows Server 2003 in a Nutshell By Mitch Tulloch Publisher: O'Reilly Pub Date: September 2003 ISBN: 0-596-00404-4 Pages: 662 Microsoft has introduced the right server for a world now dominated by highly distributed systems and web-based server applications, and O'Reilly Windows Server 2003 in a Nutshell is the most thorough and practical reference to this important new server With complete coverage of both the GUI and Command line features, functions and commands, as well as tips and notes detailing subtle points and potential "gotchas", this book will quickly earn a permanent place on your desk top [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] • • • • • Table of Contents Index Reviews Reader Reviews Errata Windows Server 2003 in a Nutshell By Mitch Tulloch Publisher: O'Reilly Pub Date: September 2003 ISBN: 0-596-00404-4 Pages: 662 Copyright Preface Who This Book Is for How to Use This Book What's New in This Edition Conventions Used in This Book Comments and Questions Acknowledgments Disclaimer I Transitioning NT 2003 1.1 New Tools, Old Tasks 1.2 Tips for Transitioning 2000 2003 2.1 What Changed? 2.2 New Features and Enhancements II Alphabetical Reference Task Map 3.1 Understanding the Entries 3.2 Alphabetical List of Tasks Account Lockout Policy Active Directory Administrative Shares Administrative Templates This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com Administrative Tools Advanced Options Menu APIPA Auditing Automated System Recovery (ASR) Automatic Updates Backups Boot Logging Boot Menu Clock Command Prompt Computers Connections Convenience Consoles Delegation Devices Device Drivers DFS DHCP Direct Computer Connection Directory Services Restore Mode Disks Disk Quotas DNS Domains Domain Controllers Domain Controller Security Policy Domain Security Policy EFS Error Reporting Event Logs File System Folder Redirection Forests FSMO Roles Global Catalog Groups Group Policy Hardware Compatibility Hardware Profiles Hardware Requirements Hibernation Mode Kerberos Policy Installation Internet Connection Firewall (ICF) Internet Connection Sharing (ICS) Internet Explorer Last Known Good Configuration Licensing Local Security Policy Logon/Logoff Scripts Logon MMC This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com MMC Network Bridge NTFS Objects Offline Files OUs Passwords Power Options Permissions Printers Processes Program Compatibility Mode RAID Recovery Console Registry Remote Assistance Remote Desktop Remote Desktop Connection Remote Desktop Web Connection Rights Roles RRAS Safe Mode Saved Queries Secondary Logon Security Configuration and Analysis Services Shadow Copies Shared Folders Shutdown Sites Software Installation Special Identities Standby Mode Startup Startup/Shutdown Scripts System Information System Restore Tasks TCP/IP Trusts Upgrading Users User Profiles VPN Windows Product Activation WINS GUI Reference 4.1 Read This First! 4.2 Concepts, Tools, Tasks, and Notes 4.3 Everyday Administration 4.4 Help Finding Things 4.5 Gestalt Menus This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com 4.6 Topics Covered 4.7 Alphabetical List of Topics Active Directory—Concepts Active Directory—Tools Active Directory—Tasks Active Directory—Notes Administrative Tools—Concepts Administrative Tools—Tasks Administrative Tools—Notes Advanced Options Menu—Concepts Advanced Options Menu—Tasks Auditing—Concepts Auditing—Tasks Auditing—Notes Automatic Updates—Concepts Automatic Updates—Tasks Automatic Updates—Notes Backup—Concepts Backup—Tasks Backup—Notes Connections—Concepts Connections—Tools Connections—Tasks Connections—Notes Delegation—Concepts Delegation—Tasks Delegation—Notes Devices—Concepts Devices—Tools Devices—Tasks Devices—Notes DFS—Concepts DFS—Tasks DFS—Notes DHCP—Concepts DHCP—Tasks DHCP—Notes Disks—Concepts Disks—Tools Disks—Tasks Disks—Notes DNS—Concepts DNS—Tasks DNS—Notes Domain—Concepts Domain—Tools Domain—Tasks Domain—Notes Domain Controller—Concepts Domain Controller—Tasks Domain Controller—Notes Event Logs—Concepts Event Logs—Tools This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com Event Logs—Tools Event Logs—Tasks Event Logs—Notes Files and Folders—Concepts Files and Folders—Tools Files and Folders—Tasks Files and Folders—Notes Forest—Concepts Forest—Tasks Groups—Concepts Groups—Tasks Groups—Notes Group Policy—Concepts Group Policy—Tools Group Policy—Tasks Group Policy—Notes Installation—Concepts Installation—Tasks Installation—Notes Logon—Concepts Logon—Tasks Logon—Notes Microsoft Management Console—Concepts Microsoft Management Console—Tasks OU—Concepts OU—Tasks OU—Notes Permissions—Concepts Permissions—Tasks Permissions—Notes Printing—Concepts Printing—Tasks Printing—Notes Recovery Console—Concepts Recovery Console—Tasks Recovery Console—Notes Remote Desktop—Concepts Remote Desktop—Tasks Remote Desktop—Notes Routing and Remote Access—Concepts Routing and Remote Access—Tools Routing and Remote Access—Tasks Routing and Remote Access—Notes Security Templates—Concepts Security Templates—Tools Security Templates—Tasks Security Templates—Notes Services—Concepts Services—Tasks Services—Notes Shared Folders—Concepts Shared Folders—Tools Shared Folders—Tasks This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com Shared Folders—Notes Site—Concepts Site—Tools Site—Tasks Site—Notes Tasks—Concepts Tasks—Tools Tasks—Tasks Tasks—Notes TCP/IP—Concepts TCP/IP—Tasks TCP/IP—Notes Trusts—Concepts Trusts—Tasks Trusts—Notes Users—Concepts Users—Tools Users—Tasks Users—Notes WINS—Concepts WINS—Tools WINS—Tasks WINS—Notes Command Reference 5.1 Read This First! 5.2 If a Command Won't Run 5.3 Alphabetical List of Commands adprep arp assoc at attrib bootcfg bootcfg /addsw bootcfg /copy bootcfg /dbg1394 bootcfg /debug bootcfg /default bootcfg /delete bootcfg /ems bootcfg /query bootcfg raw bootcfg /rmsw bootcfg /timeout cacls chkdsk chkntfs cipher clip cmd cmdkey convert csvde This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com csvde date dcgpofix defrag dfscmd diskpart driverquery dsadd dsget dsmod dsmove dsquery dsrm eventquery expand finger format freedisk ftp ftype getmac gpresult gpupdate hostname ipconfig label ldifde lpq lpr mode mountvol nbtstat net net accounts net computer net config net config server net config workstation net continue net file net group net help net helpmsg net localgroup net name net pause net print net send net session net share net start net statistics net stop This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com net time net use net user net view netsh netsh/Global Context netsh/AAAA context netsh/DHCP Context netsh/Interface Context netsh/RAS Context netsh/Routing Context netsh/WINS Context netstat nslookup openfiles pathping ping popd prncnfg prndrvr prnjobs prnmngr prnqctl pushd rcp recover rexec route rsh runas schtasks set setx shutdown start systeminfo takeown taskkill tasklist telnet tftp time tracert ver III Resources A Appendix: Useful Sites Acronyms Colophon Index [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] Copyright Copyright © 2003 O'Reilly & Associates, Inc Portions of this book previously appeared in Windows 2000 Administration in a Nutshell, Copyright © 2001 O'Reilly & Associates, Inc All rights reserved Printed in the United States of America Published by O'Reilly & Associates, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472 O'Reilly & Associates books may be purchased for educational, business, or sales promotional use Online editions are also available for most titles (http://safari.oreilly.com) For more information, contact our corporate/institutional sales department: (800) 998-9938 or corporate@oreilly.com Nutshell Handbook, the Nutshell Handbook logo, and the O'Reilly logo are registered trademarks of O'Reilly & Associates, Inc Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks Where those designations appear in this book, and O'Reilly & Associates, Inc was aware of a trademark claim, the designations have been printed in caps or initial caps The association between the image of an American white pelican and the topic of Windows Server 2003 is a trademark of O'Reilly & Associates, Inc While every precaution has been taken in the preparation of this book, the publisher and authors assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] Safe Mode 2nd boot in startup, troubleshooting scavenging, DNS scheduled tasks [See also Task Scheduler]2nd 3rd additional schedules 2nd configuration 2nd disabling Group Policy and pop-up messages preventing temporarily remote computers remote tasks repeat interval run immediately running tasks scheduling view all scheduled tasks, at command schema master domain controller schema NC (Active Directory) schemas, Active Directory schtasks command scope deployment, installation and DHCP activation creating option configuration reconcile reservations GPOs groups converting scripts commands, troubleshooting Group Policy scheduling searches event logs GPOs groups secondary logon 2nd enable/disable Secondary Logon service, enabling secondary name server, DNS security Administrator account analysis auditing options configuration configuration domains encryption, cipher command This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com files folders Group Policy Guest account IAS (Internet Authentication Service), configuring Internet Explorer Local Security Policy passwords, managing policies, Group Policy RRAS templates Web browsing security groups 2nd security log failure events success events security model, installation and security policies domain controllers domains security templates applying to computer creating custom importing overview Security Templates snap-in Security Templates snap-in, configuration Semiautomatic option, Automatic Updates sending files/folders Server service settings statistics, displaying servers DHCP audit logging authorization configuring multihomed DNS clear cache datafile updates monitoring offline files print server remote access, configuring roles, adding shadow copies sites, moving to new services configuration 2nd configuring, from command line continuing paused managing overview pausing 2nd recovery restarting resuming 2nd This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com running, pausing Server and Workstation displaying statistics for displaying status Server, settings startup status stopping 2nd Workstation, settings set command Setup in Repair Mode setx command shadow copies 2nd client software enabling settings shared folders Share a Folder Wizard shared files closing offline offline files client and server and shared folders administrative shares 2nd command line Computer Management connecting to connections File Server Management 2nd file sharing Group Policy and implementation My Network Places NTFS permissions offline availability offline files 2nd configuration synchronization overview permissions assigning permissions, NTFS 2nd previous versions publish in Active Directory publishing, Group Policy and shadow copies 2nd client software configuration enabling Synchronize utility Windows Explorer and Shared Folders snap-in shared resources connections, managing managing viewing sharing connections This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com sharing printers 2nd shutdown force scripts, Group Policy troubleshooting 2nd shutdown command single-name approach, DNS site objects, authority, delegation site-enabled applications site-link bridges sites Active Directory Sites and Services boundaries bridgehead servers preferred configuration connections, Active Directory creating DFS domain controllers and GPO links, configuration links 2nd configuration creating location, configuration logon traffic overview 2nd planning replication forcing topology replication traffic servers, moving to new site subnets 2nd association configuration creating SLIP (Serial Line Internet Protocol) snap-ins Security Templates Shared Folders snap-ins, MMC SOA (start of authority) record, DNS soft quotas software installation Group Policy spanned volumes, dynamic disks special identities, built-in special permissions (NTFS) 2nd modifying spooling, printers, configuration SRV (service) record, DNS standalone DFS standard permissions (NTFS) modify standby mode, configuration start command startup hardware profiles This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com scripts, Group Policy services configuration troubleshooting 2nd static mapping, WINS, configuration statistics, DHCP status, services stopping services striped volumes, dynamic disks subdomain approach, DNS subdomains, DNS subnets configuration creating sites, association success events, security log SUPPORT\\\\TOOLS folder, Active Directory tools SUS (Software Update Services) synchronization, Active Directory domain controllers Synchronize utility, shared folders system date, displaying/modifying system groups, built-in System Information devices displaying startup, troubleshooting viewing 2nd system log error events information events warning events system objects, global, auditing System Policy System Restore System Restore, Group Policy and system state Backup restoring system time, displaying and modifying system variables setting systeminfo command SYSVOL share (Active Directory) [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] takeown command targets, DFS new root Task Manager opening processes troubleshooting shutdown Task Scheduler 2nd [See also scheduled tasks] pausing stopping task-based delegation taskkill command tasklist command taskpad views, MMC tasks additional schedules configuration management overview remote running Scheduled Tasks scheduled, disabling scheduling Task Manager TCP/IP [See also networks] APIPA configuration connectivity, testing dial-up connections DNS client configuration filtering gateways, adding IP addressing static overview 2nd packet filtering print servers print queue status, displaying printing to settings, displaying status, displaying troubleshooting telnet command template users templates [See also security templates] administrative templates Terminal Services Group Policy test pages, printing 2nd testing TCP/IP connections tftp command third-party applications, installation 2nd 3rd This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com time command time server, synchronizing local machine with timeouts, connections top-level domains tracert command transition tips transitive trusts tree (Active Directory) trivial file transfer protocol troubleshooting Active Directory installation commands devices 2nd DNS servers LANs [See APIPA] shutdown 2nd startup 2nd TCP/IP trusts Active Directory cross-link trust deleting external trusts creating revoking forest trust forests and Kerberos transitive trusts verification 2nd [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] unattended installation 2nd 3rd universal groups 2nd Unix, print services updates [See also Automatic Updates] device drivers DHCP dynamic updates DNS dynamic server datafiles upgrades Active Directory administrative tools domain controllers domains NT domains forests and from NT installation comparison NT domain controller installation NT machines 2nd NT networks paths process W2K domain controllers W2K machines UPN suffix, forests user accounts managing password and logon management user logon name user mode, MMC user profiles configuration default customize Group Policy home folder local configuration mandatory 2nd My Documents roaming 2nd 3rd usernames, managing users accounts built-in 2nd copying deleting disabling 2nd finding naming conventions password reset 2nd renaming 2nd restrictions This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com unlocking administrative templates configuration console messages creating Active Directory disconnecting domain users 2nd management groups adding to membership management home folder local configuration create creating logon box display logon hours passwords, settings Remote Desktop Users Group rights configuration rights, assigning template users [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] variables environment implementing list of setting local, setting system, setting ver command verbose logon message verbose logon messages verification, trusts version information operating system, displaying View menu (Active Directory Users and Computers tool) volumes backups creating delete deleting disks defragmenting drive path extending 2nd formatting 2nd 3rd labels modifying management mirrored, recovery mount mount points, displaying mounting RAID-5, recovery repair repairing status 2nd VPN (Virtual Private Network) client connections configuration connection status connections configuration creating monitoring implementation RRAS 2nd WAN miniports, adding VSS (Volume Shadow Copy Service) Backup and [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] WAN connections WAN protocols authentication protocols remote access WANs (Wide Area Networks), miniports, adding warning events, system log web sites passwords Windows & NET Magazine Network Windows 2000 mixed mode, domains Windows 2000 native mode, domains Windows Explorer file appearance file management files folder appearance folders shared folders Windows Installer package, software installation Windows Installer service, software installation Windows Product Activation Windows Script Host [See WSH] Windows Server 2003 Downloads Windows Server 2003 Home Web site Windows Server 2003 interim mode, domains Windows Server 2003 mode, domains Windows Server 2003 Support Center WinPE (Windows Preinstallation Environment) WINS (Windows Internet Name Service) client configuration 2nd installation overview proxies, configuration proxy agents push/pull partners replication requirements for server configuration servers, replication configuration static mapping configuration WINS proxy wizards Backup or Restore DNS installation New Connection Wizard 2nd workgroups 2nd groups 2nd local groups membership Workstation service settings statistics, displaying for WPA (Windows Product Activation), installation and This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com WSCRIPT WSH (Windows Script Host), versions [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] XP Professional [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com [ Team LiB ] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] zone transfers, DNS zones, DNS 2nd converting forward-lookup reverse-lookup transfer/replication [ Team LiB ] This document is created with a trial version of CHM2PDF Pilot http://www.colorpilot.com Brought to You by Like the book? Buy it! ... book, and O'Reilly & Associates, Inc was aware of a trademark claim, the designations have been printed in caps or initial caps The association between the image of an American white pelican and... simpler to manage than NT domains because two-way transitive trusts are automatically established between parent and child domains in a domain tree and between the root domains of trees in a forest... Domain Admins account for performing administrative tasks In Windows NT, if an administrator was logged on with her ordinary account and had to perform an administrative task, she had to log off,