Tài liệu Configuring Windows 2000 Server doc

Configuring Windows 2000 Server T his chapter explores the many tools for configuring and managing the system, managing users, and controlling other aspects of Windows 2000. The Microsoft Management Console In Windows NT, most management functions are scattered through various utilities, some of which appear in the Control Panel. Others are located in the Administrative Tools folder on the Start menu. Still others are hidden in the deep recesses of the file system, accessible only by Administrators with the time to hunt them down. Each typically provides a unique UI and no means of integrating tools together under a single interface. One of the many changes in the Windows 2000 interface and administrative structure over Windows NT is the switch to a more homogenous approach to administrative utilities. While many system and operating properties are still controlled through the Control Panel, most administrative functions have moved to the Microsoft Management Console, or MMC. The MMC runs under Windows 2000, Windows NT, and Windows 9x. This section of the chapter examines the MMC and its component tools. You’ll find additional information about the MMC as well as additional snap-ins at http://www.microsoft.com/ management/mmc. Tip 6 6 CHAPTER ✦✦✦✦ In This Chapter Understanding the Microsoft Management Console (MMC) Working with MMC Tools Configuring Data Sources (ODBC) Exploring the Control Panel Applets ✦✦✦✦ 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 167 168 Part II ✦ Planning, Installation, and Configuration Understanding the Function of the MMC The MMC itself serves as a framework. Within that framework are various admin- istrative tools called consoles. In particular, the MMC provides a unified interface for administrative tools. This means that once you learn the structure of one tool, the rest are going to follow suit (within limitations imposed by the differences in function of the various tools). Figure 6-1 shows the MMC with the Computer Management snap-in loaded (more on snap-ins shortly). As you’ll learn later in this chapter, you use the Computer Management snap-in to configure most aspects of a system’s hardware and software configuration. Figure 6-1: The MMC serves as a framework for a wide variety of administrative tools. Perhaps more important than a unified interface is the fact that the MMC lets you combine administrative tools to build your own console configuration, which you can store by name on disk. The next time you need to work with it, you run the MMC console from the Start menu or double-click its icon or shortcut. For example, let’s say you want to put together a custom console for managing a Windows 2000 Internet server. You can integrate the tools for managing DNS, DHCP, and IIS all under one interface. This custom console gives you quick access to most of the settings you need to configure on a regular basis for the server. The MMC window consists of two panes. The left pane can contain two tabs: Tree and Favorites. The Tree tab generally shows a hierarchical structure for the object(s) being managed. When you use the Active Directory Users and Computers console, for example, the tree shows the containers in the Active Directory (AD) that pertain to users, groups, and computers. The Favorites tab lets you create a list of frequently used items in the tree. The right pane is the details pane. The details pane changes depending on the item you select in the tree. When you select Services in the tree, for example, the details pane shows the list of installed services. 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 168 169 Chapter 6 ✦ Configuring Windows 2000 Server MMC provides two different modes: user mode and author mode. In user mode, you work with existing consoles. Author mode lets you create new consoles or modify existing ones. Figure 6-2 shows the Services console opened in user mode. Figure 6-3 shows the Services console opened in author mode. As indicated in the figures, author mode offers access to commands and functions not available in user mode. Figure 6-2: User mode restricts the actions a user can perform within a console. Figure 6-3: Author mode provides the ability to change console options and add new snap-ins. User mode actually offers three different options: full access, limited access with multiple windows, and limited access with a single window. With full access, an MMC user can access all the window management commands in MMC but can’t 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 169 170 Part II ✦ Planning, Installation, and Configuration add or remove snap-ins or change console properties. The limited access options limit changes to the window configuration of the console and use either a single window or multiple windows depending on the mode. A console’s mode is stored in the console and applies when you open the console. Console modes can be change via the Options property sheet (click Console ➪ Options). Setting console options is discussed later in the chapter. The default mode in Windows 2000 is user mode— limited access, single window. As mentioned earlier, you use author mode to author new consoles or modify existing ones. In author mode, you can add and remove snap-ins, change window options, and set options for the console. Opening the MMC You can open MMC consoles simply by selecting them from the Administrative Tools folder in the Start menu or by double-clicking their icons in Explorer. You also can start consoles using a command prompt. The format of the MMC command is: MMC path\file.msc /a /s The following list explains the options for MMC: ✦ Path\file.msc : Replace path with the path to the console file specified by file.msc . You can use an absolute path or use the %systemroot% variable to reference the local computer’s path to the Windows 2000 folder. Using %systemroot% is useful when you’re creating shortcuts to consoles for use on different systems (where the system root folder might be different). ✦ /a : Use the /a switch to enter author mode and enable changes to the console. Opening an existing console with the /a switch overrides its stored mode for the current session. ✦ /s : Use this switch to prevent display of the splash screen that normally appears when the MMC starts on Windows NT or Windows 9x systems. This switch isn’t needed when running the MMC under Windows 2000. For example, let’s say you want to open the DNS console in author mode to add the DHCP snap-in to it. Use this command to open the DNS console in author mode: MMC %systemroot%\System32\dnsmgmt.msc /a You can right-click an .msc file and choose Author from the context menu to open the file in author mode. After opening the DNS console, you add the DHCP console using the Add/Remove Snap-In command in the Console menu. Snap-ins are covered in the next section. Tip Note 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 170 171 Chapter 6 ✦ Configuring Windows 2000 Server If you prefer, you can simply open the MMC in author mode, then add both snap-ins using the Add/Remove Snap-In command in the Console menu. Windows 2000 provides several pre-configured consoles for performing various administrative tasks. Most of these console files are stored in \systemroot\ System32 and have .msc file extensions (for Microsoft Console). Windows 2000 places several of these consoles in the Administrative Tools folder, which you access by clicking Start ➪ Programs➪ Administrative Tools. In essence, each of the pre-configured consoles contains one or more snap-ins geared toward a specific administrative task. In an apparent effort to simplify the Start menu, Microsoft only includes some of these consoles in the Administrative Tools folder. However, you can open any con- sole by double-clicking its file. When you do so, the MMC loads first and then opens the console. You also can open the MMC and add snap-ins to your own consoles. This gives you the ability to create a custom console containing whichever group(s) of snap-ins you use most often or that are targeted for specific administrative tasks. Using Snap-Ins While the MMC forms the framework for integrated administrative tools in Windows 2000, the tools themselves are called snap-ins. Each MMC snap-in enables you to perform a specific administrative function or group of functions. For example, you use the DHCP snap-in to administer DHCP servers and scopes. The various MMC snap-ins serve the same function as individual administrative tools did in Windows NT. For example, the Event Viewer snap-in takes the place of the standalone Event Viewer tool (Figure 6-4). The Disk Management branch of the Computer Management snap-in replaces Disk Administrator. The Active Directory Users and Computers snap-in takes the place of User Manager for Domains, and so on. Figure 6-4: Snap-ins perform specific administrative functions and replace standalone tools such as Event Viewer. Tip 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 171 172 Part II ✦ Planning, Installation, and Configuration Snap-ins come in two flavors: standalone and extension. Standalone snap-ins are usually called simply snap-ins. Extension snap-ins are usually called simply exten- sions. Snap-ins function by themselves and can be added individually to a console. Extensions are associated with a snap-in and are added to a standalone snap-in or other extension on the console tree. Extensions function within the framework of the standalone snap-in and operate on the objects targeted by the snap-in. For example, the Services snap-in incorporates three extensions: Send Console Message, Service Dependencies, and SNMP Snap-in Extension. You can add snap-ins and extensions when you open a console in author mode. By default, all extensions associated with a snap-in are added when you add the snap-in, but you can selectively disable extensions for a snap-in. To add a snap-in, open the MMC in author mode and choose Console ➪ Add/ Remove Snap-In. The Standalone page of the Add/Remove Snap-In property sheet shows the snap-ins currently loaded. The Extensions tab lists extensions for the currently selected snap-in and allows you to add all extensions or selectively enable/disable specific extensions. In the Standalone page, click Add to add a new snap-in. The Add Standalone Snap-In dialog box lists the available snap-ins. Click the snap-in you want to add and click Add. Depending on the snap-in, you might be prompted to select the focus for the snap-in. For example, when you add the Device Manager snap-in, you can select between managing the local computer or managing another computer on the net- work. Adding the IP Security Policy Management snap-in lets you choose between the local computer, domain policy for the computer’s domain, domain policy for another domain, or another computer. After you configure snap-ins and extensions the way you want them, save the console so you can quickly open the same configuration later. To do so, choose Console, Save, or Save As, and specify a name for the console. Windows 2000 by default will place the new console in the Administrative Tools folder, which appears on the Start menu under Programs, but you can specify a different location if desired. Taskpads A taskpad is a page on which you can add views of the details pane and shortcuts to various functions inside and outside of a console. These shortcuts can run commands, open folders, open a Web page, execute menu commands, and so on. In essence, taskpads let you create a page of organized tasks to help you perform tasks quickly rather than using the existing menu provided by the snap-in. You can create multiple taskpads in a console, but the console must contain at least one snap-in. Figure 6-5 shows a taskpad for performing a variety of tasks in the DNS snap-in. A taskpad can contain a list from the details pane in either horizontal or vertical format. Horizontal works well for multiple column lists (many fields per item), and vertical works well for long lists (few fields per item). You also can configure 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 172 173 Chapter 6 ✦ Configuring Windows 2000 Server a taskpad to show no lists. In addition to the list, the taskpad includes an icon for each task with either a pop-up description or text description of the task. You simply click a task’s icon to execute the task. Figure 6-5: Taskpads let you create tasks for performing specific actions, such as these DNS-related tasks. Creating a taskpad To create a taskpad, right-click the object in the tree that you want to be the focus of the taskpad, then choose New Taskpad View. MMC starts a wizard to help you create the taskpad. In the first page of the wizard (Figure 6-6), you define the appearance of the taskpad. As you make selections, the wizard shows the results to help you determine the effect of your choices. In the second page of the wizard, you specify the items to which the taskpad applies. The following list summarizes the options: ✦ Selected tree item: This option applies the taskpad only to the selected item in the tree. Using the DNS snap-in as an example, creating a taskpad for Forward Lookup Zones and using this option will cause the taskpad to appear only when you click Forward Lookup Zones. It will not appear if you click Reverse Lookup Zones. ✦ All tree items that are the same type as the selected tree item: This option applies the taskpad to all objects in the tree that are the same type as the selected object. Using the previous DNS example, choosing this option will cause the taskpad to display when you click either Forward Lookup Zones or Reverse Lookup Zones. 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 173 174 Part II ✦ Planning, Installation, and Configuration Figure 6-6: The first wizard page helps you configure the way the taskpad appears. ✦ Change default display to this taskpad view for these tree items: Select this option to have the MMC automatically switch to taskpad view when the user clicks the object in the tree associated with the taskpad. Deselect the option to have the MMC default to the normal view instead. The third page of the wizard prompts you for a taskpad view name and description. The name appears at the top of the taskpad and on the tab at the bottom of the taskpad. The description appears at the top of the taskpad under the taskpad name. On the final page of the wizard, you can click Finish to create the taskpad. The Start New Task wizard option, if selected, causes the Start New Task wizard to execute when you click Finish. This wizard, described in the next section, helps you create tasks for the taskpad. Creating tasks After you create a taskpad, you’ll naturally want to create tasks to go on it. Select the Start New Task wizard option if you are in the process of creating the taskpad. Or, right-click the node in the tree that is associated with the taskpad, choose Edit Taskpad View, click the Tasks tab, then click New. The first functional page of the wizard prompts you to select the type of task to add. These include the following: ✦ Menu command: Choose this option to execute a menu command. In the sub- sequent wizard page, you specify the source for the command and the com- mand itself. The available commands fall within the context of the selected source. Select an object, then select the desired command. 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 174 175 Chapter 6 ✦ Configuring Windows 2000 Server ✦ Shell command: Choose this option to start a program, execute a script, open a Web object, execute a shortcut, or perform any other task you can execute from a command line. The wizard prompts you for the command, optional command-line parameters or switches, startup folder, and window state (minimized, normal, maximized). ✦ Navigation: Choose this option to add an icon for an existing item listed in Favorites. See the section, “Favorites,” later in this chapter to learn how to add to the Favorites list. The wizard also prompts you for a task name, description, and icon to associate with each task, and gives you the option at completion of running the wizard again to create another task. Modifying a taskpad You can modify an existing taskpad to add or remove tasks or change taskpad view options. Right-click (in the tree) the object associated with the taskpad, then choose Edit Taskpad View. MMC displays a property sheet for the taskpad. The General page shows the same properties you specified when you created the taskpad, such as list type, list size, and so on. Change options as desired. The Tasks page (Figure 6-7) lists existing tasks and lets you create new ones. New starts the New Task wizard. Remove deletes the selected task. Modify lets you change the task name, description, and icon for the task, but not modify the task itself. To modify the task, remove the task and recreate it. You also can use the up and down arrows to change the order of tasks in the list, which changes their order of appearance on the taskpad. Figure 6-7: Use the Tasks page to add, remove, and modify tasks. 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 175 176 Part II ✦ Planning, Installation, and Configuration Favorites The Favorites list in the left pane of the MMC lets you access often-used objects in a console with a single click. The Favorites list appears when you open a console in author mode or if the Favorites list contains any items. The tab doesn’t show up in the left pane when the console is opened in user mode or if the Favorites list is blank. It is useful for quickly accessing objects that are buried deep in the tree. You also can use Favorites to simplify the view of the tree for inexperienced users. To add an item to Favorites, click the object in the tree to which you want to cre- ate the shortcut, then choose Favorites ➪ Add to Favorites. Specify a name for the shortcut and the folder in which you want it created. Click New Folder to create a new folder for the shortcut. You can use the Organize Favorites dialog box to create folders, move items from one folder to another, and rename or delete items. Choose Favorites ➪ Organize Favorites to open the Organize Favorites dialog box. Other Add-In Tools Snap-ins are just one of the objects you can add to an MMC console. Other objects include ActiveX controls, links to Web pages, folders, taskpad views, and tasks. The previous section explained taskpad views and tasks. The following list summarizes the additional items: ✦ ActiveX controls: You can add ActiveX controls to a console as the details/ results view (right pane) for the selected node of the tree. The System Monitor Control that displays system performance status in Performance Monitor is an example of an ActiveX control. Choose Console➪ Add/Remove Snap-In, select ActiveX Control from the list, and then click Add. The MMC provides a wizard to help you embed ActiveX controls, prompting you for additional information when necessary. ✦ Links to Web pages: You can add links to URLs in a console, which can be any URL viewable within a browser (Web site, ftp site, and so on). ✦ Folders: Insert folders as containers in the console to contain other objects. You can use folders as a means of organizing tools in a console. Would you like to add a local or network folder to a console? Just use the Link to Web page object and point it to the folder instead of an Internet URL. Customizing MMC to Suit Your Needs Like most applications, you can customize the MMC to suit your needs or preferences. First, you can configure the settings for a console when you author it to determine the way it displays in subsequent sessions. For example, you might want to configure Tip 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 176 [...]... try to broadcast a console message to the user first 4667-8 ch06.f.qc 5/15/00 1:59 PM Page 185 Chapter 6 ✦ Configuring Windows 2000 Server Device Manager The Device Manager is a new feature in Windows 2000, its closest Windows NT cousin being the Devices object in the Windows NT Control Panel Windows 9x users and administrators will find the Device Manager a familiar and welcome sight Device Manager... drive$: Windows 2000 shares the root of each drive as a hidden share for administrative purposes You can connect to the share using the UNC path \ \server\ drive$, where server is the computer name and drive is the drive letter, such as \\appsrv\d$ Members of the Administrators and Backup Operators groups can connect to administrative shares on Windows 2000 Professional systems Members of the Server Operators... and groups on Windows 2000 Professional computers and member servers This branch is disabled on a domain controller, since you use the Active Directory Users and Computers snap-in to create user accounts and groups in the Active Directory CrossReference Users and groups are covered in detail in Chapter 10 4667-8 ch06.f.qc 5/15/00 1:59 PM Page 187 Chapter 6 ✦ Configuring Windows 2000 Server Figure... 5/15/00 1:59 PM Page 189 Chapter 6 ✦ Configuring Windows 2000 Server from drivers and enabling WMI to collect data for analysis and management purposes WMI is a key component in enterprise management The WMI Control node provides a means for configuring general settings, logging, backup and restore of the WMI repository, and security to control WMI access Services In Windows 2000, services are applications... developing 4667-8 ch06.f.qc 5/15/00 1:58 PM Page 179 Chapter 6 ✦ Configuring Windows 2000 Server distributed applications (client /server applications) The Component Services console lets you configure a system for Component Services, configure initial service settings, install and configure COM+ applications, and monitor and tune components Note Configuring COM+ applications goes hand-in-hand with COM+ application... Both Windows 2000 Professional and Server include several standard services by default, and many third-party applications function as or include their own services A background virus scrubber is a good example of a possible third-party service Windows NT administrators will remember the Services object in the Control Panel that enables you to configure, start, stop, and pause services In Windows 2000, ... Viewer The Log size group of controls specifies the maximum log size and the action Windows 2000 takes when the maximum size is reached The options are generally self-explanatory Keep in mind, however, that if you select Do not overwrite events, Windows 2000 will stop logging events to the log when it fills up Although Windows 2000 will notify you when the log is full, you’ll need to monitor the event log... contains several objects for configuring the system’s hardware and operating configuration The tools provided for the MMC do not take the place of the Control Panel objects or vice-versa However, you will find some of the MMC tools in the Administrative Tools folder in the Control Panel The Control Panel in Windows 2000 works much like the Control Panels in Windows NT and Windows 9x In fact, many of... modify dependencies The page is self-explanatory Indexing Service The Indexing Service uses document filters to read and create a catalog of documents on a system, and enables a quick text-based search through the catalog for documents that meet the search criteria The document filter extracts information from the document and passes it to the Indexing Service for inclusion in the catalog You can search... variety of criteria including document name, author, contents, and so on You might, for example, use the Indexing Service to build a catalog of internal documents or catalog your organization’s Web site(s) The Indexing Service will index the following document types: ✦ HTML ✦ Text ✦ Microsoft Office 95 or later ✦ Internet Mail and News ✦ Other documents supported by an appropriate document filter (such as . 184 185 Chapter 6 ✦ Configuring Windows 2000 Server Device Manager The Device Manager is a new feature in Windows 2000, its closest Windows NT cousin being. administrative shares on Windows 2000 Professional systems. Members of the Server Operators group can connect to administrative shares on Windows 2000 Server systems,