INSTRUCTOR GUIDE Education COURSE 555 Placing Windows NT Domains into NDS Supplement 100-004220-001 Revision 1.0 This document may only be used by a Novell-certified instructor. If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Placing Windows NT Domains into NDS Instructor Guide Supplement Proprietary Statement Copyright © Novell, Inc. 1997, 1998. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express prior consent of the publisher. This manual, and any portion thereof, may not be copied without the express written permission of Novell, Inc. Novell, Inc. 1555 North Technology Way Orem, Utah 84097-2399 Disclaimer Novell, Inc. makes no representations or warranties with respect to the contents or use of this manual, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes in its content at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any NetWare software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of NetWare software at any time, without obligation to notify any person or entity of such changes. This Novell Training Manual is published solely to instruct students in the use of Novell networking software. Although third-party application software packages are used in Novell training courses, this is for demonstration purposes only and shall not constitute an endorsement of any of these software applications. Further, Novell, Inc. does not represent itself as having any particular expertise in these application software packages and any use by students of the same shall be done at the students’ own risk. Software Piracy Throughout the world, unauthorized duplication of software is subject to both criminal and civil penalties. If you know of illegal copying of software, contact your local Software Antipiracy Hotline. For the Hotline number for your area, access Novell’s World Wide Web page at http://www.novell.com and look for the piracy page under “Programs.” Or, contact Novell’s anti-piracy headquarters in the U.S. at 800-PIRATES (747-2837) or 801-861-7101. Trademarks Novell, Inc. has attempted to supply trademark information about company names, products, and services mentioned in this manual. The following list of trademarks was derived from various sources. Novell, Inc. NetWare, the N-Design, and Novell are registered trademarks of Novell, Inc. in the United States and other countries. The NetWare Logotype (teeth logo) is a trademark of Novell, Inc. CNA and CNI are service marks of Novell, Inc. CNE is a registered service mark of Novell, Inc. in the United States and other countries. IntranetWare and IntranetWare Client are trademarks of Novell, Inc. Master CNE is a trademark of Novell, Inc. NetWare Loadable Module and NLM are trademarks of Novell, Inc. Novell Authorized Education Center and NAEC are service marks of Novell, Inc. Novell Directory Services and NDS are trademarks of Novell, Inc. Other Trademarks Adobe is a registered trademark of Adobe Systems Incorporated. Apple, AppleShare, and AppleTalk are registered trademarks of Apple Computer, Inc. Acrobat is a trademark of Adobe Systems Incorporated. DATASHOW is a registered trademark of Sayett Technology, Inc. IBM is a registered trademark of International Business Machines Corporation. Intel is a registered trademark of Intel Corporation. LANSchool is a registered trademark of Lan Fan Technologies. Macintosh is a registered trademark of Apple Computer, Inc. Microsoft is a registered trademark of Microsoft Corporation. Pentium is a registered trademark of Intel Corporation. PostScript is a registered trademark of Adobe Systems Incorporated. Windows and Windows NT are registered trademarks of Microsoft Corporation. Windows 95 is a trademark of Microsoft Corporation. All other products not listed are the property of their respective owners. Revision 1.0 This document may only be used by a Novell-certified instructor. IG TOC-v If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Contents Contents Preparation and Setup Audience . IG Prep-1 Prerequisites . IG Prep-1 Agenda . IG Prep-2 Classroom Requirements . IG Prep-2 Classroom Setup IG Prep-3 NetWare Server . IG Prep-4 File System IG Prep-5 NDS . IG Prep-6 NDS Security . IG Prep-24 File System Security IG Prep-27 Login Scripts IG Prep-28 MESSAGE.TXT . IG Prep-29 Windows NT Servers . IG Prep-30 Additional Setup Steps . IG Prep-32 Using Presentation Graphics IG Prep-32 Displaying the Graphics IG Prep-33 Printing the Graphics . IG Prep-34 Introduction Introduction IG Intro-3 Audience IG Intro-3 Prerequisites IG Intro-3 Relationship to Other Courses IG Intro-5 Course Overview .IG Intro-5 Introduction to EMA .IG Intro-7 IG TOC-vi This document may only be used by a Novell-certified instructor. Revision 1.0 If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Placing Windows NT Domains into NDS Instructor Guide Supplement Section 1 Placing Windows NT Domains into NDS Placing Windows NT Domains into NDS IG 1-3 Objectives .IG 1-3 The Benefits of Placing Windows NT Domains into NDS .IG 1-5 Administering All Components of a Network from a Single Database .IG 1-7 NDS Support for Applications that Require Domains IG 1-9 Single Login to the Network IG 1-9 Additional Management Capabilities of NDS IG 1-11 NDS for NT Components and Their Functions .IG 1-13 SAMSRV.DLL IG 1-15 Domain Object Wizard IG 1-19 Novell NDS for NT Client .IG 1-19 NetWare Administrator IG 1-19 Mailbox Manager for Exchange .IG 1-21 Exercise 1-1: Understanding the Function of NDS for NT Components .IG 1-23 Installing NDS for NT IG 1-25 Exercise 1-2: Installing NDS for NT IG 1-27 Using the Domain Object Wizard to Migrate NT Domains .IG 1-29 Exercise 1-3: Migrating NT Domains to NDS .IG 1-43 Managing User Access to NT Resources Through NDS IG 1-49 Installing the NDS for NT Administration Utilities IG 1-49 NetWare Administrator IG 1-53 Exercise 1-4: Managing User Access to NT Resources with NetWare Administrator .IG 1-61 NDS Backward Compatibility with Windows NT Utilities .IG 1-69 Exercise 1-5: Managing User Access to NT Resources with Microsoft Utilities IG 1-73 Summary IG 1-79 Appendix A Answers to the Exercises . A-1 Revision 1.0 This document may only be used by a Novell-certified instructor. IG Prep-1 If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Preparation and Setup Preparation and Setup Use this section to help you prepare for and set up the course. This material is for students who have completed Course 555 and need training on the NDS for NT product. Complete classroom setup instructions are included in this supplement. Please note that the names of the NT servers, name of the IntranetWare server, and NDS tree structure do not match Course 555 classroom setup. This material can be taught at the end of Course 555 using the Course 555 classroom setup by doing the following: 1. On the Windows NT Server named CORP_SERVER, create a directory called NDSFORNT at the root of the file system. The students will install NDS for NT from this directory. 2. Copy the NDS for NT installation files to this directory. 3. Share the NDSFORNT directory with the group Everyone using the Read file right. Audience This course is for CNEs and Master CNEs who need to integrate Windows NT domains into an existing NDS environment. Prerequisites Prerequisites: ■ NetWare 4. x or IntranetWare CNE or equivalent. Administration tasks and networking concepts are taught with the assumption that you have a strong NetWare or IntranetWare administration background. ■ A familiarity with the Windows NT Server 4.0 (which is very similar to Windows 95 ) and utilities such as Network Neighborhood and User Manager for Domains. ■ Course 555, IntranetWare: Integrating Windows NT, or equivalent knowledge of Windows NT integration. IG Prep-2 This document may only be used by a Novell-certified instructor. Revision 1.0 If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Placing Windows NT Domains into NDS Instructor Guide Supplement Agenda This is a half-day course. Day 1 Classroom Requirements The following table identifies the basic hardware and software needs for this course. Instructions for classroom setup follow. Activity Duration Course Introduction 00:15 Placing Windows NT Domains into NDS 03:30 Setup Requirements Classroom Level 2 Novell classroom (see http:// education.novell.com/chaninfo/classreq.evy). Classroom Layout This course requires one IntranetWare server, one instructor machine, and twelve student machines with Windows NT Server. Hardware 14 Pentium computers, each with at least ■ 32 MB of RAM ■ 500 MB of hard disk space ■ Network board Appropriate cabling to create the classroom network Software ■ 1 copy of NetWare 4.11 or IntranetWare ■ 13 copies of Windows NT Server 4.0 ■ 13 copies of NDS for NT 1.0 ■ The latest Windows NT Service Pack (optional) Table Prep-1: Classroom Requirements Revision 1.0 This document may only be used by a Novell-certified instructor. IG Prep-3 If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Preparation and Setup Classroom Setup Please read through “Classroom Setup” before installing your server. The material presented here will help you install your classroom server and NDS. Classroom setup is based on the EMA scenario, which is used in several courses. Network setup can take several hours. Be sure to allow adequate time not only to set up the hardware and software, but also to test the setup. As part of your testing, you should run through the hands-on exercises of the course to ensure that the structure you have created will allow students to complete the exercises without unexpected problems. x Some of the exercises and demonstrations require you to extend the NDS schema and modify NetWare Administrator. If you test these exercises in the classroom, you will have to reset your system completely prior to class. Otherwise, the exercises and demonstrations will not work as indicated in the course materials. Be sure to test your workstation display software (such as LANSchool ) with all the IntranetWare programs that you plan to demonstrate. Some display software is not compatible with some IntranetWare programs, particularly NLMs such as INSTALL. IG Prep-4 This document may only be used by a Novell-certified instructor. Revision 1.0 If you think this document was pirated, call 1-800-PIRATES or 1-801-861-7101. Placing Windows NT Domains into NDS Instructor Guide Supplement NetWare Server Complete the following: ■ Install the NetWare 4.11 operating system using the following information: ❍ Assign FS1 as the server name. ❍ Create three volumes: SYS (at least 190 MB), DATA (at least 250 MB), and MAIL (at least 10 MB). ❍ Assign EMA_Tree as the tree name. ❍ We recommend that you use Eastern Time for the time zone for a more realistic classroom configuration, but this is not required. ❍ Place the FS1 server in the Corp.NYC.EMA container. ❍ Place the original Admin user in O=EMA, with a password of novell . ■ Add the long name space to the DATA volume by executing the following commands at the server console: LOAD LONG <Enter> ADD NAME SPACE LONG TO DATA <Enter> ■ Restore the classroom setup to FS1. ❍ Copy RESTORE.NLM, EMMIF.NLM, DEVEMM.DSK, and NWCOURSE.BCK to FS1\SYS:SYSTEM. ❍ Once the classroom setup files are copied to FS1\SYS:SYSTEM, flag them as read/write. ❍ At the server console prompt, execute the following command: LOAD RESTORE <Enter> [...]... Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-7 Placing Windows NT Domains into NDS Instructor Guide Supplement Object Type Object Name Property Value Directory Map DBDOC Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\DB Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\WP... Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-15 Placing Windows NT Domains into NDS Instructor Guide Supplement Object Type Object Name Property Value Directory Map DBDOC Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\DB Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\WP... Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-23 Placing Windows NT Domains into NDS Instructor Guide Supplement Object Type Object Name Property Value Directory Map DBDOC Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\DB Volume FS1_DATA.Corp.NYC.EMA Path DOCUMENT\WP... ENGR.RIO.EMA MKTG.RIO.EMA ACCT.TOK.EMA ENGR.TOK.EMA Table Prep-3: NDS Security Assignments (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-25 Placing Windows NT Domains into NDS Instructor Guide Supplement Object Trustee Rights Granted MKTG.TOK.EMA ADMIN.MKTG.TOK.EMA [S] object [S] All... Prep-29 Placing Windows NT Domains into NDS Instructor Guide Supplement Windows NT Servers s Install Windows NT Server 4.0 on thirteen machines Configue each as a Primary Domain Controller (PDC) in its own domain, as follows: Server Name NTSERVER1 (Instructor s machine) DOMAIN1 NTSERVER2 DOMAIN2 NTSERVER3 DOMAIN3 NTSERVER4 DOMAIN4 NTSERVER5 DOMAIN5 NTSERVER6 DOMAIN6 NTSERVER7 DOMAIN7 NTSERVER8 DOMAIN8 NTSERVER9... WPUSERS.dept.location.EMA [RWF] DATA:DOCUMENT\DB DBUSERS.dept.location.EMA [RWF] Table Prep-4: File System Security Setup Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-27 Placing Windows NT Domains into NDS Instructor Guide Supplement Directory Trustee Rights Granted DATA:DOCUMENT\WP WPUSERS.dept.location.EMA... DOCUMENT\WP Occupant KOsako WPDOC Organizational Role Manager SNakamura Table Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-21 Placing Windows NT Domains into NDS Instructor Guide Supplement Property Value Last Name Matsubara Given Name Hiroki Last Name Nishioka... DOCUMENT\WP Occupant EMAILDOC FS1_DATA.Corp.NYC.EMA EHeiner KHerd Table Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-9 Placing Windows NT Domains into NDS Instructor Guide Supplement Property Value Last Name Franks Given Name Heide Last Name Warner Given... DOCUMENT\WP Occupant HKies WPDOC Organizational Role Manager MZiegler Table Prep-2: NDS Setup (continued) Revision 1.0 This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-13 Placing Windows NT Domains into NDS Instructor Guide Supplement Property Value Last Name Fischer Given Name Michael Last Name Winkler Given... This document may only be used by a Novell-certified instructor If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101 IG Prep-5 Placing Windows NT Domains into NDS Instructor Guide Supplement NDS Each user object is created using the template object located in the same container Object Type Object Name Property Value Members Admin.Acct.BER.EMA O=EMA User Admin Group Container_Admins . Novell-certified instructor. If you think this document was pirated, call 1-8 00-PIRATES or 1-8 0 1-8 6 1-7 101. Placing Windows NT Domains into NDS Instructor Guide. Instructor Guide Supplement Section 1 Placing Windows NT Domains into NDS Placing Windows NT Domains into NDS. .IG 1-3 Objectives .IG