Tài liệu hạn chế xem trước, để xem đầy đủ mời bạn chọn Tải xuống
1
/ 58 trang
THÔNG TIN TÀI LIỆU
Thông tin cơ bản
Định dạng
Số trang
58
Dung lượng
504,34 KB
Nội dung
Contents
Overview 1
Windows 2000 Administrative Strategies 2
Customizing MMC Consoles 4
Installing Windows2000 Snap-Ins 9
Setting Up Taskpads 10
Lab A: Customizing MMC Consoles 14
Using Secondary Logon for
Administration 28
Using Terminal Services for
Administration 32
Lab B: AdministeringaWindows2000
Network 36
Best Practices 47
Review 48
Module 2:Strategiesfor
Administering a
Windows 2000 Network
Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any
written license agreement from Microsoft, the furnishing of this document does not give you any
license to these patents, trademarks, copyrights, or other intellectual property.
??1999 Microsoft Corporation. All rights reserved.
Microsoft, Active Directory, PowerPoint, and Windows are either registered trademarks or
trademarks of Microsoft Corporation in the U.S.A. and/or other countries.
The names of companies, products, people, characters, and/or data mentioned herein are fictitious
and are in no way intended to represent any real individual, company, product, or event, unless
otherwise noted.
Other product and company names mentioned herein may be the trademarks of their respective
owners.
Project Lead and Instructional Designer: Mark Johnson
Instructional Designers : Aneetinder Chowdhry (NIIT Inc.), Kathryn Yusi
(Independent Contractor)
Lead Program Manager: Ryan Calafato
Program Manager: Joern Wettern (Wettern Network Solutions)
Graphic Artist: Julie Stone (Independent Contractor)
Editing Manager: Tina Tsiakalis
Substantive Editor: Kelly Baker (Write Stuff)
Copy Editor: Wendy Cleary (S&T OnSite)
Online Program Manager: Nikki McCormick
Online Support: Arlo Emerson (MacTemps)
Compact Disc Testing: Data Dimensions, Inc.
Production Support: Arlene Rubin (S&T OnSite)
Manufacturing Manager: Bo Galford
Manufacturing Support: Mimi Dukes (S&T OnSite)
Lead Product Manager, Development Services: Elaine Nuerenberg
Lead Product Manager: Sandy Alto
Group Product Manager: Robert Stewart
Module2:StrategiesforAdministeringaWindows2000Network iii
Introduction
This module provides students with the knowledge and skills to efficiently
perform network administration of Microsoft® Windows® 2000, both locally
and remotely. Students will learn how to create customized tools to match
specific administrative responsibilities. They will also learn the different
methods and strategies to use when performing administrative tasks.
In the two hands-on labs in this module, students will have a chance to create
and customize tools and perform administrative tasks both locally and remotely.
In the first lab, students will create and customize MMC consoles and taskpads,
some of which they will use from their partners’ computers. In the second lab,
students will set up Terminal Services and use it to perform administrative tasks
on their partners’ computers. They will also run applications by using
secondary logon.
Materials and Preparation
This section provides you with the materials and preparation needed to teach
this module.
Materials
To teach this module, you need the following materials:
?? Microsoft PowerPoint® file 1558a_02.ppt
Preparation
To prepare for this module, you should:
?? Read all the materials for this module.
?? Complete the labs.
?? Study the review questions and prepare alternative answers to discuss.
?? Anticipate questions that students may ask. Write out the questions and
provide the answers.
?? Read the Using Secondary Logon (Run As) in Windows2000 technical
walkthrough on the Student Materials compact disc.
Presentation:
60 Minutes
Labs:
90 Minutes
iv Module2:StrategiesforAdministeringaWindows2000Network
Instructor Setup for the Labs
Perform the following setup on your instructor computers for the labs.
Lab A: Customizing MMC Consoles
No setup required for the instructor computer.
Lab B: AdministeringaWindows2000Network
??To prepare for the lab
1. Ensure that students can access the shared folder \\london\Setup\Winsrc and
that this folder contains the contents of the i386 folder from the
Windows 2000 Advanced Server CD-ROM. This folder should have been
created during classroom setup.
2. Ensure that students can access the shared folder \\london\TSClient and that
this folder contains the Terminal Services client installation files. This
folder should have been created during classroom setup.
Module2:StrategiesforAdministeringaWindows2000Network v
Module Strategy
Use the following strategy to present this module:
?? Windows2000 Administrative Strategies
In this topic, you will introduce the characteristics of Windows2000
administration and the different Windows2000 administrative tools and
methods that students can implement to perform administration. Emphasize
to students that they can customize administrative tools to match the
administrative tasks that specific administrators perform.
?? Customizing MMC Consoles
In this topic, you will explain how to customize consoles in Microsoft
Management Console (MMC). First, present what an MMC console is,
including the explanation that a console is an .msc file that holds snap-ins.
Emphasize that there are preconfigured and customized consoles. Next, tell
students how to create a customized console; demonstrate the process.
Finally, present the procedure for distributing customized MMC consoles. If
students ask about Windows Installer or Group Policy, refer them to
module 6, “Using Group Policy to Manage Software,” in course 1558A,
Advanced Administration for Microsoft Windows2000.
?? Installing Windows2000 Snap-Ins
In this topic, you will explain how to install all Windows2000 snap-ins on a
computer running Windows2000 Professional. Tell students that the
Windows 2000 Administrative Tools package includes the complete set of
snap-ins. Mention where they can obtain the Adminpak.msi Windows
Installer package for the installation.
?? Setting Up Taskpads
In this topic, you will explain how to set up customized taskpads. First
explain what a taskpad is, emphasizing that it is a simplified interface that
novice administrators and users can use. Open the User Admin taskpad to
present the different parts of a taskpad. Next, explain how to create a
taskpad; demonstrate doing so. Finally, present how to create a task in
a taskpad. Emphasize that a task is a shortcut to a command in the MMC
console. Demonstrate how to create a task associated with the console tree
and one associated with the details pane.
?? Lab A: Customizing MMC Consoles
Prepare students for the lab in which they will create customized MMC
consoles and taskpads and also install Windows2000 Administration Tools.
Make sure that students run the command file for the lab, and tell them
that they will work with their partners’ computers. After students have
completed the lab, ask them whether they have any questions concerning
the lab.
?? Using Secondary Logon for Administration
In this topic, you will explain how to use secondary logon to perform
administrative tasks. First, explain what secondary logon is. Emphasize that
a user can start a second logon without logging off from the first logon
session, and emphasize the advantages of using a secondary logon when
performing administrative tasks. Then, present the different Run as methods
to use to start an application.
vi Module2:StrategiesforAdministeringaWindows2000Network
?? Using Terminal Services for Administration
In this topic, you will introduce how to use Terminal Services to perform
administrative tasks on remote computers. First, explain what Terminal
Services is and why it is advantageous for remote administration.
Emphasize that you can perform all administrative tasks on a server from a
remote computer, including software installation. Then present what to
configure in Terminal Services so that it is optimized for remote
administration. Emphasize what you need to configure to enhance
performance and security.
?? Lab B: AdministeringaWindows2000Network
Prepare students for the lab in which they will perform administrative tasks
by using a secondary logon and Terminal Services. Make sure that students
run the command file for the lab, and tell them they will work with their
partners’ computers. After students have completed the lab, ask them
whether they have any questions concerning the lab.
?? Best Practices
Present best practices for using Windows2000 to administer a network.
Module2:StrategiesforAdministeringaWindows2000Network vii
Customization Information
This section identifies the lab setup requirements foramodule and the
configuration changes that occur on student computers during the labs. This
information is provided to assist you in replicating or customizing Microsoft
Official Curriculum (MOC) courseware.
The labs in this module are also dependent on the classroom
configuration that is specified in the Customization Information section at the
end of the Classroom Setup Guide for course 1558A, Advanced Administration
for Microsoft Windows2000.
Lab Setup
The following list describes the setup requirements for the labs in this module.
Setup Requirement 1
The labs in this module require the C:\MOC\Win1558A\Labfiles\Lab02\Tools
folder, shared as Tools to allow students to save customized consoles. To
prepare student computers to meet this requirement, perform one of the
following actions:
?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0201.cmd.
?? Create the folder manually and share it.
Setup Requirement 2
The labs in this module require a Package Handling OU and a Human
Resources OU with several computer and user objects in it. To prepare student
computers to meet this requirement, perform one of the following actions:
?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0201.cmd.
?? Create the OUs manually. Add the Don Hall and Jae Pak user objects, and
the Computer1, Computer2, Computer3, and Computer4 computer objects.
Setup Requirement 3
The labs in this module require the Log on locally right on domain controllers
to be assigned to the Everyone group. To prepare student computers to meet
this requirement, perform one of the following actions:
?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0202.cmd.
?? Assign the right manually.
Setup Requirement 4
The labs in this module require a customized MMC console named
DomainAdmin2 that contains Active Directory Users and Computers and Disk
Defragmenter. To prepare student computers to meet this requirement, perform
one of the following actions:
?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0202.cmd.
?? Create the console file manually and place it in
C:\MOC\Win1558A\Labfiles\Lab02\Tools.
Important
viii Module2:StrategiesforAdministeringaWindows2000Network
Setup Requirement 5
The labs in this module require a regular user account for the student.
To prepare student computers to meet this requirement, perform the
following action:
?? Create the user account manually.
Lab Results
Performing the labs in this module introduces the following configuration
change:
?? Students install and then remove Terminal Services.
You can run
C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab02Rm.cmd to remove most
configuration changes introduced during the labs in the module. Make sure that
students uninstall Terminal Services at the end of Lab B. Remove the Log on
locally right from the Everyone group manually
Important
Module2:StrategiesforAdministeringaWindows2000Network 1
Overview
? Windows2000 Administrative Strategies
? Customizing MMC Consoles
? Installing Windows2000 Snap-Ins
? Setting Up Taskpads
? Using Secondary Logon for Administration
? Using Terminal Services for Administration
? Best Practices
After anetwork is set up and configured, you need to ensure that administrative
tasks are efficiently carried out. Microsoft® Windows® 2000 provides
administrators with the appropriate tools to perform the tasks that you delegate
to them, and allows you to administer centrally from one computer without
having to log on to each local computer that you administer. Consequently,
not only are you able to ensure that administrative tasks are efficiently
completed and that your network runs smoothly, but the administrative
process is simplified.
At the end of this module, you will be able to:
?? Identify the characteristics of Windows2000 administration and the
different administrative tools and methods in Windows2000.
?? Customize consoles in Microsoft Management Console (MMC).
?? Install Windows2000 snap-ins on a computer running Windows2000
Professional.
?? Set up customized taskpads.
?? Use secondary logon to perform administrative tasks.
?? Use Terminal Services to perform administrative tasks on
remote computers.
?? Apply best practices for using administrative tools and performing network
administration tasks.
Slide Objective
To provide an overview
of the module topics
and objectives.
Lead-in
In this module, you will learn
about Windows2000
administrative tools and
different administrative
strategies to use.
Do not go into detail on this
topic, because the content
will be covered in
following topics.
2 Module2:StrategiesforAdministeringaWindows2000Network
Windows 2000 Administrative Strategies
? Customize Tools to
Match Administrators’
Responsibilities
? Administer Locally
or Remotely
? Delegate
Administration
Windows 2000
Provides a Variety of
Tools and Methods
for Administration
Windows 2000
Provides a Variety of
Tools and Methods
for Administration
Windows 2000 provides the tools and means to administer your network,
whether it is a single domain, a domain tree, or a forest. With Windows2000
you can:
?? Administer computers and their services by using the computer (locally) or
remotely. Remote administration is when you are using one computer and
then connect to another computer to administer the local computer. Remote
administration allows you to administer from any computer centrally, rather
than administering at each computer. This allows you to place network
servers in a secured location.
?? Delegate administrative responsibilities to other administrators. You can
delegate responsibility for entire sections of your network, such as an entire
domain, or for one organizational unit (OU) in the domain. You can
delegate all of the administrative tasks fora domain or OU, or you
can delegate specific tasks (for example, resetting passwords). This is
possible because the structure of the Active Directory
™
directory service
allows you to assign permissions and grant user rights in very specific ways.
You must always ensure that the administrator has the permission required
to perform the tasks.
?? Customize administrative tools so that administrators always have the
appropriate tools for the administrative tasks for which they are responsible.
If a user is responsible for changing only selected attributes of user
accounts, that user does not have to use a tool that is more complex than is
required to complete the task.
Slide Objective
To introduce Windows2000
administration and the
different methods that you
can use to administer
a network.
Lead-in
Windows 2000 provides the
tools and methods that
facilitate administration, both
locally and remotely, as well
as the ability to provide the
appropriate tools to those
administrators and users to
whom you delegate
administrative
responsibilities.
After mentioning the
characteristics of
Windows 2000
administration, briefly
mention the tools and
methods that Windows2000
provides to help in the
administration of a network.
Key Points
You can sit at one
computer and administer
another computer.
When you delegate
administrative
responsibilities to
administrators and users,
Windows 2000 provides the
means for you to create the
appropriate tools for these
administrators and users.
[...]... configuring a taskpad Create and Configure a Taskpad Create and Configure a Taskpad Lead-in Create a customized MMC console Create a customized MMC console A taskpad is a further customization of an MMC console Create a taskpad Create a taskpad Configure a task in the taskpad Configure a task in the taskpad Customize the taskpad view Customize the taskpad view Delivery Tip Demonstrate creating a taskpad, but... tasks for which a novice administrator or user is responsible To set up taskpads, you must create a customized MMC console, create a taskpad in the console, and then define the specific tasks that the user can perform Module 2:StrategiesforAdministeringaWindows2000Network 11 What Is a Taskpad? Slide Objective To describe a taskpad A Taskpad: Lead-in ? Is a Customized Administrative Tool Created... administrators and users to whom you have delegated administrative responsibilities ? What Is a Taskpad? ? Creating a Taskpad ? Creating Tasks in a Taskpad A taskpad is an administrative tool that you set up for novice administrators and users whose primary job responsibility is not network administration After you delegate administrative tasks, set up a taskpad that provides the ability to perform the specific... perform the task in the taskpad You can specifically define the taskpad task to correspond to one administrative tasks A taskpad hides the complexity of MMC Has an Easy to Use Interface A taskpad is an administrative tool that you create for users whose primary responsibility is not network administration, or for novice administrators A taskpad is a simplified interface that contains one or more tasks... Are Required for Remote Administration from a Client Computer Running Windows2000 Professional Install Windows2000Windows2000 Administration Tools Administration Tools (Adminpak.msi) (Adminpak.msi ) Administer Administer Windows2000Windows2000 Professional Professional Windows2000 Administration Tools is a complete set of all of the Windows2000 snap-ins that are a part of Windows2000 Server... the Task Creation wizard Perform the same procedure for the task that you created for an item in the details pane Key Point A task in a taskpad is a shortcut to a command on the MMC console The same command is available if you right-click an item in the console tree or in the details pane Disable Account Associate with an item in Associate with an item in the details pane the details pane Manila Kim... passwords for any user account that he or she selects in the details pane for that OU This option is not available if you selected the stand-alone option in the Taskpad Creation wizard when creating the taskpad Note You can also set up a task that runs an application from the command prompt (for example, batch files and scripts) A user can then run an application by clicking a task icon rather than typing a. .. administrative assistant does not have the option to create or delete user accounts, because user account administration is not part of the assistant’s job function Your Tasks Your tasks are to create a taskpad foradministering user accounts, create tasks in the taskpad, customize the taskpad to remove access to commands, and use the taskpad to administer user accounts ?? create a taskpad for administering. .. aWindows2000Network 19 Exercise 2 Creating a Taskpad forAdministering User Accounts Scenario You need to create a taskpad for an administrative assistant in the Human Resources department who needs to make specific changes to user accounts, such as updating address information and telephone numbers The administrative assistant also needs to reset passwords when users forget them This administrative... present all of the details on step 3 Explain to students that you will present the details in the next topic Key Points To create a taskpad you use two wizards They are the Taskpad Creation wizard and the Task Creation wizard In the Taskpad Creation wizard, you determine the appearance, name, and descriptions of the taskpad Creating a taskpad is a further customization of an MMC console To create a taskpad, . 2: Strategies for Administering a Windows 2000 Network
Creating a Taskpad
Create and Configure a Taskpad
Create and Configure a Taskpad
Create and.
10 Module 2: Strategies for Administering a Windows 2000 Network
? Setting Up Taskpads
? What Is a Taskpad?
? Creating a Taskpad
? Creating Tasks