Tài liệu Module 2: Strategies for Administering a Windows 2000 Network pptx

Contents Overview 1 Windows 2000 Administrative Strategies 2 Customizing MMC Consoles 4 Installing Windows 2000 Snap-Ins 9 Setting Up Taskpads 10 Lab A: Customizing MMC Consoles 14 Using Secondary Logon for Administration 28 Using Terminal Services for Administration 32 Lab B: Administering a Windows 2000 Network 36 Best Practices 47 Review 48 Module 2: Strategies for Administering a Windows 2000 Network Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. ??1999 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, PowerPoint, and Windows are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Other product and company names mentioned herein may be the trademarks of their respective owners. Project Lead and Instructional Designer: Mark Johnson Instructional Designers : Aneetinder Chowdhry (NIIT Inc.), Kathryn Yusi (Independent Contractor) Lead Program Manager: Ryan Calafato Program Manager: Joern Wettern (Wettern Network Solutions) Graphic Artist: Julie Stone (Independent Contractor) Editing Manager: Tina Tsiakalis Substantive Editor: Kelly Baker (Write Stuff) Copy Editor: Wendy Cleary (S&T OnSite) Online Program Manager: Nikki McCormick Online Support: Arlo Emerson (MacTemps) Compact Disc Testing: Data Dimensions, Inc. Production Support: Arlene Rubin (S&T OnSite) Manufacturing Manager: Bo Galford Manufacturing Support: Mimi Dukes (S&T OnSite) Lead Product Manager, Development Services: Elaine Nuerenberg Lead Product Manager: Sandy Alto Group Product Manager: Robert Stewart Module 2: Strategies for Administering a Windows 2000 Network iii Introduction This module provides students with the knowledge and skills to efficiently perform network administration of Microsoft® Windows® 2000, both locally and remotely. Students will learn how to create customized tools to match specific administrative responsibilities. They will also learn the different methods and strategies to use when performing administrative tasks. In the two hands-on labs in this module, students will have a chance to create and customize tools and perform administrative tasks both locally and remotely. In the first lab, students will create and customize MMC consoles and taskpads, some of which they will use from their partners’ computers. In the second lab, students will set up Terminal Services and use it to perform administrative tasks on their partners’ computers. They will also run applications by using secondary logon. Materials and Preparation This section provides you with the materials and preparation needed to teach this module. Materials To teach this module, you need the following materials: ?? Microsoft PowerPoint® file 1558a_02.ppt Preparation To prepare for this module, you should: ?? Read all the materials for this module. ?? Complete the labs. ?? Study the review questions and prepare alternative answers to discuss. ?? Anticipate questions that students may ask. Write out the questions and provide the answers. ?? Read the Using Secondary Logon (Run As) in Windows 2000 technical walkthrough on the Student Materials compact disc. Presentation: 60 Minutes Labs: 90 Minutes iv Module 2: Strategies for Administering a Windows 2000 Network Instructor Setup for the Labs Perform the following setup on your instructor computers for the labs. Lab A: Customizing MMC Consoles No setup required for the instructor computer. Lab B: Administering a Windows 2000 Network ??To prepare for the lab 1. Ensure that students can access the shared folder \\london\Setup\Winsrc and that this folder contains the contents of the i386 folder from the Windows 2000 Advanced Server CD-ROM. This folder should have been created during classroom setup. 2. Ensure that students can access the shared folder \\london\TSClient and that this folder contains the Terminal Services client installation files. This folder should have been created during classroom setup. Module 2: Strategies for Administering a Windows 2000 Network v Module Strategy Use the following strategy to present this module: ?? Windows 2000 Administrative Strategies In this topic, you will introduce the characteristics of Windows 2000 administration and the different Windows 2000 administrative tools and methods that students can implement to perform administration. Emphasize to students that they can customize administrative tools to match the administrative tasks that specific administrators perform. ?? Customizing MMC Consoles In this topic, you will explain how to customize consoles in Microsoft Management Console (MMC). First, present what an MMC console is, including the explanation that a console is an .msc file that holds snap-ins. Emphasize that there are preconfigured and customized consoles. Next, tell students how to create a customized console; demonstrate the process. Finally, present the procedure for distributing customized MMC consoles. If students ask about Windows Installer or Group Policy, refer them to module 6, “Using Group Policy to Manage Software,” in course 1558A, Advanced Administration for Microsoft Windows 2000. ?? Installing Windows 2000 Snap-Ins In this topic, you will explain how to install all Windows 2000 snap-ins on a computer running Windows 2000 Professional. Tell students that the Windows 2000 Administrative Tools package includes the complete set of snap-ins. Mention where they can obtain the Adminpak.msi Windows Installer package for the installation. ?? Setting Up Taskpads In this topic, you will explain how to set up customized taskpads. First explain what a taskpad is, emphasizing that it is a simplified interface that novice administrators and users can use. Open the User Admin taskpad to present the different parts of a taskpad. Next, explain how to create a taskpad; demonstrate doing so. Finally, present how to create a task in a taskpad. Emphasize that a task is a shortcut to a command in the MMC console. Demonstrate how to create a task associated with the console tree and one associated with the details pane. ?? Lab A: Customizing MMC Consoles Prepare students for the lab in which they will create customized MMC consoles and taskpads and also install Windows 2000 Administration Tools. Make sure that students run the command file for the lab, and tell them that they will work with their partners’ computers. After students have completed the lab, ask them whether they have any questions concerning the lab. ?? Using Secondary Logon for Administration In this topic, you will explain how to use secondary logon to perform administrative tasks. First, explain what secondary logon is. Emphasize that a user can start a second logon without logging off from the first logon session, and emphasize the advantages of using a secondary logon when performing administrative tasks. Then, present the different Run as methods to use to start an application. vi Module 2: Strategies for Administering a Windows 2000 Network ?? Using Terminal Services for Administration In this topic, you will introduce how to use Terminal Services to perform administrative tasks on remote computers. First, explain what Terminal Services is and why it is advantageous for remote administration. Emphasize that you can perform all administrative tasks on a server from a remote computer, including software installation. Then present what to configure in Terminal Services so that it is optimized for remote administration. Emphasize what you need to configure to enhance performance and security. ?? Lab B: Administering a Windows 2000 Network Prepare students for the lab in which they will perform administrative tasks by using a secondary logon and Terminal Services. Make sure that students run the command file for the lab, and tell them they will work with their partners’ computers. After students have completed the lab, ask them whether they have any questions concerning the lab. ?? Best Practices Present best practices for using Windows 2000 to administer a network. Module 2: Strategies for Administering a Windows 2000 Network vii Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs. This information is provided to assist you in replicating or customizing Microsoft Official Curriculum (MOC) courseware. The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for course 1558A, Advanced Administration for Microsoft Windows 2000. Lab Setup The following list describes the setup requirements for the labs in this module. Setup Requirement 1 The labs in this module require the C:\MOC\Win1558A\Labfiles\Lab02\Tools folder, shared as Tools to allow students to save customized consoles. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0201.cmd. ?? Create the folder manually and share it. Setup Requirement 2 The labs in this module require a Package Handling OU and a Human Resources OU with several computer and user objects in it. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0201.cmd. ?? Create the OUs manually. Add the Don Hall and Jae Pak user objects, and the Computer1, Computer2, Computer3, and Computer4 computer objects. Setup Requirement 3 The labs in this module require the Log on locally right on domain controllers to be assigned to the Everyone group. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0202.cmd. ?? Assign the right manually. Setup Requirement 4 The labs in this module require a customized MMC console named DomainAdmin2 that contains Active Directory Users and Computers and Disk Defragmenter. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab0202.cmd. ?? Create the console file manually and place it in C:\MOC\Win1558A\Labfiles\Lab02\Tools. Important viii Module 2: Strategies for Administering a Windows 2000 Network Setup Requirement 5 The labs in this module require a regular user account for the student. To prepare student computers to meet this requirement, perform the following action: ?? Create the user account manually. Lab Results Performing the labs in this module introduces the following configuration change: ?? Students install and then remove Terminal Services. You can run C:\MOC\Win1558A\Labfiles\Lab02\Setup\Lab02Rm.cmd to remove most configuration changes introduced during the labs in the module. Make sure that students uninstall Terminal Services at the end of Lab B. Remove the Log on locally right from the Everyone group manually Important Module 2: Strategies for Administering a Windows 2000 Network 1 Overview ? Windows 2000 Administrative Strategies ? Customizing MMC Consoles ? Installing Windows 2000 Snap-Ins ? Setting Up Taskpads ? Using Secondary Logon for Administration ? Using Terminal Services for Administration ? Best Practices After a network is set up and configured, you need to ensure that administrative tasks are efficiently carried out. Microsoft® Windows® 2000 provides administrators with the appropriate tools to perform the tasks that you delegate to them, and allows you to administer centrally from one computer without having to log on to each local computer that you administer. Consequently, not only are you able to ensure that administrative tasks are efficiently completed and that your network runs smoothly, but the administrative process is simplified. At the end of this module, you will be able to: ?? Identify the characteristics of Windows 2000 administration and the different administrative tools and methods in Windows 2000. ?? Customize consoles in Microsoft Management Console (MMC). ?? Install Windows 2000 snap-ins on a computer running Windows 2000 Professional. ?? Set up customized taskpads. ?? Use secondary logon to perform administrative tasks. ?? Use Terminal Services to perform administrative tasks on remote computers. ?? Apply best practices for using administrative tools and performing network administration tasks. Slide Objective To provide an overview of the module topics and objectives. Lead-in In this module, you will learn about Windows 2000 administrative tools and different administrative strategies to use. Do not go into detail on this topic, because the content will be covered in following topics. 2 Module 2: Strategies for Administering a Windows 2000 Network Windows 2000 Administrative Strategies ? Customize Tools to Match Administrators’ Responsibilities ? Administer Locally or Remotely ? Delegate Administration Windows 2000 Provides a Variety of Tools and Methods for Administration Windows 2000 Provides a Variety of Tools and Methods for Administration Windows 2000 provides the tools and means to administer your network, whether it is a single domain, a domain tree, or a forest. With Windows 2000 you can: ?? Administer computers and their services by using the computer (locally) or remotely. Remote administration is when you are using one computer and then connect to another computer to administer the local computer. Remote administration allows you to administer from any computer centrally, rather than administering at each computer. This allows you to place network servers in a secured location. ?? Delegate administrative responsibilities to other administrators. You can delegate responsibility for entire sections of your network, such as an entire domain, or for one organizational unit (OU) in the domain. You can delegate all of the administrative tasks for a domain or OU, or you can delegate specific tasks (for example, resetting passwords). This is possible because the structure of the Active Directory ™ directory service allows you to assign permissions and grant user rights in very specific ways. You must always ensure that the administrator has the permission required to perform the tasks. ?? Customize administrative tools so that administrators always have the appropriate tools for the administrative tasks for which they are responsible. If a user is responsible for changing only selected attributes of user accounts, that user does not have to use a tool that is more complex than is required to complete the task. Slide Objective To introduce Windows 2000 administration and the different methods that you can use to administer a network. Lead-in Windows 2000 provides the tools and methods that facilitate administration, both locally and remotely, as well as the ability to provide the appropriate tools to those administrators and users to whom you delegate administrative responsibilities. After mentioning the characteristics of Windows 2000 administration, briefly mention the tools and methods that Windows 2000 provides to help in the administration of a network. Key Points You can sit at one computer and administer another computer. When you delegate administrative responsibilities to administrators and users, Windows 2000 provides the means for you to create the appropriate tools for these administrators and users. [...]... configuring a taskpad Create and Configure a Taskpad Create and Configure a Taskpad Lead-in Create a customized MMC console Create a customized MMC console A taskpad is a further customization of an MMC console Create a taskpad Create a taskpad Configure a task in the taskpad Configure a task in the taskpad Customize the taskpad view Customize the taskpad view Delivery Tip Demonstrate creating a taskpad, but... tasks for which a novice administrator or user is responsible To set up taskpads, you must create a customized MMC console, create a taskpad in the console, and then define the specific tasks that the user can perform Module 2: Strategies for Administering a Windows 2000 Network 11 What Is a Taskpad? Slide Objective To describe a taskpad A Taskpad: Lead-in ? Is a Customized Administrative Tool Created... administrators and users to whom you have delegated administrative responsibilities ? What Is a Taskpad? ? Creating a Taskpad ? Creating Tasks in a Taskpad A taskpad is an administrative tool that you set up for novice administrators and users whose primary job responsibility is not network administration After you delegate administrative tasks, set up a taskpad that provides the ability to perform the specific... perform the task in the taskpad You can specifically define the taskpad task to correspond to one administrative tasks A taskpad hides the complexity of MMC Has an Easy to Use Interface A taskpad is an administrative tool that you create for users whose primary responsibility is not network administration, or for novice administrators A taskpad is a simplified interface that contains one or more tasks... Are Required for Remote Administration from a Client Computer Running Windows 2000 Professional Install Windows 2000 Windows 2000 Administration Tools Administration Tools (Adminpak.msi) (Adminpak.msi ) Administer Administer Windows 2000 Windows 2000 Professional Professional Windows 2000 Administration Tools is a complete set of all of the Windows 2000 snap-ins that are a part of Windows 2000 Server... the Task Creation wizard Perform the same procedure for the task that you created for an item in the details pane Key Point A task in a taskpad is a shortcut to a command on the MMC console The same command is available if you right-click an item in the console tree or in the details pane Disable Account Associate with an item in Associate with an item in the details pane the details pane Manila Kim... passwords for any user account that he or she selects in the details pane for that OU This option is not available if you selected the stand-alone option in the Taskpad Creation wizard when creating the taskpad Note You can also set up a task that runs an application from the command prompt (for example, batch files and scripts) A user can then run an application by clicking a task icon rather than typing a. .. administrative assistant does not have the option to create or delete user accounts, because user account administration is not part of the assistant’s job function Your Tasks Your tasks are to create a taskpad for administering user accounts, create tasks in the taskpad, customize the taskpad to remove access to commands, and use the taskpad to administer user accounts ?? create a taskpad for administering. .. a Windows 2000 Network 19 Exercise 2 Creating a Taskpad for Administering User Accounts Scenario You need to create a taskpad for an administrative assistant in the Human Resources department who needs to make specific changes to user accounts, such as updating address information and telephone numbers The administrative assistant also needs to reset passwords when users forget them This administrative... present all of the details on step 3 Explain to students that you will present the details in the next topic Key Points To create a taskpad you use two wizards They are the Taskpad Creation wizard and the Task Creation wizard In the Taskpad Creation wizard, you determine the appearance, name, and descriptions of the taskpad Creating a taskpad is a further customization of an MMC console To create a taskpad, . 2: Strategies for Administering a Windows 2000 Network Creating a Taskpad Create and Configure a Taskpad Create and Configure a Taskpad Create and. 10 Module 2: Strategies for Administering a Windows 2000 Network ? Setting Up Taskpads ? What Is a Taskpad? ? Creating a Taskpad ? Creating Tasks