I. Windows Server 2003 Overview
by Alex Lewis, Michael Noel, Rand Morimoto
Microsoft Windows Server 2003 Unleashed, R2 Edition
- Copyright
- About the Authors
- Acknowledgments
- We Want to Hear from You!
- Introduction
- I. Windows Server 2003 Overview
- 1. Windows Server 2003 Technology Primer
- Windows Server 2003 Defined
- Choosing to Implement Windows Server 2003
- When Is the Right Time to Migrate?
- Versions of Windows Server 2003
- What’s New in Windows Server 2003?
- Windows Server 2003 Benefits for Administration
- Windows Server 2003 for Better User Services
- Benefits for Thin Client Terminal Services
- Benefits for Improved Management
- Extending the Directory Beyond Active Directory
- Going Beyond the Basic Features of Windows 2003 with Feature Packs
- Group Policy Management Console
- Software Update Service
- Identity Integration Feature Pack
- Directory Services Markup Language Services for Windows
- Remote Control Add-on for Active Directory Users and Computers
- Services for NetWare 5.03
- Windows SharePoint Services
- Windows Rights Management Services
- Windows System Resource Manager
- Extending the Capabilities of Windows 2003 with Downloadable Tools
- Getting Started with Windows Server 2003
- Best Practices
- 2. Planning, Prototyping, Migrating, and Deploying Windows Server 2003 Best Practices
- Determining the Scope of Your Project
- Identifying the Business Goals and Objectives to Implement Windows Server 2003
- Identifying the Technical Goals and Objectives to Implement Windows Server 2003
- The Discovery Phase: Understanding the Existing Environment
- The Design Phase: Documenting the Vision and the Plan
- The Migration Planning Phase: Documenting the Process for Migration
- The Prototype Phase: Creating and Testing the Plan
- The Pilot Phase: Validating the Plan to a Limited Number of Users
- The Migration/Implementation Phase: Conducting the Migration or Installation
- Summary
- Best Practices
- 3. Installing Windows Server 2003
- Preplanning and Preparing a Server Installation
- Setting Up the Windows Server 2003 Operating System
- Formatting the Partition
- Customizing Regional and Language Options
- Personalizing the Software
- Inserting a Product Key
- Selecting Licensing Modes
- Setting Computer Name and Administrator Password
- Modifying Date and Time Settings
- Modifying Network Settings
- Joining a Workgroup or Computer Domain
- Completing the Installation
- Logging In
- Activating Windows Server 2003
- Upgrading to Windows Server 2003
- Using Alternative Methods of Installation
- Performing an Unattended Windows Server 2003 Installation
- Installing Windows Server 2003 from an Image
- Installing Windows Server 2003 with Group Policy and Systems Management Server
- Updating a Windows 2003 Server with a Service Pack
- Preparing a System and Installing the Windows 2003 R2 Components
- Summary
- Best Practices
- 1. Windows Server 2003 Technology Primer
- II. Windows Server 2003 Active Directory
- 4. Active Directory Primer
- The Evolution of Directory Services
- Understanding the Development of Active Directory
- Active Directory’s Structure
- Active Directory’s Components
- Domain Trusts
- Organizational Units
- The Role of Groups in an Active Directory Environment
- Active Directory Replication
- The Role of DNS in Active Directory
- Active Directory Security
- Active Directory Changes in Windows Server 2003
- Summary
- Best Practices
- 5. Designing a Windows Server 2003 Active Directory
- Active Directory Domain Design
- Choosing Your Domain Namespace
- New Domain Design Features in Windows Server 2003
- Choosing Your Domain Structure
- Single Domain Model
- Multiple Domain Model
- Multiple Trees in a Single Forest Model
- Federated Forests Design Model
- Peer-Root Domain Model
- Placeholder Domain Model
- Special-Purpose Domain Design Models
- Renaming an Active Directory Domain
- Summary
- Best Practices
- 6. Designing Organizational Unit and Group Structure
- 7. Active Directory Infrastructure
- Understanding Active Directory Replication
- Active Directory Sites
- Planning Replication Topology
- Mapping Site Design into Network Design
- Establishing Sites
- Choosing Between One Site or Many Sites
- Associating Subnets with Sites
- Determining Site Links and Site Link Costs
- Choosing Replication Scheduling
- Choosing SMTP or IP Replication
- Encrypting SMTP Site Links
- Windows Server 2003 Replication Enhancements
- Domain Controller Promotion from Media
- Identifying Linked-Value Replication/Universal Group Membership Caching
- Removing Lingering Objects
- Disabling Replication Compression
- No Full Synchronization of Global Catalog with Schema Changes
- Intersite Topology Generator Algorithm Improvements
- Windows Server 2003 IPv6 Support
- Real-World Replication Designs
- Summary
- Best Practices
- 8. Integrating Active Directory with Novell, Oracle, Unix, and NT4 Directories
- Understanding and Using Services for Unix 3.5
- Subsystem for Unix-Based Applications as a Component of Services for Unix
- Sharing Files Between Unix NFS and Windows
- Taking Advantage of User Synchronization in SFU
- Administrative Improvements in Services for Unix
- Connecting Windows and NetWare Environments with Services for NetWare
- Microsoft Identity Integration Server 2003
- Harnessing the Power and Potential of MIIS
- Working with Active Directory Federation Services
- Summary
- Best Practices
- 4. Active Directory Primer
- III. Network Services
- 9. The Domain Name System
- Inside the Domain Name System
- Framework for DNS
- Getting Started with DNS on Windows Server 2003
- Understanding Resource Records
- DNS Zones
- Zone Transfers
- DNS Queries
- Other DNS Components
- The Evolution of Microsoft DNS
- DNS Changes in Windows Server 2003
- DNS in an Active Directory Environment
- Troubleshooting DNS
- Summary
- Best Practices
- 10. DHCP/WINS/Domain Controllers
- Overview of the “Other” Network Services
- Key Components of an Enterprise Network
- Dynamic Host Configuration Protocol (DHCP)
- DHCP Changes in Windows Server 2003
- DHCP Failover
- Advanced DHCP Concepts
- DHCP Security
- The Windows Internet Naming Service
- Installing and Configuring WINS
- Planning, Migrating, and Maintaining WINS
- Global Catalog Domain Controller Placement
- Summary
- Best Practices
- 11. Internet Information Services v6
- Improvements in IIS 6
- Planning and Designing IIS
- Installing and Upgrading IIS
- Configuring IIS
- Configuring and Optimizing Applications
- Installing and Configuring FTP Services
- Examining Optional IIS Components
- Securing IIS
- Maintaining IIS
- Internet Explorer Enhanced Security Configuration for Servers
- Summary
- Best Practices
- 9. The Domain Name System
- IV. Security
- 12. Server-Level Security
- Defining Windows Server 2003 Security
- Deploying Physical Security
- Hardening Server Security
- Using Security Templates to Secure a Server
- File-Level Security
- Additional Security Mechanisms
- Using Windows Server Update Services
- Understanding the Background of WSUS: Windows Update
- Deploying the Automatic Updates Client
- Understanding the Development of Windows Server Update Services
- WSUS Prerequisites
- Installing a Windows Server Update Services System
- Setting WSUS Options
- Synchronizing a WSUS Server
- Approving WSUS Software Patches
- Automatically Configuring Clients via Group Policy
- Deploying Security Patches with WSUS
- Summary
- Best Practices
- 13. Transport-Level Security
- 14. Windows Server 2003 Passports
- The Benefits of Using .NET Passports
- Installing and Configuring .NET Passports
- Working with .NET Passport Accounts
- Using Passports with Web-Based Applications
- Using .NET Passports and Mobile Devices
- Additional Layers of Security
- .NET Passport Policies
- Other Passport Services
- Passport Licensing
- Summary
- Best Practices
- 15. Security Policies and Tools
- 12. Server-Level Security
- V. Migrating to Windows Server 2003
- 16. Migrating from Windows NT4 to Windows Server 2003
- Migration Paths to Windows Server 2003
- Preparing Windows NT4 Domains to Migrate to Windows Server 2003
- Performing an Inplace Upgrade
- Upgrading the Windows NT4 Primary Domain Controller
- Upgrading to Active Directory
- Setting Forest Functionality Levels
- Applying Security to the Directory Services Restore Mode
- Migrating Backup Domain Controllers and Domain Member Servers
- Starting the Domain Controller/Member Server Upgrade
- Upgrading the Windows NT4 BDC to a Windows Server 2003 Domain Controller
- Migrating Existing NT4 Domains to a New Windows Server 2003 Forest
- Consolidating Windows NT4 Domains
- Using Microsoft Active Directory Migration Tool
- Summary
- Best Practices
- 17. Migrating from Windows 2000 to Windows Server 2003
- Windows Server 2003 Migration Overview
- Beginning the Migration Process
- Upgrading a Single Member Server
- Upgrading a Windows 2000 Active Directory Forest
- Migrating Domain Controllers
- Upgrading the AD Schema Using adprep
- Upgrading Existing Domain Controllers
- Replacing Existing Domain Controllers
- Moving Operation Master Roles
- Retiring Existing Windows 2000 Domain Controllers
- Retiring “Ghost” Windows 2000 Domain Controllers
- Upgrading Domain and Forest Functional Levels
- Moving AD-Integrated DNS Zones to Application Partition
- Upgrading Separate AD Forests to a Single Forest Using Mixed-Mode Domain Redirect
- Prerequisites and Limitations of the Mixed-Mode Domain Redirect Procedure
- Mixed-Mode Domain Redirect Procedure
- Establishing a Temporary Windows 2000 Domain Controller
- Moving Operations Master Roles and Demoting Existing Domain Controllers
- Demoting Production Domain Controllers
- Building a Temporary NT 4.0 Domain Controller
- Retiring the Existing Forest
- Promoting the Second Temporary Server to NT PDC
- Promoting the NT PDC to Windows Server 2003 and Integrating with the Target Forest
- Re-establishing Prior Domain Controllers and Moving OM Roles
- Retiring the Temporary Domain Controller
- Consolidating and Migrating Domains Using the Active Directory Migration Tool v2.0
- Consolidating a Windows 2000 Domain to a Windows Server 2003 Domain Using ADMT v2.0
- Using ADMT in a Lab Environment
- ADMT v2.0 Installation Procedure
- ADMT Domain Migration Prerequisites
- Creating Two-Way Trusts Between Source and Target Domains
- Assigning Proper Permissions on Source Domain and Source Domain Workstations
- Creating Target OU Structure
- Modifying Default Domain Policy on the Target Domain
- Exporting Password Key Information
- Installing a Password Migration DLL on the Source Domain
- Setting Proper Registry Permissions on the Source Domain
- Migrating Groups
- Migrating User Accounts
- Migrating Computer Accounts
- Migrating Other Domain Functionality
- Summary
- Best Practices
- 18. Compatibility Testing for Windows Server 2003
- The Importance of Compatibility Testing
- Preparing for Compatibility Testing
- Researching Products and Applications
- Verifying Compatibility with Vendors
- Tracking Sheets for Application Compatibility Research
- Six States of Compatibility
- Using a Windows Server 2003-Compatible Application
- Requiring a Minor Update or Service Patch for Compatibility
- Applications That Require a Version Upgrade for Compatibility
- Handling an Incompatible Application That Will Remain “As Is”
- Incompatible Applications That Won’t Be Used
- Officially Incompatible Applications That Seem to Work Fine
- Creating an Upgrade Decision Matrix
- Assessing the Effects of the Compatibility Results on the Compatibility Testing Plan
- Lab-Testing Existing Applications
- Documenting the Results of the Compatibility Testing
- Determining Whether a Prototype Phase Is Required
- Summary
- Best Practices
- 16. Migrating from Windows NT4 to Windows Server 2003
- VI. Windows Server 2003 Administration and Management
- 19. Windows Server 2003 Administration
- Defining the Administrative Model
- Examining Active Directory Site Administration
- Configuring Sites
- Examining Windows Server 2003 Active Directory Groups
- Creating Groups
- Handling User Administration
- Understanding User Profiles
- Managing Users with Local Security and Group Policies
- Managing Printers with Print Management Component
- Summary
- Best Practices
- 20. Windows Server 2003 System Registry
- 21. Windows Server 2003 Group Policies
- Leveraging Group Policies
- General Best Practices for Group Policy Deployment
- The Fewer Policies, the Better: The “Less Is More” Approach
- Knowing Resultant Set of Policies (RSoP)
- Group Policy Order of Inheritance
- Knowing the Impact of Slow Link Detection
- Delegating GP Management Rights
- Avoiding Cross-Domain Policy Assignments
- Using Group Policy Naming Conventions
- Understanding the Default Domain Policy
- Understanding GP Inheritance and Application Order
- Understanding the Effects of Slow Links on Group Policy
- Using Tools to Make Things Go Faster
- Linking Group Policies
- Automating Software Installations
- Enhancing Manageability with Group Policy Management Console
- Using Resultant Set of Policies in GPMC
- Understanding Windows Management Instrumentation
- Maximizing Security with Group Policy
- Getting the Most Out of Folder Redirection
- Other Useful Tools for Managing Group Policies
- Using Administrative Templates
- Modifying Administrative Templates
- Outlook Client Policy Options
- Adding the Outlook Administrative Template
- Assigning Group Policy Delegates
- Managing Group Policy Configurations
- Defining Baseline Outlook Preferences
- Managing the Look and Feel of the Outlook Client
- Configuring and Applying Outlook Group Policy Settings
- Customizing Administrative Group Policy Templates
- Working with Group Policy Objects
- Working Within the Group Policy Snap-in Namespace
- Summary
- Best Practices
- 22. Windows Server 2003 Management and Maintenance Practices
- Managing Windows Server 2003
- Auditing the Environment
- Managing Windows Server 2003 Remotely
- Identifying Security Risks
- Tracking and Managing Licenses
- Using Microsoft Operations Manager to Simplify Management
- Employing Windows Server 2003 Maintenance Practices
- Keeping Up with Service Packs and Updates
- Maintaining Windows Server 2003
- Summary of Maintenance Tasks and Recommendations
- Summary
- Best Practices
- 23. Automating Tasks Using Windows Server 2003 Scripting
- 24. Documenting a Windows Server 2003 Environment
- Benefits of Documentation
- Design and Planning Documentation
- Migration Documentation
- Active Directory Infrastructure
- Network Infrastructure
- Administration and Maintenance Documentation
- Disaster Recovery Documentation
- Performance Documentation
- Security Documentation
- Training Documentation
- Summary
- Best Practices
- 25. Integrating Microsoft Operations Manager with Windows Server 2003
- 19. Windows Server 2003 Administration
- VII. Remote and Mobile Technologies
- 26. Remote and Mobile Access
- Windows Server 2003 Routing and Remote Access Features and Services
- Routing and Remote Access Service Architecture
- SNMP Agent for RRAS
- Management Applications
- Authentication, Authorization, and Accounting
- Dynamic Interface Manager (Mprdim.dll)
- Connection Manager
- Telephony Application Programming Interface
- IP Router Manager (Iprtmgr.dll)
- IPX Router Manager (Ipxrtmgr.dll)
- Unicast Routing Protocols
- IP Multicast Routing Protocols
- Route Table Manager (Rtm.dll)
- Multicast Group Manager
- IP Filtering Driver (Ipfltdrv.sys)
- IP Unicast Forwarder
- IP Multicast Forwarder
- IPX Filtering Driver (Nwlnkflt.sys)
- IPX Forwarder Driver (Nwlnkfwd.sys)
- Virtual Private Networking in Windows 2003
- Authentication Options to an RRAS System
- VPN Protocols
- Choosing Between PPTP and L2TP/IPSec
- Installing and Configuring Routing and Remote Access
- Configuring Remote Access Clients
- RRAS Tools and Utilities
- Leveraging the Capabilities of the Quarantine Policy Check Tool
- Remote Access Scenarios
- Summary
- Best Practices
- 27. Windows Server 2003 Terminal Services
- Why Implement Terminal Services?
- How Terminal Services Works
- Leveraging Terminal Services Features
- Planning for Terminal Services
- Deploying Terminal Services
- Configuring Terminal Services
- Installing a Terminal Services License Server
- Installing and Configuring Fault-Tolerant Terminal Services
- Securing Terminal Services
- Sizing and Optimizing Terminal Services Environments
- Supporting Terminal Services
- Accessing a Terminal Server
- Summary
- Best Practices
- 26. Remote and Mobile Access
- VIII. Desktop Administration
- 28. Windows Server 2003 Administration Tools for Desktops
- Examining Desktop Deployment Options
- Using Remote Installation Services to Deploy System Images
- Creating Windows XP Images
- Managing Windows XP Installation Media and Image Versions
- Updating Existing XP and 2000 Workstations
- Managing Desktop Applications
- Managing Windows XP Desktops Remotely
- Summary
- Best Practices
- 29. Group Policy Management for Network Clients
- 28. Windows Server 2003 Administration Tools for Desktops
- IX. Fault Tolerance Technologies
- 30. File System Fault Tolerance
- Examining Windows Server 2003 File System Services
- Using Fault-Tolerant Disk Arrays
- Managing File Share Access and Volume Usage
- Leveraging the Capabilities of File Server Resource Manager
- Monitoring Disks and Volumes
- Working with Operating System Files: Fault Tolerance
- Using the Distributed File System Replication
- Planning a DFS Deployment
- Installing DFS
- Optimizing DFS
- Managing and Troubleshooting DFS
- Backing Up DFS
- Handling Remote Storage
- Using the Volume Shadow Copy Service
- Summary
- Best Practices
- 31. System-Level Fault Tolerance (Clustering/Network Load Balancing)
- Building Fault-Tolerant Systems
- Examining Windows Server 2003 Clustering Technologies
- Choosing the Right Clustering Technology
- Implementing Cluster Service
- Installing Cluster Service
- Managing Clusters
- Backing Up and Restoring Clusters
- Cluster Node Backup Best Practices
- Automated System Recovery Backup
- Backing Up the Cluster Quorum
- Backing Up the Cluster Node System State
- Backing Up the Local Disks on a Cluster Node
- Backing Up Shared Disks on a Cluster
- Restoring a Single-Node Cluster When the Cluster Service Fails
- Restoring a Single Node After a Complete Server Failure
- Restoring an Entire Cluster to a Previous State
- Restoring Cluster Nodes After a Cluster Failure
- Upgrading Cluster Nodes
- Installing Network Load Balancing Clusters
- Managing NLB Clusters
- Summary
- Best Practices
- 32. Backing Up a Windows Server 2003 Environment
- Disaster Recovery Planning
- Discovery: Learning the Environment
- Documenting the Enterprise
- Developing a Backup Strategy
- Backing Up the Windows Server 2003 Operating System and Services
- Examining the Windows Server 2003 Backup Programs
- Virtual Disk Service
- Using the Windows Server 2003 Backup Utility (ntbackup.exe)
- Using Remote Storage
- Using the Volume Shadow Copy Service
- Windows Server 2003 Service Backup Options
- Media Management for Windows Server 2003 Backup and the Remote Storage Service
- Windows Server 2003 Startup Troubleshooting Utilities
- Summary
- Best Practices
- 33. Recovering from a Disaster
- Validating Backup Data and Procedures
- Isolating Failures
- Site Failure Recovery
- Recovering from a Disk Failure
- Resolving Boot Failure Problems
- Recovering from a Complete Server Failure
- Resolving Windows Server 2003 Networking Services Errors
- Re-creating Windows Server 2003 File Services and Data
- Restoring Internet Information Services
- Re-establishing the Cluster Service
- Resolving Windows Server 2003 Domain Controller Failure
- Restoring Active Directory
- Recovering the Removable Storage Database
- Restoring Remote Storage Database
- Achieving 99.999% Uptime Using Windows Server 2003
- Summary
- Best Practices
- 30. File System Fault Tolerance
- X. Problem Solving, Debugging, and Optimization
- 34. Logging and Debugging
- 35. Capacity Analysis and Performance Optimization
- XI. Integrated Windows Application Services
- 36. Windows SharePoint Services
- 37. Windows Media Services
- Understanding Windows Media Services
- Using Windows Media Services for Real-Time Live Broadcasts
- Broadcasting Stored Single Files
- Hosting a Directory of Videos for On-Demand Playback
- Combining Multiple Files for a Combined Single Broadcast
- Understanding Windows Media Encoder
- Broadcasting a Live Event
- Capturing Audio or Video for Future Playback
- Using Other Windows Media Encoder Options
- Using Microsoft Producer for Sophisticated Presentations
- Summary
- Best Practices
- Appendix
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.