Monday, December 5, 2011

Sunday, October 16, 2011

Implementing Universal Groups

Use Global Group to hold accounts as members. Avoid group nesting to the minimum to avoid confusion
Use Domain Local Groups to provide access to resources in specific domain then make domain local groups members of access control list for specific resources in the domain, such as share folders & printers
Use Universal Groups to provide extensive access to resources, particularly when Active Directory contains trees and forest, or to simplify access when there are multiple domains

Security Group Management

Types of groups and associated scopes:
Local: Stand-alone servers that are not part of any domain
Domain local: Used when there is a single domain or to manage resources in a particular domain so that global and universal groups can access those resources
Global: Used to manage group accounts from the same domain so that those accounts can access resources in the same and in other domains
Universal: Used to provide access to resources in any domain within the forest.
Security groups
Enable access to resources on a) a stand-alone server or b) in Active Directory
Distribution groups
Used for e-mail or telephone lists to provide a quick, mass distribution of information

User Account Management

There are 2 ways that we can create user accounts:


a) Accounts that are set up through a stand-alone server that does not have Active Directory installed

b) Accounts that are set up in a domain when Active Directory is installed

Transitive trust

  • If A and B have a trust and B and C have a trust, A and C automatically have a trust as well
  • Transitive and 2 ways trust relationship allow any new domain it the tree to have full access to any object in any child/parent domain
  • Authentication to different object is enabled using Kerberos

Sunday, October 2, 2011

Account Management

There are 2 ways that we can create user accounts:
1) Accounts that are set up through a stand-alone server that does not have Active Directory installed
Install Local Users and Groups MMC snap-in:
For standalone servers that do not use Active Directory



2) Accounts that are set up in a domain when Active Directory is installed.

Use Active Directory Users and Computers tool
From the Administrative Tools menu or as an MMC snap-in

Create each new account by entering account information and password controls
Domain users have access to domain any network resource in the domain (as long as they are authorized)

Containers in Active Directory

Forests
Highest level in an Active Directory
One or more Active Directory trees that are in a common relationship
Forest Main Characteristics:
  • The trees can use disjointed namespace
  • All trees use the same schema
  • All trees use the same global catalog
  • Domains enable administration of commonly associated objects, such as accounts and other resources within the forest
  • Two-way transitive trust are automatically configured between domains within a single forest
Forest functional level
Active Directory functions supported forest-wide
The functional levels are:
Windows 2000 native forest functional level
Provides active directory functions compatible with a network that has a combination of Windows Server 2000, Window Server 2003 and Windows Server 2008 DCs
Windows Server 2003 forest functional level
Intended for Windows Server 2003 and 2008 DCs only
Windows Server 2008 forest functional level
Contains only Windows Server 2008 DCs


Trees
  • Contains one or more domains that are in a common relationship
  • Domains in a tree typically have a hierarchical structure whereas parent domain at the top can have multiple child domains under the parent domain
  • These domains use the contiguous namespace format in that the child domain inherit a portion of their namespace from the parent domain


Domains
  • Logical partition within an Active Directory forest
  • Primary container within Active Directory
  • It groups objects that exist in the domain
Basic functions
  • To provide an AD partition to house objects
  • To establish a set of information to be replicated from one DC to another one
  • To expedite management of a set of objects
  • Small and Medium Size companies should have one Domain
  • Large companies should have more than one Domain



Organizational units (OUs)

Grouping of related objects within a domain (Similar to folders and sub-folders)
Allow the grouping of objects so that they can be administered using the same group policies

  • Such as security and desktop setup
  • Also, OUs allow to delegate administration to a different user
Can be nested within other OUs
  • Group policies can be inherit into different levels



Trusted domain
Granted access to resources
Trusting domain
One granting access to another domain

Namespace use Contiguous and Disjoined

Active Directory use contiguous and Disjoined namespaces.
Contiguous namespace
Every child object contains the name of the parent object
I.e. msdn2.microsoft.com (the parent object is microsoft.com)
Disjointed namespace
Child name does not resemble the name of its parent object
ie www.hotmail.com is the child of msn.com

3 main components of Active Directory

1) Schema
Defines objects and the information pertaining to those objects that can be stored in Active Directory
An object can be a user account, a printer, a computer, etc
Each object in active directory is defined through the schema
Schema information for objects in a domain is replicated on every DC
Each object have multiple Attributes
For a User Account, an attribute will be:
User Name
Email
Password
Address


2)Global Catalog

Stores information about every object within forest
First DC configured in a forest becomes global catalog
Can change to another DC
Purposes:
  • Authentication users when they log on (Universal Group Membership)
  • Uses Cached Credentials
  • Forest-wide searches and access to all resources in all domains
  • Replication of key AD elements
  • Keeps copy of most used attributes for quick access


3)Name Space
Name resolution (DNS)
  • Converts computer and domain names to IP addresses
  • We need to have at least one DNS server in the domain
  • Active Directory use DNS to find and interact with different network resources
  • DNS and Active Directory can reside in the same physical server
Namespace
  • Logical area on a network that contains directory services and named objects
  • Has the ability to perform name resolution (forward and reverse namespaces within the DNS)

Active Directory Basics

Active Directory Directory Service (AD DS)
Houses information about all network resources:
  • Servers, printers, user accounts, groups of user accounts, security policies, and other information
  • Central listing of network resources
  • Quick access to network resources

Domain controllers (DCs)
  • Servers that have the AD DS server role installed
  • A Domain can have multiple DCs for Fault Tolerance and Load Balancing


Member servers
Do not have AD installed (therefore they are not DCs)

Domain
  • Fundamental component or container
  • Holds information about all network resources that are grouped within the domain (ie, all user accounts in the domain and all LAN Printers)
  • Each DC is equal to every other DC
  • Each DC has a full list of all networks resources in the domain
Multimaster Replication
  • Object defined in the DC are replicated between DCs
  • The volume of information to be replicated can be limited if required. This is a good option for slow links
  • Advantage : If one DC goes down, no network interruption

Sunday, September 25, 2011

Mail Transfer Agent (MTA), Mail Delivery Agent (MDA),

Mail Transfer Agent (MTA) . An MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol.[
Mail Delivery Agent (MDA) -mail delivery agent or message delivery agent (MDA) is a computer software component that is responsible for the delivery of e-mail messages to a local recipient's mailbox

TCP/IP Protocols

TCP IP protocols
  • DNS- is used to resolve internet name to Ip address
  • HTTP - is used to transfer files that make up the web pages of WWW.
  • SMTP- to transfer of mail messages and attachments
  • Telnet - a terminal emulation protocol user to provide remote access to servers and networking
  • devices.
  • FTP file transfer protocol - user to interactive file transfer between system.

Encapsulation

  • Since there are so much details on encapsulation I decided to do a individual blog on it.
Two functions of encapsulation
  • identifies pieces of data as part of the same communication
  • ensures that data pieces can be directed to the correct receiving end device


The Primary function of the trailer information added by the data link layer encapsulation is to supports error detection

Key functions of Encapsulation

  • identifies pieces of data as part of the same communication
  • ensures that data pieces can be directed to the correct receiving end device
  • enables the reassembly of complete message




5 steps of Data encapsulation
The Application, Presentation and Session layers create DATA from user input
The Transport layer converts the DATA to SEGMENTS
The Network layer converts the SEGMENTS to PACKETS
The Data Link Layer coverts the PACKETS to FRAMES
The physical lyaer coverts the FRAMES to BITS.

DHCP installation and uninstall commands.

DHCP installation
start /w ocsetup DNS-server-core-role

Remove DHCP role

start /w ocsetup DNS-server-core-role /uninstall

Thursday, September 22, 2011

Windows Deployment Services

Benefits of WDS:
  • Ideal for installing the same OS on multiple computers
  • Installs Windows Server 2008, Windows Vista, and Windows 7, Windows Server 2003 and Windows XP
  • Enhances performance
  • Provides updated boot format
  • Uses image-based installation techniques
  • Can utilize multicasting for network efficiency
  • Offers a redesigned presentation for choosing which operating system to installCan utilize multicasting for network efficiency
  • Offers a redesigned presentation for choosing which operating system to install


Requirements for installing WDS:

  • DNS server must be configured in your network
  • DHCP server must be configured in your network
  • Active Directory Domain Services must be configured in your network
  • NTFS file system as the file system for your WDS

Adantages of Server Core & the Full Version of Windows 2008

Advantages of Server Core
Designed to have small footprint in the network which make it less vulnerable to Internet attacks.
Good option for system administrator who like to administrate their server using scripts instead of GUI.
For a dedicated server with a since Server Role
Servers that do not require .NET Framework
Server holds critical files where attacks can be prevented.

Advantages of Full Version
Offer a large group of GUI management tools
Allow you to install other GUI based applications
Requirement for .NET framework.
Do not require dedicated server

Client access licenses (CALs)

A CAL defines how many workstations will access the Server
  • 5 or 25 for Standard or Enterprise editions
  • Additional CALs can be added as needed
There is Flat cost per processor. This is for Datacenter and Itanium-based editions

Upgrade Paths from Windows 2003 Server to Windows 2008 Server

New Technology File System (NTFS)

It has been supported since Windows NT
Native file system for Windows Server 2008
It has Security advantages for File and Directory Security
File compression (Up to 40% compression rate)
Disk quotas
It uses Indexing for faster search
Journaling in a feature which keep track of filesystem changes)
It allows hard link allow you to create a multiple links to a file and distribute those copies to multiple folders.
It has a Self-healing disks Windows 2008 can run in a damaged disk area and allow NTFS heal it.

Redundant array of inexpensive disks (RAID)

It is used to prevent data loss from hard disk failure

Wednesday, September 21, 2011

Hyper-V Capability

Compatible with Clustering
Able to handle up to 4 processor SMP computer
Can be used with Windows and Linux OS
Compatible with different types of disk storage methods
Enables fast migration from one computer to another
Can be used on 32 and 64bit OS.

RAM Limitation Windows Server 2008 for x86 & x64

x86
4GB for Standard and Web Edition
64GB for Enterprise and Data Center Edition
x64
32GB for Standard and Web Edition
2TB for Enterprise, Data Center Edition, Itanium-based

Windows Web Server 2008

Designed for hosting and deploying Web services and applications
For small to large companies that develop or deploy a single website.
Supports x86 and x64 computers
The limitation is it cannot be used to manage directory resources via hosting Active Directory.
It does not support the extra capabilities included in enterprise edition. There is no support for clustering, hot-add memory, fault tolerant memory sync or Meta Directory Services.

RAM
a max of 4GB for x86 processor
a max of 32GB for x64 prcoessor

Difference Between x86 Computer & x64 Computer

Windows 2008 can be installed on a x86 and x64 computer.
The x86 is a 32 bit processor, and it is based on architecture of the original 80386 processor family.
x86 uses Intel & AMD manufacture 32 bit processors.
The x64 is a 64 bit processor in a personal computer, its runs servers faster, and comes with industrial-strength processing.
x86 servers have a use up to 4GB ram.
x64 server can have up to 32GB ram.

Sunday, September 18, 2011

Windows Server 2008 Features

Server Manager
  • Enables the server administrator to manager to:
  • view network connection
  • configure a firewall
  • configure storage on a Windows 2008 Server
  • configure a multitude of server roles from basic server to advance server settings
  • add remove features
  • run diagnostics
  • manage storage and backups
  • configure network connection
Security
For security Windows 2008 uses NAP. Network Access Protection is an umbrella of security protection features that monitor and manage the server and its clients.


Clustering
a group servers of linked servers working together as a single solution. They can programmed to take over the load of the servers.
Its the ability to increase the access to server resources, and provide fail-safe services by linking two or more discrete computers of systems so they appear to function as one.
Clustering is used for
  • Testing
  • Migrate configuration settings
  • Quick configuration and troubleshooting
  • Storage configuration
  • Performance and reliability
  • Security

Enhanced Web Services
  • Comes with Internet Information Services (IIS)
  • Enhanced security
  • Easier application of patches
  • Easier for programmers to write and configure Web applications
  • Better management tools: IIS Manager

Windows Server Core

  • A Minimum server configuration
  • Advantages:
  • No GUI overhead
  • Less disk space and memory needed
  • Smaller attack surface
  • Interact with server via command line
  • Similar to UNIX/Linux Systems

Windows Power Shell
Command-line interface that offers a shell
Perform common administration tasks
Use cmdlets
130 command line-tools
Scripting language

Virtualization
  • Using Hyper-V
  • Capabilities:
  • Compatible with clustering
  • Able to handle up to a four-processor SMP computer
  • Can be used with Windows and Linux operating systems
  • Compatible with different types of disk storage methods
  • Enables fast migration from one computer to another
  • Can house 64-bit and 32-bit operating

Reliability
  • Kernel runs in privileged mode
  • Core programs; computer code of operating system
  • Extra level of security
  • Protected processes
  • Computer program or portion of program
  • Protects premature interruption
  • Management features:
  • Server Manager
  • Wizards
  • Windows Reliability and Performance Monitor



Multitasking
Ability to run two or more programs at the same time

Multithreading
Capability of programs written to run several program code blocks at the same time

Windows Server 2008 for Itanium-Based Systems

Itanium Processor
64-bit processor that allows more instructions per processor cycle than typical x86 and x64 processors
2TB maximum RAM
Supports:
Hot-add memory, processor
Hot-replace processor
SMP
Intended for resource-intensive applications
Itanium CPUs process more instructions per cycle

Thursday, September 15, 2011

Windows Server 2008 Datacenter Edition

Designed for
  • Environments with mission-critical applications
  • Very large databases
  • Information access requiring high availability
Support for clustering with up to 16 computers
For SMP it supports from 2 to 64 processors.
Feature
Hot add memory and fault tolerance memory sync
RAM capability

RAM
a max of 64GB
Similar to to enterprise
64GB for x86 processor and 2TB for x64 bit processor.

Windows Server 2008 Enterprise Edition

  • For midsized and large organizations with scaling needs
  • Supports x86 and x64
  • Enables clustering
  • Supports hot-add memory
  • Fault tolerant memory sync
  • Provides Microsoft Metadirectory Services
  • Designed for hosting and deploying Web services and applications
  • Supports x86 and x64 computers
  • Cannot be used to manage directory resources via hosting Active Directory
RAM
a max of 64GB

Windows Server 2008 Definitions

Symmetric multiprocessor (SMP)-
Symmetric multiprocessor (SMP) is applications use multiple CPUs to run jobs.

Clustering
-
Clustering is ability to increase the access to server resources and provide a fail-safe services by linking two or more discrete computers systems so they appear to function as though they are one.

Hot-add memory-
Ability to add RAM without shutting down

Hot-add processor-
Ability to add processor to an empty processor while the system is running.

Hot-replace processor-
Ability to replace processor in an SMP system without taking the system down.


Fault Tolerant Memory Sync-
The ability of memory to resynchronize after transient memory problems. This prevents interruptions.

Active Directory-
A database of computers, users, groups, shared printers, shared folders, and other network resources.


Client-
Accesses resources on another computer via a network or direct cable connection

Workstation
-
Has its own central processing unit (CPU)
Can be used as a stand-alone or network computer

Domain-
Grouping of network objects, such as computers, servers, and user accounts



Subsystem for UNIX-based Applications (SUA)-
This is how Windows Server 2008 support for UNIX and Linux clients
Its allows Unix/Linux to run scripts in a Windows Server


Multitasking
Ability to run two or more programs at the same time

Multithreading
Capability of programs written to run several program code blocks at the same time

Total Cost of Ownership (TCO) - full cost of owning a network, including hardware, software, training, maintenance and user support cost.

Windows Server 2008 Standard Edition

  • Most basic server version
  • Good for Small Companies
  • Basis for other versions
  • Everyday needs of small to large businesses
  • Used on x86 and x64 computers
  • Compatible with Microsoft .NET Framework and Microsoft Visual Studio .NET

Supports:
  • File and print sharing
  • Essential network services
  • Application and other sharing
  • Multiprocessor computers
  • Symmetric multiprocessor (SMP).


Hyper-V
Virtualization Environment
Cuts cost to Cooling and Power savings
Cuts cost by using fewer computers.
Its limitation are that it only runs on x64 computers

RAM
a max of 4GB

The 8 Different Windows Server 2008 Platforms

Eight versions:
1)Windows Server 2008 Standard Edition
2)Windows Server 2008 Enterprise Edition
3)Windows Web Server 2008
4)Windows Server 2008 Datacenter Edition
5)Windows Server 2008 for Itanium-Based Systems
6)Windows Server 2008 Standard Edition without Hyper-V
7)Windows Server 2008 Enterprise Edition without Hyper-V
8) Windows Server 2008 Datacenter Edition without Hyper-V

Tuesday, August 23, 2011

How to Create a Restore Point on Windows 7

Click Start
Right Click My Computer
Go to Properties
Click on the System Protection link




If you have already created a system restore point then you click on system restore. Otherwise click create.




To Prevent Applications From Running On Windows 7

Open up the group Policy Editor.



Go user user configuration -> Administrative Template -> System folder then double click don't run specified Windows Applications




Now click enabled on Disabled on Enabled.
If you click Enabled you can select application that you want to disable.

Also under registry editor you can check the settings on the applications.
Type regedit under run.
Then under the disallowrun registry key you can check to see if any application has be disabled.



How to Change the Windows Installer Setting ?


1) First open the group policy editor.




In the GP editor, you select Computer Configuration-> Administrative Templates -> Windows Components -> Windows installer.
Then Double click the Windows Disable Windows Installer



Windows Installer has 3 settings Always, Never & For-non managed apps only.

Always will disable any application installs.
Never will allow any application installs.
For-non managed apps only will only enabled managed applications only.


Wednesday, August 17, 2011

Problems Sets Recorder


Program used to record and include detailed information relating to errors experienced when working with software applications in Windows. Within the Problem Steps Recorder, you can include a series of screen shots on queries that are send to a support desk or help center. The screen shots and then converted into a HTML file and send through Email.


To open the recorder type psr.exe in the search bar in the start menu.

Windows 7 DISM

Windows 7 has a new command-line tool called Deployment Image Servicing and Management

DISM enables you to service Windows Images and prepare Windows Pre Installation Environment images . In Windows Vista this was known as Package Manager

DISM is used to
  • Add, remove and open packages
  • Enable or disable different Windows features
  • Use the offline servicing section of an unattended XML answer file to apply changes
  • Configure international settings and add language packs
  • Use Windows images to upgrade to a different edition
  • Prepare for Windows PE images
  • Use old package manager scripts
  • take advantage of better logging.
  • Service down-level OS such as Windows Vista with Service 1 or windows 2008

How Window 7 Improves Boot Times

When A PC boot it
  • read files into memory
  • initialize system services
  • identify and start devices
  • Authenticate user credentials
  • Construct and Display the desktop
  • Launch start up applications.

Windows 7 has improved the Boot time by
1) Reducing the amount and demand of System services
  • The Windows 7 Services use us less CPU, Space and Memory during boot.
2) Optimizing the Device and Driver
3) Improving Parallelism
  • Instead of allowing one driver to run in the boot sequence, in Windows 7 all the drivers can boot up at the same time

4)Enabling faster prefetching.
  • Prefetching is used to read files from a disk.


In Addition Windows 7 has tools to Assist developers to create additional products of a high quality and users to identity which additional products use excessive resources.

Windows 7 & Its 6 Editions

1) Starter
An Edition that performs only limited tasks.
For people with Limited hardware capabilities.
Users with this edition are limited to run only 3 applications at the same time.
Its key features include - Jump lists, An Enhanced Task bar, basic games, games and backup
and restore utilities.
It doesn't include Aero Glass, Media Center, live thumbnail previews, home group creation and Windows touch features.

2) Home Basic-
A Version of Premium that can be run on basic PCs.
It doesn't include Aero Glass, Media Center, live thumbnail previews, or
internet connection sharing.

3) Home Premium - An Edition Aimed at end users.

4) Professional
Has all the features of Home edition plus 3 more features
  • Simple and secure networking using domain join
  • Advanced Network backup and the encrypting file system, or EFS for short, to protect data
  • Location-Aware printing to help you find the correct printer when you're moving between offices and your home.
5) Enterprise
For large enterprise customers that are business volume-licensed.
If offers Bit Locker data protection.
Also offers an enhanced manageability capability.
Some of its key features include direct access, branch cache,
Bit Locker, and Bit locket To Go.

6) Ultimate - Home user who wants the feature of the enterprise.
Its has the same features as Windows 7 Enterprise but it doesn't require volume licensing.

IE 8 Terms & Facts

Smart Address bar
The smart Address bar is a feature you can use to locate the recently-visited web site
containing a word.

Caret Browsing
To navigate a web page using the keywords.


Web splice
Web Splices provide only a preview of the latest web page information
When you subscribe to a website, you are automatically subscribed to its associated
RSS feed

Web page Developers must enable Web Pages for Web Slices

A new Search Feature in IE 8
Find as you type searching
Search provider management

Quick Pick
Allows you to easily switch between search providers.

IE8 New search features.
Visual Search Suggestions
An integrated Find on this Page Feature

Search Enhancement on IE8
Search suggestions based on browsing history
User preference protection.

Compatibility View Feature
It enables you view a site configured for IE 7 in IE 8

What happens after a website you access causes a tab to crash ?
IE 8 re-opens the content in the tab and informs you of what has happened.

How to Enable Compatibity View in Internet Explorer 8 .

There are lot of sites on Internet Explorer 8 which are still not compatible. To fix this problem select the compatibility view option.




After that add the site that you want to configure so it can be compatible.




How to Clear Cache & Cookies in Internet Explorer 8.0

To Clear Cache or Cookies in IE8 go to Tools-> Internet Options



Select Delete then you will get this window.



IE8 now has a preserve favorite option which lets you save the cache of the favorites. This enables you to search your favorites.


Tuesday, August 16, 2011

Missing Vertical Scroll Bar In Microsoft Word


If the scroll bar is missing in word select Tools>Options> and go under View

You will get the following menu.



How to Enable Caret Browsing

IE provides two new features to aid navigation:

Tab grouping - IE 8 allows you to group tabs containing related web pages.
This is useful for grouping web pages that relate to the same subject.
Group tabs are highlighted in the same color you see how they are grouped/

Caret browsing - This is for users who prefer using their keyboard enables you move a cursor on on web page with a keyboard.

To enable caret browsing go to view and then select Caret Browsing. Another method is to press F7.