Windows 2003 Server Permission

What are permissions in windows server?

Permissions define the type of access granted to a user, computer or group to access a resource. Permissions can be applied to resources such as files, folders and printers. Example: privilege to read a file, delete a file or to create a new file in folder

Types of Permission

Security level permissions Share level permissions

Security Level Permissions

Can be implemented only on NTFS Partitions Security or NTFS permissions can be set on drivers, folders and files

By default, the security permissions will be inherited from its parents drive or folder

File permissions override folder permissions Creator of files and folders are their owners

Different security permissions are:

full control modify read and execute write read list folder contents

Share Level Persmissions

Can be implemented on NTFS and FAT portions.
It can be set on drivers and shared folders and not files.

What are shared folders? 

Shared folders can be accessed from network when you copy or move a shared folder, the shared folder will no longer be shared

To hide a shared folder include $ after the name of the shared folder & user access hidden shared folder by typing the UNC path

Different share permissions are:

Read, contribute, Co owner

GeeMail, whats this?

You know some times we loss access to internet, and you need to access your mails in gmail. You need to check a mail urgently. This is where GeeMail comes handy, this is a Desktop client for Gmail, its a free download. once you install this you can access your gmail mail account offline. this would be great, right? yes you can have access to all the mail when there no broadband connection. its just a browser, which requires no configuration.
you can download this from the link below:
GeeMail

Use of UPN Suffix in windows 2003?

Suppose you have a company domain as microsoftsccm.com, as users when they log in they many feel the domain name is too long, so we as administrator can set up Alternative UPN 

(user principle name), upn-suffix which is set:

We need to go to AD domains and trusts àright click on AD domains and trusts node-àproperties -à and add UPN suffix as micro.com, so now users can log with this micro.com also.

Now you need to go to each users or select all bunch of users, go to there properties àaccounts tab and select UPN suffix and select micro.com

Define UPN SUFFIX in windows 2003?

Upn suffix(user principle name): can just be used by admins for users to log on easily or it can also be a DNS domain name.

Smart card in windows 2003?

Users will be provided smart cards and a smart card reader will be attached to computer, users insert smart cards and login to the domain. For users using smart-cards to login the “Password never expires” option will be enabled automatically.

Define Isa firewall ?

Isa firewall is a statefull packet inspection firewall

Isa will integrate with AD and allows users to authenticate and authorizes them to view sites, ISA server is not only a firewall but also a web caching server and VPN server

Stateful packet inspection means that the firewall will see the TCP conversation

Private IP address

10.0.0.0 – 10.255.255.254

172.16.0.0—172.31.255.254

192.168.0.1—192.168.255.254

What are the new features we get after moving the domain functional level to windows 2003?

Universal groups

Group nesting

Converstion of groups to different types

SID history

Rename domains

Track on time stamp

Inetorgperson object

Windows server 2003 Printer Tutorial

Printer---software device

Printer device—hardware device

Local printer: attached directly to a computer

Network printer: connected to a HUB or switch

The print drivers are installed on a print server and are shared.

Printer priority: 99 highest, ex: if we have 2 printers make the priority for one printer as 10 and the other one 5. So the higher priority will print first, same for the print schedule

Separator page: Create a separator page and which separates bundle of pages, ex: when you want to print 100 pages, but 50/50 should be separated, so once 50 pages are printed out, you will receive a separator page.

We can open the print server using a web browser, but, u need to have IIS installed. On the print server

 From the client machine, http: // izone/printer

When we configure a local printer we can select ports as LPT1 etc, but, when we need to configure a network printer then we need to add tcp/ip port

Group policy—computer settings—printer settings—pre-populate printers in AD

When every any user search for printer they are already pre-populated in AD

Exchange server 2007 message flow

Message transport components:

Submission queue: stores all messages on disk awaiting processing

Store driver: received messages from outbox, when ever we send mails they are stored in outbox

Ms Exchange mail submission service

Runs on mail box server

Notifies hub transport when MSG is ready to be retrieved from senders outbox

Stores driver picks up the message

Pick up directory

Submits messages to submission queue

Categorizer:

Process messages from submission queue

Handles messages with multiple recipients

Determines routing path

Applies organization message policies

Message flow from outside the organization:

Enters via SMTP receive connector

Edge server or hub server

Message is dropped into submission queue

Message flow from with in organization

Enter via SMTP receive connector

Hub transport server

Pickup directory

Store driver dropping then into the submission queue

SCC: single copy cluster

Clustering technology, similar to earlier exchange versions.

Shared data storage

Fiber channel SAN

Internet SCSI SAN

what are SMS 2003 Software prerequisists?

Windows 2003 enterprsie

IIS for (MP, RP, DP and SLR server locater point)

BITS required for MP and DP

SQL 2000

Clustering for DPs only

Preparing Active Directory for SMS 2003

First we need to ensure that the user we have logged in should have schema admin rights.

Go to AD and add a user who need to be schema admin

Insert the SMS 2003 CD in the drive and go to CMD

>cd smssetup\bin\i386 –then enter

>extadsc.exe –enter

The scheme will be modified.

To check if AD schema was extended properly, go to C drive and check for extadsc file.

Functions of SMS server 2003

To deploy packages

Deploy software

Find hardware and software on the network

Patch management and device management

OS deployment

Remote controlling users

hardware inventory, software inventory, software distribution, and remote client troubleshooting

file path reporting for software inventory,

Types of distribution groups in Exchange 2007?

Mail enabled distribution groups

Security distribution groups 

Dynamic distribution groups

Mail enabled non-universal groups

Before installing exchnage 2007?

Plan for :
Hardware and software check
DNS and DC
GC and functional level
External domain name
Storage location of transaction log files and database.

Setup /prepareAD /ON:microsoft
setup /prepschema
setup /prepdomain

Getting Started with XenServer video

http://tinyurl.com/4vy68zg

To map network drives from command line

Share a folder on file server or any server and open notepad and type

Net use x: \\server1\sales

Net use y: \\server1\HR

And save this file as .bat

the sales and HR folder should be created upfront and then be shared.

So how can you apply this to users.You just need to go to GPMC create a GPO and edit the user settings -- windows settings--scripts and add the batch file create into this scripts. Point to remember : the .bat file should be saved in LOGON folder on SYSVOL folder.

when a user logs on to the computer he or she will receive the respective drives shared and they can save data. the main advantage is that they will never loss there data as the info is saved centrally on another server and they can access this from any client machine they log into.

LDAP ATTRIBUTES

To view IP settings in a text file

Normally we all check the IP configurations by going to CMD and IPCONFIG /ALL.

Now to save this into a text file.

c:\>ipconfig \all > c:\config.txt
c:\>ipconfig \all > d:\config.txt