Aldrin0007's Weblog

de leon aldrin — Mon, 03 Mar 2008 05:46:28 +0000

How to Install a File Server on Windows Server 2003 by Using the Configure Your Server Wizard

loadTOCNode(3, \’summary\’); 1.	Click Start, point to Administrative Tools, and then click Configure Your Server Wizard.
2.	Click Next.
3.	Click Next.
4.	Click File server in the Server role box, and then click Next.
5.	On the “File Server Disk Quotas” page, configure any quotas you need to control disk-space usage on the server, and then click Next.
6.	On the “File Server Indexing Service” page, click the indexing configuration that is appropriate for your server, and then click Next.
7.	Click Next.
8.	Click Finish.
9.	The Share a Folder Wizard starts. Click Next.
10.	Click Browse, locate the folder that you want to share, and then click OK.
11.	Click Next.
12.	Type a share name for the folder, and then click Next.
13.	Click one of the basic permissions for the folder, or click Customize to set custom permissions on the folder. Click Finish.
14.	Click Close.

How to Manually Install a File Server on Windows Server 2003

loadTOCNode(3, \’summary\’); 1.	Click Start, and then click Windows Explorer.
2.	Locate the folder that you want to share.
3.	Right-click the folder, and then click Sharing and Security.
4.	Click Share this folder, and then accept the default name or type a different name for the share.
5.	Optionally, configure the number of users who can connect, configure permissions for this folder, and then configure the caching options.
6.	Click OK.
7.	A little hand is displayed in the Windows Explorer window to indicate that the folder is being shared.
8.	Quit Windows Explorer.

Install a Windows Server 2003 Print Server

loadTOCNode(2, \’summary\’); How to Install a Print Server on Windows Server 2003 by Using the Configure Your Server Wizard

loadTOCNode(3, \’summary\’); 1.	Click Start, point to Administrative Tools, and then click Configure Your Server Wizard.
2.	Click Next.
3.	Click Next.
4.	Click Print server in the Server role box, and then click Next.
5.	On the “Printers and Printer Drivers” page, click the types of Windows clients that your print server will support, and then click Next.
6.	Click Next.
7.	On the “Add Printer Wizard Welcome” page, click Next.
8.	Click Local printer attached to this computer, click to clear the Automatically detect and install my Plug and Play printer check box, and then click Next.
9.	Click the port for your printer, and then click Next.
10.	Click the printer make and model or provide the drivers from the printer manufacturer media, and then click Next. NOTE: If you are prompted to keep or not keep your existing printer driver, either keep the existing driver or replace the existing driver. If you replace the driver, you must provide the manufacturer driver for this printer. Click Next to continue.
11.	Accept the default name of the printer or provide a different name, and then click Next.
12.	Click the Share as option, type the share name, and then click Next. NOTE: This step is optional because you can share the printer later.
13.	You may provide the location of the printer and a comment to make it easier to locate. Click Next to continue.
14.	Click the Print a test page option, click Next, and then click Finish to quit the Add Printer Wizard. Your printer appears in the Printers and Faxes folder.

How to Share a Printer

loadTOCNode(3, \’summary\’); 1.	Click Start, and then click Printers and Faxes.
2.	Right-click the printer that you just installed, and then click Sharing.
3.	Click Share this printer, and then type a share name for the printer.
4.	Optionally, click Additional Drivers, click the operating systems of the client computers that may attach to this printer, and then click OK. By adding drivers for these operating systems, users on client computers can connect to the print server and automatically download the appropriate drivers for this model of printer without having to configure anything.
5.	When you are prompted to do so, insert the Windows Server 2003 CD-ROM.
6.	Click OK to close the printer properties.
7.	Close the Printers and Faxes folder.

How to Manually Install a Print Server on Windows Server 2003

loadTOCNode(3, \’summary\’); 1.	Click Start, point to Settings, and then click Printers.
2.	Double-click Add Printer to start the Add Printer Wizard.
3.	To complete the Add Printer Wizard, repeat steps 7 through 14 in the “Install a Windows Server 2003 Print Server” section of this article.

Comments: Be the first to comment

List of FTP commands for the Microsoft command-line FTP client

Posted February 29, 2008 by almar red
Categories: Uncategorized

List of FTP commands for the Microsoft command-line FTP client

Command-line options

As you’re starting the program from a DOS prompt:
ftp [-v] [-d] [-i] [-n] [-g] [-s:filename] [-a] [-w:windowsize] [computer]

-v – Suppresses verbose display of remote server responses.
-n – Suppresses auto-login upon initial connection.
-i – Turns off interactive prompting during multiple file transfers.
-d – Enables debugging, displaying all ftp commands passed between the client and server.
-g – Disables filename globbing, which permits the use of wildcard chracters in local file and path names.
-s:filename – Specifies a text file containing ftp commands; the commands will automatically run after ftp starts. No spaces are allowed in this parameter. Use this switch instead of redirection (>).
-a – Use any local interface when binding data connection.
-w:windowsize – Overrides the default transfer buffer size of 4096.
computer – Specifies the computer name or IP address of the remote computer to connect to. The computer, if specified, must be the last parameter on the line.

Client commands

! – Runs the specified command on the local computer
? – Displays descriptions for ftp commands
append – Appends a local file to a file on the remote computer
ascii – Sets the file transfer type to ASCII, the default
bell – Toggles a bell to ring after each file transfer command is completed (default = OFF)
binary – Sets the file transfer type to binary
bye – Ends the FTP session and exits ftp
cd – Changes the working directory on the remote computer
close – Ends the FTP session and returns to the command interpreter
debug – Toggles debugging (default = OFF)
delete – Deletes a single file on a remote computer
dir – Displays a list of a remote directory’s files and subdirectories
disconnect – Disconnects from the remote computer, retaining the ftp prompt
get – Copies a single remote file to the local computer
glob – Toggles filename globbing (wildcard characters) (default = ON)
hash – Toggles hash-sign (#) printing for each data block transferred (default = OFF)
help – Displays descriptions for ftp commands
lcd – Changes the working directory on the local computer
literal – Sends arguments, verbatim, to the remote FTP server
ls – Displays an abbreviated list of a remote directory’s files and subdirectories
mdelete – Deletes one or more files on a remote computer
mdir – Displays a list of a remote directory’s files and subdirectories
mget – Copies one or more remote files to the local computer
mkdir – Creates a remote directory
mls – Displays an abbreviated list of a remote directory’s files and subdirectories
mput – Copies one or more local files to the remote computer
open – Connects to the specified FTP server
prompt – Toggles prompting (default = ON)
put – Copies a single local file to the remote computer
pwd – Displays the current directory on the remote computer (literally, “print working directory”)
quit – Ends the FTP session with the remote computer and exits ftp (same as “bye”)
quote – Sends arguments, verbatim, to the remote FTP server (same as “literal”)
recv – Copies a remote file to the local computer
remotehelp – Displays help for remote commands
rename – Renames remote files
rmdir – Deletes a remote directory
send – Copies a local file to the remote computer (same as “put”)
status – Displays the current status of FTP connections
trace – Toggles packet tracing (default = OFF)
type – Sets or displays the file transfer type (default = ASCII)
user – Specifes a user to the remote computer
verbose – Toggles verbose mode (default = ON)

!

Runs the specified command on the local computer.Syntax: ! [command]

Parameter(s):
command – Specifies the command to run on the local computer. If command is omitted, the local command prompt is displayed; type “exit” to return to ftp.

?

Displays descriptions for ftp commands. ? is identical to help.Syntax: ? [command]

Parameter(s):
command – Specifies the name of the command about which you want a description. If command is not specified, ftp displays a list of all commands.

append

Appends a local file to a file on the remote computer using the current file type setting.Syntax: append local-file [remote-file]

Parameter(s):
local-file – Specifies the local file to add.
remote-file – Specifies the file on the remote computer to which local-file will be added. If remote-file is omitted, the local filename is used for the remote filename.

ascii

Sets the file transfer type to ASCII, the default.Syntax: ascii

Note
FTP supports two file transfer types, ASCII and binary image. ASCII should be used when transferring text files. See also binary.

In ASCII mode, character conversions to and from the network standard character set are performed. For example, end-of-line characters are converted as necessary, based on the target operating system.

bell

Toggles a bell to ring after each file transfer command is completed. By default, the bell is off.Syntax: bell

binary

Sets the file transfer type to binary.Syntax: binary

Note
FTP supports two file transfer types, ASCII and binary image. Binary should be used when transferring executable files. In binary mode, the file is moved byte-by-byte. See also ascii.

bye

Ends the FTP session with the remote computer and exits ftp.Syntax: bye

cd

Changes the working directory on the remote computer.Syntax: cd remote-directory

Parameter(s):
remote-directory – Specifies the directory on the remote computer to change to.

close

Ends the FTP session with the remote server and returns to the command interpreter.Syntax: close

debug

Toggles debugging. When debugging is on, each command sent to the remote computer is printed, preceded by the string —>. By default, debugging is off.Syntax: debug

delete

Deletes a single file on a remote computer. See also mdelete, which can delete multiple files.Syntax: delete remote-file

Parameter(s):
remote-file – Specifies the file to delete.

dir

Displays a list of a remote directory’s files and subdirectories. See also mdir, which can list multiple directories.Syntax: dir [remote-directory] [local-file]

Parameter(s):
remote-directory – Specifies the directory for which you want to see a listing. If no directory is specified, the current working directory on the remote computer is used.
local-file – Specifies a local file to store the listing. If not specified, output is displayed on the screen.

disconnect

Disconnects from the remote computer, retaining the ftp prompt.Syntax: disconnect

get

Copies a remote file to the local computer using the current file transfer type. See also mget, which can copy multiple files.Syntax: get remote-file [local-file]

Parameter(s):
remote-file
Specifies the remote file to copy.

local-file
Specifies the name to use on the local computer. If not specified, the file is given the remote-file name.

glob

Toggles filename globbing. Globbing permits use of wildcard characters in local file or path names. By default, globbing is on.Syntax: glob

hash

Toggles hash-sign (#) printing for each data block transferred. The size of a data block is 2048 bytes. By default, hash mark printing is off.Syntax: hash

help

Displays descriptions for ftp commands.Syntax: help [command]

Parameter(s):
command – Specifies the name of the command about which you want a description. If command is not specified, ftp displays a list of all commands.

lcd

Changes the working directory on the local computer. By default, the working directory is the directory in which ftp was started.Syntax: lcd [directory]

Parameter(s):
directory – Specifies the directory on the local computer to change to. If directory is not specified, the current working directory on the local computer is displayed.

literal

Sends arguments, verbatim, to the remote FTP server. A single FTP reply code is expected in return.Syntax: literal argument [ …]

Parameter(s):
argument – Specifies the argument to send to the FTP server.

ls

Displays an abbreviated list of a remote directory’s files and subdirectories.Syntax: ls [remote-directory] [local-file]

mdelete

Deletes one or more files on a remote computer.Syntax: mdelete remote-files [ …]

Parameter(s):
remote-files – Specifies the remote files to delete.

mdir

Displays a list of a remote directory’s files and subdirectories. Mdir allows you to specify multiple files.Syntax: mdir remote-files [ …] local-file

Parameter(s):
remote-files – Specifies the directory for which you want to see a listing. Remote-files must be specified; type “-” to use the current working directory on the remote computer.
local-file – Specifies a local file to store the listing. Type “-” to display the listing on the screen.

mget

Copies one or more remote files to the local computer using the current file transfer type.Syntax: mget remote-files [ …]

Parameter(s):
remote-files – Specifies the remote file(s) to copy to the local computer.

mkdir

Creates a remote directory.Syntax: mkdir directory

Parameter(s):
directory – Specifies the name of the new remote directory.

mls

Displays an abbreviated list of a remote directory’s files and subdirectories.Syntax: mls remote-files [ …] local-file

Parameter(s):
remote-files – Specifies the files for which you want to see a listing. Remote-files must be specified; type “-” to use the current working directory on the remote computer.
local-file – Specifies a local file to store the listing. Type “-” to display the listing on the screen.

mput

Copies one or more local files to the remote computer using the current file transfer type.Syntax: mput local-files [ …]

Parameter(s):
local-files – Specifies the local files to copy to the remote computer.

open

Connects to the specified FTP server.Syntax: open computer [port]

Parameter(s):
computer – Specifies the remote computer to connect to. Computer can be specified by IP address or computer name (a DNS or HOSTS file must be available). If auto-login is on (default), FTP also attempts to automatically log the user in to the FTP server (see Ftp command-line options to disable auto-login).
port – Specifies a port number to use to contact an FTP server.

prompt

Toggles prompting. Ftp prompts during multiple file transfers to allow you to selectively retrieve or store files; mget and mput transfer all files if prompting is turned off. By default, prompting is on.Syntax: prompt

put

Copies a local file to the remote computer using the current file transfer type. See also mput, which can copy multiple files.Syntax: put local-file [remote-file]

Parameter(s):
local-file – Specifies the local file to copy.
remote-file – Specifies the name to use on the remote computer. If not specified, the file is given the local-file name.

pwd

Displays the current directory on the remote computer.Syntax: pwd

quit

Ends the FTP session with the remote computer and exits ftp.Syntax: quit

quote

Sends arguments, verbatim, to the remote FTP server. A single FTP reply code is expected in return. Quote is identical to literal.Syntax: quote argument [ …]

Parameter(s):
argument – Specifies the argument to send to the FTP server.

recv

Copies a remote file to the local computer using the current file transfer type. Recv is identical to get.Syntax: recv remote-file [local-file]

Parameter(s):
remote-file – Specifies the remote file to copy.
local-file – Specifies the name to use on the local computer. If not specified, the file is given the remote-file name.

remotehelp

Displays help for remote commands.Syntax: remotehelp [command]

Parameter(s):
command – Specifies the name of the command about which you want help. If command is not specified, ftp displays a list of all remote commands.

rename

Renames remote files.Syntax: rename filename newfilename

Parameter(s):
filename – Specifies the file you want to rename.
newfilename – Specifies the new filename.

rmdir

Deletes a remote directory.Syntax: rmdir directory

Parameter(s):
directory – Specifies the name of the remote directory to delete.

send

Copies a local file to the remote computer using the current file transfer type. Send is identical to put.Syntax: send local-file [remote-file]

Parameter(s):
local-file – Specifies the local file to copy.
remote-file – Specifies the name to use on the remote computer. If not specified, the file is given the local-file name.

status

Displays the current status of FTP connections and toggles.Syntax: status

trace

Toggles packet tracing; trace displays the route of each packet when running an ftp command.Syntax: trace

type

Sets or displays the file transfer type.Syntax: type [type-name]

Parameter(s):
type-name – Specifies the file transfer type; the default is ASCII. If type-name is not specified, the current type is displayed.

Note
FTP supports two file transfer types, ASCII and binary image.

ASCII should be used when transferring text files. In ASCII mode, character conversions to and from the network standard character set are performed. For example, end-of-line characters are converted as necessary, based on the destination’s operating system.

Binary should be used when transferring executable files. In binary mode, the file is moved byte-by-byte.

user

Specifes a user to the remote computer.Syntax: user user-name [password] [account]

Parameter(s):
user-name – Specifies a user name with which to log in to the remote computer.
password – Specifies the password for user-name. If not specified, but required, ftp prompts for the password.
account – Specifies an account with which to log on to the remote computer. If account is not specified, but required, ftp prompts for the account.

verbose

Toggles verbose mode. If on, all ftp responses are displayed; when a file transfer completes, statistics regarding the efficiency of the transfer are also displayed. By default, verbose is on.

Comments: Be the first to comment

ETHERNET CABLE: COLOR-CODE STANDARDS

Posted February 29, 2008 by almar red
Categories: Uncategorized

ETHERNET CABLE: COLOR-CODE STANDARDS

The information listed here is to assist Network Administrators in the color coding of Ethernet cables. Please be aware that modifying Ethernet cables improperly may cause loss of network connectivity. Use this information at your own risk, and insure all connectors and cables are modified in accordance with standards. The Internet Centre and its affiliates cannot be held liable for the use of this information in whole or in part.

T-568A Straight-Through Ethernet Cable

The TIA/EIA 568-A standard which was ratified in 1995, was replaced by the TIA/EIA 568-B standard in 2002 and has been updated since. Both standards define the T-568A and T-568B pin-outs for using Unshielded Twisted Pair cable and RJ-45 connectors for Ethernet connectivity. The standards and pin-out specification appear to be related and interchangeable, but are not the same and should not be used interchangeably.

T-568B Straight-Through Ethernet Cable

Both the T-568A and the T-568B standard Straight-Through cables are used most often as patch cords for your Ethernet connections. If you require a cable to connect two Ethernet devices directly together without a hub or when you connect two hubs together, you will need to use a Crossover cable instead.

RJ-45 Crossover Ethernet Cable

A good way of remembering how to wire a Crossover Ethernet cable is to wire one end using the T-568A standard and the other end using the T-568B standard. Another way of remembering the color coding is to simply switch the Green set of wires in place with the Orange set of wires. Specifically, switch the solid Green (G) with the solid Orange, and switch the green/white with the orange/white.

Ethernet Cable Instructions:

Pull the cable off the reel to the desired length and cut. If you are pulling cables through holes, its easier to attach the RJ-45 plugs after the cable is pulled. The total length of wire segments between a PC and a hub or between two PC’s cannot exceed 100 Meters (328 feet) for 100BASE-TX and 300 Meters for 10BASE-T.
Start on one end and strip the cable jacket off (about 1″) using a stripper or a knife. Be extra careful not to nick the wires, otherwise you will need to start over.
Spread, untwist the pairs, and arrange the wires in the order of the desired cable end. Flatten the end between your thumb and forefinger. Trim the ends of the wires so they are even with one another, leaving only 1/2″ in wire length. If it is longer than 1/2″ it will be out-of-spec and susceptible to crosstalk. Flatten and insure there are no spaces between wires.
Hold the RJ-45 plug with the clip facing down or away from you. Push the wires firmly into the plug. Inspect each wire is flat even at the front of the plug. Check the order of the wires. Double check again. Check that the jacket is fitted right against the stop of the plug. Carefully hold the wire and firmly crimp the RJ-45 with the crimper.
Check the color orientation, check that the crimped connection is not about to come apart, and check to see if the wires are flat against the front of the plug. If even one of these are incorrect, you will have to start over. Test the Ethernet cable.

Ethernet Cable Tips:

A straight-thru cable has identical ends.
A crossover cable has different ends.
A straight-thru is used as a patch cord in Ethernet connections.
A crossover is used to connect two Ethernet devices without a hub or for connecting two hubs.
A crossover has one end with the Orange set of wires switched with the Green set.
Odd numbered pins are always striped, even numbered pins are always solid colored.
Looking at the RJ-45 with the clip facing away from you, Brown is always on the right, and pin 1 is on the left.
No more than 1/2″ of the Ethernet cable should be untwisted otherwise it will be susceptible to crosstalk.
Do not deform, do not bend, do not stretch, do not staple, do not run parallel with power cables, and do not run Ethernet cables near noise inducing components.

Basic Theory:

By looking at a T-568A UTP Ethernet straight-thru cable and an Ethernet crossover cable with a T-568B end, we see that the TX (transmitter) pins are connected to the corresponding RX (receiver) pins, plus to plus and minus to minus. You can also see that both the blue and brown wire pairs on pins 4, 5, 7, and 8 are not used in either standard. What you may not realize is that, these same pins 4, 5, 7, and 8 are not used or required in 100BASE-TX as well. So why bother using these wires, well for one thing its simply easier to make a connection with all the wires grouped together. Otherwise you’ll be spending time trying to fit those tiny little wires into each of the corresponding holes in the RJ-45 connector.

Comments: Be the first to comment

de leon aldrin — Mon, 03 Mar 2008 05:45:22 +0000

How To Install and Configure a File and Print Server in Windows Server 2003

Install File and Printer Sharing

loadTOCNode(2, \’summary\’); By default, a Windows Server 2003-based computer is installed with Client for Microsoft Networks, File and Printer Sharing for Microsoft Networks, and TCP/IP.

NOTE: You can view these services in the properties for the local area connection.

You can create a Windows Server 2003 file server and print server manually, or you can use the wizards that are provided in the Configure Your Server Wizard administrative tool.

de leon aldrin — Mon, 03 Mar 2008 05:44:53 +0000

Step-by-Step Guide to a Common Infrastructure for Windows Server 2003 Deployment

Introduction

Step-by-Step Guides

The Microsoft Windows Server 2003 Deployment step-by-step guides provide hands-on experience for many common operating system configurations. The guides begin by establishing a common network infrastructure through the installation of Windows Server 2003, the configuration of Active Directory, the installation of a Windows XP Professional workstation, and finally the addition of this workstation to a domain. Subsequent step-by-step guides assume that you have this common network infrastructure in place. If you do not wish to follow this common network infrastructure, you will need to make appropriate modifications while using these guides.

The common network infrastructure requires the completion of the following guides.

•	Part I: Installing Windows Server 2003 as a Domain Controller
•	Part II: Installing a Windows XP Professional Workstation and Connecting it to a Domain

Once the common network infrastructure is configured, any of the additional step-by-step guides may be employed. Note that some step-by-step guides may have additional prerequisites above and beyond the common network infrastructure requirements. Any additional requirements will be noted in the specific step-by-step guide.

Microsoft Virtual PC

The Windows Server 2003 Deployment step-by-step guides may be implemented within a physical lab environment or through virtualization technologies like Microsoft Virtual PC 2004 or Virtual Server 2005. Virtual machine technology enables customers to run multiple operating systems concurrently on a single physical server. Virtual PC 2004 and Virtual Server 2005 are designed to increase operational efficiency in software test and development, legacy application migration, and server consolidation scenarios.

The Windows Server 2003 Deployment step-by-step guides assume that all configurations will occur within a physical lab environment although most configurations can be applied to a virtual environment without modification.

Applying the concepts provided in these step-by-step guides to a virtual environment based is beyond the scope of this document.

Important Notes

The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organization, product, domain name, email address, logo, person, places, or events is intended or should be inferred.

This common infrastructure is designed for use on a private network. The fictitious company name and Domain Name System (DNS) name used in the common infrastructure are not registered for use on the Internet. You should not use this name on a public network or Internet.

The Active Directory service structure for this common infrastructure is designed to show how Windows Server 2003 Change and Configuration Management works and functions with Active Directory. It was not designed as a model for configuring Active Directory for any organization.

Top of page

Overview

This guide explains how to build a common network infrastructure beginning with the installation and configuration of the Microsoft Windows Server 2003 operating system as a domain controller. This common infrastructure allows you to learn about and evaluate Windows Server 2003. As you implement this guide, think about how you will use them in your organization.

This guide, which is the first in a two-part series, shows how to install a server as a domain controller and populate a sample Active Directory service structure. Part two describes steps to install a Windows XP Professional client and connect that client to the domain controller. First, complete the procedures in this guide, then use “Part II: Installing a Windows XP Professional Workstation and Connecting It to a Domain” to complete your common network infrastructure.

Prerequisites

•

None

Guide Requirements

These are the hardware requirements for the common infrastructure.

Item	Quantity	Comments
Server(s)	1	Capable of running Windows Server 2003
Workstation(s)	As Needed	Capable of running Windows XP Professional
Network Hub(s)	As Needed	A private network is recommended
Remote Access Hardware	As Needed	For testing slow-link and remote connections
Network Interface Cards	As Needed	100 MB Card
UPS	Optional	To protect the servers
Printer	Optional	To print configuration information and other tests

Notes:

•	An Intel processor–based server running Windows Server 2003 must have at least 128 megabytes (MB) of RAM. Microsoft also recommends that the server have several gigabytes of disk storage. In addition, servers should be equipped with high-speed network interface cards.
•	Use a sufficient number of workstations to simulate a variety of workstation environments, including your organization’s typical desktop, roaming user, mobile user, and any other configurations that may be appropriate. These computers must be capable of running Windows XP Professional. Microsoft recommends a minimum of 64 MB of RAM for Intel processor–based workstations.
•	When creating the physical infrastructure, a private network is recommended; therefore, you need sufficient network hubs and other networking hardware to connect all of the workstations and servers to a single network.
•	The most current information about hardware requirements and compatibility for servers is available at the Windows Server 2003 Product Compatibility Web site.

Additional Server Parameters

If you add additional servers to the common infrastructure, use the following server naming convention.

Parameter	Value
Computer Name(s)	HQ-CON-SRV-01 HQ-CON-SRV-nn

Server Configuration

Overview

Figure 1 shows the basic server configuration.

Figure 1. The Server Configuration

Server Disk Configuration

To use a single server for the infrastructure in this guide, you will need a server with either two disk drives or a single disk drive with two partitions.

Note: Subsequent step-by-step guides in this series may require additional servers or other equipment; those additions are addressed in the specific guide.

The first disk or partition holds Windows Server 2003 and other files for the common infrastructure, such as the Windows Installer packages and application source files. The second disk or partition is reserved for Active Directory log files and procedures required by other step-by-step guides.

Each disk or partition must hold several gigabytes of information, and each disk or partition must be formatted for the NT file system (NTFS). The steps for creating and formatting partitions are contained in this guide.

Top of page

Server Installation

To begin the installation procedure, boot directly from the Windows Server 2003 CD. Your CD-ROM must support bootable CDs.

Note: When you configure partitions and format drives, all data on the server hard drive is destroyed.

Beginning the Installation

Setup creates the disk partitions on the computer running Windows Server 2003, formats the drive, and then copies installation files from the CD to the server.

Note: These instructions assume that you are installing Windows Server 2003 on a computer that is not already running Windows. If you are upgrading from an older version of Windows, some of the installation steps may differ.

To begin the installation

1.	Insert the Windows Server 2003 CD in the CD-ROM drive.
2.	Restart the computer. If prompted, press any key to boot from the CD.The Windows Server 2003 installation begins.
3.	On the Welcome to Setup screen, press Enter.
4.	Review and, if acceptable, agree to the license agreement by pressing F8.Note: If you had a previous version of Windows Server 2003 installed on this server, you might get a message asking if you want to repair the drive. Press Esc to continue and not repair the drive.
5.	Follow the instructions to delete all existing disk partitions. The exact steps will differ based on the number and type of partitions already on the computer. Continue to delete partitions until all disk space is labeled as Unpartitioned space.
6.	When all disk space is labeled as Unpartitioned space, press C to create a partition in the unpartitioned space on the first disk drive (as applicable).
7.	If your server has a single disk drive, split the available disk space in half to create two equal-sized partitions. Delete the total space default value. Type the value of half your total disk space at the Create partition of size (in MB) prompt, and the press Enter. (If your server has two disk drives, type the total size of the first drive at this prompt.)
8.	After the New partition is created, press Enter.
9.	Select Format the partition using the NTFS file system , and then press Enter.

Windows Server 2003 Setup formats the partition and then copies the files from the Windows Server 2003 Server CD to the hard drive. The computer restarts and the Windows Server 2003 Installation Program continues.

Completing the Installation

To continue the installation with the Windows Server 2003 Setup Wizard

1.	The Windows Server 2003 Setup Wizard detects and installs devices. This can take several minutes, and during the process your screen may flicker.
2.	In the Regional and Language Options dialog box, make changes required for your locale (typically, none are required for the United States), and then click Next.
3.	In the Personalize Your Software dialog, type Mike Nash in the Name box and type Reskit in the Organization box. Click Next.
4.	Type the Product Key (found on the back of your Windows Server 2003 CD case) in the text boxes provided, and then click Next.
5.	In the Licensing Modes dialog box, select the appropriate licensing mode for your organization, and then click Next.
6.	In the Computer Name and Administrator Password dialog box, type the new computer name HQ-CON-DC-01 in the computer name box, and then click Next.Best Practice: To facilitate the steps in these guides, the Administrator password is left blank and there is no password. This is not an acceptable security practice. When installing a server for your production network, a password should always be set. Windows Server 2003 requires complex passwords by default.
7.	When prompted by Windows Setup, click Yes to confirm a blank Administrator password.
8.	In the Date and Time Settings dialog box, correct the current date and time if necessary, and then click Next.
9.	In the Networking Settings dialog box, make sure Typical Settings is selected, and then click Next.
10.	In the Workgroups or Computer Domain dialog box (No is selected by default), click Next.Note: A domain name could be specified at this point, but this guide uses the Configure Your Server Wizard to create the domain name at a later time. The Windows Server 2003 Installation continues and configures the necessary components. This may take a few minutes.
11.	The server restarts and the operating system loads from the hard drive.

Preparing a Secondary Partition or Secondary Disk Drive

The unpartitioned space from the installation of Windows Server 2003 requires formatting before it can be accessed by the operating system. Management of disks and partitions occurs through the Computer Management snap-in for Microsoft Management Console. The following steps assume a second disk drive is in use; modify procedures accordingly for a second partition.

To prepare a secondary partition or disk drive

Warning: Formatting a partition destroys all data on that partition. Make sure that you select the correct partition.

1.	Press Ctrl+Alt+Del and log on to the server as administrator. Leave the password blank.
2.	Click the Start button, point to Administrative Tools, and then click Computer Management.
3.	To define and format the unpartitioned space, click Disk Management.
4.	Right-click Unallocated on Disk 1.
5.	To define a partition, click New Partition, and then click Next to continue.
6.	Select Primary Partition (default), and then click Next to continue.
7.	Click Next leaving the Partition size in MB set to the default.
8.	For Assign the following drive letter, select L, and then click Next to continue.
9.	Under Format this partition with the following settings, click Perform a quick format. Click Next, and then Finish to complete the configuration of the secondary disk drive. Once you have finished, your disk allocation should look similar to Figure 2. Figure 2. Disk Management
10.	Close the Computer Management console.

Configuring Your Server as a DHCP Server

Dynamic Host Configuration Protocol (DHCP) can be installed manually or by using the Windows Server 2003 Manage Your Server wizard. This section uses the wizard to complete the installation.

To install DHCP using the Windows Server 2003 Manage Your Server wizard

Warning: The following section will configure your server as a DHCP server. If this server resides on a production network, the server may distribute IP address information that might not be valid on the network. Microsoft recommends that these exercises be completed on an isolated network.

1.	Within the Manager Your Server page, click Add or remove a role.Note: If you closed the Manage Your Server page you can start the Configure Your Server wizard from Administrative Tools. If you select this option the following steps may differ slightly.
2.	After the Configure Your Server wizard appears, click Next.
3.	Click Custom configuration, and then click Next.
4.	Under Server Role, click DHCP server, and then click Next.
5.	Review the Summary of Selections, and then click Next to begin the installation.
6.	When the New Scope Wizard appears, click Next to define a DHCP scope.
7.	For Name, type Contoso HQ. Leave the description blank, and then click Next.
8.	Enter a Start IP address of 10.0.0.10 and enter 10.0.0.254 for the End IP address. Click Next.
9.	Exclusions will not be defined at this time. Click Next to continue the installation.
10.	To accept the default Lease Duration, click Next.
11.	To set DHCP Options, click Next.
12.	On the Router (Default Gateway) screen, type 10.0.0.1 for IP address, click Add, and then click Next.
13.	For Parent Domain on the Domain Name and DNS Server screen, type contoso.com. For IP address, type 10.0.0.2, click Add, and then click Next.
14.	Click Next as WINS Servers will not be utilized in this environment.
15.	Click Next to Activate Scope.
16.	Click Finish twice.
17.	Close the Manage Your Server screen.

Configuring Your Server as a Domain Controller

Domain Name Service (DNS) and DCPromo (the command-line tool that creates DNS and Active Directory) can be installed manually or by using the Windows Server 2003 Manager Your Server Wizard. This section uses the manual tools to complete the installation.

To install DNS and Active Directory using the manual tools

1.	Click the Start button, click Run, type DCPROMO, and then click OK.
2.	When the Active Directory Installation Wizard appears, click Next to begin the installation.
3.	After reviewing the Operating System Compatibility information, click Next.
4.	Select Domain controller for a new domain (default), and then click Next.
5.	Select Domain in a new forest (default), and then click Next.
6.	For Full DNS name, type contoso.com, and then click Next. (This represents a Fully Qualified name.)
7.	Click Next to accept the default Domain NetBIOS name of CONTOSO. (NetBIOS names provides for down-level compatibility.)
8.	On the Database and Log Folders screen, point the Active Directory Log Folder to L:\Windows\NTDS, and then click Next to continue.
9.	Leave the default folder location for Shared System Volume, and then click Next.
10.	On the DNS Registration Diagnostics screen, click Install and configure the DNS server on this computer. Click Next to continue.
11.	Select Permissions compatible only with Windows 2000 or Windows Server 2003 (default), and then click Next.
12.	Type password for Restore Mode Password and Confirm password, and then click Next to continue.Note: Production environments should employ complex passwords for Directory Services Restore passwords. Figure 3. Summary of the Active Directory Installation Options
13.	Figure 3 represents a summary of the Active Directory installation options. Click Next to start the installation of Active Directory. If prompted, insert the Windows Server 2003 installation CD.
14.	Click OK to acknowledge the warning of having a dynamically assigned IP address for a DNS server.
15.	If you have more than one network interface, select the 10.0.0.0 network interface from the Choose Connection drop-down list, and then click Properties.
16.	Under the This connection uses the following items section, click Internet Protocol (TCP/IP), and then click Properties.
17.	Select Use the following IP address, and then type 10.0.0.2 for the IP address. Press the Tab key twice, and then type 10.0.0.1 for the Default gateway. Type 127.0.0.1 for the Preferred DNS server, and then click OK. Click Close to continue.
18.	Click Finish once the Active Directory Installation Wizard is finished.
19.	Click Restart Now to reboot the computer.

To authorize the DHCP server

1.	After the computer reboots, press Ctrl+Alt+Del and log on to the server as administrator@contoso.com. Leave the password blank.
2.	Click the Start menu, select Administrative Tools, and then click DHCP
3.	Click hq-con-dc-01.contoso.com. Right click hq-con-dc-01.contoso.com and then click Authorize
4.	Close the DHCP management console

Active Directory Sample Infrastructure

The common infrastructure is based on the fictitious organization Contoso. Contoso owns the DNS name contoso.com, which was configured with the Active Directory Installation Wizard in the preceding section. Figure 4 illustrates the sample Active Directory structure.

Figure 4. Sample Active Directory Structure

The most interesting aspects of this structure are the Domain (contoso.com); the Accounts, Headquarters, Production, Marketing, Groups, Resources, Desktops, Laptops, and Servers organizational units (OUs). These are represented by folders (book) in Figure 4. OUs exist for the delegation of administration and for the application of Group Policy—not simply to mirror a business organization. For an in-depth discussion on designing an OU structure, see “Designing and Deploying Directory and Security Services”.

Populating Active Directory

This section describes how to manually create the OUs, Users, and Security Groups outlined in Appendix A.

Creating Organizational Units and Groups

To create OUs and Security Groups

1.	Click the Start button, point to All Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2.	Click the + next to contoso.com to expand it. Click contoso.com itself to show its contents in the right pane.
3.	In the left pane, right-click contoso.com, point to New, and then click Organizational Unit.
4.	Type Accounts in the name box, and then click OK.
5.	Repeat steps 3 and 4 to create the Groups and Resources OUs.
6.	Click Accounts in the left pane. Its contents now display in the right pane. (It is empty at the beginning of this procedure.)
7.	Right-click Accounts, point to New, and then click Organizational Unit.
8.	Type Headquarters, and then click OK.
9.	Repeat steps 7 and 8 to create the Production and Marketing OUs in Accounts. When you have finished, the OU structure should look like Figure 5. Figure 5. Creating Organizational Units See full-sized image
10.	In the same way, create Desktops, Laptops, and Servers in the Resources OU.
11.	Create the two security groups by right-clicking Groups, pointing to New, and then clicking Group. The two groups to add are Management and Non-management. The settings for each group should be Global and Security. Click OK to create each group. When all steps are completed, the final OU structure should look like Figure 6. Figure 6. Final OU Structure See full-sized image

Creating User Accounts

To create a user account

1.	In the left-hand pane, click Headquarters (in Accounts).. Its contents now display in the right pane. (It is empty at the beginning of this procedure.)
2.	Right-click Headquarters, point to New, and then click User.
3.	Type Christine for the first name and Koch for the last name. (Note that the full name automatically appears in the Full name box.)
4.	Type Christine for the User logon name. The window should look like Figure 7. Figure 7. Adding a User
5.	Click Next.
6.	Type pass#word1 for Password and Confirm password, and then click Next to continue.Note: By default, Windows Server 2003 requires complex passwords for all newly created users. Password complexity requirements may be disabled through Group Policy.
7.	Click Finish. Christine Koch now displays in the right-hand pane as a user under Reskit.com/Accounts/Headquarters.
8.	Repeat steps 2 through 7, adding the names listed in Appendix A for the Headquarters OU. When you are finished, the Headquarters OU screen should look like Figure 8. Figure 8. User listing in the Headquarters OU See full-sized image
9.	Repeat steps 1 through 8 to create the users in the Production and Marketing OUs.

Adding Users to Security Groups

To add a user to a security group

1.	In the left pane, click Groups.
2.	In the right pane, double-click the Management group.
3.	Click the Members tab, and then click Add.
4.	Click Advanced, and then click Find Now.
5.	Select all appropriate users from the lower section by holding down the Ctrl key while clicking each name. Click OK while all members are highlighted. (The users who should be members of this security group are listed in Appendix A.) Click OK again to add these members to the Management Security Group. Click OK to close the Management Security Group Properties sheet. Figure 9. The Members of the Management Security Group Are Drawn from Three OUs
6.	Repeat steps 2 through 5 to add members to the Non-management group.
7.	Close the Active Directory Users and Computers snap-in.

Top of page

Appendix A: Active Directory Populace

Users

OU	Full Name	Login Name	Group Membership
Headquarters	Koch, Christine	Christine	Management
	West, Paul	Paul	Management
	Clark, Molly	Molly	Management
	Sprenger, Christof	Christof	Management
	Schleger, Yvonne	Yvonne	Management
	Nash, Mike	Mike	Management
	Brink, Monica	Monica	Non-management
Production	Ola, Preeda	Preeda	Management
	Grande, Jon	Jon	Non-management
	Hector, Clair	Clair	Non-management
	Kim, Jim	Jim	Non-management
	Nay, Lorraine	Lorraine	Management
	Randall, Cynthia	Cynthia	Non-management
	Browne, Kevin F.	Kevin	Non-management
Marketing	Fitzgerald, Charles	Charles	Management
	Mustafa, Ahmad	Ahmad	Non-management
	Narp, Sylvie	Sylvie	Non-management

Comments: Be the first to comment

Posted March 3, 2008 by almar red
Categories: Uncategorized

de leon aldrin — Mon, 03 Mar 2008 05:43:12 +0000

How to use Group Policy to remotely install software in Windows Server 2003

SUMMARY

This step-by-step article describes how to use Group Policy to automatically distribute programs to client computers or users. You can use Group Policy to distribute computer programs by using the following methods:

•

Assigning Software
You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is finalized. If you assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is finalized.

•

Publishing Software
You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.

Note Windows Server 2003 Group Policy automated-program installation requires client computers that are running Microsoft Windows 2000 or later.

Create a Distribution Point

To publish or assign a computer program, you must create a distribution point on the publishing server:

1.	Log on to the server computer as an administrator.
2.	Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.
3.	Set permissions on the share to allow access to the distribution package.
4.	Copy or install the package to the distribution point. For example, to distribute Microsoft Office XP, run the administrative installation (setup.exe /a) to copy the files to the distribution point.

Create a Group Policy Object

To create a Group Policy object (GPO) to use to distribute the software package:

1.	Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.	In the console tree, right-click your domain, and then click Properties.
3.	Click the Group Policy tab, and then click New.
4.	Type a name for this new policy (for example, Office XP distribution), and then press ENTER.
5.	Click Properties, and then click the Security tab.
6.	Click to clear the Apply Group Policy check box for the security groups that you want to prevent from having this policy applied.
7.	Click to select the Apply Group Policy check box for the groups that you want this policy to apply to.
8.	When you are finished, click OK.

Assign a Package

To assign a program to computers that are running Windows Server 2003, Windows 2000, or Microsoft Windows XP Professional, or to users who are logging on to one of these workstations:

1.	Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.	In the console tree, right-click your domain, and then click Properties.
3.	Click the Group Policy tab, select the group policy object that you want, and then click Edit.
4.	Under Computer Configuration, expand Software Settings.
5.	Right-click Software installation, point to New, and then click Package.
6.	In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\`file server`\`share`\`file name`.msi. Important Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.
7.	Click Open.
8.	Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.
9.	Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.
10.	When the client computer starts, the managed software package is automatically installed.

Publish a Package

To publish a package to computer users and make it available for installation from the Add or Remove Programs tool in Control Panel:

Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

In the console tree, right-click your domain, and then click Properties.

Click the Group Policy tab, click the group policy object that you want, and then click Edit.

Under User Configuration, expand Software Settings.

Right-click Software installation, point to New, and then click Package.

In the Open dialog box, type the full UNC path of the shared installer package that you want. For example, \\file server\share\file name.msi.

Important Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.

Click Open.

Click Publish, and then click OK.

The package is listed in the right pane of the Group Policy window.

10.

Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

11.

Test the package:

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

a.	Log on to a workstation that is running Windows 2000 Professional or Windows XP Professional by using an account that you published the package to.
b.	In Windows XP, click Start, and then click Control Panel.
c.	Double-click Add or Remove Programs, and then click Add New Programs.
d.	In the Add programs from your network list, click the program that you published, and then click Add. The program is installed.
e.	Click OK, and then click Close.

Redeploy a Package

In some cases you may want to redeploy a software package. For example, if you upgrade or modify the package. To redeploy a package:

1.	Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.	In the console tree, right-click your domain, and then click Properties.
3.	Click the Group Policy tab, click the Group Policy object that you used to deploy the package, and then click Edit.
4.	Expand the Software Settings container that contains the software installation item that you used to deploy the package.
5.	Click the software installation container that contains the package.
6.	In the right pane of the Group Policy window, right-click the program, point to All Tasks, and then click Redeploy application. You will receive the following message: Redeploying this application will reinstall the application everywhere it is already installed. Do you want to continue?
7.	Click Yes.
8.	Quit the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

Remove a Package

To remove a published or assigned package:

Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

In the console tree, right-click your domain, and then click Properties.

Click the Group Policy tab, click the Group Policy object that you used to deploy the package, and then click Edit.

Expand the Software Settings container that contains the software installation item that you used to deploy the package.

Click the software installation container that contains the package.

In the right pane of the Group Policy window, right-click the program, point to All Tasks, and then click Remove.

Do one of the following:

•	Click Immediately uninstall the software from users and computers, and then click OK.
•	Click Allow users to continue to use the software but prevent new installations, and then click OK.

Quit the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

Troubleshoot

Published Packages Are Displayed on a Client Computer After You Use a Group Policy to Remove Them

This situation can occur when a user has installed the program but has not used it. When the user first starts the published program, the installation is finalized. Group Policy then removes the program.

REFERENCES

For more information about how to use a Group Policy to deploy software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

304953 (http://support.microsoft.com/kb/304953/) How to deploy Office XP over a network

302430 (http://support.microsoft.com/kb/302430/) How to assign software to a specific group by using Group Policy

Back to the top

APPLIES TO

•	Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
•	Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
•	Microsoft Windows Server 2003, Standard Edition (32-bit x86)
•	Microsoft Windows XP 64-Bit Edition Version 2003

Back to the top

Keywords:

kbhowtomaster kbmgmtservices KB816102

de leon aldrin — Mon, 03 Mar 2008 05:42:43 +0000

How do I install the DHCP Server Service?

Start the Network Control Applet by clicking on Network from Control Panel (Start – Settings – Control Panel) or right click on Network Neighborhood and select Properties
Click on the Services tab and click Add
Select “Microsoft DHCP Server” and click OK
You will be prompted to insert the NT Server installation CD or say where the i386 directory is
A warning that all local adapters must use a static IP address and click OK
Click Close and select Yes to reboot

Under Windows 2000 to install perform the following:

Start the Add/Remove Programs Control Panel applet (Start – Settings – Control Panel – Add/Remove Programs)
In the left hand pane click ‘Add/Remove Windows Components”
Click the ‘Components’ button to start the Components wizard
Click Next
Select ‘Networking Services’ and click Details
Check the ‘Dynamic Host Configuration Protocol (DHCP)’ option and click OK
Click Next and the relevant files and services will be configured.
Click Finish when all operations have completed
Click Close to the Add/Remove Programs dialog

Comments: Be the first to comment

Posted March 3, 2008 by almar red

de leon aldrin — Mon, 03 Mar 2008 05:42:24 +0000

How To Set Up an FTP Server in Windows Server 2003

Install Internet Information Services and the FTP Service

Because FTP depends on Microsoft Internet Information Services (IIS), IIS and the FTP Service must be installed on the computer. To install IIS and the FTP Service, follow these steps.

NOTE: In Windows Server 2003, the FTP Service is not installed by default when you install IIS. If you already installed IIS on the computer, you must use the Add or Remove Programs tool in Control Panel to install the FTP Service.

1.	Click Start, point to Control Panel, and then click Add or Remove Programs.
2.	Click Add/Remove Windows Components.
3.	In the Components list, click Application Server, click Internet Information Services (IIS) (but do not select or clear the check box), and then click Details.
4.	Click to select the following check boxes (if they are not already selected): Common Files File Transfer Protocol (FTP) Service Internet Information Services Manager
5.	Click to select the check boxes next to any other IIS-related service or subcomponent that you want to install, and then click OK.
6.	Click Next.
7.	When you are prompted, insert the Windows Server 2003 CD-ROM into the computer’s CD-ROM or DVD-ROM drive or provide a path to the location of the files, and then click OK.
8.	Click Finish.

IIS and the FTP service are now installed. You must configure the FTP Service before you can use it.

Configure The FTP Service

To configure the FTP Service to allow only anonymous connections, follow these steps:

1.	Start Internet Information Services Manager or open the IIS snap-in.
2.	Expand `Server_name`, where `Server_name` is the name of the server.
3.	Expand FTP Sites
4.	Right-click Default FTP Site, and then click Properties.
5.	Click the Security Accounts tab.
6.	Click to select the Allow Anonymous Connections check box (if it is not already selected), and then click to select the Allow only anonymous connections check box. When you click to select the Allow only anonymous connections check box, you configure the FTP Service to allow only anonymous connections. Users cannot log on by using user names and passwords.
7.	Click the Home Directory tab.
8.	Click to select the Read and Log visits check boxes (if they are not already selected), and then click to clear the Write check box (if it is not already cleared).
9.	Click OK.
10.	Quit Internet Information Services Manager or close the IIS snap-in.

The FTP server is now configured to accept incoming FTP requests. Copy or move the files that you want to make available to the FTP publishing folder for access. The default folder is drive:\Inetpub\Ftproot, where drive is the drive on which IIS is installed.

APPLIES TO

•	Microsoft Windows Server 2003, Standard Edition (32-bit x86)
•	Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
•	Microsoft Windows Server 2003, Enterprise x64 Edition
•	Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
•	Microsoft Windows Server 2003, 64-Bit Datacenter Edition
•	Microsoft Windows Server 2003, Web Edition
•	Microsoft Internet Information Services 6.0

Comments: Be the first to comment

Posted March 3, 2008 by almar red
Categories: Uncategorized

de leon aldrin — Mon, 03 Mar 2008 05:41:29 +0000

How To Set Up an FTP Server in Windows Server 2003

Install Internet Information Services and the FTP Service

Because FTP depends on Microsoft Internet Information Services (IIS), IIS and the FTP Service must be installed on the computer. To install IIS and the FTP Service, follow these steps.

1.	Click Start, point to Control Panel, and then click Add or Remove Programs.
2.	Click Add/Remove Windows Components.
3.	In the Components list, click Application Server, click Internet Information Services (IIS) (but do not select or clear the check box), and then click Details.
4.	Click to select the following check boxes (if they are not already selected): Common Files File Transfer Protocol (FTP) Service Internet Information Services Manager
5.	Click to select the check boxes next to any other IIS-related service or subcomponent that you want to install, and then click OK.
6.	Click Next.
7.	When you are prompted, insert the Windows Server 2003 CD-ROM into the computer’s CD-ROM or DVD-ROM drive or provide a path to the location of the files, and then click OK.
8.	Click Finish.

IIS and the FTP service are now installed. You must configure the FTP Service before you can use it.

Configure The FTP Service

loadTOCNode(2, \’summary\’); To configure the FTP Service to allow only anonymous connections, follow these steps:

1.	Start Internet Information Services Manager or open the IIS snap-in.
2.	Expand `Server_name`, where `Server_name` is the name of the server.
3.	Expand FTP Sites
4.	Right-click Default FTP Site, and then click Properties.
5.	Click the Security Accounts tab.
6.	Click to select the Allow Anonymous Connections check box (if it is not already selected), and then click to select the Allow only anonymous connections check box. When you click to select the Allow only anonymous connections check box, you configure the FTP Service to allow only anonymous connections. Users cannot log on by using user names and passwords.
7.	Click the Home Directory tab.
8.	Click to select the Read and Log visits check boxes (if they are not already selected), and then click to clear the Write check box (if it is not already cleared).
9.	Click OK.
10.	Quit Internet Information Services Manager or close the IIS snap-in.

de leon aldrin — Mon, 03 Mar 2008 05:39:09 +0000

HOW TO: Apply Local Policies to All Users Except Administrators on Windows Server 2003 in a Workgroup Setting

SUMMARY

loadTOCNode(1, \’summary\’);

This article describes how to apply local policies to all users except administrators on a Windows Server 2003-based computer that is in a workgroup setting.When you use a Windows Server 2003-based computer in a workgroup setting (not a domain), you may have to implement local policies on that computer that can apply to all users of that computer, but not to administrators. This exception permits the administrator to retain unlimited access and control of the computer, and also permits the administrator to restrict the users who can log on to that computer.The Windows Server 2003-based computer must be in a workgroup setting for this procedure to work. In this situation, the domain policies cannot overwrite the local policies because the domain policies do not exist. Microsoft recommends that you make backup copies of all the files that you edit during this procedure.

Apply Local Policies to All Users Except Administrators

loadTOCNode(2, \’summary\’);To implement local policies to all users except administrators, follow these steps:

Log on to the computer as an administrator.

Open your local security policy. To do this, do one of the following:

•	Click Start, click Run, type gpedit.msc, and then press ENTER.-or-
•	Click Start, click Run, type mmc, press ENTER, add the Group Policy Object Editor, and then configure it for the local security policy.

If the removal of the run command is one of the policies that you want, Microsoft recommends that you edit the policy by means of Microsoft Management Console (MMC), and then save the results as an icon. Then, you do not need the run command to reopen the policy.

Expand the User Configuration object, and then expand the Administrative Templates object.

Enable whatever policies that you want (for example, Desktop for “Hide My Network Places” or “Hide Internet Explorer Icon on Desktop”).NOTE: Make sure that you select the correct policies; otherwise, you may restrict the ability of the administrator to log on to the computer (and to complete the necessary steps to configure the computer). Microsoft recommends that you record any changes that you make (you can also use this information for step 10).

Close the Gpedit.msc Group Policy snap-in. Or, if you use MMC, save the console as an icon to make it accessible later, and then log off the computer.

Log on to the computer as an administrator.You can verify in this logon session the policy changes that were made earlier, because, by default, the local policies apply to all users, which includes administrators.

Log off the computer, and then log on to the computer as all of the other users for this computer for whom you want these policies to apply. The policies are implemented for all of these users and the administrator.NOTE: Any user account that is not logged on to the computer at this step cannot have the policies implemented for that account.

Log on to the computer as an administrator.

Click Start, point to Control Panel, and then click Folder Options. Click the View tab, click Show Hidden Files and Folders, and then click OK so that you can view the Group Policy hidden folder. Or, open Windows Explorer, click Tools, and then click Folder Options to view these settings.

10.

Copy the Registry.pol file that is located in the %Systemroot%\System32\GroupPolicy\User folder to a backup location (for example, to a different hard disk, floppy disk, or folder).

11.

Open your local policy again by using either the Gpedit.msc Group Policy snap-in or your MMC icon, and then enable the exact features that were disabled in the original policy that was created for that computer.NOTE: When you do this, Policy Editor creates a new Registry.pol file.

12.

Close your policy editor, and then copy the backup Registry.pol file that you created in step 10 back into the %Systemroot%\System32\GroupPolicy\User folder.When you are prompted to replace the existing file, click Yes.

13.

Log off the computer, and then log on as an administrator.You can verify that the changes that were originally made are not implemented for you because you have logged on to the computer as an administrator.

14.

Log off the computer, and then log on as another user (or users).You can verify that the changes that were originally made are implemented for you because you have logged on to the computer as a user (not an administrator) to that computer .

15.

Log on to the computer as an administrator to verify that the local policy does not affect you as the local administrator to that computer.

Restore Original Local Policies

loadTOCNode(2, \’summary\’);To reverse the process described in the “Apply Local Policies to All Users Except Administrators” section of this article, follow these steps:

1.	Log on to the computer as an administrator.
2.	Click Start, point to Control Panel, and then click Folder Options. Click the View tab, click Show Hidden Files and Folders, and then click OK so that you can view the Group Policy hidden folder. Or, open Windows Explorer, click Tools, and then click Folder Options.
3.	Move, rename, or delete the Registry.pol file from the %Systemroot%\System32\GroupPolicy\User folder.Another default Registry.pol file is created by the Windows File Protection system after you log off from or restart the computer.
4.	Open the local policy. To do this, click Start, click Run, and then type gpedit.msc. Or, click Start, click Run, type mmc, and then load the local security policy. Then, set all of the items that are set to either disable or enable to not configured to reverse any policy changes that were implemented to the Windows Server 2003 registry as specified by the Registry.pol file.
5.	Log off the computer as an administrator, and then log on to the computer again as an administrator.
6.	Log off the computer, and then log on to the computer as all of the users on the local computer so that the changes can be reversed on their accounts too.

Windows Server 2008 RC0: How to Promote Server Core Installation to a Read Only Domain Controller

de leon aldrin — Fri, 29 Feb 2008 02:41:57 +0000

My demo setup for GearUp in Cagayan de Oro consists of a Server Virtualization role server, and two Virtual Servers that will become my Domain Controller, and the second Virtual Server is a Server Core installation of Windows Server 2008 which I intend to become a Read Only Domain Controller.

The Server Core functionality installs a version of Windows Server 2008 that is stripped of GUI and all non-essential services. The Read Only Domain Controller (RODC) which is reminiscent of the Windows NT 4.0 Backup Domain Controller, maintains a read-only copy of the directory databases, but without the passwords. The only copies of passwords stored in the RODC are those who were authenticated on that DC, but without the administrative privileges.

Here’s how I did the build.

Change Computer Name and IP Address parameters

First we need to display the current TCP/IP parameters and network interfaces.

netsh interface ipv4 show interfaces

The Idx column is important since we will need to refer to that interface ID in our subsequent commands.

Our next move is to assign our IP address. We will assign our domain controller the static IP address 192.168.100.202 with a subnet mask of 255.255.255.0 and default gateway 192.168.100.1. To do that we type

netsh interface ipv4 set address name=”2″ source=static address=192.168.100.202 mask=255.255.255.0 gateway=192.168.100.1

We can use IPCONFIG to check if our configuration is correct. As we can see, we still have our good ol’ commands in server core!

Change DNS parameters

Next, we will change the DNS parameters. Our DNS Server is our first domain controller in this forest, which is 192.168.200.1. By default, there is no DNS server that is assigned, so we need to assign one for Active Directory to function properly.

netsh interface ipv4 add dnsserver name=”2″ address=192.168.100.201 index=1

Again, check via ipconfig /all

Change name

We need to rename the machine before we promote it to become a domain controller

netdom renamecomputer /NewName:WS08DC2

we need to restart the machine afterwards

shutdown /r /t 0

Promote to Read Only Domain Controller

Since Server Core removes most GUI, and that the Active Directory Installation Wizard or DCPROMO.EXE is based on GUI, we could expect a major change on how we promote computers to become a domain controller
Create Answer File

The ANswer File allows us to execute the Active Directory installation but without the GUI wizard since it provides the answers to the questions that will be presented in GUI. I used the ff answer file, named it rodc-install.txt

[DCINSTALL]
InstallDNS=Yes
ConfirmGc=No
CriticalReplicationOnly=No
DisableCancelForDnsInstall=No
Password=P@ssw0rd
RebootOnCompletion=No
ReplicaDomainDNSName=phiwug.local
ReplicaOrNewDomain=ReadOnlyReplica
SafeModeAdminPassword=P@ssw0rd
SiteName=Default-First-Site-Name
UserDomain=phiwug.local
Username=administrator

Note that for every attempt to use the answer file, the passwords are removed. So if ever there’s an error during the installation, remember to modify the answer file to incorporate the password once again.
Executing DCPROMO.EXE

Finally, I executed the ff in the Server Core

dcpromo /answer:c:\rodc-install.txt

then did the typical reboot after DCPROMO.

Using Active Directory Users and Computers on another DC, we now verify that WS08DC2 is already a Read Only Domain Controller (RODC)

Published Thursday, November 01, 2007 1:03 PM by jpaloma

Filed under: Active Directory, Windows Server 2008

color coding of UTP cable

de leon aldrin — Fri, 29 Feb 2008 02:12:26 +0000

ETHERNET CABLE: COLOR-CODE STANDARDS

T-568A Straight-Through Ethernet Cable

T-568B Straight-Through Ethernet Cable

RJ-45 Crossover Ethernet Cable

Ethernet Cable Instructions:

Pull the cable off the reel to the desired length and cut. If you are pulling cables through holes, its easier to attach the RJ-45 plugs after the cable is pulled. The total length of wire segments between a PC and a hub or between two PC’s cannot exceed 100 Meters (328 feet) for 100BASE-TX and 300 Meters for 10BASE-T.
Start on one end and strip the cable jacket off (about 1″) using a stripper or a knife. Be extra careful not to nick the wires, otherwise you will need to start over.
Spread, untwist the pairs, and arrange the wires in the order of the desired cable end. Flatten the end between your thumb and forefinger. Trim the ends of the wires so they are even with one another, leaving only 1/2″ in wire length. If it is longer than 1/2″ it will be out-of-spec and susceptible to crosstalk. Flatten and insure there are no spaces between wires.
Hold the RJ-45 plug with the clip facing down or away from you. Push the wires firmly into the plug. Inspect each wire is flat even at the front of the plug. Check the order of the wires. Double check again. Check that the jacket is fitted right against the stop of the plug. Carefully hold the wire and firmly crimp the RJ-45 with the crimper.
Check the color orientation, check that the crimped connection is not about to come apart, and check to see if the wires are flat against the front of the plug. If even one of these are incorrect, you will have to start over. Test the Ethernet cable.

Ethernet Cable Tips:

A straight-thru cable has identical ends.
A crossover cable has different ends.
A straight-thru is used as a patch cord in Ethernet connections.
A crossover is used to connect two Ethernet devices without a hub or for connecting two hubs.
A crossover has one end with the Orange set of wires switched with the Green set.
Odd numbered pins are always striped, even numbered pins are always solid colored.
Looking at the RJ-45 with the clip facing away from you, Brown is always on the right, and pin 1 is on the left.
No more than 1/2″ of the Ethernet cable should be untwisted otherwise it will be susceptible to crosstalk.
Do not deform, do not bend, do not stretch, do not staple, do not run parallel with power cables, and do not run Ethernet cables near noise inducing components.

Basic Theory: