70 290 MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 10 Server Administration Network Administration Procedures Administrator will normally be responsible for more than one server Administrators can manage remote servers with Microsoft Management Console MMC Secondary logon is another useful tool for administrators Sever desktop access through Remote Desktop A subset of Terminal Services Delegation of responsibilities Server Software critical updates 2 Windows Server 2003 Management Tools Server shutdown and restart has new features in Windows Server 2003 Shutdown Event Tracker logs these events Can include comments on why events occurred Logged as event 1074 in Event Viewer system log 3 The Microsoft Management Console MMC provides a unified framework for hosting multiple management tools snap ins Can add and remove management tools as necessary and save custom tools for use by authorized administrators Console saved as Management Saved Console MSC file with msc extension Can focus snap ins to point to remote clients or servers 4 The MMC Window By itself the MMC does nothing Two Views Console Task Pad 5 Introduction to Snap Ins 6 Snap Ins Stand Alone Usually referred to simply as snap ins Each provides one function or a related set of functions Extension Snap Ins Usually referred to as extensions Provides additional administrative functionality to another snapin Designed to work with one or more stand alone snap ins Some can act as stand alone snap ins or as extensions 7 Console Options Author mode User mode Full Access Limited Access Multiple Windows No access to console tree Can open new windows Limited Access Single Window Taskpad view 8 MMC Options 9 Create a Task Pad View 10 Add a New Task 11 Locked up Console 12 Secondary Logon Recommendation is for network administrators to have two logon accounts One with administrative rights One with normal user rights Secondary logon feature allows you to log on with user account open administrative tools as an administrator 13 Run As 14 Network Troubleshooting Processes Need a systematic approach to troubleshooting Recommended steps Define the problem Gather detailed information about what has changed Devise a plan to solve the problem Implement the plan and observe the results Document all changes and results 15 Define the Problem Indication of a problem is often A general complaint from a user An error message Ask questions of user Try to recreate the problem in a test To decode error messages use net utility At command prompt type NET HELPMSG number 16 Gather Detailed Information About What Has Changed Factors to consider include Any new components installed recently Who has access to computer Have they made any changes Any software or service patches installed recently 17 Devise a Plan to Solve the Problem Important considerations when devising a plan Interruptions to network or its components e g restarts Possible changes to network security policy Need to document all changes and troubleshooting steps Be sure to include a rollback strategy in case plan doesn t work 18 Implement the Plan Observe Results Document All Changes and Results Notify users if network availability will be affected Do not make too many configuration changes at one time If plan doesn t work document what was done and start again Document all troubleshooting steps results and configuration changes 19 Configuring Terminal Services and Remote Desktop for Administration Two services that provide remote access to a server desktop Terminal services allows users to connect in order to run applications Remote Desktop for Administration allows an administrator to connect in order to run administrative services 20 Enabling Remote Desktop for Administration Installed automatically as a part of Windows Server 2003 Disabled by default Once enabled only Administrators group can connect by default Additional users can be granted access 21 Installing Terminal Services Installed from Add Remove Windows Components of Add or Remove Programs in Control Panel To set up a Terminal server one Windows Server 2003 server in network must be configured as a Terminal Services licensing server 22 Managing Terminal Services Three primary tools for Terminal Services administration Terminal Services Manager Terminal Services Configuration Terminal Services Licensing 23 Configuring Remote Connection Settings Primary tool is Terminal Services Configuration Settings related to connection attempts Settings related to permissions of user or group accounts Configured from properties of a Terminal Server connection object 1 object for multiple user connections Settings include Authentication none or standard Windows Encryption client compatible or high 24 Terminal Services Manager 25 Terminal Services Manager 26 Terminal Services Configuration 27 Configuring Remote Connection Settings continued 28 Terminal Services Client Software Terminal Server folder containing client software packages Systemroot system32 clients tsclient win32 Contains files to install Remote Desktop Connection Provided as both MSI file and Win32 executable Share folder and initiate installation process either manually or through Group Policy deployment Pre installed on Windows Server 2003 and Windows XP 29 Installing Applications Applications must be installed in a mode for multiple users compatible with Terminal Server install mode Use Add or Remove Programs applet in Control Panel after Terminal Server is installed Can also place Windows Server 2003 in install mode from command line Change user install to begin Change user execute when finished May need to reinstall some applications 30 Configuring Terminal Services User Properties Terminal Server adds four tabs to properties of user accounts Terminal Services Profile user can configure a special connection profile and home directory Remote control configures remote control properties for a user account Sessions configures a maximum session time and disconnect options Environment configures a program to run automatically when user connects to terminal server 31 MMC Documentation Step by Step Guide to Setting up MMC http www microsoft com technet prodtechnol windows2000serv howto mmcsteps mspx Using the MMC http www microsoft com resources documentation windows xp all proddocs en us snap start mmc mspx Author an MMC 32 http www microsoft com windows2000 en advanced help default asp url windows2000 en advanced help mmc author tree htm