networking applications chapter 2 bb posting
TRANSCRIPT
-
8/7/2019 Networking Applications Chapter 2 BB posting
1/23
11
ADMINISTERING
MICROSOFTWINDOWS SERVER
2003
ADMINISTERING
MICROSOFTWINDOWS SERVER
2003
Chapter 2Chapter 2
-
8/7/2019 Networking Applications Chapter 2 BB posting
2/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 22
CHAPTER OVERVIEWCHAPTER OVERVIEW
Manage a Windows Server 2003 system usingMMC
Access a remote computer using an MMCconsole
Configure a server to enable Remote Desktop forAdministration
Enable a computer to accept requests forRemote Assistance
Manage a Windows Server 2003 system usingMMC
Access a remote computer using an MMCconsole
Configure a server to enable Remote Desktop forAdministration
Enable a computer to accept requests forRemote Assistance
-
8/7/2019 Networking Applications Chapter 2 BB posting
3/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 33
USING THE MICROSOFT
MANAGEMENT CONSOLE
USING THE MICROSOFT
MANAGEMENT CONSOLE
SCOPE PANE DETAIL PANE
-
8/7/2019 Networking Applications Chapter 2 BB posting
4/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 44
Microsoft Management Console (MMC)Microsoft Management Console (MMC) It is the primary Windows Server 2003 system
administration tool
Makes it possible to consolidate your mostcommonly used tools into a single interface anduse them to manage Windows computersanywhere on the network or locally.
It is a shell application in which you can combineone or more application modules (called snap-ins)that are suited for a specific purpose.
Like creating a shortcut.sortof!
It is the primary Windows Server 2003 systemadministration tool
Makes it possible to consolidate your mostcommonly used tools into a single interface anduse them to manage Windows computersanywhere on the network or locally.
It is a shell application in which you can combineone or more application modules (called snap-ins)that are suited for a specific purpose.
Like creating a shortcut.sortof!
-
8/7/2019 Networking Applications Chapter 2 BB posting
5/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 55
USING THE MMC INTERFACEUSING THE MMC INTERFACE
SomeMMC
consolesenableyou toopenmultiple
windows.
-
8/7/2019 Networking Applications Chapter 2 BB posting
6/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 66
USING MMC MENUSUSING MMC MENUS
Action menu ithe primarymenu forcontext-specific
functions in anMMC console.This menuchanges toinclude
commandsspecific to theelement you arecreating in theMMC.
-
8/7/2019 Networking Applications Chapter 2 BB posting
7/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 77
CREATING CUSTOMIZED MMC
CONSOLES
CREATING CUSTOMIZED MMC
CONSOLES
Combines one or more snap-ins or parts ofsnap-ins in a single console
Eliminates the need to switch between differentprograms or individual consoles
It is the snap-ins within the MMC shell, not theMMC itself, that provide the administrative tools
you use.
Combines one or more snap-ins or parts ofsnap-ins in a single console
Eliminates the need to switch between differentprograms or individual consoles
It is the snap-ins within the MMC shell, not theMMC itself, that provide the administrative tools
you use.
-
8/7/2019 Networking Applications Chapter 2 BB posting
8/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 88
Setting Console OptionsSetting Console Options
You can set options that determine what changes otherusers can make to the consoles configuration:
This can be done in File/Option on the menu bar of the MMC By default, all new consoles you create are configured to use
Author mode, which provides full access to all console functions.
Other modes:
User Mode: Full Access
User Mode: Limited Access, Multiple Windows
User Mode: Limited Access, Single Window
You can set options that determine what changes otherusers can make to the consoles configuration:
This can be done in File/Option on the menu bar of the MMC By default, all new consoles you create are configured to use
Author mode, which provides full access to all console functions.
Other modes:
User Mode: Full Access
User Mode: Limited Access, Multiple Windows
User Mode: Limited Access, Single Window
-
8/7/2019 Networking Applications Chapter 2 BB posting
9/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 99
Saving MMC ConsolesSaving MMC Consoles
Once you have configured a customconsole, you will want to save it so you can
access it later. MMC console files have an .msc extension.
By default, consoles are saved in the
Administrative Tools folder in the usersprofiles.
Once you have configured a customconsole, you will want to save it so you can
access it later. MMC console files have an .msc extension.
By default, consoles are saved in the
Administrative Tools folder in the usersprofiles.
-
8/7/2019 Networking Applications Chapter 2 BB posting
10/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1010
Remote Desktop for AdministrationRemote Desktop for Administration
A client/server application that displaysthe local console of a remote server in
a window on your desktop, enablingyou to control the keyboard and mousefunctions as if you were logged on tothat server locally.
A client/server application that displaysthe local console of a remote server in
a window on your desktop, enablingyou to control the keyboard and mousefunctions as if you were logged on tothat server locally.
-
8/7/2019 Networking Applications Chapter 2 BB posting
11/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1111
CONNECTING TO REMOTE COMPUTERSCONNECTING TO REMOTE COMPUTERS
Redirecting an MMC snap-in
Can be used to connect to and manage remote
computers
Creating a remote console
Redirecting an MMC snap-in
Can be used to connect to and manage remote
computers
Creating a remote console
-
8/7/2019 Networking Applications Chapter 2 BB posting
12/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1212
MANAGING SERVERS WITH REMOTE
DESKTOP FOR ADMINISTRATION
MANAGING SERVERS WITH REMOTE
DESKTOP FOR ADMINISTRATION
Uses Terminal Services
Terminal Services Configuration (lab manual ex 2-5)
Configure parameters as to how you want the remoteuser to access the server
Terminal Services Manager (lab manual ex 2-5)
to manage the remote connection to the server
Allows two concurrent Remote Desktopconnections without additional licensing
Enables server to be managed as if you are
there
Uses Terminal Services
Terminal Services Configuration (lab manual ex 2-5)
Configure parameters as to how you want the remoteuser to access the server
Terminal Services Manager (lab manual ex 2-5)
to manage the remote connection to the server
Allows two concurrent Remote Desktopconnections without additional licensing
Enables server to be managed as if you are
there
-
8/7/2019 Networking Applications Chapter 2 BB posting
13/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1313
ENABLING AND CONFIGURING THE
REMOTE DESKTOP SERVER
ENABLING AND CONFIGURING THE
REMOTE DESKTOP SERVER
By default, members of the
local Administrators groupare granted remote accesspermission. To allow otherusers to access the serverusing Remote Desktop, you
must click Select RemoteUsers and add them to thelist of remote desktop users.
-
8/7/2019 Networking Applications Chapter 2 BB posting
14/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1414
CONFIGURING REMOTE DESKTOP
CONNECTION
CONFIGURING REMOTE DESKTOP
CONNECTION
Use this on the client side to connect to the server. This option is
available in Windows Server 2003 and Windows XP.
This can befound in theCommunicationOption in the
Accessorieswindow.
-
8/7/2019 Networking Applications Chapter 2 BB posting
15/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1515
CONFIGURING REMOTE DESKTOP
CONNECTION
CONFIGURING REMOTE DESKTOP
CONNECTION
Click theOptions box
and you canconfigure theclient.
-
8/7/2019 Networking Applications Chapter 2 BB posting
16/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1616
INSTALLING AND CONFIGURING
REMOTE DESKTOP CONNECTION
INSTALLING AND CONFIGURING
REMOTE DESKTOP CONNECTION
The Windows Server 2003 distribution CD
The Systemroot\System32\Clients\Tsclient\Win32folder
This client program is installed by default with theWindows Server 2003 and Windows XP operatingsystems.
The Windows Server 2003 distribution CD
The Systemroot\System32\Clients\Tsclient\Win32folder
This client program is installed by default with theWindows Server 2003 and Windows XP operatingsystems.
Remote Desktop Connection client software can beinstalled from the following locations:Remote Desktop Connection client software can beinstalled from the following locations:
-
8/7/2019 Networking Applications Chapter 2 BB posting
17/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1717
TERMINAL SERVICES
TROUBLESHOOTING
TERMINAL SERVICES
TROUBLESHOOTING
By default, Terminal Services uses TCP andUDP port number 3389 for all of its client/servercommunications. If either the client or the serverhas been configure to use a different portnumber (or is being blocked by a firewall), aTerminal Services client/server connection willnot be possible.
Users must belong to the Administrators orRemote Desktop Users group to successfullyconnect to the server using Remote Desktop for
Administration
By default, Terminal Services uses TCP andUDP port number 3389 for all of its client/servercommunications. If either the client or the serverhas been configure to use a different portnumber (or is being blocked by a firewall), aTerminal Services client/server connection willnot be possible.
Users must belong to the Administrators orRemote Desktop Users group to successfullyconnect to the server using Remote Desktop for
Administration
-
8/7/2019 Networking Applications Chapter 2 BB posting
18/23
-
8/7/2019 Networking Applications Chapter 2 BB posting
19/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1919
ENABLING REMOTE ASSISTANCEENABLING REMOTE ASSISTANCE
Using Control Panel
Using Group Policy
Using Control Panel
Using Group Policy
Remote Assistance must be enabled before itcan be used. It is disabled by default.
-
8/7/2019 Networking Applications Chapter 2 BB posting
20/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 2020
ENABLING REMOTE ASSISTANCEENABLING REMOTE ASSISTANCE
Open theSystemPropertiesfrom ControlPanel andselect the
Remote tab.
-
8/7/2019 Networking Applications Chapter 2 BB posting
21/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 2121
CREATING AN INVITATIONCREATING AN INVITATION
Select Help andSupport from theStart menu to open
the Help and SupportCenter screen andthen click the Remote
Assistance hyperlink.
-
8/7/2019 Networking Applications Chapter 2 BB posting
22/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 2222
SECURING REMOTE ASSISTANCESECURING REMOTE ASSISTANCE
Client can break a Remote Assistance sessionby pressing Esc.
The user must be present to accept a RemoteAssistance session.
Passwords for invitations should becommunicated by a different means than theinvitation itself.
Invitations should be issued for as short a period
of time as possible.
Remote Assistance uses TCP port number 3389for all its network communications. May need toblock this port to prevent users outside the
network from taking control of computers thatrequest remote assistance.
Client can break a Remote Assistance sessionby pressing Esc.
The user must be present to accept a RemoteAssistance session.
Passwords for invitations should becommunicated by a different means than theinvitation itself.
Invitations should be issued for as short a period
of time as possible.
Remote Assistance uses TCP port number 3389for all its network communications. May need toblock this port to prevent users outside the
network from taking control of computers thatrequest remote assistance.
-
8/7/2019 Networking Applications Chapter 2 BB posting
23/23
Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 2003 2323
SUMMARYSUMMARY
MMC is the primary system administration tool forWindows Server 2003.
MMC can be used to manage remote systems by theredirection of a snap-in.
Remote Desktop for Administration allows for the sameadministration of a server from a remote location as if theadministrator were logged on to the local console
interactively. Remote Assistance is a tool that enables users to
request assistance from an expert, who can then connectto the users computer and either view the users actionsor take over operation of the system.
MMC is the primary system administration tool forWindows Server 2003.
MMC can be used to manage remote systems by theredirection of a snap-in.
Remote Desktop for Administration allows for the sameadministration of a server from a remote location as if theadministrator were logged on to the local console
interactively. Remote Assistance is a tool that enables users to
request assistance from an expert, who can then connectto the users computer and either view the users actionsor take over operation of the system.