Netessentials6e Ch9 130820115425 Phpapp01

7/23/2019 Netessentials6e Ch9 130820115425 Phpapp01

http://slidepdf.com/reader/full/netessentials6e-ch9-130820115425-phpapp01 1/57

Guide to Networking Essentials,

6th Edition

Chapter 9: Server Management and Administration



Copyright © 2012 Cengage Learning. All rights reserved. 2

Objectives

2

• Create and work with ser and grop acconts

• Create and !anage per!issions on storage

vol!es

• "ork with shared #iles and printers• $onitor a syste!%s per#or!ance and reliability

• &escribe #alt tolerant and backp soltions




$anaging 'ser and (rop Acconts

• 'ser acconts have two !ain #nctions) * +rovide a !ethod #or sers to athenticate the!selves

to the network

* +rovide detailed in#or!ation abot a ser

• (rop acconts are sed to organi,e sers so that

assign!ent o# resorce per!issions and rights can

be !anaged !ore easily than working with do,ens

or hndreds o# individal ser acconts * -a!ple) (rop sers by depart!ent within a co!pany. "hen

a shared #older containing doc!ents sed by a certain

depart!ent is created/ the ad!in jst needs to assign

per!issions to the whole grop.





• n a large network with !any servers and hndreds

or thosands o# sers/ a sche!e #or na!ing ser

and grop acconts as well as network devices is

crcial. Consider the #ollowing) * s there a !ini!! and !ai!! n!ber o# characters ser

accont na!es shold have

* hold the serna!e be based on the ser%s real na!e or i#

secrity is i!portant/ shold na!es be !ore cryptic

* o!e Os distingish between ppercase and lowercaseletters. hold serna!es contain both as well as special

characters





• Considerations #or password na!ing conventions)

* $ini!! length

* Co!pleity re3ire!ents) se o# ppercase and lowercase

along with special characters

* 'ser or ad!inistrator created

* +assword change #re3ency

• (rop accont na!es shold re#lect the grop

!e!bership or the resorce to which the grop is

assigned per!issions

• Once na!ing conventions have been established/

stick to the!




"orking with Acconts in "indows

• "hen "indows is #irst installed/ two sers are created

* Ad!inistrator and (est 4sally disabled5

• 6he Ad!inistrator accont has #ll access to a

co!pter • "indows do!ain sers are created in Active

&irectory 'sers and Co!pters

• 7o can create #olders #or organi,ing sers and

grops 4called organi,ation nits or O's5




Active &irectory 'sers and Co!pters






6o create a new ser)

Open the #older where yo want

to create the ser. 8ight9click the

#older/ point to :ew/ and click

'ser. 6he :ew Object * 'ser

&ialog bo opens

;;-verything yo create in Active

&irectory is considered an object.





etting the password and additional accont options

Note – After a user account is created, you can double click it to

open its properties




Creating (rop Acconts

in "indows &o!ains

• (rop scope has three options)< &o!ain local) Can be sed to assign per!issions to resorces only in

the do!ain in which the grop is created

< (lobal) 6he de#alt option= contains sers #ro! the do!ain in which

they are created bt can be assigned per!issions to resorces inother do!ains

< 'niversal) 'sed in !ltido!ain networks= sers #ro! any do!ain can

be !e!bers and be assigned per!ission to resorces in any do!ain

• (rop type has two options)

• ecrity 4de#alt5• &istribtion) 'sed only #or tasks sch as sending all grop !e!bers

an e9!ail when yo rn an Active &irectory9integrated e9!ail

progra!/ sch as $icroso#t -change



Creating (rop Acconts

in "indows &o!ains

Creating a new grop in Active &irectory





"indows &e#alt (rops

• "indows de#ines a n!ber o# de#alt grops that have

pre9assigned rights that apply to all grop !e!bers

• 6he #ollowing table lists those grops)




pecial dentity (rops

• pecial identity grops don%t appear as objects in Active

&irectory 'sers and Co!pters/ bt they can be

assigned per!issions and rights

• $e!bership is controlled by "indows




'ser +ro#iles

• 'ser pro#ile * collection o# ser%s personal #iles andsettings that de#ine his or her working environ!ent

* Created when a ser logs on #or the #irst ti!e and is stored in

a #older that sally has the sa!e na!e as the ser%s logon

na!e

• A ser pro#ile stored on the sa!e syste! where the

ser logs on is called a local profile

* "hen sers log o##/ their pro#ile settings are saved in their local

pro#iles so that the net ti!e they log on/ all their settings are

preserved

• # ad!inistrators want to !ake a ser%s pro#ile available

on any co!pter they log on to/ they can set p

roa!ing pro#iles




'ser +ro#iles

• A roaming profile #ollows the ser no !atter which

co!pter he or she logs on to

* tored on a network share

* Any changes the ser !akes to the pro#ile are replicated

#ro! the locally >cached copy? to the pro#ile on the network

share when the ser logs o##

* 8oa!ing pro#iles are rarely sed in workgrop networks bt

are #re3ently sed by Active &irectory ad!inistrators

• Mandatory profiles discard a ser%s pro#ilechanges at log o## so the pro#ile is always the

sa!e




"orking with Acconts in Lin

• 'ser and grop acconts in Lin are sed #or the

sa!e prpose as "indows) * 'ser athentication and athori,ation

• Lin also has a de#alt ser who has #ll control overthe syste! * na!ed root

• $ost Lin ad!inistration takes place at the

co!!and line– Adduser

newuser 4replace newser with the logon na!e #or theser accont yo%re creating5

* 7o will then be pro!pted to create a new password and enter

the ser%s #ll na!e and other in#or!ation




"orking with Acconts in Lin

• All sers !st belong to at least one grop in

Lin * "hen a new ser is created/ a new grop with the sa!e

na!e is also created and the ser is !ade a !e!ber • 'se the addgroup co!!and to create grops

• 6o add sers to a grop)– Adduser username groupname

• $any ad!inistrators pre#er the co!!and9line

!ethod #or creating sers becase they can

i!port ser in#or!ation #ro! a tet #ile




torage and @ile yste! $anage!ent

• :etwork ad!inistrators need to) * $ake sre enogh storage space is available to store #iles

needed

* $anage who has access to #ile storage

* +revent sers #ro! storing inappropriate types o# data on

co!pany servers

• Locally attached storage * a device/ sch as a hard

disk/ that is connected to a storage controller on

the server




ol!es and +artitions

• A volume is part or all o# the space on one or !oredisks that contains 4or is ready to contain5 a #ile syste! * n "indows/ vol!es are sally assigned a drive letter

* n Lin/ vol!es are !onted in the #ile syste! and accessed as

thogh they were a #older

• 6he ter! partition is so!eti!es sed interchangeably

with vol!e bt they don%t always describe the sa!e

thing * n "indows/ a basic disk can be divided into one to #or partitions

* A primary partition can be #or!atted with a #ile syste! and assigneda drive letter 4considered a vol!e5

* An extended partition can%t be #or!atted with a #ile syste! or

assigned a drive letter. t is divided into one or !ore logical drives that

can be #or!atted and assigned a drive letter 4considered a vol!e5




ol!es and +artitions

• Only a pri!ary partition can be the activepartition 4partition that can hold boot #iles5

• 6he active pri!ary partition storing the

"indows boot loader is re#erred to as thesystem partition

• 6he partition or logical drive holding the"indows O #iles is called the boot partition

• A dyna!ic disk can be divided into one or!ore vol!es= the ter! partition is not sedin this contet



6he @A6 @ile yste!

• 6he @ile Allocation 6able 4@A65 #ile syste! has two

variations)

* @A61B is sally re#erred to as @A6 and has been arond since

the !id91D0s and is spported by !ost Os

* @A6E2 arrived with the release o# "indows F O82 in 1B

• @A61B is li!ited to 2 (G partitions in !ost cases

• @A6E2 allows partitions p to 2 6G bt in "indows

2000 and later/ $icroso#t li!its the! to E2 (G

becase the #ile syste! beco!es noticeably slowerwith larger partition si,es




6he :6@ @ile yste!

• :6@ is a #ll9#eatred #ile syste! that $icroso#t

introdced in 1E with "indows :6

• @eatres available in :6@ that aren%t in @A6)

* &isk 3otas) Li!it a!ont o# data sers% #iles can occpy

* ol!e !ont points) :o need #or a drive letter to access the

vol!e

* hadow copies) Allow sers to restore older #ile versions or

#iles that were accidentally deleted

* @ile co!pression) @iles can be stored in a co!pressed #or!at

* -ncrypting @ile yste!) $akes encrypted #iles inaccessible to

everyone ecept the ser who encrypted the #ile/ inclding

sers who have been granted per!ission to the #ile




:6@ +er!issions

• 6wo !odes #or accessing #iles on a networked

co!pter) * :etwork 4so!eti!es called re!ote5

* nteractive 4so!eti!es called local5

• hare per!issions are applied when a ser

atte!pts network access to shared #iles

• :6@ per!issions always apply/ whether #ile

access is atte!pted interactively or re!otely

throgh a share

• +er!issions can be viewed as a gatekeeper to

control who has access to #older and #iles




:6@ +er!issions

• 6he general secrity rle #or assigning per!issions

is to give sers the least access necessary #or their

job

• :6@ per!issions can be con#igred on #olders

and #iles

• Gy de#alt/ when per!issions are con#igred on a

#older/ sb#olders and #iles in that #older inherit the

per!issions bt can be changed by the ad!in• 6o view or edit per!issions on an :6@ #older/

access the ecrity tab o# the +roperties dialog bo




:6@ +er!issions

• :6@ standard per!issions #or #olders and #iles) * ead: 'sers can view #ile contents/ copy #iles/ open #olders and

sb#olders/ and view #ile attribtes and per!issions.

* ead ! e"ecute: (rants the sa!e per!issions as 8ead and

incldes the ability to rn applications or scripts. * #ist folder contents: 6his per!ission applies only to #olders and

becase it doesn%t apply to #iles/ 8ead H eecte !st also be

set on the #older to allow sers to open #iles in the #older.




:6@ +er!issions 4cont%d5

* $rite: 'sers can create and !odi#y #iles and read #ile attribtesand per!issions. Iowever/ this per!ission doesn%t allow sers

to read or delete #iles. n !ost cases/ the 8ead or 8ead H

eecte per!ission shold be given with the "rite per!ission.

* Modify: 'sers can read/ !odi#y/ delete/ and create #iles. 'sers

can%t change per!issions or take ownership. electing thisper!ission ato!atically selects 8ead H eecte/ List #older

contents/ 8ead/ and "rite.

* %ull control: 'sers can per#or! all actions given by the $odi#y

per!ission with the addition o# changing per!issions and

taking ownership.





:6@ +er!issions



6he Lin @ile yste!

• Lin spports !any #iles syste!s * -tE/ -tJ/ 8eiser@/ and K@

* -tE and -tJ are the de#alt #ile syste! #or !ost Lin

distribtions

• 6here are only three per!issions * read/ write/ andeecte

• 6here are only three ser types that can be

assigned one or !ore per!issions) * Owner) Owner o# the #ile or #older

* (rop) 6he pri!ary grop to which the owner belongs

* Other) All other sers




6he Lin @ile yste!

+er!issions #or a #ile na!ed >new#ile? in Lin




"orking with hared @iles and +rinters

• 6he do!inant #ile9sharing protocol is erver

$essage Glock 4$G5 * 6his is the native "indows #ile9sharing protocol/ bt is

spported by Lin and $AC O

* :etwork @ile yste! 4:@5 is the native Lin #ile9sharingprotocol and "indows can spport :@ with the right so#tware

installed

• +rinter sharing also ses $G *

6he native Lin printer9sharing protocol is line printerdae!online printer re!ote 4L+&L+85




haring @iles and +rinters in "indows

• n "indows/ sers are sbject to both share and :6@per!issions when accessing #iles over the network

• hare per!issions are so!ewhat si!pler than :6@

per!issions. 6here are only E)

* ead: 'sers can view contents o# #iles/ copy #iles/ rnapplications and script #iles/ open #olders and sb#olders/ and

view #ile attribtes

* Change: All per!issions granted by 8ead/ pls create #iles and

#olders/ change contents and attribtes o# #iles and #olders/ and

delete #iles and #olders * %ull Control: All per!issions granted by Change/ pls change

#ile and #older per!issions as well as take ownership o# #iles

and #olders





hare +er!issions





• haring #iles isn%t di##iclt in a "indows

environ!ent. 6here are two !ethods) * %ile Sharing $i&ard: 6o start this wi,ard/ right9click a #older and

click hare 4or >hare with? in "indows M5. 6he @ile haring

"i,ard 4see net slide5 si!pli#ies sharing #or novices by singeasier ter!s #or per!issions and by setting :6@ per!issions

to acco!!odate the selected share per!issions.

* Advanced Sharing dialog bo": 6o open this dialog bo/ click

Advanced haring in the haring tab o# a #older%s +roperties

dialog bo. 6here are 3ite a #ew options in this dialog bo.





6he @ile haring "i,ard





6he Advanced haring dialog bo




haring +rinters in "indows

• Co!ponents o# a shared printer) * +rint deviceN6wo basic types o# print device)

• Local print device) Connected to an O port on a co!pter

• :etwork print device) A printer attached to and shared by another

co!pter

* +rinter) 6he icon in the +rinters #older that represents print

devices

* +rint server) A "indows co!pter that%s sharing a printer

* +rint 3ee) A storage location #or print jobs awaiting printing





• Gene#its o# sing a shared printer) * Access control) Control who can print to a printer and who can

!anage print jobs

* +rinter pooling) A single printer represents two or !ore print

devices 4server sends the job to the least bsy printer5 * +rinter priority) 6wo or !ore printers can represent a single print

device 4printers can be assigned di##erent priorities so that a job

sent to a higher priority will print #irst5

* +rint job !anage!ent) Ad!inistrators can pase/ cancel/

restart/ reorder/ and change pre#erences on print jobs waiting inthe 3ee

* Availability control) Ad!inistrators can con#igre print servers so

that print jobs are accepted only dring certain hors o# the day





6he haring tab #or a print server




haring @iles and +rinters in Lin

• Lin spports "indows #ile sharing by sing $Gin a so#tware package called a!ba

• +rinter sharing in Lin is straight#orward a#ter

a!ba has been installed

• "hen yo create a new printer in Lin/ it is shared

ato!atically




$onitoring yste! 8eliability and

+er#or!ance• "indows erver 200D provides tools to !anage

and !onitor server operation) * 6ask $anager

* -vent iewer

* +er#or!ance $onitor

* "indows yste! 8esorce $anager

• "e have already covered 6ask $anager so this

section #ocses on the other three




-vent iewer

• Allows ad!inistrators to view event log entries.-vents are categori,ed by these levels) * n#or!ation) 6hese events indicate nor!al operations/ sch as

service stops and starts

* "arning) +rovide in#or!ation abot events that shold bebroght to the ad!inistrator%s attention

* -rror) -rror events are o#ten generated when a process or

service is nable to per#or! a task or stops nepectedly

• 7o can ea!ine several log #iles in -vent iewer/

inclding Application/ ecrity/ etp/ and yste!

logs




-vent iewer




+er#or!ance $onitor

• Consists o# a collection o# tools #or pinpointing whichresorces are being overloaded and how they%re being

overloaded

• Contains the #ollowing #olders)

* $onitoring 6ools) Contains the +er#or!ance $onitor tool * &ata Collector ets) Contains ser9 and syste!9de#ined te!plates

with sets o# data points called data collectors

* 8eports) Contains syste!9 and ser9de#ined per#or!ance and

diagnostic reports

• +er#or!ance $onitor ses conters to track theper#or!ance o# a variety o# objects

* A conter is a vale representing so!e aspect o# an object%s

per#or!ance




+er#or!ance $onitor

• n order to track an object%s per#or!ance yo needto create a baseline * +er#or!ance baseline is a record o# per#or!ance data

gathered when a syste! is per#or!ing well nder nor!al

operating conditions * (enerally/ baseline data is collected shortly a#ter a syste! is

pt into service and then again each ti!e changes are !ade

• 6o create a baseline o# per#or!ance data/ yo

create a data collector set that speci#ies theper#or!ance conters yo want to collect/ how

o#ten to collect the!/ and the ti!e period




+er#or!ance $onitor




"indows yste! 8esorce $anager

• "8$ is a "indows erver 200D #eatre installedin erver $anager that helps yo !anage

processor and !e!ory resorces

• "8$ incldes the #ollowing #eatres) * +recon#igred and csto! policies that allocate resorces on a

per9process or per9ser basis

* +olicies based on calendar rles to allow #ine9tning syste!

resorce se according to ti!e o# day

* Ato!atic policy application based on server events orchanges in !e!ory or C+' resorces

* 8esorce !onitoring data stored in a "indows internal

database or L database




Gackp and @alt 6olerance

• 8eglar backps provide a sa#ety net to restore asyste! to working order in the event o# a disk

#ailre or #ile corrption

• A poplar type o# backp is an i!age backp/ in

which a copy o# an entire disk is created that can

be restored withot reinstalling the O * Can%t restore separate #iles so i!age backps are sally done

along with traditional #ile backp

• @alt tolerance provides !ethods #or a syste! tocontine rnning a#ter a syste! #ailre has

occrred




"indows Gackp

• "indows erver Gackp co!es with "indowserver 200D and has the #ollowing #eatres) * Gackps can be rn !anally or schedled to rn ato!atically

* 7o can create a syste! recovery backp that ato!atically

incldes all vol!es containing critical syste! data * $anal backps can be stored on network drives/ #ied and

re!ovable basic disk vol!es and C& or &&

* Gackps can be stored on a hard disk dedicated #or backps/ a

non9dedicated vol!e/ or a shared network #older

* 7o can se a ol!e hadow Copy ervice 45 backp/which !eans even open #iles can be backed p

* Gy de#alt/ "indows erver Gackp is con#igred to back p the

local co!pter/ bt yo can also back p #iles re!otely




"indows Gackp

• "indows erver Gackp is a satis#actory tool bt ithas li!itations * An enterprise9class backp progra!/ sch as y!antec

:etGackp and Co!!alt (alay Gackp and 8ecovery/

o##ers advanced disaster recovery soltions• "indows M backp is called Gackp and 8estore

and has straight#orward #eatres * 7o can se it to create a syste! i!age/ create a syste!

repair disc/ or back p all #iles or separate #iles and #olders




+rotecting &ata with @alt 6olerance

• 8ecall that #alt tolerance provides !ethods #or asyste! to contine rnning a#ter a syste! #ailre

has occrred

• 6hree #or!s o# #alt tolerance that are co!!on on

networks and servers) * 8edndant power spply and ninterrptible power spply

* 8edndant disk syste!s

* erver clstering




8edndant +ower

• A co!pter re3ires a constant/ clean sorce o# poweror else it !ay reboot casing lost work or da!age to

the #ile syste!

• A redundant power supply is a second power spply

nit in the co!pter case/ so i# one power spply #ails/the other nit takes on the #ll load

• An ninterrptible power spply 4'+5 is a device with

a bilt9in battery/ power conditioning/ and srge

protection * # power #ails/ the '+ battery provides enogh power to keep

yor co!pter rnning ntil power is restored or yo can sht

down the co!pter sa#ely




8edndant +ower

• '+s co!e in two !ain categories) online and standby

• A standby '+ spplies power to plgged9in devices by

passing power #ro! the wall otlet directly to the device

* n a power otage/ the '+ detects the power #ailre and

switches to battery power * # switchover doesn%t happen #ast enogh/ the plgged9in

devices !ight lose power long enogh to reboot

• An online '+ spplies power continosly to plgged9

in devices throgh the '+ battery/ which is recharged

continally by the wall otlet power




8edndant &isk yste!s

• 8edndant disk syste!s are based on the redundantarray of independent disks 48A&5 technology

• 8A& 1) &isk $irroring * re3ires two disks * "hen data is written to one disk/ it%s also written to the second disk

* # either disk #ails/ the syste! can contine operating becase bothdisks have the sa!e data

• 8A& F) &isk triping with +arity * re3ires a !ini!!

o# three disks bt is !ore space e##icient than 8A& 1 * "orks by spreading data across !ltiple disks and sing one disk in

each write operation to store parity in#or!ation

* +arity in#o is generated by a calclation on data being written/ so i# one

o# the disks #ails/ it can be sed to re9create lost data #ro! the #ailed

disk




erver Clstering

• A server clster is !ade p o# two or !ore serversthat are interconnected and appear as a single nit

• 6wo co!!on types o# clstering are #ailover and

load9balancing * A #ailover clster involves two or !ore servers sharing a

high9speed link sed to synchroni,e data. One server is the

pri!ary and others are standby. n the event the pri!ary #ails/ a

standby server takes its place.

* A load9balancing clster consists o# two or !ore servers that

appear as a single nit to sers. All servers in the clster

operate and share the load.





Chapter !!ary

• 'ser acconts are the link between real people and

network resorces

• 'ser acconts and passwords shold have conventions

#or their creation

• (rop acconts are sed to organi,e sers so that

assign!ent o# resorce per!issions and rights can be

!anaged !ore easily than working with do,ens or

hndreds o# individal ser acconts

• A ser pro#ile is a collection o# a ser%s personal #iles

and settings that de#ine his or her working environ!ent




Chapter !!ary

• Locally attached storage is a device/ sch as a hard disk/

connected to a storage controller on the server. torage is

divided into vol!es or partitions

• 6he Lin #ile syste!s inclde -tE/ -tJ/ 8esier@/ and

K@• $G is the "indows de#alt #ile9sharing protocol while :@

is the native Lin #ile9sharing protocol

• "indows erver 200D provides tools to !anage and !onitor

server operation and resorces/ inclding the #ollowing) 6ask$anager/ -vent iewer/ +er#or!ance $onitor/ "indows

yste! 8esorce $anager



Chapter !!ary

• 8eglar backps provide a sa#ety net to restore asyste! to working order in the event o# a disk

#ailre or #ile corrption. @alt tolerance provides

!ethods #or a syste! to contine rnning a#ter a

syste! #ailre has occrred

Documents

Netessentials6e Ch9 130820115425 Phpapp01