Module 1: Introduction to Administering Accounts and Resources

1. Module 1: Introduction to Administering Accounts and Resources

2. Overview • Multimedia: Introduction to Managing a Microsoft Windows Server 2003 Environment • The Windows Server 2003 Environment • Logging On to Windows Server 2003 • Using the Run As Feature for Administration • Installing and Configuring Administrative Tools • Creating an Organizational Unit

3. Multimedia: Introduction to Managing a Microsoft Windows Server 2003 Environment This presentation describes the tasks involved in administering accounts and resources and defines the concepts of Active Directory

4. Lesson: The Windows Server 2003 Environment • Computer Roles • The Windows Server 2003 Family • What Is a Directory Service? • Active Directory Terms • Classroom Setup Review

5. Computer Roles Domain Controller DNS Server Application Server File Server Print Server Terminal Server

6. The Windows Server 2003 Family

7. Identifies resources Provides a consistent way to: Name Describe Locate Access Manage Secure What Is a Directory Service? Active Directory Benefits • DNS integration • Scalability • Centralized management • Delegated administration

8. Active Directory Terms Forest Domain nwtrader.msft Contoso.msft Tree au. nwtrader.msft OUs in a domain Sales.Contoso.msft brisbane.au. nwtrader.msft

9. Classroom Setup Review • The virtual environment is configured as one Windows Server 2003 domain: Contoso.msft • Den-DC1 is the domain controller • Den-SRV1 is a member server and is used as a remote computer for student labs • Den-CL1 is a workstation running Windows XP Professional, Service Pack 2 • Server computers are running Windows Server 2003, Enterprise Edition, Service Pack 1

10. Lesson: Logging On to Windows Server 2003 • Multimedia: Logon and Authentication • Logon Dialog Box Options • What Are User Principal Names? • Practice: Logging On to Windows Server 2003

11. Multimedia: Logon and Authentication • This activity presents information about: • Local logon process • Domain logon process • Secondary logon process • Smart card logon process • Important points to look for: • Difference between local and domain authentication • How to perform a secondary logon • Contents of an access token

12. Logon Dialog Box Options By default, Windows Server 2003 attempts to log the user on to the domain that the computer is a member of Select the domain where the user account is located

13. What Are User Principal Names? • Provides an alternative logon method • Is unique within the forest Example: don@contoso.msft

14. Practice: Logging on to Windows Server 2003 In this practice, you will: • Log on to your workstation by using a local account • Attempt to access a network share by using a local account • Log on to your workstation by using a domain account • Attempt to access a network share by using a domain account

15. Lesson: Using the Run As Feature for Administration • What Is the Run As Feature? • Using the Run As Feature

16. What Is the Run As Feature? • Allows a user to run specific tools and programs at any workstation with different permissions than the user's current logon provides • Can be used in troubleshooting scenarios to perform administrative tasks at the client’s workstation without logging off the current user

17. Using the Run As Feature • The Run as feature can be invoked from a shortcut menu • A desktop shortcut can be configured to use the Run as feature • The Run as feature can be used from the command line runas /user:domain\domainadmin "mmc %windir%\system32\compmgmt.msc"

18. Lesson: Installing and Configuring Administrative Tools • What Are Administrative Tools? • What Is MMC? • Practice: Configuring the Administrative Tools • Guidelines for Resolving Problems with Installing and Configuring Administrative Tools

19. What Are Administrative Tools? • Commonly used administrative tools: • Active Directory Users and Computers • Active Directory Sites and Services • Active Directory Domains and Trusts • Computer Management • DNS • Remote Desktops • Install to perform remote administration

20. What Is MMC? MMC hosts tools, called snap-ins, that perform administrative functions Snap-ins

21. Practice: Configuring the Administrative Tools In this practice, you will: • Create a custom MMC • Save the custom MMC

22. Guidelines for Resolving Problems with Installing and Configuring Administrative Tools

23. Lesson: Creating an Organizational Unit • Multimedia: The Organizational Unit Structure • What Is an Organizational Unit? • Organizational Unit Hierarchical Models • Names Associated with Organizational Units • Practice: Creating an Organizational Unit

24. Multimedia: The Organizational Unit Structure This presentation explains: • How to use organizational units to group objects for more efficient management • The main purposes of an OU hierarchy

25. What Is an Organizational Unit? • Organizes objects in a domain • Allows you to delegate administrative control • Simplifies the management of commonly grouped resources

26. Organizational Unit Hierarchical Models Function-Based Hierarchy S S – Sales C – Consultants M - Marketing M C Organization-Based Hierarchy M M – Manufacturing E – Engineering R - Research E R N Location-Based Hierarchy F I N – Norway F – France I – Indonesia Examples of Hybrid-Based Hierarchies • Function • Organization • Location • Function • Organization • Location

27. Names Associated with Organizational Units

28. Practice: Creating an Organizational Unit In this practice, you will: • Install the AdminPak tools • Use the runas command to launch the command line • Use the dsadd command and Active Directory Users and Computers to create organizational units

29. Lab: Creating Organizational Units After completing this lab, you will be able to create organizational units