Windows 2000 Overview

1. Windows 2000 Overview

2. What we�re going to cover Overview of Operating Systems Common Features Differences between Operating Systems Windows 2000 Architecture Workgroups and Domains Active Directory

3. The Different Microsoft O/S Windows 2000 Server Windows 2000 Professional Windows NT Server 4.0 Windows NT Workstation 4.0 Windows ME Windows 98 Windows 95

4. The Different Flavors of Windows 2000 Windows 2000 Professional Windows 2000 Server Windows 2000 Advanced Server Windows 2000 Datacenter Server

5. Common Features of WinME/98 and Windows 2000 GUI E-Mail Support Via Microsoft Messaging Internet Explorer Hardware and User Profiles FAT32, CDFS

6. Win98/ME Specific Features Supports 16 & 32 Bit Applications

7. Windows 2000 Specific Features True 32 Bit Architecture Supports Multiple Processors through SMP (Symmetric Multiprocessing) Mandatory Logon Diverse Application Support Memory Management Encrypting File System (EFS) Support

8. Windows 2000 Specific Features (cont) Supports up to 16 Exabytes of Disk Space Extensive (File & Share) Security Multiple Protocol Support TCP/IP, NWLink, NetBEUI, DLC, Appletalk, OSPF & RIP v2. Supports Kerberos v5 Protocol Full Plug and Play

9. Win2000 Professional Specifics Supports up to 2 Processors 10 Inbound Network Connections

10. Windows 2000 Professional Hardware Requirements Processor � Pentium 133 Mhz or Higher RAM - 32Mb 64 Mb Recommended Available Disk Space 650 Mb of Disk Space VGA or Higher Video Card All Hardware should be on the Windows 2000 Hardware Compatibility List (HCL)

11. Windows 2000 Server Specifics Supports 4 Processors Unlimited Inbound & Outbound Network Connections

12. Windows 2000 Server Specifics (cont) Multi-protocol Routing Capability DHCP, Active Directory and DNS Support

13. Windows 2000 Server Hardware Requirements Processor � Pentium 133 Mhz or Higher RAM - 64Mb 128 Mb Recommended Available Disk Space 950 Mb of Disk Space Up to 1Gb needed if RAM higher than 64Mb VGA or Higher Video Card All Hardware should be on the Windows 2000 Hardware Compatibility List (HCL)

14. Windows 2000 Advanced Server Specifics Supports 8 Processors Same features as Windows 2000 Server

15. Windows 2000 Datacenter Server Specifics Supports 32 Processors Same features as Windows 2000 Advanced Server

16. Windows 2000 Advanced and Datacenter Server Hardware Requirements Processor � Pentium 133 Mhz or Higher RAM - 64Mb 128 Mb Recommended Available Disk Space 950 Mb of Disk Space Up to 1Gb needed if RAM higher than 64Mb VGA or Higher Video Card All Hardware should be on the Windows 2000 Hardware Compatibility List (HCL) Same Requirements as Windows 2000 Server

17. Windows 2000 Security Supports mandatory logon Access can be through either local security database, Windows NT 4.0 Server Domain User Account Database, or Windows 2000 Active Directory User Database Supports Smart Cards Supports Internet Protocol Security (IPSec) Supports EFS using NTFS Win2000 Server supports Remote Authentication Dial-In User Service (RADIUS).

18. Two Different Operating Modes

19. Windows 2000 Architecture

20. The Intel Memory Model

21. Workgroups Logical Grouping of Devices Decentralized Admin of Accounts & Security Windows 2000 Servers can be part of workgroup Each computer controls own directory database and security policy

22. Workgroups (cont) Peer to Peer connections emphasized Each machine must have a user database

23. Domains Must have at least one Win2000 Server to define domain. Centralized Administration of Accounts & Security One Account, One Logon, One Password Domain not reliant on physical factors One security policy for entire domain

24. Domains (cont) Computers join domains, not users Each computer continues to maintain it�s own database.

25. Differences between Domains Windows NT 4.0 Servers Must have a �Master� computer acting as the Primary Domain Controller Can have secondary computers acting as Backup Domain Controllers Once Server is established as a Domain Controller, it cannot be shifted to another Domain Domains are limited to 40,000 entries (i.e. Users, Groups, etc.)

26. Differences between Domains Windows 2000 Servers Domain controller(s) maintain the Active Directory data store Domain controllers can shift between domains Windows 2000 Domains do not have the limitation on entries that NT 4.0 Domains experience.

27. Introduction to Active Directory Composed of two components: Active Directory Data Store Active Directory Service Three Primary Purposes for Active Directory Provide User Logon & Authentication Services Enable Administrators to organize and manage user accounts, groups and network resources Enable authorized users to easily locate network resources regardless of where they are located on the network.

28. Active Directory Integrated Security Provides network security by managing the logon and authentication processes. Stores user account information to ensure proper logon of authorized individuals Provides security by controlling access to objects in the directory data store Includes user accounts, shared folders and printers. Allows for the precise definition of each property of an object.

29. Ease of Administration Creates hierarchical structure for easy maintenance of administrative responsibilities Allows for the delegation of substructures within the directory to different administrators Lends itself to application of group policies Easier administration through application of group policies versus manually configuring settings for all users.

30. Ease of Locating Resources All information related to network resources is stored in central data store. Enables administrators and users to quickly locate an object anywhere on the network by searching for a property related to the object. Allows for searches under the Search menu, My Network Places, or Active Directory Users and Computers.

31. Scalability and Flexibility Issues Hierarchical structure lends itself to scalability. Can build the network as large as it needs to be Active Directory can contain multiple domains Allows for scaling to any size of network. Each domain in control of its resources Active Directory is Extensible New objects and attributes for existing objects can be added as necessary.

32. Understanding the Structure of Active Directory Several components to discuss with relation to Active Directory Objects and Classes Schema Global Catalog Hierarchical Structure

33. Objects and Classes Objects are a record in the directory defined by a distinct set of attributes. Each object is unique in the database Classes are a template that is used to define the attributes of an object when it is defined Class defines the required and optional attributes of an object. Some classes in Active Directory include Computer, Contact, Group, Organizational Unit, Domain, Printer, User & Shared Folder

34. Schema A formal definition within the database of all the classes of objects and their associated attributes. What makes Active Directory Extensible Applications might require change of Schema, so their vendors will provide the means to make necessary modifications to the schema The Microsoft Management Console is used to modify the schema. Must be installed from the Windows 2000 Administration Tools Special Group called Schema Admins are only users authorized to make Schema changes.

35. Global Catalog Master, searchable index that contains information about every object in every domain in a forest. Forest is all of the domains that make up a network. Windows 2000 automatically creates a global catalog on the first domain controller installed in a forest. Global Catalog contains all objects in a host domain, and partial replica of objects in other domains in the forest. Partial replica includes most common properties of every object, but not all properties of every object.

36. Hierarchical Structure Refers to the manner of organizing a group of interrelated elements ranked one above the other. With Windows 2000, there are several components to consider within the structure, these include: Domains Organizational Units Trees Forests

37. Domains Normally correspond to the network�s DNS domains, and typically use the FQDN (Fully Qualified Domain Name) used by the DNS servers. FQDN consists of server_name.domain_name.root_domain_name Contain the objects, and can contain organizational units.

38. Organizational Units Active Directory object that can contain objects and other organizational units from their own domain. Used to organize related files and folders in a volume. Smallest container component that allows delegation of administrative authority.

39. Trees A Domain Tree is a hierarchical grouping of one or more domains that have a single root domain, and may have one or more child domains.

40. Forests A forest is a group of one or more domain trees that are linked by transitive trust relationships and share a common schema and global catalog.

41. Trust Relationships Trusts provide access to resources in domains where users don�t have accounts. Trusts are a logical link between domains. Trust relationships can be one way or bi-directional. It is possible to establish multiple trusts with multiple domains.

42. Types of Trust Relationships Three types of trust relationships Intransitive Trusts (one way trusts) Transitive Trusts Explicit Trusts

43. How Intransitive Trusts Work There are two parties in a trust relationship �Trusting� - Trusts the other domain to access its resources �Trusted� - Users access resources in the Trusting domain. A one-way trust consists of a domain trusting another domain. A two-way trust consists of two reciprocating one-way trusts. Windows NT 4.0 Domains can only establish Intransitive Trust Relationships

44. Trust Example

45. Multiple Intransitive Trusts

46. How Transitive Trusts Work Transitive Trust exists between two or more domains within the same domain tree. Transitive trusts are always two way trust relationships.

47. How Explicit Trusts Work Explicit trusts are established by an administrator, versus being created automatically by Windows 2000 Used between Windows 2000 and Windows NT Domains.