Operating System Part Solved

7/18/2019 Operating System Part Solved

http://slidepdf.com/reader/full/operating-system-part-solved 1/40

NETWORK CONFIGURATION

AIM:

Run the following command and w!ite the ue of each command

I"config

C:\Documents and Settings\Administrator>ipconfig

Windows 2000 IP Configuration

Ethernet adapter oca! Area Connection:

Connection"specific D#S Suffi$ % : IP Address% % % % % % % % % % % % : &0%22'%&%(& Su)net *as+ % % % % % % % % % % % : 2,,%2,,%2,,%&2( Defau!t -atewa. % % % % % % % % % : &0%22'%&%&

"ing

C:\Documents and Settings\Administrator>ping

/sage: ping "t1 "a1 "n count1 "! sie1 "f1 "i 331 "4 35S1 "r count1 "s count1 "6 host"!ist1 7 "+ host"!ist11 "w timeout1 destination"!ist

5ptions: "t Ping the specified host unti! stopped% 3o see statistics and continue " t.pe Contro!"8r 3o stop " t.pe Contro!"C% "a 9eso!4e addresses to hostnames% "n count #um)er of echo reuests to send% "! sie Send )uffer sie% "f Set Don;t <ragment f!ag in pac+et% "i 33 3ime 3o i4e% "4 35S 3.pe 5f Ser4ice% "r count 9ecord route for count hops% "s count 3imestamp for count hops% "6 host"!ist oose source route a!ong host"!ist% "+ host"!ist Strict source route a!ong host"!ist% "w timeout 3imeout in mi!!iseconds to wait for each rep!.%

telnet

*icrosoft =9 Windows 2000 =3* ?ersion ,%00 =8ui!d 2&@,We!come to *icrosoft 3e!net C!ient3e!net C!ient 8ui!d ,%00%@@20%&

Escape Character is ;C39B1;

*icrosoft 3e!net>

di#"e!f

C:\Documents and Settings\Administrator>dis+perf

1



Ph.sica! Dis+ Performance counters on this s.stem are current!. set to startat)oot%

netdiag

C:\Documents and Settings\Administrator>netdiag;netdiag; is not recognied as an interna! or e$terna! commandopera)!e program or )atch fi!e%

netstat

C:\Documents and Settings\Administrator>netstat

Acti4e Connections

Proto oca! Address <oreign Address State 3CP Am):&20( '2%20%2'%&&,:(0(0 S#SE#3 3CP Am):2F(0 &0,%&'F%200%2G:microsoft"ds S#SE#3 3CP Am):2F(& &'%GF%2F'%&F0:microsoft"ds S#SE#3 3CP Am):2F(2 &(,%,'%2%:microsoft"ds S#SE#3 3CP Am):2F(F &&%2F0%2G%2&,:microsoft"ds S#SE#3 3CP Am):2F(G &22%&2%2&@%&FG:microsoft"ds S#SE#3 3CP Am):2F(' &GF%&F,%200%&'&:microsoft"ds S#SE#3 3CP Am):2F(( (%22@%2&&%2,G:microsoft"ds S#SE#3 3CP Am):2F(@ &2%&((%&,2%&&@:microsoft"ds S#SE#3 3CP Am):2F@0 ,F%'G%F&%,@:microsoft"ds S#SE#3 3CP Am):2F@& F%'(%,&%(2:microsoft"ds S#SE#3 3CP Am):2F@F &(,%&%&F&%&2:microsoft"ds S#SE#3

3CP Am):2F@G ,0%0%&(@%2&&:microsoft"ds S#SE#3 3CP Am):2F@, &22%&2F%@%G':microsoft"ds S#SE#3 3CP Am):2F@ &F&%&(%&%&@:microsoft"ds S#SE#3 3CP Am):2F@' ,F%'G%F&%,@:microsoft"ds S#SE#3

"ath"ing

C:\Documents and Settings\Administrator>pathping

/sage: pathping "n1 "h ma$imumhops1 "g host"!ist1 "p period1 " numueries1 "w timeout1 "t1 "91 "r1 targetname5ptions: "n Do not reso!4e addresses to hostnames%

"h ma$imumhops *a$imum num)er of hops to search for target% "g host"!ist oose source route a!ong host"!ist% "p period Wait period mi!!iseconds )etween pings% " numueries #um)er of ueries per hop% "w timeout Wait timeout mi!!iseconds for each rep!.% "3 3est connecti4it. to each hop with a.er"2 priorit. tags% "9 3est if each hop is 9S?P aware%

ft"

C:\Documents and Settings\Administrator>ftpftp>

tft"

2



C:\Documents and Settings\Administrator>tftp

3ransfers fi!es to and from a remote computer running the 3<3P ser4ice%

3<3P "i1 host -E3 7 P/31 source destination1

"i Specifies )inar. image transfer mode =a!so ca!!ed octet% In )inar. image mode the fi!e is mo4ed !itera!!. ).te ). ).te% /se this mode when transferring )inar. fi!es% host Specifies the !oca! or remote host% -E3 3ransfers the fi!e destination on the remote host to the fi!e source on the !oca! host% P/3 3ransfers the fi!e source on the !oca! host to the fi!e destination on the remote host% source Specifies the fi!e to transfer% destination Specifies where to transfer the fi!e%

fc

C:\Documents and Settings\Administrator>sfc

*icrosoft=9 Windows 2000 Windows <i!e Chec+er ?ersion ,%00=C &@@@ *icrosoft Corp% A!! rights reser4ed

Scans a!! protected s.stem fi!es and rep!aces incorrect 4ersions with correct*icrosoft 4ersions%

S<C HSCA##5W1 HSCA#5#CE1 HSCA#85531 HCA#CE1 HE#A8E1 HP/9-ECACE1HCACE

SIJEK$1 HL/IE31

HSCA##5W Scans a!! protected s.stem fi!es immediate!.%HSCA#5#CE Scans a!! protected s.stem fi!es once at the ne$t )oot%HSCA#8553 Scans a!! protected s.stem fi!es at e4er. )oot%HCA#CE Cance!s a!! pending scans of protected s.stem fi!es%HL/IE3 9ep!aces a!! incorrect fi!e 4ersions without prompting the user%

HE#A8E Ena)!es Windows <i!e Protection for norma! operationHP/9-ECACE Purges the fi!e cache and scans a!! protected s.stem fi!esimmediate!.%HCACESIJEK$ Sets the fi!e cache sie

n$ttat

C:\Documents and Settings\Administrator>n)tstat

Disp!a.s protoco! statistics and current 3CPHIP connections using #83=#et8I5S o4er 3CPHIP%

#83S3A3 "a 9emote#ame1 "A IP address1 "c1 "n1 "r1 "91 "991 "s1 "S1 inter4a!1 1

"a =adapter status ists the remote machine;s name ta)!e gi4en its name

"A =Adapter status ists the remote machine;s name ta)!e gi4en its

3



IP address% "c =cache ists #83;s cache of remote machine1 names and theirIP addresses "n =names ists !oca! #et8I5S names% "r =reso!4ed ists names reso!4ed ). )roadcast and 4ia WI#S

"9 =9e!oad Purges and re!oads the remote cache name ta)!e "S =Sessions ists sessions ta)!e with the destination IPaddresses "s =sessions ists sessions ta)!e con4erting destination IP addresses to computer #E38I5S names% "99 =9e!ease9efresh Sends #ame 9e!ease pac+ets to WI#s and then starts9efresh 9emote#ame 9emote host machine name% IP address Dotted decima! representation of the IP address% inter4a! 9edisp!a.s se!ected statistics pausing inter4a! seconds )etween each disp!a.% Press Ctr!BC to stop redisp!a.ing statistics%

!c"

C:\Documents and Settings\Administrator>rcp

Copies fi!es to and from computer running the 9CP ser4ice%

9CP "a 7 ")1 "h1 "r1 host1%user:1source host1%user:1 path\destination

"a Specifies ASCII transfer mode% 3his mode con4erts the E5 characters to a carriage return for /#IM and a carriage returnH!ine feed for persona! computers% 3his is the defau!t transfer mode%

") Specifies )inar. image transfer mode% "h 3ransfers hidden fi!es% "r Copies the contents of a!! su)directoriesN destination must )e a director.% host Specifies the !oca! or remote host% If host is specified as an IP address 59 if host name contains dots .ou must specif. the user% %user: Specifies a user name to use rather than the current user name% source Specifes the fi!es to cop.% path\destination Specifies the path re!ati4e to the !ogon director. on the remote host% /se the escape characters =\ O or ; in remote paths to use wi!dcard

characters on the remote host%

l"!

C:\Documents and Settings\Administrator>!pr

Sends a print 6o) to a networ+ printer

/sage: !pr "S ser4er "P printer "C c!ass1 " 6o)1 "o option1 "$1 "d1fi!ename

5ptions:

"S ser4er #ame or ipaddress of the host pro4iding !pd ser4ice

4



"P printer #ame of the print ueue "C c!ass o) c!assification for use on the )urst page " 6o) o) name to print on the )urst page "o option Indicates t.pe of the fi!e =). defau!t assumes a te$t fi!e /se O"o !O for )inar. =e%g% postscript fi!es

"$ Compati)i!it. with Sun5S G%&%$ and prior "d Send data fi!e first

t!ace!t

C:\Documents and Settings\Administrator>tracert

/sage: tracert "d1 "h ma$imumhops1 "6 host"!ist1 "w timeout1 targetname

5ptions: "d Do not reso!4e addresses to hostnames% "h ma$imumhops *a$imum num)er of hops to search for target% "6 host"!ist oose source route a!ong host"!ist%

"w timeout Wait timeout mi!!iseconds for each rep!.%

%e!ifie!

nloo#u"

C:\Documents and Settings\Administrator>ns!oo+upQQQ Defau!t ser4ers are not a4ai!a)!eDefau!t Ser4er: /nRnownAddress: &2'%0%0%&

!oute

C:\Documents and Settings\Administrator>route

*anipu!ates networ+ routing ta)!es%

95/3E "f1 "p1 command destination1

*ASR netmas+1 gatewa.1 *E39IC metric1 I< interface1

5



"f C!ears the routing ta)!es of a!! gatewa. entries% If this is used in con6unction with one of the commands the ta)!es are c!eared prior to running the command% "p When used with the ADD command ma+es a route persistent

across )oots of the s.stem% 8. defau!t routes are not preser4ed when the s.stem is restarted% Ignored for a!! other commands which a!wa.s affect the appropriate persistent routes% 3his option is not supported in Windows @,% command 5ne of these: P9I#3 Prints a route ADD Adds a route DEE3E De!etes a route CA#-E *odifies an e$isting route destination Specifies the host% *ASR Specifies that the ne$t parameter is the ;netmas+; 4a!ue% netmas+ Specifies a su)net mas+ 4a!ue for this route entr.%

If not specified it defau!ts to 2,,%2,,%2,,%2,,% gatewa. Specifies gatewa.% interface the interface num)er for the specified route% *E39IC specifies the metric ie% cost for the destination%

A!! s.m)o!ic names used for destination are !oo+ed up in the networ+ data)asefi!e #E3W59RS% 3he s.m)o!ic names for gatewa. are !oo+ed up in the host namedata)ase fi!e 5S3S%

If the command is P9I#3 or DEE3E% Destination or gatewa. can )e a wi!dcard=wi!dcard is specified as a star ;Q; or the gatewa. argument ma. )eomitted%

If Dest contains a Q or it is treated as a she!! pattern and on!.matching destination routes are printed% 3he ;Q; matches an. stringand ;; matches an. one char% E$amp!es: &,'%Q%& &,'%Q &2'%Q Q22GQ%Diagnostic #otes:

In4a!id *ASR generates an error that is when =DES3 T *ASR UK DES3% E$amp!e> route ADD &,'%0%0%0 *ASR &,,%0%0%0 &,'%,,%(0%& I< &

3he route addition fai!ed: 3he specified mas+ parameter is in4a!id%=Destination T *as+ UK Destination%

E$amp!es:

> route P9I#3 > route ADD &,'%0%0%0 *ASR 2,,%0%0%0 &,'%,,%(0%& *E39IC F I< 2 destinationV Vmas+ Vgatewa. metricV V InterfaceV If I< is not gi4en it tries to find the )est interface for a gi4en gatewa.% > route P9I#3 > route P9I#3 &,'Q %%%% 5n!. prints those matching &,'Q > route DEE3E &,'%0%0%0 > route P9I#3

l"&

6



C:\Documents and Settings\Administrator>!p

Disp!a.s the state of a remote !pd ueue%

/sage: !p "Sser4er "Pprinter "!1

5ptions: "S ser4er #ame or ipaddress of the host pro4iding !pd ser4ice "P printer #ame of the print ueue "! 4er)ose output

C:\Documents and Settings\Administrator>

net eion

C:\Documents and Settings\Administrator>net session3here are no entries in the !ist%

d!i%e!

C:\Documents and Settings\Administrator>dri4ers;dri4ers; is not recognied as an interna! or e$terna! commandopera)!e program or )atch fi!e%

nettime

C:\Documents and Settings\Administrator>nettime;nettime; is not recognied as an interna! or e$terna! commandopera)!e program or )atch fi!e%

!h

C:\Documents and Settings\Administrator>rsh

9uns commands on remote hosts running the 9S ser4ice%

9S host "! username1 "n1 command

host Specifies the remote host on which to run command% "! username Specifies the user name to use on the remote host% If omitted the !ogged on user name is used% "n 9edirects the input of 9S to #/% command Specifies the command to run%

ch#d#

C:\Documents and Settings\Administrator>ch+ds+3he t.pe of the fi!e s.stem is <A3F2%?o!ume C created 22H0(H2002 ,:,F P*?o!ume Seria! #um)er is FA,&"&@0Windows is 4erif.ing fi!es and fo!ders%%%<i!e and fo!der 4erification is comp!ete%Windows has chec+ed the fi!e s.stem and found no pro)!em% F@0,(@@2 R8 tota! dis+ space% &2('((( R8 in 'FG hidden fi!es%

,FGG0 R8 in F22F fo!ders%

7



22F2(GG R8 in '2 fi!es% &,F(@&(G R8 are a4ai!a)!e%

&F(G ).tes in each a!!ocation unit% 2GG&&(' tota! a!!ocation units on dis+%

@&(2G a!!ocation units a4ai!a)!e on dis+%

hotname

C:\Documents and Settings\Administrator>hostnameAm)

net account

C:\Documents and Settings\Administrator>net account3he s.nta$ of this command is:

#E3 ACC5/#3S 7 C5*P/3E9 7 C5#<I- 7 C5#3I#/E 7 <IE 7 -95/P 7 EP 7

EP*S- 7 5CA-95/P 7 #A*E 7 PA/SE 7 P9I#3 7 SE#D 7 SESSI5# 7 SA9E 7 S3A93 7 S3A3IS3ICS 7 S35P 7 3I*E 7 /SE 7 /SE9 7 ?IEW 1

a!"

C:\Documents and Settings\Administrator>arp

Disp!a.s and modifies the IP"to"Ph.sica! address trans!ation ta)!es used ).address reso!ution protoco! =A9P%

A9P "s inetaddr ethaddr ifaddr1A9P "d inetaddr ifaddr1

A9P "a inetaddr1 "# ifaddr1

"a Disp!a.s current A9P entries ). interrogating the current protoco! data% If inetaddr is specified the IP and Ph.sica! addresses for on!. the specified computer are disp!a.ed% If more than one networ+ interface uses A9P entries for each A9P ta)!e are disp!a.ed%"g Same as "a% inetaddr Specifies an internet address%"# ifaddr Disp!a.s the A9P entries for the networ+ interface specified ). ifaddr%"d De!etes the host specified ). inetaddr% inetaddr ma. )e wi!dcarded with Q to de!ete a!! hosts%

"s Adds the host and associates the Internet address inetaddr with the Ph.sica! address ethaddr% 3he Ph.sica! address is gi4en as he$adecima! ).tes separated ). h.phens% 3he entr. is permanent% ethaddr Specifies a ph.sica! address% ifaddr If present this specifies the Internet address of the interface whose address trans!ation ta)!e shou!d )e modified% If not present the first app!ica)!e interface wi!! )e used%E$amp!e: > arp "s &,'%,,%(,%2&2 00"aa"00"2"c"0@ %%%% Adds a static entr.% > arp "a %%%% Disp!a.s the arp ta)!e%

8



AIM:

Modif' the !outing ta$le uing i"(!oute

C:\Documents and Settings\Administrator>ip$route

#Win+ IPM 9outing and Source 9outing Contro! Program 42%00/na)!e to open transport \De4ice\#w!n+Ip$%

AIM:

)how tc"*i"

netsh>show mode tcpHipon!ine

AIM:

Configu!e inte!face:

netsh>set

3he fo!!owing commands are a4ai!a)!e:

Commands in this conte$t:set machine " Sets the current machine on which to operate%set mode " Sets the current mode to on!ine or off!ine%netsh>set interface3he fo!!owing command was not found: set interface%netsh>set mode interface;mode; is not an accepta)!e 4a!ue for ;interface;%

3he parameter is incorrect%

netsh>set mode

/sage: set mode modeK 1 on!ine 7 off!ine X

Parameters:

3ag ?a!ue mode " 5ne of the fo!!owing 4a!ues: on!ine: Commit changes immediate!. off!ine: De!a. commit unti! e$p!icit!. reuested

9emar+s: Sets the current mode to on!ine or off!ine%

netsh>set machine

9



AIM:

To configu!e !emote acce

&% 5pen #etwor+ and Dia!"up Connections%

2. 9ight"c!ic+ the dia!"up connection we want to configure and then c!ic++!o"e!tie%

3. 5n the )ecu!it' ta) do one of the fo!!owing:o 3o se!ect preconfigured com)inations of identit. authentication

methods and data encr.ption reuirements c!ic+ T'"ical,!ecommended etting- and in .alidate m' identit' a followc!ic+ a method to use for 4a!idation%

.alidate m'identit' afollow

Automaticall' ue m' Windowlogon name and "awo!d ,and

domain if an'-

Re&ui!e dataenc!'"tion

,diconnect if none-

A!!ow unsecuredpassword

/na4ai!a)!e /na4ai!a)!e

9euire securedpassword

A4ai!a)!e A4ai!a)!e

/se smart card /na4ai!a)!e A4ai!a)!e

o 3o indi4idua!!. ena)!e configure and disa)!e authenticationmethods and encr.ption reuirements c!ic+ Ad%anced ,cutometting- and then c!ic+ )etting%

Important

• *odif.ing Ad%anced ,cutom etting- reuires a +now!edge of securit.protoco!s%

#ote

• 3o open #etwor+ and Dia!"up Connections c!ic+ )ta!t point to)etting and then c!ic+ Netwo!# and /ial0u" Connection

10



1INU2 * UNI2 O+ERATING )3)TEM

AIM:

T!' to e4ecute following command and w!ite the !eult of each 1 aa a) a)c agm ra6esh )i6u sem2 +wd home\sem 1 54 a& a2 a%c agm a%out des+top frmstat%ui insta!!%!og s Ya! drw$r"$" " FF root root G0@ oct 2 &0:&2 % drw$Z$r"$ FF root root oct 2 &0:G2 a& "rw"r" "r"" FF root root , oct 2 &2:F0 a2 "rw$r"$Z FF root root G oct 2 &2:G, a%c

AIM:

Ma#e u$di!ecto!ie called uni and linu in home di!ecto!' Made6 Now deletethe u$di!ecto!' called uni

*+dir uni *+dir !inu 9mdir !inu

AIM:

C!eate a file called 7ignou8t4t98Now co"' thi file and "ate to othe!

di!ecto!' 8 Co"ied mo%e the file alo f!om one di!ecto!' to othe!

Cat > ignou%t$t Cp ignou%t$t \a)\a%t$t *4 ignou%t$t \!inu

AIM:

Change the "e!miion of ignou8t4t to !w4!w4!048Find out what a!e thediffe!ent command a%aila$le to change the "e!miion of file

Chmod aB$ ignou%t$t Chmod g"w ignou%t$t Chmod o"w ignou%t$t

AIM:

Find the file in home di!ecto!' thoe name a!e ta!ting with and !edi!ect

the out"ut into a file !edi!ecting8t4t

s Y! sQ >redirecting%t$t

AIM:

Change the "awo!d and w!ite down the !et!iction fo! gi%en "awo!d

PasswdEnter new password:9e enter new password:9estrictions to password

&%different from pre4ious password2%a4e at!east characters

11



F%Are not common words found in dictionar.

AIM:E$ecute s!eep 2, in the foregound suspend it with Ctr!" and then put it

into the )ac+gound with )g%show a!! process running in )ac+ground )ring an.process )ac+ into the foregound with fg% 9epeat the same e$ercise using +i!!to terminate the process and use T for sending into )ac+gound%

S!eep 2, Ys

AIM:

W!ite a hell c!i"t which !etu!n the +I/ of a "!oce and acce"t the nameof "!oce

Ps e 7 grep init Echo [a 7 cut Yf& Yd

AIM:

Send a message to a!! users which are on!ine% *a+e pro4ision so that .ou cansend messages to other users )ut others cannot% /se ta!+ to send messages%

*esg n

AIM:

Send a mai! to .ourse!f and inc!ude ignou%t$t inside the mai!% 9ead themai! .ou ha4e sent to .ourse!f% Sa4e the piece of message and fi!e into somefo!der% 9ep!. to .ourse!f%

*ai! root=user & ">*ai! am)=user 2

AIM:

/se ping to find the round"trip de!a. to www%ignou%ac%inPing www%ignou%ac%in]

AIM:

/se the !s command and grep to disp!a. a!! names starting with s] s7grepVs1

12

http://www.ignou.ac.in/

http://www.ignou.ac.in/



)3)TEM A/MINI)TRATION U)ING UNI2 1INU2

AIM:

De!ete the user which 6ust now added

De!user a)c

AIM:

Write a message to inform a!! user the. shou!d shut down theirmachine after comp!eting the !a) e$ercise]

Wa!! the. shou!d shut down their machine after comp!eting the !a)e$ercise]

13



WIN/OW) ;<<<: INTRO/UCTION TO NETWORKING

AIM:

/iffe!ent )'tem Tool And Adminita!ti%e Tool

Com"ute! Management

/se Computer *anagement to manage !oca! or remote computers using a sing!econso!idated des+top too!% It com)ines se4era! Windows 2000 administrationuti!ities into a sing!e conso!e tree pro4iding eas. access to a specificcomputer;s administrati4e properties and too!s% /se Computer *anagement to:

• *onitor s.stem e4ents such as !ogon times and app!ication errors%• Create and manage shares%• ?iew a !ist of users connected to a !oca! or remote computer%• Start and stop s.stem ser4ices such as the 3as+ Schedu!er and the

Spoo!er%• Set properties for storage de4ices%• ?iew de4ice configurations and add new de4ice dri4ers%• *anage ser4er app!ications and ser4ices such as the Domain #ame S.stem

=D#S ser4ice or the D.namic ost Configuration Protoco! =DCPser4ice%

1ocal )ecu!it' )etting

3he Securit. Settings node a!!ows a securit. administrator to configuresecurit. !e4e!s assigned to a -roup Po!ic. o)6ect or !oca! computer po!ic.%3his can )e done after or instead of importing or app!.ing a securit.temp!ate%

E%ent .iewe!

14



/sing the e4ent !ogs in E4ent ?iewer .ou can gather information a)outhardware software and s.stem pro)!ems and monitor Windows 2000 securit.e4ents%Windows 2000 records e4ents in three +inds of !ogs:

The a""lication log

3he app!ication !og contains e4ents !ogged ). app!ications or programs% <ore$amp!e a data)ase program might record a fi!e error in the app!ication !og%3he de4e!oper decides which e4ents to record%

The 'tem log

3he s.stem !og contains e4ents !ogged ). the Windows 2000 s.stem components%<or e$amp!e the fai!ure of a dri4er or other s.stem component to !oad duringstartup is recorded in the s.stem !og% 3he e4ent t.pes !ogged ). s.stemcomponents are predetermined%

The ecu!it' log

3he securit. !og can record securit. e4ents such as 4a!id and in4a!id !ogonattempts as we!! as e4ents re!ated to resource use such as creatingopening or de!eting fi!es% An administrator can specif. what e4ents arerecorded in the securit. !og% <or e$amp!e if .ou ha4e ena)!ed !ogonauditing attempts to !og on to the s.stem are recorded in the securit. !og%

)e!%ice

/sing Ser4ices .ou can start stop pause or resume ser4ices on remote and!oca! computers and configure startup and reco4er. options% ou can a!soena)!e or disa)!e ser4ices for a particu!ar hardware profi!e%With Ser4ices .ou can:

• *anage ser4ices on !oca! and remote computers inc!uding remotecomputers running Windows #3 G%0%

• Set up reco4er. actions to ta+e p!ace if a ser4ice fai!s such asrestarting the ser4ice automatica!!. or restarting the computer =oncomputers running Windows 2000 on!.%

• Create custom names and descriptions for ser4ices so that .ou caneasi!. identif. them =on computers running Windows 2000 on!.%

15



8ac+up

3he 8ac+up uti!it. he!ps .ou protect data from accidenta! !oss due tohardware or storage media fai!ure% <or e$amp!e using 8ac+up .ou can create adup!icate cop. of the data on .our hard dis+ ). )ac+ing up the data toanother storage de4ice such as a hard dis+ or a tape% In the e4ent that theorigina! data on .our hard dis+ is accidenta!!. erased or o4erwritten or)ecomes inaccessi)!e )ecause of a hard dis+ ma!function .ou can easi!.restore the data from the )ac+ed up cop.%/sing 8ac+up .ou can:

• 8ac+ up se!ected fi!es and fo!ders on .our hard dis+%• 9estore the )ac+ed up fi!es and fo!ders to .our hard dis+ or an. other

dis+ .ou can access%• Create an Emergenc. 9epair Dis+ =E9D which wi!! he!p .ou repair

s.stem fi!es in the e4ent the. get corrupted or are accidenta!!.

erased%• *a+e a cop. of an. 9emote Storage data and an. data stored in mounted

dri4es%• *a+e a cop. of .our computer;s S.stem State which inc!udes such things

as the registr. the )oot fi!es and the s.stem fi!es%• 8ac+ up ser4ices on ser4ers and domain contro!!ers inc!uding such

things as the Acti4e Director. ser4ice data)ase the CertificateSer4ices data)ase and the <i!e 9ep!ication ser4ice SS?5 director.%

• Schedu!e regu!ar )ac+ups to +eep .our )ac+ed up data up to date%ou can use 8ac+up to )ac+ up and restore data on either <A3 or #3<S 4o!umes%owe4er if .ou ha4e )ac+ed up data from an #3<S 4o!ume used in Windows 2000it is recommended that .ou restore the data to an #3<S 4o!ume used in Windows2000 or .ou cou!d !ose data as we!! as some fi!e and fo!der features% <or

e$amp!e permissions encr.pting fi!e s.stem =E<S settings dis+ uotainformation mounted dri4e information and 9emote Storage information wi!!

16



)e !ost if .ou )ac+ up data from an #3<S 4o!ume used in Windows 2000 and thenrestore it to a <A3 4o!ume or an #3<S 4o!ume used in Windows #3 G%0%

/i# /ef!agmente!

Dis+ Defragmenter !ocates fragmented fi!es and fo!ders on !oca! 4o!umes% Afragmented fi!e or fo!der is sp!it up into man. pieces and scattered o4er a4o!ume%

When a 4o!ume contains a !ot of fragmented fi!es and fo!ders Windows ta+es!onger to gain access to them )ecause it reuires se4era! additiona! dis+dri4e reads to co!!ect the 4arious pieces% Creating new fi!es and fo!dersa!so ta+es !onger )ecause the free space a4ai!a)!e on the 4o!ume isscattered% Windows must then sa4e new fi!es and fo!ders to 4arious !ocationson the 4o!ume%

Dis+ Defragmenter mo4es the pieces of each fi!e or fo!der to one !ocation onthe 4o!ume so that each occupies a sing!e contiguous space on the dis+

dri4e% As a resu!t .our s.stem can gain access to .our fi!es and fo!ders andsa4e new ones more efficient!.% 8. conso!idating .our fi!es and fo!ders Dis+Defragmenter a!so conso!idates .our free space ma+ing it !ess !i+e!. thatnew fi!es wi!! )e fragmented%

3he process of finding and conso!idating fragmented fi!es and fo!ders isca!!ed defragmentation% 3he amount of time that defragmentation ta+es dependson se4era! factors inc!uding the sie of the 4o!ume the num)er of fi!es onthe 4o!ume the amount of fragmentation and the a4ai!a)!e !oca! s.stemresources% ou can find a!! of the fragmented fi!es and fo!ders )eforedefragmenting them ). ana!.ing the 4o!ume first% ou can see how man.fragmented fi!es and fo!ders are sa4ed on the 4o!ume and then decide whetheror not .ou wou!d )enefit from defragmenting the 4o!ume%

Dis+ Defragmenter can defragment <A3 <A3F2 and #3<S formatted 4o!umes%<or more information see 9e!ated 3opics%

S.stem Information

S.stem Information co!!ects and disp!a.s .our s.stem configurationinformation% Support technicians reuire specific information a)out .ourcomputer when the. are trou)!eshooting .our configuration% ou can use S.stemInformation to uic+!. find the data the. need to reso!4e .our s.stempro)!em%

S.stem Information disp!a.s a comprehensi4e 4iew of .our hardware s.stemcomponents and software en4ironment% 3he disp!a.ed s.stem information is

organied into a s.stem summar. and three top"!e4e! categories that

17



correspond to the 9esources Components and Software En4ironment nodes onthe conso!e tree%

• 3he )'tem )umma!' node disp!a.s genera! information a)out .ourcomputer and the 4ersion of Windows 2000 operating s.stem insta!!ed%3his summar. inc!udes the name and t.pe of .our s.stem the name of

.our Windows s.stem director. regiona! options and statistics a)outph.sica! and 4irtua! memor.%

• 3he =a!dwa!e Reou!ce node disp!a.s hardware"specific settings name!.D*A I9Ls IH5 addresses and memor. addresses% 3he Conflict*)ha!ingnode identifies de4ices that are sharing resources or are in conf!ict%3his can he!p identif. pro)!ems with a de4ice%

• 3he Com"onent node disp!a.s information a)out .our Windowsconfiguration and is used to determine the status of .our de4icedri4ers networ+ing and mu!timedia software% In addition there is acomprehensi4e dri4er histor. which shows changes made to .ourcomponents o4er time%

• 3he )oftwa!e En%i!onment node disp!a.s a snapshot of the software!oaded in computer memor.% 3his information can )e used to see if aprocess is sti!! running or to chec+ 4ersion information%

5ther app!ications ma. add nodes to S.stem Information that disp!a.information specific to the app!ication%

ou can use the .iew menu to switch )etween the disp!a. of 8asic and Ad4ancedinformation% 3he Ad4anced 4iew shows a!! of the information in the 8asic 4iewp!us additiona! information that ma. )e of interest to the more ad4anced useror to *icrosoft Product Support Ser4ices%

18



AIM:

To add a new ue! to the com"ute!

&% 5pen /sers and Passwords in Contro! Pane!%

2. C!ic+ Add %F% <o!!ow the instructions on the screen%

#otes

• ou must )e !ogged on as an administrator or a mem)er of theAdministrators group to use /sers and Passwords%

• 3o open a Contro! Pane! item c!ic+ )ta!t point to )etting c!ic+Cont!ol +anel and then dou)!e"c!ic+ the appropriate icon%

• If the computer is part of a domain Add New Ue! gi4es an e$istingdomain user permission to use the computer% If the computer is not part

of a domain Add New Ue! creates a new !oca! user%• If the computer is part of a domain .ou can on!. add e$isting domain

users with /sers and Passwords% 3o add a new !oca! user c!ic+ the Ad%anced ta) and then c!ic+ the Ad%anced )utton% In oca! /sers and-roups c!ic+ Ue! c!ic+ Action and then c!ic+ C!eate Ue!%

• ou shou!d not add a new user to the Administrators group un!ess theuser wi!! perform on!. administrati4e tas+s% <or more information see9e!ated 3opics%

3.pes of access permissions for shares

3he fo!!owing t.pes of access permissions can )e app!ied to shared fo!ders%

Read

9ead permission a!!ows:o ?iewing fi!e names and su)fo!der names%o 3ra4ersing to su)fo!ders%o ?iewing data in fi!es%o 9unning program fi!es%

Change

Change permission a!!ows a!! 9ead permissions p!us:o Adding fi!es and su)fo!ders%

o Changing data in fi!es%o De!eting su)fo!ders and fi!es%

Full Cont!ol

<u!! Contro! is the defau!t permission app!ied to an. new shares .ou create%It a!!ows a!! 9ead and Change permissions p!us:o Changing permissions =#3<S fi!es and fo!ders on!.%o 3a+ing ownership =#3<S fi!es and fo!ders on!.%

NoteWhen a fo!der is shared the defau!t is to grant <u!! Access permissions tothe E4er.one group%

19



AIM:

To add a local +!inte!

&% -o to Settings Printers and start the add printer wiard%

2% Se!ect oca! Printer and C!ic+ ne$t

F% Se!ect the Printer Port% Sa. P3&%

G% Se!ect 3he Printer *anufacturer and *ode!%

,% #ame the printer and Set to share the Printer if it has to )e a4ai!a)!ein the #etwor+%

20



% After gi4ing ocation command and Print the test page% If a!! are o+<ina!ise the setting and comp!ete the wiard%

21



AIM:

To connect to a "!inte! on a netwo!#

1. 5pen Printers%

2. Dou)!e"c!ic+ Add +!inte! to start the Add Printer wiard and thenc!ic+ Ne4t%

3. C!ic+ Netwo!# "!inte! and then c!ic+ Ne4t%G% Connect to the desired printer ).:

o Searching for it in the Acti4e Director.%o 3.ping its name using the fo!!owing format or c!ic+ing Ne4t to

!ocate the printer on the networ+:o 3.ping its /9 using the fo!!owing format:

,% <o!!ow the instructions on the screen to finish connecting to thenetwor+ printer%

#otes

• 3o open Printers c!ic+ )ta!t point to )etting and then c!ic++!inte!%

• If .ou are not !ogged on to a Windows 2000 domain running Acti4eDirector. the option to Find a "!inte! in the /i!ecto!' wi!! not )ea4ai!a)!e%

• Connecting to a printer using its /9 a!!ows .ou to connect to printersacross the Internet pro4iding .ou ha4e permission to use that printer%

• If .ou cannot connect to .our printer using the genera! /9 formata)o4e p!ease see .our printer;s documentation or contact .our networ+administrator%

•

ou can a!so connect to a printer ). dragging the printer from thePrinters fo!der on the print ser4er and dropping it into .our Printersfo!der or ). simp!. right"c!ic+ing the icon and then c!ic+ing Connect%

• After .ou ha4e connected to a shared printer on the networ+ .ou canuse it as if it were attached to .our computer%

22



AIM: Window ;<<< Acti%e /i!ecto!' and /omain cont!olle!8

3he Acti4e Director. =AD of Windows 2000 Ser4er and Windows Ser4er200F )asica!!. manages a!! the information that is re!e4ant in the networ+;s

operation% 3his inc!udes connections app!ications data)ases printersusers and groups% *icrosoft;s te$t descri)es it concise!.: Acti4e Director.pro4ides a standard wa. to name descri)e !oca!ie manage secure andaccess these resources%

3o Start Acti4e Director. Insta!!ation 9un /c"!omo from Command Prompt

3he dcpromo command is used to raise the !e4e! of the ser4er to )ecome anActi4e Director. contro!!er% 3he process ta+es appro$imate!. ten minutes andis descri)ed )rief!. in the fo!!owing%

We assume that there are no other ser4ers in .our networ+ and therefore we

want a contro!!er for a new Acti4e Director. infrastructure

23



Afterwards we define whether the new AD domain is to )e integrated into ane$isting s.stem%

Acti4e Director. uses its own data)ase s.stem in order to manage thedescri)ed information efficient!.% Pro4ided .our en4ironment cou!d growuic+!. and the ser4er cou!d ta+e on additiona! tas+s the data)ase as we!!as the !og fi!es shou!d )e swapped out to a separate hard dis+ in order to+eep s.stem performance as high as possi)!e%

24



3he SS?5 fo!der is another specia!t. of the Acti4e Director. )ecause itscontents are rep!icated ). a!! the Acti4e Director. contro!!ers in a domain%3his inc!udes !ogin scripts group po!icies and other things that must )ea4ai!a)!e on other ser4ers as we!!% 3he !ocation of this fo!der can of

course )e changed according to need%

3here is no D#S Ser4er running% So we need to insta!! D#S Ser4er%

After Insta!!ing <orward oo+up one We ha4e to insta!! 9e4erse !oo+up onea!so%

<irst We Create a Primar. Jone%

After that We set D.namic updates for this one%

25



After confirmation the 9e4erse oo+up Jone is insta!!ed%

3he !ast thing we sti!! need is a pointer which points to our su)net&@2%&(%&%0%

26



8. this 3he D#S and Acti4e Director. Insta!!ation <inished%

27



AIM:

C!eate a =ie!a!chical /i!ecto!' T!ee

A hierarchica! representation of the fo!ders fi!es dis+ dri4es and otherresources connected to a computer or networ+% <or e$amp!e Windows E$p!oreruses a tree 4iew to disp!a. the resources that are attached to a computer ora networ+%

AIM:

)ha!e and )ha!e +e!miion8

I create a fo!der test uder c:\temp directr. and set permissions asfo!!ows%

3a+e Properties of oca! Area Connction%

28



AIM:

Intall and Configu!e TC+*I+

Properties of 3CPHIP

Enter Ip address Su)net *as+ Defau!t -atewa. and D#S Ser4er entries%

Add WI#S ser4er Entries and Comp!ete the Settings%

AIM:

Intall a caching /N) e!%e! and find out how it !educe the netwo!# t!affic

Windows 2000 authentication is imp!emented in two steps: an interacti4e !ogonprocess and a networ+ authentication process% 3.pica!!. the same set of

credentia!s is used ). the interacti4e !ogon process and the networ+authentication process% If .our credentia!s differ .ou are prompted topro4ide Windows domain credentia!s each time .ou access a networ+resource% ou can a4oid this ). !ogging on to .our computer using .ourWindows domain name .our Windows domain user name and Windows domainpassword )efore .ou tr. to connect to a networ+ resource% If .ou !og onwithout )eing connected to the networ+ Windows 2000 recognies theinformation from a pre4ious successfu! !ogon% ou recei4e the messageOWindows cannot connect to a ser4er to confirm .our !ogon settings% ouha4e )een !ogged on using pre4ious!. stored account information%O When .ouconnect to .our networ+ the cached credentia!s are passed to .ourWindows 2000 domain and .ou are a)!e to access networ+ resources withoutha4ing to pro4ide a password again%

imiting the num)er of protoco!s on .our computer enhances networ+performance and reduces networ+ traffic

AIM:

Im"lement delegated (one fo! a /oman Name e!%e!

In the *acintosh en4ironment a !ogica! grouping that simp!ifies )rowsing thenetwor+ for resources such as ser4ers and printers% It is simi!ar to adomain in Windows 2000 Ser4er networ+ing%

In a D#S =Domain #ame S.stem data)ase a one is a su)tree of the D#S

data)ase that is administered as a sing!e separate entit. a D#S ser4er% 3his

29



administrati4e unit can consist of a sing!e domain or a domain withsu)domains% A D#S one administrator sets up one or more name ser4ers for theone%

30



WIN/OW) ;<<<: )ER.ER MANAGEMENT

AIM:

Configuring Windows c!ient as ?P# c!ient

?P# C!ient is an app!ication that runs on a *icrosoft ^ Windows^")asedPC a Sun u!traSPA9C wor+stations a inu$ des+top or a *acintosh =*acpersona! computer that meets the s.stem reuirements stated in the ne$tsection% In this document the term OPCO app!ies generica!!. to a!! thesecomputers un!ess specified otherwise%

3he ?P# C!ient on a remote PC communicating with a Cisco ?P# de4ice atan enterprise or ser4ice pro4ider creates a secure connection o4er theInternet that !ets .ou access a pri4ate networ+ as if .ou were an on"siteuser% 3his secure connection is a ?irtua! Pri4ate #etwor+ =?P#%

)'tem Re&ui!ement3o insta!! the ?P# C!ient on any s.stem .ou needYCD"95* dri4e =if .ou

are insta!!ing from CD"95* YAdministrator pri4i!eges _3he fo!!owing ta)!eindicates the s.stem reuirements to insta!! the ?P# C!ient on each of thesupported p!atforms%

Com"ute! O"e!ating )'tem Re&ui!ement

Computer witha Pentium^"c!assprocessor orgreater

_*icrosoft^ Windows^ @( orWindows @( =second edition_Windows *E_Windows #3^ G%0 =withSer4ice Pac+ or higher_Windows 2000_Windows MP

_*icrosoft 3CPHIP insta!!ed%=Confirm 4ia Start > Settings >Contro! Pane! > #etwor+ >Protoco!s or Configuration%_,0 *8 hard dis+ space%_9A*:YF2 *8 for Windows @(YG *8 for Windows #3 andWindows *EYG *8 for Windows 2000=&2( *8 recommendedY&2( *8 for Windows MP=2, *8 recommended

Computer withand Inte! $(processor

9edat ?ersion %2 or !aterinu$ =Inte! or compati)!e!i)raries with g!i)c ?ersion2%&%&" or !ater using+erne! ?ersions 2%2%&2 or

!ater Note 3he ?P# C!ient does notsupport S*P =mu!tiprocessoror G")it processor +erne!s%

_F2 *8 9am_,0 *8 hard dis+ space

Sun /!traSPA9Ccomputer

F2")it or G")it So!aris+erne! 5S ?ersion 2% or!ater

_ F2 *8 9am_ ,0 *8 hard dis+ space

*acintoshcomputer

*ac 5S M ?ersion &0%2%0 or!ater

,0 *8 hard dis+ space

The .+N Client u""o!t the following Cico .+N de%ice:

_Cisco ?P# F000 Concentrator Series ?ersion F%0 and !ater%

31



_Cisco PIM <irewa!! ?ersion %2%2=&22 or ?ersion %F=&%_isco I5S 9outers ?ersion &2%2=(3 and !aterIf .ou are using Internet E$p!orer use 4ersion ,%0 Ser4ice Pac+ 2 orhigher%

Intallation Note

3he fo!!owing fi!es are inc!uded in this re!ease:

4pnc!ient"win"msi"G%%00%00G@"+@%ip Windows c!ient *SI insta!!er

4pnc!ient"win"is"G%%00%00G,"+@%ip Windows c!ient IS insta!!er

4pnc!ient"darwin"G%%00%00G,"-/I"+@%dmg *ac 5S M insta!!er

4pnc!ient"!inu$"G%%00%00G,"+@%tar%g inu$ pac+age

4pnc!ient"so!aris"G%%00%00G,"+@%tar%J So!aris pac+age

4pnF000"G%&%%)in ?P# F0$$ Concentrator code

4pnF00,"G%&%%)in ?P# F00, Concentrator code

update"G%%00%00G,%ip ?P# C!ient Auto/pdate pac+age

8ecause of p!atform differences the insta!!ation instructions forWindows and non"Windows p!atforms a!so differ%

3he fo!!owing notes are important for users who are upgrading toWindows MP and users who want to downgrade to an ear!ier 4ersion of the ?P#C!ient software%

Insta!!ation #otes " Windows P!atforms

9e!ease G% inc!udes the fo!!owing insta!!ation considerations forWindows users:

Insta!!ing the ?P# C!ient Software /sing Insta!!Shie!d

Insta!!ing the ?P# C!ient software on Windows #3 Windows 2000 orWindows MP with Insta!!Shie!d reuires Administrator pri4i!eges% If .ou donot ha4e Administrator pri4i!eges .ou must ha4e someone who hasAdministrator pri4i!eges insta!! the product for .ou% Note 3he ?P# C!ientInsta!!er does not a!!ow insta!!ations from a networ+ dri4e =CSCe)GFG@0%

Insta!!ing the ?P# C!ient Software /sing the *SI Insta!!er

If .ou are using the *SI insta!!er .ou must ha4e Windows #3")ased

products such as Windows #3 G%0 =with SP Windows 2000 or Windows MP%Insta!!ing with *SI a!so reuires Administrator pri4i!eges%

When insta!!ing the Windows *SI insta!!ation pac+age the user mustmanua!!. uninsta!! the pre4ious ?P# C!ient if it is o!der than 4ersion G%%3he 4ersion G% *SI insta!!er does not detect o!der 4ersions and theinsta!!er wi!! attempt to insta!! )efore a)orting gracefu!!.% 5nce a 4ersionG% *SI pac+age has )een insta!!ed future c!ient 4ersions wi!! )e a)!e todetect the e$isting 4ersion G% insta!!ation and automatica!!. )egin theuninsta!!ation process%

?P# C!ient Insta!!ation /sing Windows Insta!!er =*SI 9euires Windows #3 SP

32



When .ou attempt to insta!! the ?P# C!ient using *SI insta!!=4pnc!ienten%e$e on #3 SPF SPG or SP, the error messages do not indicatethat the ?P# C!ient cannot )e insta!!ed on those operating s.stems )ecausethe. are unsupported% 5nce the errors occur no other messages are disp!a.edand the insta!!ation is a)orted%

When .ou attempt to run 4pnc!ienten%e$e on Windows #3 SPF SPG or SP,.ou see the fo!!owing messages:

OCannot find the fi!e instmsiw%e$e =or one of its components% *a+esure the path and fi!ename are correct and that a!! the reuired !i)rariesare a4ai!a)!e%O"then"

OCannot find the fi!e *SIEMEC =or one of its components% *a+e sure thepath and fi!ename are correct and that a!! the reuired !i)raries area4ai!a)!e%O

3he Windows Insta!!er =*SI can )e insta!!ed on!. on #3 SP so the

error messages .ou see using ear!ier ser4ice pac+s are due to an *SIincompati)i!it. =CSCd.0,0G@%

Insta!!ation #otes " So!aris P!atforms

3he fo!!owing sections descri)e actions .ou must ta+e when insta!!ingthe ?P# C!ient on a So!aris p!atform%

/ninsta!! an 5!der ?P# C!ient If Present on a So!aris P!atform

If .ou ha4e a pre4ious 4ersion of the ?P# C!ient running under So!aris.ou must uninsta!! the o!der ?P# C!ient )efore insta!!ing a new ?P# C!ient%ou are not reuired to uninsta!! an o!d ?P# C!ient if one is presentbefore insta!!ing a new ?P# C!ient for inu$ or *ac 5S M%

Disa)!e the ipfi!ter <irewa!! Rerne! *odu!e 8efore Insta!!ing the ?P# C!ienton a So!aris P!atform

If ha4e an IP firewa!! insta!!ed on .our wor+station the re)oot afterinsta!!ation of the ?P# C!ient ta+es an inordinate amount of time% 3his iscaused ). a conf!ict )etween the 4pnc!ient +erne! modu!e cipsec and theipfi!ter firewa!! modu!e% 3o wor+ around this issue disa)!e the ipfi!terfirewa!! +erne! modu!e )efore .ou insta!! the ?P# C!ient =CSCdw2''(&%

/sing the ?P# C!ient

_3o use the ?P# C!ient .ou need YDirect networ+ connection =ca)!e or DSmodem and networ+ adapterHinterface card or YInterna! or e$terna! modemand_3o connect using a digita! certificate for authentication .ou need adigita! certificate signed ). one of the fo!!owing Certificate Authorities=CAs insta!!ed on .our PC: Y8a!timore 3echno!ogies=www%)a!timoretechno!ogies%com YEntrust 3echno!ogies =www%entrust%com Y#etscape =www%netscape%com Y?erisign Inc% =www%4erisign%com Y*icrosoftCertificate Ser4ices Z Windows 2000 YA digita! certificate stored on a smartcard% 3he ?P# C!ient supports smart cards 4ia the *S CAPI Interface%

33



WIN/OW) ;<<<> )ECUTIR3

AIM:+!otect client machine $' uing Inte!net Connection Fi!ewall,ICF-

Windows 2000 inc!udes a <irewa!! to protect .our s.stem against unwantedO4isitorsO from the Internet = )ut not contro!!ing connections from .ours.stem to the Internet for which .ou wou!d need to insta!! a #on"*icrosoft<irewa!! !i+e JoneA!arm which is configured using the Propertiesof the modem"connection := using the <irewa!! on a A# connection wi!! causenetwor+ access pro)!ems to .our s.stem

In the properties of theInternet Connection :ta): Ad4anced%

ma+e sure that the chec+mar+

is p!aced forthe Internet Connection<irewa!!%

/sing Settings .ou canconfigure the firewa!!%

ta) : Ser4ices

3he !ist of programs whichcou!d run on .ours.stem%8. defau!t no access is

a!!owed from theInternet to .our s.stem to an.of these ser4ices%

/n!ess .ou need to grant suchan accessdo #53 acti4ate an. of theseser4ices%

ta): Securit. ogging

A!!ows to acti4ate a !og"fi!e

34



ta) : IC*P

IC*P =Internet Contro! *essageProtoco! ispart of 3CPHIP the most common

use is thePI#- program to test a networ+connection%

8. defau!t the firewa!! wi!!#53 respond toan. IC*P inc!% PI#- from theInternet%

Ad%anced )etu":In case .ou ha4e the InternetInformation Ser4er=ma.)e inc!uding the <3P"ser4er insta!!ed and .ou!i+e to allow access from the

Internet then .ouneed to p!ace the Chec+"mar+s=.ou are promptedto confirm the s.stem a!!owedto )e accessed

Acti4ate 5# the ser4icewhich peop!eneed to access from the

Internet%

35



ta): IC*P

3o a!!ow peop!e on the Internetto test that theconnection is wor+ing to .our

s.stem .ou shou!da!!ow incoming echo reuests=PI#-"reuests%

Warning: now .our s.stems)ecomes a!so4isi)!e for a!! these O)ad )o.sand gir!sO whichpro)e a!! IP"addresses on theInternet and thentr. to find out which s.stemthe. had found andsome of them ma. tr. to damage

.our s.stem U

36



AIM:

Configu!e TC+*I+ "ac#et filte!

&% C!ic+ )ta!t point to )etting c!ic+ Cont!ol +anel and thendou)!e"c!ic+ Netwo!# and /ial0u" Connection %

2%9ight"c!ic+ the interface on which .ou want to configure in)oundaccess contro! and then c!ic+ +!o"e!tie %

F%In the Com"onent chec#ed a!e ued $' thi connection )o$ c!ic+Inte!net +!otocol ,TC+*I+- and then c!ic+ +!o"e!tie %

G%In the Inte!net +!otocol ,TC+*I+- +!o"e!tie dia!og )o$ c!ic+

Ad%anced %

,% C!ic+ the O"tion ta)%

% C!ic+ TC+*I+ filte!ing and then c!ic+ +!o"e!tie %

'%

Se!ect the Ena$le TC+*I+ Filte!ing ,All ada"te!- chec+ )o$% When.ou se!ect this chec+ )o$ .ou ena)!e fi!tering for a!! adapters

)ut .ou configure the fi!ters on a per"adapter )asis% 3he samefi!ters do not app!. to a!! adapters%

(%

3here are three co!umns with the fo!!owing !a)e!s:TC+ +o!tU/+ +o!tI+ +!otocolIn each co!umn .ou must se!ect either of the fo!!owing options:+e!mit All % If .ou want to permit a!! pac+ets for 3CP or /DPtraffic !ea4e +e!mit All acti4ated%

+e!mit Onl' % If .ou want to a!!ow on!. se!ected 3CP or /DPtraffic c!ic+ +e!mit Onl' c!ic+ Add and then t.pe theappropriate port in the Add Filte! dia!og )o$%

If .ou want to )!oc+ a!! /DP or 3CP traffic c!ic+ +e!mit Onl' )ut do not add an. port num)ers in the U/+ +o!t or TC+ +o!tco!umn% ou cannot )!oc+ /DP or 3CP traffic ). se!ecting +e!mitOnl' for I+ +!otocol and e$c!uding IP protoco!s and &'%

#ote that .ou cannot )!oc+ IC*P messages e4en if .ou se!ect +e!mitOnl' in the I+ +!otocol co!umn and .ou do not inc!ude IP protoco!&%

3CPHIP <i!tering can fi!ter on!. in)ound traffic% 3his feature does notaffect out)ound traffic or response ports that are created to acceptresponses from out)ound reuests% /se IPSec Po!icies or pac+et fi!tering if

.ou reuire more contro! o4er out)ound access%

37



AIM:

Monito!ing I+ Multicat Routing

Command +u!"oe

9outer` m!info hostname 7address1 source-address 7interface1

Luer. a mu!ticast router a)out whichneigh)oring mu!ticast routers arepeering with it%

9outer` mtat sourcedestination1 group1

Disp!a. IP mu!ticast pac+et rate and!oss information%

9outer` mt!ace sourcedestination1group1

3races the path from a source to adestination )ranch for a mu!ticastdistri)ution tree for a gi4en group%

AIM:

To c!eate an I+)ec +olic'

&% /sing L"9ES"W9R"0& in the !eft pane of the **C Conso!e right"c!ic+IP Securit. Po!icies on oca! *achine and then c!ic+ Create IP Securit.Po!ic.% 3he IP Securit. Po!ic. Wiard appears%

2% C!ic+ #e$t%

F% 3.pe Partner as the name of .our po!ic. and c!ic+ #e$t%

G% C!ear the Acti4ate the defau!t response ru!e chec+ )o$ and then c!ic+

#e$t%

,% *a+e sure the Edit Properties chec+ )o$ is se!ected =it is ). defau!tand then c!ic+ <inish%

% In the Properties dia!og )o$ for the po!ic. .ou ha4e 6ust createdensure that /se Add Wiard chec+ )o$ in the !ower"right corner is se!ectedand then c!ic+ Add to start the Securit. 9u!e Wiard%

'% C!ic+ #e$t to proceed through the Securit. 9u!e Wiard which .oustarted at the end of the pre4ious section%

(% Se!ect 3his ru!e does not specif. a tunne! =se!ected ). defau!t and

then c!ic+ #e$t%

@% Se!ect the radio )utton for A!! networ+ connections =se!ected ).defau!t and c!ic+ #e$t%

38



WIN/OW) ;<<<: NETWORK MANAGEMENT

AIM:

C!eation of G!ou" +olic' o$?ect

&% 5pen Acti4e Director. /sers and Computers%

2. In the conso!e tree c!ic+ Ue!%

3. In the Name co!umn in the detai!s pane dou)!e"c!ic+ G!ou" +olic'C!eato! Owne!%

4. In the G!ou" +olic' C!eato! Owne! +!o"e!tie dia!og )o$ c!ic+ the Mem$e! ta)%

5. C!ic+ Add and then dou)!e c!ic+ the name of each user or securit.group to whom .ou want to de!egate creation rights%

6. C!ic+ OK in the )elect Ue!> Contact> o! Com"ute! dia!og )o$ and

then c!ic+ OK in the G!ou" +olic' C!eato! Owne! +!o"e!tie dia!og )o$%

#otes

• 3o start Acti4e Director. /sers and Computers open a 9emote Des+ 3opconnection to either a Windows 2000 domain contro!!er or a mem)erser4er that has Windows 2000 Administration 3oo!s insta!!ed% ou must!og on to the ser4er as a domain administrator in order to comp!etethis procedure%

• 8. defau!t on!. domain administrators enterprise administrators-roup Po!ic. Creator 5wners and the operating s.stem can create new-roup Po!ic. 5)6ects% If the domain administrator wants a

nonadministrator or a group to )e a)!e to create -roup Po!ic. o)6ectsthat user or group can )e added to the -roup Po!ic. Creator 5wnerssecurit. group% When a user who is not an administrator )ut who is amem)er of the -roup Po!ic. Creator 5wners group creates a -roup Po!ic.o)6ect that user )ecomes the creator and owner of the -roup Po!ic.o)6ectN therefore that user can edit the -roup Po!ic. o)6ect% 8eing amem)er of the -roup Po!ic. Creator 5wners group gi4es the user fu!!contro! of on!. those -roup Po!ic. o)6ects that the user creates orthose -roup Po!ic. o)6ects that are e$p!icit!. de!egated to that user%It does not gi4e the nonadministrator user an. additiona! rights o4erother -roup Po!ic. o)6ects for the domainZthese users are not grantedrights o4er -roup Po!ic. o)6ects that the. did not create%

• When an administrator creates a -roup Po!ic. o)6ect the Domain

Administrators group )ecomes the Creator 5wner of the -roup Po!ic.o)6ect%

• When .ou de!egate this tas+ to nonadministrators a!so considerde!egating the a)i!it. to manage the !in+s for a specificorganiationa! unit% 3he reason for this is that ). defau!tnonadministrators cannot manage !in+s and the ina)i!it. to manage!in+s pre4ents them from )eing a)!e to use the Acti4e Director. /sersand Computers snap"in to create a -roup Po!ic. o)6ect%

39



WIN/OW) ;<<< : TROU@1E)=OOTING

AIM:

@ac#u" the !eco%e!' agent Enc!'"ting File )'temEF)- +!i%ate #e':

&% /se 8ac+up or another )ac+up too! to restore a user;s )ac+up 4ersion ofthe encr.pted fi!e or fo!der to the computer where .our fi!e reco4er.certificate and reco4er. +e. are !ocated%

2% 5pen windows E$p!orer%

3. 9ight"c!ic+ the fi!e or fo!der and then c!ic+ +!o"e!tie%

4. 5n the Gene!al ta) c!ic+ Ad%anced %

5. C!ear the Enc!'"t content to ecu!e data chec+ )o$%% *a+e a )ac+up 4ersion of the decr.pted fi!e or fo!der and return the

)ac+up 4ersion to the user%

#otes

• 3o open Windows E$p!orer c!ic+ )ta!t point to All +!og!am point to Acceo!ie and then c!ic+ Window E4"lo!e!%

• ou can return the )ac+up 4ersion of the decr.pted fi!e or fo!der tothe user as an e"mai! attachment on a f!opp. dis+ or on a networ+share%

• ou can a!so ph.sica!!. transport the reco4er. agent;s pri4ate +e. andcertificate import the pri4ate +e. and certificate decr.pt the fi!e

or fo!der and then de!ete the imported pri4ate +e. and certificate%3his procedure e$poses the pri4ate +e. more than the procedure a)o4e)ut does not reuire an. )ac+up or restore operations or fi!etransportation%

• If .ou are the reco4er. agent use the E4"o!t command from Certificatesin *icrosoft *anagement Conso!e =**C to e$port the fi!e reco4er.certificate and pri4ate +e. to a f!opp. dis+% Reep the f!opp. dis+ in asecure !ocation% 3hen if the fi!e reco4er. certificate or pri4ate +e.on .our computer is e4er damaged or de!eted .ou can use the Im"o!tcommand from Certificates in **C to rep!ace the damaged or de!etedcertificate and pri4ate +e. with the ones .ou ha4e )ac+ed up on thef!opp. dis+%

• <or more information a)out using Certificates in **C see 9e!ated

3opics%

40

Operating System Part Solved

Documents

Transcript of Operating System Part Solved