570 likes | 710 Views
Any Questions?. Chapter 2 Administering Server 2003. Lesson 1: The Microsoft Management Console Lesson 2: Managing Computers Remotely with the MMC Lesson 3: Managing Servers with Remote Desktop For Administration Lesson 4: Using Remote Assistance Lesson 5: Terminal Server. Key Ideas.
E N D
Chapter 2 Administering Server 2003 • Lesson 1: The Microsoft Management Console Lesson 2: Managing Computers Remotely with the MMC • Lesson 3: Managing Servers with Remote Desktop For Administration • Lesson 4: Using Remote Assistance Lesson 5: Terminal Server
Key Ideas • Snap-ins • Used to manage servers • Microsoft Management Console (MMC) • Framework for using Snap-ins • Remote Administration • Connect over the network • Remote MMCs • Remote Assistance • For Helping Users with current sessions • Terminal Services • Provide access to an application, more specific than remote desktop Pg 2-1,2
Lesson 1-MMC • Configure an MMC with individual snap-ins • Configure an MMC with multiple snap-ins • Save an MMC in Author or User mode Pg 2-3
Lesson 1-MMC • MMC is the framework • Load Snap-ins to the MMC • Some are included in system • Active Directory Users and Computers Admin Tool • MMC with Active Directory and Users Snap-in • Can Customize • Can load multiple Snap-in to make your “perfect” set Pg 2-3
Snap-ins • Add the management and functionality to the MMC • Stand-Alone • Provided by application developer • Extension • Work with an existing stand-alone • Some can be used as both Pg 2-5
Customizing an MMC • Open a blank MMC • Add the snap in you want • Save the MMC Pg 2-5
MMC Console Modes • Author Mode • Allow full customization • Adding or removing snap-ins • Creating windows • Creating taskpad views and tasks • Viewing portions of the console tree • Changing the options on the console • Saving the console Pg 2-6
MMC Console Modes • User Mode • Can limit functionality • Allows you to build consoles for other admins with limited access Pg 2-6
Practice Pg 2-1,2
Chapter 2 Lesson 2Managing Computer Remotely with the MMC • Construct an MMC to manage a computer remotely Pg 2-9
Chapter 2 Lesson 2Managing Computer Remotely with the MMC • Can change the focus of the MMC by selecting • Connect to • Another Computer • Domain • Domain Controller Pg 2-9
Setting up for Remote Use • Must have proper access to use the MMC remotely • Can use run as or secondary logon • Must open the RPC on windows Firewall • Can configure a Group Policy! Pg 2-9-11
Lesson 3Managing Servers with Remote Desktop for Administration • Configure a server to enable Remote Desktop For Administration • Assign users to the appropriate group to allow them to administer servers remotely • Connect to a server using Remote Desktop For Administration Connection Pg 2-13
Enabling Remote Desktop for Admin • Terminal Services is installed by default • Set up for remote desktop for administration • Two concurrent connections • Terminal Services • Now just for “Application Sharing” Pg 2-13
Default Components Pg 2-14
Enable Remote Desktop • System Properties Control Panel • Remote Tab • Allow Users to Connect Remotely Pg 2-14
Remote Desktop • Remote Desktop client pre-installed on many OS • XP and Server 2003 • Communications on Start Menu • Can also install from CD Pg 2-15
Configuring Remote Desktop • Can be configured from Both Server and Client • Client • Remote Desktop Client-Click Options • Server • Terminal Services Configuration Console Pg 2-15
Remote Desktop Client Pg 2-15
Settings conflict • If there are conflicts between Server and Client Settings • Server supersedes client Pg 2-15
Terminal Services Troubleshooting • Network Failures • Firewall Settings • Port 3389 • Credentials • Admin or remote desktop group • Policy • Check security Policy • Too Many Connections • Check for idle sessions Pg 2-17
Practice • Install Terminal Services and Remote Admin
Lesson 4Using Remote Assistance • Enable a computer to accept requests for Remote Assistance • Use one of the available methods to request and establish a Remote Assistance session Pg 2-21
Remote Assistance • Server 2003 and XP • Allow support personnel to connect to your machine • Chat • View details • Remotely control • Tech Support • Troubleshooting • Training Pg 2-21
Configuring Remote Assistance • Use the remote tab on the system properties control panel Pg 2-22
Configuring Remote Assistance • Use the group policy editor • Load MMC with local or domain GPO • Run gpedit.msc Pg 2-22
Send an invite • Create the invite in the remote assitance help screen • Help and support center • As e-mail • As a file Pg 2-23
Send an invite • Once connection is requested, the helper will get access • Access levels will depend on the settings Pg 2-23
Offering Assistance • Set the Offer Remote Assistance Local Group Policy • On target computer • Set the users who can initiate help without a request • User being helped will see a pop-up box when help is initiated Pg 2-24
Securing Assistance • Invitations • Must have one before connecting • Can limit the time period that they are active • Interactive Connectivity • When expert accepts request for help, user must grant access • Client-Side control • User can stop connection • Remote Control Config • Use group policy to specify specific users • Use remote assistance control panel to limit access Pg 2-25
Firewalls and remote assistance • TCP port 3389 • TCP Port 135 • %WINDIR%\SYSTEM32\Sessmgr.exe • %WINDIR%\PCHealth\HelpCtr\Binaries\Helpsvc.exe • %WINDIR%\PCHealth\HelpCtr\Binaries\Helpctr.exe Pg 2-26
Firewalls and remote assistance • Universal Plug and play • Technology that lets services traverse NAT firewall • Some setups wont work • If non UpNP NAT device, it may fail Pg 2-27
Lesson 5-Terminal Server • Install Terminal Server to support multiuser applications • Deploy the Remote Desktop Connection client • Configure and manage remote desktop sessions • Troubleshoot Terminal Server Pg 2-29
Installing and configuring Terminal Server Environment • Terminal Server Windows Component • Usually not done on domain controllers • Applications • Certain registry keys must be installed differently • Because multiple users will access it • Use Add/Remove software to make sure it works correctly • Use command shell (dos prompt) if necessary Pg 2-30
Terminal Server-Applications • When putting in new applications-Log off users • Use Command line • change logon /disable • Security Settings • Full Security • Protects system files • May not work with older programs • Relaxed Security • Easily to change security roles Pg 2-30
Terminal Server-Applications • Terminal Services Home Folder • Can be configured with User • Location of folder that stores user specific files for applications • Preferences, etc. Pg 2-31
Installing Remote Desktop Client • Built in on XP and 2003 • Terminal Server Licensing • Comes with 120 day license • After this, must have licenses for connections • License Server • Usually not on same server as Terminal Services • Enterprise-1 for whole network • Domain-1 license server per domain Pg 2-32
Managing and Troubleshooting Terminal Server • Points of Admin • Remote Desktop Client • Can configure data redirection (ability to use local resources) • User Experience • Can save the settings in an rdp file Pg 2-33
Connecting to Terminal Server • System checks User Account Properties • Terminal Server User • Active Directory User • User properties will override client properties • Terminal Server Connection Object • RDP-Tcp • Settings here will override the client and users account settings for sessions. Pg 2-33
Connecting to Terminal Server • Group Policy Object can also control connections • Will override other settings • Based on OU to which the GPO is linked • Once connections are established • Manage through Terminal Servers Manager Admin tool Pg 2-34
Terminal Server Config • Computer Level Group Policy Objects • User Level Group Policies • RDP-Tcp connection on terminal Server • User account properties in Active Directory Users and groups Snap-in • Remote Desktop Config Pg 2-34-35