620 likes | 748 Views
Windows NT 4 Admin. Windows NT 4 Admin. BASIC ADMINISTRATION ISSUES. NT is a Multi-User System. Default User Accounts The role of the Administrator Passwords The NT password is case sensitive!
E N D
Windows NT 4 Admin. Windows NT 4 Admin.
NT is a Multi-User System • Default User Accounts • The role of the Administrator • Passwords • The NT password is case sensitive! • Unlike Windows 95 a correct user name and password MUST be supplied to gain access to the computer!
Default Accounts • Administration account • Manage security policies • Create, alter, rename or delete user accounts and groups • Manage the hard disk including formatting and partitioning • Manage shared directories and printing settings • Manage system updates • Only used to manage the local computer • This account maybe renamed but NOT deleted! • Guest account • A special account for temporary users • Guest account customization settings are NOT stored when the guest logs out! • Disabled by default
Terminology • User Accounts • The Administrator • Groups • Local groups • Global groups • Profiles • User profiles • Domain Controls • Domain Master Account Database
The Default Group Accounts • Six Local Groups are installed by default • Only manage resources on the local workstation • Each group has predefined rights • Administrator • Backup Operators • Guests • Power Users • Replicator • Users
The User Manager • Program for managing user accounts • New accounts can be created by: • Creating a new accounts from scratch • Copying existing accounts • Each new account name must be unique • NT assigns each new account a Security ID (SID) • When a new account is created you can: • Modify specific information for that account • Assign the account to one or more groups • Set user profile information
Creating New User Accounts • The New User dialog box
Assigning User Accounts to Groups • New User Accounts can be assigned to any group and will inherit all the privileges available to that group
The User Environment Profile • Allows control of the system environment depending on which user logs on to the workstation • The Administrator can: • Set the User Profile Path • Run a login script that is customized to a particular user • Set a home directory location
Copying, Deleting, Renaming and Disabling User Accounts • Make sure that you know how to: • Copy an existing account • Delete an account • Disable (and re-enabling) an account • Rename an account
Modifying Account Policies • The User Manager (NT workstation) • Only applies to the local workstation • Need Administrator level access to change • Administrator accounts can not be locked out! • Control password properties and password lockouts • The User Manager for Domains (NT Server) • Used to manage account profiles in a domain environment
User Rights • User Rights include: • Access this computer from a network • Backup files and directories • Change the system time • Force shutdown from a remote system • Load and unload device drivers • Log on locally • Manage and audit security log • Restore files and directories • Shut down the system • Take ownership of files and other options
Audit Policies • Allows you to track user activity: • The name and action or event • The User name performing an action • The time and date of the action
Security and NT • Four levels of security • WINLOGON (Log on) • Local Security Authority (LSA) • Security Account Manager (SAM) • Security Reference Monitor (SRM)
Network Printers vs. PCs with Printers • You can print to a local printer • You can print to a printer that is connected to another PC on your network • You can print to printers that are directly connected to your network (i.e. not do need to be connected to the network via a PC) • Only certain network printers are supported • Normally require additional protocols, such as DLC • Remember that the DLC protocol is not routable.
Sharing Printers • Make sure that you know how: • To share a local printer • To connect to a shared printer
Configuring a Printer • General • Ports • Scheduling • Sharing • Security • Device Settings
Domain vs. Workgroup Installation • Windows NT supports both the workgroup and domain network model so that resources can be shared within a network
Partitioning Your Disks • Single or multiple partitions? • Partitioning a disk prior to installing Windows NT offers greater flexibility than using the NT Disk Administrator during the installation process
FAT vs. NTFS • FAT dates back to DOS • Introduced in 1981! • NTFS is designed with Windows NT in mind • Better for large disks • Security features built-in • Fault tolerance built-in • A FAT formatted disk can be converted to a NTFS formatted disk (but not the other way around)
Converting FAT to NTFS • Use an Administrator logon access • To convert drive to NTFS: CONVERT D: /FS:NTFS
Creating a Set of Windows NT Boot Disks WIN32.EXE /OX
Hardware and the Hardware Compatibility List • Available: • On the TechNet CD-ROM • From the Microsoft Web site Whoops it’s not on the list!
WINNT and WINNT32 • WINNT • Used to upgrade from a 16 bit environment such as DOS or Windows 3.x • WINNT32 • Used to upgrade from a previous version of Windows NT • Distribution Sharepoint • A central location containing the installation files • May be run from: • A command line • A batch file • Or through the Systems Manager Server • All files are copied to a temporary directory
Network Installation Startup Disks • The problem with installing Windows NT over a network is that you need the workstation PC to be connected to the server from which you will centrally install Windows NT • The classic chicken and the egg type of problem • DOS on it's own will not do the job • What you need to do is to place the minimum number of files on this disk, that will allow connection to a Windows server • You need Windows NT server to do this for you
WINNT & WINNT32 Syntax • WINNT [/s:path_to_source] [/I:inf_file] [/t:drive_letter] [/x] [/b] [/o[x]] [/u:automation_file] [/udf:id, [udf_file]] • WINNT /? Will display detailed syntax
Unattended Installations • Ideal for performing a large number of identical installations without the need for interaction during the installation WINNT.EXE /B /U:UNATTEND.TXT /S:d:\i386
Troubleshooting Issues and Techniques • The Windows NT Boot Process • The Event Viewer • Windows Diagnostics (WinMSD) • The Blue Screen of Death • Service Packs
The NT Boot Process • POST (Power On Self Test) • The MBR (Master Boot Record) is loaded • NTLDR is loaded • The BOOT.INI file is read and an operating menu list is built • NTDETECT.COM reviews the hardware available and informs the NTLDR • NTLDR loads NTOSKRNL
BOOT.INI Switches • Includes: • /NOSERIALMICE • /BASEVIDEO • /CRASHDEBUG • /SOS • /NODEBUG • /MAXMEM • The /SOS switch will display drivers as they are loaded, as opposed to displaying the small dots that you normally see advancing from left to right across the screen
Last Known Good • Boot your NT workstation • During the boot process you will see a message about pressing the Space bar to LastKnownGood • Press the Space bar NOW • Select L from the menu will boot using the Last Known Good configuration
The Emergency Repair Disk! • Useful when Last Know Good does not solve a problem! • Create an Emergency Repair Disk • It can be used to return a system to the state it was in the last time the Emergency Repair Disk was either created or updated • Restores Registry settings and other corrupted NT system files
STOP Recovery Options • Allows you to determine the systems response to serious problems • Action following a STOP error • Write an event to the system log • Send an administrative alert • Write debugging information • Automatically reboot
Removing 'non-responding' Processes • You can use the Task Manager to remove from memory programs that have become unstable
The Event Viewer • Three areas covered: • System Log • Security Log • Application Log • Default log size is 512 Kb • When full, new events over-write old events • There are five types of events • Error • Warning • Information • Audit Success • Audit Feature
Windows NT Diagnostics (WinMSD) • Provides information on: • Services • Resources • Environment • Network • Version • System • Display • Drives • Memory TIP: Try running WINMSD /?from the command line to see lots of useful options!