Chapter 2 ADMINISTERING MICROSOFT WINDOWS SERVER 2003

Manage a Windows Server 2003 system using MMC. Access a remote computer using an MMC console...
Nội dung trích xuất từ tài liệu:
Chapter 2 ADMINISTERING MICROSOFT WINDOWS SERVER 2003 1 Chapter 2 ADMINISTERING MICROSOFT WINDOWS SERVER 2003 Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 2 CHAPTER OVERVIEW • Manage a Windows Server 2003 system using MMC • Access a remote computer using an MMC console • Configure a server to enable Remote Desktop for Administration • Enable a computer to accept requests for Remote Assistance Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 3 MICROSOFT MANAGEMENT CONSOLE (MMC) • Console shell with snap-in (mmc.exe) • Stand-alone • Extension Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 4 MICROSOF T MANAGEMENT CONSOLE MODES Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 5 SET TING CONSOLE MODE OPTIONS • Dictate what users can do to the console. • Do not dictate what users can do with the console. Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 6 MICROSOF T MANAGEMENT CONSOLE (MMC) Scope Pane & Details Pane Console Tree Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 7 USING THE MMC INTERFACE Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 8 USING MMC MENUS Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 9 CREATING CUSTOMIZED MMC CONSOLES • Combines one or more snap-ins or parts of snap-ins in a single console • Eliminates the need to switch between different programs or individual consoles Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 10 CREATING A TASKPAD Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 11 CONNECTING MMC TO REMOTE COMPUTERS • Redirecting an MMC snap-in • Creating a remote console Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 12 MANAGING SERVERS WITH REMOTE DESKTOP FOR ADMINISTRATION • Uses Terminal Services • Allows two concurrent connections • Enables server to be managed “as if you are there” Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 13 ENABLING AND CONFIGURING THE REMOTE DESKTOP SERVER • Access the System Properties page • Start | Control Panel | System • Start | My Computer • Right-mouse button click • Properties Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 14 INSTALLING AND CONFIGURING REMOTE DESKTOP CONNECTION Remote Desktop Connection client software can be installed from the following locations: • The Windows Server 2003 distribution CD • The Systemroot\System32\Clients\Tsclient\Win32 folder Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 15 CONFIGURING REMOTE DESKTOP CLIENT General • Start    Host Profile Display Resolution • All Programs Local Resources Redirection    Audio • Accessories    Disk Drive    Printers • Communications    Serial ports Programs Execution • Remote Desktop Connection Experience    Performance Optimizer Authentication Security    TLS, PKI (Smartcard) Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 16 TERMINAL SERVICES TROUBLESHOOTING • Terminal Services uses TCP and UDP port number 3389. • Users must belong to the Administrators or Remote Desktop Users group. Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 17 SECURING REMOTE DESKTOP • Change the default RDP port 3389 • HKEY_LOCAL_MACHINE\ • System\  CurrentControlSet\  Control\TerminalServer\WinStations\RDP-Tcp\PortNumber Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 18 CONFIGURE TERMINAL SERVICES General Session Layer Security Encryption Level Authentication Logon Credential Settings User Name, Password and Domain Sessions Time-out and Reconnection Environment Programs Execution Remote Control Session Shadowing Client Settings Override Client Resource Redirection Network Adapter Connection Management Permissions User Authorization Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 19 USING REMOTE ASSISTANCE • Allows users to request help from experts. • Experts can view or interact with a user’s session. • Users must issue an invitation to the expert. Chapter 2: ADMINISTERING MICROSOFT WINDOWS SERVER 20 20 ENABLING REMOTE ASSISTANCE • Using Control Panel • Using Group Policy