Chapter 3

advertisement
MCITP Guide to Microsoft
Windows Server 2008 Server
Administration (Exam #70-646)
Chapter 3
Configuring the Windows Server 2008
Environment
Learning Objectives
• Use Server Manager and ServerManagerCmd.exe
to manage a server
• Install and remove server roles
• Configure server hardware
• Configure the operating system
• Understand and configure the Registry
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
2
Learning Objectives (cont’d.)
• Use the Security Configuration Wizard to harden a
server
• Install and use Windows PowerShell
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
3
Using Server Manager
• Server Manager
– Consolidates administrative functions
• Roles Summary feature
– Displays log information
• Two panels
– Left panel – Roles, Features, Diagnostics,
Configuration, torage
– Right panel – Server Summary, Roles Summary,
Features Summary, Resources and Support
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
4
Figure 3-1 Server Manager window
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
5
Using Server Manager (cont’d.)
• Actions panel
– Shown when drilling-down into functions
• Activity 3-1: Getting to Know Server Manager
– Objective: Learn how to start and use Server
Manager
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
6
Figure 3-2 Starting Server Manager
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
7
Installing and Removing Server Roles
• Common roles
– File server
– Print server
• Roles change over time
• Activity 3-2: Installing and Removing Two Server
Roles
– Objective: Install and then remove the File Services
and Print Services roles in Windows Server 2008
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
8
Using ServerManagerCmd.exe
• ServerManagerCmd.exe
– Command-line tool for managing server roles
– Manage features to be added/removed
– Run parameters in XML answer file
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
9
Using ServerManagerCmd.exe
(cont’d.)
• Activities supported by ServerManagerCmd.exe:
–
–
–
–
–
–
Install and remove roles or features
Determine installed roles and features
Use whatif option
Restart computer
Specify features to install with role
Use XML-based answer file to install or remove roles
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
10
Using ServerManagerCmd.exe
(cont’d.)
• Executed from command line
– Access Command Prompt window from Administrator
account
– Roles and features identified by IDs
• Activity 3-3: Running ServerManagerCmd.exe
– Objective: Use the ServerManagerCmd.exe
command to install and query server roles
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
11
Using ServerManagerCmd.exe
(cont’d.)
Table 3-1 ServerManagerCmd.exe options
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
12
Using ServerManagerCmd.exe
(cont’d.)
Table 3-2 Major IDs for server roles
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
13
Configuring Server Hardware Devices
• Both Plug and Play and Add Hardware Wizard used
• Hardware includes:
–
–
–
–
–
–
–
Disk drives
Disk controllers
Network adapters
CD/DVD drives
Keyboard
Pointing devices
Monitor
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
14
Plug and Play
• Ability to automatically detect and configure newly
installed hardware devices
• PnP must be
– Built into device
– Enabled in BIOS
– Built into operating system kernel
• Almost universally supported
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
15
Using Control Panel and the Add
Hardware Wizard
• Use Add Hardware Wizard
– Manually launch PnP
– Manually install without PnP
– Troubleshoot problems with existing hardware
• Start from Control Panel
– Control Panel Home vs. Classic View
– In Classic View:
• Double-click Add Hardware applet
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
16
Figure 3-4 Selecting the Add Hardware applet to start the Add
Hardware Wizard
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
17
Using Control Panel and the Add
Hardware Wizard (cont’d.)
• Device Manager
– Resources include interrupt request (IRQ) line, I/O
address, and reserved memory range
– Resource conflicts can occur
– Use Device Manager to check for conflicts and
examine properties
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
18
Using Control Panel and the Add
Hardware Wizard (cont’d.)
– Other uses:
•
•
•
•
•
Verify if installed hardware is working properly
Update device drivers
Disable a device
Uninstall a device
Configure the settings for a device
– Activity 3-4: Resolving a Resource Conflict
• Objective: Use Device Manager to resolve a resource
conflict
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
19
Using Control Panel and the Add
Hardware Wizard (cont’d.)
Figure 3-5 Device Manager
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
20
Using Control Panel and the Add
Hardware Wizard (cont’d.)
• Driver Signing
– Digital signature used to verify a driver
– Warning when driver device not signed
– Unsigned device drivers cannot be loaded in x64
versions
• Using the System File Checker
– Scan system files for integrity
– Activity 3-5: Manually Running the System File
Checker
• Objective: Use the System File Checker to verify
system files
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
21
Using Control Panel and the Add
Hardware Wizard (cont’d.)
Figure 3-6 Running System File Checker
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
22
Using Control Panel and the Add
Hardware Wizard (cont’d.)
• Using Sigverif to Verify System and Critical Files
– Only scans files
– Does not overwrite inappropriate files
– Activity 3-6: Verifying Critical Files for a Signature
• Objective: Use Sigverif to find unsigned files
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
23
Using Control Panel and the Add
Hardware Wizard (cont’d.)
Figure 3-7 Scanning with Sigverif
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
24
Configuring the Operating System
• Configure to:
– Optimize performance
– Meet specific requirements
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
25
Configuring Performance Options
• Basic areas:
– Processor scheduling and memory usage
– Virtual memory
– Memory for network performance
• Configuring Processor Scheduling and Data
Execution Prevention
– Background services
– Programs
– Data Execution Prevention (DEP)
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
26
Configuring Performance Options
– Activity 3-7: Configuring
Processor Scheduling and
DEP
Figure 3-9 Configuring Data
Execution Prevention
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
27
Configuring Performance Options
(cont’d.)
• Configuring Virtual Memory
– Virtual memory
– Paging
– Paging file
• Location
– Activity 3-8: Configuring the Paging File
• Objective: Learn where to configure the initial and
maximum size of the paging file
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
28
Configuring Performance Options
(cont’d.)
Figure 3-10 Configuring virtual memory
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
29
Configuring Performance Options
(cont’d.)
• Configuring Direct Memory Access for Hard Disks
– Transfer modes: Program Input/Output (PIO) and
Direct Memory Access (DMA)
– Activity 3-9: Configuring the DMA Transfer Mode
• Objective: Determine the transfer mode used by a hard
drive and set it to DMA, if necessary
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
30
Configuring Environment Variables
• Tell operating system where to find programs,
allocate memory, and control programs
• Categories
– System environment variables
– User environment variables
• Activity 3-10: Configuring System and Environment
Variables
– Objective: Learn where to configure system and user
environment variables
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
31
Configuring Startup and Recovery
• System startup options:
– Default operating system
– Display list of operating systems
– Display list of recovery options
• System failure options:
– Writing to system log (cannot be disabled)
– Start automatically after failure
– How and where to write debugging information
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
32
Configuring Startup and Recovery
(cont’d.)
• Activity 3-11:
Configuring Startup and
Recovery
– Objective: Configure
startup and recovery
options
Figure 3-12 Configuring a system startup
option
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
33
Configuring Power Options
• Select power plan
• Require wakeup password
• Choose power button function
– Shut down, do nothing, or hibernate
• Create power plan
• When to turn off display
• Activity 3-12: Configuring Power Options
– Objective: Configure the balanced power plan
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
34
Configuring Power Options (cont’d.)
Figure 3-13 Power Options dialog box
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
35
Installing a Protocol
• Microsoft Virtual Network Switch Protocol
– Used when Hyper-V role installed
• Reliable Multicast Protocol
– Used for multimedia transmissions
• Activity 3-13: Installing a Protocol
– Objective: Learn to install a protocol
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
36
Installing a Protocol (cont’d.)
Figure 3-14 Selecting to install a protocol
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
37
Understanding the Windows Server
2008 Registry
• Windows Server 2008 Registry
– Database containing information for operating system
– Examples of data in Registry
• Registry Editor
– Lunched from Start button Run option
– Type regedit32 or regedit
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
38
Understanding the Windows Server
2008 Registry (cont’d.)
Figure 3-15 Registry Editor
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
39
Understanding the Windows Server
2008 Registry (cont’d.)
• Precautions when editing Registry
– Establish group of administrators who can access and
modify
• Remove this permission from other users
– Edit Registry as last resort
– Back up Registry regularly
– Never copy Registry from one computer to another
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
40
Registry Contents
• Hierarchical structure
– Keys
– Subkeys
– Entries
• Root keys (subtrees):
–
–
–
–
–
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_USERS
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
41
HKEY_LOCAL_MACHINE
• Information on every hardware component in the
server
• Subkeys:
– BCD00000000, COMPONENTS, HARDWARE, SAM,
SECURITY, SOFTWARE, and SYSTEM
• Hives
– Set of subkeys with related information
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
42
HKEY_CURRENT_USER
• Contains information about desktop setup
– For account presently logged on to server console
• Example changes:
– Environment parameter governing where application
temporary files are stored
– Delay in the response of the keyboard
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
43
HKEY_USERS
• Contains profile information for each user who has
logged onto the computer
• Each profile listed under root key
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
44
HKEY_CLASSES_ROOT
• Holds data to associate file extensions with
programs
– Used as defaults for all users who log on to Windows
Server 2008
• Can modify for particular user under HKEY_USERS
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
45
HKEY_CURRENT_CONFIG
• Information about the current hardware profile
• Only one default hardware profile on most servers
• Activity 3-14: Using the Registry Editor
– Objective: Practice using the Registry Editor to view
the Registry contents
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
46
Using the Security Configuration
Wizard
• Analyze and configure security settings
• Adjusts security settings to match roles
• Establish security policy using:
– GUI interactive wizard
– Database
– Command-line tool scwcmd
• Activity 3-15: Using SCW to Configure a Security
Policy
– Objective: Create a new security policy
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
47
Using the Security Configuration
Wizard (cont’d.)
Figure 3-18 Creating a new security policy
Courtesy Course Technology/Cengage Learning
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
48
Using the Security Configuration
Wizard (cont’d.)
• Activity 3-16: Using scwcmd
– Objective: View security policy settings using the
scwcmd command-line command
Table 3-3 scwcmd command-line options
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
49
Windows PowerShell
• Script
– File of commands
• cmdlets
– Specialized commands for completing common tasks
in PowerShell
• PowerShell tasks
• Installing PowerShell
• Activity 3-17: Using Windows PowerShell
– Objective: Use traditional Command Prompt
commands and cmdlets in Windows PowerShell
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
50
Summary
• Server Manager
– Tool used to install and remove roles, features, and
other administrative functions
– Command line-version of Server Manager
• ServerManagerCmd.exe
• Tune performance by configuring processor
scheduling, memory use, and virtual memory
• Configure power options
• Control Panel used to install and uninstall protocols
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
51
Summary (cont’d.)
• Registry database
– Holds information for Windows system
– Organized by keys, subkeys, and entries
• Security Configuration Wizard analyzes security
options for installed roles
• Windows PowerShell
– Used to manage server with commands, cmdlets, and
scripts
MCITP Guide to Microsoft Windows Server 2008,
Server Administration (Exam #70-646)
52
Download