Recent articles by Jada Brock-Soldavini.http://www.trcb.com/en-Us60Sat, 26 May 2012 08:07:57 ESTCopyright 2012 Jada Brock-Soldavini, TRCB.com All Right Reservedhttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-managing-and-maintaining-a-microsoft-environment-review-2385.htmManaging and Maintaining a Microsoft Windows Server 2003 Environment Review: We have discussed the many issues surrounding users and groups in a Windows Server 2003 environment. Now that you have completed this chapter, you should feel familiar with the following subjects...Mon, 17 Nov 2008 18:07:02 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-managing-and-maintaining-a-microsoft-environment-review-2385.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-user-authentication-issues-2384.htmTroubleshoot user authentication issues: Microsoft Windows Server 2003 supports various authentication protocols, as well as a key feature known as Stored User Names and Passwords for client access to network resources. The topics are discussed in the following pageMon, 17 Nov 2008 18:06:16 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-user-authentication-issues-2384.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-user-accounts-2376.htmTroubleshoot user accounts. User Account issues can be caused by a number of factors. The following section explains some of the issues and ways to diagnose and solve user account problems. Diagnose and resolve account lockouts When a user's account is locked out, it is because it has breached the password policy implemented in Group PolicyMon, 17 Nov 2008 18:03:55 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-user-accounts-2376.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-manage-user-accounts-2375.htmCreate and manage user accounts: There are a number of containers with Windows Server 2003. Mon, 17 Nov 2008 08:39:51 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-manage-user-accounts-2375.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-creating-a-local-group-2374.htmCreating a Local Group: To create a local group, we are going to use two IADs methods: Create and SetInfo.Mon, 17 Nov 2008 08:38:36 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-creating-a-local-group-2374.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2373.htmCreate and modify groups by using automationIf you have a very large network to control with numerous domain controllers, computers, users, etc., you will be interested to know that you can use a method other than the Active Directory Users and Computers console to control these large environments. With the advent of Windows 2000, a new method became available for network administrators-scripting using Active Directory Service Interface (ADSI). Sun, 16 Nov 2008 20:16:22 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2373.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-entering-the-group-properties-2372.htmEntering the Group Properties:Note that the radio buttons are on the scope and type for the group, and that you can change both scope and type. There are some limitations, however. If the scope of the group is Universal, then you will be able to immediately change to any of the three scopes. On the other hand, if the scope you wish to change is either Domain Local or Global, then you will at first only be able to change to UniversaSun, 16 Nov 2008 20:03:03 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-entering-the-group-properties-2372.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/window-server-2003-create-manage-computer-accounts-in-active-directory-envir-2371.htmCreate Manage Computer Accounts in Active Directory Environments: Computer accounts are unique in the Windows Server 2003 domain and are used by Windows Server 2003 to allow users to login to the domain and authenticate, as well as for auditing the use of network resourcesSun, 16 Nov 2008 19:54:15 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/window-server-2003-create-manage-computer-accounts-in-active-directory-envir-2371.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-mandatory-user-profile-2370.htmMandatory user profiles :This is a roaming profile (stored server side) that allows only the Administrator the capability of making changes. If a user makes changes to this profile, they will be lost once the computer has been rebootedSun, 16 Nov 2008 19:53:18 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-mandatory-user-profile-2370.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-users-computers-and-groups-2369.htmUsers, Computers, and Groups : Managing Users, Computers and Groups in Windows Server 2003 can be performed by using built-in consoles and command line utilities. The following chapter will give you insight on how to manage these administrative tasks within your organizationSun, 16 Nov 2008 19:52:45 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-users-computers-and-groups-2369.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-managing-maintaining-microsoft-environment-review-questions-2368.htmwindows server 2003 managing and maintaining a microsoft envir review questions:You want to ensure that your clients respond to your Terminal Server's requests for security. What steps do you need to takeSun, 16 Nov 2008 14:26:12 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-managing-maintaining-microsoft-environment-review-questions-2368.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-terminal-service-2367.htmTroubleshoot Terminal Services: Terminal Services allow Administrators the ability to gain remote access to a Windows Client computer. Terminal Server Services can also be used by Network Administrators to run applications from a single server. Multiple client machines can access the application on the Terminal Server instead of having the application loaded individually on each machine. Clients can run programs, save files, and use network resources as if they were sitting at that machine. Sun, 16 Nov 2008 14:24:32 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-terminal-service-2367.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003the-default-security-log-settings-2360.htmThe Default Security Log settings in Windows Server 2003.The default options on the Security Log are:Display Name - The default display name is Security. You do have the option to change this if you wish.Sun, 16 Nov 2008 13:04:24 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003the-default-security-log-settings-2360.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-completing-the-sharing-wizard-2356.htmCompleting the Sharing Wizard: The last screen will appear stating that Sharing was Successful displays the status of the share and the summary of the share properties. The option to add another share is also available. If you select this option, then Close, the Share Wizard will start over again giving you the option to add more shares. Sat, 15 Nov 2008 20:28:06 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-completing-the-sharing-wizard-2356.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-the-advanced-option-folder-security-2359.htmThe Advanced Option (Folder Security)NOTE: Typically the Allow permission will always be overridden by the Deny permission unless the folder or file inherits conflicting settings from different parents. When this occurs, the setting inheritedSat, 15 Nov 2008 16:36:22 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-the-advanced-option-folder-security-2359.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-configure-access-to-shared-folders-2355.htmConfigure access to shared foldersAdministrators always face the arduous task of assigning access to folders that are on the network. There are three basic ways that you can assign permissions to folders in Windows Server 2003. Using theSat, 15 Nov 2008 16:35:48 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-configure-access-to-shared-folders-2355.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-access-to-resources-2354.htmAccess to Resources Introduction: Information Technology personnel working with Windows Server 2003 networks always face the task of assigning and maintaining access to network files and folders. The following chapter will show you how to configure shared folder access, manage shared folder permissions, troubleshoot Terminal Service error messagesSat, 15 Nov 2008 16:34:59 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-access-to-resources-2354.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-users-computers-and-groups-review-2347.htmwe have discussed the many issues surrounding users and groups in a Windows Server 2003 environment. Now that you have completed this chapter, you should feel familiar with the following subjectsFri, 14 Nov 2008 17:05:23 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-users-computers-and-groups-review-2347.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/troubleshoot-user-authentication-issues-2346.htmTroubleshoot user authentication issuesMicrosoft Windows Server 2003 supports various authentication protocols, as well as a key feature known as Stored User Names and Passwords for client access to network resources. The topics are discussed in the following pagesFri, 14 Nov 2008 17:04:19 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/troubleshoot-user-authentication-issues-2346.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-computer-accounts-2345.htmTroubleshoot computer accounts : The Active Directory snap-in can be used to assist you with computer account problems. Diagnose and resolve issues related to computer accounts by using the Active Directory Users and Computers MMC snap-inFri, 14 Nov 2008 17:03:00 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-troubleshoot-computer-accounts-2345.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-user-accounts-by-using-automation-2343.htmCreate and modify user accounts by using automation: We already covered the basics of automation in section 2.3.5-Create and modify groups by using automation. Let's just take a quick look at how automation can be used to create and modify user accounts.Fri, 14 Nov 2008 14:01:01 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-user-accounts-by-using-automation-2343.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-moving-a-group-within-a-domain-2336.htmMoving a Group within a DomainScript 2.16 shows an example of the "MoveHere" method in action is below. In this code sample, the group account is being moved from the IT OU to the Visitors container. You should note that the namespace remains the same.Fri, 14 Nov 2008 12:56:56 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-moving-a-group-within-a-domain-2336.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-creating-a-local-group-2326.htmCreating a Local Group: To create a local group, we are going to use two IADs methods: "Create" and "SetInfo." When we call the Create method, it is actually the method of the group parent object-in this case, the object representing the computer. The syntax is shown in the following example: Set objGroup = objComputer.Create("group", "GroupName")Fri, 14 Nov 2008 12:45:40 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-creating-a-local-group-2326.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2325.htmCreate and modify groups by using automationIf you have a very large network to control with numerous domain controllers, computers, users, etc., you will be interested to know that you can use a method other than the Active Directory Users and Computers console to control these large environments. With the advent of Windows 2000, a new method became available for network administrators-scripting using Active Directory Service Interface (ADSI). Fri, 14 Nov 2008 12:13:39 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2325.htmTRCB.comComputers and Technology / Windows Server 2003 http://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2261.htmCreate and modify groups by using automationIf you have a very large network to control with numerous domain controllers, computers, users, etc.Thu, 13 Nov 2008 20:57:41 ESThttp://www.trcb.com/computers-and-technology/windows-server-2003/windows-server-2003-create-and-modify-groups-by-using-automation-2261.htmTRCB.comComputers and Technology / Windows Server 2003