networking with windows server 2003 part 2 by yapa wijeratne

From Author,

This book is not a scanned or a copyrighted one so you can have anything that you need without any restrictions. Share this book with your friends and whoever needs. I encourage you to make much copies of this book. I typed these notes with a great hurry to complete quickly; so if you find anything “WRONG” or difficult to understand please inform me by E-mail (under the subject please type the title of the book + comment ). I’ll improve them in next edition with your name. Wish you all the best !

Yapa Wijeratne

E-mail : [email protected]

mailto:[email protected]

Networking with Windows Server 2003-Part 2

Yapa Wijeratne (MCP)

What is a Network ?

Interconnection between two or more computers for the purpose of sharing resources.

E.g. Hardwares (DVD-Rom , printer, HDD…)

Softwares (Antivirus , Games )

Informations ( Internet , E-mail )

Networks can be divide using 3 criterias.

Geographical Topology Operating System

1.LAN 1.Bus 1.Desktop O/S

2.WAN 2.Ring Windows (3.0 /98/ NT/2000/ Xp

3.MAN- Metropolitan 3.Star /Vista) ,Linux

4.TAN-Tiny 4.Mesh 2.Server O/S

5.CAN-Campus 5.Hybrid NT server, 2000 Advanced Server

6.SAN-Storage 2000 Data center Server

7.HAN-Home Linux Server,2003 Server

8.PAN-Personel (Standard Edition, Enterprise Edition, Data center Edition, Web Edition )

LAN- Local Area Network.

A network implemented within single geographical location.

WAN-Wide Area Network.

A network implemented among two or more geographical locations.

MAN-Metropolitan Area Network.

Node Link Network

Node

• PC

• Router

• Switch\Hub

Link

• wired

• wireless



A WAN implemented within a single city mostly using fibre optic cables.

TAN –Tiny Area Network.

A LAN implemented within maximum of 5 computers.

CAN- Campus Area Network.

A WAN implemented among universities/ military bases /or schools. Only they can access to

the network.

SAN-Storage Area Network. To storage only. In banks.

HAN-Home Area Network. networking home equipments such as AC , Fridge ,Heater, Mobile

phone ….

PAN- Personal Area Network. Networking people & their equipments in spacecrafts & military

operations.

Topology

Physical arrangement of computers.

1.bus 2.star 3.ring 4.mesh 5.hybrid

BUS Topology

This is a broadcasting method.

The data will be transfer to all the machines at the same time.

This makes more traffic & makes the communication slow.

Use Co-Axial cables.



RING Topology

This is forwarding method. (sends message only to the destination)

The data will be passed to one machine another.

Less traffic makes the communication fast.

Use Co-Axial cables.

STAR Topology-with HUB

This is a broadcasting method. (doesn’t forward message only to the destination)

The data will be passed to the all machines at the same time.

The destination computer will be identified by network computers by matching their IP / MAC

address.

More traffic & slow communication.



STAR Topology-with SWITCH

This is forwarding method.

The data will be passed to destination computer only.

The destination computer will be identified by switch.

The switch keeps IP/MAC address in its temporary memory.

Less traffic makes communication fast.

Cables used in LAN

Co – axial cables

Thin Thick

Resistance 50 Ω 100 Ω

Maximum supporting distance between 2 computers

185 m 200 m / 500 m

Maximum supporting speed 10 Mbps 10 Mbps

Twisted pair cable-TP

Single Twisted pair cable contain 8 cables in the colours of blue ,green , orange ,brown ,white

blue , white green, white orange white brown. There are two types of cables & both support

distance up to 100m among 2 computers.

UTP-Unshielded TP STP-Shielded TP

Good for Indoor connections outdoor connections

EMI-(Electro Magnetic Induction) sensitivity

Yes No (EMIproof)

*Less expensive than STP *inside cables covered by Aluminium foil.

Twisted pair cable categories & data transmitting speed

1.CAT 5 (category 5)-10/100 Mbps



2. CAT 5e (category 5 enhanced )-10/100/1000 Mbps

3. CAT 6 (category 6)-10/100/1000/10,000 Mbps

4. CAT 7 (category 7)-10/100/1000/10,000/10,000+ Mbps

Hub

Hub copies the message & broadcast to the all nodes ;so communication is slow. Two types.

1. Active hub- regenerates signals

2. Passive hub- doesn’t regenerate signals

Switch

It has internal temporary memory & signals are regenerated. Forwarding method makes

communication fast.

Data Transmission

In networks data transmit in different ways.(token, packet) There are three parts in data

packet.

1. Head

2. Body (Message)

3. Tail

When we send a data packet, it travels to the destination and replies that it is successful & if it

can’t reach the destination no replies so we called it a “packet lost”. There are 3 data

transmitting methods.

1. Simplex (in Radio)-only receives

2. Half duplex (in vokey tokey )-sends & receives but one at a time.

3. Duplex (in telephone)- sends & receives in same time.



Installing Windows Server 2003

1) Configuring BIOS setup, partitioning & formatting.

Press F10 or DEL key to go to setup.

Storage> Boot order set CD-ROM as the first boot devise.(This step can be vary by the

computer)

Insert the server CD, select Save & Exit.

Press any key to boot from CD. Enter to continue. Press F8 to agree with license. Press D key

to delete partition & C key to create partition. Select a created partition & Enter to

continue. Select quick format (NTFS) & Enter to restart the computer.

2) Finalize the setting in the GUI.

Click next for Regional Settings & type your name & organization.

Enter the serial key. JB88F-WT2Q3-DPXTT-Y8GHG-7YYQY

Select Per Device Per User option to connect unspecified clients. Type the computer name

& administrators password. Set the date time & time zone. Select Typical for network

settings & select workgroup option.

Take out the CD when finalizing.

IP address (Internet Protocol address)

This is a software address used to identify the computer in the network. This can be assign by

the network administrator. It can be changed any time. Eg: 192.168.10.6

IP address contain four parts. Each part is called “octet” means consist of 8 bits. Therefore IP

address consist of 32 bit value.

1st Octet 2nd Octet 3rd Octet 4th Octet

Bit 8 7 6 5 4 3 2 1

27 26 25 24 23 22 21 20

Value in decimal

128 64 32 16 8 4 2 1

There are 3 IP classes are now in use; Class A, Class B & Class C. IP address contain two parts

NETWORK ID & HOST ID. Network administrator has to decide what type of IP address to be

used. It depend on the number of sub networks & number of hosts in the main network.



Class Number of sub networks Number of hosts(in each sub network)

A less much

B medium medium

C much less

IP range

Private range

Used for unregistered domains. Designed by the network administrator.

Public range

Used for registered domains. We have to buy from ISP (Internet Service Provider)

Class A

Network ID Host ID

Full range Start IP 1. 0. 0. 1

End IP 126. 255. 255. 254

Private range Start IP 10. 0. 0. 1

End IP 10. 255. 255. 254

Subnet mask 255. 0. 0. 0

Class B

Network ID Host ID


End IP 191. 255. 255. 254


End IP 172. 31. 255. 254

Subnet mask 255. 255. 0. 0



Class C

Network ID Host ID


End IP 223. 255. 255. 254


End IP 192. 168. 254. 254

Subnet mask 255. 255. 255. 0

Important

127.0.0.1 called Loop Back IP (localhost) used to verify that TCP/IP is correctly installed & bound

to your network card. If ping 127.0.0.1 fail ; problem is probably your NIC not working properly

& need to reconfigure. If it is older NIC need to configure to use different IRQ resources (in

device manager).

MAC Address- Media Access Control Address

This is a hardware address used to identify the computer in the network. This is assign by the

manufacturer & cannot be changed anytime.

00-50-8B-F5-4F-59

Configuring a “workgroup”

1) Configuring IP Address.

Right click on My Network Places> Properties. Right click on Local Area Connection >

Properties> double click on TCP/IP. Select Assign the following IP Address. Type the IP

Address & click on Subnet Mask to give automatically. OK > OK > Close.

2) Configuring workgroup.

Right click on My Computer> Properties>Computer Name > Change. Type the

Computer Name & the workgroup name. OK > OK for the messages. Click Yes to restart

the computer.

My Network Places>explore> Entire network> Microsoft Window Networks.

Sending messages using NET SEND

Activating message service.

Start> All Programs> Administrative Tools> Services or Start>Run>services.msc



Double click on Messenger & select automatic (so whenever you logon it automatically enable

itself & no need to set manually). Then apply> start > OK.

To send the message to single computer.

Start >Run> type net<space>send<space>computer name<space>message. Then OK.

Eg: net send client1 Hello! Good Morning!

To send the message to the all computers in workgroup.

Start >Run> type net<space>send<space>* <space>message. Then OK.

Eg: net send * Hello! Good Morning!

Sending Console messages

Right click on My Computer> Manage. Right click on Computer Management > All Tasks >

Send Console messages.

Remove your computer name Add> Advanced > Find Now. Pick the computer/s you want to

send the message >OK >OK. Type the message click Send.

Remote Desktop

Activating Remote Desktop

Right click on My Computer> Properties>Remote. Tick Allow users to connect remotely to this

computer> OK.

Accessing remotely

Method 1

Start> All Programs>Accessories > Communication> Remote Desktop Connection.

Type the computer name that you want to access remotely & connect. Type the destination

computer’s Administrator’s user name & password. Click OK.

Using this method including destination computer’s user 2 other users can access at same time

& computer won’t lock to the destination computer’s user.

Hint: Start>Run> type MSTSC

Method 2



Start> All Programs> Administrative Tools> Remote Desktops

*Using this method other users can access at same time & computer will be locked to the

destination computer’s user.

Right click on Remote Desktops> Add new connections> type the computer name>

Administrator’s user name & password> OK

Right click on computer name> New window from here.

Creating a partition on remote computer.

Right click on My Computer> Manage. Right click on Computer Management> Connect to

another computer> browse> add> advanced> Find now.

Pick a computer you want to create a partition >OK> OK.

Double click on Storage. Double click on Disk Management. Right click on Unallocated Space &

select New partition.

Click Next> Primary Partition> type the partition size, assign the drive letter, select quick

format to be performed & click next to finish.

Creating a local user

Right click on My Computer> Manage. Double click on Local users & groups. Right click on

user> new user. Type the user information & the password click create.

Account Lockout Policy

Log on as administrator. Start> All Programs> Administrative Tools> Local Security Policy.

Double click on Account Policies. Double click on Account Lockout Policy. Double click on

Account lockout threshold. Type the number of invalid attempts> Apply> OK> OK.

Account lockout duration- allow you to change the time duration of lockout.

Sharing a resources

Right click on resources (DVD- ROM, data etc) Share & Security> Share this folder> Permission.

Select full control> Apply > OK. To verify this step; My Network Places> Entire Network> Select

your workgroup > Select a sharing drive > Map Network Drive



Network Architecture

1) Workgroup

There is no server to control the network.

Less security & restrictions.

Microsoft recommends only 10 computers in a workgroup.

2) Domain Environment (Server/ Client)

The Server controls the network.

High security & restrictions.

The number of clients depend on the IP class.

Domain Environment

Configuring a domain controller

Select a machine with a Server O/s.

Log on as the administrator & configure the IP address.



Select a proper computer name.

Start >Run>type dcpromo (domain controller promotion)

Click next for the Active Directory installation Wizard.

Next for the O/s compatibility information wizard & select a domain controller for a new

domain. “Domain in a new forest”. Select No. just to install & configure DNS on this computer.

Type a domain name eg: yapa.com

Next for the NetBIOS name. click next for Active Directory Database , SYSVOL folder. Select

default selection for high security. Type the restore mode Administrator’s password. Click next

to configure & insert the server CD to copy DNS.

Finish & restart the computer.

Removing a PDC (Primary Domain Controller)

Step 1: Log in to the PDC as the administrator .

Start >Run>type dcpromo . Click next for the wizard – tick This server is the last domain

controller option. Click next for the directory partitions. Tick Delete all directory partitions.

Type Administrator’s password & click next to continue. Click finish & restart the computer.

Step 2: Removing the DNS.

Start > All programs > Control panel> Add/remove programs> Add/ remove windows

components. Highlight on Network Services> Details. Tick off for DNS>OK>OK>Next.

Step 2: Removing DNS suffix.

Right click on My computer> Properties > Computer Name> Change> More. Delete the DNS

suffix. eg:yapa.com. OK>OK. Yes. restart the computer.

Adding client machine to the PDC

Step 1: configure the IP Address

Eg:

Server Client

IP Address 192.168.1.99 192.168.1.x

Subnet mask 255.255.255.0 255.255.255.0

Default gateway (optional) (optional)

Preferred DNS (optional) 192.168.1.99



Alternate DNS (optional) (optional)

Note: If DNS server is also in the server machine; IP Address of Server machine must be applied

as the Preferred DNS in Client machines.

Step 2: Right click on My computer> Properties > Computer Name> Change> select “member

of domain” option. Type the domain name (yapa.com) OK>OK>for the message & Yes. Restart

the computer.

Creating domain user

Start > Programs > Administrative Tools > Active Directory users & computers.

Double click on the domain name. Right click on New > user. Type the user information &click

next. Type the password , select the password policy & click next.

Configuring a backup domain controller

Log on a machine with a Server O/s configure the IP address.

Select a proper computer name.

Start >Run>type dcpromo (domain controller promotion)

Next for the O/s compatibility information wizard & select a additional domain controller for a

new domain. Type a domain name, administrator user name & password. Click next for the

Domain name. Click next for Active Directory Database , SYSVOL folder. Select default

selection for high security. Type the restore mode Administrator’s password. Finish & restart

the computer.

Removing a BDC (Backup Domain Controller)

Log in to the BDC as the administrator .

Start >Run>type dcpromo . Click next for the wizard –DON’T TICK “This server is the last

domain controller” option. Type Administrator’s password & click next to continue. Click finish

& restart the computer.

Computer restriction for domain user


Double click on user name> account > logon to .Type the computer name that you want to

allow users to logon. Add> apply>OK.



Configuring time restriction for domain user

Double click on user name> account > logon hours .Highlight the time that you want to deny

users to logon. Click log on Deny> apply>OK.

Domain user lockout policy (in server machine)

Start > Programs > Administrative Tools > Domain computer security policy. Double click on

Account policy. Double click on Account lockout policy/ Account lockout threshold. Type the

invalid logins >apply> OK.

Groups(2 types)

1.Security Group Grant permissions & rights to access resources.

2.Distribution Group

To send E-mail for large number of groups.

Print operator group- if you don’t add your user account to Print operator group, you won’t be

able to your user account in server machine.

Group scope

1. Domain Local Scope

a. Exist in all forest & domain functional level.

b. Can add any member from any domain.

c. Access to resources only in same domain.

2. Global Scope

a. Exist in all forest & domain functional level.

b. Can add members only from same domain.

c. Access to resources from any domain.

3. Universal Scope

a. Exist in 2000 native or 2003 server domain functional level.

b. Can add members from any domain.

c. Access to resources from any domain.

Understanding Functional Level

Functional Level is divided into 3 types by considering operating systems of P.D.C. & B.D.C.

P.D.C B.D.C.

2000 Mixed Mode 2003 NT/2000/2003

2000 Native 2003 2000

2003 Server 2003 2003

By default 2000 mixed mode.



Always the O/s of PDC must be a later version than the O/s of BDC. There can be 2 BDCs in a

network but more than 2 may cause problems when removing.

Web hosting

Please follow carefully the IIS chapter in first book. Here I give only few steps but without IIS

chapter you won’t be understand this easily.

Install & configure IIS

Add/remove programs> Windows Component Wizard> Application Server >IIS> common

files>ftp services, IIS ,www

Web hosting

IP address & port settings> All unassigned> port- 80> Host head (leave blank)-because it is used

for search engines.

Hosting two web sites

My Network Places> right click> Properties>Local Area Network> TCP/IP >Advanced> IP

Settings> assign IP address that you want to assign> OK.

Administrative tools>IIS> websites> new> all unassigned must be changed to IP address.

Configuring an alias(Eg: www)

1) Log on to the DNS server (Administrative tools> DNS)

2) Start > Programs > Administrative Tools > DNS. Double click on Forward Lookup Zone.

3) Right click on the domain name. Eg: yapa.com

4) New alias> type the alias name(www) & browse the FQDN (Fully Qualified Domain

Name) Eg: client3.yapa.com

IIS >websites> web(Right click)>New>virtual directory wizard> alias (give your folder name Eg:

YEXE)> browse the path> give permissions> OK

In Internet Explorer type client3/YEXE in address bar.

Hosting FTP sites

Start > Programs > Administrative Tools >IIS. Double click on FTP sites delete the default FTP

sites. New FTP site> Next to the wizard. Type the description > select “do not isolate users”

browse & give the path of the folder. Assign read permission only> next> finish.



Disk Management

There are two type of disks.

1.Basic disks 2.Dynamic Disks

Basic disks Dynamic Disks

partitions Volumes

Availability in O/s any Only in Xp, 2000,2003,Vista

Extending the size Cannot extend the partitions. Can extend the Volumes

Maximum 4 primary or 3 primary & 1 extended partition.

Simple, spanned, stripped, mirror & RAID 5 volumes.

Volume types

Simple Spanned Stripped Mirror RAID 5

Minimum HD 1 2 2 2 3

Support for fault tolerance

No No No Yes Yes

Data writing & reading

slow fast

Equal size from each HD

No Yes Yes Yes

Miscellaneous details about Disk Management

Simple volume

Same as the normal partition.

Can be extended the volume size.

You cannot delete extended volumes only, it removes with simple volume.



Printer Server

Printer can be attached to the local machine or to the network but we have to configure the

ports. If your printer is

Locally attached > local port

Network attached > TCP/IP port

Add Printer> A Network Printer

If you are going to connect over the internet, you must know the domain name printer’s shared

name.

http://server/printers/myprinter/.printer is the address.

Eg: http://yapa.com/printers/myprinter/.printer

Here yapa.com is your domain & .printer is your printer’s shared name.

Miscellaneous details

Start> Printers & faxes> Printer> right click> Properties> Advanced

Spool print documents so program finishes printing faster.

1.Start printing after last page is spooled- print document after whole documents cashed

2.Start printing immediately - print document after current page cashed

http://yapa.com/printers/myprinter/.printer



MS-Exchange Server

We must configure the following components before we install MS-Exchange Server.

Installing Windows components

Start> Control Panel> Add/Remove Programs> Add/Remove Windows Components> highlight

on Application Server> Details > tick ASP.net

highlight on IIS> Details> tick SMTP service & NNTP service. OK> next.

Installing MS-Exchange Server

Insert MS-Exchange Server CD. Click on Exchange Deployment Tool. Click on Install Exchange

System Management Tools Only. Click on Run Setup Now >Next to the wizard> I Agree> select

Typical Settings> create a New Exchange Organization> I Agree>Next> Ok for the notification>

click Finish when it completes.

Activating POP 3 services- Post Office Protocol version 3

Start > Programs > Administrative Tools >Services> double click on MS Exchange POP 3> select

Automatic startup type>Apply> click start> OK.

Creating mailbox for existing user

Right click on the User Name> Exchange Task> Next> Create Mailbox> Next> Finish.

Configuring E-mail for clients (using outlook express)

Log on to client computer as the user.

Start Outlook Express. Type the full name, E-mail Address, & Incoming & Outgoing mail server’s

IP Address. Click next & type the password> finish.

To access in any machine to your account, type in address bar

http://client3/exchange where client3 is your account.

http://client3/exchange



RIS-Remote Installation Service

Requirements for RIS

*NTFS file format *only in Domain *Active DHCP & DNS

Installing RIS

Logon to the PDC as the administrator.

Start> Control Panel> Add/Remove Programs> Add/Remove Windows Components>tick RIS>

insert server 2003 CD when it prompts > Next>click Finish & restart the computer.

Configuring RIS

Start > Programs > Administrative Tools >RIS setup> Next> select a location to copy the RIS

folder.

Tick Respond To The Client Requesting Service. Insert Server 2003 or Xp CD ( it depend on

what image you are going to create) & click next. Keep the default selection & click Next. Click

Done & restart the computer.

Configuring RIS client

Press DEL or F10 to go to setup & enable Network Services Boot. Select LAN or Ethernet control

as first boot device. Save & Exit. Press F12 to boot from network. Enter to continue. Type

Administrator user name & password. Keep default settings Enter to continue. Type your name

& CD key.

RRAS-Routing & Remote Access Server

Configuring RRAS using dial-up connection

Install & configure a modem.

Start > Programs > Administrative Tools >Routing & Remote Access. Right click on the server.

Configure & enable Routing & Remote Access> Next to the wizard.

Remote Access> with in a network (dial up or VPN). Select dial up> select automatically to

assign the IP address for the RAS clients from a DHCP server. Select No. Use routing & remote

access to authenticate.>Finish> OK for the message.

Right click on DHCP relay agent > Properties> type the DHCP server’s IP address.> Add>OK.



Allowing users to remote access.


Double click on the user name> in “dial in” tab > select “allow access”> select Set by caller>

Apply> OK.

Configuring RRAS (in client machines)

Logon to the client machine. Install & configure a modem.

Start > Programs >Accessories> Communication> New Connection Wizard

Next to the wizard > Connect to the network at my workplace> Dial up connections> type the

company name & type the phone number of destination computer.

Select Add shortcut to this connection on my desktop.

Creating Root Hint

(To identify the path in multiple child domains in one domain.)

Start > Programs > Administrative Tools >DNS

Right click on forward lookup zones> New zone>Primary Zone>type . (dot)

For zone name> click next for default selection> Finish.

Installing an Anti-virus to the domain.

This is the procedure of installing Symantec Cooperate Edition to the domain other cooperate

editions’ procedure may vary. But you cannot install desktop editions to the domain in this way.

Step:1

1. Insert the Symantec Cooperate Edition CD.

2. Run Setup.exe > install Symantec antivirus.

3. Deploy antivirus server> Next > Create a server group > type the user name &

password > click OK > Finish.

Step:2

1. Run Setup> install Administrative tools.

2. Install Symantec System Center. Restart the machine when it completes.



Step:3

1. Start > Programs > System Center Console.

2. Double click on System Center System Hierarchy.

3. Right click on the server group> unlock server group> type a user name & password.

4. Right click on the server> make server as primary server> close.

Step:4

Run setup install Symantec antivirus> deploy antivirus clients > click on the server> double click

on the domain name > Add the computers > Finish.

Proxy Server

Install the proxy server software & check the proxy server’s(machine you installed proxy server)

IP Address & http port number.

Logon to the client machine & double click on Internet Explorer> Tools> internet

options>connections>LAN settings. Type the proxy server’s IP Address & http port number.

Click OK.

SLT ADSL Router’s IP Address = 10.0.0.2

SLT internet telephone number = 1250

networking with windows server 2003 part 2 by yapa wijeratne

Technology