quan ly tap tin trong winserver 2008

2010

ICT24H.NET ICT24H TEAM

[QUN L TP TIN TRONG WINDOWS SERVER 2008] Ti liu c thc hin bi nhm ICT24H

ICT VIETNAM COMMUNITY ICT24H.NET

I C T 2 4 H . N E T

Page 1

C rt nhiu loi ti liu, t nhng bng bo co ti chnh, nhng k hoch kinh doanh cho n nhng

bng thuyt trnh bo co v bn hng phi c chia s trn mng ca bn trong khi n vn cn cha

c an ton t nhng truy cp cha c chng thc n. Windows Server 2008 cung cp cho bn

cng ngh cho php bn c th bo mt cng nh ti liu ca bn lun trng thi n nh.

kim sot truy cp, s dng NTFS permission v Encrypting File System (EFS). cung cp ti liu

thm cho cc phng ban, bn c th to mt vng khng gian Distributed File System (DFS) v s dng

chc nng reaplication (nhn bn) d sao chp tp tin gia cc server. Bn c th s dng quota gii

hn vic lu tr trn cng. Vi chc nng shadow copy and backup cho php bn c th khi phc li

d liu b hng. Trong chng ny, bn c th hc c cch s dng nhng cng ngh trn v c

tm hiu nhng tnh nng trong dch v File Services trong Windows Server 2008.

Ch

Cu hnh mt File server.

Cu hnh Distributed File System (DFS)

Cu hnh dch v shadow copy.

Cu hnh sao lu v khi phc.

Qun l quota cng.

Nh ng bi h

Bi hc 1: Vn v qun l bo mt cc tp tin.

Bi hc 2: Th mc chia s.

Bi hc 3: Sao lu v khi phc tp tin.

c khi b u

hon tt nhng bi hc trong chng ny, bn nn thc hin cc cng vic sau:

2 my tnh ci t Windows Server 2008

Nng cp ln Domain Controller

Ci t role File Service trong my tnh chy Windows Server 2008

Tn server l Server1 v domain l ict24h.net. Server phi c ti thiu 2 a thc hin vic

sao lu t a ny sang a kia.

Tn server cn li l Server2 v c join vo domain ict24h.net.

Bi h c 1: V qu n l b o m t cc t p tin

Windows Server 2008 l phin bn c s dng nhiu nht trong cc doanh nghip, cung cp cho bn

2 cng ngh kim sot truy cp cc tp tin v th mc, bao gm NTFS file permission v Encrypting

File System.


I C T 2 4 H . N E T

Page 2

Sau bi hc, bn c th: S dng NTFS file permission kim sot truy cp n cc tp tin v th mc.

S dng EFS bo v cc tp tin t nhng hnh vi xm nhp.

NTFS File Permission

NTFS file permission xc nh ngi dng no c th xem hoc cp nht c cc tp tin. V d bn s

dng NTFS file permission cho php phng qun l nhn s c truy cp vo tp tin cha cc thng tin

l lch ca nhn vin trong khi khng mt nhn vin no phng khc c th truy cp n nhng tp

tin ny.

Mc nh NTFS file permission c s dng cho ngi dng v cc th mc trong h thng. Nhng mc

nh ny dnh cho 3 kiu tp tin sau:

User files : Nhng ngi dng c ton quyn kim sot i vi tp tin ca h. Nhng qun tr

vin cng c ton quyn kim sot. Nhng ngi dng khc ngoi tr qun tr vin th khng th

c hoc ghi ln nhng tp tin .

System files : Ngi dng c th c, nhng khng th ghi. Nhng tp tin ny nm trong th

mc h thng %SystemRoot% v cc th mc con trong .

Program files : ging nh permission trong cc tp tin h thng, lu tr trong th mc

%ProgramFIles% ,cho php ngi dng chy cc ng dng v ch cho php qun tr vin ci t

ng dng. Nhng ngi dng c quyn c v qun tr vin c ton quyn kim sot.

Thm vo , cng c nhng th mc mi c to ra a h thng v c gn ton quyn kim

sot i vi qun tr vin, ngi dng ch c th xem.

Trn File server, bn cn gn quyn cho nhm ca ngi dng cho php h cng tc lm vic cng

nhau. V d bn c th to mt th mc cho tt c nhn vin thuc nhm Marketing c c v cp

nht nhng nhng nhn vin bn ngoi nhm ny khng c quyn truy cp. Qun tr vin c th gn cho

ngi dng hoc nhm mt s quyn hn trn tp tin hoc th mc :

List Folder Content : ngi dng c th m c th mc nhng khng m c cc tp tin

trong .

Read : ngi dng c th xem c ni dung trong mt th mc v m c cc tp tin trong

. Nu ngi dng ch c quyn Read m khng c quyn Read & Execute th h cng s khng

th thc thi c tp tin.

Read & Execute : ngoi quyn Read nh trn, quyn ny cho php ngi dng c th chy

c cc ng dng, cc tp tin.

Write : ngi dng c th to nhng tp tin trong mt th mc nhng khng th xem c

chng. Quyn ny tht s hu ch nu to mt th mc v ngi dng c th a cc tp tin

ln th mc ny v khng c quyn truy cp vo cc tp tin ca ngi khc cho d h thy tp

tin .

Modify : nhng ngi dng c th xem, chnh sa v xa tp tin hoc th mc.

Full Controll : ngi dng c quyn ny c th thc hin bt c thao tc no trn tp tin hoc

th mc, bao gm vic to, xa v thm ch l sa c quyn i vi nhng tp tin v th mc.


I C T 2 4 H . N E T

Page 3

bo v mt file hoc th mc vi NTFS, lm theo cc bc sau:

1. M Windows Explorer .

2. R-click vo mt tp tin hoc th mc, sau chn Properties .

3. Click vo tab Security .

4. Click Edit . Hp thoi Permission hin th.

5. Nu ngi dng m bn mun cu hnh truy cp khng hin th trong danh sch Group or user

names bn c th click Add , sau nhp tn ti khon v click OK.

6. V d bn mun cho ngi dng c tn Guest ch c php m th mc Marketing nhng

khng c php m cc tp tin ti liu trong . Bn nh du chn vo List folder contents

danh sch Permission for Guests .

7. Bn c th thc hin li bc 5 v 6 cho nhng ngi dng khc.

8. Click OK hai ln hon tt.

Nu bn cu hnh Full Control cho mt ngi dng trong nhm no nhng li hy quyn Full Control i vi nhm th ngi dng cng khng c quyn Full Control. V d, bn l nhn vin thuc

nhm Marketing, c qun tr vin cu hnh Full Control. Tuy nhin nu qun tr vin hy quyn Full Control i vi nhm Marketing th bn s mt quyn Full Control.

Thm vo , c hn 12 quyn c bit bn gn cho mt ngi dng hoc mt nhm. gn quyn

c bit, click Advance tab Security .


I C T 2 4 H . N E T

Page 4

Bn c th cu hnh NTFS file permission bng dng lnh, s dng lnh icacls. xem y hng

dn v lnh ny bn c th g lnh

icacls /?

NTFS file permission s dng c khi ngi dng ng nhp my tnh ca h hay truy cp th mc

thng qua mng.

Encrypting File System

NTFS cung cp phng thc bo v cc tp tin v th mc khi Windows ang chy. Tuy nhin, mt

hacker c th truy cp n my tnh ca bn v bng nhng k thut khai thc, thm nhp, hacker s c

c quyn Full Control.

EFS bo v cc tp tin v th mc ca bn bng cch m ha chng trn a. Nu hacker c th xm

nhp vo my tnh d m tp tin th hacker buc phi bit mt m c th chng thc trc khi m

tp tin.

EFS h tr t phin bn Windows 2000 tr i.

C u hnh b o v t c v i EFS

bo v mt tp tin v th mc vi EFS, thc hin cc bc sau:


2. R-lick vo tp tin hoc th mc sau chn Properties .

3. Trn tab General , click Advanced .

4. nh du chn Encrypt contents to secure data .

5. Click OK 2 ln.

Nu bn m ha mt th mc, Windows s t ng m ha tt c cc tp tin mi trong th mc .

ln m ha mt th mc hay tp tin u tin, Windows s nhc bn sao lu key m ha.


I C T 2 4 H . N E T

Page 5

Chia s c m ha b ng EFS

Nu bn mun chia s cc file c m ha bng EFS cho nhng ngi dng khc, bn cn thm cc

iu kin chng thc vo tp tin. Bn khng cn thc hin nhng bc chia s tp tin thng qua mng;

EFS ch c tc dng vi nhng tp tin c truy cp trn my tnh ni b v Windows t ng gii m

nhng tp tin ny trc khi chia s chng.

chia s cc tp tin c m ha EFS, thc hin cc bc sau:

1. M ca s Properties trn file c m ha.

2. Trn tab General , click Advance d.

3. Click Detail .

4. Click Add .

5. Chn ngi dng m bn mun gn quyn truy cp, sau click OK.

6. Click OK 3 ln v ng tt c cc hp thoi.

C u hnh EFS s d ng Group Policy

Ngi dng c th chn vic m ha EFS cho tp tin hoc th mc ca h. Tuy nhin trn thc t, hu

ht ngi dng khng nhn thc c vic m ha m s khng s dng EFS. V th bn nn s dung

Group Policy m bo cc my tnh thuc domain c cu hnh bo mt nhm p ng nhu cu an

ton thng tin trong doanh nghip.

Vi cng c Group Policy Management Editor , bn c th cu hnh EFS bng cch r-click vo

Computer Configuration > Policies > Windows Settings > Security Settings > Public Key

Policies > Encrypting File System v chn Properties m hp thoi Encrypting File System

Properties .


I C T 2 4 H . N E T

Page 6

File Encryption using Encrypting File System (EFS): mc nh, EFS c kch hot. Nu

bn chn , nhng ngi dng s khng th m ha tp tin bng EFS.

: ty chn ny cho php t ng m

ha th mc Document ca ngi dng. Mc d mt s th mc gm c nhng thng tin b mt,

m ha th mc Document nng co tnh bo mt

EFS bo v cc tp tin ngay c khi h iu hnh khng hot ng. V th, nu mt ai ly trm laptop

ca bn th h cng khng th truy cp vo tp tin dc m ha bi EFS nu nh ti khon cha

c ng nhp vo. Nu bn bt EFS, bn nn cu hnh mn hnh desktop ca bn t ng kha trong

vi pht nu khng s dng.

Require a smart card for EFS : nh du chn vo y hn ch vic s dng phn mm

chng thc cho EFS. Nu ngi dng c smart card v bn yu cu ngi dng ny a th

smart card truy cp tp tin c m ha.

Create caching -capable user key from smart card : nu nh du chn v cc ty chn

trc cng c nh du, ngi dng ch cn a th smart card ln u tin khi h truy cp

vo cc tp tin c m ha. Nu v hiu ha ty chn ny, smart card phi lun c s

dng mi khi truy cp tp tin.

Enable pagefile encr yption : m ha cc trang tp tin. Windows s dng cc trang tp tin

lu tr cc bn sao chp d liu c lu tr b nh v bao gm c nhng bn sao chp

tp tin c m ha EFS. Tuy nhin bn sao chp cc tp tin m ha bng EFS ny li khng

c m ha, iu ny c th khin hacker c th tm ra nhng trang tp tin nu nh ty chn

ny b v hiu ha.

Display key backup notifications when user key is created or changed : nu nh du

chn, Windows s nhc ngi dng sao lu key EFS mi khi key m ha c to hoc thay i.

Allow EFS to generate seft -signed certificate when a certification authority is not

avaiable : nu v hiu ha ty chn ny, cc my client cn phi lin h chng thc ln u

tin khi mt tp tin c m ha. y c th ngn chn ngi dng nu nh h t kt ni

mng khi bt EFS ln u tin. cho php EFS tm c mt chng thc t mt CA ngoi

tr vic t ng chng thc, bn nn cu hnh mt CA v kch hot ch t ng np. Bi thc

hnh s hng dn bn chi tit v vn ny.

Thm vo , bn nn xem xt v cu hnh cc ty chn sau:

Computer configuration > Policies > Administrative Templates > Network > Offline

Files > Encrypt the offline files cache . Cho php m ha Offline Files. Bn s c tm hiu

Offline Files bi hc th 2.

Computer Configuration > Policies > Administrative Templates > Windows

Components > Search > Allow indexing of encrypted files : nu bn cho hin th cc tp

tin c m ha, k tn cng c th thy ni dung ca tp tin m ha . V hiu ha ty

chn ny ngn chn ngi dng tm kim nhng tp tin ny.

C u hnh Data Recovery Agent khi ph c key EFS

Mt tp tin c m ha s khng th truy cp c nu nh khng c key, ngay c qun tr vin h

thng v nu mt key, th tp tin ny s khng c gii m m ra. V th bn cn phi khi phc tp

tin m ha, EFS h tr DRA. DRA c th gii m mt tp tin c m ha. Trong Active Directory, bn


I C T 2 4 H . N E T

Page 7

c th s dng Group Policy cu hnh mt hoc nhiu ti khon ngi dng nh DRA cho ton doanh

nghip. cu hnh DRA, thc hin cc bc sau:

1. Ci t chng thc mt CA. V d, bn c th ci t role Active Directory Certificate Services.

2. To mt ti khon ngi dng thc hin DRA.

3. M Group Policy Object bng cng c Group Policy Management Editor .

4. R-click vo Computer Configuration > Policies > Windows Settings > Security Settings

> Public Key P olicies > Encrypting File System , sau chn Create Data Recovery

Agent . Group Policy Management Editor to mt tp tin khi phc ly li chng thc t ti

khon DRA.

Th c hnh: M ha v khi ph c t p tin

Trong bi thc hnh, bn to 2 ti khon: mt ti khon s m ha tp tin vi EFS v DRA s truy cp

tp tin m ha ny. Sau bn s m ha mt tp tin, xc nhn ti khon khng th truy cp c tp

tin ny. Cui cng s dng DRA khi phc tp tin c m ha ny.

Bi th c hnh 1: C u hnh m t D RA

1. Ci t role Active Directory Certificate Services trn DC.

2. To ti khon c tn EFSUser v a vo nhm Domain Admin c th ng nhp vo DC. Bn

s dng ti khon ny to v m ha mt tp tin.

3. To mt ti khon c tn DRA v a vo nhm Domain Admin. ng nhp bng ti khon DRA.

4. Trn Server Manager , r-click Features > Group Policy Management > Forest:ict24h.net

> Domains > ict24h.net > Default Domain Policy v chn Edit .

5. Click Computer Configuration > Policies > Windows Settings > Security Se ttings v

chn Public Key Policies . Ti khung chi tit, double click vo Certificate Services Client

Auto -Enrollment . Thit lp Enable cho Configuration Model , sau click OK.

6. R-click vo Computer Configuration > Poicies > Windows Settings > Security Settings

> Public Key Policies > Encrypting File System v chn Create Data Recovery Agent .

Bi th c hnh 2: M ha m t t p tin

Trong bi thc hnh ny, bn s dng ti khon mi to l EFSUser to mt tp tin dng text

1. Trn Server1 , ng nhp bng ti khon EFSUser.

2. Click Start v chn Document .

3. Trong ca s Document , r-lick vo Documents v chn Properties .

4. Trn tab General , click Advance . nh du chn Encrypt contents to secure data , sau

click OK 3 ln.

5. M ti liu m ha v thm on ch Hello ict24h.net .

Bi th c hnh 3: Th truy c p m t t c m ha

Trong bi thc hnh ny, bn s dng ti khon Administrator (cha c cu hnh nh mt DRA) v gi

lp mt k tn cng th truy cp vo mt tp tin m mt ngi dng khc m ha.


I C T 2 4 H . N E T

Page 8

1. Trn Server1 , ng nhp bng ti khon Administrator . Ti khon ny c quyn trn

Server1 nhng khng c cu hnh DRA.

2. Click Start , chn Computer .

3. Ti ca s Computer , m C:\Users\EFSUser\Document.

4. Double click v Encrypted document . Mt thng bo hin th dng ch Access is denied

error . Bn cng s nhn c thng bo tng t thm ch bn ci li h iu hnh hoc kt

ni n cng t mt my tnh khc.

Bi th c hnh 4: Khi ph c m t t c m ha

Trong bi thc hnh ny, bn s dng ti khon DRA truy cp tp tin c m ha, sau xa b

m ha t tp tin nhng ngi dng khc c th truy cp c.

1. Trn Server1 , ng nhp bng ti khon DRA. Ti khon ny c cu hnh DRA.

2. Click Start , chn Computer .

3. Trong ca s Computer , m C:\Users\EFSUser\Documents. Hp thoi UAC hin th.

4. Double click vo Encrypted document khung Detail . Bn s nhn c thng bo v c th

truy cp c tp tin.

5. Ti ca s Windows Explorer , r-click vo tp tin c m ha v chn Properties . Trn

tab General , click Advance d. B chn dng Encrypt contents to secure data , sau click

OK 2 ln. Ti khon DRA xa m ha, co php cc ti khon khc c th truy cp vo nhng

tp tin m ha trc .

Tm t t bi h c

NTFS file permission kim sot truy cp cc tp tin khi Windows ang chy, cho d ngi

dng c truy cp tp tin t my tnh ca h hay thng qua mng i chng na. NTFS file

permission cho php bn c th gn cho ngi dng v nhm c cc quyn xem, ghi hoc

ton quyn.

EFS m ha nhng tp tin, gip bn bo v chng khi Windows khng lm vic. Mc d s m

ha cung cp phng thc bo mt kh mnh, th im yu ch nu ngi dng qun key h

khng th truy cp c tp tin m ha. bo v tt hn, bn c th s dng Active

Directory Group Policyt cu hnh DRA cho php khi phc li key m ha khi b qun.

Tr c nghi m

1. Bn to mt th mc c tn Marketing trn my tnh c tn File Server v cu hnh NTFS

permission gn quyn Read cho nhm Domain User v quyn Modify cho nhm Marketing. Bn

chia s th mc v gn quyn Read cho nhm Everyone. Nam - mt ti khon thuc c nhm

Marketing v nhm Domain Users ng nhp vo my tnh FileServer truy cp vo th mc

Marketing. Nam c nhng quyn hn no?

A. Khng c quyn truy cp

B. Read

C. Write

D. Full Control


I C T 2 4 H . N E T

Page 9

2. Bn to mt th mc v c bo v bng EFS bao gm c mt tp tin c chia s qua mng.

Bn chia s th mc ny v s dng NTFS, cho php ngi dng c th m tp tin. Bn nn lm

g cho php ngi dng truy cp vo tp tin c m ha m khng gim i tnh bo mt?

A. R-click vo tp tin, sau chn Properties . Trn tab Security , thm ti khon ngi

dng.

B. R-click vo tp tin, sau chn Properties . Trn tab General , click Advanced . Click

Details , sau thm ti khon ngi dng.

C. R-click vo tp tin, sau chn Properties . Trn tab General , click Advanced . B

chn dng Encrypt contents to secure data .

D. Khng lm g c.

Bi h c 2: Chia s c

Mt trong nhng phng php cng tc ph bin nht l chia s cc ti liu trong nhng th mc chia

s. Nhng th mc chia s ny cho php bt c ngi dng no c th truy cp n nu trong cng

mi trng mng. Cc th mc chia s cho php ti liu c tp trung ha v nhn vin c th d dng

qun l chng nu nh h mun chia s chng n hng nghn my tnh client.

Dch v File Services trong Windows Server 2008 cung cp cho bn nhng tnh nng mnh trong vic

chia s th mc v qun l cc tp tin. Vi s ci tin v quota, Windows c th thng bo cho ngi

dng v cc qun tr vin nu nh ngi dng s dng vt mc dung lng cho php. DFS cung cp

cho bn kh nng tp trung ha cu trc th mc chia s t nhiu my tnh khc nhau v t ng nhn

bn cc tp tin trong cc th mc. Offline Files t ng sao chp nhng tp tin chia s n cc thit b

my tnh cm tay cho php ngi dng c th truy cp n nhng tp tin ny ngay c khi h t kt

ni mng.

Sau bi h c, b n s c: Ci t File Services

S dng quota thng bo n bn khi ngi dng s dng vt qu mc dung lng cho php.

Chia s th mc thng qua mng.

S dng DFS to mt vng khng gian chia s th mc trn nhiu server.

S dng Offline File cho php ngi dng c th truy cp n tp tn v th mc ngay c khi

h b t kt ni mng.

Th ng cho bi h c: 55 pht

t File Services

Windows Server 2008 c th chia s nhng th mc m khng cn bt c role no. Tuy nhin, vic ci

t dch v File Services cho bn nhng cng c qun l hu dng, gip bn c th lm vic vi DFS, cu

hnh quota, to cc bn bo co lu tr v nhng tnh nng khc. ci t File Services, thc hin theo

cc bc sau:

1. Trn Server Manager , r-lick Roles > Add Role .

2. Trn trang Before you begin , click Next .

3. Trn trang Server Roles , nh du chn vo File Services . Click Next .

4. Trn trang File Services , click Next .


I C T 2 4 H . N E T

Page 10

5. Trn trang Select role services, chn cc role sau:

File Server : mc d n khng cn thit cho vic chia s tp tin, nhng khi thm role

ny vo s cho php bn s dng cng c Share and Storage management.

Distributed File System : cho php chia s tp tin bng cch s dng vng khng gian

DFS v nhn bn cc tp tin trn DFS server. Nu bn chn dch v ny, h thng s

hin th khung cu hnh vng khng gian.

File Server Resource Manager : ci t nhng cng c to ra cc bo co lu tr,

cu hnh quota v xc nh cc chnh sch v tp tin. Nu bn chn dch v ny, h

thng s hin th khung cho php bn kch hot chc nng gim st dung lng lu tr

trn cng.

Services for Network File System : cung cp kh nng kt ni n cc my tnh chy

h iu hnh Unix chia s tp tin.

Windows Search Service : hin th cc tp tin tm kim nhanh hn khi cc my

client kt ni n cc th mc chia s. Dch v ny t khi c s dng trong doanh

nghip m bo tnh ring t.

Windows Server 2003 File Services : cung cp dch v tng thch vi my tnh chy

Windows Server 2003.

6. p ng ci t cc dch v m bn chn trn.

7. Trn trang Confirmation , click Install .

8. Trn trang Results , click Close .

Bn c th s dng cc cng c trong dch v File Services bng cch click Role > File Services trn

Server Manager.

S d ng Quota

Khi nhng ngi dng chia s trn mt cng, cho d l ti my tnh hay thng qua mng th dung

lng cng s nhanh chng y. Vi chc nng quota, bn c th d dng gim st ngi dng s

dng dung lng cng. Thm vo , khi bn thit lp quota gii hn s dng, ngi dng s

khng th lm tng thm dung lng cng.

Vi Windows Server 2008, bn nn s dng Quota Management d cu hnh quota. Bn cng c th

cu hnh quota bng cc lnh DirQuota . Thm vo , bn c th cu hnh quota bng Group Policy

hoc Windows Explorer .

C u hnh Disk Quota b ng cng c Quota Manag ement

Sau khi ci t File Server Resource Manage, bn c th qun l cng bng cch s dng cng c

Quota Management. Trn Server Manager , click Roles > File Services > Share and Storage

Management > Files Server Resource Manager > Quota Management .

Creating Quota Templates : Quota Management h tr s dng quota template. Bn c th s dng

mt quota template thit lp quota cho cng. Windows Server 2008 gm cc chun template sau:

100 MB Limit : nh ngha mt hard quota (quota ngn chn ngi dng to thm cc tp tin)

ch cho php s dng dung lng khng qu 100MB cho mi ngi dng, vi e-mail cnh bo

c gi n cho ngi dng mi khi dung lng t t 85-95%. Khi t 100% quota, template

ny s gi mt e-mail n ngi dng v qun tr vin.


I C T 2 4 H . N E T

Page 11

200 MB Limit reports to user : cho php s dng 200 MB cho mi ngi dng, e-mal cnh bo

dn ngi dng khi t n 85-95%. Khi t 100%, template ny s gi e-mail n ngi dng

v qun tr vin, ng thi gi bng bo co s dng cho ngi dng.

200 MB limit with 50 MB extension : Khi t n dung lng 200MB, my tnh s gi e-mail

n ngi dng v qun tr vin sau cho php m rng ln n 250 MB.

250 MB extended limit : template ny cho php ngi dng s dng khng qu 250MB.

Monitor 200 GB Volume usage : e-mail thng bo mi khi t n 70%, 80% 90% v 100%

khi cng t n cc mc % tng ng 200GB.

Monitor 500 MB share : e-mail s thng bo mi khi t n 80%, 100% v 120% tng ng

vi 500 MB.

to quota template, bn c th r-lick vo Quota Template trn Quota Management , sau chn

Create quota template . Trn hp thoi Create quota template , chn chun m bn mun s dng,

sau click Copy .

1. Chn v r-click vo Quotas trn Server Manager . Sau chn Create quota .

2. Click Browse v chn mt th mc bn cn p dng quota, sau click OK.


I C T 2 4 H . N E T

Page 12

3. Chn Auto apply template and create quotas on existing and new subfolders . Vi la

chn ny cho php bn p dng templae ny n bt c th mc mi no c to bn trong

th mc m bn va chn bc 2.

4. Chn Derive properties from this quota temmplate , sau chn quota danh sch. Mt

khc, bn c th chn Define custom quota properties v click Custom properties xc

nh quota ny khng da trn cc quota tn ti trc .

5. Click Create .

C u hnh Disk Quota b ng dng l nh

Bn c th s dng lnh DirQuota cu hnh quota. V d, p dng chun 200 MB Limit report cho

th mc C:\ICT24H bn g lnh sau:

dirquota quota add /Path:C: \

s dng chun 100 MB, s dng lnh sau:

dirquota quota add /Path:C: \ ICT24H /Limit:100MB /Type:Hard

tm hiu v cc lnh DirQuota bn c th g lnh:

dirQuota /?

C u hnh Disk Quota b ng Windows Explorer

Mc d bn nn s dng Quota Management cu hnh quota trn Windows Server 2008, tuy nhin

h iu hnh h tr bn qun l quota bng Windows Explorer. cu hnh quota bng Windows

Explorer , thc hin cc bc sau:


2. R-click vo cng bn mun cu hnh quota, sau chn Properties . Bn khng th cu hnh

quota cho tng th mc c th.

3. Trn tab Quota , nh du chn Enable quota management .


I C T 2 4 H . N E T

Page 13

4. Chn Limit disk space to v thit lp gi tr dung lng.

5. nh du chn vo Log event when a user exceeds their quota limit hoc Log event

when a user exceeds their warning level cnh bo.

6. Nu bn nh du chn Deny disk space to users exceeding quota limit , ngi dng s

khng th lu hoc cp nht cc tp tin khi h vt qua phm vi quota cho php.

7. Click Quota Entries xem dung lng s dng hin ti ca cng. Trn ca s Quota

Entries , double click vo ngi dng cu hnh quota cho ngi dng .


I C T 2 4 H . N E T

Page 14

8. Click OK n hp thoi Quota Setings for ., ng Quota Entries . cng ang cu

hnh, click OK sau ng ca s Local Disk Properties . Nu hin th khung thng bo, click

OK kch hot quota.

C u hnh Disk quota b ng Group Policy

Bn c th cu hnh quota bng Group Policy mt cch n gin. Trong cng c Group Policy

Management Editor , chn Computer C onfiguration > Policies > Administrative Templates >

System > Disk Quotas .

Enable Disk Quotas : bn phi bt chnh sch ny s dng quota.

Enforce Disk Quota Limit : tng t vi la chn Deny disk space to users exceeding

quota limit khi cu hnh Windows Explorer.

Default Quota Limit and Warning level : xc nh gii hn v cnh bo cc cp .

Log Event when Quota limit exceeded : tng t vi la chn Log event when a user

exceed their quota limit khi cu hnh Windows Explorer.

Log Event when quota warning level exceeded : tng t la chn Log event when a

user exceeds their warning level trong Windows Explorer.

Apply Policy to removable media : xc nh quota c p dng hoc xa b. Bn nn v

hiu ha chnh sch ny.

Chia s c

Bn c th chia s th mc thng qua mng v cho php cc my tnh khc co th truy cp n.

Chia s c t Windows Explorer

Cch n gin nht chia s th mc l r-click vo th mc trong Windows Explorer v chn Share .

Hp hoi File Sharing hin th cho php bn la chn ngi dng m bn mun truy cp c th mc.

Click Share to th mc chia s v click Done .


I C T 2 4 H . N E T

Page 15

C cc cp quyn cho bn la chn:

Reader : ch c quyn c. Tng t quyn Read NTFS file permission.

Contributor : cho php c v ghi.

Co-owner : cho php ngi dng c th thay i quyn ca tp tin chng hn gn thm quyn

c v ghi. Tng t quyn Full Control .

Owner : quyn ny cho php ngi dng c th to tp tin chia s v cho php thay i quyn.

Tng t quyn Full Control .

Chia s c s d ng ch rovision a shared folder

wizard

Bn c th chia s th mc, cu hnh quota v thit lp bo mt bng Provision a shared folder

wizard .

1. Trn Server Manager , r-click vo Roles > File Services > Share and Storage

Management v chn Provision share .

2. Trn trang Shared folder location , click Browse v chn th mc chia s.

3. Trn trang NTFS Permission , chn Yes, change NTFS Permission . Sau click Edit

Permission nu bn mun thit lp quyn hn. Cu hnh NTFS l iu nn lm. Click OK, sau

click Next .


I C T 2 4 H . N E T

Page 16

4. Trn trang Share Protocols , chn kiu chia s s dng Windows (SMB-Server Message Block)

hoc s dng UNIX ( Network File System). Chn SMB cng c th p dng cho cc my client

s dng h iu hnh UNIX. Click Next .

5. Trn trang SMB Settings , click Advance nu bn mun thay i mc nh s lng ngi dng

ng thi hoc Offline Files . Click Next .

6. Trn trang SMB Permission , chn quyn hn bn mun gn. to quyn hn ty , chn

User and Group have a Custom share permission v click Permission . Click Next .

7. Trn trang Quota Policy , chn Apply Quota nu bn mun p dng quota ny. Sau chn

quota template. Click Next .

8. Trn trang File Screen Policy , nh du chn Apply file screen nu bn mun cho php tp

tin c th no trn th mc. Sau chn tp tin bn mun s dng. Click Next .

9. Trn trang DFS Namespace Publishing , chn Publish the SMB share to a DFS

Namespace nu mun a tp tin n vng khng gian DFS. Sau , cung cp thng tin DFS.

Click Next .

10. Trn trang Review Settings and Create Share , click Create .

11. Click Close .

Chia s c b ng dng l nh


I C T 2 4 H . N E T

Page 17

Bn c th chia s th mc bng lnh net share.

xem danh sch chia s, g lnh:

net share

to mt chia s, g lnh theo cu trc sau:

net share ShareName=Path [/GRANT:user, [READ|CHANGE|FULL]]

[/CACHE:Manual|Document|Programs|None|]

V d chia s th mc ICT24H nm trong C:\, s dng tn chia s l Networking, chia s n mi

ngi v cho php h c, thc hin lnh sau:

net share Networking=C: \ ICT24H /GRANT:Everyone,Read

xa th mc chia s Networking, s dng /DELETE

net share Networking /DELETE

xem hng dn v y cc lnh, g lnh

net share /?

Kt ni n th mc chia s

Cc my client kt ni n th mc chia s thng qua mng bng lnh \ \ \ .

V d, nu bn mun chia s th mc Networking trn Server1, bn c th kt ni bng cch g

\\Server1\Networking. Bn c th truy cp n mt tp tin chng hn ti liu network.doc bng cch g

\\Server1\Networking\network.doc.

Ngoi ra bn c th s dng lnh dir truy cp n th mc

dir \ \ Server1 \ Networking

Hu ht ngi dng truy cp th mc thng hay s dng thm k t cng. Mc d chng ta thng

hay t tn l C nhng bn c th t l Z. Cc my client c th kt ni n nhng th mc chia s

bng cch click Map Network Drive trn Windows Explorer hoc click vo menu Tools v chn Map

Network Driver . V d bn mun truy cp th mc Networking trn M, g lnh sau:

net use M: \ Server1 \ Networking

T ng quan v DFS

Vi nhng doanh nghip ln thng c hng t hoc thm ch hng trm File server. y chnh l vn

nan gin khi m ngi dng kh nh c server no lu tr tp tin no .

DFS cung cp cho bn mt vng khng gian duy nht cho php ngi dng c th kt ni n bt c th

mc chia s no trong doanh nghip. Vi DFS, tt c mi th mc chia s c th c truy cp. V d,

Active Directory ca bn l ict24h.net, bn c th to vng khng gian DFS \\ict24h.net\dfs. Sau , bn


I C T 2 4 H . N E T

Page 18

c th to th mc \\ict24h.net\dfs\networking v a chng n th mc chia s dnh cho c

\\server1\networking v \\server2\networking.

Bn cnh vic cung cp mt vng khng gian cho php ngi dng c th d dng tm tp tin, DFS co

th cho php nhn bn nhng tp tin chia s.

Ci t DFS

Bn c th ci t DFS khi ci t File Services s dng Add Roles Wizard hoc bn cng c th thm

dch v DFS bng cch s dng Server Manager, r-click vo Roles > Fil e Services > Add Role

Services . D bn c ci t trc hay sau khi ci t cng s n bc cu hnh DFS, thc hin cc

bc sau:

1. Trn trang DFS Namespaces , to mt vng khng gian mi. t tn cho vng khng gian, v

d l ICT24H Ebook Centre .

2. Trn trang Namspace Type , bn c th chn Domain -based namespace (dnh cho mi

trng Active Directory) hoc Standalone -based namspace (dnh cho mi trng

workgroup). Nu tt c server chy Windows Server 2008, nh du chn vo Enable

Windows Server 2008 mode . Click Next .

3. Trn trang Credentials , chn ti khon to vng khng gian, ti khon ny phi thuc nhm

Domain Admin.

4. Trn trang Namspace Configuration , bn c th click Add sau thm cc th mc vo. Bn

c th lm thao tc ny lc sau cng c (s dng DFS Management).

5. Click Next .


I C T 2 4 H . N E T

Page 19

T o m t vng khng gian DFS t DFS Management

thc hin vic to mt DFS t DFS Management, thc hin cc bc sau:

1. Trn Server Manager, r-click Roles > File Services > DFS Management > Namspaces v

chn New Namespace .

2. Trn trang Namespace Server , nhp tn server cha vng khng gian. Bn c th thm cc

server khc cha vng khng gian thi gian sau. Ngi dng khng th thy c tn

server khi h truy cp n vng khng gian DFS. Click Next.

3. Trn trang Namespace Name and Settings , nhp tn. y l tn vng khng gian chia s khi

m ngi dng truy cp vo. V d: \\ict24h.net\Ebook. Click Edit Settings thit lp

permisison cho vng khng gian. Click Next .

4. Trn trang Namspace Type , bn c th chn Domain -based namespace (dnh cho mi

trng Active Directory) hoc Standalone -based namspace (dnh cho mi trng

workgroup). Nu tt c server chy Windows Server 2008, nh du chn vo Enable

Windows Server 2008 mode . Click Next .


I C T 2 4 H . N E T

Page 20

5. Trn trang Review Set tings and Create Namspace , click Create .


I C T 2 4 H . N E T

Page 21

6. Trn trang Confirmation , click Close .

Sau khi to xong vng khng gian, bn c th r-click vo n v chn Properties . Ca s Properties

hin th 3 tab:

General : cho php bn nhp m t v vng khng gian.

Referrals : khi mt my client truy cp n vng khng gian hoc mt th mc no , my

client s nhn c mt danh sch cc server t DC. Cc my client lun lun c gng truy cp

n my tnh target u tin trong danh sch v nu my tnh target khng p ng th cc

my truy cp s rt hng trong danh sch. Tab ny cho bn kim sot ng thi nhiu target

trn danh sch c sp xp th t. Chn Select random order t danh sch Orderng

method cung cp danh sch cho tt c target. Chn Lowest cost cc client trc tip kt

ni n target gn nht. Nu bn mun s dng target thuc Active Directory khc th chn

.

Advanced : c 2 s la chn cho bn. Optimize for consistency cu hnh vng khng gian

trn server truy vn n DC chnh (PDC) mi ln c s thay i vng khng gian, gip bn

tit kim thi gian. Opt imize for scalability gim s lng truy vn bng cch truy vn dn

domain controller gn nht.


I C T 2 4 H . N E T

Page 22

c vo m t vng khng gian DFS

thm th mc vo vng vng khng gian DFS, thc hin cc bc sau:

1. Trn Server Manager , click Roles > File Services > DFS Management > Namespaces .

2. R-click vo vng khng gian v chn New Folder .

3. Nhp tn th mc. Nu bn mun th mc bao gm c nhng tp tin, click Add v chn th

mc chia s.

4. Click OK.

C u hnh DFS b ng dng l nh

Bn c th s dng lnh DFSUtil cu hnh DFS. V d, xem th mc gc DFS trn domain

ict24h.net, g lnh sau:

dfsutil domain ict24h.net

xem th mc gc DFS trn mt server c th no , chng hn l server1, g lnh sau:

dfsutil server server1

xem cc target trn vng khng gian, g lnh sau:


I C T 2 4 H . N E T

Page 23

dfsutil target \ \ ict24h.net \ Networking // v i ict24h.net l tn do main v Networking

l tn vng khng gian .

xem target i vi th mc, g lnh sau:

dfsutil link \ \ ict24h.net \ Networking \ Ebook

xem thng tin client trong Active Directory, g lnh sau:

dfsutil client siteinfo // v i PC01 l tn client mu n xem.

xem y lnh DFS g dfsutil /? . khc phc s c v DFS s dng lnh DFSDiag, bn c th

xem y cc lnh bng cch g dfsdiag /?.

Offline Files

Ngi dng c th truy cp n nhng th mc chia s thm ch ngay c khi h t kt ni n mng

ni b. Offline Files cho php cc client c th t ng lu tr mt bn sao ca tp tin trn th mc chia

s v cho php truy cp khi ngi dng khng th kt ni n mng. Sau khi kt ni, Offline File s ng

b ha v nhc ngi dng c th x l nhng xung t nu c.

Cc qun tr vin c th cu hnh Offline Files trn th mc chia s v ngi dng c th cu hnh Offline

Files khi h kt ni n th mc chia s. cu hnh Offline File, thc hin cc bc sau:

1. Trn Server Manager , click Roles > File Services > Share and Storage Management .

2. Ti khung chi tit l danh sch chia s, r-click vo th mc bn mun cu hnh v chn

Properties .

3. Ti tab Sharing , click Advance d.

4. Ti ca s Advanced , click tab Caching v chn 1 trong 3 la chn sau:

Onl y the files and program that users specify are available offline : ngi dng

phi t chn cc tp tin m h mun truy cp trng thi offline. Ty chn ny thch

hp khi nhng ngi dng hiu cch s dng Offline Files.

All files and programs that users o pen from the share are automatically

available offline : Nhng tp tin m ngi dng truy cp trong khi kt ni mng s

c t ng lu tr vi s lng ln c gii hn. Ty chn ny thch hp khi ngi

dng cha bit v Offline Files.

No files or programs from the share are available offline : ngn chn ngi dng

truy cp Offline Files. y l ty chon tt nht dnh cho nhng ti liu b mt.


I C T 2 4 H . N E T

Page 24

Bn cng c th cu hnh Offline Files Windows Explorer bng cch click Advanced Sharing trn tab

Sharing ca th mc v chn Caching .

Th c hnh: Lm vi c v c chia s

Trong bi thc hnh ny, bn to mt vng khng gian DFS.

Bi th t d ch v Distributed File System

Trong bi thc hnh, bn phi ci t dch v File Services v Distributed trn c Server1 v Server2. Sau

, bn s to mt vng khng gian DFS c cha trong c Server1 v Server2, tip theo bn s to

th mc chia s. Th mc chia s ny s t ng nhn bn.

hon thnh bi thc hnh ny, Server1 l domain controller c tn ict24h.net v Server2 thuc

domain ict24h.net.

1. Ti Server1 , trn Server Manager , r-click vo Roles > Add Roles .

2. Trn trang Before youu begin , click Next .

3. Trn trang Server Roles , nh du chn vo File Services . Click Next .

4. Trn trang File Services , click Next .


I C T 2 4 H . N E T

Page 25

5. Trn trang Select Role Services , chn Distributed File System v File Server Resource

Manager . Click Next .

6. Trn trang Create a DFS Namspaces , nhp tn vng khng gian l Public . Click Next .

7. Trn trang Namspace Type , mc nh. Click Next .

8. Trn trang Namespace Configuration , click Next .

9. Trn trang Configure Storage Usage Monitoring , nh du chn tt c cc cng v click

Next .

10. Trn trang Report Options , click Next .

11. Trn trang Confirmation , click Insta ll.


Bi th c hnh 2: Thm m t server vo vng khng gian DFS

1. Ti Server1 , trn Server Manager , r-click vo Roles > File Services > DFS Management >

NameSpaces > ict24h.net > Public . Sau chn Add Namespace Server ..

2. Click Browse . Ti hp thoi Select Computer , nhp Server2 v click OK. Nu khung nhc

lnh hin ra yu cu bn bt u dch v DFS trn Server2, click Yes. Click OK mt ln na

ng ca s Add Namespace Server .

3. Trn khung chi tit, click tab Namespace Servers . Ch 2 server trong danh sch. Nu

mt trong 2 server khng hot ng, my client vn c th kt ni n server cn li truy cp

th mc.


I C T 2 4 H . N E T

Page 26

Bi th c hnh 3 Thm m c nhn b n vo vng

khng gian DFS

Sau khi bn to vng khng gian DFS v lu tr n trn c 2 server. Bn s to th mc chia s vi

tn Ebooks trn c Server1 v Server2, sau thm th mc Ebooks vo vng khng gian DFS v cu

hnh n nhn bn.

1. Ti Server1 , trn Server Manager , r-click vo Roles > File Services > Share and Storage

Management . Sau click vo Provision Share .

2. Trn trang Shared Folder Location , g C:\ Ebook s. Click Next . Khung nhc lnh hin th,

click Yes to th mc.

3. Trn trang NTFS Permission , chn Yes, change NTFS Permission. Click Edit Permission v

gn quyn cho nhm Users l quyn Modify . Click OK, sau click Next .

4. Trn trang Share Protocols , nhp tn chia s l Ebooks . Click Next .

5. Trn trang SMB Settings , click Advance . Ti tab Caching , chn No files or programs from

the share a available offline . Click OK, sau click Next .

6. Trn trang SMB Permission , chn Adminstrators have Full Control; All other Users and

Groups have only Read access . Click Next .

7. Trn trang Quota Policy , nh du chn Apply Quota . Chn Auto apply template to create

quotas on existing and new subfolders . Sau , ti danh sch Derive properties from

this quota template , chn 200 MB Limit with 50 MB Extension . Click Next .

8. Trn trang File Screen Policy , nh du chn Apply File Screen . Ti danh sch Derive

Properties from this File screen template , chn Block Excutable Files . Click Next .

9. Trn trang DFS Namespace Publishing , nh du chn Publish the SMB share to a DFS

namespace . Ti Parent folder in namespace , nhp \\ict24h.net\Public. Ti New folder

name , nhp Ebooks . Click Next .

10. Trn trang Review settings and create share , click Create .

11. Click Close .

12. Ti Server2 , to mt th mc, gn quyn Modify cho nhm Users sau chia s th mc ny.

G lnh sau:

mkdir C: \ Ebooks

i cacls C: \ Ebooks\ /grant users:M

net share Files=C: \ Ebooks /GRANT:Users,READ /GRANT:Administrators,FULL

/CACHE:None

Ti Server1 , thm th mc \\Server1\Ebooks vo \\ict24h.net\Public\Ebooks

1. Ti Server1 , trn Server Manager , r-click \ \ ict24h.net \ Public v chn Refresh .

2. Trn Server Manager , r-click \ \ ict24h.net \ Public \ Ebooks v chn Add Folder Target .

3. Ti hp thoi New folder target , nhp \ \ Server2 \ Ebooks . Click OK

4. Ti hp thoi Replication , click Yes to nhn bn gia Server1 v Server2.

5. Trn trang Replication Group and Replicated Folder name , click Next .

6. Trn trang Replication Eligibility , click Next .

7. Trn trang Primary Member , chn Server1 . Click Next .

8. Trn trang Topology Selection , chn Full Mesh . Click Next .

9. Trn trang Replication Group Schedule and Bandwidth , click Next .


I C T 2 4 H . N E T

Page 27

10. Trn trang Review Settings and Create Replication Group , click Create .

11. Trn trang Confirmation , click Close .

12. Ti hp thoi Replication Delay , click OK.

13. Trn Server Manager , chn DFS Management > Namespace > ict24h.net > Public >

Ebooks . Click Replication . C Server1 v Server2 c trong danh sch.

14. Trn Server Manager , click DFS Management > Replication > ict24h.net > Public >

Ebooks .

Bi th c hnh 4: Ki m tra nhn b n DFS

Trong bi thc hnh ny, bn kt ni vo vng vng khng gian DFS v to mt tp tin, xc nhn n t

ng nhn bn.

1. Trn Server1 , ng nhp bng ti khon khc ti khon Administrator , click Start >

Computer .

2. Trong ca s Computer , click Map Network Drive .

3. Trn Map Network Drive , g \\ ict24h.net \ Public \ Ebooks . Sau click Finish .

4. Trn a nh x, r-click vo khng gian trng, chn New , sau chn Text Document . Bn

s khng to c tp tin v nhm Users ch c quyn Read .

5. Trn Windows Explorer , chn C:\Ebooks. Sau , r-click vo khng gian trng, chn New >

Text Document . t tn cho tp tin mi to l Text File . Sau m tp tin v nhp dng ch

Hello ICT24H .

6. Trn Server2 , m Windows Explorer v xem th mc C:\ Ebooks . Ch tp tin Text File

c nhn ban. M tp tin ny bn s thy dng ch Hello ICT24H .

T ng quan bi h c

File Services gip bn c th qun l th mc, quota v to bo co lu tr.

Bn c th xc nh ngng gii hn v thng bo ngi dng cng nh qun tr vin mi khi

mt ngi dng no vt qu gii hn dung lng s dng cho php trn cng. Bn c th

cu hnh quota bng Windows Explorer hoc s dng lnh DirQuota.

DFS xc nh mt vng khng gian bao gm cc th mc chia s khc nhau c tp trung ha.

V th, ngi dng c th tm n chnh xc tp tin hoc th mc.

Offline Files l mt tnh nng mi trong Windows, cho php sao chp cc tp tin v th mc

trong mng n my tnh ngi dng c th truy cp chng mi khi h b t kt ni n

mng. Offline Files c th t ng ng b tp tin khi ngi dng tr li trng thi kt ni.

Tr c nghi m

1. Bn to mt th mc c tn Marketing v cu hnh NTFS permission gn cho nhm Domain

Users c quyn Read v nhm Marketing c quyn Modify . Bn chia s th mc v gn cho

nhm Everyone quyn Reader. Dandoh l nhn vin phng Marketing ti khon Dandoh thuc

nhm Marketing v cng thuc nhm Domain Users - cn truy cp vo nhng tp tin trn th

mc thng qua mng. Trn thc t, Dandoh c quyn hn nh th no?

A. No Access

B. Read


I C T 2 4 H . N E T

Page 28

C. Write

D. Full Control

2. Bn ang s dng Windows Server 2008 Server Core. Bn cn to mt th mc chia s. Bn s

dng lnh no?

A. Net

B. Netsh

C. Share

D. Ipconfig

3. Doanh nghip ca bn c mt tr s chnh vi 7 chi nhnh vn phng. Bn trin khai mt DFS

servser dnh cho tr s v cc vn phng. Bn cnh , bn thm mt vng khng gian DFS

cho mi DFS server. Bn mun cc client kt ni n cc DFS server cc b nu nh n hot

ng ri sau kt ni n cc DFS server khc nu nh DFS server cc b ny khng hot

ng. Bn nn chn phng thc no?

A. Random Order

B. Lowest Oder

C. Excludes targets outside of the clientsite

D. Clients fall back to preferred target.

4. kim sot tt cng, bn cn s dng quota gi e-mail n ngi dng mi khi h s

dng vt qu 80 MB dung lng cng, ngoi ra bn khng cho php ngi dng vt qu

100 MB. Bn nn s dng phng php no hiu qu nht.

A. To hard quota v gii hn 80 MB, sau to thm mt hard quota khc gii hn 100

MB.

B. To mt soft quota gii hn 80 MB v to soft quota th hai gii hn 100 MB.

C. To mt hard quota duy nht gii hn 100 MB. To cnh bo khi t n 80%.

D. To mt soft quota duy nht gii hn 100MB. To cnh bo khi t n 80%.

5. Bn cn cu hnh quota trn my tnh chy Windows Server 2008 Server Core. Bn cn s dng

lnh g?

A. FileScrn

B. DirQuota

C. StorRept

D. Net

Bi h c 3: c t p tin

Bn c th s dng phn mm backup ca hng th 2 thc hin backup server. Tuy nhin, vi

Windows Server 2008, bn c th s dng nhng tnh nng backup c sn trong . Mc d Windows

Server Backup khng th p ng c tt c nhng nhu cu backup ton b, chng hn nh backup

Active Directory, GPO nhng n c th backup v restore tp tin trong ton b cng.

Sau bi hc, bn c th: Qun l lu tr shadow copy.

S dng Windows Server Backup khi phc li tp tin v cng.

Thi lng bi hc : 30 pht


I C T 2 4 H . N E T

Page 29

Shadow Copy

Shadow copy cho php s dng phn mm sao lu truy cp cc tp tin m bn s dng. Nu phn

mm sao lu (gm Windows Server Backup hoc phn mm hng khc) cn truy cp vo tp tin th

Volume Shadow Copy s to ra mt bn sao (shadow copy) ca tp tin hin ti sau cho php qu

trnh sao lu c php truy cp vo bn sao v thc hin vic sao lu.

Qu n l Shadow Copy t Windows Explorer

Bn c th qun l shadow copy s dng Windows Explorer. Thc hin cc bc sau:

1. Ti Windows Explorer , r-click vo cng v chn Configure Shadows Copies .

2. Ti danh sch Select a volume , chn a bn mun cu hnh.

3. Click Enable , sau click Yes cho php chy chc nng shadow copy trn a. Hoc bn

c th click Disable v click Yes tt chc nng ny.

4. Click Setting xem cc thng tin v dung lng s dng.


I C T 2 4 H . N E T

Page 30

5. Click Create Now to shadow copy.

6. Click OK

Qu n l Shadow Copy b ng dng l nh

Bn c th to shadow copy bng lnh vssadmin. V d, bn mun to shadow copy cho a C:\, g

lnh sau:

vssadmin create /For=C:

xem lu tr hin ti ca shadow copy, g lnh sau:

vssadmin list shadowstorage

xem cc shadow copy hin din cng nh thi gian to ra n, g lnh sau:

vssadmin list shadows

xem y cc lnh, g

vssadmin /?

Windows Server Backup

Windows Server Backup sao chp ton b a thnh tp tin nh dng *.vhd trn a th 2. Sau

thc hin vic sao lu v bn c th khi phc tng tp tin hoc ton b a. Nu Windows khng th

khi ng (nguyn nhn c th do a h thng gp trc trc), bn c th khi ng my tnh t

source ci t Windows, khi phc a h thng t phn sao lu trc .

t Windows Server Backup

ci t Windows Server Backup, thc hin cc bc sau:

1. Trn Server Manager , r-click Features > Add Features .

2. Trn trang Features , click Windows Server Backup Features v nh du chn Windows

Server Backup . Nu bn mun thc hin sao lu bng dng lnh th nh du chn

Command -line Tools .


I C T 2 4 H . N E T

Page 31

3. Trn trang Confirmation , click Install .


By gi, bn c th truy cp vo Windows Server Backup t Administrative Tools hoc c th s dng

lnh Wbadmin sao lu.

C u hnh th c hi

cu hnh cho vic sao lu, thc hin cc bc sau:

1. Cick Start > Administrative Tools > Windows Server Backup . Nu h thng yu cu xc

nhn UAC, click Continue tip tc.

2. Ti khung Action bn phi, click Backup Once .

3. Trn trang Backup Options , chn Different option . Click Next .

4. Trn trang Server Backup Configuration , click chn kiu sao lu Full Server hoc chn

Custom nu bn mun chn sao lu ty th mc hoc a ty . Click Next .

5. Trn trang Select Items for Backup , chn thnh phn m bn mun sao lu. Click Next .


I C T 2 4 H . N E T

Page 32

6. Trn Specify Destination Type , chn hnh thc lu tr dng a hoc th mc chia s. Sau

click Next .

7. Trn trang Select Backup Destination , chn ni lu tr cc sao lu. Click Next .

8. Trn trang Specify Advanced Option , mc nh VSS Copy Backup bo v cc tp tin

VSS log. Click Next .

9. Trn trang Confirmation , click Backup .

10. Trn trang Backup Progress , bn c th xem din bin sao lu.

Ln l

ln lch sao lu t ng, thc hin theo cc bc sau:

1. Click Start > Administrative Tools > Windows Server Backup .

2. Trn khung Action bn phi, click Backup Schedule .

3. Trn trang Getting Started , click Next .

4. Trn trang Select Backup Configuration , chn sao lu ton b server (Full Server ) hoc ty

chn thnh phn sao lu (Custom ).

5. nh du chn vo thnh phn m bn ty chn sao lu, click Next .

6. Trn trang Specify Backup Time , chn thi gian bn mun sao lu hng ngy.


I C T 2 4 H . N E T

Page 33

7. Trn trang Select Destination Disk , chn ni lu tr tp tin sao lu. Click Next .

8. Click Yes khi hin khung nhc nh.

9. Trn trang Label Destination Disk , click Next .

10. Trn trang Confirmation , click Finish .

11. Trn trang Summary . Click Close .

Bn c th xem lch sao lu bng giao din Task Scheduler bng cch click Configuration > Task

Cheduler Library > Microsoft > Wind ows > Backup


I C T 2 4 H . N E T

Page 34

S d ng dng l

Bn c th s dng cc dng lnh thc hin sao lu, chng hn trong trng hp bn ang s dng

Windows Server 2008 Server Core. xem cc lnh sao lu, bn c th s dng lnh

wbadmin /?

Ki m tra nhanh

1. Lnh no cho bn cu hnh shadow copy? 2. Lnh no cho bn bt u chy sao lu?

Tr l i nhanh 1. Vssadmin

2. wbadmin

Khi ph c t p tin ho c

Bn c th khi phc tp tin hoc th mc t bn sao lu hoc shadow copy, thc hin cc bc sau:

1. Trn Windows Explorer , r-click vo mt tp tin m bn mun khi phc, sau chn Restore

Previous Versions .

2. nh du chn vo thi im m bn mun khi phc, sau click Restore .


I C T 2 4 H . N E T

Page 35

3. H thng hin th ca s hi bn c mun khi phc li tp tin hoc th mc vo ngy sao

lu hay khng, click Restore .

4. Click OK 2 ln.

Khi ph c

khi phc server t mt sao lu, thc hin cc bc sau:


2. Ti khung Action bn phi, click Recover .

3. Trn trang Getting Started , nh du chn vo server m bn mun khi phc, click Next .

4. Trn trang Select Backup Data , nh du chn sao lu cn bn khi phc. Click Next .

5. Trn trang Select Recovery Type , chn mt trong 3 ty chn sau, sau click Next .

Files and Folders : m tp tin c sao lu. Bn c th chn mt tp tin hay mt

th mc c th no m bn mun sao lu.

Applications : cc ng dng c th c thit lp bng Windows Server Backup lu

tr. y l ty chn chon php bn c th khi phc c cc d liu ca ng dng.

Volumes : cho php bn c th khi phc ton b a. Tuy nhin, bn khng th s

dng ty chn ny khi phc a h thng.


I C T 2 4 H . N E T

Page 36

6. Trn trang Select Items to Recover , m sao lu chn mt th mc v tp tin cn khi

phc, sau click Next . Nu mt hp thoi hin th, click Ok .

7. Trn trang Specify Recovery Options , chn ni lu tr khi phc.


I C T 2 4 H . N E T

Page 37

8. Trn trang Select Volumes , nh du chn a v click Next .

9. Trn trang Confirmation , click Recover .

10. Trn trang Recovery Progress , click Close .

Khi ph c khi Windows khng th kh ng

Nu Windows khng th khi ng hoc nu bn cn khi phc ton b k c a h thng t mt sao

lu, bn c th s dng a ci t Windows Server 2008 DVD v s dng cng c Windows Complete

PC Restore Wizard khi phc li h iu hnh. Thc hin cc bc sau:

1. a a ci t Windows Server 2008 vo my tnh v khi ng li.

2. Khi mn hnh Press any key to boot from the CD hin th, nhn bt k mt phm no trn

bn phm.

3. Trn trang Language selection , click Next .

4. Click Repair your computer .


I C T 2 4 H . N E T

Page 38

5. Trn hp thoi System Recovery Options , chn h iu hnh, sau click Next .

6. Click Windows Complete PC Restore .

7. Ti Restore your entire computer from a backup , mc nh. Mt khc, click Restore a

different ba ckup nu bn mun khi phc c nhng sao lu c trc . Click Next .

8. Trn trang Choose how to restore the backup , click Next .

9. Click Finish .

10. nh du chn I confirm v click OK.

Th c t p tin

Trong bi thc hnh ny, bn sao lu v khi phc tp tin, s dng shadow copy v Windows Server

Backup.

Bi th c hnh 1: Khi ph c m t t p tin t m t shadow copy

Trong bi thc hnh, bn to mt tp tin, sau cu hnh shadow copy v cui cng thc hin khi phc

li tp tin .

1. To mt tp tin dng *.txt trn desktop. M tp tin v nhp dng ch Hello ICT24H . Lu tp

tin li.


I C T 2 4 H . N E T

Page 39

2. R-click vo Command Prompt v chn Run as dministrator . Bn s thc hin vic to mt

shadow copy trong C. G lnh sau:

vssadmin create shadow /For=C:

3. M tp tin. Thay i ni dung t Hello ICT24H thnh Goodbye ICT24H . Lu tp tin li.

4. R-click vo tp tin v chn Restore Previous Versions . Click tab Previous Versions .

5. Chn thi gian va mi to shadow copy. Sau click Restore .

6. Hin th khung xc nhn, click Restore .

7. Cick OK 2 ln.

8. M li tp tin bn s thy ni dung hin th quay li dng ch Hello ICT24H

Bi th c t p tin

Trong bi thc hnh ny, bn thc hin sao lu Server1, khi phc cc tp tin sau khi phc ton b

a h thng.

1. Ti Server1 , ng nhp bng ti khon Administrator . Click Start > Administrative Tools >

Windows Server Backup .

2. Ti khung Action bn phi, click Backup Schedule .


4. Trn trang Select Backup Configuration , chn Custom .

5. Trn trang Select Backup Items , nh du chn a h thng sau click Next .

6. Trn trang Specify Backup Time , chn thi gian sao lu cch nhau khong 5 pht. Click Next .

7. Trn trang Select Destination Disk , chn a cha sao lu. Click Next .

8. Click Yes khi hin khung nhc.

9. Trn trang Label Destination Disk , click Next .

10. Trn trang Confirmation , click Finish .

11. Trn trang Summary , click Close .

Sau khi hon tt sao lu, bn bt u tin hnh xa b, sau khi phc tp tin. Thc hin cc bc

sau:

1. Xa th mc C:\Users\EfsUser\Document.


3. Ti Action bn phi, click Recover .


5. Trn trang Select Backup Data , ch n cc bn sao lu c chn. Click Next .

6. Trn trang Select recovery type , chn Files and Folder , v click Next .

7. Trn trang Select Items to Recover , m th mc C:\Users\EfsUsers\Document. Sau click

Next . Click OK nu xut hin hp thoi.

8. Trn trang Specify recovery options , chn ni lu tr khi phc C:\Users\EfsUser. Click Next .

9. Trn trang Confirmation , click Recover .

10. Trn trang Recovery progress , click Close .

By gi bn m Windows Explorer xc nhn th mc C:\Users\EfsUser\Document c khi phc.

Sau xa th mc ny mt ln na v thc hin vic khi phc ton b h thng Windows.


I C T 2 4 H . N E T

Page 40

1. a a ci t Windows Server 2008 vo v khi ng li my tnh.

2. Mn hnh Press any key to boot from the CD hin th, nhn mt phm bt k trn bn phm.

3. Trn trang Language , click Next .

4. Click Repair your computer .

5. Trn hp thoi System recovery options , chn h iu hnh sau click Next .

6. Click Windows complete PC restore .

7. Trn trang Restore your entire computer from a backup , click Next .

8. Trn trang Choose how to restore the backup , click Next .

9. Click Finish .

10. nh du chn I confirm v click OK.

T ng quan bi h c

Windows t ng to mt shadow copy khi cc phn phn sao lu cn truy cp vo tp tin

thc hin sao lu. Mc d bn khng cn quan l shadow copy, bn c th s dng lnh

vssadmin to shadow copy hoc qun l lu tr shadow copy.

Windows Server Backup to mt tp tin c nh dng *.vhd bao gm a cng mi khi sao lu.

Bn c th khi phc tp tin hoc ton b a. S dng lnh wbadmin qun l sao lu.

Tr c nghi m

1. Bn ang ln k hoch thay i mt s tp tin cu hnh quan trng trong Windows Server 2008.

Lnh no cho php bn khi phc tp tin nu gp vn v bn cn khi phc li?

A. StorRept

B. FileScrn

C. DirQuota

D. Vssadmin

2. Bn s dng Windows Server Backup tin hnh sao lu a D nm trong my tnh c tn

FileServer. u l th mc lu tr sao lu ?

A. D:\WindowsFileBackup\FileServer\

B. D:\WindowsImageBackup\FileServer\

C. D:\WindowsImage\Backup\FileServer\

D. D:\FileServer\WindowsImage\Backup\

3. Bn s dng Windows Server Backup khi phc d liu. Cng vic no sau y bn cn tin

hnh? (chn tt c phng n m bn cho l ng)

A. Khi phc ring tng tp tin.

B. Khi phc a h thng

C. Khi phc a khng phi l a h thng.

D. Ghi ln tp tin ang s dng hin ti.

T ng quan v

NTFS permission cho php bn kim sot truy cp mi khi h iu hnh ang hot ng v EFS

bo v tp tin nu nh k tn cng xm nhp vo h iu hnh thnh cng. S dng NTFS


I C T 2 4 H . N E T

Page 41

file permission l mt phng php chnh cn lm v EFS gip bn bo v c cc tp tin trnh

s tn cng xm nhp h iu hnh.

Windows Server 2008 cung cp cho bn cc tnh nng chia s th mc hiu qu. Sau khi ci t

dch v File Service, bn c th qun l a bng cch to quota, t ng thng bo n ngi

dng v qun tr vin khi mt ngi dng no vt ra ngoi phm vi s dng dung lng cho

php. Vi DFS bn c th to mt vng khng gian duy nht cho php ngi dng c th truy

cp dn nhng th mc chia s. Ngoi ra, vi Offline File, ngi dng c th truy cp n cc

tp tin ca h mi khi h khng th kt ni mng.

Shadow copy cho php cc phn mm sao lu c th truy cp n cc tp tin ang s dng

hin ti v chng c th c s dng sao lu trn a mt cch nhanh chng. Cng c

Windows Server Backup cung cp kh nng sao lu ti u, cho php bn c th khi phc cc

tp tin ty hoc ton b a.

Cc thu t ng

Hard quota : Gii hn lu tr, ngn chn ngi dng to thm cc tp tin sau khi h ti ngng

gii hn.

Soft quota : Gii hn lu tr cho php ngi dng to thm cc tp tin khi h ti ngng gii

hn. Soft quota c s dng s gi thng bo n qun tr vin

Target : th mc chia s ch nm trn vng khng gian DFS.

Ng c nh

Ng c nh th nh t: Ln k ho ch tri i v i File Services

Bn l k s h thng cho ICT24H. Hin ti, cng ty ang s dng nhng server cc phng ban cho

vic chia s tp tin. Mi phng ban c file server ring v cng ty c khong 100 th mc chia s. Cc

nhn vin d nhm ln khi h cn tm ra tp tin ca h v cc qun tr h thng cng tn nhiu thi gian

phn quyn cho cc th mc. Thm vo , nu server ca mt phng ban gp li, th mc chia s

s khng hin th cho n khi server khi phc li.

Bn hy tr li nhng cu hi sau :

1. Lm th no gim s lng th mc chia s m ngi dng mun kt ni n?

2. Nu bn s dng mt vng khng gian DFS, lm th no m bo ngi dng khng kt ni

n cc th mc chia s ca cc phng ban khc?

Ng c nh th hai : Ln k ho ch khi ph c khi g p v l n

Bn l qun tr h thng ca ICT24H. Cng ty ca bn bt u trin khai Windows Server 2008. Xp ca

bn c v lo u v vn khi phc nu server gp vn v a h thng hin ti ang gp li.


I C T 2 4 H . N E T

Page 42

1. Khi t hng server, yu cu cu hnh nh th no p ng vic ln lch sao lu vi Windows

Server Backup?

2. Sau khi tin hnh sao lu, bn s khi phc server nh th no nu a h thng gp li?

3. Bn c th s dng nh sao lu tng t khi phc tp tin m n b xa hay khng?

--- End ---