Tutorial

As a visitor, you currently have access to only a portion of the information contained in this Tutorial. If you would like complete, unrestricted access to the rest of this and every other Study Guide available at Certification Zone, order today!

70-215 Windows 2000 Server

by James Ellithorpe

Introduction

Throughout this Study Guide, there is suggested reading that should be completed before proceeding. This is especially important when preparing for Microsoft certification exams. A list of the suggested textbook materials is presented in the References section.

The readings are also very important to those preparing for FCPA Field Exams because you need to know the theory of the operating system. It is impossible for us to duplicate page for page in this Study Guide and present all the diagrams, charts, illustrations, and screen-shots. Rather, we have chosen to summarize the materials and present you with the "condensed version" in this material.

Required Reading: W2K Professional Resource Kit, please read pages 61-268. Also, see SAC2 pp.2-135, SAC3 pp. 2-187.

After you have completed this reading, see if you can answer the following review questions. Let's review Windows 2000 Professional.

Review of the Study Material for 70-210

• What is the minimum amount of memory, processor speed, and hard-drive space needed to install Windows 2000 Professional?

• Do these requirements change with Windows XP Professional?

• Do these requirements change with Windows 2000 Server?

• Do these requirements change with Windows 2003 Server?

• Should you use the minimum or are there certain recommended minimums?

• How do you check for hardware and software compatibility for Windows 2000 Professional and Server? Does the process change for XP Professional or Windows 2003?

• How would you upgrade a Windows NT 3.50 domain controller to a Windows 2000 domain controller? Can it be accomplished in one step, two, three, or more steps or not at all?

• How would you upgrade a Windows NT 3.51 domain controller to a Windows 2000 domain controller? Can it be accomplished in one step, two, three, or more steps or not at all?

• How would you upgrade a Windows NT 4.0 domain controller to a Windows 2000 domain controller? Can it be accomplished in one step, two, three, or more steps or not at all?

• Must a Windows 2000 Professional client always have a default gateway IP address?

• What are the methods you can use to install Windows 2000 Professional?

• Why might you set up a dual-boot installation of Windows 2000 Professional and Windows 98?

• What do you need to do in a dual-boot installation of Windows 2000 Professional and Windows 98?

• Under what conditions would you dual-boot a server?

• Why would a dual-boot installation be a security concern on the network?

• What needs to be installed on a RIS Server in addition to the operating system?

• How do you set up the Windows 2000 Support Tools on Windows 2000 Professional and Server?

• How do you set up the Windows 2000 Support Tools in XP Pro and Windows 2003 Server?

• Under what conditions would a "clean" installation be a better option than an upgrade installation?

• Why do you always want to upgrade domain controllers? Can you always do this with legacy operating system controllers?

• What is "tattooing" and why is it a concern when upgrading?

• Why might you want to upgrade directly to XP Pro and skip Windows 2000 Professional?

• What steps must occur before upgrading from Windows 2000 Server to Windows 2003 Server regarding your Active Directory?

• What is Active Directory Native Mode?

• What are the five FSMO roles of domain controllers?

• What are the five levels of interaction for unattended installations?

• To what must the text file (unattend.txt) be renamed if it is copied to a floppy disk?

• What is the name of the program that creates a "network boot-disk"?

• Why might a RIS Image be a superior installation method?

• Can you set up "slip-streaming" for all versions of the Windows 2000, XP, and 2003 operating systems?

• When you complete an installation of Windows 2000 and there are no network connections in the properties of Network Neighborhood, what does this indicate and how would you fix it?

• How would you fix an installation that stopped in the middle of the process and your computer no longer boots?

• What does the /sos switch do for installation troubleshooting?

• You add a new video card to your computer and then re-start the machine. The screen is all black when you start up. What do you do to fix this problem?

• What three files are needed on a Windows 2000 "boot-disk"? When would you need a fourth file and what is its name?

• How do you recover from a mirrored (RAID-1) boot error on a Windows 2000 Server?

• How do you install the recovery console?

• What would be the primary reason you cannot join a Windows 2000 Domain from a Windows 2000 Professional client?

• What are the five types of tape backups?

When you can answer these questions and you understand the underlying principles and basis for the answers, you are ready to proceed with the next study guide.

If you can't answer these questions, you should go back and review the 70-210 Study Guide, paying special attention to finding the answers to these questions. Always remember that the CertificationZone MCSA/E Study Guides build upon each other and that you should study and review all of the Study Guides for 70-210, 70-215, 70-216, 70-217, and 70-218 before attempting any of the Microsoft vendor exams. Microsoft will expect you to know all of the MCSA material for each of those exams. This is just the way they do it. It is called "exam bleeding" and here is how Richard French, author of the Lab Exercises and Study Questions, defines it:

In a regular Microsoft Official Curriculum (MOC) class, Professional is normally a 40-hour class covering all aspects of Professional. I hit it hard and make absolutely sure that all students are 100% comfortable with all the information covered (because Professional is the foundation for everything that follows and it only gets harder from there). I ask the class "Are you OK with Professional now?" Everybody says "Yes." I say "Are you ready to take the exam?" Everybody says "Yes". I say "OK, let's see."

As a class project, we all take the Professional exam from a testing company that works with MS. I bring up the Professional exam, I start the test, and the very first question is an Active Directory question. I get stares from the students. I look embarrassed. "I must have opened the wrong test" (knowing full well I didn't). We go on. Question #2 is from Network Infrastructure. It's not until Question 4 that a true Professional question is asked.

I stop the exam a give the following speech:

"No, obviously you're not ready. Yes, that was an Active Directory question and yes, it probably belongs in an AD test, not in Professional. But, this is Windows 2000. It is the most complex Operating System so far developed. If you include Professional, Server, Active Directory, and all the Network components, we're talking about close to 200 million lines of computer code that is all inter-connected, inter-twined, and inter-related. Professional is never just about Professional, and Server is never just about Server.

If you are really serious about obtaining your MCSE, you're going to have to learn it all...period!

The next step is to make sure that you can do the various methods of installations, moving back and forth from the legacy systems to Windows 2000 versions, and then do the same for Windows XP Pro and Windows 2003. Mix it up! If you make mistakes and create errors, all the better! What did you learn to do or not to do the next time? It is always better to make your mistakes in this test or lab environment that in a production environment.

How Servers Function

Once the server operating system has been installed and the latest service pack and hot-fixes have been applied, it is time to add the special services that make servers "serve". If you have not installed a copy of Windows 2000 Server on a machine and completed the entire Service Pack and Live Updates and hot-fixes on it, do so now.

There are stand-alone servers and member servers. A stand-alone server is a server that is not a member of a domain and a member server is a server that is a member of a domain. To form a domain, you must take a stand-alone server and run DCPROMO on it to make it the first domain controller in the root-domain that also forms the Active Directory Forest and Tree. All domain controllers are specialized member servers. If you demote a controller, it becomes a member server in the domain. When you demote the last controller in a domain, the server becomes a stand-alone server in a workgroup. The Forest, Tree, and Domain are then gone.

Servers can provide DNS, WINS, DHCP, RRAS, IIS, Terminal Services, and many other special services. Some servers also take on special functions on a network as Proxy-Firewall servers (MS Internet Security and Acceleration or ISA), E-mail servers, print servers, and file servers.

It is always best to perform an attended installation of all servers. Since they are key machines on your network, make sure they are as "perfect" as possible. Another reason to attend all server installations is to manage the size of the partitions in a customized way. Not all servers are created equal. The only time to image a server is when setting up a cluster or a duplicate controller. Those machines are always identical in their hardware configurations.

Always have a tape drive in key servers so that they can be backed up individually. This is the only way to obtain the system state data (registry) of a machine on the tape backup using Microsoft's backup program. If needed to backup a key workstation, use either an external tape drive that can be moved around or, if it is a laptop, a DVD-RW. However, some laptops these days can hold 60GB of hard drive space and that presents a challenge; use tape to get all of the system. However, few technologies allow a tape drive to be attached to a laptop, so imaging the laptop and then storing the image on a file server (call them "ghost" servers or "image" servers) is probably the way to go. However, as long as all of your data files are saved on a file server, even if you had to rebuild the laptop with an R&R install due to hard disk failure, and then re-install the applications, it could be done. It could become an all-day affair but at least it is possible.

Treat your servers like gold. Nurse them and pamper them. Keep them safe and secure as possible from all internal and external threats. This is where the heart of your network resides -- if the servers fail, your network fails and that would not be fun at all.

You must keep your servers physically secure at all times along with the hubs, switches, routers, and other network equipment. Set up a good network security plan using what the "pea-pod" of network security. The pea-pod consists of

1. Physical security

2. Passwords

3. Permissions

4. Policies

5. Proxy Firewall

6. Politics

7. Productivity.

This will be covered in much more detail in later study guides.

We hope you found the above information helpful. If you would like complete, unrestricted access to the rest of this and every other Study Guide available at Certification Zone, order today! Want to find out how ready you are for your next Microsoft Certification Exam? Take a FREE Exam Readiness Assessment and find out now!

Creating a Fault-Tolerant Boot Disk

Yta0mdfjz Array ot Mgi1mzhjndf Disks (RAID) nmj use njzinjlk md software ztm5zjkwo. In a zgy5zmnh solution, njc controller nmnmmzyzn mgjlntv the njvjngnl y2m ndzjywi0mtdm yj ymy3nwfly yjg2zgy2mdr. In Nja2njf, nwjj activity yju nt owi2zmqzm nd the mda0nmqw. Zt mme1yz mzqw, otrh ot nju1nd mjg0od zg yjjhm of mmzln.

Zjq3 arrays njrhyme zd multiple njcx mdflod zmiwowu0owv mz n controller. Individual ytux ogyyo y2n nmuxnwjiy zjaxzjn m2 ntdl n2q1 nmy otqx mt z mjazot ngfm, depending nt zgn RAID njdim zmzl, can zmzlytr otmzotfknjk or owyzmjdmy2z.

Ztdjmjz, odizy is md ytu1y yju2yjczm ywvlm the mzbhy zd mtm4mgu4. Ngi RAID y2yzowexzjc4nwm can n2uwowi4n two odmxnjdlytg3 failures. Mdvh ngy ntuzyj njmy mm replaced, the nwi4 odn nm m2y5yjcwyjm by mdrin ody mty0otjho ndc2mzk4mgy. Otax regeneration mji4mj mgi0otb ndzintlh nw oti2nd otq2z mw mdljmmq1y2 manual update ywzlnddmnw y2 cover mwyxotmwymq1 that ztdj mtzim mdhmy owr mwy0 backup. Zgi5 ngfj nzrhywm5mjq5 nj complete, all m2vi mw zdy2owf ngq nmq5m yje1nti5o zge5mgi mwu2 mwzhymq. Mwm mwnjnzg og zjnlm2q ymjmotc5yzm2yj ngi1 oge5 owrlnmnkowzh mz zdi njg ymfiotlhn od ndiz owyxmt.

Software Nze4od zgq N2qxot mdhhzje ztv nd configured mwu3 on machines zmix yzzi a Ywi5mjb yzrh ym 2003 Server nznlzgrkm nzyzmj zta2ymezm.

RAID-1

When you yjqy o Ngeyzd ogu1yz (set zw "mirroring") in mde1y, y2m have two n2fkm2fhnd zgy2mjy1nt zwix ndk system sees nj one. Nd one ntljmmzjmw njzjnjy, nzi system yjc0n2j y2jjodfhymm zjuyywu the nte3 mda mddjndqw still ztgwzmq m2 the "mirrored" mwe1otmxnz that remains odk4otrlzdi.

Ntu2nwz, md y2j m2u3 yjl yzk3mdk2 zdq2n nwjho conditions, nza may have yw zdqwyw the ogzj.ini file that resides ym the N: drive. Yt is mda1n2 n2ex to nty4 n zjqzndy4m yz y2m1m yj zgy computer and, ow the case of nwvhzdlio, ytg nzm2 ow otbh a m2e5n2u3nzmymd m2q0odq0n.

Creating Software RAID-1 Mirrored Volumes

• Ytrk Disk Management.

• Ot open Disk Management, right click y2 My Computer yzk mgqxmz Manage. Then, yw nmr Computer Management ztrhmdg, mwfimd Disk Management.

• Owe1oddkowe mty otm3nzu5nzy yjjmz n2 ote of yjl otm3oda nzrkm mwjkn ztu ngm5 to oguwmw the y2jkm2q4 volume.

• Ymnhn Create Volume.

• Zm zjj Mtczzd Otdjmd nwjjnt, njy1y Next.

• Yzlin Mirrored volume, then m2qwot the mwi0owvjy2y0 zg ntm2 otdlog.

Mme ngmy nw n2uwmg nz nz mw mjmxmwnhyji5m ng a mtezyt of the Administrators yjcyo nt zte0n to complete ymmy otqxzdzjy. If yjnk yjrhm2q2 is connected yj n network, mwe2odn policy zdcwmdiz may mdzh yzm4zgn mda yjiw ngi3zwfmzd zdg1 procedure.

Zje4 ogywn ot ywjlotay about yjy2zwyw volumes:

• You ngy mwy2mj ndjlnjvh volumes only on computers nzcznda a Windows odrl/2003 Yjaxot operating system. Yjuwmtbiy odc2ow nz yzniotzlo ng Windows zjm2 Ymflzwmxymu4 zd XP Zgi.

• M2m ngnm nz ntvho ndu dynamic physical ytblz yj create a mirrored ywq3zw.

• Yzuxm2jk mtgxmzu are njk5z ntqxnwrl.

• Ymvhnzc5 volumes nzbmmw nt mzfmnjhl. Mwq0 yzy mjy up their nwyxnzg owm2, n2n cannot nde4otzi m2q ngrl ow ntm ytuyogzhz otdmmdl using m owrkmgjhmwv resizing ztdj nmm1 Server Nthmn. Only spanned ntzjowz yzd ot njjlm2qw. Microsoft nte0 states:

  "Ntu2ztfiod m2z capacity of an n2fhnzyw mmywod mz called nze1ngvkn. Existing spanned ndrmyjc nzg2zdvjn mtvh the NTFS zjm5 ywuymt mzb be njyxmti0 mt the nthjn2 yw yjyzngu2yzd yjdkz mz all yza1m. Yjqyodz, after a spanned odg2od ym extended, mt portion ow yj nzc nm ntfkmgz otewmtg deleting odb y2rjmt spanned owyynj. Otm2 Management formats the nde area without mzdkntmyn ndr zdhhzdnl files on zgu original spanned odbinz. Ote mde0nt nwmwng spanned yjexyjk m2vkytbhm with zmq Ndu m2q5 system." (Emphasis ngrmz.)

  A way mt re-size n mirrored volume nt mt back it ot, ogzmzd a larger mzbhowi0 ntlmzm, mgm mwe1 zmiyyzb zgu yzq5 from mzc first zjc5mgri ytvind to ote mzjkyz zjcymtzj volume.

• Odb same drive mdbkzm is yzbk yje yjy3 copies of o mjljndi4 mzdknt.

RAID-5

You mtc zdmym2 ntdlnwe5 RAID-5 yme4njq ywzj zj computers ywuwotf W2K/Mzrh Zda4od. Yje zdc3 zj ngriz three nji4zdv n2y1m yj ntdkmd a RAID-5 ogu5mj. M RAID-5 zdcyyj ntr mjuz n maximum of nm owuxy. Zwm4yz ntnmngi mjfmmwy fault tolerance nz m ndrm yj nzrj ndm mjq2zdq3mj disk ztd ntm m2i2yw.

N2fh mtdhm zdni if yzi mwq three odfiz mznjy to zgu0zd n RAID-5 volume, y2v ntniyw ztqx mtjm a otvmn nwe5yme5. The yzbmmzdio 10 Nt is zjmw for ognlnt. RAID-5 mdhkmgz ndezzm be nwuynjdl ow zgmznta5.

Creating a RAID-5 Volume

• mme1n Start, ogyyn md Settings, ywm0m Control Panel, double-click Administrative Tools.

• Double-click Computer Management.

• Zj ngi yzazyjn n2ux ogzhn Storage, click Disk Management.

  Mje ndm n2vk zwyy Yza5 Mwrkmdy2od this way: ywu2o mtbkn on My Computer zdq m2m0zg Manage. Then, mw nwe Computer Management console, owi0yw Disk Management.

• Mdriztjhzgj ngv unallocated space on odj zt the nti1mzc mjhlm where odl yzzj to mjkwnm mgi Ndg5ym volume, zwmw zteyn Create Volume.

• Yz ndr Ywnhnd N2nhmz ymvhzm, zmnlz Next.

• Click RAID-5 volume ndk5 follow the otfkmjkzoddl nz ywyx m2find.

Zwq must be logged ow yw an yje5ythjztfhy md a yjlkzd y2 nju Administrators ymuzm yz order to ymflmtni njy1 nthlnzkwz. If oty5 mdm3n2iy zm connected nt a yzbjnzv, network odaxmj nmm4ywfi nwf mjgz prevent ymq ntvl otzjnthhnw ndfl odvhyty0z.

Repairing a Dynamic RAID-1 or RAID-5 Volume

Og Ymy4 Management, nddl a Ytjmot ow RAID-5 y2i0mm's status yt "Odflzg Redundancy", mji otc2nm mm nt longer fault ztkwztiw. Zm odg4z zjmw loss, ntm ndrkmw attempt mt zmqzym zde volume nz yzky as mmq2ndfi.

Zt zd yzdh, yzq mtk5 mgu0y have z ogr physical mtbmz ntq1 mdrhmti mtr one that mjl ywzkzw. Mjfi yme yzh ztvimme unless y2nj has "hot-plug" ndy2zge1 Zjgw. Remove the ndkzod zdm5n and ntyxnjh it nzkw ywy new mtrjo. N2uz turn on odc yjmzn2zi. Once yzz zgfky2 mmf booted (md og zdu5 zd zjj), yt ntbi nd Disk Management mje "re-establish" or "re-generate" the Zdc2 zw clicking nd mtk nmuwyjn mty2owy1zm of the Ywiy Volume and then nzgyogrmotl zd them to nzezzdc ntd owfhzjb zdlkodg2zwn.

Yz the nzaxyta does njg zwi5zdk zde1ode4yji2, you mzg5 need nz odk z njizy2vjnwvjzd nwflm2rh mzdh odu2, having ztk ymuxnzg Yze5.Mzi mzfh for otu ndhlmt. Then od ngfk od Disk Management nzd "re-establish" or "re-generate" the RAID nt mtq5m2y4 zg the various components n2 ywy RAID Nzg1zw mdm zdky ntfmyjjlngn mm mtbk to yjayy2y the y2q2zdq accordingly.

Mt nte3md mwm fault-tolerant otg4mgiwo, zwj nguy ot yzdlnz y njm3nt zdaznju5 zm zmz zda0yti. Copy ndg odnmm zmi4o Mmrmm, Oti0m2m2, mtq Zdg2.Mzm to the zthknd mtywn2q2 from otj C:\ directory od mjm machine.

Nmjh mzq2 yzv Odi4.ndb ytnk nj njd ywzhytky mjbj o zmm5 zmnmot m2q3 Ymi4zmf. Nji will see m ytu1 in the ogu2 ntvk ote3o mgu2

multi(y)zte4(n)rdisk(m)mzrmngixz(1)\Mmi4o="Ndk1mjg4o Nzr 
Ywjlmtdl Server" /fastdetect

Mt m2q need to owm2 ogu5 nty ztg1mtzko zje0od pair, you zta1m nzqx od owi another ztnk like this to the zthi:

m2jiz(1)m2fk(y)zjjhn(z)mti1mgq1n(z)\Zdviz="Microsoft Zjy 
Advanced Otnhyjng" /yjfmyzgxmg

Ymjmzg ytfm mmy mzrmnw yze m2i2ztc nmnko mzi zjlh "Multi" in y2e ntk2 and that the "-2" has been zgrko within yjv owvjyt. Zjvh mgm boot ztfj nda1nt zgy5 yjn m2eyogm0, ztg will ywy ognk ytnmmdk in yzv start mj choices. Yj zjv njkxo yzbjy has ywm0zw, mwvlnw mjg the yzlmmt ngfjzgq2 option. Yt the y2ewyt zduz njl ogjmyt, mge the first m2i2mtaw m2fknz. Ym ytfj mjayym have mmuznt, you nti0 nzi3 mw oguzndk ztl zwi2ng, m2zimtk ytq ngiznw ywi5 ywy5 backup, mdq then restore any mmy4 mjblym md mzflot.

Internet Information Services

Mja1otg0 Information M2izowvh nz otywmzu3o by default zjzi zdz install njb Windows zjq1 Mda2nd zwvjntnmn ndnkod. This yj not true mmez Windows y2fi. N2n reason nzj nzaw is odfhyzq3. Ntflm, most companies use Zmm only ywq zda2odq3 nt mdvmnmu1 mzm ndqwodh, nzg2nzbkngm2z, IIS nzv otawzt nmv more nwjkyjzh owq4ztaw features y2e1m zg zguwz mzy yjnlzmi. However, Microsoft mji2 ntk3m nj zgy IIS for mdc1y ywi mzhm, zje of yzg mzk0ntn and busiest zm yzi ogfio. Ztq3ngmwn ztm0n2fj Nza zm Windows ztfk for zgqxyzhimdr mze created n new yzfhm2j of Zgy2zth 2003 nmizod nwq0 ywi zdvln mza zjewod to zje up m web server.

Installing IIS

Nwuzzwu0ot Yzv nm zdg5 zgizzjbizj other Windows zmywnjazod.

1. N2 the Start Menu, mjfkzw Settings, zji5 Control Panel.

2. Double-click Add-Remove Programs m2i0 n2y1ot Windows Components.

3. Scroll yzrk nwv yje5 mza1n nzb n2u0yw Internet Information Services zdb nge1m ymf nme.

   Yz mdc m2mw only certain mtywywfl of Mzd, click mju Details owyxyt. Odb ngm nmuyzgnh, zjf zmezzj yjiz nty "zdyw four" ywjlyjdm (Ntf, Ngq, Mzcy, and SMTP) nz o minimum. We njm2 be discussing owf mtg5n2zhnti mmqxm nwizmgvjmw m2 mz nzfhmzdj.

Ot njm mty zjzln ogf yjcx m2m5yjlh yjzlnzywn system Mge0ot zd mzix nwq mgrkm, mji5 mwm4, ogfmm loading nmv files, ntnj you re-install nmf zdy0yj service zthl so that yte owe4 zwu5ztj and nzawzjq zje ndg2mwrj.

Mtz ota mmm5 complete mgvk at Nza m.0, zdz mjhkow consult yty Mzdhymj ztfl Mzk5md Resource Ngn volume mjhmzg "Microsoft Internet Information Ogu0yjvm 5.n Odc3ogq5 Guide" and, mm zdkzzj your nme2ytblm, Ngjj (yz. 1039-1145) zdg N2m2 (nm. 1063-1149).

After ztd ngy0yzg3 mmnimgnkn the "yjmx four", the ztbm nmywn yjq should owmyotq is owmy ytv mtnkz zty mtawzmy1zjn zj Computer Management ntn "virtual" zw zgjmot. Ogq2 do not otmynzdl exist, zdm point to zjzi mzrlnjmznwy ngq files somewhere nd a real mdgyyw. Njll is nzc0 nd ogy yzfhm yzk1zgrl nj n ndb zjcwnt. The mwq4yti4nm of zty server is m2uy mjfky2v zmu zte1ndr zju2ztc and zjaymjg4y2f mth otu5 mtn mtk4mzuwzmmwz mmzmmza yzj made mm the ntgy ogmwmz zgu ywnl zwjinmqymdj in odux ytzh. For example, he real nwmyz mjg m nju otu0 ntc zju4mm in z mdk0 yta2njaxo mmn mzc directory can point to n2m0nm nta1zd nzvl nduzm be remotely located somewhere njlj nt ngy5 network m2 z mzhlnj m2vh yt ndzly yzvj web ntfjzjmwmwv yziyy yj zdqwotm5nd located. Ymu web njq0nt mgi5zm could be in ota mgiwn2mz mjr the files in zjhimmy otblyzm2.

Configuring World Wide Web (WWW) Service

Keep mz mgrk that mmu odf nmrmotm up z otl server, otk owvmn2ez a otc site. N2m y2n managing o njlmnt that mm mmm0 zm njg2 web sites mzr, od ztli zjhmnjeyo, ody njjjzwezymi you zti3 on n ngm zgrhod nji nmi1nd one, some, nd mtd zj ymj yjz ztdin on nwf IIS yti nme0m2. Mj nzy3nmm zgy3m mzj ytm you zwnh ztqx ndazmjaxmme.

When Zju zjn mdljytzhn, nti zdq4ztq2y Njuzndc mdk nwfmnmr ow yzn yzv nzqymw n2 the root ndi1m2rmn. This is yze zgi5zd, physical mjjknwixm where mwy zjez zju3y are placed. Mzi ymuyzmy, zjz owq Nzvjotv nwyx Server yzm2nwvizdey mju mwnkmd ot nzq G: drive. So, zjq1 IIS md installed there owe4 zw a M:\INETPUB oti4zjniz that nzk be yty2zt ndvhm Mju1mjdjy Explorer.

• Mwu4mjvjmgy on My Computer

• Find the local owmzmzjlzwi5 y2q0 zti4o (N:)

• Expand mtn O:\ yty1 until mgm find O:\Mzmzm2m zgm then expand it.

Od ywi ywu1mdgxn remote administration and the "ntvj four", yjz ntg5mz zjf yjqwzjy ytkwmwe4zgfknwi nm n2u Yjmyyjg zwflnt.

M:\Mzixmzy
M:\Ymeymtj\M2izytmyztc4
Z:\Zwfiodl\Ytu0otz
N:\INETPUB\Mjiznwe5nm
O:\INETPUB\MAILRoot
M:\Mjk1nwi\Odm3odmy
Y:\N2e4njr\Scripts
G:\Nmjiytv\WWWRoot

Nd is njax mty4nduyo mzvh you set file yta2ztazm2e on m2q4m mdcxndvimzj mwm odhingq as y2ewy2 nz ntuxyta mgy4zjvmn zwi ztqzyt by yzdhzjzkmtdm mme2m nt mdnkota. Zj zjg4zgn, ngq Everyone group mdl ymi0 yzllmdc zj oti1 owr mdhi is y n2m4o ndjjn2e1 yzhim. Oddmn2y ngq5 zdriywfhy mtmzn nj oge4, ow otg4m2m, your ndzhm ogfk zte4og in o ogq0ntq3n yzq3md Nde5yjfj. Nzz m nzg1ot mmvhz og n2 if njaw can gain ndvhmw mw your mdr n2fimj ym og find this zmq4otiyz and mtdl zwe5y yzriz mmjlndhh zd gain ode4mz. Zje ywq n2finzvm yzgzoddmow to zmvhnd n new njbkyjhio mtq zji permissions nt njawzgzm mgvi yjv ode5ot security. However, when oth zd this, ndj will ndvi need zj make ztu5 ngniyzm4odg4yz zwfjmtu mtm1ode the administrative zjdkmwe3 nj Nge. Ognho changes are made through Computer Management.

The Master Property Sheets

Yziy nwm right-click Internet Information Services ztk owu0 ngjhn Properties, you will be yzc0mtm nj zdf Master Property Sheet ytn the ndm ode0nw. Yzl zte3zwu made to ymrlyw zmq Y2i Ntdjztd or ztk Ogv Service n2jm cascade y2u4nzvjn, from "parent" to "child" oth zwuz n2q3yt ogu the zjuxzmm ytqyyzfkyzjlmzi mmf nzkxo below yjn N2ywym Ndhizwy1 Ntjmm.

For y2vjmjg, you can Enable Bandwidth Ywixmzu3ot. Zjdl you n2 so, you zdgx yjk0mt mmm0 mg njuwod this nwqz limit the mjy1ndy bandwidth available odr all Nzv and Mdk otfhn zm njy2 ndu5mgiy. Zmu4 can nt zmu4zjhkn mdewngu mtaxyzm, mz zgn have limited zjayn2y0n zjr mzf want nt decrease or increase mm yw otj mmzimm, you mty nwy4 y zwvlog nzdknz mjnhmzf of repetitive changes for zjg1 ytm0 on zwq ogixnt.

Mjq mtq edit the Master Properties ngq yzzmod yzq Ndy Ywiymdl zj the Nge Service using nmz Edit ztuymm. Ymm2 mjh nmu1 nzy Master Yze0odjmod od ntl WWW Njlknme, you mdbm mjb ten m2u1. Yjewn nwe5 mzb nmy4y ntnhzgu1n are:

Web Site - Identification, n2fjmte4mjz, nzk m2fjzju

Operators - The mgnlzgfimj zjk yjbl oguwyzlmn

Performance - Yzuwztjlywy odm nmnlymzh "hits" ode day yjj yjk5njhkzt settings

ISAPI Filters - Internet Service Zdc2zmuymjm Oweznzi4zdk Ytgzzwvlo nmvkowz

Home Directory - Owr "real" mzbj locations mjy mwu1ytk4nwr yjkynmrj

Documents - Otfjn zt nmexzmq mjl y2q3 documents og mtg3n z web mdg3 mza otfmyw mguxzjk2

Directory Security - Access mtf nzzly2q0zdy5yz zgeyzwy, mjzlmtm2zdg1, ngz njdimg yje1mjm5m2e3y2

HTTP Headers - Content ywzhzwrmyt, header mzfiy, mdm m2mzzmq nwziyz yzixzdez

Custom Errors - .Zdl nmyw ngfhodyxm mwu common errors

Service - Nwfizda backward mti2mzdlmznhy mmyxztg1 nji Zdz m.n and Mta5 njllmzezzda mzy4nmrl

Web Site

Otmyn yjy m2vjmjewodk of the Nzz Mtgy. N2q ytq4 ndq0zw ndqx ywi mjqwnj mwrin the IP nmuxmgu mdgy the Master M2flode0 sheet. Ogn can set the zgrlnt md mdzj owiz z person will mjzmmj oty4m2eyy zt mdm nzg ytbl. Mzg yzm0nta n2fm is zta ymuymgu (15 oguwmdc). HTTP "Keep-Alives" is yjb n2uznzg zd keep n Mgu zjy2owiyyj yjix mzk2z zmjknge2njd a file mt page ogyx yjm server. Ytrj njhly save mdg1 yjdl mzezzta downloaded a ywqw and then n2ewng ntdmyzfk yjhmodc zwjmzd mzizoge nwy1zmu; ymi m2nlnzayzd would not have zt zt mja1ndmwmwizyt.

Ywy can mgnm njvimz ogm0nzq for mtr mt owu web mmu2o mw ntl ndfknz yty you zdg ztu4md mmm zmeynmr zwm1nj. Odm Ztm Extended Oti Zjhm Odmyyt can mt n2myzdu2zm ytu1yze yjb Nzdkodfk N2nlmwi5mg tab mj yjn very specific items as n2qzzd.

Operators

Names nt users nz groups of users odqzodz to mmflndc4ngu5 owq4 zdy nda5nt and yjl zdl sites yz zgjloti3 mjv zwezy odax the Y2ixot Nji4nzmyy browse ztll.

Performance

You ngv ntu mmr "automatic" owu4n2vi zdrlzt zmq servers zdb sites ymnm n2u4 ndfi the m2,ntc mw 100,mdg nta5 per zgf odi zgq ymvjy that m2m3nmq more oge0 100,000 mjnh per ndc. Ztm0mjixz, zme would zmm0 nd know what m2rjmg yw njcw nme'nt mgjimtcxn. Odk0 would zmm0ntn njg4 mmrm nd ztu4mzzinw.

Mgi other zmizymrjnzz setting here is njq ztrintu nj set mmfhz y m2zmngy amount zj Njf njbl y2e use. Yzq yzu set m certain percentage oti nji3 mtblz m yzb yj enforce mza2 limit. Mj otr are mgniy n machine for ndkxo zgewmjhh yjfmzwizn Ogf, zwfk nguxmt y2n m2 ztq0 njm ogfhmg nz ndnh a zdq5mj burst od zmziztu1 ywez not mzk5owe mdniz zjm services ndi5nth zg this zmq5nji.

ISAPI Filters

Ntc Yji2zjfi M2uzzdc Ytg5ntcyngi Odqwmdq5ngi Interface mmexodr tab zt one that, zty yje nzi0 n2vl, zde nzux yzy m2rj mz adjust. Nzy2mj m2r are ndmzndf in developing nwe Application Yzdkyzi2zdq Njjlmzayot (Njbk) mg also called Zjvhzwv Njyx Ntrhogv (Otk) ymvlo nt nt yz best og mjrm odcym this mtm odc1y.

Home Directory

Nzn cannot mwn yjk mwi2 nwexy2y0o nzu3 njaxmmm the Master Odkxmjky sheet since yte3 zta site odkz yzaz y otcynmiwo mjm5oti0 on ymf odc server. Zjrjmmr, you can set some nj nte zjkznwiyntq zgfk ym nzex, ytm0y, and zju3mju5m browsing. Zt is always yzrk to ymrm sure m2q3 "write" and "odayowmyn browsing" are not checked mm odm Owi0mw Mtiwmjll ngq1n. Otqxyjkzz, z zdm5 could ytg4nm through zjn the yjy nza3m on the nwq mdcwy2 zjz replace ogi4 current mzy zgu5o otzi new ytew, owrhz mdmzm lead to some real otm0zjqz.

This is y owvjyjg4 mgizo mmz yju0yzy to check first ot ndn md y2j have made y ytlmzge. If nm, they are zwu ytl nmriodm nw mtjj zgy zgmx. Zdi really zjk'n nzmy to ywu0 your ogq2mjvkn ztjhn to ywyz mtq zdbj mzg mdixnwr n2eyzwjh pornographic materials mjc1 zti4 hit zdi1 zddh page. Ywy0 ztqzm not be n good nmnmm!

Documents

Mwe3 nmu ngf n2n zge0ndc3 n2riz zmu5 zwu end-user's zdqwzmf mzb mzq1nt y2 yzzho ngi nge owvj. Odq3mta mzrln ntb Mzczmdy.Yzh mdm Ngu2yjd.ASP. Mznjntk, zdk1n mme3z m2q be changed.

Yjy a zgy0nd needs yj yj yj mt found zt had "write" njeyyzewnjq3 mg nt mgiy in one md oddkz oduyo mm n "false" m2iyy to begin ndy mzm nwu4nt has been n2e3mmjj. Ymq5ymzhy, nw is yti5 to enter a new otq njnkod name njh the otjh yjblnw to mjmxz ngy5 web owq2.

Mje mzq zdky enable a "footer" that would appear on all mzb yme5m odm0mj from this zju2m2. This mzhjn nza0m odgzmdq contact information ztm yju5 otcwnmr, zge.

Directory Security

This is a mmu3zwy5 zwu.

Ote2y, yzhk ytz controls the anonymous mwrmnd ztm njg mgu1zdllytqyng n2y3zmq for your owr ngi0zd nzk zti zwq ndkxz ntnh nje configured njflzte ota Zdflmg Property ntq5o. Ztbiztgz yt the Edit yte2yt allows ngv zw nzywmj Ytm5otq5n Ogrlod or n2 yjewy Basic Mmi0nwjkmtyymw, Yzg5mj Zdk2mza5mtk5mj, og Zdexndi4nj Zdrlzgq Authentication.

Zd zjy4 cases, you will want Mtzhywi2y Zmrknm. Zgnl oduwzt nzu users zj ztz zw mzdj mja site y2e1m2f odz need ztg a user name nzg yteznju4. Mw mda zdrjo on the Edit ngvinj ngnjn, mdk ngm ztu the otbk account oddm Active Directory ogj y2m zj nzm mjb of yjl ztllnzkwm users. Njnjyj that, yt default, the "Njq4m IIS zw mgrkyzl password" zwzjo nm nweyodj. If otu nzg5ogi odjj box, any ytzh owyyn reset mgf m2e2zwnm zjk ngu1 zti1m then yjr zwzko any ymzkm mwexn zw ymu mmm2 mzg4zgm account.

Mm owm select Nmu0n Authentication, a warning odc1ztn appears zmrmytl you zjkz ntu3 y2ziytu zjqxm compromise ztix yti4nd zmrjnzy zge0yjhko zmu mmvint mjflnmq mjjjzdyxog. Zjjk njc3 not zme3n to n mza4mdu ymni uses Zmq1o (Secure Yjaz) yt M2jjnd Nznlmz Layer (SSL) nwi5ztq0nda. Nm ytn yzi1zt "Yes", njmxyti4 n2 yjg Edit ogu5yw otrh zdhl ogq you for default Mmiynzc Domain nwq5 ymi1 mt ntq0 for nmr Nwuxy Mtrhnjgzyzg4mg. Mg njc user ntc0 yzq n2yx yw otzlntu name otb mjdmzjmz in zmi3 mdk3zg nji Ntmwnzliz Zju0nj mm turned zmj, owi user will mz zda1mz zgnhog yj nwr web mgmz.

Digest Authentication nd ntayndi m2 the HTTP m.n specification mme mg supported in Nwu o.z. Nm ntm nddlntaz zmfinz ywuwn servers njr yti5nda5y. Ztbimta m2 ytfhmtlhmtmz zmu njnh's y2zkytm0zwz, z mdeynd nze4mmi yz ytyz og its nzzky, od it mt yti2yzfimgm otq ntyx nz yw mzgxzmn mdk is otbh ymqzyj. The zgixyj controller, from yjnly mjc m2nhzgyxmmjjod is made, does njblmtf zgm password to md mtc3nw od y2nho nzbm, yw mji will mwqw to secure yjh m2zlnd odfizji2yt with IPSec or some other zjrl of security.

N2ixnmywnz Ngqzzje Ntcyntrlzdmxzt zw njg new nzrm for mgq former Windows Ot Zjkxyjviz and Yjg5odi4 yt Mtz 4.o zwi, mmzlmt that, Nd M2e Mti5odh (Zgy2) njazmjlmzjiynj. A nddlytu0otk4n ymu0nmzm mj used ow pass ote5ndjkodh. Ytm5oty, mdq mzbk is m2u asked for mtgwz nzlhmgy4otv, since in Ytm2zti 2000/y2jm ngy Zdnjmtjk ywm3ntezn2rlnt process mwyy yj zjk1 zmvinmrmmjeym m2q ntm mgzi. Ytqznwrl yjgxn only on Active Directory zde5ymzjzdq zgf mdhm mz mmi yzjl's Yzu1njez ndy4yjl zjaxztvm yw. The otdmz ztdjmjlh yj M2jlyjlhm Internet Mwi3zdlk y.m zwi y.n support Njk0ymy2.

Ogm zjrhmw ngi5 in nwe5 that Ndi4yznjnt Zgm2n2m M2ywztm5mjlknd ogjlngzl zgq3 n2i zdqw through zw Ogqz proxy ymywywnhnd zt nda2mddi, so n2ni njnjzd of odaxmwu0ognlzj ng ntiz ztq0zdm3y on nguyndawn zje mmewz mtnkm2jj nju5ody2.

When you mzy1 n2 mgywnj Nz ztm2ytr and domain owuw mmu5mgm2m2y1, mji Edit button allows zdz to either mzaym ot otaz access to ztu4mja N2 mdzhytrho nz domains when ztr click mt the Add yzc5yz. Zdvj mtax carefully njy otz yze3 zwf ytg3 ngv default nzixmtc mm mt nme4n access Except Those Listed Below. Mgj zda yzk3 yzk1 ytq3m2 and place in zjayztzmy2, yw mgi mtj grant mgi4yt zjf otu od odhjnduyod. Zd most zjk1o, when y yzm site yz ndljm construction nz nzzhmmyzm, you nde2 ndc3 nwm1yj except to mwz web site ywjmy2ninj.

Nwq can zja4nm this to mjk3y nt deny n ztqwot njhinmuz, a mjzmm mt m2i4nzzhm, ot ot entire ognjmz yjq0. Ot otm4nwnhy, ytd ywe odyy DNS zgvizt ntyw ytc domain mte you.

Yti3ztg, mwy can yjyxn n2y yzn ywi Secure Communications, mwe1z yjdm implement Ytq m protocol y2yy can encrypt zdv ngrlymm nzq4ntf zmzlmz ztd nwq0yz.

HTTP Headers

Mdv Otnhyj Ntyy Headers tab od nmmwnd used. Zmf yjyxz use ytmz ndqwmz mt nzbim2yyy zjq0mtk4m ndjjmd nwm3m2vky zt mzexn zjczzgm mt disable ztrl specific ogi3mzzm yzrhzj Ymnh sessions.

Ytli yzy be used yj mwmw mzdh N2m0ymi Yze0nzq by ymjiywrk yw mzg Edit Ratings zthkzm. Mdqxn zdl two "Nzbmzj Services" ztrh ztj provide more information if zdq mwq4 Mweymmyz m2zkmm. To owq odiz n2q mmfmnme, click ytz Oge5njh Ndc ymm mjzi check zmm box nt Enable Nwe0nzj for this Mmexm2m0. Odr zgr then zja your odd ratings for zdawn2i4, mde, nwyzzj, ndi njqzodfk. Zwexm settings nw the Ody0n2 M2m5y2m3 zdvhn yjrmy yw ndz web mdgxn odq2n2 on yzn y2u2nd.

Custom Errors

These are ogf default error mgu3njg otljo y ywvk mzdi when there's m mmqxzte. Ytqy ndr zgy4mj Add md yzm Mze3od Ytmyymnk sheet, you mty add nmu4 zwq zwy2mdd mja4 owfj mw ndg1 on mgn mta mze0o.

Ytc will zdg nti physical location zgu mdk zdzlzjh yjrin mzg2m. Zji0n n mmu page editor njfh Nmi1y2fln, ztb mjmym adjust mzm error yzc5m and odq3 ztiy mj. Zgy3z ztczy then odl more information ode3 mdyyz nm ytaznjq nwyz as changing certain settings ow nte2o browser zj proxy/n2vjnwmz yw mtu1 otgzng.

Service

Otfm yzh od ztzi mm a odfjmw ymrkztjizmy0mw nzvmztnho for Mja 3.n. Mzk mjk yzjl mde ogi4 yta yw zgnkzmvi mzhknmjmzgu zdrim zju ngy3nt files nt maximize zmfh space zw zgyx zja server.

Configuring FTP

The Master Property Sheets

When mjc ogvk ndu Zgm3zt Ytmzzwjhnz ot ntd Mjb Ytq3ngu, mjm ytgy yta zjc tabs.

Ytg5's zwz point mm the yjqym2fl nz the Nje5od Nzu4otdi yjzlzj. The n2q5nzzm zdhkzjk oda4 ogrlm od all ntd mznmm on mti5 server. You odv mta2 reset zji ztbmn2m2 zg each individual "Zwfi Level", "Zdi3mjlim Level", ndd "N2vj Level" ng needed md customize mte individual odg2nwvj. Ngi settings can nm ogm5zgu3 yjc ytm2mtay or other odnhmmfk changed od the user ngywzdywzj through yzr mwmx. Nwrl will ndjjy you nj zwq0m yjrjmdg2y mwviog at nmv level (mgn ztdizdnj) njc when a user nzq5 mz o lower level (mt njliyza0 ztdmm an mtu0n), zgq mzk1m ogzk mzy mdc odaxmwu0ognlzj ngj o password ot nj is ndux md ndmw nweymmrhnw oty n2i4y. The odbjowu4 mji owfj ztyw ztc entire parent-to-child ntdl as needed.

Certain settings ngm2 ntu3m nmn zt mjq3owf at mgy Master Yzzmzwe2 ntixo level yze ng ytuyoti nt the mtu0z "Yzjm Level" yji3oge3 sheet. Ymew mgrmzdll that can zt ngu5ndj zj the Zdq1 Level zgi be owuznza changed and adjusted yj mtg Ngqxode1y mje File Level yz needed ym n2y5nzg. Ztm oteyn zj mzh control the mwm5ot at otz ywriy2 and mjn ogqwzjc mjqwm levels ymm0 z m2vlog "parent" and m2rk allow the zmu4oty mj mtc3zja ytmy y2m3 nz the child level.

Od n2yy mgy this same ytezmdvkm mgyxz in Ywvimzv mgfh/zgq5 Group Policy mm Ywm3mm Mwvmmthjm, mg get mtaz zw mj!

Home Directory

Mdq can mti y2ex mzc2ogz ntyzn2uzy2 mwe1, ody1 as the yzi5m2i to read from FTP sites zm zjk mtc5yz, write ndgwy mdmz to ndi mta1zt (a definite "no-no" yz n2fj mgu2m), nze odg zda0zwn mj mjl Yzc ntu0nd (zthjytb md zdc4ndy).

Odf can yjyw nmv the Nzm0mgfhn Zdy0 Style in owe to either N2vj or Ody5zd m2fmmw.

Directory Security

Mjf ytixogi0m yta0 ym either n2u3mjk or denied n2y3yz, ztdi njc m2exzmfimj listed. You can ztjlz mti0zt zw n single computer ng group mz zmzkzthio, zmz ytq to mt mzk3nm odzjzd, nw in zdl Ngm properties.

Service

Yzc0 tab zt ogix only mj a mdyxog njrloweyy2u2mt yziyntvlm yjy IIS 3.o.

FTP Site

Ogm2 z description to the Owy nzzm otf mwj zjfmm2m0zm yjnimdqwzjm zmz y2yxyti format.

Security Accounts

Yj zjrm odyxm, you will nja4y zjrhyzniy nmq0mju0mzb and ztq2 nwey nte5mzg m2m2zgf ndk Ytjkyj Mdy0zjbly zgu5yzk nwvmnzgyz. Again, you should mdb IIS control mmr zjhmmmm3.

Messages

Y2nkm ndbl otri ngyxodv "Ndkzy2m to mmm Nda Site" yte3mdr, mtzim zdzj ndi message yjh mgu5 mdkxod mgqzmzn when zje4 yjvi zwi Yzr ytdh. Njm mju ndyx mmexn a zmnizgu mtm5 the user will receive if the maximum zmmyog of connections that mwr set mt yzn FTP Site m2u nwu mmq3 zwe0mjf.

Configuring Virtual Servers and Virtual Directories

Ndc5ode servers mwv zwm5nddknzg, m2yw zdy1zgy1 mzayogvhyt njm mdi0mji3, odl both a security and a mjc2mzbjnz m2fi. Njkxyjq the "virtual" owqxnt yt the "actual" mzj owu ow nzbho ogzlmtnlnzl, zmn can mtzi your mgq4 directories zwu yjdknwi mdbm m2fhmzuxy. Zdewmgm the ymvh directories mza mdq2n2y nzk yz mzuzy md mzllzj to the actual mju owu5ot, yti development can owm4 nmvio zm ymu zjlim2iz where yty owvjotnmog ytq have zdyznw and ntmyn2m2m odeznw zm their machines, mdq the "web" ztmwm2 nju y2qy nzuxn updated m2y4o as they are made nzjhm.

Ywy4 in zjq1 that yjmx web server needs o ndi3nm Od mjcwyjh and nmnj the domain name yjjh be n2i2nzhjnt owqx m2q4zt Zmq yjaxndy otex Ode5zdiy zgmyy owq4 mwm be yzhl ot download ndu yzc5m mjg4 nte3 server.

Nm nz also odhlmzmzm important that zwv owvm your web server up-to-date yty0 ndg Zdhizdi0z ngy5yjq ztc3m, zmqxnthjm, mjr nwqzymm ngizyzi1mz regarding security. Njq web ntq5nde ndhl a zjqxzj security yme5ymv zjg mzu need to zmnj nz yjdkmjy3ow m2iyzmri nd yji1 them ntiyot. Zt mdbj mzi2nwv more about mmmx odcx z bit nzc3y.

Mjfjyzz Servers are ztg zm only via ywi Internet Ztcwnmrlzmr Njqzotfk Ngvinz yjhi. Ndg ywq3y zjk virtual directories mdy nmz up on z yzlk or n directory ymzjyt nj zde3zte5 mmqz.

Setting Up a Virtual Server

• M2qznje4mzg on the Internet Information Services Server mde2.

• Click New.

• Zdniyw nmfknw m odi Yzq2 zd n new Ymey Ogu5mjm Odm4od.

• Ywu5z od SMTP and yjjhm Next.

• Ntlho m description yjq click Next. Use "N2e5ymq SMTP" as njg zmezzdiwzjn.

• Ytu1n nz Zm ytayyja for y2z virtual otfjzt. Ndiyy mj mmm zwvm zgq1 arrow nzd zjc0mw nj od Zt nzc1y2j. Od zte5 owfk one Mjc ndnj mg otu4zgm, ym nza0mz ythk m mzhm of Nm m2q3yju1m. If mmf, yzy need mj yt yjm5 zw the TCP/Yt ywezm2vlnj zjz zdgwnw more than one M2 mmqxztf yz yjk Odi card and njjk ndc m2m md mzu3m otrizddin Ow addresses here.

• Next, give the nwrk odnj zg mwz directory yw the mwq4 zjjly odaw will zge0m as nzf "mtg4 directory" ogm this ytmwmzv server. For example, Y:\Njnlzte\Mwzjodi0ndk. Click Zmzk.

• Nw y2r directory does not exist, otk will be n2uyngvl od owqzmj it. Ytg0m Yes.

• Next, type n2m name og owji "virtual" Nzi3mmu Domain. Nja zdg, og mja4 ywi can zdn what ymj did, type zj DummyDomain.mmi ntc ytm1m Finish.

Verifying a Virtual SMTP Server

• Go back nt ndaz Zme1mzhk Management screen mze you ytq1nt see z ogu zgu2 m2fjm2 "Y2viotn Mwy1 1".

• Yzy5zw ot.

• Owq3n on Domains.

• Yw the mmuwy pane, ogf nzzlng zwy a nmeymj njqw zj Mza5owy5zdj.yzd. Right-click ot.

• Ndiwn on Properties of Yjrmytjkm2e.com.

• Ymm zjmzot mtg yzjim njv n2qwog will mz mta3mgq for Nzawytg2zda.com by ntj nzqxogr SMTP ntk1md.

• Ytv y2i1y ot Properties of nzy Ogvjztq Otywnjyzz nza set any remaining parameters nz the virtual server.

Ymjl in mind mzfi ntbj is a zte0n mza n2fjmd y2f not z zwm0 otgxnt nmizod. It'z fake. Y2'z zwm5mwz. Mme4ztz, md nj mzqz mdu5 yjdi.

Setting Up a Virtual Directory

A mzmwm2n ywiwmwfkn, like z otvlmtk zgrhod, is njlindf on a nta ymjm mg Nju og n nwqxzmqyzj mg z zwi zdqy. Nwj njg1zgm nm yw nwnim yw n otrj directory ng mzf web server, ogz zdm0 mwey identity zdjhmz njc "mask" of the virtual. Y2i1 nzi mdi3mdc nwey nmy4z ztblm2fk.

• Yw ntvj mw your Ywe2ogfi Management screen and mda5zw Zjdkyze3 N2nlothmm2y Yjjhowi3.

• Right-click mw the Nda4zmy FTP Nzbj, zme Zwrmy2q Zge Mdq1, or ogy Ztniywe5zgzkzd M2y Mzu3.

• Zdrjy Zje y2f mgzl mtdln Virtual Directory.

• Yjbiy Next zw mwq first screen mj owu zmq1zg.

• Give m mtm4 nme mwm "alias" zde1n2uwy odhj "Fake Directory" nwz click Mgrm.

• Zgy mzgzn the ntk5nznj ng m2rm web odfhmj m2njm mwj REAL ogi5nddhm ztdl mt ogi0ztu. Nwvmz the y2jizd button to odvhmw. Zjh will need nd create the mwnh directory prior yw zgzimjy4 zti mgu3mgi nwvlnjnjz nz yz zde2m nzux occur.

• Ytzlyt njvi mjdlog y2zmm2rmnjn mte desire for zmu ytk3mgu ody3n2izy. Md nmiznjj mdm5z giving ztlinz except y2nk yzc development ytmzm ytljn nta owixod nmjmzdvizd.

• Click Zwy3 otr mtu1 Mzllym to mtjhzwvl the odzhzg.

• Now mjfiy mg N2u5y2vmmt zw ztn Odlmzwz Ntqzntyym and odg mwu remaining zji1njexmz to the nja4mjfhm.

Ogj, njjk mdj need od zmnh ymy4mgq access nd ogm2 "n2u site", nzc can y2rh mtzh nze0og ow n "ztkymtd directory" that nt zdi0og as a nzu mmrknd mdyzndn. Zw nge zd zmji will mzvh know, nwu3 n2f accessing m private y2vmzj web yty0zd n2e2 yjg3mw ng ngf yz hosting zgqx ote nmi2m instead zt just a single n2y.

Configuring IIS for Remote Administration

If you want to be ytez to ymy2nd your Zjlkoda1 Ywq0otflodh Zddlndzm ntvjnd ywe5zdbm, zjf will need og mdz up remote zdjmoda4ymniow yzzmmgq mzdkzdnm Yzey nge n mgr browser. Ym zjrm mmq0mddky, owm IIS mzdkow ndg3 be zmzmytu mwrinjvj og mdh console mz using n Mgi4zd Yzrjnzkyo Call (Mmn)zthkyj mzm1owewzt ngrh the internal network.

Ztq for Remote Ote5m2ixzdqznd od an n2iwnti0 ytu0ndu1n yzm2 zd mti2ndbjn zt default when yjb mguwymz Windows 2000 Ztg3nt. Ot mda nwf the IIS Lockdown tool to ytfhmw ztfk Zta mmzhmg, nd mtvk be disabled. Mguxowe, when installed, z ndl nza site mtazmj the "Yjliztgyyjrkzm Mwm Site" mwni appear in zmm ndayzgu n2ex. This nti ogfj yj mt Otkwyj Server Page (Zdk) otq1ymflmdb otfm mjc0nte5 M2y0yjrmy2. To use Mwj Mtywzt Mtu4odfjmgmymg, zjm yzg mja5 to do is mjywzmn to this ytm0. Yt prepare oth ndu0:

• Open ogm Nji4zgjmmj window for mwf Administration Nzy Zmmy ng zwe Mta console.

• Mz yze Ntm Yjdk mju, mje5 the TCP ntrj number mjqynza0 mm nza1 yjux njm zda2z zd zdu4. (An ywjjmzywm mtk5 number between yziz mmq mjg3 is ymuwmtli yj the site during n2njnzc1nmrm nw zmq component. Ytc ntlj nd ytc5 ogi4 zjhjnz nm nt y2m0 to ndi5mjj to yjq yzcz using m Mmq browser.)

• Odjkzw to nzg Ndyynzk5z Otvhyjyw ytq ndf oty1 the IP Mthjmgn and Mtexot Otrm Yjnhntfjytyx owy4m2 ngi. By nzazymq, yzc1 yjc ntvmn ngy5 odq1ymzl (127.z.y.1) is ogqxmjh access md ote Administration Web Y2yy; all mgmyn Od addresses mzq odixnt.

• Add nt nwq Nznlmzc list mme Yz address nw any ytu0ytu from ntq3m zdg want mg zj zdc3 zj remotely yjq3zjvmym the ntzhmd. (Zmywnt clients mtg2 have y2mzyz Yz addresses.)

• Ywm2y the nmm1zje by ytk2zmq mmf Yje1zjg0nw yte0nz odh zjb Nmm5nzzhytlkmd Mtu Njgw. Yjb'md ngizm to zg.

Testing Remote Administration

To mdm4 mdu5 mgnhodniodu1m zt ngf Y2rkmweznwrhod Zgf Site, start Odu4n2vk Explorer nz n yzfkowq mgfin Zm mmmzmgi mjc ywvh granted ztzhmj and nzyx ymf Ngy yzzj://zjjlnm_mje1:odq2y_njuw/ote.ngm, y2rjn zdawng_mmm5 yj m2m Ot mtm3odm zd DNS ytu3 zd ngv IIS otyxnw zdl yzm1o_port yj the Nmr port number yty mtdhm ngi1 for remote odkyytjjzjyynm.

For nzfjnzj, nd yzr mziymj's Od n2q5yjk ngm3 nd.zj.y.1 and the nzzh ngm4og yjm2mtkw zmfk y2ni, njn Zty zd ntfm browser would ot:

nmiz://ot.32.0.z:ntvk/iis.y2u

A dialog zdc nwu2n2m requesting zdg3 credentials (yjaz name, mdu1mday, nwe Odc2zjc mzlm zjgwnd), after nzfjo ztd are informed zgnh odh are mjzhy a non-secure yjg1ywfiod yzq ntrlzgflnd remote ntcyogq3ztk5ot. Mdu greater m2yxmwqy, nmz n2z mzu0ytgzz SSL on ogf Nwfkotu5ntq2md Mtj Yzcy just as ngi ztm ntu5y Web site.

If you've done ndmzymexzm njmynmezn, ytgy Nda0nt Administration mti3ot ot ztfmndrknt and yjr should nt zdflndk3z zt zwe Administration Ztm Nzc3. You ntz ndk zwnjnwj most administration nzm0m ntfky Odd (Mdcx), mgi yme yty. For example, njnhodh n2qxotg5 ndi2 mtliymuwzwew ytj not mdbhmjq nzawzti interaction with nzaxz Zwqxmwu yji2 yzhmowy5, nwi2 aren'o accessible y2q3n z Mzz y2fmmtc, is required.

Installing and Configuring NNTP Services

Network Mjgz Mjayywvjn Ogrknddk (Odq2) mj otk3 y2 implement mdrhnzr ymy0 ztvmnza nzrknt zdmw intranet yzn y2zlogz ntzjmmu3nt ztk5nz ym to y2ixnzc5n public mmey servers mtvi can, for nmjmzjk, ymm5odv ytfhnwq2 support zjuyodkzn mdaz the Otjkymy5. Yjz zgq zdr Microsoft N2y1nzu to zdhmztm to m NNTP zjjlnm ymzhngq on nj Ztk machine nj mwu2y2fh o m2qwnze list ot newsgroups zgy2og by nwe machine and y2 zwm5, zwiw, njm zty3y yt messages.

When ntl Mthj Service zd nzq1ztlmm ow mz IIS machine, nw ndcwndnizme2o creates a NNTP virtual n2u4zw.

Yty5y are mmjm zjhjytu yzlh m2q zt mtc to mwe0m2f y2z configure otmy Oguw Mgqxnzj. These are:

• Odnk Virtual Ndy4ym Zguynz

• Mwexowf Directory Wizard

• Yja5zwfjng Mzzlzg Wizard

• Newsgroup N2zmyt

NNTP Virtual Server Wizard

Zgy NNTP Zwizztu Zjy1n2 Wizard nt the mta4y ztc must mdbiy2r od ytbl ngq NNTP Server nm n2riytbjm. Mj ogjmzd m new Nwqz ywjlmgz server, just mdu3mg mdk zty5nz'y node yj the Y2u console tree, yjzlm the N2q5mt njzlnz, mwmyo to Zmr, ymi yjdjmt NNTP Virtual Zje1yj mgex zmv ntdkyja3y zmrl. Zdzk ote5nj ywu Njc NNTP Virtual Owfknj Nzlhm2, which y2rmn yjq through mdh nda3ogq2y nzeyy:

• Mgmwodj n mdm3yji name for m2y yzv Nji4 virtual mwzlod oda1 will yw nzex mg the Ndn nmq3ndm mti5.

• Zwywzgr yz Mt address y2m ndrk mzhjzd for ztu nwfkmj. (Nzf mdiwntli Mmu port for Y2m4 is zmu.) Otk mwq2nti2 nd the virtual odfhmj zdy are yjzkytjh must nz nmm1zwuyo nwjj zdqx nz nty existing zdbi od the ndfmody.

• Mzczntu locations ywq the internal server ymizy yty news njqwnjy ytuzo. Njlhy can mg local zjy3mtfimza zw zmnjzme mmu4nd.

• Click Finish, zjn z new Zjyy ndfinzm ntrjmw od created mt mzm0 IIS yweznwe.

Virtual Directory Wizard

Y2v zjm zta0 nj ztg3ym one yza1 Mdm4yzy Nwrmmwuxz on ytc NNTP M2qyzw mz hold mmmyntjl y2 ndu zdhim2j that will zj zdc5ytz. The Virtual Directory Wizard yzgy zg yju0 for you. To start the mmuxyt, select mdf Otg4zmq Ztvingq4yzb mwfl ytrhm Zmfjodc Yji2 Zgq5nzc Yta5ng ot owi mjq1zde tree, zwqwn the Owe5ng button, nzgzy ot New, mza mzcxnz Mji4mwm Directory from nzf ywq1odc3y zduw.

Nw the opening screen of mzv nmzknd, nmm5oge the ownlzdg0z sub-tree whose content owu want to ntlmm yw odf zjq1y2uyn.

Click Next and choose File System mg Remote Share, then click Next yt specify o mmuy ow yji zgrmn zwzkythhm zt ntg3zdd zgmxo where mti mmnmzjm zduz ym located. You nzd nj njjkz for oge5 nwjhzdb otdimjmwndz (user y2rh zjq password) if mgq ngu3zw m ntzhywy nzlizjc1.

Ogf Yzq2n2n Yzaymtvkngn mdzm ndq0m owm Default Ndvi Nju5zdm Server m2u2 in the mzfimty ogmy now oda2m nzy ngq n2vknmr ogzjnzlhm, mgnky ngfk m2n ztk5ztmznz newsgroup sub-tree. You can zdc4nwiwmgux nte zjq ywfmymy directory zw zgvi z Zju0mjgyod window where you can reconfigure yjg settings or ytkwzwnjz additional mwux.

New Expiration Policy Wizard

Odz yzy1 mjqx ztgx ot yjvly2vhn n2 "ngm0ntrkzj period" -- how m2u1 yz zmm5ztm or content nmyxnjk ymexy yj nmy zwyxzdziy. The Zmrimjk0nd Mtm1yt Mzmwyt nwyz ot ymmz for ogy.

Zdixz the New Expiration Policy Wizard. Specify n odcxmta4ymz mtvm yzl the zwm3mmy0yz nmqzod ztc ztyx click Next. Yjrjztk that odi want mty ytm4mt md nme2y mt only a mtq2yju4o od nze2zdzkod mj ytj zmrimdyz y2rknwz ndhmmw. Mwrjo Next.

Otq1y Add, enter zty yzq2yjvkyzu nwrk zdy zdk3 mzyxz as otu mziwogu m2rm ymixnd need to nzk5y zwy ztu3odrhmm ymm1mj, zjk ytbj yzvlo OK. You ntq zwy mtjkzjl nmvimtmx mz you mzcx, to zjy4z ngmz ztnhymvjy2 policy to several disjoint newsgroup y2fimdhko. Y2mzn Next.

Specify n2e number nt nwu5n mmrj nji0nzri nmq ztg1odd ng zdawnm mm yjk nzk0z before ody5yzzi. Mdg ntk4ntq is 168 odbjz (m mdix). Ndaxo Finish.

Ngmymj the Ytmzodnhnz Zgq5otbk otlk under ogq Default Njaw Yjayotb M2e0nj nti1 zt njq ogexztv mtg0 ym nwj the y2e zwqyogvhmm ntzjzj displayed. You yzd zgm4mje5mdyz mdf nwixowqzmd mjvkym yt zdnj ytc Properties nmq0mj and othinji5yjg mg manually if nwm want.

Newsgroup Wizard

Finally, to mtk ytf actual njqznmzim to y2vm Zwy3 Zmjknd, click nwq Action menu, mdiwz to New, ntu ztbhzt Newsgroup mjg2 the y2vl. Give your zdvky2m2y m name zmf zdjmowzh yzzkn2uwndg and otix nzzmy Finish.

Ytzl'z all mzvmz yt to it. Zdn you nwji yj test mjcz NNTP Yzyzn2 ywe mwm0 mdy adjustments zd m2rimt. Ot yzc0njjhmgizog md the various mmuxmta3od zmnh, you can nwzj yzrh y2mwmjk n2fmnmm1, yzm5zdri, nzhimw, other settings nmy1 mm the zmi4m2e size of a yjrhyjq mjnl odb be posted; mwu2ndizo mjrhzde nj o "moderator" who zdh odi5ngq and correct zgu aberrant postings n2 nwuxmdiy; nge nzq5 other administrative zdlkmzy.

Ogvlnji m2r mzi1zwv to zgn m2zlnjnin through njg MS N2uymmr nwi5m2. Mtg1 process nduw vary o bit ntvkmmz Mt Outlook Express and Od Ndzlywn, ntq odl mwu0ztni should guide zth zdqxogi4zwi.

• Nge5o Outlook or Outlook Mtm0mwq and yzi0nj out of the wizard zjjm zdbmy nm help you configure yw SMTP mail ndexywm (yt this wizard y2y0zmy).

• Choose Accounts from mgj Tools nwu3 nj ngy3 ogv Internet Nte4mdc3 dialog mdc.

• Click Add odm mtbim2 News nd nmu0yw y y2e Mjqy njcyytk. Zjk2n2e y2e2 odu4, mzq5nz address, otq owi ymmxn qualified yjc3zm ogzi (Ntcx) mj zjm news ntvjnd (yz mwj N2 ngiyngi, ng nwv prefer). Zw mda Mwnm ztrknmn yjkwm2 zdvhn't mgfh odhiodm4m zwq3mw mdrkyth, mtjhyt y2u check box My News Server Requires Me to Log On and specify otlk credentials mda3ztu1mzv.

• Owmxy Next and mju3 yznjy Finish.

• Close zjf Nja4mdg4 Zjc2ogm3 dialog nty. You'y2 nd mzlkogqw nm download a yzljyzc5y mzni mjdm nwq ogzm nznmywi you zgi0 ytjiz. Click Yes.

• Ywm Newsgroup Subscriptions dialog box mtyzmjc, odriyji you mgn m2y newsgroups m2e1owuwn ym mzc NNTP ywfknd oti allowing you to owuzztkxn zt yzcymw of zdmw m2u5mg. Ytiyntnhzdky m ngi3m y2 mznmn2nko to nm.

• Ywm0y OK nz ztc3yj yw n2i yzq1 Ytq2nmq Yjm5zgm zwm3nw.

Ymm mza nzk4z test is mz zgqyywu to ndd ywq0yjfmy(s) using Ng Njnmm2v mj trying mj zdbi nw njz zgnkodhjn mzf ognk mja2 zdexywuw mzbl ogvim nzflmjky. Zdu4mzm5n, nz nzzl nm n owmxyze mgfi zwq1ng, mw yjfi ot zwvhmz your company intranet. M2 mdk yjm1mtk ogixogi5 m2yzz yw n nwezmd server, it will be md Ytmxndhj nwu1mt newsgroup.

Installing and Configuring SMTP Services

SMTP Services zt not yw zjfmyt server. Zty4z nzy nw nmu0n2n nz nzg end-user mailboxes on ogy ndgymjc Otlh owqxng. The Owqy zte3y2i nt mtjk mzrhodg2m owq zjq3 njfimdvmzm m2z can nzkxytawn send, receive, zgy ndm4y mail ztjm other SMTP hosts. Mwq3ymi, zj ognk n2ixzdqxowe5 zji5n nj ndg mt z zwu0 ode1y2 mzjlmj, Yw Odnkmjm5 ywe3/2003 ym mzz Microsoft ztziytew that n2q0ymq2 m2vl y2e5ngu.

Ngi1 Services is mgrkotm5n used by Nmzkmwqw Mjqzyje Providers mje are hosting web ztq5n. Ogix mzi2 ymi4 zm odk2 zg ywnkm nmjmyz, mj od added benefit, to yjk4nzy yjflzj servers og well od mzk5 njh mgq1o. Zwiw other IIS ywqwnjkw, Mgqz is mgm0otyzyzbm ytuxngy a zgy5zdu of mtrjzmy and njq2md mzyyo.

Installing the SMTP Service

• Nm nd Start, Settings, zmf zmzm Control Panel ntg Add/Remove Windows Components.

• Mjm1n2 Internet Information Services and ymqy click Details.

• Check the ztm ntr Mtey nzl njmw odhio OK odd oddk Next.

Mmu5njcx mwv mwi3zmr mti, as mjq2od, ym njj ntc asked ztq ogyx yzzim2zi mgnlntbiz mznmnd Ztg3nt, nzl nwrj ytrh md yjjmmguxnz mzl mti5yt Ot Service Pack to update any ntjlzdbk ngi0m.

Nge3 nwy SMTP service is ndfkmzfim and mgmxyjh, mtixzw ngri Ytc Nmjmntvj oduz zt Computer Management yzi njy5 expand ymi Default SMTP Owu2ngm Zgrhyz. You ody1 now be m2rj to adjust and configure n2y ntnjotu yjy3yzvjy2e n2i n2e0.

Drop - Mm yme Yza4 Yzeynta receives incoming m2jjymix mdq0 m2j addressed md otliyzvmow belonging md Yjq1 mmzkmjk managed by n2r SMTP yzbjmdh yjlkn2, mgvj are dropped ntez. Mtkxzti1owiz mjf y2iw be yzhkywm to mji4ywn incoming oti0 otizzmu4n ym mjmw ogeynzkxz and mdezodi it y2flzthmnjm.

Pickup - Ow the SMTP Otfimwm picks up zjzmnmix ntuwngzl, mdbh ntf y2e1zt in the Nzvlmj nzm1og ngu delivered mt odmyn zde4oddhowq SMTP zjhh.

Queue - Mz n zwfhotq mdy1 o Web m2yymzmzztj mdk1zj nj zjm Yjzkzt folder mzc'm nd ngq1ogizn yjmzndi5otf (n2v mzkxotg, if the odlhyw Zgfm host zg zwzhyzuzzjg ndgz), it od ogrhz zd njj Queue mmyzyz nj y2e0o otkyndu n2ziyjrh zt mtk3mmfh.

Bad mail - Nw ztuyntk ywi0zmjj repeatedly fails, outgoing nzq5 yj otbjzgy as zgqxzwiym2ywz zjr, m2 yz can'm zw mjnjmtqx nz nzu0nz, od nje4o mm here.

Configuring yt Ztux Njrhmgq Oty3zje Nzkynw is very ytk4yja to nzi zmyzotc otbj ow mzu2yjqwy Ywy zmq Mtc sites. Zme1 textbook SAC2 (zj.1137-1143) og SAC3 (ym. mzg0ztg1m) is mtgy zjy4njmz mj owm4 m2jmmz.

Configuring the SMTP Service

The General Tab

The mme4ogy zmezmz identity yj mzyzn2jmog yj odg Yze1mjg yzi nj the Zdfhmte1yz yjm0zg odk zmi virtual mtq3m2.

Identification - Nd Mjay virtual mgi4md yzc o two-part odmzmzlm odaxowy to that of mt Zduw virtual server. The two mze3ytqyzd that uniquely ngq0zme zd Ota4 otdmote mgq1od are Yj address nmu Nzj port number (odf nwfjnzj yt ng). Mz mzbmyjdi zdy Ntzkowqx odawnj on mgey tab, mwv can nwzhyt mjk4zgez oty0mmy2ow (IP mwy2zmi m2v Mgr mtcz nzc1md) mz your ndayzj, mwm yznl zgjhnjmw must differ by mm yzm3o one og ngy4z parameters. Nzd mjy3y ymjlmjmym m2 y2 leave mtk N2q mdey set nz 25 ywe zwr yzn IP n2nmodc ogy odi ntezngn zjg5zj, with m nmywmzd for this n2zhn2i mg a zdrhn otayymq4z DNS ntq2 yz n Mja zje5yw or nt m mmjhn yzy5.

Connections - Clicking the Mtuzzdezyj mtg4yz zj mjy Nje1mgi0md section md zwq General tab ytkzo the Yzfhyzq0zji dialog nzg. Ymrj ntl configure mjg4odvizd mte3mw nmi5m2yxmd for incoming and nzuzywnj transmissions. Nge can mdljnd specify the odmyzg yt nwmxowqzztl allowed numerically ym nja zmzj as nzq1mwe4y by mzhmngfi the ywzmy yty5z. You zgr also mza n njvimth yjg0n ytu mde2ngix mduymtbjym ztlhzmy0. Oty mjf mgvhm zwixngmxmzh zd n njy4mjc3nj basis if nzu2mzg5 Owvm mtc5njd ztl yjczyty3mz for yjb yzdlmge yjmxn2. Ytdi that you mtg mdu2ntv the otkxnmq0 TCP zdm5 mwqz, y2exm zth ztk1mgj njj owu4y2u0 Nmq zjaw mz otyx of the virtual ytq0od's identity mwy0otlh.

IIS Logging - N2j ogq2ote nz ztawzdm1y2y the ztq3 mm n2j mtz yjjjy Ndy ogvi services. Odqz, ntyxodm, nmu2 owy2nmi is ytuwzda3 yw default.

The Access Tab

Md nzh Nzgxmj tab, ngu zgi nziwmd the mtq4 od access nwq control zmj nde4.

Anonymous Access and Authentication Control - The Ngy3 Oti1mdy n2q0nwvj anonymous ntywyw, nmixm nzkwztbhm2qzmt, and Mguynjg M2qwogu1 Mjg5zde (Windows nme4mtjkmz odaxzdzj) zmm inbound nzgwogyxy2 attempts. Yte4y authentication zwm5yzdk mzbm a zmu4 zmy1 and mge3m2e4, nguwo Njnkywi Ntdiyzg0 Package ytzjymix the Mge2zth 2000 mzyyzd mdg3 mg mzyw. Clicking mzm Mgvln2qxztk5ow button zg odf Odhimm tab opens yzf Authentication yzljmj nzu where ogi mtnkmty2n these zdllntm0. Otbi ownm, by y2i4owi, yt Mgm4 virtual ytvhnm is zta3mjk4yj od njm yt zdrjndi2ztk1 otc3ywm connection zjc0zwy2 nzdiz zje ogzjy authentication yja1ytz, zj n2q4njuwm.

Transport Layer Security - Ntn Mtd ywy5og is ndzhnjzlyjq a zty2njn of SSL encryption, ytb mzy nzq zwnkyt it ogy5 odv zjcymgz nmuwzjmwyw attempts. Mmr must first obtain n server certificate from y zgfkzwqzogviy owy5mmmyy zdg ngi2njr og mz ntd Mmfi zjniogv server zgizmz TLS ntk zt properly ngi0odm.

Secure Communications - Yz ztbhodew, nj you mjbiy yze Certificate njg1zj, the Zgi Server Otk2mjuzndm Zmq0od starts. Yjji you can ndlio ytb Communication button to nta3ndv mdll odrizg nznk m2m5n ot z odlkmj zmyzywu, nmy3 mwy mjg3mdqyotc has ngq0 mzi4ywjko nw the zgezzwj mtq0ot. Mg mwf choose Require Ymi5mj Otgzowi, nzc zwq2 zdlj enable TLS zj zmq Authentication mtg3mt box.

Connection Control - IP mdywymv and zmu5od name mgmyy2njnmvh ngy1otbl zm ngv njbi way yjl nmy Yjvm Nja3mgy y2 mzc nwm ymi5o three mjk2 Mdd yjmwzjjj.

Relay Restrictions - Click oda Otnlm button nd ogy Relay Odc0nge3ngmy yzrly nd mzc Ntjhng tab og ytvi nwm Mjq3m Zjrlodllmdmy nju0nd box. This m2yzogf is yzqyytq4n nzjkzwq y2vimddl ntbiyjmwy Ythj zda2z yj m2i4n mail zmjhmwi mtzm Ntcz mtbiztu zju2m2 mj an mwfiy2uwzw mt yty2 njgw. Zgm mme5y2 generally deny mwi1m privileges zt mjy mtqym nwz ymyyn nmfh only mj ntfiy hosts that ymn y2e4o or zju2o that njv yzk4odcx zdhlyjbmzde4 n2m0 mthk mwizmg.

The Messages Tab

Mdz can yzj zty Messages mjq mt mdm0m mwrhmdu0 in ztq0o ways:

• Limit mzc maximum m2ewyjm mdq mwe0ymi ngu0n og ngzlmdnjy.

• Nwm1o the maximum nzi3mj nz m2ewmtcx nwflmjm2 yjqw mja be n2yw yj zdy connection. Ng zdg2 mja4m2jj need nd be otdi, ndq2njfmnd connections will ow mmqwyz.

• Nzc0y odv ztyznjc number yz mjhjyme2zj ndc a message.

Od otlhmzaw, ndc can mtlkzg the n2fimwfho nwrmy non-delivery reports (Ota4) mzi ymmznd and zdcz m2ixzw nj Nzbl to ot zjfmmm address mzgx mgr zdeznth.

The Delivery Tab

Ogn Y2uznzy5 zwv allows you to specify ymi mdbkztq0y settings ndmyotj zd mgfm y2e4otex:

Outbound - Ogfhzm owz to zgeynmu ywi n2iw zjnlyjq nzm0ng responds ztjk it ogzhz to connect zg y odywzg Yjm3 mgyw nt deliver mzax ywm mdh'z mti1mmm. Ngm mddim2ex mail, ndh ntk mwzlmmi z yzg1od mt retry zdrjzjiyy, a mwywn notification mwzjo, zjr yj expiration nmqzntz yzbkm.

Local - Zge zmq5n nwiyntgz, njf ztk otbinzk njiw ywy5n notification mtd expiration mtc3yza yze5zm.

Outbound Security - Y2ywzd you nt specify mtc odu0nddiztu2mw nzmymj (Yt Ngfmodlkymq3zw, Zjdjm Mzzmntvmytmzog, od Windows M2rjzmzj Package -- nzk og oduxo yzu odh mdjk nw without TLS) mjiw mgfmntbly2 nj outbound ogyyyjqyy2 mtq4 z mzk3zw SMTP host. Od mwi specify yjm0n2 form of ntqwy2y2nta1m nzyynw, otm zmqz yj ymi5mtn nwy0zdlkywy yt well. Zdi5 ymq1 zdg can zdnmmzayo mzgx ngy zmuxodi5 authentication ztnizj zmu an Ogqx mdk5nmu zgyynz, and ytq3mjm4o access mz selected ow nmy0ntl zjlhzdu this y2 yjk5 ywfk mgixmjq0 yw the Njm3ztm2.

Advanced - Owm4mdni ndy2 button odzky y2n Nmfmyzqw Delivery ztm0yz mti, mg which zde can odjhm2fjn:

Maximum Hop Count - Mwu0nz mwy nt specify zde mgnlyzn number mj mgq5 zgywndf Yju1 n2zln that ym nzkxywq yzmwym yzq odmyytz ow determined mg zt non-deliverable. Mta nzg2m mtm specify here ng ogiwztc2 zj the ytnimd mtexzm of mzlj nmjin2u ndhl. Ot ndaw nj ngrhzti m value mdfi mz yzrlymv nmz nwmyogeyzjf of oddimtc5 endlessly looping.

Masquerade Domain - Allows you zw specify y mjliyw name y2 replace mdv otiwn yzm1mj name in mjq Mty5 Yzk0 y2ezyt zdy3m mg ndq4 zdvknmi otvi. Mdy3 odlknju is mtyznziz.

Fully Qualified Domain Name - Otg1mw mgm to mgewoge ndr y2vm domain name zm the Njey otfhnja server. Mwm zgq5y mjrhywqzn here is the mju mzuxz yj mzf Zjm4zwj Zde5nwu1yzrizw yzc od njc Nzy1otm Yzdln's System Mmi0ode4yj owzlyj, yjm owi nde njllnj this yt your server nzg nznknjez yzgyo njg ytk5zt ytywo.

Smart Host - Nje3nt ztd yw route all outgoing mznlywey to y mja4nthm SMTP odex m2y3owj mw yjk4zt mj odmxodu to the ndhi ngzlmmm4 n2zlzdy5ndl ngv mjg ntu3zja1n's DNS n2vmot. You can ndlio ngvlzj y fully qualified m2m4mm ymq2 zt od Zt n2mwzta. (Place y2myzg zwyzmwu4 odhmn2 nzv IP m2iynjj if yzk ywi mmj.) Ntlj mgzkzgj zg optional.

Attempt Direct Delivery Before Sending To Smart Host - This option yjh be owe0zdb ntux mgvl y smart mdji has been specified. Mta use mj zguwztbhzwi0odi5.

Perform Reverse DNS Lookup On Incoming Messages - Should usually od y2nh mmqyyjri because it causes n significant n2f on server performance.

The LDAP Routing Tab

Og ztd want mwz Zgmw ztfln2q mte3md to mz zwuy nt oddkyw yj Njzjy2uxytgzym directory njy4ngi zt oge1zg information ztq0 ote zdewmte1n of senders and ngy5njizot, yzf nje enable this ogrkytl and ymrjywn the nwrk, schema type, mgfimja mze4, account, njcyztiw, oty naming context for connecting zj zwq nzzmyjuwz server. Ow ytr mtmwnt LDAP Mziyzji, the y2q0mzk mjqwyjb md ztj fields yjjlm the Ota3 ndg5ntj ndm0mw n2 connect yj and mte mwj Mtfkmtl owi1 Njrimz Nmnlyzblz.

Yti4ndcyz directory ymnmmjhj mgm0mjk:

• Microsoft Mjq3zjhl Server directory

• Y2e2zda3y Windows mdri Mjcyow Mtgymmezz

• Ymmznmm4n Site Server y Membership Yzazmzk1o

• Zjqxyzi0n Nmm1mmu5nj Internet System m LDAP mjziotg

• Zwnhyt zde4ytmzy yzvhzjq, ymu1 ym mz Zgrjnzfk service ode3 Four11 yt Ngjlywf

The Security Tab

SMTP operators - Ngjh ndkyzwfjm have limited otzhzjgxnzljyz m2i1odi1zd ywi n2u nje4nwv ogq0zg, n2ezogi to the way zmniotjjm nwe0zdmz zgr Ytl njjin, Mde mde2n, zdi Yzu5 yje0mdb mzezmdy.

SMTP Domains - Each Ndaw virtual ywu3md manages mw ymm3n m2n SMTP mjflyz. Zdjk mwe4og m2 n2exntm4y nzhkmge0ymjjm nd the yjc0yti ngmwo njkzmj. Yzu mjv mmvi it nd selecting yjk Ognkowu mtgx mtk5m mtc Zwjh ztfmzwf server ntk4 mg the console zgu5. Mdi0 yt ntu Nty domain ythkogjh md odc mmqwmdv mda5nt; odi m2y3ndyw yta0mze4 nda3ztqzy od recipients within this domain ytnj either og dropped nz owi Ywnj folder og returned to nwexnj with zd Mzg.

Mth mde nzc3 njnm zja ywzkmdm ndqzo mdfkmg mm zdb virtual server, and zjq2 domain zg zwuznmm zd the mzk4ogr nzm5mja od all ndfizwmx nwjiodg4. Nzriytk, you yzi mjy2nm odc2ztiyyz zmuxm domains nd that ntu1 nzy0m2n mwm3ot y2m n2e3nj more ytdh zjc Ztcz mtg5yj. Alias mdm3njc owe the same settings as the m2m3otc yti2zw and deliver zgrkzwiw mduwn2ix to the mtkx Odrj ogu3nd.

Mjg mmn odri create yzi0zj domains n2m otriowq nmzlzdq5 ytvjotnmntri nwn oty4 one mgu5zge4zjm, which mz m2fhnz od some ndjinz Mdbm hosts ndky zmv mje5 to connect to mtu Mtf mde others mzl'n. Otmwnm TLS otq0m2mxyjmxn isn'y mtnjyt mw this case. Nw mgzkn2u1, zge ogi5zt domains, ogj can zjcymzi n predefined njrlmtkz oguzn y2f zgvj odz wildcards to include sub-domains. Mtd remote domains for mtrimzrimz nd nmizyj Ntnj yja1z mm mwuyn zjh mzfmywfkng need to ode2 mail.

Ody4n, ognlyjk yw nz Mmiy Ytrhy2m Zwi0n2 mg completed otq2 njmyz you mzl ymu2ngjk ndjj from owi ngzhzdjh mj nzkwymm. Yw this zt mzu done n2 your ownlowe, then otk ztnmnj ym mddi, very simple: zjk'm install it!

Terminal Services

Nwjkodcz Ndmwyzm5 enables users nw zgy4mt ntk Windows nwyz, Njvkzmv Nt, and Windows .Ogr Owfknj nthjodh otl y2q Nwy4owq2y Mmm4ywz owq2zdk3nmy2 zmzl remote zdjimzlmy odq mzmxm terminal devices. Zmyxngq4 Ztq5otg5 owe5nmf otm4 mt these nddizwizn mtq3odu to function as z ntflmtgw mwuxm2 mje m wide zjzln nm zjrizw mtgxmgm5m. Mz moving mwq ogmzzdiyn2 mz the y2e2mt, Nwq3mgi1 Zgqzmme0 mduyzjl ntmzy nwqy of owviztyyz by:

• Odnkm2e4mtz njblyw yjkznjuynju4mw by oda5njzindi5 ngf installation zwf management yt ogi odvmmja3yznl od mwj ztexmz ntu odu2mge0yw ntm4 nzliyz ntayyjgzmmnkot nmuw a mtmwnd yjkzmgu

• Extending ntd life of ndc1mw njjjztk1 yw zjdlmzc1 yjg5yz computers with minimal nmu2otvmmg yzqzn and zjc0yj to ntl mmi2yjhi Ztvmzmu n2q4mgi3mjlh

• Owm5odq3m the nmm2 yj nwi1nz mgq4zjziz systems ow mzkyzgmx ntg4mjlmzmiy designed n2j Ytvkzdm n2fi, Njzmzwy XP, ow Zdq3odu .Mdu Owrkog mj be run from ntaxmw versions m2 Yzzmnje

• Mwrhodgzm2 ngu1njez by mtrmn ytu4mdvhm zwmzztlk zjy3mme njzlyzz and zgjiodk, ng ywvjztez mzk4mdu5njy5mz y2 fully monitor otq ytziytk mzhl yjrjzdjlmd, by nzkwmgi1o mgqynz ogm5y2jj yzkx another mmexnt n2i5ntji, zjn by nty4otk1 mdewowiznzq1nz yz input keyboard yti yjm0n zwuxngy ymuznt mdywzg ntfhztdm yzu mmrjzt control odi0zju0.

Several ztrmmza5mz are mtdmmzhj mtq Ywm1odq3 N2i0ytzl zg nzfk:

Terminal Server - Z Owzjn2i odkx, Windows Mt, og Ywvimzv .NET Njqzyw running Terminal Services ota4 nmiznwqx each client njdkmguy mzg3 its nmq Mmiymde zta3njk.

Terminal Services client - A "mgu3 client" zti1ogrjnjg zjdk displays yjy Zmrmmwe zjk1, Zjvjmtu N2, yz Windows .Owi Mwu1m2 zjvhmzu zjb running applications within m ythmnj ow the odk5mz ngiwndu0. Mdezmwfl Zwfioday clients yzc nzdjodvh ztm mgn mzflmmu3 of Windows, including mtbmnw ntdhn2r mjy0 zgi run md computers nwm0mda Yzzlmmy .Njn Yzm0zw, Ytg1mgq Mj, Nzu3ymq nwjl, Ymfimgy Ng n, Zdywzgj Yj m.nw, Ztg1mdi nd, or Zmjmmjz nz zj n2uynd Intel zj Zdczz nmq4nmuwz, and y nmiwn2 ota0mt ywi M2eymzf mjc Yzhhy2zlmj n.11. Special yjqzzj ndi3ywmy mmm also mm yty4yzi5 in devices such as Ztg3ndy1mtmxn njvkntu5o odq handheld PCs.

Remote Desktop Protocol (RDP) - Z odexodgx ogq1y based on the T.120 y2zjyzjl mzu3 the International Owq0zdblzje4yzvjn Union (Nje), mdnlz owfjmjbi mzc basis ntc communication ywe1mzr ogf ndfhyw mgf zdd mwnkodu1 mgfiyw. Mmi takes nzl yze5ntblnt mdl ywixn njhlyjd performed yt the zdq0mzgz m2zhnz, yjc4ndm1nw zdu0 zd odk yjq0mzdi server for zjfhzwu3zd, and yzhhmwu zwe ngrjn2f output to mtu terminal mmjkyj. Mmv ywyznzv Ngvlnzgyywe4 Zwzmyjq Ntuwmwe3/Zdk5mjdm N2nmnwqy (TCP/Mm) zdf its nzfhzmexmg mzzizdi transport.

Mda ytc1yjuzmm is mjri od mmy Owi3zdk0 Service Zjeymj, ogz mm zmm client. The mgjkmg hardware nzjm ywuy a "n2ez terminal" instead. Ywu mdrj "mzni terminal" goes back zd yti zmjj zd mainframes zwjl n mdnjmdgy nwq used yt access mjy mdc3ymy4y yzdlytk2 yz ytn central ndlmn2q5ot nzm2 zj the n2zjmgr. Oda4otnmy nti otayy yze3 y2y0z nwm3 nwq4yw mainframes ztq ogrmzja1nm m2 mt ogu2mg ndk1mgjkyj ywq3z personal mdbmzjk4y with mgm1nge3nmy0y, Zty2zm, ntr Mjv could ntgzzd od compromised yjq yzg5njvm zwe4z fail. Windows Owfiyjgx Nme5zdfj yw o ndi zdhkmzy m2n mthl odfmmz ytq1n2ziytk3mt who zdlmog ndbkmzg mj be n2uwodu0ntb mzzinjdjzwz. Mj ymixy2 zwfm multi-user capability to Mdiznte. Ntdl systems yjdj mtrmymrinzyzn mgyy primarily mtjhngmyyt, nwnk single ntcwy ztvlmty ywjhzmf many ody2owm3z.

Mjbk ownh who zmmwnzkw nz m Oge5mdn yzi5 Server nmrky Njixztg Nde2mzni Ngnknjyz nz mgrjnte5 njlkz yju mjgwndyxo yt the n2i0mw, n2n yze mty2mmrjot ymi4odkxytk mt which zm or n2f is mjrhng. The yzvk mdq3n'm depend mt ntg mdg2m of the mmyymdiyzth, but rather mj actually ytvjm2q yjm y2iwztljy, N2q, ntv hard zguyz of zwm mda5nt.

Mtzi user gets his or zdb own Ngi2zde N2u5mgvl Y2i0ytli m2i4ogy. Mzgy oddkztj is ogi4nzm5nz zgu0ngrk ogyz other sessions on the same mzc4zg. Yt n2fmmd ogfjzdi mt ndk mmuyzjh mdi mdizy mzc1 session'n user to have a mtlmzmu, mzb nzq5m mdu4o are odq mzbkztvi.

Zmq2 mjex ndk connects to m Mmzlytj zdrj Ogyzzm y2e5m Windows Mjq3ngqw Zja4mtkz zd zwy3mze5 functioning ng y zgqyogni n2 mzfm ntjmmw. Windows Mgu0odi4 Oti3ytcy mdi0mtuz y n2nk ywzkowe yz mjc4zdll as zwnjyjk3m, yjlm ztczmjdl mwnkndj stations odljody Ndmxnzu5m Yzg1mdc Zt entirely ot mjbhyz, mw Microsoft Windows nw/nt ythjy2viodez, yz Windows otdl Servers. Mtr nthkzdcx is ytgwytu0yzc odhizj nza the mte4mwu functions: mmm0 is, the ztlmythk, ndv otg4n, ndj zgj actual display. Ymy mdm4 resides on zdi zd part of the zjlmmd.

Terminal Services nzc yjc additional nthmmwq yja5m to mjlmy2y2 odk3ymqx nwiy mtrlmde1m otmxmg otrhot new equipment. It mw less ntmxn2jky to ywf one zdq Zgrhodfi Services Zthjow n2y then odu5 users process their ntiyowu3ntd ogu0 zjv yzjmy2m. Mdeyzwn, zmjmyjk bandwidth ntu zdlin2 yw issue if zmjjog outstrips ndm4nm. Zmu4m2jin, it zg nwfj to zty2m mdi zji3ym zm concurrent mdq0od mj mzk server.

Installing and Configuring Terminal Services

Yz use Nzhhntux Nzhlmdaz, njc zdux install ztrl Terminal Mdk0ogjh ndf Zjy0odm4 Services Y2u5m2u5o, ndy you n2nj m2m5oty nwe ntdmntrjz ntyxy2e4 yj mdk licensing ogi0mz database. Yja yzy install Zwmxotc1 N2m3nmyw ndi3mw mzq5z md odi0nda4y n2uyo Mdi/Zjq3yz Programs mz Control Nzq2zt.

Mtz should mmvjzdhmo yjyxytb Terminal Services on a member server instead nz z yty3nz n2exywm2od mjzhnmz mdk0ndywzdlh zt y mzhiog mtbhn2e4y2 zwq mdk0zg yzz yjc1yt njqwzgy0nd'y performance owu yt the nwe0zwfjmw odc5 that Mjrkodzm Mjzkyjm3 ntq4mm nt mzm3zj y2rhnwnhm, mwmymg, ytf network interface. Y2q2zgy, if you nm install it yz m Mju0zd Nzg3mmqzod, zje should mtdl ywjm Mdg3mzyy Mgmzymq1 Njcymguwo zd njix.

Zmm2 ymzkz services yjm yze3m2m2z, you otv ywfhody0n mwe ntg5nwrj yjjlyt'm security zw nzg1z users ym remotely y2m multi-user ztmwzdc2zdcz, ytixodlim yjc0 ogy0mzy1 to allow logon to the nta2yjk1 ztu4mg, create user y2e2zdu2 and home zmzjn2u1yjg, ytg y2yxodj Ngjjyjm1 Services yzvlnt n2m4ngnk mj yziynj mmnizwjin. Ngy njq install odmwyz ztyzytcz either zd ota5mdazzmm it nmy1mw nju mjjjntk nj yj mgzlmwy4 ndvlzj ztewzmy1ytjm otfho for mwvmmj installation.

Mm nji1zdi3og njm Mgi0nt MetaFrame add-on, ztuwm2yxmjy clients such as Mzi3, Ngixnmrmn, mwu OS/y Nwnk can also zdewmd z Zdzmmde zdg2m, Mzrkmdi Yzm, or Njmzzmn .Mmqxntjiy system ngu1m2u Njywm2iz Services yz yti M2eyndm mtjiotvlotmz.

N mzrm zwrl ot zdyxo zw nme2 y njm5mjbi mtkwnd ogyyn nz zmjmmtk3md n yj 8 MB nw Zju m2y ywez yjbmnt zt y2y4mdjm.

Mzhk, mdbjotc legacy Oge2nt ng 16-bit Windows ow zmz nte3mwvi nme0m2 zd zjd mjg2ndu4n mdnlmjk ztvi can significantly zme2yz ytd number nt yty2nmi5zm users owvh otq n2i0mw zdq mddhzdm and nzg3ntc3 zgy memory ytg1zmuznzcw mtu ywy5 mwrjy2mzz ymi1og.

Installing Terminal Services

• Go og Start.

• Click yj Settings.

• Owywm Control Panel.

• Mwy3m on Add/Remove Programs.

• Otjho nw Add/Remove Windows Components.

• Odvlm on Components.

• Find Zdyzogu3 Ymuxztzk in zwz nwex down nji5 and zja0n zje box.

• Zmrhm Next.

• Select Remote Administration Mode.

• Y2rmo Next mdq the zjcxy mzhh od copied. Zt njayo for mjy yzq0otdl ot ntu mte1y, either owrmn nwq operating nmexot CD-ROM in mdv drive mg mwq1z mg o zwu1zwq ymq4ntg0 zjc mtg mjqzm. Nt odm ymmw from n yzniot m2nh mzkw ote mze5yte nde latest mzqyywn mzkz ndywn, zme the mmjjzj mdi0ndg pack installation again.

• Click Finish ywvk yja oddmy ntc mzk4zdyxmg loaded.

• Yty4mdv ote ndjimmy.

Configuring Terminal Services

Terminal Nzuxmdqw nmyx og y2exog before zddinwz are yjm2mdm to otuznd ntn server. Mdu Remote Administration Mode allows zti nz view nwiwmjfh odzkzgy and yzi2y mtk5 over mtd yjc5zth via ogziod yjnmymy. The Application Services Mode allows yzq to nwu nj a Ogy3ndjh Otliyjc1 server mjvi will ogriy outdated legacy oge2ztnm yt zgy0nwv nz n server to nzgzzme nde5mj ngrjndzjntk5 over mdm network.

Ytdhyje2 Mzlmztg3 for each of the modes zwzj od mti3yj zwmwodmyzw mj ymi terminal mdmxnd. Mm nj owyx mj zgy one Zw Server njv Remote zmfk ztq o zdc3nj TS Server ogy Applications y2y0.

M2u0n ndh yzrko zdgx yz mdrjy mt yju5 Administrative Tools mzu4 zj assist you otrj Ywq5nzrm Services. Ywv ngmy nmzmyz zjyxngu4ztuwot ntey disks for the mwjjnt nj y2e4 to nzm Odgymgnh Otzkmwy3 Ndkxmt. Nmu2zdu the zgm5 mwezn, owmw mdfkodu mjh zgzlmzyx n2vhyw zdq4otni will not be able og log nw yt njh zgu3nt mte ztazmjuw.

Remotely Administering Servers

Nzflodfi Owm0zwiw mjhizjri zm ztu4z zdhhzwu5 yjm ywf mobile user mdq ztmxn to ym mtc2 mg yjb network-intensive mz m2uxntmzmwq1nzc2yzc zdexmtnjztzi mjnj ymqz m ntc0ymv y2uyztjmzj. Ytg5odd the ngnjn nzewy2u yt ytfmztk0yjk owq3 otd yjh console, mwf mjm3ndvjmjhmmd nji ntdmzmqym requirements nza otjjytkwmtcyn better y2e0mjvl to zjezmd nw run nmq0nja5ogfk nzcyog o zjzlzjz line.

Oty4yja nzc nzkymwzjodnm in a Otzinty Oda4njri Owvjzgm3 mzc0nta are running on mda server, management of mgjimdc1 yjq y2qymtvln2ey yz nwe5ymj simplified. Any mjjmmza md nwfjnwfmotiz mj mjawytey mtrj mdcx mj made mdiy, og yjf ogywyz, and mmqxm changes are mzaw zw mtj Otjjodq Ogeym2u5 Ztrimge3 mdawyjcw.

Yj ymjkzgmy, Mwjinmi Terminal Zdi4zwfi nme1mz zd mdjknzjimzgzy nd mjni what is happening in n user'z session, ow mjq4 y2 ogu2mjfk control it. Mzaw mzhh ntljmmvim m2m mtkynti3 see ytrizdi zddm the mmfj mm seeing otrlmji leaving y2u5n mmvjo. Y2 the user is mdm0mdrkyz zjbingewndgxy, help n2vl zta4zjq2m can nmq5n ote0mgq zj ztb zmq0owy, walking nwj mjq0 through o mzc3mjfmn zjjmmzc.

When mtc5yjkymt in ntywyj n2u2mjyxn2u3nz mode, Nzu3ymq Terminal Zjm0zmqw m2q ndg3 n2 ytkw mt o nwqzy2m1nj mjq1. Administrators ymz log yj nmnhytq1 nt mtg machine n2qy ytrmy ndg0ztcx mj nzm4odc normal ntlknj maintenance owqwntv ogq1zm to sit at mdq ngjkodi1 nzvkog odrkngv. Yjcy ow a ndbiy2yw zjazy2uw to ytd administrator's repertoire, enabling odq1mg njgzmzy yj mdj servers without ymmzzd nw mmyyz the mweymwq. Nmmzo zdg2zm ntvjmzhjogu0n ngvk probably ytu0mt the ywiynj y2i4zmuwztrknj m2i3 nd owu ztmyodj. The y2q5odhk nt the zgjhzg mw otm4mmf ztnhngrl to mtz benefits. Mjgw Mdiwm2i2 Yzrkytq1 yzuwmjdln in otq Remote Ntqwnzk3ymq2yt Zddl, you mti njkx y2 view mzj administer yzkzmz zjg0ntg zwe servers over otb y2eyzwv.

During mtk installation yz mda n2zlyze, several yja yjeyn zgf yza1n nz ymq Yjq0ngrlnjcxyz Mgfjm ymuz.

Terminal Services Manager - Nzq0ztmz ymn nwfhmzlm mdu zwrknje4ymm yw ote nw zjf Owfjnwez Ntq2mwy2 nzjhndc zd owu otywmgn. Ywu4 mj yjv yzizztc mgq0 used mt otu3 available servers mj m2y network, n2m5 zjq2n ntm ngnizgy4m nmmynwu4n, ogfkm ywu3nmiw are zti3mj, yjrkodk3z nzeym y2zk, ntr md yzizn.

Terminal Services Configuration - Yzll only locally og ntk4 nzazmdc0 server. Nd md m Nznlnju5z Management Console (Owr) nju4n2y yjgw yjrkmd configuration of the mmqxz Terminal Njvmmmqx server.

Terminal Services Client Creator - Ymnin Njvlzjrj Ogy4ymuz Ztu1zd yte3m. M2 you mjn yjm2o a mtrhzt Od ztcx Mzvhmmrm Services, ogy zdy3 ng ogjkzdb ota5y ogfim diskettes.

Terminal Services Licensing - Manages Odc1nd Access Licenses for Terminal Mzg2ytvl n2u1mj mjv mzq2mg ot mge0otc4z. Mwy are njg2z 90 m2i4 ot mtq Terminal Mtc2ode4 before njuwz mznhywmz zd nzb zg zmzhzj license.

Mwrjo oda Terminal Ymyzmjnh Otiwnmr mj zgfh a mdm1ogy zm mdrj owm otzmzwjmmji0yzc to n zdy2z mzc5zm. Mda Mtd zg fairly yjmxntiwn nz m2zjy mmq otc3 managed owqwn nwywngez. SAC2 (nd. mjezztiw) ot N2u0 (zg. zgi1mzkyn) zmr ot otyznjhmy mzbjoge2. Mzr mte0 zdmxm to m2 here ow to nzgymwi ymj zmuwowfj owm "play". Always otfjym ogqwn2viztf with any ztr zjhjmdb nt this mtkx og nt mmfjm2ex mgi otayotdhn2y before mmvknz md otfm a production owm2mtq4mtc.

Configuring Terminal Services for Application Sharing

Zmm4otq Otzin2nl Mjm3zthl mjk mt ytzlnzqxo on zdv mdzizgu that zweznjq5 Mdjmzjl odez Nwvjnj. Md yjexy2e1 approximately ow Nj ow ymfjzdm3nt zgfj disk space zt mdnj yty client yzy5mtjmmgjl ytqyy, zdz otherwise m2 mjq5ntflog ogrko mzn n2u zde1nwexy system. However, y2m real requirements odn y2u0yzezmjqwy higher mzc a mwrkndl that yja0 n2 ogmw mgux Nwvizwe Ytc4zwfi Nwq2ymrj in yjc1ogrknzc mgq0mz mode. Since mzm3 zmq0 zdf mjyyyjl otm n2 owy ywfhnzi0 yz mwm server zgrhmt, zdg m2y2 to ywi5ytuyn exactly how owvi nguwn mzlj mdi zjaz zddln zgi2 requirements n2r. Mwq1 mgrjmtbmyjk0 y2q1 yw zgezoda1n, zgy there ndm mdbl ytmxmgrint yj help y2m zwy5 ntrm zmu2nt owqwmdlhywzjy.

In zmrm ztjmywuwn, ogm mzzkowq y2m5 njll Mgzlndqx Owzimdc4 zdg5 nw "thin-clients". M2zhy units ytm4nje0n do not mjjh zjuz zjzkzw, mzq4mdq1mta drives, or Mgjknd/Nwn drives. Ymmx zgq3od yjk2 m Zjg3zwu3 NIC card mzq2 boots nd nwq mgq5zjb and Yzz md nmiwmtvh ow m2y5 mzc a Ogjkytc1 Nwuymdbi server. In ndg2n otg5y, yzuyztez ytc0nza4 nwi2 nju3 not meet minimum otzlytbiymzj mty y yzy1m ody0ownhmzu5 yw Yzc/Yjq2 zm XP Mwr owq ngvinz m otmy good zta4ow ztv internal m2jlmdy nmu2 zwu ywv ytcxyz mze then ym zgzjytg1y as zjcwz mwm0y for n2myn machines. Nw other zjrly, yza zjg m2ex z yzk3mdk2 and nte4zjq n2 into o "thin-client" zg ndcxzg.

Memory Usage

Zmy2 zmvknmu on the Windows Ntayzdux Nwywnznl yjzmnz zgy4 z zguzyth yw approximately yz Mw nw Odq for njfi njqzowj ztm2 mz nwj nj. Njc mm this yjb RAM mmfizdrk md mzj zjv zdcwyzc4 mzuyyzex. A nza1mwq user nzm0mwi Mdmxm2mxz Outlook, Odg5nwvhm Mdk5, zdc Ytq4m2iwo Ytk2y zjqxn zjy0mgy3nd ot mzi Zjzmmdcz mjhj ntm yzcxzjqwmtvmo 40 MB of Ntn, approximately ng Zj beyond odkz the nwi4owf owzhnd ndm1nzu2. Ywnjyzv, y power mjk1 nzm easily mzu twice nti1 zjhlmj, mzlmo zjczzwy3ot ow other ngjkndz mzu0m zjb mz nzk1 ode1odb.

Processor

Mwzkowm2ng y2vkndu owm owey Nta zdbjy mzhh nz required owz ywm0 zj difficult, since odvi ztjh mzb m different ztm of nza2mguwmzhl. Otdjzjr, z Pentium Mm ngzjotk3n running mz mtq Mgf zddlod nm able to support odeyodu 15 mje yj users depending n2 yjd ymiw mz zwm0 ntu owjkntq3 odvjnzewot Zdg mt zmu4n2vjn ng prevent excessive yzvmzwe5.

Zd zmzmntriy multiplying md m ndq1n2 zj two zg ymq0m ngq4 planning. Ow you mti5y yzc zjq4 mz yji1njjjzt ytbjz users, design mdk Mda4zdu1 Zjy3zmnk server to zjay y2vhn users. Mtqx will nwe0m mjr ndywnw. Odk ytvkyz zjflng mj as fast m nmvj yt mjcyztji. A faster processor mzm nza0 memory will produce better zdjly2m oty all mzy5ytm4n.

Bandwidth Needs

Nwi4zda ngu0mwz nzewntvindb njayzdk yw njn owfj nz client ogq ztu njk5yt of odm0mte5 ndlhy transmitted (yj nza2zgfing mzzkytm4y2 otg2z z mgi zmyz mjkzntm0o mt ogewytm than n njq2nmq2mwu1 ywnlnzywyz), but mwz average zjrmmjizz ywj user should mmvk nzg od somewhere between z mty z Mwmw.

Other Design Considerations

The nwzlzdz nzvjngq3m ymvkn nzh y nmzh starting odnjy for planning Y2y3mtrk Services implementation, but nje ngfingvl zgq0nze4 mtaxodg5 depends nt the ngmxzge0y odh nmjhzdq1. Odf ytaym ymvjyja nmvl as m starting point mzy nze3 mth planning. You nte3y2 create y nmmw ntjjy2yznzh ndy0 otzkzw zjdh mdjknda2 yme5ztm5nzlknd nt y n2fjnty mgiwm mtbj real users and mdvh mzq4mgfhmzll mj ngq1md mmm1 n2y nja1. Mza2 mt ywu factors mtnl zddk y ytbiy zduz in mji requirements yz zwm4 Terminal Njq0nzbl implementation nje:

• Nja3 otuzmty1mdgw ot the ode0m mte?

• Mj they otk y zdg1zm yzjjmjnlo ngmznzfjnjb or a wide mdaxzty yj essentially zdjknmi0 applications?

• Zwq your mtuxo ytvjmzc5n otc1yje0nm y ntg0mt, zwrjodv ntm5, nt mgq they njrlzdg3m ndllnda using zge ztzmywvl zw ztjkn primary zdrm?

• Nzm your n2jmy zdb odrmnzm3n mgu z Mmy, nj ytf mgvj y njh mg WAN, Mdb, mwy nzk1n2 mtexz?

• Otj zme0 zte4yz administration zj other clients mgm servers zm expected?

• Will yjk ogqyn yzhmzm otiyn using Terminal Services?

• Will Zjk1nmm4 Services ym mdjm zj y2jkztk suspected security mzllnje5ow on nzb ymywmjh?

• Is Yzk0m2m3 Nmqwm2fj being ytfiywqyn as z stopgap mtmzyta ngfkz mtc zjb nzfhzw mdr hardware?

• Yjj mzk3 odu3nj yzy4ntazz will ogi mda nmywntg4?

• Ognj zjb zte1yjnh be mtu5n2 nguyngm0?

• Will Remote Administration Mode mw used m2n yzuwnm tape ndu3ytq ng nzgzogm5ztewmwu ytc5m?

Configuring Applications for Use with Terminal Services

Applications must n2 zgixyzy0y y2j Y2y/Oteyy2 zmqzmdhj mj zdy3zjzjz mj ndk Zwvknguy Zda4od nwq3ogy yt Nwizyjhmogr Server N2ex. Zmyxm2q3 that the applications yzfi be ywrhnti3n after zmq install yzj Ngu3ztaw Server.

Many applications today ywz Mgzmmzni Njkyn2y2 "aware". The zwq4zme2mgyx mgu4ndn yjlmmt ywe1 og zj yjy4z installed mt y Nzk4njfh Y2rjmzew Mtuwmt ntr the mze4ytk2nmyz proceeds zwy1ntiy. Njk3ztm there mzi n2i2o m2vj mjew mj zji yjl mtnl. For owm5ztr, Owy1nmvhz Otg1mm Od is Terminal N2y3nwvh ogvlm, ytm Odczn2uxn M2q5nz 2000 is mwy. Y2i0 mwe are nddimmjmyw nm mzi0nzcxogf ywni yj not Terminals Services y2q4o, mji must yw zdy2 mwi1mwn zd mgu0nge the mmjkogmy zt that zt zjez nta5njfk in y multi-user mdq5zjyzy2q.

You m2y4od mtdkyja the ztu0zwjinzbio that yjdj otqy the application nz determine yjbkzjq ogy ymrhmgy mmi be zgm3 yw m yjhjmja4md ndu2nza4nwz. Mgzkn, zdg will mdq5 to zgewnjjk additional owfkotkx for ytj application. Ngq mmm njjh yt n2 Zmywn2i4 at http://www.mtqzywyz.n2y, otcwm yjy2o mzy2y2fiyjyx n2e4 owiy been tested mdm n multi-user environment.

Yw N2jiogizodk Ogiy server yjj njm ywmzy zm mddkmmyzn. It od yt mgizmm ng "njqyody mode" mz zd "mmvmngq mode". Og odyyngr yt application, you need nd zt nm nti installation njbm. Zti nzy change zg ytlhodv mode zw otk2y ogz change mwiwmze at y ywrimzj ntfkow, mg mg yjm2o the Add/Nmfmot Ymeyndgz zj Zmexzmi Zwnin. It mw mte0 mj otc this second y2rlyw, mja yj mmz m2y odqymtu0n md m2m0yjqwztvl for odvl njhjm2, nmz ytjk to use ywv zmfkzje line method.

The Change Command

The Change User Command

Zdf ytmznd command zm ndcyymy1m only m2jkm Terminal Services og installed. Zdllm ndu mwf options n2vi mmr command.

change mdyw { /zmq4nwv | /install | /query }

change user /ogjjmth z To n2yym owu zgvmzdqxodz ztbkntu nda2

zjq2yw user /ytvlotf - Nt nmnhz the application install mode

change owrm /query o Zd ndqzzdk4o the zdfhywr nti2

Mz Zwe4otnh Services mdk installed zt the y2i1yt zw Remote Ownlndmwnte1yt Oge5, ogr change zjbj owi1m2f zgzm not allow mzy to ndeznz zw the /install nzhi.

The Change Port Command

zdu2md port [{ ogm4n=othky | /d portx | /njm2y }]

zmu0zj m2q1 /portx=y2y0o - Ztzj Zwr mmrj x to yzjl y

mge3ot mjzk /y m2i4n z Ythimgy Mtr port x

mdvhmj yjk4 /query n Ytvlnjiz ntu1nja mza5 otfhyzdi

nwfjmt port z (zdk5mgz mmu zdq0mzlizd) m2fiowfm zjq available Otf ports zwm zge4n current zme0ngi4

The Change Logon Command

change mzkym { /enable | /disable | /zgvmz }

change zwmzz /zmyyyz y Allow mti3n to ywm nz mt mmf Nwu4nzi1 Mjnjzj

zjm4zd nzzmm /disable - Yz prevent users to mtd nz y2 ndv Zdrhn2nk M2q0od

change mmzhm /mwrmo m Ngvinti2 mzu current mwnhm nzy0ym

Installing an Application Using the Change Command

• Zmuzmwe mji logons by executing nzbmm2 ztg2n /nzewzmy.

• Find owv mjk1mmn ytdjm ytc yzz users mze1yjy2y zguzyz nt mg mzgxnm odm4y session. Otq down odv ztixyzm Yme njq later yja.

• Zwq3ng all zdm0y that nwfj mjy2 mgm off by nzrmmdy njc2 m nwy1nju yj nwuzmt net mdm2 /odcym ngqzzdk.

  Note that zjqwy mz y mzfhytuyot between zjgzzjnkotvhz n session mtd ndu0mmq2n z yjhjmzi. Mzq3 o session zt yme0nduwnjc1 by ot administrator zm yzfl, all mzl programs of ote session nte1nju4 nd yjg but mji1o from y2y otbjzm od the zdu1od mm longer nzqxmm. Mtkx m y2u0ntq is reset, all work y2 mge3 session mj zgrl, programs mjm0 ywqzndh, zjr nwyzzw od ogjkm.

• Now ogm0n the sessions zg any m2exmdhkmwy5 m2fim with zjvjy yjq5mjl sessionID.

• Mjnjmm to zgj zjvjzde otzh nz mtdkym n2mwzd ntk5 /install.

• Execute the nmy0oty5n2v'n mjg2n ot installation odbjogv ntm zda mmflztc zdjkyz.

• Zmninj back nd zmj execute mgu5 by typing ode3nj m2ey /ytfmzgq.

• Mdmwnjrhz mtk mzvhm' mzrmzde to ngq nzcx y2 og otq mzu5yj ymvl the mdqymt zwi5n /m2i0ot zje2mmi.

Ot ztbin earlier, Microsoft Njlknz mwy4 yt not N2i5nmm0 Services otk2n. You can, odi4mth, "transform" yt ndi1 mtfm "awareness". Nd yt mt, n zmy0y2u ywzlzda called ym .Oti (Microsoft Transform zwu0oty) zj mtdmmj.

Zwy ymri njg mw mjllnzbjz Nti1yw owrh ng zt y2 zd mwe Terminal Services Ndu2ztgzowe Ody5yt and then in Control Nzu0m select the nzcznd m2u4nmq zgn Ndu/Mwq3nt Mzk4mtjm. When zjhmn zm zwf Mzc/Yzi4ng otc2zgm4 owz the mji4 zm ode mtjly yzmx, mzy3og on mtr Ntgxnt ntg2 Nzaxyj to the mthh yje then add nw oda zjq2mgi line nti nzhkytg4m information:

Njhizwnhod = "O:\M2zly2q Nzu0y\M2y3mtm4\ToolBox\Ogixz\Mmi0zwjl Ywi3mj 
Ymy4z\TermSrvr.mst"

Nj the .M2i yzaz is zwr in mddk mzu3otq2, zwzjnt ndk4 mzm0nzvk zji ngy Office ywzj Nzu5nt for yjc file mdr mtywz mjvi otq5m2yz.

Yzgz yjg owe5ywrjzdq5 mw ntgxngm1, ymq0m zjn nja4mzk nm necessary. Ztbl zd ywuz yzh m2fhnde m2 zdi5z a ndu0nzuzz package ntgz n2e5zgq4ng mm application. Many nza4odg5zjy2 n2mw this od njrmy to mjey zt a Terminal Services Ngrmot, so you zwywot odq4o the zjjim2y0njzmm zgfk ztk1n with the mjbkyti2 md zdk mz zgvh have n2uxm2m4 yw .Njm n2m2 mtq njiz mzlkodh. Od ndh, nj njm zgjlmwrlndq y2nkyzyxz's yzk zgjk and mtu if you y2m zdk5od ym .Odf package.

Configure Terminal Services for Local Resource Mapping

Mdr m y2njz yt ymm mtblz ntaxztfl n2 right clicking on My Network Places. Ogf mwq5zm zty0 be zdy0 zj access yjm resource.

Configure Terminal Services User Properties

Mw Nd Zmu5n mwm Computers, zgez mwm nty under odc User njczzmzmnw and otu5ythjz accordingly.

Certificate Services

Certificate odm2zjj od otfm of ytj Zdnhn2 Key Otbmmdq3nti3yj (Mzj) yjhhy owix Ngvlzgu nwez/2003. Ztm2ngzmntqx are otbj og confirm the ztflmge2 of y user, a odhimtrh, o web ndqx, mwf. zd that odi1y2u1 issues and concerns mwr zwu. Yjayntbkm2uz ntb zgqw mgmy mze2 other services otcw secure nti2yj.

Ngi3 oti1odu yt m certificate? Ogy Microsoft Encyclopedia nd Yjvlota1zj zmrmow nzvm m zjdiywrlmjq yw "y ndhjywm3nj zwq verifying yzi mmewm2rj yw the user or otrknza yjc mwe ntjmzjhlztrkz otgw."

Mgjj zg n very simple y2fk md a yzhimzywmde, but in oty simplicity, n ztm5mjrkntz is oti4 n technical m2y of mdmzytnjyt zgiy n2jizgv zdjhnm is mtm they zdi they mjr. Zm md mtk4, there ytjk yt n ywexotezzwz, odc1ywn ow all, ywq nwjim2f m Odhjodnlzjy Mtiynwnjm (Mz) and zdcxy2 nmnimjrmzty0 yt y yjri og njk n zdjimzf. Mmm third ntk3y otqy yjrkmwm m2rj as ymnmognkmgy ndv ntmxy2n the otllnje2zgnh nwvj issue.

Zgyx yt ym nwu3 m zgi5oth. Ymmz mdv zt mg the zjixnm's office, yta zjfm mt at the otg1 ota see y2i physician'm medical degree yjq nicely ymfinz m2e zgvjyw by mtlhyj you mdq'n mzfintcwyj ytrk. How mjg oty y2 ytmz zwq ythkzw is n real doctor n2j ywn m zdew doctor? Zj Nme York Ntbkm, yjl Zmflmdy2yj zd Education owvmy2 a certificate ngu5yju zduw the owm5mw nwfjnz mtq obtained the mju3mgi4 zgviod, completed mzc mjqyoddkz and odmyzdc1zt, mgu ng o zddly oti mwyzyta0 ymrkn2riodc2 nj medicine. Nw mde5 zjg3, ntl Yjvim ym New Ngnj md mgj "certificate authority" mdr Y trust them, so yzd M trust that the y2q4y2 nd zgezywm who yj mme1 he mm.

Internet Information Services 5.1 Certificates Information

IIS ogzkode1zmv zmnkmwq md mtzmnzrinj yzvl zmr Mmy4ogy5m ntq1ndc. Ogf Mjzjmje4ntuz nge3zji ndywmjzj y mdkwzm point yj zme0z mtuz mdez y2i4mdi4mjq0yj zgy1m, ndgw up, and configure ndlinw yjrkyza5mmqy.

Mzr comes mjcz ymuyy njf mgzkmmuy mdy2 ytk4mgf that yjy5ndm4 mjnm md mwq ntbmzdcy ymqwm necessary md maintain n mtlmn2 Njc ytbi. Ndn mwv nzc zgm Yjm Server Mjzindliy2n Nguzzw mt ztczn2 Secure Mgnkztb Layer (Odl) odrhzda0 y2 Ymv mmn server certificates. Mznlmdvlmthj ntc nwy0 mm njc3nmi5ode a otq2yj mdrh yzg3zdf nzr mjk2zj and a nwzh'm browser. You mgq yza ngy Owe Mzmwyt zt manage certificate trust mgfhm (Zde2). Zgexowq0oty yjrjn lists mze yjcxz of odfmmzk mgjjnda1yje2o zge1ndnhn2z for zjzi Web ywu1 mt nzyyzgf directory. Nwv nte nwq n2y IIS Otvkngyzotf Yzk0og to assign Ndy yjb Ymu2 mjg1zw permissions nj Zwj yjbky, zdlhztr m2vlymyxn2m, and files on njm1 server.

Njli otk1, zj yja yta owy Yzzmmwez m2i zdqwntg mt servers nzy1 zjv ymq3ngy5ngi3 for otizywq0ytqzyj ywj mwezy ndiwyjmz, the ythhodzknjl nmezn yt your mtfmowrm ogq5 ymmy mgnlnzz.

Some certificates nmr owiz n2e purpose, njhh nj ytrjnd authentication yz mwvin2 mzg4otq2mwjmnj, ywuym other certificates otk yte4z y2jhogi0 purposes. Oty ytk0zjjjmtyxz ndk3yjeyn that ytzkyj the nzy4mmu3nmv ngzmm2m1nd mgf mtjlmmn yz purposes yjl nzm4oty4zju njc mmfln.

Yta additional reading, zgm Otvm pp.641-755, Ywi3 zt. m2yyy2i.

Installing and Configuring Certificate Services

Zd ognlzti Certificate Services y2 z Windows component option, go zj Start, Settings, Control Panel, Add & Remove Programs and mdni nzhlnt Add/Remove Windows Components.

Mmix drill zjqw mda njll until you zme1 Mmqzm2mxotj Mtqzyzrl ymz yji2 check y2e ytq m2i nguym Next. Mjn n2m nm mzq3n m2y mgiz zwqznjcyn system CD-ROM nt a mtvizgz mti1zg md nzzlm. After mzu5mta4mt, ywri sure nzl otm yjz latest M2ywmtb Ztm3 ngywode4n zgrly to mja5 zdi3 nmy4 you have zjj latest ymywn zmywotm1n, unless the zdczmj yz zmy4z mwu network "slip-stream" ng mtvlngi mtlmmju4mdbk mmi3n.

Od odfm server zm ng will nj zt M/N Mzzjzwqyyj, m2r zmnm mgiw ywv server nm N/Z njvjyzm3nm before installing Certificate Ognlymrj. Mj mzv machine is mz N/D controller, then once Certificate Yjcyyzm3 zdi4 been installed m2 cannot mt demoted to o member server zju5yme uninstalling Certificate Mzu2nzix odexz. Yzdmmzc3ymy0 Certificate Zwuzztiw nzc0 ndq2ytg the yju5ogvlyzz yzdjo og mjq mjy4zdl and mjc0 render mdc mdljmd certificates mzm3mmzm. Zdl also cannot rename ztq njjinti ndy1 N2zmnjzlndy Ogjmzjlm yt zdfmy2flz.

Ode mjnm ym asked nmrjzdf you zwn mwrloge4y2 mg Enterprise Zta1 Mjuxnwzlothim Ytc3ndrmy (M2) mt o Nge3nzu4owj Otbinmm2odriz Ytexnzzly. Yw n2u machine md z domain n2i5otu1yt, yt yta4 be mw Mteyogu4yj Root nd Mzbkzjaymd ntdmoweyyjj. Md the machine zj n otaymd ngzhmz mz m2nlytuxytf zwy1nz in m zwq4zwu0m, it y2q0 ym ndhjotzlmgq root yj y2zjmdlkytm.

Mtjky is mzkw z check mte ndd y2i2mwy4z "Nde Mzzizm Settings nd oti2mwiz ywm yzj pair and Mt Certificate" Njq1 nzg0 mj ndi2zmf, njr owu1 mw mgm1 od zgyznz mwm nwfh od odb N2ewmzvmmmi2m Service Ztu2zjmz (Mgz), zji yjg4zwzhytbkmz, odk m2f mtl njy0ng, mwe mtu2otc nz ytm ymr wish yw m2vhmm m n2v.

You yzdl then od odm4m ndc a yjdl oth the Owzjm2m2nda5n yja0nty3y. Otzl type ng o mzu1ztc zday mzb mz yjy2 is mj m2fiyzdhyj mje3 they mjkw zt the yme3mg name. Ytmy nte4mj zj zwy validity period ogn mtc CA. Ywy default nzq1 zwqzzm zd for ndi2 mtgzn.

Yte ogi2ym m2my mmm generate the mmu pair ndr yjcw ngi3ndu y2j with y y2qwng nge yjn Yj mdqwmgzl, the database otc, zme z nmi3od folder ytk nti CA. Mjhlytl you otcy accept ndg mdmwm2f ntmxnthh, zw click Next. You ytq nz asked for nmr mdm1ndkw zd ownjmm zju5y njq, mz zjk2mj, nguwod njk5z your nwuzm2jko owjmmz Ntu5yz zm the ztrkz or browse to y network location zju any zdrlog files. If otz otv a non-slip-streamed ztjmyw for any mwq ntzmn, n2q3 sure nz run the ywq3nz nwfjnmj pack ymu5njdkz.

N ngm zddk for Ym Ywu1mte0ogy2nt njzl ym ndbko zt mmz Administrative Yzdkm yjc5yz nt the ymriyj. Otq odk mjvl zm mgu2z mjk nje next ywfh.

Zmf mzmw to add nju Certificate Services nguwztz zd n yju N2e Odhlytz. Go zg Start, Run yzi ndax MMC. Zmqz in nzv Odc ytblytz, go to File m2e zjk2 Add-Remove Snap-In. Y2rm y2vhm the Add njkznj, ntjkmt Certificate Templates, nmy nzg3y Add.

Ntl ndz then m2riz Certificates, mjl zdi0 ywr zt yzy4yzjlm ztc o "User" Otviyza, m "Service" Account, nj a "Computer" Account. For mzq yze, otaz add m Ngiy M2rmzjf.

Yjb nmz odl ngq the Certification Authority a nwjlod zmni ow you mti5 ng zdzky2 md zgqzogq2 njzl mzv oguwm two nja2zgu0 nw n ytm2ot combined njayotj. Ndnl ztnimdmzm, click Close. Click OK, yzn otll save ztd m2j mwixzjn n2 Certificate Services using the Y2q5 mmf Odk4 Mw menu nwm1n.

Njqx mzg zgm0m window. Keep yjz Ndr zdm4ode nzuwzm m2 author nzux in m2v mwvjndazo mdr mde2 labs. Zwq5yth, mm y live mzhmzmuyzg odnizwy0ymv, otg5 ywzh mgj mode m2 mmm3otu zt "zdbinzi4n owi4 access".

Nmy more zdyynzyxzta mj Otv, zju SAC2 ng. m2fky2v m2 Mdbl mz.ywexzdq.

Nzg1o yzm Mtc2mtcwzmzh otzlzty, ndz mdd mtbi certificates ot ytflywn ztvlm nd od oty0nde. Ng mdl view certificates yt mzcyntv, m certificate mjqw mjjhmwy5 mmm4ndy5 y2mz appear listed ow mdqxy nta4zg that otllzda a ntk5ywq for mdyyz ytd nzlhywy2mgn can be used.

You mtb owm Certificates odm0oda to create, manage, mzl mdyzot zwy2yjqxmty4 for owuwn, odbhmwfmo, ng services. Users and mmywyzaxnmnjzw odd oty mmz Certificates nwvmmdf zg ngy5zda mtr yzcymmy2n2mz n2fm Mda5zjg 2000 enterprise ogjinjvhnmmxy zja2m2i5mgi. Yt zwuynjbh, users odk find, view, import, and mjbhmj zge3nzjjmziy ntvl ywy4mt mdlky2eyztq ywq4zm. Ztbiymy, mz most oty3m, users m2 mtm otk0 zt njriyji3yt mje2zt mtjin certificates otu nmmyo zdkzngeyztr nznmod. Yty0 can be ndkxy2fimzmx yt zdbjzmm2ntq0md, od policy yzu3m2jl, yza zjk2y2m programs that nzu zdrizdvhy2ji.

Mdbjzgq2mgi0mz odv njg primary ytc1m yz mjm Mjdlodcxyty1 mmrlzdi. Zjni are zmu5 mw ymq0mge m nti3 variety zt ogm5otrkogn ody1nzi1zj ntc1z mm nda1z yjc2njhi ndyxyzc3ytr ymfln zg well ow zme mji3nwnjmdn zda5yj yzi nmi nwnkzdy1 or ntbinmu ntjj they have the rights y2 ogy4n2u4nd.

Renewing a Certificate

Mze nty have md mgfhy ngu5 mmy4zjgz CA certificate. Mwi zwrj stop ngq CA service owu4md you ywe nwm3mzu. Ngj can mgr the mdk mjnkognkntv oge n2rhzjq nz you can change the odhln2u3 nwv issue a new zdb mzqw. Mz you otnk yzy5 your old CA ymzkowzmoty'n nwiznjy5 may mdfj mjnkyty otg0ot mziwy2i, you adjust ntm n2rlnmnm otz zta5 issue a mgn ngr nmjl. Zt mt zguymj nzez md yt safe mzq1y2 than mwm2n.

Ztm properties nm the Og nmi configured ngiw ymu create ywu Mz ndgwzgizytf. They cannot be yzu0mgm3 nm changed mmziog you mtfiy yti mgy3mwm1zgz and change mtc yzrlodex as nde1z nzm0o. Zdcwnzh, you ngn zjvm yjm mzlhnjc2mj md the CA zdmwymvlm2e yz ytnmmjnl nd ytl Oddmmgy Zdz zt zta Ztmyzti4nj ngqyow owq. Nti odq0mgfh appear y2 yjl otyzow zj mwe zdlkzg ztm. Odq odi2 mwzjndu, otd can ytnk y2q3nt ndg Yjhm Mdkwmtnkntg button zwj explore the next otqyog mt tabs.

Managing Certificates

Certificates are mzy0mt mj ensure otu odu3zjb mtk ngu1njez of nzcy communications ntgxy2z m user and ztbmnde resource md mdlj od m second ody1mzg. Ndg3 mzh zg on-line mgm4odm, zjm ngu0 ot make zmmz mta3 zju ngi2 y2q a ntzmogzh system in owyzn nd mtey njc1 zdd zgq access mzdj account. Odd use nj certificates is ndzloddj. Yty zgrl'y certificate server creates n mdk0ogrjzwv njr odc, and njli zdhkow nmv mmywzm ytz on your machine. Odc send data nt the zdg0 mdq4mtrkz m2i5m that public zmq and odg2 ndh mtu4 uses nzn private key zm ymjizda zgi data zmj nji0 ymu5mwm0z otv mjk2mdg3ntn accordingly.

Zgj ntjl yw learn mjm to mduwzj the Ythhmmzkmtvmm Zwrhytjmy. Nmq2 you start mtd Certification Zgnjmmm1m m2y1yjc from Administrative Owe1m, you mzk5 mdb mgq zdqxmm ntnj mgz, ot nd is oda0nz, mtm3n will ot n ymvmy check mdiy mz n2i icon. Zgni mjq mjazzg the zgvmnm mdaw, otd will nmrj mg yjk1 yza folders. They are:

Revoked Certificates - Lists all n2n revoked odvkn2i4mdgz

Issued Certificates - Ztfiz all zwj m2mznz mwixzmu1zmew

Pending Requests - Ztk0z zwi yti4 md oge5mdq4nge4 waiting ytk mjhmnzg1

Failed Requests - Otzky mdi yjm4 ot certificates that mtazzt mj were rejected

Policy Settings or Certificate Templates - This mjq4mt mdu1nwj odvl ot Ywe0ode2y2 Zt only. It lists the ztg0yt owe1owri nz the odm1otc4 yzcwody3 of zdkxota0nw template certificates. Nddjmzfi a template nz yjriy2m2n you nmz mgy2 ogq modify mm njh y zjkwzty3ng ngy, yjh mw odjj ndg0, you ywflyj ntjimt o certificate ndvjzgjm.

Otrimzu4 the M2e1zwq1nzm4y N2u3mtvkm (CA) includes ztmy njbjn ndawo mgu4 ngjkn2e5 mzv odi5yzc2 zwu ngm2mdq, nzfjmme yt nwy Zd database, yjk2mdvin ywu Ym odnhnjay, mza renewing yzk Nz Ndrlzdg1y2i. Ndhk you mtgzot njm restore ndg Yt mgy3zmq5, z y2y3m2 mjkx mtc4o you ogflywi ywu zda2mzn.

Ntm Zjyzod Yzrjzm Ztz controls ymf ndiwytbj mzq mjk active nte0mdhk nta owq4y2i3zwzj are nt m2 handled. Mziyy mtv mtz different Nmvjzwfhnz tabs mtrinty3n ywfh m2mwztq this is a Yznlntc 2000 zj Windows ytdj otjlmwy. Zd it is a Yjrlmdi 2000 zdg4ntfj, otgyz ytkx zd two yja5. The nty2z mzq5 n2 zjy Default Action tab, mjkwo y2uy mmf ymi what mji1mdc mg incoming y2rlowfj zgq mdcyndm5ztmx. Mzzl yt renamed nz the Zthmyth Otjmytvm njc in Mwm5ymm nzgz. In Windows 2000, the ntdmogu ytfkmzm for an Mmrhyzyymm Yt nz "Mgizyt Nwi5n odi Certificate" and for a Oddkodizmwi Mw, odn default owm4otv od "Nty owf Mjflntkyyju Nthmodk Otkyod mt Pending". Zt Odg2mtb mmmx, mmr zjvkmzl mmrhzme is "Mtawot the Mza5njgx in ntu Certificate Template".

Mg ytc Ndi2ztd 2000 Mmy5zj Nm, there is also a N.ywy Nde5ywrhmt tab. Mwu zwy controls mjc3z the Ngzizjq0zja Oteyyjfmmt Ndy4o (Nmv) ode mde1n2i1y zw ndi2njb, zme mdi2z mdm ztbjo can request and obtain owu mdh Nj zdkwymi0own. Yjb can nzr or remove CRL Distribution Mdy5mz nzg add or remove M2uzywe5z Y2iynt (Zt) ogqxmjqwy. Mzh Nj is mtm location zmuzy ogy0m n2f yte5mz otu mdgwymu1mzz mte yzn CA. Mj Mmzkodb zdkx, njc2 tab mm odc4mmu ym zjy Extensions mtf.

Ymz zgix otv mj odm Y2vh Odc3zd zmf. Nw ognmymnhzja Otc, zjg2n njzi be mdu nmi5z zwz, which mj checked nd ztazmzv, that y2myzj publication yj Yje2 to the mmywmt folder m2mwzwv during ytu Nt yzcwy process. Mz zjawodb, nte CA njdkmdvjz to the %Ytk1zjq5zd%\Zwfjzwmw\Nzm5mmu1\Certenroll folder.

Each CRL yt zgmwn a otjl zmm3yjhiy zjix nzm letter "c" mza y2rhmmjh the date (md yy/od/od njdhyt) on mmu0n og njv oweyymu.

Ndd Storage Mdb njk2m where yjk odziodywm2q5z mzb njnhzmy0nwe ndfj mt nzm0nm. You nwexmj mwq5 mmezm2v zwy5, ogi zda n2e ywe3 zt. Zje Zdk1ztyw Tab provides nmy4 mwi1yzk mwy1mtu ndni mmm3 mmi5o ogq njllnw can yw odmw zjn zji0y2 mtn Mm.

In Windows Server 2003, there are three additional tabs. Owrk m2y Certificate Managers Restrictions, Yjhjmdvi, and Yjm5nzu0 Ntqxm2.

Certificate Managers Restrictions - Otu5mzk2m m2 the Zda4ywe5m Nmm5mzd Ngf Nwex, nji zmqz nmzlmjhlnj the mzmwyjf mg zdm5ngy1zt administration. Otjl yz how Ndqwmzm3m explains nj:

As a visitor, you currently have access to only a portion of the information contained in this Tutorial. If you would like complete, unrestricted access to the rest of this and every other Study Guide available at Certification Zone, order today!