Server Manager
• Used to monitor and manage several different Windows Server systems
• Server Manager Dashboard panes
- Dashboard section at the top
- Welcome to Server Manager pane (often hidden by administrators)
- Roles and Server Groups pane
• Dashboard uses various colors and icons
• Additional Server Manager panes
- Events, Services, Best Practices Analyzer, Performance, Roles and Features
• Server roles introduced starting with Windows Server 2012
- Have configuration tools built into the Server Manager interface
- Example: Storage Spaces
• Some server roles have their own MMC tool for configuration
Adding Roles and Features Using Server (1 of 7)
• Three different ways to add roles and features within Server Manager
Selecting Add roles and features
1. from the Welcome to Server Manager pane within the Dashboard section
2. from the Manage menu
3. from the Tasks menu within the Roles and Features pane for a server or server role
• Starting the installation of a role is the same for all three methods
- Use the Add Roles and Features Wizard (pede mong gawin here)
a. Selecting the installation type
b. Selecting the destination server
c. Selecting server roles
d. Selecting features
e. Completing the installation of roles and features
Working with Local Users and Groups
There are several ways to open the console:
• Run dialog: Press the Windows key + R, type [Link], and click OK.
• Server Manager: Open Server Manager, go to Tools, and select Computer Management. Expand Local Users and
Groups.
• Windows Search: You can also search for "Local Users and Groups" in the Windows search bar.
Working with Local Users and Groups (1of 7)
• Local user account authentication
- Must provide valid user name and password
• Local user account assigned rights to the operating system
- Examples: change system time or shut down the system
• Local user account granted access to resources
- Based on the resource’s Access Control List (ACL)
- (ACL) is a set of rules on a system that dictates which users or entities are granted or denied access to a
specific resource, such as files, data, or network traffic.
• Local group accounts
- Simplify assigning rights and permissions to multiple local user accounts
Working with Local Users and Groups (2 of 7)
• Security Accounts Manager (SAM) Registry database
- Stores local user and group accounts
- %systemroot%\\system32\\config\\sam
• Local user accounts used to authenticate users following workgroup installation
- Administrator and Guest
• Local group accounts for assigning rights and permissions following system installation
- Administrators, Guests, and Users
Working with Local Users and Groups (3 of 7)
• To create local user and group accounts
- Use the Local Users and Groups MMC snap-in
• To create a NEW local user account
- Select the Users folder from Local Users and Groups MMC snap-in
• Choose appropriate user’s tasks after installation
• To create a new local group account
- Select the Groups folder from Local Users and Groups MMC snap-in
Working with Local Users and Groups (4 of 7)
Working with Local Users and Groups (5 of 7)
Working with Local Users and Groups (6 of 7)
Working with Local Users and Groups (7 of 7)
Active Directory Basics
• Options for logging into an Active Directory domain computer
- Local user account: stored and managed on a single computer, granting access only to that device’s
resources
- Domain user account: is stored in a centralized directory like ADDS and provides access to resources
across the entire network.
● Encrypted token and domain group account issued to the computer
• Domain user, group, and computer accounts stored as objects in a database
- Active Directory database conforms to ITU X.500 standard
• Lightweight Directory Access Protocol (LDAP) provides quick access
• Active Directory Group Policy provides advantageous features
• Active Directory schema
- All available object types (classes) and associated properties (attributes)
- Schema can be extended
• Leaf objects represent a user account, group account, or computer account
• Container objects within the Active Directory database
- Group leaf objects for ease of administration and Group Policy application
- Domains, organizational units (OUs), sites
• Each object type is called a class, and the data it holds are called attributes
• Schema: The schema is the "blueprint" of Active Directory. It defines what kinds of objects (like users, computers,
printers) can exist in the directory, and what attributes (properties) those objects can have.
• Leaf Object: represent a user account, group account, or computer account.
• Container objects: can hold other objects. They help organize AD logically.
• Group Object: are special objects that contain user or computer accounts
• Domain: is the main logical boundary in Active Directory. It stores all objects (users, groups, computers) under a
single security and administrative umbrella
Active Directory Forests, Trees, and Trusts (1 of 4)
• Active Directory forests
- Provide for multiple domains within the same organization
- Forest root domain: first domain in a forest
• Using additional domain controllers
- Add them to the forest root domain
- Configure them to host an Active Directory database for another domain within the same forest
• Active Directory tree has parent and child domains
Active Directory Forests, Trees, and Trusts (2 of 4)
• Trust relationship (trust)
- Allows users to access resources within other domains
- Requires access within the resource's ACL
- Trust relationships represented by arrow symbols in tree diagram
• Transitive property minimizes number of trust relationships needed
• Other types of trusts
- Shortcut trust speeds up resource access
- External trust, forest trust, realm trust
Active Directory Forests, Trees, and Trusts (3 of 4)
Active Directory Forests, Trees, and Trusts (4 of 4)
Active Directory Groups (1 of 2)
• Two main types of group accounts
- Distribution groups and security groups
• Group scopes
- Organize rights and permissions assignments across multiple domains
- Use a combination within a forest to organize the assignment of permissions
- Global scope
- Domain local scope
Active Directory Groups
• Two main types of group occur
- Universal scope
Active Directory Groups (2 of 2)