CIS 417 - Windows NT

CIS 417 - WindowsNT Server (System Administration)

Instructor: Michael P. Harris

Lecture Notes #1 - Windows NT v4.x Introduction

*Key Terms:*
IPX/SPX	(NWLink) Transport protocol used for NOVELL support
NetBEUI	Transport protocol used for Windows for Workgroups support
TCP/IP	Transport protocol used for Internet/UNIX/WAN support
DHCP	Provides for automatic TCP/IP configuration
WINS	Provides dynamic mapping of Network names and IP addresses
NTFS	Provides long filename support, security, and auto-recovery
FAT	Provides compatibility with MSDOS/Win95 file access
HPFS	For compatibility with OS/2 (for conversion to NTFS only)
UNC	Universal Naming Convention (\\server-name\share)
Administrator	Login used for system configuration
Domain Controller	(PDC) Authenticates logons and maintains the security policy
CTRL-ALT-DEL	Welcome logon message
BOOT.INI	Controls booting in a dual-boot system
BOOTSECT.DOS	Allows for dual-booting with another operating system
NTBOOTDD.SYS	Allows booting from SCSI drives (SCSI host adapter driver)
NTDETECT.COM	Identifies the computer hardware in your system
NTLDR	WinNT Bootstrap Loader, loads and configures WinNT
PAGEFILE.SYS	Virtual memory file for WinNT
SPACEBAR	Boot with "Last Known Good" feature
Registery(s)	Files in the \systemroot\system32\CONFIG directory
STOP ERROR	Blue VGA debug screen 80 characters x 50 lines
SAM	Security Accounts Manager (Security Database)(Bindery)
MEMORY.DMP	Fatal error log file
Policies	User Restrictions (Restricts what Explorer can do)
NETLOGON	Share created to contain NTCONFIG.POL & CONFIG.POL

Lecture Topics:

April 1985, Microsoft ships first networking product: MS-NET. (pg.31)
Microsoft Network Names: (pg. 32)
They all have different rules about how long they can be, etc. (pg. 52)
1. Machine Names & Workgroup Names (15 characters, NOT case sensitive)
2. User Names (20 characters, NOT case sensitive)
3. Share Names (12 characters, NOT case sensitive)
4. Passwords: (14 characters, case sensitive)
UNC (Universal Naming Convention) (pg. 35)
\\machine_name\share_name\directory\filename.ext (NOT case sensitive)
Microsoft Network Browsing: (pg. 41)
1. Browse List - list of available servers that a 'browse master' maintains.
2. Browse Master - Microsoft's "name servers", they handle all name server requests.
3. Browse Services - "name service", keep a list of known servers and shares offered by each of those servers.
WORKGROUP - a group of workstations that share a browse list. (pg. 45)
- How do I join a Workgroup? (pg. 46)
  - From DOS or WFW3.11: edit SYSTEM.INI, under the heading [NETWORK], add or edit the line, GROUP=workgroup-name.
  - From Win95 & WinNt 4.x: right-click 'Network Neighborhood', Properties, Identification tab.
What kinds of machines can act as servers in a Microsoft Network? (pg.47)
1. Windows 3.x (with Workgroup Add-on for MSDOS clients)
2. DOS (with Workgroup Add-on for MSDOS clients)
3. Windows for Workgroups 3.11
4. Windows 95
5. Windows NT Workstation
6. Windows NT Server
How do I View a Browse List? (pg. 48)
1. From DOS: net view [\\server-name | /workgroup:workgroup-name]
2. From WFW3.11 or WinNT 3.x: Open 'File Manager, click Drive, click Connect Network Drive
3. From Win95 or WinNT 4.x: Open Explorer, scroll down to and expand Network Neighborhood, double click on one of the listed servers
Hidden Shares (last character of sharename is '$') (pg. 49)
- \\server-name\share-name$
- these shares do not show up on the browse list
- these shares can still be attached to 'if' you know the name
Windows NT's additional access security over 'Workgroup' security... (pg. 51)
- WinNT lets you seperate security information by user, rather than only letting you set a single password on a share for all users.
- On WinNT, you use 'User Manager' to create a user account for each person who will access the shares on a server. Then you go to the shares and explicitly name the people who can access which shares.
Drilling Down to get to resources (pg. 52)
Access Scenario by server type... (Who gets the browse list?) (pg. 54)
- WFW3.11 - always gives out list of shares to anyone
- Win95 with 'share-level' access control - always gives out the share list
- Win95 with 'user-level' access control - only gives out share list to recognized users
- WinNT with 'Guest account' enabled - always gives out the share list
- WinNT with 'Guest account' disabled - you only get the share list if you're logged in to your workstation with a User name and Password that match a known User name and Password on the Server
- ...in addition: you will only be able to access the share in the Browse List on the WinNT server if you have permission to access the share.
Browsing Security Summary: (pg. 54)
1. Anyone physically attached to your network can retrieve the names of your 'Workgroups' and 'Domains.'
2. Anyone physically attached to your network can retrieve the list of 'Servers' on any workgroup.
3. Someone physically attached to your network may or may not be able to retrieve the Share List on a given server. WFW3.11 & Win95 'servers' give out their share list to anyone, but WinNT must know you first.
SAM - Security Accounts Manager database (pg. 55)
- User accounts are stored in the SAM database on the WinNT server (or PDC).
- The SAM database is part of the registery and located typically in: C:\WINNT\SYSTEM32\CONFIG
- The 'User Account' information includes: 'User Name', 'User Password', 'User permissions and rights'.
- (Remember, there is no such thing as a user account on DOS, WFW3.11, or WIN95. Win95 profiles are NOT the same as user accounts.)
The SAM, PDC, and 'Single Network Logon' feature: (pg. 58)
In the Domain, the PDC 'Primary Domain Controller' maintains a central SAM database, in effect creating a central 'security server.' In a domain, you need only remember one account password for your "domain account", the one maintained by in the central SAM on the PDC.
The difference between User Rights and Permissions (pg. 66):
- A Right is the ability to do a particular task.
- A Permission is grant of access to a network resource.

This page is maintained by: Michael P. Harris

`viking.delmar.edu`	`mpharris@surf.delmar.edu`
Last modified on Monday, June 16	Copyright © 1997