Schema

ADMX

Ultimately, it can be limitless, but most hard drives will restrict you to 10. (being 0-9)

There are alternate methods used to create many more, but the more partitions you have, the more long term damage it can do to your hard drive. I wouldn't recommend doing more than 5 on a 500GB.

32-bit versions of Windows 2000 support up to 4 GB of RAM minus space used by devices in the address space on non-PAE capable systems. On PAE-capable systems, Windows 2000 can support, depending on the version, up to 64 GB of RAM.

Not much information to start with, but this is a start that most people could do.

Start with the basics;

- boot in safemode and run a chkdsk from prompt

- run a virus scan

- if an application was installed before the hang, uninstall in safemode

- try a system restore to a date prior to the problem

- boot from CD and run a recovery

- restore from backup (if you backed up your system)

- if you have an image, revert back to it.

Personal Identifier Number (PIN)

The GLobal Catalogue has a reference to all objects within Active Directory. Its is know as GC

It depends on your setup. If this all of the computers are networked in a workgroup environment, then you need to have a locally stored profile on each computer that redirects to the master fileserver. The SAM will be the database in this case

If you have a domain environment, then just join all of the computers into the domain and they should be able to log on to any computer on the network.The AD will take care of security nad NTDS.DIT will be database in this case

yes and it is recommended that the roles should be seized and transferred to a healthy DC

They way to transfer is as follows

1. On any domain controller, click Start, click Run, type Ntdsutil in the Open box, and then click OK.

C:\WINDOWS>ntdsutil

ntdsutil:

1. Type roles, and then press ENTER.

ntdsutil: roles

fsmo maintenance:

Note: To see a list of available commands at any of the prompts in the Ntdsutil tool, type ?, and then press ENTER.

1. Type connections, and then press ENTER.

fsmo maintenance: connections

server connections:

1. Type connect to server <servername>, where <servername> is the name of the server you want to use, and then press ENTER.

server connections: connect to server server100

Binding to server100 ...

Connected to server100 using credentials of locally logged on user.

server connections:

1. At the server connections: prompt, type q, and then press ENTER again.

server connections: q

fsmo maintenance:

1. Type seize <role>, where <role> is the role you want to seize. For example, to seize the RID Master role, you would type seize rid master:

Options are:

Seize domain naming master

Seize infrastructure master

Seize PDC

Seize RID master

Seize schema master

1. You will receive a warning window asking if you want to perform the seize. Click on Yes.

fsmo maintenance: Seize infrastructure master

Attempting safe transfer of infrastructure FSMO before seizure.

ldap_modify_sW error 0x34(52 (Unavailable).

Ldap extended error message is 000020AF: SvcErr: DSID-03210300, problem 5002 (UNAVAILABLE)

, data 1722

Win32 error returned is 0x20af(The requested FSMO operation failed. The current FSMO holde

r could not be contacted.)

)

Depending on the error code this may indicate a connection,

ldap, or role transfer error.

Transfer of infrastructure FSMO failed, proceeding with seizure ...

Server "server100" knows about 5 roles

Schema - CN=NTDS Settings,CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net

Domain - CN=NTDS Settings,CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net

PDC - CN=NTDS Settings,CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net

RID - CN=NTDS Settings,CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net

Infrastructure - CN=NTDS Settings,CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net

fsmo maintenance:

Note: All five roles need to be in the forest. If the first domain controller is out of the forest then seize all roles. Determine which roles are to be on which remaining domain controllers so that all five roles are not on only one server.

1. Repeat steps 6 and 7 until you've seized all the required FSMO roles.

2. After you seize or transfer the roles, type q, and then press ENTER until you quit the Ntdsutil tool.

Note: Do not put the Infrastructure Master (IM) role on the same domain controller as the Global Catalog server. If the Infrastructure Master runs on a GC server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a GC server holds a partial replica of every object in the forest

if you have windows xp on your old computer just use remote desktop... then you dont have to spend any money...

(there is alot more to servers than just remote desktop)

Buy a server OS (the cheapest standard 'server 2008' starts at $999.00)

Format the HD in your comp

Install the new server OS

Download and install new drivers, might have to buy a few new parts because some parts werent designed to be used in servers. No big deal, can get whatever you need at newegg.com or your local PCWorld.

After about 2 - 3 hours of work you can enjoy your new server... :)

Secondary Logon

number of columns and number of rows.

Just as with consumer-oriented versions of Windows, Windows Server comes in several different varieties to accommodate features useful to different types of users. Large businesses are willing to pay dearly for operating systems that support dozens of processors and thousands of users, but a small business would be loathe to pay the same price when all they want is to run a small volume web server. By creating multiple versions with different feature sets, Microsoft is able to maximize their profits by gaining both types of customers.

One of the Windows Server operating systems.

PHP can be installed with Microsoft's IIS web server as an ISAPI filter, or you can install the WAMP server under Windows that contains the Apache web server, the PHP interpreter, and mySQL.

There are others as well, such as the Xitami web server, etc., that work equally well with PHP under windows.

Windows Server 2008 has five Active directory related roles. below are the list

1. Active Directory Domain Services (Identity): AD DS it provides the functionality of an identity and access (IDA) solution for enterprise networks. It also provides the mechanisms to support, manage, and configure resources in distribution network environments.

2. Active Directory Lightweight Directory Services (Applications): AD LDS formerly known as Active directory application mode (ADAM), provides support for directory-enabled applications.

3. Active Directory Certificate Services (Trust): AD CS to set up a certificate authority for issuing digital certificates as a part of a public key infrastructure (PKI) that binds the identity of a person, device or service to corresponding private key. Certificates can be used to authenticate users and computers, provide web-based authentication, support smart card authentication, and support application, including secure wireless n/w, vpn, Ipsec, EFS, and more.

4. Active Directory Rights management Services (Integrity): AD RMS is an information-protection technology that enables you to implement persistent usage policy templates (for documents) that define allowed and unauthorized use whether online, offline, inside, or outside the firewall.

5. Active Directory Federation Services (Partnership): AD FS enable an organization to extend IDA across multiple platforms, including both window and non-windows environments, and to project identity and access rights across security boundaries to trusted partners.

domain local group

Members of the Administrator group have total control over the computer and everything on it. The user named Administratoris the default account within this group. The domain account of each faculty or staff member with a Windows 2000 computer is part of the Administrator group on his or her computer. == * Create, modify, and access local user accounts * Install new hardware and software * Upgrade the operating system * Back up the system and files * Claim ownership of files that have become damaged * Do anything a Power User can ---- The Power User class can perform any task except for those reserved for Administators. They are allowed to carry out functions that will not directly affect the operating system or risk security. All domain accounts are part of the Power Users group on public Windows 2000 computers. == * Create local user accounts * Modify user accounts which they have created * Change user permissions on users, power users, and guests * Install and run applications that do not affect the operating system * Customize settings and resources on the Control Panel, such as Printers, Date/Time, and Power Options * Do anything a User can == * Access other users' data without permission * Delete or modify user accounts they did not create Members of the Administrator group have total control over the computer and everything on it. The user named Administrator is the default account within this group. The domain account of each faculty or staff member with a Windows 2000 computer is part of the Administrator group on his or her computer. == * Create, modify, and access local user accounts * Install new hardware and software * Upgrade the operating system * Back up the system and files * Claim ownership of files that have become damaged * Do anything a Power User can ---- The Power User class can perform any task except for those reserved for Administators. They are allowed to carry out functions that will not directly affect the operating system or risk security. All domain accounts are part of the Power Users group on public Windows 2000 computers. == * Create local user accounts * Modify user accounts which they have created * Change user permissions on users, power users, and guests * Install and run applications that do not affect the operating system * Customize settings and resources on the Control Panel, such as Printers, Date/Time, and Power Options * Do anything a User can == * Access other users' data without permission * Delete or modify user accounts they did not create

Tree-Root Trust or cross forest trust (windows server 2008 active directory)

SRV Resource Records

When a Windows 2000-based domain controller starts up, the Net Logon service uses dynamic updates to register SRV resource records in the DNS database, as described in "A DNS RR for specifying the location of services (DNS SRV)

The SRV record is used to map the name of a service (in this case, the LDAP service) to the DNS computer name of a server that offers that service. In a Windows 2000 network, an LDAP resource record locates a domain controller.

A workstation that is logging on to a Windows 2000 domain queries DNS for SRV records in the general form:

_Service ._ Protocol . DnsDomainName

Active Directory servers offer the LDAP service over the TCP protocol; therefore, clients find an LDAP server by querying DNS for a record of the form:

_ldap._tcp. DnsDomainName

_msdcs Subdomain

There are possible implementations of LDAP servers other than Windows 2000-based domain controllers. There are also possible implementations of LDAP directory services that employ Global Catalog servers but are not servers that are running Windows 2000. To facilitate locating Windows 2000-based domain controllers, in addition to the standard _ Service ._ Protocol . DnsDomainName format, the Net Logon service registers SRV records that identify the well-known server-type pseudonyms "dc" (domain controller), "gc" (Global Catalog), "pdc" (primary domain controller, and "domains" (globally unique identifier, or GUID) as prefixes in the _msdcs subdomain. This Microsoft-specific subdomain allows location of domain controllers that have Windows 2000-specific roles in the domain or forest, as well as the location by GUID when a domain has been renamed. To accommodate locating domain controllers by server type or by GUID (abbreviated "dctype"), Windows 2000-based domain controllers register SRV records in the following form:

_ Service ._ Protocol . DcType ._msdcs. DnsDomainName

The addition of the _msdcs subdomain means that two sets of DNS names can be used to find an LDAP server: DnsDomainName is used to find an LDAP server or Kerberos server that is running TCP (or, in the case of a Kerberos server, either TCP or the User Datagram Protocol [UDP]), and the subdomain _msdcs. DnsDomainName is used to find an LDAP server that is running TCP and also functioning in a particular Windows 2000 role. The name "_msdcs" is reserved for locating domain controllers. The single keyword "_msdcs" was chosen to avoid cluttering the DNS namespace unnecessarily. Other constant, well-known names (pdc, dc, and gc) were kept short to avoid exceeding the maximum length of DnsDomainName.