Managing & Supporting Windows XP

Transcription

1 UI 9 Managing & Supporting Windows X

2 Definitions User - individual granted access to the system roups - logical collection of users Accounts - ogical construct containing all information that defines a user to the windows environment Resources - All equipment attached to the workstation or network

3 Definitions ome Directories - dedicated locations on a file server for a specific user to store files olicy - a set of configurations that allows an administrator to restrict a user s access and rights rofile - file containing a user s environmental settings and preferences can be local, mandatory or roaming

4 User/roup ame Rules he name must be unique to the machine for local accounts (or unique to the domain in the case of domain accounts). he username cannot be the same as a group name he name may be up to 0 characters, upper or lowercase or a combination of both.

5 User/roup ame Rules o avoid confusion with special syntax characters, names may not include any of the following: " / \ [ ] : ; =, + *? < > he name may include spaces and periods, but may not consist entirely of spaces or periods. : ames including spaces have to be enclosed in quotes for both scripting or command-line use. Better to avoid using spaces.

6 Users ach user must have an account to access a computer running the windows operating system User properties roups associated with the user rofile path ogin script ome directory

7 asswords Account asswords ase sensitive an be up to characters ptional (but required by default) omplexity rules enforced by default ocal accounts live in the %systemroot%:\winnt\system3\config directory in the SAM file

8 assword omplexity reate passphrases pneumonic for a phrase Use uppercase, lowercase, and non alphanumeric characters an enforce password complexity with roup olicy

9 User Account ptions User Must hange assword at ext ogon - Forces a user to change their password the next time they log on and afterward the box will be unchecked. User annot hange assword - If checked, prevents the user from changing the account s password.

10 User Account ptions assword ever xpires - If checked, the user account ignores the password expiration policy, and the password for the account never expires Account Is Disabled - If checked, the account is disabled and no one can log on to it until it is enabled (it is not, however, removed from the database).

11 AUIAI ocal Machine Authentication rocess Security Accounts Manager (SAM) Resources Access oken User identification roup memberships User rights assigned

12 ADMIISRAR Full control of computer, domain or forest depending on the context Used to establish administrative structure and create other accounts Should be renamed Should be secured with a complex password an be disabled, but cannot be deleted Should not be used for every day user tasks

13 US AU Designed to allow temporary access to the network Disabled by default, but cannot be deleted Should be secured with a complex password if enabled

14 ollections of user accounts Simplify access to resources an be used for security and messaging (Active Directory) RUS Resources Users Access oken ermissions and/or Resource As ocal roups

15 ontrol anel User Accounts

16 ontrol anel User Manager

17 omputer Management

18 Recommend Best ractices ive administrators a limited account for non administrative use imit the number of users in the Administrators group Rename or disable the Administrator account Rename and leave the uest account disabled bserve the principle of least privilege

19 User Rights

20 assword olicy

21 Account ockout

22 Disk Quotas ou can setup disk quota on a partition or volume to monitor or limit disk space taken by users Any space used by a user will be charged against his/her quota If a file is compressed the uncompressed size will be charged When you enable disk quota you can set the quota default size (all users) Members of the administrator group are exempt from the quota limits ou can configure Windows to generate a system event when users exceed the warning or the quota limits

23 Disk Quotas

24 File ncryption Users can encrypt their files and folders giving them another layer of security Files are encrypted and decrypted on the fly When you encrypt files and folders, other users can see the list but can not open them When a user encrypts a file, only the user and the recovery agent can access it ou can use the cipher command to have a greater degree of functionality

25 ocking the omputer ress the windows key + l to lock the workstation

26 Windows Firewall

27 omponents hat Use the Registry User rofiles Windows Kernel (SKR ) Registry ditor [K_A_MAI on ocal Machine] Registry dit ree View Security ptions Window elp K_A_MAI ardware SAM Security Software System Registry ardware rofiles Device Drivers ardware Data Setup rograms

28 Registry ierarchical database containing windows system configuration information Supports remote administration hanges to the registry can be made from: ontrol anel Setup programs Administrative tools Registry editor Booting process an contain ext (including complete files) Binary data xecutable code

29 Set up into five subtrees called IVS A ive is a binary file that contains all of the keys and values within a branch of the registry ach hive has two files associated with it (hive-name, hivename.log) Registry

30 Registry ives K_URR_USR - contains all configuration information for the specific user or users currently logged on to the computer K_USRS - contains all configuration information for all users who have ever logged on to the computer K_ASSS_R - contains and file association information

31 Registry ives K_URR_FI - contains additional information about the current system configuration K_A_MAI - contains the configuration information on the local machine for ARDWAR SAM SURI SFWAR SSM

32 Registry Data ypes Reg_Binary - binary data stored as hex pairs representing byte values (x digits gives a range of 0-55 per byte0 Reg_Dword - stored as 4 bit number (word) for a range of 0-4B, the 3-bit address range Reg_sz - string value Reg_multi_sz - multiple string appears as a list Reg_expand_sz - expandable string %system Root%

33 Registry ontrol Sets urrent - successful boot Default - to be used the next time the computer reboots Failed - failed control sets astknownood - last control to produce a successful logon before the current logon

34 Registry Backup Backups should be made before making registry changes Use regback.exe found in the /000/X resource kit xport the entire registry or individual keys as text files

35 System Information ools

36 ustom MM onsole

37 3 4 Windows Boot Sequence re - Boot Sequence ower on self test (S) oads Master boot record (MBR), points to to DR Boot sector from active partition is is loaded into memory oads DR Boot Sequence DR changes microprocessor from real mode (8-bit) to to the 3-bit flat memory model needed to to address 4 B of of RAM oads a mini file system to to read the hard drives (FA or or FS as needed) rocesses the Boot.ini file oads the selected operating system AS KW D option is is available at at this point -this option points to to either ontrol Set or or in in the Registry Runs D.M oad and initialize Windows 000

38 Windows Boot Sequence (continued) oad Sequence oads SKR oads A (ardware Abstract ayer) oads the System ive Initializes the kernel aints the screen blue hanges the screen font oads device drivers - a series of of dots runs across the screen oad Sequence Starts the device drivers - DS & windows configuration and session manager to to read the the entries that are stored in in the registry key oads the WI3 Subsystem Starts WI ogon Verifies that the Windows services are started Starts the ogon rocess

39 Mandatory Startup Files DR bootstrap code D.M performs a complete hardware inventory B.II contains path to operating system kernel and other startup options SKR.X operating system executable A.D hardware abstraction layer

40 roubleshooting ools ast Known ood Safe Mode System Restore allows restoration of a previous configuration but must be able to boot Recovery onsole Automated Recovery System set of disks to restore the system partition to the state at the time the disks were created Reinstall the operating system X startup Disk create a dos boot disk with recovery tools