File and Print Services

Transcription

1 UT 5 File and Print ervices onna arren 5-1

2 Topics for this Unit File ervers File ystems Physical Hard isks irtual Hard disks istributed File system Printing ervices onna arren 5-1

3 TF File ystem onna arren 5-1

4 File erver The File erver role is available on all versions of the indows erver versions File systems include installing disks, creating shares, assigning permissions, and mapping drive letters The file server must be installed before you can configure or manage your file system onna arren 5-1

5 Access Control Lists Types of ACLs iscretionary ACL (ACL) - configured by a server administrator or owner of an object ystem control ACL (ACL) - contains information used to audit the access to an object ACL and ACL control folder and file Attributes Permissions Auditing wnership onna arren 5-1

6 Master File Table (MFT) onna arren 5-1

7 ecurity escriptors onna arren 5-1

8 Access Control ntries (ACs) Grouped by resource bject type identifier Actions permitted on the object List of s of users or groups allowed to perform a specific action Can be set for Allow, eny, or Audit Allow and eny ACs can exist in the same ACL Audit ACs are kept in ACLs eny ACs override Allow ACs Accumulated permissions for multiple ACs is most lenient unless one is deny onna arren 5-1

9 Configuring File Attributes Attributes tored as header information with each folder and file includes volume label, designation as a subfolder, date of creation, and time of creation Archive attribute - Checked to indicate that the folder or file needs to be backed up because it is new or changed Compression Attribute educe the amount of disk space used for files isadvantage of compressed files is increased CPU overhead to open the files and to copy them ncryption Attribute - only user who encrypts folder or file is able to read it onna arren 5-1

10 Configuring File Attributes Microsoft ncrypting File ystem (F) sets up a unique, private encryption key associated with the user account that encrypted the folder or file Uses both symmetric and asymmetric encryption techniques ndex Attribute vs. indows earch ervice indows earch ervice nstall the File ervices role via erver Manager Maintain indows earch ervice through Control Panel ndexed files include: Files in the ocuments folder for an account files Photos and multimedia files Files that are commonly accessed onna arren 5-1

11 File versus Folder Permissions onna arren 5-1

12 pecial Permissions onna arren 5-1

13 File ersus irectory Permissions File permissions override directory permissions xample Bob has no permissions on a directory but has read permissions on a file in the directory Bob can access the file but must type the full path name to do so onna arren 5-1

14 ther Permissions File elete Child f a user has full control on a directory, he can delete top level files even if no delete file permissions exist hen access is granted to a file a handle is put into the object itself and the Access Control List is no longer checked onna arren 5-1

15 Permission nheritance ubfolders and files inherit permissions nheritance can be blocked Uncheck the nherit From Parent Check box Blocking required for new permissions onna arren 5-1

16 Copying versus Moving onna arren 5-1

17 ormal Compression Compression Compatible with Zip compression programs Can be stored on FAT volumes and removable media Can be ed TF Compression is managed by the file system pen files and run applications directly from the compressed folders Apply using compression attribute Compresses and decompresses on the fly Can use alternate color to indicate compression T: Must have write permission to compress a file or folder onna arren 5-1

18 Moving/Copying Compressed Files ithin an TF volume: Moved files retain their compression attribute Copied files inherit the attribute of the target folder Between TF volumes: All files inherit the attribute of the target folder To FAT or FAT3 partitions: Files are uncompressed. (FAT does not support compression.) onna arren 5-1

19 ncrypting File ystem Uses public key cryptography 56-bit Advanced ncryption standard (A) encryption ncompatible with TF compression ecovery agent can recover encrypted files Cipher.exe / c:\myfolder\encrypted / will decrypt onna arren 5-1

20 Moving/Copying Compressed Files Moving or copying a file into an encrypted folder encrypts it Moving or copying an encrypted file to an unencrypted folder does not decrypt it Copying or moving an encrypted file to another file system decrypts it Moving or copying a file requires decryption ability Files can be backed up in the encrypted state onna arren 5-1

21 ecovering ncrypted Files The encrypted file must be recovered by the key used in the F f the recovery key certificate is lost, the file cannot be recovered f you lose your file encryption certificate and associated private key through disk failure or any other reason, a person designated as the recovery agent can open the file using their certificate and associated private key The recovery agent s certificate should be protected onna arren 5-1

22 File Properties emo onna arren 5-1

23 Troubleshooting a ecurity Conflict eview folder and share permissions for: User account All of the groups to which user belongs ffective Permissions tab Helps troubleshoot permissions conflicts ight-click a folder or file, click Properties, click the ecurity tab, click the Advanced button, and click the ffective Permissions tab onna arren 5-1

24 File haring Planning for file sharing on a large network requires you to assess a number of factors, including: calability avigation Protection Abuse iversity Fault tolerance Availability onna arren 5-1

25 Hard rives onna arren 5-1

26 MB Partition tyle Comparison upports up to 4 primary partitions, or 3 primary and an extended upports volumes up to terabytes Uses hidden sectors to store system information eplication and CC are T features of MB s partition table GPT upports up to 1 primary partitions upports volumes up to 1 exabytes Uses partitions to store system information eplication and cyclical redundancy check (CC) protection of the partition table for reliability onna arren 5-1

27 isk Types Basic isk Compatible with other versions of indows Consists of primary and extended partitions upports up to four partitions (per single hard drive) indows can only be installed on basic storage type partitions onna arren 5-1

28 Primary and xtended Partitions PMAY Functions as a physically separate disk Can host an Can be marked as active (and used to boot from) Up to 4 are supported or extended ach is formatted and assigned a drive letter XT Cannot host an Cannot be active partition Basic disk can only host 1 xtended but unlimited logical partitions o not format extended partition, but only the logical drives onna arren 5-1

29 ynamic torage torage technique that does not use partitions Accessible only to indows, XP, ista and 7 Can combine two or more physical disks into one dynamic disk iews an entire physical hard drive or multiple drives as a single entity, labeled as a volume ffers drive structures from simple volumes to fully fault tolerant A 5 configurations Can be expanded without rebooting You create a dynamic disk by upgrading a basic disk ot supported on: Portable computers emovable disks xternal UB or Firewire rives indows 7 tarter or Home editions onna arren 5-1

30 imple olumes on ynamic isks You can convert basic disks to dynamic storage and then create volumes rive configuration of all or part of a single drive Can be assigned a drive letter oes not provide any fault tolerance TF volumes can be extended FAT and FAT3 volumes cannot be extended onna arren 5-1

31 panned olume & ynamic isks Created from free disk space that is linked together from multiple disks You can extend a spanned volume onto a maximum of 3 disks A spanned volume cannot be mirrored and is not fault-tolerant onna arren 5-1

32 tripped olume on ynamic isks olume whose data is interleaved across two or more physical disks. The data on this type of volume is allocated alternately and evenly to each of the physical disks. A striped volume cannot be mirrored or extended and is not fault-tolerant. triping is also known as A-5 onna arren 5-1

33 Basic versus ynamic torage onna arren 5-1

34 ynamic isk Mirrored olume onna arren 5-1

35 ynamic isk tripped olume onna arren 5-1

36 ynamic isk panned olume onna arren 5-1

37 File erver esource Manager stablish disk quotas that limit the amount of storage space allotted to each user Prevent users from storing specific types of files on server drives Create templates that simplify the process of applying quotas and restrictions Automatically send messages to users and/or administrators when quotas are exceeded or reaching their limit Generate reports providing details of users storage activities onna arren 5-1

38 isk Quotas Limits the disk space a user is permitted to use Quotas are based on file ownership hoever creates a file automatically becomes the owner The quota system tracks all of the files owned by each user and totals their sizes hen the total size of a user s files reaches the quota the system takes whatever action was specified by the administrator A hard quota prohibits users from consuming any disk space beyond the allotted amount A soft quota allows the user storage space beyond the allotted amount but sends an notification to the user and/or administrator onna arren 5-1

39 TF Available File ystems Preferred file system for indows 7 Partitions up to 4 TB ecurity (encryption and permissions) FAT (FAT16) Partitions up to 4 GB FAT3 Partitions up to 3 GB (indows 7 limitation) exfat (FAT64) ntended for large UB drives, not hard drives onna arren 5-1

40 Fault Tolerant isks Mirrored volume - Fault-tolerant volume consisting of two physical disks, one disk controller on which the data is copied exactly to the second disk uplexed volume - Fault-tolerant volume consisting of two physical disks, two disk controllers on which the data is written simultaneously to each disk onna arren 5-1

41 triped olume Made up of free space from multiple disks. Unlike a spanned volume, though, a striped volume uses A- striping to interleave the data across the disks mproves the read performance of the volume triped volumes are not fault-tolerant A striped volume can be created on a minimum of disks and a maximum of 3 disks onna arren 5-1

42 A-5 volume A fault-tolerant volume ata is interleaved across three or more disks Has additional information known as parity f one disk in a A-5 volume fails, the data contained on the failed disk can be rebuilt using the parity information stored on the disks in the rest of the volume. A A-5 volume can be created using a minimum of three disks and a maximum of 3 disks onna arren 5-1

43 Media Pools A media pool manages a collection of media of the same type such as daily backup tapes Free - Contains all media that have been detected by the system but not allocated to any application mport temporary storage for data until it is placed into a pool Unrecognized media the system doesn t recognize Application-specific from the same application onna arren 5-1

44 isk Management nap-n nitializing disks electing a partition style Converting basic disks to dynamic disks Creating partitions and volumes xtending, shrinking, and deleting volumes Formatting partitions and volumes Assigning and changing driver letters and paths xamining and managing disk quotas, folder sharing, and error checking onna arren 5-1

45 Using isk Tools isk Cleanup efragmenting disks Checking for disk errors onna arren 5-1

46 iskpart.exe onna arren 5-1

47 hares onna arren 5-1

48 hares A share is an object accessible across the network A shared resource has a hand under the icon to indicate that it is shared The server service must be running to share objects hared directories can be on FAT, TF, CF hares are accessed by mapping a drive to them onna arren 5-1

49 Creating hares hares can be created from windows explorer, my computer or the Management Console Administrators, Power Users and server operators can create shares You can view shared resources in the management console and from windows explorer Appending a $ at the end of a share name will hide it from browser requests onna arren 5-1

50 efault Hidden hares Admin$ - always points to the indows directory and is used for remote administration PC$ - used for inter process communication between windows systems PT$ - used for sharing printer information C$, $, etc. - used for root directories epl$ - used for import and export or replicated data etlogon used to process logons onna arren 5-1

51 Connecting to hares Map drive from My etwork places Use UC path at run command Use net use command et use /help will display the command options onna arren 5-1

52 eb haring Allows you share folders directly for use via HTTP requests coming from eb browsers You must be running nternet nformation ervices for this option to be available The results of web sharing can be flaky if you try to share a dfs root folder onna arren 5-1

53 File haring n most enterprise networks, the principle of least privilege should apply Users should have only the privileges they need to perform their required tasks and no more haring folders makes them accessible to network users. nce you have configured the disks on a file server, you must create shares for network users to be able to access those disks. onna arren 5-1

54 hared Folders nap-in onna arren 5-1

55 Permissions Permissions are privileges granted to specific system entities, such as users, groups, or computers, enabling them to perform a task or access a resource. hare permissions TF permissions egistry Permissions Active irectory permissions onna arren 5-1

56 hare Permissions By default, the veryone special identity receives the Allow ead share permission to any new shared folders you create onna arren 5-1

57 hare Permissions onna arren 5-1

58 haring ncrypted Files The owner of an encrypted file can add additional users orks with files only ne file at a time can be shared F is administered via the etails dialog box under Advanced Attributes for the encrypted file onna arren 5-1

59 istributed File ystem (F) onna arren 5-1

60 istributed File ystem (F) ncludes two technologies F amespaces F eplication Allows administrators to implify the process of locating files Control the traffic passing over A links Provide users at remote sites with local file server access Configure the network to survive a A link failure Create consistent backups onna arren 5-1

61 F amespace All versions of windows can hot dfs Create a single directory tree that contains shared folders located on various file servers, all over the network This directory tree is virtual t is a collection of references to the original folders, which users can browse as though it was an actual server share The actual shared folders are referred to as the targets of the virtual folders in the namespace The dfs role must be installed onna arren 5-1

62 F amespace All versions of the indows erver and indows erver operating systems can function as F namespace servers. The tandard dition and eb dition products can host only a single F namespace. The nterprise dition and atacenter dition versions can host multiple namespaces. onna arren 5-1

63 F Management Console onna arren 5-1

64 Creating F amespace onna arren 5-1

65 Creating F amespace onna arren 5-1

66 F eplication F eplication is a multiple master replication engine that can create and maintain copies of shared folders on different servers throughout an enterprise network Provides: ata distribution Load balancing ata Collection onna arren 5-1

67 Multiple F eplication eplication is bi-directional n its simplest form, a folder with two targets requires a replication group with two members - the servers hosting the targets At regular intervals, the F eplication engine on the namespace server triggers replication, using the C protocol A replication group can have up to 56 members, with 56 replicated folders, and each server can be a member of up to 56 replication groups, with as many as 56 connections (1 incoming and 1 outgoing) A member server can support up to one terabyte of replicated files, with up to eight million replicated files per volume onna arren 5-1

68 F eplication onna arren 5-1

69 KG TH TUAL HA K (H) onna arren 5-1

70 irtual Hard isk (H) Contains the entire contents of a hard disk in a single, portable file Can be used to move entire virtual machines (Ms) from one host computer to another H functions exactly like a hard disk drive does in a physical machine Can be created with isk Management tool or iskpart.exe onna arren 5-1

71 ther Uses for Hs Moving files between a H and the host file system Backup and recovery Antivirus and security mage management and patching onna arren 5-1

72 ative Boot upported by indows 7 nterprise, Ultimate, and all versions of indows erver nables you to create and modify Hs Boot indows 7 from a H without having to run a virtual machine manager can add to boot menu using BCedit Advantages ffline image updates mage format mage deployment testing orkstation configuration management onna arren 5-1

73 Attaching and etaching Hs Creating a new H automatically mounts it into the indows 7 file system Mounting of a H is not persistent ach time you restart indows 7, you must attach the H using the isk Management snap-in before you can access its contents onna arren 5-1

74 Printing onna arren 5-1

75 indows Terminology Print device actual hardware that prints hard copies Printer software run on the print server Printer port logical port to send jobs to the print device Print server machine that has the printer software Printer driver software that controls the print device Print job document to be printed onna arren 5-1

76 Print ervices ole hen you install the Print ervices role using erver Manager s Add oles izard, you can select from the following role services: Print erver LP ervice nternet Printing onna arren 5-1

77 Printing Methods Local print device attached to the and printer software and driver installed on the local machine etwork print device attached to a network server, a hardware print server or directly connected to the network nternet print device accessed through a browser interface using UL and the PP Protocol. The printer software normally running on the web server onna arren 5-1

78 Managing Printers User ights must be a Power User or an Administrator to add printers equirements - Printer server and correct drivers for the operating system haring can be shared Permissions both TF and shared permissions can be used to control access elegation can delegate control to specific users Jobs can manage both print jobs and job priorities onna arren 5-1

79 Printing Methods Local print device attached to the and printer software and driver installed on the local machine etwork print device attached to a network server, a hardware print server or directly connected to the network nternet print device accessed through a browser interface using UL and the PP Protocol. The printer software normally running on the web server onna arren 5-1

80 Client G (Graphical evice nterface) Print river pooler Print ervices outer Print erver Printer Print Monitor Print Processor pooler Print evice onna arren 5-1

81 How nternet Printing orks nternet nformation ervices () must be installed and running in indows erver Client must connect to the indows erver using a eb browser nternet Printing Protocol (PP) ncapsulates the remote procedure call and print process information and is transported in HTTP onna arren 5-1

82 nstalling the Print ervices ole Use the Print Management tool to: Manage shared printers Track printing events through a log you can view using the vent iewer ervices within role Print erver nternet Printing LP ervice onna arren 5-1

83 etwork haring and iscovery Before you can share a printer on a indows erver computer, you must enable the appropriate settings in the etwork and haring Center, just as you have to do to share files and folders To share printers, the following etwork haring and iscovery settings must be turned on: etwork iscovery Printer haring onna arren 5-1

84 haring tab haring Printers nable or disable a printer for sharing pecify name of the share List in the directory option To publish the printer through Active irectory ender print jobs on client computers option Print job is first prepared by software on the client and submitted to the spooler on the client Additional rivers button onna arren 5-1

85 haring and Adding rivers Can add additional drivers for older operating systems ight-click the printer and select haring onna arren 5-1

86 tandard Printer Permissions By default, all printers assign the Allow Print permission to the veryone group Allow Manage ocuments permission can manage any users documents currently waiting in a print queue Pausing esuming estarting cancelling The print queue enables you to view the jobs that are currently waiting to be printed onna arren 5-1

87 Ports tab Port pecifications pecify which server port is used for the printer ptions to set up bidirectional printing and printer pooling Bidirectional printing Used with printers that have bidirectional capability Printer pooling Configuring two or more identical printers connected to one print server The Add Port button enables you to add a new port onna arren 5-1

88 Printer ecurity hared printer can be set up to use security features hare permissions, auditing, ownership efault permissions veryone group Print Creator wner Manage documents Administrator account Print, Manage printers, and Manage documents Administrators, erver perators, Print perators groups Print, Manage printers, and Manage documents Advanced button on the ecurity tab pecial permissions - Fine-tune shared printer onna arren 5-1

89 onlocal Printer /nternet Printer Connect to a network printer by using the Add Printer izard: pen the Printers window ouble-click Add Printer Click Add a network, wireless or Bluetooth printer elect a printer from the list of printers found by the Add Printer izard Follow the instructions to complete the installation onna arren 5-1

90 Managing Print Jobs Users with Print permissions can: end print jobs to the printer Pause, resume, and restart their own print jobs Cancel their own print jobs Print perators, erver perators, and other groups having Manage documents permissions can: end print jobs to the printer Pause, resume, and restart any user s print jobs Cancel any user s print jobs onna arren 5-1

91 Printer etups Priority create multiple software printers and set priority as desired and assign specific individuals or groups to the printers cheduling create multiple printers set to a specific device and the schedule each printer Pooling assign single printer to multiple print devices onna arren 5-1

92 Printer Formats nhanced Metafile (MF) the default format used by the indows, indows XP, and indows erver print subsystems. The printer driver converts the application data into an MF file, and the printer sends it to the print server, which stores it in the spooler The spooler then uses the printer driver on the print server to render the job into the final PCL format understood by the print device XML Paper pecification (XP) A new, platformindependent document format included with indows erver and indows ista Print job files use a single XP format for their entire journey to the print device onna arren 5-1

93 Print Management Tool Also called the Print Management Console or PMC Centralizes shared printer control in one place nables printer administrators and operators to manage the print functions of some or all of the shared printers on a network onna arren 5-1

94 eb Printer Management onna arren 5-1

95 Printer Permissions onna arren 5-1

96 Troubleshooting Printers Problem o one can print Check the hardware and make sure everything is plugged in, turned on and there is paper in the tray. Problem - nly one user can t print - Try to print using an account with Administrator privileges Try to print from another application on the same machine or from another machine with the same application einstall the logical printer on the client Check the available free space on the drive hosting the spooler file onna arren 5-1

97 Common Printer Problems onna arren 5-1

98 Common Printer Problems onna arren 5-1

99 Printer ecurity hared printer can be set up to use security features hare permissions, auditing, ownership efault permissions veryone group Print Creator wner Manage documents Administrator account Print, Manage printers, and Manage documents Administrators, erver perators, Print perators groups Print, Manage printers, and Manage documents Advanced button on the ecurity tab pecial permissions - Fine-tune shared printer onna arren 5-1

100 M onna arren 5-1

101 Fax erver Add the Fax erver role Add the esktop xperience feature hare the fax printer Configure the fax device Configure incoming fax routing esignate fax users iew and configure fax devices, such as modems pecify routing policies for inbound faxes pecify rules for outbound faxes Manage fax users Configure fax logging and archiving onna arren 5-1

102 ummary indows provides a robust set of tools to Manage hard disks Create virtual disks Use different file systems Create a distributed file system (dfs) Allow printing from local, network and internet printers Allow users to send and receive faxes Troubleshooting printer problems may be simple or complex To audit a file or printer, auditing object must be turned on onna arren 5-1

103 Lab 5 nstalling Files ervices ole nabling indows erver File haring Creating Hidden hares Configuring hare Permissions Taking and Transferring File and Folder wnership File and Folder Permission nheritance nabling File and Folder Auditing isk Quotas Configuring Printers onna arren 5-1