Jason Yoder, MCT

Once file redirection is configured and working, users will still be able to get to their My Documents folders as if it were still on their local computer. If you click Start and right mouse click My Documents à Properties , you will see that the My Documents is now located on remote storage. If users browse C:\Documents and Settings\ username they will no longer see a My Documents folder. File redirect is a useful way to ensure that your organizations data is always on a redundant, backed up storage device. Also consider implementing file storage quotas to ensure that a few users do not consume all of your storage space. Folder Redirection: http://technet.microsoft.com/en-us/library/cc785925.aspx Storage Quota: http://technet.microsoft.com/en-us/library/cc755917.aspx

If you would like your users to be able to add and remove users from the groups they manage, then yes. You will need to install the ADMINPAK.MSI from the server c:\Windows\System32. You will also need to enable the management in the group properties themselves. On the Managed By tab, you need to click Change and then select the user. You also need to check Manager can update membership list . It would also be a good practice to create a custom task pad that will allow them to only add and remove user accounts from there group. This ability should only be for users in the OU that contains the group.

Windows PE is a pre-execution environment for the Windows platform. Anybody who has used the Vista/2008 recovery option has used Windows PE. The instructions below will guide you through creating a windows PE disk. It is command line driven. In class, we talked about using Windows PE and Imagex.exe to reimage your clients. This will allow you to restore a client to the same state that it was in prior to release to the user. When you create you WinPE image, do not forget to add the Imagex.exe command from the Windows Automated Installation Kit (WAIK) . Imagex is what allows you to capture and apply images. The process for rebuilding the client is: 1) Offload the client data using User State Migration Tool (USMT) to an external drive. 2) Boot the client in Windows PE. 3) Format the hard drive. 4) Apply the image (imagex /apply ImageSource ImageNumber Imagedetination ) a. Ex imagex /apply e:\ClientImages\Client013.wim 1 c: 5) ...

The adminpak for Windows Server 2008 (RSAT) will not run on Windows XP. In our test environment, we configured: Windows Sever 2008 R2 Domain controller Windows Server 2003 member server Windows XP SP2 We copied the adminpak.msi file from the 2003 server and installed it on the XP client. We were able to create an OU, Group, and User account on the 2008 domain controller without any issues. The RSAT program is not part of server 2008 like the adminpak was for 2003. You will need to download it from Microsoft. Microsoft Remote Server Administration Tools for Windows Vista http://www.microsoft.com/downloads/details.aspx?FamilyID=9ff6e897-23ce-4a36-b7fc-d52065de9960&DisplayLang=en

Exam 70-290 is not necessarily an IIS exam. Now, I can’t teach the questions that are on the exam, but I can direct you to additional resources. TechRepublic has an article about what to expect on the exam. The first link below is to that article and the second is what the article suggest you read about IIS 6.0 before you take the exam. http://articles.techrepublic.com.com/5100-10878_11-5055957.html http://www.microsoft.com/windowsserver2003/evaluation/overview/technologies/iis.mspx

This topic seems to be a question that many are asking on the internet, but not getting the answers that they want. Before we dive into this, I would consider using a third party filtering service for blocking web sites. One of the purposes of Group Policy is to make life easier for Network Administrators. By taking on the responsibility of choosing what are appropriate websites, you are opening up yourself for a lot of work. By using a filtering service, you are paying someone else to do the grunt work. Also, many will filter your email. Should you lose your email server, these services will cache your email and deliver it once your server is back online. The following article tells you how to use group policy to control website access. This is not necessarily for server 2008, but it gives you guidance. http://www.chrisse.se/MAQB.asp?ID=17 Others are utilizing ISA server. I have even found some that are using a HOST file that points websites that they want to bloc...

Yes you can. In the Default Domain Policy simply brose to this path: Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Encrypting File System . Right click the Encrypting File System and select Properties . From here you can disable EFS for your users. Below is a more in-depth article. http://www.windowsecurity.com/articles/Controlling-Encrypting-File-System-EFS-Group-Policy.html

Uptime allows you to quickly estimate the system uptime for your server. It is a stand alone application that was developed during the Windows NT days. Even though it is a bit dated, in these times of lean budgets you take every free tool you can get. It also is a command line application. In any case, it allows you to demonstrate your ability to meet Service Level Agreements or corporate uptime requirements. http://support.microsoft.com/kb/232243

To ensure that your clients are in sync with your domain controllers, you can call this command from a logon script. Net time // servername /set /yes Authentication requires that the system clocks of your clients be within 5 minutes of the system time on your domain controllers. If the deviation occurs on a server, then you may want to consider running this in a batch file as a scheduled task every day. Remember to use an account with the right level of user rights to run this command. http://support.microsoft.com/kb/314090

User rights give the user (or group) the ability to perform certain activities on the computer (or other computers). The difference between User Rights and Permissions is this: User rights: · Attached to the user account. · Allow the user to perform actions on the computer (or the network) Permissions: · Determine the level of access a user has to an object in Active Director. · Attached to the object. In Sever 2003, there are 39 different user rights. To get a detailed explanation of each user right and the default members: · Open Local Security Policy (or Default Domain Controller Security Settings) · Expand Local Policy · Right Click User Rights and select Help . · A list of all user rights is listed in the right hand column.

The link below will allow you to download the adminpak for Server 2003. You can also get it from your servers at %windir%\system32\adminpak.msi. This does not work for 64 bit systems. Microsoft recommends that you utilize remote desktop for administration for a 64 bit system. http://www.microsoft.com/downloads/details.aspx?familyid=C16AE515-C8F4-47EF-A1E4-A8DCBACFF8E3&displaylang=en

If you utilize the default EFS template, the expiration time is 3 years. Reference: http://msmvpa.com/blogs/alunj/archive/2007/03/24/efs-in-a-domain-expirres-after-three-years.aspx Now, how do you fix it? http://blogs.technet.com/askds/archive/2008/01/07/replacing-an-expired-dra-certificate.aspx Additional info: While going through the certificate templates in MOC 2273 virtual machine, I discovered that the DRA template is valid for 5 years. So the debate continues as to how long these certificates are valid. I welcome any additional information on this one. The important part of this post is the link on how to fix it.

The Check Disk tool is the only tool provided for examining the health of your hard disks in Windows. The only indication that you would get that there is a problem is in Disk Management. The drive with an error will be indicated by an error icon on the drive. At this point, it is most likely that the drive has already gone into failure.