MICROSOFT WINDOWS 2000服务器版分布式 (2009 年度畅销榜NO.44468 )

“Microsoft Windows 2000 Server Resource Kit”丛书共由7卷和一张光盘组成，光盘中包括各种工具、附加的参考资料和本丛书的电子版。当需要补充新的信息时，我们将通过Web发布，读者可通过Web得到有关的更新内容和信息。\r\n 《Windows 2000 Server Distributed System Guide》分别从概念、理论、功能和实用的角度，对构成\r\nWindows 2000分布式系统的各种技术进行了详细的介绍和分析。本书主要围绕以下四个方面进行了深入的技术分析：Active Directory、分布式系统的安全、企业技术和桌面配置管理

IntroduCtion xIv\r\nDocument Conventions xlv\r\nResource Kit ComPact Disc xlvi\r\nResource Kit ComPact Disc xlvi\r\nResource Kit Support Policy xlvii\r\n\r\nPart 1 Active Directory\r\n\r\nChaptr 1 Active Directory Logical Structure \r\n\r\nActive Directory Domain Hierarchy \r\nActive Directory Domain Names \r\nDNS Nandng Conventions \r\nNetBIOS Domain Names \r\nActive Directory and DNS \r\nDNS Hierarchy and Active Directory \r\nDNS and the Internet \r\nActive Directory and the Internet \r\nDNS Host Names and Windows 2000 ComPuter Names \r\nDNS Name Servers and Zones \r\nActive-Directory--Integrated DNS \r\nSupport for Dynandc Updates \r\nTree and Forest Structure \r\nTree: Implementation of a Domain Hierarchy and DNS Namespace \r\nForest: ImPlementation of All Trees \r\nForest Root Domain \r\nTrust Relationships \r\nTransitive and Nontransitive Trust \r\nDirection of Trust \r\nAuthentication Protocols \r\nTrust Path \r\nProcessing Authentication ReferraIs \r\nTypes of Trust Relationships \r\nTrust Relationships Between Windows 2000 and Windows NT 4 .0\r\nDomains \r\nMixed-Environment Scenario \r\nActive Directory Objects \r\nObject NaIning \r\nDistinguished Name \r\nRelative Distinguished Name \r\nNandng Attributes \r\nObject Identity and Uniqueness \r\nActive Directory Name Formats \r\nDNS-to-LDAP Distinguished Name Mapping \r\nLogon Names l\r\nDomain Controllers \r\nMultimaster Operations \r\nSingle-Master Operations \r\nGlobal Catalog Servers \r\nGlobal Catalog Attributes \r\nDesignating a Global Catalog \r\nGlobal Catalog and Domain Logon Support \r\nSearch Requests and the Global Catalog \r\nOrganizational Units \r\nAdndnistrative Hierarchy \r\nGroup Policy \r\nDelegation of Control \r\nObject Security \r\nAccess Control \r\nDelegation of Adndnistration \r\nInheritance \r\nAdditional Resources \r\n\r\nChaPter 2 Active Directory Data Storage \r\n\r\nActive Directory Architecture \r\nActive Directory and Windows 2000 Architecture \r\nSecurity Subsystem Architecture \r\nDirectory Service Architecture \r\nDirectory System Agent \r\nDatabase Layer \r\nPrOtocols and Interfaces to Active DirectOry \r\nLDAP \r\nADSI \r\nActive Directory Replication \r\nMAPI \r\nSAN \r\nData Storage \r\nData Characteristics \r\nStorage Lindts \r\nObject Size vs. Maximum Database Record Size \r\nGarbage Collection \r\nDatabase Defragmentation \r\nGrowth Estimates for Active Directory Users and Organizational Units\r\nDirectory Database Sizing Tests \r\nOrganizational Units \r\nAdding Attributes \r\nWindows 2000 SAM Storage \r\nMixed-Mode Storage Considerations \r\nMixed-Mode Storage Considerations \r\nSAM Smicture \r\nSAM Accounts on a Windows 2000 Server That Becomes a Dc\r\nController \r\nMigration of Windows NT .0 SAM Accounts to Active Direct\r\nObjects \r\nData Model \r\nContainer Objects and Leaf Objects \r\nDirectory Tree \r\nRootDSE \r\nExtended LDAP Controls \r\nAttribute Range OPtion \r\nDirectory Partitions \r\nDirectory Prthon Subtrees \r\nForest Root Domain \r\nConfiguration Directory Partition \r\nSchema Directory Partition \r\nDomain Directory Partitions \r\nDirectory Data Store \r\nLinked Attributes \r\nSearching on Back Links \r\nGroup Members from Extemal Domains \r\nPhantom Records \r\nDatabase Write Operations \r\nLog-based Recovery \r\nAttribute Indexing \r\nObject-Based Security \r\nSecurity Identifiers \r\nSecurity Descriptors \r\nDefault Object Security \r\nInstalling Active Directory \r\nActive Directory Configurations \r\nInstallation Prerequisites and Verifications \r\nVerify Unique Names \r\nVerify That TCPlIP Is Installed \r\nVerify That DNS Client Is Configured \r\nGet and Validate the DNS Domain Name \r\nGet and Validate the NetBIOS Name \r\nEnter Adndnistrative Password \r\nGet Credentials for the User \r\nGet and Verify File Paths \r\nConfigure Site \r\nDirectory Service Configuration \r\nConfiguring Directory Patitions \r\nSetting Services to Start Automatically \r\nSetting Security \r\nCreating a New Domain \r\nDNS Installation and Configuration \r\nOperations That Occur Following Installation \r\nRemoving Active Directory \r\nAdndnistrative Credentials \r\nRemoval from an Additional Domain Controller or the Last Domain\r\nController \r\nRemoval of an Additional Domain Controller \r\nRemoval of the Last Domain Controller \r\nUnattended Setup for Installation or Removal of Active Directory \r\n\r\nChapter 5 ConduCting Your Windows 2000 pilot\r\n\r\nOverview of Conducting a Pilot \r\nPilot Process \r\nStarting with Information Technology \r\nPrerequisites for a Production PiIot \r\nCreating a Pilot Plan \r\nScope and Objectives \r\npilot Scope \r\nPilot Objectives \r\nPilot Users and Sites \r\nPiIot Training Plan \r\nPiIot Support PIan \r\nCommunication \r\nPilot RoIlback PIan \r\nScheduIe \r\nPreparing for the Pilot \r\nPreparing Pilot Sites \r\nPreparing Pilot Users \r\nEstablishing Eary Conununication \r\nKeeping Participants Informed \r\nDeveIoping the Rollout Process \r\nDeploying the Pilot \r\nEvaluating the Pilot\r\nMonitoring the Pilot \r\nObtaining Feedback \r\nPlanning Task List fOr Conducting a Pilot \r\n\r\nPart 2 Network lnfrastructure Prerequisites \r\n\r\nChapter 3 Preparing Your NetWork Infrastructure fOr Windows 2000 \r\n\r\nDocumenting Your Current Environment \r\nHardware and Software Inventory \r\nNetwork Infrastructure \r\nPhysicaI Network Diagram \r\nLogicaI Network Diagram \r\nNetwork Configuration \r\nFile, runt, and Web Servers \r\nLine-of Business Applications \r\nDirectory Services forhitecture \r\nDomain Adndnistration Model\r\nSecurity \r\nPreparing Your Network forhitecture \r\nPrelindnary Steps \r\nStabilizing Your Existing Network \r\nReviewing Your Network Protocols\r\nPreparing Your Physical Infrastructure \r\nPreparing Your Servers \r\nPreparing Your Domain Controllers \r\nPreparing Your Member Servers \r\nPreparing Your Security InfrastrUcture \r\nPreparing Your Clients \r\nWindows 2000 Professional Upgrade Considerations \r\nPreparing to Operate with Other Systems \r\nNetwork InfrastrUcture Preparation Task List \r\n\r\nChapter 7 Dtermining NtWork Conne0tivity Strtegies \r\n\r\nNetwork Connectivity Overview \r\nSites \r\nRemote Connectivity Methods \r\nIntema Local Area Network Connectivity Within Sites \r\nExtemal Connectivity Within an Organization \r\nDesigning the Dendlitarized Zone \r\nSite Connectivity for an Organization \r\nRemote Client Connectivity \r\nWindows 2000 TCPlIP \r\nNew Features in the Windows 2000 TCPttP Suite \r\nAutomatic Private IP Addressing Configuration \r\nLarge Window Support \r\nSelective Acknowledgment \r\nImProved Estimation of Round Trip Time \r\nPlanning Considerations for Microsoft TCPlIP \r\nIP Address Classes \r\nSubnet Masks and Custom Subnetting \r\nTCP/IP and Windows Intemet Name Service \r\nWINS Desigri Considerations \r\nRouting and Remote Access \r\nNew Features of Windows 2000 Routing and Remote Access\r\nService \r\nRemote Access PoIicy \r\nRemote Access Design Considerations \r\nVPN Security ()\r\nBenefits of Virtual Private Networking\r\nPoint-to-Point Tunneling Protocol VPNs\r\nLTP over IPSec VPNs \r\nLTP DePOyment Considerations \r\nLTP ExampIes \r\nVPN Security with IPSec \r\nInternet Authentication Service and Centralized Management \r\nMultihondng \r\nIP Routing lnfrastructure \r\nStatic Routed Networks \r\nRIP-for-IP Network Design \r\nOSPF Network Design \r\nIPX Routing Structure \r\nIPX Network Design \r\nAppIeTalk Routing Structure \r\nMulticast Support \r\nNetwork Address Translation \r\nWindows 2000 DHCP \r\nBenefits of Using DHCP \r\nNew Features of Windows 2000 DHCP \r\nEnhanced Server Reporting \r\nAdditional Scope Support \r\nDHCP and DNS Integration \r\nUnauthorized DHCP Server Detection \r\nDynandc Support for Bootstrap Protocol Clients \r\nRead-OnIy Console Access to the DHCP Manager \r\nDesigning DHCP Into Your Network \r\nNetwork Infrastructure Size \r\nWindows 2000 Asynchronous Transfer Mode \r\nBenefits of Using Windows 2000 ATM \r\nFeatures of Windows 2000 ATM \r\nATM User Network Interface Call Manager \r\nUpdated NDIS and ATM Hardware Support \r\nATM LAN Emulation \r\nIPlATM \r\nMulticast and Address Resolution Service \r\nppWhm \r\nATM Design Considerations \r\nQuality of Service \r\nPlanning Task List for Networking Strategies \r\n\r\nChaPter 8 Uslng Systms Management Server to Analyze Your Ntwork InfraStructure \r\n\r\nAnalyzing Your Network Infrastructure \r\nUsing Systems Management Server \r\nHow Systems Management Server Can Expedite Windows 2000\r\nDeployment \r\nSystems Management Server l. Differences \r\nCollecting Inventory \r\nAssessing the Current State of Your Hardware \r\nHardware Capacity \r\nHardware ComPatibility \r\nUsing Systems Management Server Hardware Inventory \r\nAssessing the Current State of Your Software \r\nUsing Inventory to Prepare Your Network Infrastructure \r\nReporting the Collected Data \r\nSamPle Systems Management Server Report of Windows 2000\r\nReadiness \r\nUsing the Product Compliance Subsystem \r\nAnalyzing and Using the Collected Data \r\nMonitoring Your Network \r\nEnsuring Application ComPatibility \r\nNetwork Analysis Planning Task List \r\nAdditional Resources \r\n\r\nPart 3 Active Diedory Inftastructure \r\n\r\nChaPter 9 Designing the Active Directory Structure \r\n\r\nOverview of Active Directory \r\nPriN Active Directory Features \r\nProviding a Foundation for New Technologies \r\nPlanning for Active Directory \r\nGeneral Design Principles \r\nComPosing Your Active Directory StrUcture Plans \r\nCreating a Forest Plan \r\nForest Planning PrOcess \r\nDeteedning the Number of Forests for Your Network \r\nCreating a Single Forest Environment \r\nCreating a Multiple-Forest Environment \r\nIncremental Costs for an Additional Forest \r\nCreating a Forest Change Control Policy \r\nSchema Change Policy \r\nConfiguration Change Policy \r\nChanging the Forest Plan After Deployment \r\nCreating a Domain Plan \r\nDomain Planning Process \r\nDetendning the Number of Domains in Each Forest \r\nHow Creating Domains Has Changed \r\nWhen to Create More Than One Domain \r\nIncremental Costs for an Additional Domain \r\nChoosing a FOrest Root Domain \r\nAssigning DNS Names to Create a Domain Hierarchy \r\nAnanging Domains into Trees \r\nDomain Nandng Recommendations \r\nDomain Names and ComPuter Names \r\nPlanning DNS Server Deployment \r\nAuthority and Delegation in DNS \r\nDomain Controller Locator System \r\nDNS Server Requirements \r\nLocate Authoritative Servers \r\nOptindzing Authentication with Shortcut Trust Relationships \r\nPlanning Domain Upgrade \r\nDetendning Supported Upgrade Paths \r\nExandning the Existing Domain Structure \r\nDeveloping a Recovery Plan \r\nManaging the Transition to the Windows 2000 Forest \r\nConsidering the Upgrade of Resource Domains \r\nDetendning a Strategy for Upgrading Domain ControIlers \r\nWindows 2000 Domain Modes \r\nUpgrading the Windows NT PDC\r\nPDC EmuIatiQn in Windows 2000 \r\nAccess Control Components \r\nDetendning the Order for Upgrading Domains \r\nGuidelines for Upgrading Account Domains \r\nGuidelines for Upgrading Resource Domains \r\nChild Domains and Trusts \r\nDetendning When to Move to Native Mode \r\nReasons for Continuing in Mixed Mode \r\nReasons for Moving to Native Mode \r\nExandning Windows 2000 Groups \r\nLocal Groups \r\nDomain Local Groups \r\nGlobal Groups \r\nUniversal Groups \r\nNesting Groups \r\nGroup Membership Expansion \r\nEffects of Upgrade on Groups \r\nUsing NetBIOS with Windows 2000 \r\nTransitioning to File Replication Service \r\nLAN Manager Replication Service Process \r\nThe FRS Process \r\nMaintaining LAN Manager Replication Service in a Mixed\r\nEnvironment \r\nUsing Routing and Remote Access Service in a Mixed Environment \r\nPlanning Domain Resmicture \r\nDetendning the Reasons to Restructure Domains \r\nDetendning When to Restructure Domains \r\nExaInining the ImPlications of Resimcturing Domains \r\nMoving Security Principals \r\nMoving Users and Global Groups \r\nMoving Profiles and SIDhistOry \r\nMoving ComPuters \r\nMoving Member Servers \r\nEstablishing Trusts \r\nCloning Security Principals \r\nDomain RestrUcture Scenarios \r\nScenario #2: Migrating Users Incrementally frOm Windows NT to Windows 2000 \r\nScenario #: Consolidating a Resource Domain into an OU \r\nDomain Migration Tools \r\nClonePrincipal \r\nNetdom \r\nMigration Planning Task List \r\n\r\nChaPter 11 Plannlng DiStrlbuted Securlty \r\n\r\nDeveloping a Network Security Plan \r\nSecurity Risks \r\nSecurity Concepts \r\nSecurity Model \r\nDomain Model \r\nTrust Management \r\nSecurity Policy \r\nSecurity Configuration and Analysis \r\nSynuntric Key Encryption \r\nPUblic Key Encryption \r\nAuthentication \r\nSingle Sign-On \r\nTwo-Factor Authentication \r\nAccess Control \r\nData Integrity \r\nData Confidentiality \r\nNonrepudiation \r\nCode Authentication \r\nAndit Logs \r\nPhysical Security \r\nUser Education \r\nDistributed Security Strategies \r\nAuthenticating All User Access \r\nPlanning Considerations \r\nKerberos Authentication and Trust \r\nHow Kerberos Authentication Works \r\nImPlementing Kerberos Authentication \r\nConsiderations about Kerberos Security \r\nSmart Card Logon \r\nHow Smart Cards Work \r\nPrerequisites for Implementing Smart Cards \r\nHow to Implement Smart Cards \r\nConsiderations about Smart Cards \r\nRemote Access \r\nHow Remote Access Works \r\nRemote Access Policies \r\nHow to Enable Remote Access \r\nConsiderations About Remote Access \r\nApplying Access Control \r\nAccess Control Lists \r\nHow ACLs Work \r\nPrerequisites for ImPlementing ACLs \r\nHow to ImPlement ACLs \r\nSecurity Groups \r\nHow Security Groups Work \r\nSecurity Group Types \r\nDefault Pendssions of Security Groups\r\nPrerequisites for Implementing Security Groups\r\nlmPlementing Security Groups\r\nConsiderations About Security Groups \r\nEstablishing Trust Relationships \r\nDomain Trust \r\nHow Trust Relationships Work \r\nPrerequisites for Implementing Trusts \r\nPrerequisites for Implementing Trusts \r\nHow to ImPlement Trusts \r\nConsiderations About Trusts \r\nEnabling Data Protection \r\nEncrypting File System \r\nHow EFS Works \r\nPrerequisites for ImPlementing EFS\r\nHow to Implement EFS \r\nConsiderations About EFS \r\nIP Security \r\nHow IPSec Works \r\nPrerequisites for ImPlementing IPSec \r\nHow to Implement IPSec \r\nConsiderations for IPSec \r\nSetting UnifOrm Security Policies \r\nGroup POlicy \r\nHow Group Policy Works \r\nPrerequisites for ImPlementing Group Policy \r\nHow to ImPlement Group Policy \r\nConsiderations About Group Policy \r\nGroup Policy Security Settings \r\nAccount Policies \r\nLocal ComPuter Policies \r\nEvent Log Policies \r\nRestricted Groups Policies \r\nSystems Services Policies \r\nRegistry Policies \r\nFile System Policies \r\nPUblic Key Policies \r\nIP Security Policies on Active Directory \r\nSecurity Templates \r\nHow Security TemPlates Work \r\nPrerequisites fOr Implementing Security TemPlates \r\nHow to Implement Security TemPlates \r\nConsiderations About Security Templates \r\nDeploying Secure Applications \r\nAuthenticode and Software Signing \r\nHow Authenticode Works \r\nImPlementing Authenticode Screening \r\nConsiderations fOr Authenticode and Software Signing \r\nSecure E-mail \r\nHow Secure E-mail Works \r\nConsiderations for Secure E-mail \r\nSecure Web Sites and Commnications \r\nConsiderations fOr Secure Web Sites \r\nManaging Adndnistrahon \r\nDelegation \r\nSecurity Groups, Group Policy, and Access Control Lists \r\nBuilt-in Security Groups \r\nDelegation of Control Wizard \r\nDeegate Adndnistration Wizard \r\nDelegating ContrOl of Group Policy Objects \r\nAuditing \r\nHow Auditing Works \r\nPrerequisites fOr ImPlementing the Audit Funchon \r\nHow to ImPlement the Audit Function \r\nConsiderations About Auditing \r\nPlanning Task List for Distributed Security \r\nChapter 12 Planning Your PubIic Key lnfraStruoture \r\nOverview of Public Key InfrastrUcture \r\nHow PKI Works \r\nPrerequisites for ImPlementing PKI \r\nHow to ImPlement PKI \r\nCreating a Local Certification Authority \r\nManaging Your Cenificates \r\nUsing the Certificate Services Web Pages \r\nSetting PUblic Key Policies in Group Policy Objects \r\nBuilding Your PUblic Key InfrastrUcture \r\nDesigning Your PUblic Key Infrasmicture \r\nIdentify Your Certificate Requirements \r\nBasic Security Requirements for Certificates \r\nDetendning Which Certificate Types to Issue \r\nDefine Certificate Policies and Certification Authority Practices \r\nCertificate Policies \r\nCertificate Practices Statements (CPS) \r\nDefine Certification Authority Trust Strategies \r\nBenefits of Certification Authority Trust Hierarchies \r\nBenefits of Certiflcate Trust Lists \r\nAdditional Considerations for Certification Authority Trust\r\nStratgies \r\nDefine Security Requirements for Certification Authorities \r\nDefine Certificate Life Cycles \r\nDefine Certificate Enrollment and Renewal Processes \r\nDefine Certificate Revocation Policies \r\nPolicies for Revoking Certificates \r\nPOlicies for Certificate Revocation Lists \r\nDefine Maintenance Strategies \r\nDeveloping Recovery Plans \r\nFailed Certification Authority \r\nComProndsed Certification Authority \r\nDeveloping Optional Custom Applications \r\nPerfondng Resource Planning \r\nDeploying Your PUblic Key Infrastructure \r\nSchedule Production Rollout in Stages \r\nInstall Certification Authorities \r\nInstall and Configure Supporting Systems and Applications \r\nConfigure Certificates to Be Issued \r\nExamPles of Configurations \r\nSecurity Access Control Lists for Certificate TemPlates \r\nConfigure Certificate Revocation List Publication \r\nConfigure PUblic Key Group Policy \r\nConfigure Certificate Enrollment and Renewal \r\nStart Issuing Certificates \r\nPUblic Key Infrastructure Panning Task List \r\n\r\nPart 4 Windows 2000 Upgrade and lnstalIation \r\n\r\nChaPter13 Automatfng Server Instellation and Upgrade \r\n\r\nDetendning Whether to Upgrade or Clean Install \r\nResolving Critical Planning Issues \r\nChoosing Your Installation Method \r\nPreparing for Installation \r\nCreating Distribution Folders \r\nSthecturing the Distribution Folder \r\nInstalling Mass Storage Devices \r\nInstalling Hardware Abstraction Layers \r\nInstalling Plug and Play Devices \r\nConverting File Name Size Using $$Rename.txt \r\nReviewing the Answer File \r\nCreating the Answer File \r\nUsing the Answer File to Set Passwords \r\nExtending Hard Disk Partitions \r\nUsing the Answer File with the Active Directory Installation Wizard\r\nReviewing the Windows 2000 Setup Conunands \r\nWinnt.exe \r\nWinnt.exe \r\nAutomating the Installation of Server Applications \r\nUsing Cmdlines.txt \r\nUsing the [GuiRunOnce] Section of the Answer File \r\nUsing Applicahon Installation Prograrns \r\nUsing a Batch File to Control How Multiple Applications Axe\r\nInstalled \r\nAutomating the Installation of Windows 2000 Server \r\nNew Options for Automated Installation \r\nAutomated Installation Methods \r\nUsing Syspart on ComPuters with DissiInilar Hardware \r\nUsing Sysprep to Duplicate Disks \r\nOverview of the Sysprep Process \r\nSysprep Files \r\nRunning Sysprep Manually \r\nRunning Sysprep Automatically After Setup ComPletes \r\nUsing Sysprep to Extend Disk Partitions \r\nUsing Systems Management Server \r\nUsing a Bootable ComPact Disc \r\nInstallation Configuration ExamPles \r\nExisting Servers \r\nExample l: Windows NT Server with Windows WomPatble Ser\r\nApplications \r\nExamPle : ComPuters Running Windows NT Server . or Earier, or\r\nServers Running Non-Microsoft Operating Systems \r\nNew Servers \r\nInstallation Planning Task List \r\n\r\nChapter 14 Using Systems Management Srver to DepIoy Windows2000 \r\n\r\nUsing Systems Management Server to Distribute Software \r\nSoftware Distribution with Systems Management Server 2.0\r\nSMS Packages \r\nDistribuhon \r\nAdvertising \r\nSMS Software Distribuhon Best Prachces \r\nHow SMS Can Help with Windows 2000 Depoyment \r\nPackaging Windows 2000 for Systems Management Server \r\nPreparing the Windows 2000 Server Upgrade Package \r\nAllowing User lnPut During the Upgrad \r\nExaInining the Windows 2000 Server Package Definition \r\nPreparing the Windows 2000 Professional Upgrade Package \r\nWindows and Windows Upgrades \r\nWindows NT Workstation Upgrade \r\nDistributing the Windows 2000 Packages \r\nPreparing to Distribute the Packages \r\nCheck the Status of Site Servers and Distribution Points \r\nEnsure Each Site Has an Adequate Number of Distribution Points \r\nUse Distribution Point Groups \r\nEnsure Sender Controls Aie in Place \r\nEnsure Fan-out Distribution Will Work \r\nSelect a Test Site \r\nDistributing the Packages to Sites and Distribution Points \r\nTesting the Distribution \r\nExpanding the Distribution \r\nDistributing by Means of the Courier Sender \r\nMonitoring the Distribution \r\nSystem Status Subsystem \r\nReporting Package Distribution Status \r\nTroubleshooting the Distributions \r\nAdvertising the Windows 2000 Packages \r\nSelecting ComPuters to Upgrade \r\nPreparing Clients to Receive the Advertisements \r\nAdvertising the Packages to ComPuters \r\nExpanding Security on Distribution Points \r\nUpgrading ComPuters \r\nExecuting the Adyertisement at Each Computer \r\nStatus of the Upgrade at Each ComPuter \r\nMonitoring the Advertisements \r\nThe System Status Subsystem \r\nReporting Advertisement Status \r\nTroubleshooting Advertisements \r\nUsing Systems Management Server to Ease Domain Consolidation and\r\nMigration \r\nExndning Differences Between Systems Management Server . and System\r\nManagement Server 2.0 \r\nPlanning Task List for Using Systems Management Server to Deploy\r\nWindows 2000 \r\nAddihonal Resources \r\n\r\nChapter 15 Upgrading and InstaIling Member servers \r\n\r\nPlanning for Member Server Upgrade and Installation \r\nProcess for Installing or Upgrading to Windows 2000 \r\nCreating an Upgrade and Installation Plan \r\nCreate a Schedule \r\nScenario: MiniInizing Network Downtime During Server Upgrade \r\nPreparing Member Servers for Upgrade or New Installation \r\nInventory the Existing Hardware \r\nDetendne System Requirements \r\nDetendne the Compatibility and Reliability of Existing Software \r\nDetennine Third-Party Software Compliance \r\nPerform Pfe-installation Tasks \r\nPerfOedng an Upgrade or Installation \r\nPre-Upgrade Checklist \r\nUpgrading Member Servers \r\nPerfondng a New Installation \r\nDeteodning Server Roles for Each Windows 2000 Server \r\nFile Servers \r\nMacintosh Volumes \r\nNovell NetWare Volumes \r\nTest File Shares \r\nPrint Servers \r\nPrint Server Setup \r\nGuidelines for Setting up a Network Printing Environment \r\nActive Directory Integration with Windows 2000 Server Print\r\nServices \r\nTesting Printer Shares \r\nAPPIication Servers \r\nComPonent Services \r\nTendnal Services \r\nDatabase Server \r\nWeb Servers \r\nProxy Servers \r\nPerfonning Post-Upgrade and Installation Tasks \r\nTesting Network Connectivity \r\nTuning Network Servers \r\nTools for System Adndnistration \r\nPlanning Task List for Member Servers \r\n\r\nChaPter 16 Dploying Trminal Services \r\n\r\nOverview of Tenninal Services \r\nTendnal Services Licensing ComPonents \r\nMicrosoft Clearinghouse \r\nLicense Server \r\nTendnal Server \r\nClient Licenses \r\nRequired Licenses \r\nOptional Tenninal Services Licenses \r\nThird-Party Expansion \r\nCreating Your Tendnal Services Deployment Plan \r\nProcess for Deploying Tendnal Services \r\nAssembling the Tendnal Services Team \r\nIdentifying Your Tetrinal Services Requirements \r\nScenario l: Tendnal Services Remote Adndnistration \r\nScenario : Remote Access \r\nScenario : Line of Business Applications \r\nScenario : Central Desktop Deployment \r\nDeployment Requirements \r\nPreparing Your ComPuting Environment \r\nInstall License Server on Domain Controller \r\nAccess Over Wide Area Network \r\nAccess to Netwotk Services \r\nConnecting the Tendnal Services Client and Server \r\nAssessing the Current Environment \r\nConsiderations for Application Deployment \r\nPlanning EFS ImPlementation \r\nSecurity Analysis \r\nBest PraCtices \r\nRecovery Policy \r\nPOlicy ImPlementation \r\nPolicy EnfOrcement \r\nStorage \r\nCertificates \r\nUser Certificates \r\nRecovery Agent Certificates \r\nAdndnistrative Procedures \r\nSecuring the Recovery Key \r\nAssigning Recovery Agent Accounts \r\nConfiguring Recovery Agent Policy \r\nViewing RecovetyAgeni lnformation \r\nRecovering a File or Folder \r\nDisabling EFS for a Specific Set of ComPuters \r\nDisabling EFS for a Specific Folder \r\nUsing the System Key \r\nPrinting EFS FiIes \r\nTroubleshooting EFS \r\n\r\nChaPter16 Windows 2000 Certificate services and PubIic Key InfraStru0ture \r\n\r\nBenefits of the PUblic Key InfrastrUcture \r\nStrong Security with PUblic Key Technology \r\nIntegration with Active Directory and Distributed Security Services \r\nMajor ComPonents of the PUblic Key InfrastrUcture \r\nWindows 2000 Certificate Services \r\nEntry Module \r\nPOlicy Modules \r\nCertificate TemPlates \r\nCertificate Database \r\nExit Modules \r\nCenification Authority Console \r\nMicrosoft CryptoAPI and Cryptographic Service Providers \r\nHardware and Software Cryptographic Service Providers \r\nMicrosoft CryptograPhic Service Providers \r\nFIPS l-l Level l Certification \r\nBase vs. Enhanced Cryptographic Service Providers \r\nSmart Card Cryptographic Service Providers \r\nCryptography Export Restrictions \r\nCertificate Stores \r\nFeatures of the PUblic Key Infrastructure \r\nCertificates Console \r\nCertification Authority Trust MOdel \r\nCertification Authority Hierarchies \r\nCertification Path \r\nCertificate Trust Lists \r\nCertificate Validation Process \r\nBenefits of Multiple-Level Certification Hierarchies \r\nGeneral Benefits \r\nAdIninistraive Benefits \r\nBenefits of Multiple Issuing Certification Authorities \r\nWindows 2000 Certification Authorities \r\nEnterprise Certification Authorities \r\nStand-alone Certification Authorities \r\nCertificate Life Cycle \r\nNested Validity Dates \r\nCertificates Issued by Stand-alone Certification Authorities \r\nCertificates Issued by Enterprise Certification Authorities \r\nCertification Authorities Certificates \r\nExamPle of a Certificate Life Cycle \r\nGeneral Considerations fOr Key Lifetimes \r\nCertificate Enrollment and Renewal Methods \r\nManual Certificate Requests for Windows ouased Clients \r\nAutomatic ComPuter Certificate Enrollment and Renewal \r\nWeb Enrollment Support Pages \r\nCustom Enrollment and Renewal Applications \r\nPUblic Key Group Policy \r\nCenificate Revocation Lists \r\nPreinstalled Trusted Root Certificates \r\nSmart Card Support \r\nCenificate MaPping \r\nDomain User Accounts \r\nIntemet Information Services \r\nRondng Profile Support \r\nCertificate Services Deployment \r\nInstall Certification Authorities \r\nUpgrading from Certificate Server 4.0 \r\nCreation of an Issuer Statement for the Certification\r\nAuthority (OptionaI) \r\nInstalling Windows 2000 Certificate Services \r\nConfigure Certification Authorities \r\nInstallation of the Certification Authority Certificate \r\nConfiguration of Policy Module Settings \r\nConfiguration of Exit Module Settings \r\nScheduling Certificate Revocation List PUblication \r\nConfiguration of Certificates to Be Issued \r\nModification of Security for a Certification Authority \r\nEnabling Netscape-compatible Web-based Revocation Checklng \r\nModify the Default Security Pendssions for Certificate\r\nTemPlates (Optional) \r\nInstall and Configure Support Systems or Applications \r\nConfigure PUblic Key Group Policy \r\nAutomatic Certificate Enrollment \r\nRoot Certificate Trust \r\nCertificate Trust Lists \r\nEFS Recovery Agents \r\nInstall Web Enrollment Support on Another Computer (Optional) \r\nTrusting the Computer for Delegation \r\nInstalling the Web Enrollment Support Pages \r\nConfigure Security for Web Enrollment SuPPort Pages (OPtional) \r\nIntegrate with Third-Party Certificate Services (Optional) \r\nOngoing Certificate Services Tasks \r\nUsing the Web Enrollment Support Pages \r\nChoosing the Type of Certificate to Request \r\nSubndtting User Certificate Requests \r\nSubndtting Advanced Certificate Requests \r\nInstalling the Certificate After It Is Issued \r\nRequesting Certificates with the Certificate Request Wizard \r\nViewing Information About Certificates \r\nExporting Certificates and Private Keys \r\nBacking Up and Restoring Certification Authorities \r\nWindows 2000 Backup and Restore \r\nCertification Authority Console Backup and Restore \r\nBackup Strategies \r\nRestore Considerations \r\nRevoking Certificates \r\nPublishing Certificate Revocation Lists \r\nApproving or Denying Certificate Requests \r\nRenewing Certification Authorities \r\nRecovering Encrypted Data \r\nRecovery for Encrypting File System \r\nRecovery for Secure Mail \r\nUsing the Certificate Services Cornmand-Line Programs \r\nCertUtil.exe \r\nCertReq.exe \r\nCertSrv.exe \r\nDisaster Recovery Practices \r\nUsing Preventive Practices for Servers \r\nProviding Security for Certification Authority Servers \r\nPrOtecting Private Keys for Certification Authority Servers \r\nDeveloping Recovery Plans \r\nFailed Certification Authority \r\nComProndsed Certification Authority \r\nAdditional Resources \r\n\r\nPart 3 Entrprise TechnoIogies\r\n\r\nChapter 17 Distributd FIle System\r\n\r\nIntroduction to Dfs\r\nWhat Df Does\r\nFeatures and Benefits\r\nBasic Dfs Concepts \r\nNomenclature\r\nProcesses\r\nMaintaining the Patition Knowledge Table (PKT)\r\nCaching Referrals by Clients \r\nGaining Access to a Dfs Shared FoIder \r\nLinking Logical Names to Physical Addresses \r\nSwitching Between Replicas During Failover \r\nReplicating Files \r\nEstablishing Security \r\nGetting Started \r\nAdndnistrator Perspective \r\nClient Perspective \r\nArchitecture \r\nBlock Diagrams \r\nHow Dfs Works \r\nWindows 2000 Improvements of Dfs .x \r\nScripting \r\nDesign Guidelines for Dfs \r\nProblems That Dfs Solves \r\nUnified File System Namespace \r\nHigh Availability \r\nLoad Sharing \r\nCapacity Expansion \r\nIntraneofntemet PUblishing \r\nNndng Strategy \r\nDomain Nandng \r\nServer Nandng \r\nDfs Root Nandng \r\nDfs Link Nandng \r\nShared Folder Naming \r\nDfs Namespace Strategy \r\nReplication Strategy \r\nDfs Roots \r\nReplica Sets \r\nSite Topology \r\nSecurity Strategy \r\nMigration Strategy \r\nExisting Windows NT Shared Folders \r\nDfs 4.x \r\nPlatform Interoperability \r\nDisaster Recovery Strategy \r\nImplementing Dfs \r\nSetup Considerations \r\nDfs Server \r\nDfs Client \r\nDfs and Active Directory \r\nDfs andoad Shedng \r\nDfs and File Replication Service \r\nDfs and Cluster Service \r\nSupporting Dfs \r\nMonitoring Dfs Activity \r\nMaintaining the Dfs Configuration \r\nChecking Shared Folder Status \r\nTaking Resources Offine \r\nRemoving Dfs \r\nTroubleshooting Dfs Problems \r\nGaining Access to the Dfs Namespace \r\nTracking Shared Folders\r\nGaining Access to Dfsinks and Shared Folders\r\nSecurity-Related Issues \r\nReplicationatency \r\nDfs Utilities \r\nAdditional Information \r\n\r\nChaPter 18 File Replication Service \r\n\r\nIntroduction to FRS \r\nReplicating SYSVOL \r\nReplicating Dfs Replicas \r\nHow FRS Works \r\nDetailed Operation \r\nFRS Tables \r\nFRS Startup \r\nUpgradingMRepl to FRS \r\nLMRepl Process \r\nFRS Process\r\nMaintaining a Mixed Environment \r\nCustondzing FRS \r\nSetting File and Folder FiIters \r\nScheduIing Replication \r\nOn SYSVOL \r\nOn Dfs Replicas \r\nTuning Recommndations \r\nMonitoring Performance \r\nRestoring Replicated Files \r\nNonauthoritative Restore Process\r\nAuthoritative Restore Process \r\nRestoring Files on a Domain ControlIer \r\nRestoring Files on a Member Server \r\nTroubIeshooting FRS \r\nFRSogs \r\nLog Settings \r\nAnalyzingog FiIes \r\nNtfrsutl Tool \r\n\r\nChapter 19 NetWorkoad Balancing \r\n\r\nNetworkoad Balancing Overview \r\nHow Networkoad Balancing Works \r\nSystem Requirements \r\nComponents \r\nNetworkoad Balancing Design \r\nImPlementing Networkoad Balancing\r\nConfiguring Networkoad Balancing \r\nCluster Parameters \r\nHost Parameters \r\nHost Priority ID \r\nInitial State \r\nDedicated IP Address and Subnet Mask \r\nPort Rules \r\nPort Range \r\nProtocols \r\nNetworkoad Balancing with Network Hardware Switches \r\nScenarios \r\nIIS Server (Web Fann) \r\nPort-rule Settings \r\nServicing Multiple Web Sites (Multihondng) \r\nServicing a Web Site with Active Server Pages \r\nServicing a Web Site That Uses Secure Socketsayer\r\nPort-rule Settings\r\nCreating a Virtual Private Network \r\nPort-rules Settings\r\nStreaITilng Media\r\nPort-rules Settings \r\nSingle-Server Failover Support \r\nPort-rule Settings\r\nDefault Handling of Client Requests \r\nWlbs Display Conunand\r\nChanging Networkoad Balancing Resourceindts in the Registry \r\nAdditional Resources\r\n\r\nChapter19 Interpreting the CluSterog \r\n\r\nClusterog Basics\r\nAnatomy of a Clusterog Entry \r\nComponent Eventog Entries\r\nMeanings of Abbreviations \r\nResource DLLog Entries\r\nMeanings of State Codes and Status Codes\r\nTechniques for Tracking the Source of a Problem\r\nTimestamPs\r\nGUIDs, Resources, and Groups \r\nProcess and Thrad IDs \r\nGUM Updates and Sequence Numbers\r\nSharedocks and gdwQuoBlockingResources\r\nCluster Form and Join Operation Entries\r\nInitializing the Node\r\nJoining a Cluster (Unsuccessful AttemPt) \r\nFondng a Cluster\r\nStarting Resrcmon.exe\r\nBringing the Quorum Resource Online\r\nApplying Quorumog Changes to the Cluster Database\r\nRecreating Groups and Resources\r\nConfiguring the Networks\r\nBringing Resources Online\r\nCIuster Successfully Formed \r\nLog Summary of Cluster Formation\r\nFailure Scenarios \r\nResource DLL Is Missing\r\nIntracluster Network Connection Is Broken\r\nLog from Node \r\nLog from Node\r\nNode Cannot Form Cluster Because QuonJmocation Changed\r\nTipsl\r\nReading theog in Word or WordPad\r\nCorrelating the Windows 2000 Eventog and the Clusterog\r\nIdentifying GUIDs in the Registry\r\nLogging When Running the Cluster Service With the debug Option\r\nState Codes\r\nState Codes for Cluster Nodes \r\nState Codes for Cluster Groups\r\nState Codes for Cluster Resources\r\nState Codes for Network Interfaces\r\nState Codes for Networks\r\nContext Numbers\r\nAdditional Resources\r\niktop Configuration Management\r\nChaPter19 Introduotion to Desktop Manaement \r\nChange and Configuration Management\r\nIntelliMirmr\r\nUser Data Management \r\nSoftware Installation and Maintenance\r\nUser Settings Managementl\r\nWindows 2000 Technologies That IntelliMirmr Uses\r\nActive Directory\r\nGroup Policy\r\nWindows 2000 Installer\r\nOffine Files\r\nSynchronization Manager\r\nFolder Redirection\r\nDisk Quotas\r\nAddlRemove Programs\r\nWindows 2000 Desktop\r\nRoaIning User Profiles\r\nRemote OS Installation\r\nConfiguring and Maintaining the Network Environment\r\nMicrosoft Systems Management Server\r\nCombining Management Solutions\r\nManaging the Desktop\r\nDesktop Configuration\r\nUser and Computer Configurations \r\nUnderstanding User Profiles\r\nCreating and Editing User Profiles\r\nDesktoP Configuration fOr Rodring and Mobile Users\r\nSoftware Installation and Maintenance\r\nRoaIning User Profiles\r\nFolder Redirectionl\r\nOffiine Filesl\r\nCache Settingsl\r\nRondng User Profile Settingsl\r\nEnhancements to Roandng User Profiles\r\nMerge Algorithml\r\nNonrotalng Folders\r\nProfileocation\r\nQuotas on Profile Size\r\nSPecifying Security on the Desktop\r\nAdditional Resources\r\nChaPter20 Group Policy \r\nGroup Policy Overview\r\nActive Directory Smicture and Group Policy \r\nManaging Group Policy\r\nGroup Policy InfrastrUcture and Mechanics\r\nGroup Policy Objects and the Group PoIicy SnaP-in\r\nLinks to Sites, Domains, and Organizational Units\r\nAccess to the Group Policy SnaP-in\r\nFiltering by Security Group Membership\r\nAdndnistraive Requirements for Using Group Policy\r\nMicrosoft Management Console SnaP-in Extension Model\r\nConfiguring Group Policy\r\nGroup POlicy SnaP-in Namespace \r\nComPuter Configuration\r\nUser Configuration\r\nExtensions to.the Group Policy SnaP-in\r\nAdndnistrative TemPlates\r\nOther Group Policy Extensions That Use the Registry\r\nSecurity Settings\r\nIncremental Security TemPlates\r\nSecurity Configurations\r\nCompatible\r\nSecure\r\nHigh Secure\r\nWindows 2000 Default Security Templates\r\nSoftware Installation\r\nScripts\r\nFolder Redirection\r\nExtending the Group Policy Snap-in\r\nClient-side Extensions to Group Policy\r\nGroup Policy Storage\r\nNon-Local, Active Directory--Based Storage\r\nGroup Policy Container\r\nGroup Policy TemPlate\r\nLocal Group Policy Objects\r\nGroup Policy Template Subfolders\r\nRegistry.pol Filesl\r\nGroup Policy Objectinks\r\nNo Ovetride as ComPared to Block Policy Inheritance\r\nMultiple Group Policy Objects\r\nCross-Domain Editing of a Group Policy Object\r\nUsing Security Groups to Filter and Delegate Group Policy\r\nFiltering the Scope of a Group Policy Object\r\nSetting Security Pendssions fOr Receiving Group Policy\r\nDelegating Control of Group Policy\r\nManaging Group Policyinks fOr a Site, Domain, or Organizational\r\nUnit\r\nCreating Group Policy Objects \r\nEditing Group Policy Objects\r\nExamples of Group Policy Delegation\r\nCreating MMC Consoles to Delegate Group Policyl\r\nGroup Policy Processing\r\nSynchronous and Asynchronous Processing\r\nPeriodic Refresh Processing\r\nOptional Processing of Group Policy Even If It Has Not Changed\r\nGroup Policy and Network Bandwidth\r\nSetting Policy for Slow-Link Definition\r\nRegistry Reads \r\nSpecifying a Domain Controller for Setting Group Policy\r\nSpecifying Policy for Domain Controller Options\r\nDomain Controller Selection Results\r\nClient-side Processing of Group Policy \r\nClient-side Extension Preferences\r\nComPuter Policy for Client-side Extensions\r\nUsing Group Policy on Stand-alone ComPuters\r\nLocal Group Policy Object\r\nStarting Group Policy on Windows 2000 Professional \r\nUsing the Group Policy SnaP-in Focused on a RemOte ComPuter\r\nLocal Group Policy Object Processingl\r\nGroup Policyoopback Support\r\nSupporting Windows NT 4.0 Windows 2000 , and Windows 2000 Clients\r\nUsing Windows NT 4.0 Adndnistrative TemPlates in the Windows 2000 Group\r\nPolicy Console\r\nMigration Issues Pertaining to Group Policy\r\nThe Client Side \r\nThe Domain Controller Side\r\nComPuter and User Accounts Both on Windows NT 4.0 Domain\r\nControllers.\r\nComPuter and User Accounts Both on Windows 2000 Domain\r\nControIlers\r\nComPuter is Managed in a Windows NT 4.0 Account and User is Manag\r\nin a Windows 2000 Account\r\nUser is Managed in a Windows NT 4.0 Account and Computer is Manag\r\nin a Windows 2000 Account\r\nTrust Relationships with Previous Versions of Windows 2000\r\nBest Practices \r\nAdditional Resources \r\nChaPter21 SoftwarenstaIlation and Maintnance \r\nIntroduction\r\nSoftware Installation\r\nWindows 2000 Installer\r\nAdd/Remove Programs in Control Panel\r\nPhases of Software Management\r\nPreparation Phase\r\nAnalyze Software Requirements\r\nGather or Create Windows 2000 Installer Packages\r\nDistribution Phase\r\nSoftware Distribution Points\r\nDistributing Windows 2000 Installer Packages \r\nUsing Remote OS Installation\r\nTargeting Phase\r\nManage Your Software\r\nConfigure Software for Managementl\r\nTargeting Software for Multilingual Usersl\r\nPilot Program\r\nSoftware Installation User Scenarios\r\nInstallation Phase\r\nUpdating Software by Using Patches and Upgrades\r\nRemoving Software\r\nWindows 2000 Installer Technology\r\nManaging Windows 2000 Installer with Group Policy\r\nWindows 2000 Installer Package\r\nNatively AuthOring Windows 2000 Installer Packages\r\nAddihonal Repackaging Programs\r\nManaging Software with Existing Setup Programs\r\nCustOndzing Windows 2000 Installer Packages\r\nModifying Windows 2000 Installer Package PrOperties \r\nDistributing Additional Files\r\nTeodnal Services and Software Installation and Maintenance \r\nSoftware Installation and Maintenance and Backing Up Data\r\nBest Practices and Troubleshoohng\r\nAdditional Resources\r\nChaPter22 RemOte OS InStaIltion \r\nRemote OS Installation Overview\r\nRemote OS Installation Requirements\r\nServer Software Requirements\r\nHardware Requirements\r\nServer Hardware Requirements\r\nClient Hardware Requirements\r\nRemote Installahon Services\r\nRIS ComPonents\r\nRIS Services\r\nInstalling RIS\r\nDeploying RIS Servers\r\nAuthorizing RIS Servers in Active Directory\r\nConfiguring RIS Servers\r\nRestricting Client Installation Options by Using Group Policy\r\nDefining a ComPuter Nndng Poicy\r\nClient Response Options\r\nPre-staging Clients in Active Directory Using GUID\r\nGUID Format\r\nClients Installing Operating System Images\r\nPreboot Execution Environment\r\nRIS Server PXE Environment\r\nDHCP and RIS on Separate Servers \r\nDHCP and RIS on the Same Server\r\nVerifying the Correct PXE ROM Version\r\nCreating Operating System Images\r\nUsing CD-based Images\r\nCreating New CD-Based Images\r\nModifying Properties of a CD-based Image\r\nUsing RIPrep Images\r\n. RIPrep Considerations\r\nConfiguring a RIPrep Source Computer\r\nUsing Software Installation and Maintenance with RIPrep\r\nRIPrep and User Profiles \r\nRunning the RIPrep Wizard\r\nRelationship of SysPrep to Remote OS Installation \r\nRemoving RIS Server Operating System Images\r\nWorking with Answer Files\r\nCreating and Modifying Setup Answer Files\r\nModifying Remote Installation Answer Files\r\nAssociating an Answer File with an Image\r\nSetting Security Pendssions in Answer Files\r\nHow Answer Files Are Used During Remote Installation\r\nSpecifying a CD Key in the Answer File\r\nClient Installation Wizard\r\nUsing Client Installation Wizard to Install Clients\r\nDefault Client Installation Wizard Process\r\nClient Installation Wizard Screensl\r\nControlling Client Setup Options\r\nAutomatic Setup\r\nCustom Setup\r\nRestart a Previous Setup AttemPt\r\nMaintenance and Troubleshooting\r\nClient Installation Wizard Error Screens\r\nCustondzing CIient Installation Wizard Screens\r\nAdding Screens and Working With OSC VedabIes\r\nModifying the OSChoice.osc File\r\nCreating a New Display.osc Screen\r\nModifying the Answer Files to Work with the New OSC Variables\r\nReserved OSC Variables\r\nMultilanguage RIS Servers\r\nLanguage Restrictions\r\nSingle Instance Store\r\nSingle Instance Store Groveler\r\nBacking UP a SIS Volume\r\nSIS GroveIer Configuration Parameters\r\nOPtional Registry Parameters for RIS BINL\r\nTroubIeshooting RISl\r\nTroubleshooting: No Response From a RIS Serverl\r\nTroubleshooting: Working with Routers\r\nChaptr TroubIeshooting Chane and Configuration Manaement \r\n-\r\nBest Practices\r\nTroubIeshooting TooIs \r\nVerboseogging\r\nGroup Policy Issues\r\nScripts Do Not Run\r\nRegisny Settings Using Adndnistrative TemPlates Are Not Applied\r\nGroup Policy Object Does Not OPen\r\nActive Directory and SysvoI Are Unsynchronized\r\nMore Than, Group Policy Objects are present and Group PoIicy\r\nfails\r\nNo Group Policy Objects Are AppIied\r\nInheritance Issues with Group Policy Objects Cause Unexpected\r\nResults I\r\nOnly Some IP Security and User Rights Policy Settings for Applied\r\n\r\nSecurity Settings on Group Policy ob j..t Cause Unexpected Results\r\nUser Data Management Issues\r\nFiles Do NOt Synchronize\r\nUser Cannot Make Files and Folders Available Offine\r\nFiles Available When Online Are Not Available When Offine\r\nMy Documents Icon Is Missing\r\nFolders Are Not Redirected\r\nRedirection Is SuccessfuI But Files and Folders Are Unavailable \r\nSoftware Installation and Maintenance Issues\r\nPublished Application Does Not Appear\r\nPublished APplication Does Not Auto-install\r\nUnexpected Application Automatically Installs\r\nInstallation Ermr Messages\r\nFeature Is Not Found \r\nComputer-Assigned Applications Do Not Install\r\nInstalled Application Is Unexpectedly Removed\r\nOpening APplication InstaIls New Application\r\nShortcuts Still Appear for Removed Application\r\nUnexpected Applications Appear in Add/Remove Programs\r\nUpgrading Base Application Does Not ComPIete\r\nAnother Install in Progress Ermr Messagel\r\nOpening Application Starts Windows 2000 Installer\r\nCannot Prepare Package for Deployment\r\nActive Directory Does Not Allow Package to Deploy \r\nUser Settings Management Issues\r\nRoandng User Profile Does Not Roam Correctly Using Multiple\r\nComPuters\r\nRondng User Profileost and Usereft with Temporary Profile\r\nNot All Settings Roam \r\nUser Profile Does Not Roam\r\nRemote OS Installation Issues \r\nOSChooser Skips User\r\nFile Not Found Before Welcome.osc\r\nFile Not Found After Welcome.osc\r\nDuplicate Machine Account Warning Message\r\nRisetup Fails Due tonsufficient mghts\r\nRPC Server Unavailable Ermr Message\r\nBWh Server Does Not Respond and No Scope Problem Ermr Message\r\nAppears\r\nBINL Server Does Not Respond and Debugging Error Message\r\nAPpears\r\nBINL Server Does Not Respond and Server Not Authorized Error Message\r\nAppears\r\nBINL Server Does Not Respond and Unable to Read Active Directory Settin\r\nErmr Message Appears\r\nBINL Server Does Not Respond and Server Not Set to Answer Error Message\r\nAppears\r\nBINL Server Does Not Respond and Client Unknown Error Message\r\nAppears\r\nBINL Server Does Not Respond and Prestaged Clients Server Down Ermr\r\nMessage Appears\r\nBINL Server Does Not Respond and DHCP Packets Not Forwarded Ermr\r\nMessage Appears\r\nBINL Server Does Not Start and Unknown User Error Message\r\nAppears\r\nRemote OS Installation Cannot Join Domain\r\nGathering More Troubleshooting Information \r\nUser Data Management\r\nSoftware Installation and Maintenance \r\nSoftware Installation and Maintenance Eventog Entries\r\nUser St\r\nPart ApPendixes\r\nApPndix A FrequentIy EncounteredDAP API Functions \r\nApPndix BDAP Requests for Comments \r\nApPndix C Active Directory DiagnoStic Tool (Ntdsutil.exe) \r\nInvoking Ntdsutil Commands and Parameters\r\nHow to Use Ntdsutil Menu Cornmands\r\nHow Ntdsutil Processes Conunand Input\r\nHow to Use Arguments with Ntdsutil Commands\r\nHow to Automate Ntdsutil Commands\r\nManaging Active Directory Files \r\nUsing the Connections Menu\r\nSelecting an Operation Target \r\nManaging Operations Master Rolesl\r\nManaging Orphaned Metadata \r\nPerfondng an Authoritative Restore \r\nManaging Domains\r\nManagingightweight Directory Access Protocol Policies \r\nManaging the IP Denyist\r\nManaging Security Accountsl\r\nUsing Semantics Database Analysisl\r\nList of Menu Conunands\r\nAppendix D UserRights \r\nLogon Rightsl\r\nPrivilegesl\r\nAppendix E Wll-Known Securitydentifiers \r\nAppendix F “Certified for Microsott Windows 2000”Applications \r\nWindows 2000 Desktop Applications \r\nWindows 2000 --based Distributed Applications\r\nApPendix GSCML and CIientnstaIIation Wizard VariabIes \r\nGlossary \r\nlndex