70 - 640 - v2 - Final

TRUNG TM O TO CNG NGH THNG TI N TECHNET | www.technet.com.
vn
TECHNET HC KIN THC, T CHNG CH Page 1

PHN NI DUNG TRANG
I MI TRNG WINDOWS SERVER 2008 2
II LOCAL POLICY 6
III LOCAL SECURITY POLICY 12
IV DOMAIN 17
V DOMAIN USER - DOMAIN GROUP 25
VI HOME FOLDER USER PROFILE 30
VII ORGANIZATIONAL UNIT STRUCTURE 34
VII OU DELEGATE CONTROL 37
IX NTFS PERMISSION 40
X SHARE PERMISSON 47
XI DISK QUOTA 52
XII GROUP POLICY MANAGEMENT 54
XIII NG DNG GPO 64
XIV DISTRIBUTED FILE SYSTEM 75
XV TERMINAL SERVICES 86
XVI FILE SERVER RESOURCE MANAGER 94
XVII WINDOWS SERVER BACKUP 98

TRUNG TM O TO CNG NGH THNG TI N TECHNET | www.technet.com.vn

PHN I
MI TRNG WINDOWS SERVER 2008

1. Chuyn giao din Start Menu v dng
Classic
Click chut phi ln menu Start, chn
Properties qua tab Start Menu chn
Classic Start Menu.

2. Tt User Account Control
- M Control Panel double click vo
User Accounts.
- Chn Turn User Account Control on or
off.

B du tch Use User Account OK Khi ng li my.

3. Using Windows Server 2008
Administrative Tools
a. Server Manager
Click vo Start Programs
Administrative Tools Server Manager.

Quan st.


b. Device Manager
Vo Run g Devmgmt.msc.

4. To Local User Account
M chng trnh Local Users and Groups:
vo Run g Lusrmgr.msc, click chut phi
vo mc Users chn New User.

Nhp thng tin ca User, b du tch User
must change Create.

5. To Local Group Account
Vo Run g Lusrmgr.msc click chut phi
vo Groups New Group.

Nhp thng tin Groups Create. 6. Thm User vo Group
Double click vo group mun thm user
Add nhp tn User mun thm Check
names OK OK.

7. Kho st quyn qun tr ca mt s
Local Built-In Groups: Administrators,
Power Users, Network Configuration
Operators
To thm Users U2, U3, add cc user ny vo
cc groups nh sau: U1 vo Administrators,
U2 vo Power Users, U3 vo Network
Configuration Operators.


Sau logon tng User kim tra quyn, ta
thy rng U1 c ton quyn, mun lm g
cng c, U2 c quyn Share Folder, khng
c quyn thay i IP card mng, thi gian h
thng.

U3 c quyn thay i IP, khng Share Folder
v thay i thi gian h thng.


PHN II
LOCAL POLICY
M Group Policy Object Editor: vo Run
g mmc File Add/remove Snap-in.

Chn Group Policy Object.. Add.

Tip tc chn Group Policy Object..
Add.

Chn Browse Finish.

Qua tab Users chn U2 OK Finish.

Tng t lm li thao tc va ri, chn
Administrators Finish. Tng t lm li thao
tc va ri, chn Non-Administrators Finish.


- Ta c nh hnh di:

- OK

- Click File Save As lu trn Desktop vi tn Amin.


1. iu chnh Local Computer Policy b bng Shutdown Event Tracker khi shutdown

- M theo ng dn hnh di:

- Double click vo Display Shutdown Event Tracker, chn Disabled OK.


Vo Run g cmd g GPupdate /force.

Shutdown my khng hin ra bng Shoutdown
Event Tracker na.

2. iu chnh User Configuration n tt c cc Items trn Desktop
- Vo theo ng dn sau:

Double click vo Hide and Disable all items
on the Desktop chn Enabled OK.

Vo Run g cmd g GPupdate /force.

- Kim tra:
+ Logoff Administrator ln lt logon vi U1,
U2, U3 u khng thy Items no trn Desktop.
+ Cho hin li Items trn Desktop bng cch
double click vo Hide and Disable all items on
the Desktop chn Disabled. Vo Run g cmd
g GPupdate /force.

3. iu chnh Local Computer/U2 Policy khng cho php U2 truy cp vo Control Panel

Double click vo Prohibit access to the
Control Panel Enabled OK.

- Vo Run g cmd g GPupdate /force.
- Kim tra: Logoff administrator Logon
bng U2 vo Start Settings khng thy
Control Panel.

- Logoff U2, logon U3, Administrator vo
Start Settings thy Control Panel.
4. iu chnh User Configuration Non-
Adminsitrator remove Computer Icon
trn desktop


- Double click vo Remove Computer icon on the desktop Enabled OK.
- Vo Run g cmd g GPupdate
/force.
- Kim tra:
+ Logoff Administrator Logon
bng U1, thy Computer Icon trn
Desktop (U1 thuc nhm
Administrators). Logon bng U2, U3,
khng thy Computer Icon trn
Desktop.
+ Tng t ta thy User
Configuration l chnh sch ch p
dng cho nhng User thuc nhm
Administrator


PHN III
LOCAL SECURITY POLICY
1. Password Policy
- Logon bng Administrator to User vi password 123, thy bo li khng tha mn yu cu
phc tp ca password.

- M Local Security Policy theo ng dn hnh di:


- M Account Policies Password Policy. Quan st ct bn phi:

Enforce password history: S password h thng lu tr.
Maximum password age: Thi gian c hiu lc ti a ca mt password.
Minimun password age: Thi gian c hiu lc ti thiu ca mt password.
Minimun password length: di ti thiu ca mt password.
Passoword must meet complexity requirements: Yu cu password phc tp.
- Chnh Password Policy nh hnh sau:
- Vo Run g cmd g Gpupdate /force.
- Kim tra: To li User vi password 123 thnh cng.
2. Account Lockout Policy
M Local Security Policy theo ng dn nh hnh di:


- Quan st:
Account lockout duration: Thi gian account b kha.
Account lockout threshold: S ln nhp sai password trc khi account b kha.
Reset account lockout counter after: Thi gian khi ng li b m.
- Chnh li chnh sch Account lockout Policy nh sau:
- Kim tra: ng nhp th sai password 6 ln khng th ng nhp tip, ch 30 pht sau c
th ng nhp li.
3. User Rights Assignment
Logon bng U2 khng th shutdown c
my.

Thay i gi h thng cng khng c.

Logon bng Administrator, m Local
Security Policy, vo theo ng dn nh hnh
di:

Doubel click vo Shut down the system
Add User or Group.. Nhp tn U2
Check names OK


OK

Tng t vi Change the System time

- Vo Run g cmd g Gpupdate /force.
- Kim tra: Logon bng U2, shutdown v thay i gi h thng thnh cng.
4. Network Access
- Ch 1: Classic
+ M Local Security Policy theo ng dn sau:

Double click vo Sharing and Security model
for local accounts, mc nh Sharing and
Security model ch Classic.
ch ny khi my khc truy cp ti
nguyn qua mng s yu cu chng thc
User password. Vo Run g:
\\192.168.1.200.


- Ch : Guest Only
Double click vo Sharing and Security
model for local accounts, chn ch Guest
only Local user

Vo Run g cmd g Gpupdate /force.
Kim tra: Vo Run g \\192.168.1.200.


PHN IV
DOMAIN
1. Nng cp Domain Controller
- Thit lp IP Address
Vo Start Settings Network
Connections hoc vo Run g NCPA.CPL.
Click chut phi vo Local Area Connection
Properties.

Double click Internet Protocol Sersion4,
nhp thng s nh hnh di, ch :
Prefferred DNS Server IP ca chnh n
OK.

- Ci Active Directory Domain Services
M Server Manager click chut phi vo
Roles chn Add Roles Next.

Chn Active Directory Domain Services
Next Next.


Install

Click Close this wizard and launch the
Active Directory Domian Services Install

Next Next chn nh hnh di Next.

Nhp tn domain: Technet.com.vn Next.

Click vo Forest Funtional Level: Chn
Windows Server 2008 Next.

Next


Next

Nhp password cho Directory Services
Restore Mode Administrator Password
Next Next.

Finish


2. Join my client vo Domain
- Thit lp IP trn my client: Tng t nh
my Server nhp IP nh hnh di, ch :
Prefferred DNS Server IP ca my Domain
OK.
- Join client vo Domain
Click chut phi vo My Computer
Properties Change Settings.

- Click Change chn Domain g Technet.com.vn OK.

Nhp password Administrator OK.

OK


3. Kho st cc Policy trn my Domain Controller
- Mt s thay i khi nng cp my Windows 2008 Server ln DC
Quan st trong Computer Management
(Local) khng cn dch v Locals User and
Groups. User, Groups s c qun l bng
Active Directory Users and Computer.

- Vo Run g DSA.msc.
- Chnh Policy cho php t password n gin
+ Vo Run g GPMC.msc. M rng Domains,
chn Default Domain Policy click chut phi
chn Edit.
+ M rng theo ng dn nh hnh di:

+ Ln lt double click vo Options v t li nh sau:

+ Vo Run g cmd g GPUPDATE /FORCE.

- Cho php 1 User thng logon trn my DC
Vo Run g GPMC.msc, vo theo ng dn
nh hnh di.

Vo theo ng dn sau double click vo
dng Allow log on locally.

Chn Add User or Group.

- Nhp tn User cho php logon OK.

- Vo Run cmd g GPupdate /force.


- Ci Remote Server Administrator Tools cho my client
+ Login bng account Administrator. Download tool trn website Microsoft.com.

Ci Tool Yes.

Finish
M Control Panel Programs and
Features.

Chn Turn Windows Features on or off.

Ko thanh cun xung v chn nh hnh di.

Vo Run g cmd g Net Start winrm


- M Active Directory Users and Computers.


PHN V
DOMAIN USER - DOMAIN GROUP
1. To Domain User
Click chut phi vo OU Saigon-Sale-User
and Groups New User.

Nhp thng tin User Next.

Nhp password, b tch User must change
password Next Finish.

Tng t to User sale2 v saletp (trng
phng Sale).

2. To Domain Groups
M Active Directory Users and Computers
click chut phi vo OU Saigon Sale
Users and Groups New Group.
Nhp thng tin Group.


- Add cc user sale vo group Sales. Double
click vo group Sales qua tab Members
Add.
- G sale Check Names chn cc user
sale bng cch nhn CTRL + A, b group
sales OK.

OK
OK

3. y quyn cho 1 user c quyn qun l members ca group
Click chut phi vo group Sales
Properties qua tab Managed By
Change.

Nhp tn user c y quyn Check
Names OK.


- Tch vo Manager can update
. OK.
- Kim tra bng cch login vo
my DC vi account saletp
vo Run g dsa.msc vo OU
Saigon Sale User and Groups
double click vo group Sales
qua tab Members, thm bt
user thnh cng .
4. To v s dng User Template
M Active Directory Users and Computers,
click chut phi vo OU Saigon Sale
Users and Groups Click chut phi vo
user Sale1, chn Properties qua tab
Account chn Account is Disabled.

- Qua tab Profile, nhp ng dn Home
Folder.
- Qua tab Organization, nhp thng tin
OK.


Click chut phi vo sale1 chn Copy.

Nhp thng tin user nh sau Next.

B tch Account is Disabled Next
Finish.

Double click vo user Sale3 kim tra cc tab,
Profile, Organization, Member Of.


5. Lm vic vi nhiu User
Gi phm CTRL click vo cc User sale1,
sale2, sale3, Saletp => Chn Properties

Qua tab Account tch Computer
Restrictions

- Chn Log On To.. chn The following
computers
- Nhp tn my tnh c php logon Add
OK
OK
Kim tra thy cc user Sale u c log on to
ging nhau.


PHN VI
HOME FOLDER USER PROFILE

1. Home Folder
- Trn C:\ to th mc Homes
- Share th mc Homes
- Click chut phi vo th mc Homes, chn
Share.. v click Advanced Sharing
- Chn Share this folder

- Chn Permission. Cp cho nhm Everyone
l Full Control

- Click OK
- Trong tab Security

- Chn Advanced


- Click Edit. B chn Include Inheritable
permissions from this objects parent
- Chn Copy

- Click OK OK Edit Remove

- Click OK Close
- Vo Run, g dsa.msc v vo theo ng
dn nh hnh di. Click chut phi vo user
Kttp, chn Properties

- Trong tab Profiles, chn Connect To:
G ng dn th mc chia s Homes trn
my 192.168.1.200
\\192.168.1.200\Homes\%username%

- Click OK
- Kim tra: Logon bng
user kttp, double click
vo Computer


2. Roaming Profile
- To th mc C:\Profiles. Click chut phi,
chn Share Advanced Sharing. Click
vo Share this folder

- Chn Permissions v cp cho nhm
Everyone l Full Control
- Click OK OK
- Trong tab Security

- Chn Advanced Edit B chn
Include Inheritable permissions from this
objects parent v click Copy
- Click Ok OK Edit


- Cp cho nhm Users quyn Write
- Click OK Close
Vo Run, g dsa.msc v vo theo ng dn
nh hnh di. Click chut phi vo user
Kttp, chn Properties.

- Trong tab Profile, nhp ng dn th mc
chia s Profiles trn my 192.168.1.200
\\192.168.1.200\Profiles\%Username%
- Click OK
- Kim tra:
+ Logon user Kttp trn my client, to th mc
Test trn Desktop v logoff.
+ Logon user Kttp trn my 192.168.1.200 ta
thy th mc Test trn desktop.


PHN VII
ORGANIZATIONAL UNIT STRUCTURE
1. To OU
M Active Directoty Users and Computers,
vo Run g DSA.msc, click chut phi vo
Domain New Organizational Unit.

t tn OU: Technet.

To OU: Saigon, Hanoi trong OU Technet.

Nhp tn: Saigon. Tng t vi Hanoi.

Trong OU Saigon to OU: Ketoan, Sale.

Nhp tn OU: Ketoan. Tng t vi OU Sale.


Tip theo to OU Computers, Users and
Groups trong OU Ketoan.

Nhp tn: Computers.

To v nhp tn OU: Users and Groups.
Tng t vi OU Sale ta c cy OU nh sau:

Trn OU Hanoi lm tng t OU Saigon ta c
cy OU nh sau:

2. Xa OU
Vo menu View chn Advanced Features.

Click chut phi vo OU mun xa chn
Properties, qua tab Object, b tch Protect
Object from OK.


Click chut phi vo OU mun xa chn
Delete.

Yes


PHN VIII
OU DELEGATE CONTROL

1. Cp quyn cho User trn OU
To User AdminSaigon.

- Add User AdminSaigon vo group Printer
Operators.
- Click chut phi vo User AdminSaigon
chn Add to a group

G Print chn Check Names OK.

Click chut phi vo OU Saigon chn
Delegate Control

Next Add.

Nhp tn User mun y quyn Check
Names OK Next.


Chn quyn cp cho User c y quyn
Next.

Finish

- Kim tra: Login User AdminSaigon trn my
DC.
- Click chut phi vo OU Saigon to xa
User, Group, Reset Password thnh cng.

Click chut phi vo OU Hanoi th khng.

2. B quyn ca User trn OU
Click chut phi vo OU Saigon chn
Properties.

Qua tab Security chn User AdminSaigon
Remove OK.


Kim tra li: Login User AdminSaigon trn
DC, th to User mi khng to c.

- Click chut phi vo User sale2 Delete.
- Khng xa c.


PHN IX
NTFS PERMISSION
1. Phn quyn bng Standard Permission
- To cy th mc nh sau:
- To thm 2 file .txt trong
mi th mc Sale v
Ketoan
- To 3 User kt1,k2, kttp,
add 3 user ny vo groups
Ketoans
- To 3 User sale1, sale2,
saletp, add 3 user ny vo
grup Sales
- Phn quyn NTFS cho cc groups nh sau:
1. Tt c cc users ca Domain c
quyn READ trn th mc Data.
2. Ch Users phng Ketoan c quyn
truy READ trn th mc Ketoan.
3. Ch users phng Sale c quyn
READ trn th muc Sale.
4. Ring trng phng mi phng ban
c quyn MODIFY trong th mc
tng ng vi phng ban .
- Thc hin phn quyn trn Data:
+ Chut phi ln th muc Data, chn
Properties, click chn tab Security
+ Chn Advanced


Chn Edit

B chn Include inheritable permissions
from this objects parent v click Copy

- Click OK OK Edit
- Chn group Users, click Remove
- Click Add
- G Ketoans, Sales sau click vo nt
Check Names

- Click OK

Phn quyn group Ketoans v Sales quyn
Read

Click OK

- Thc hin phn quyn trn th mc Ketoan:
+ Chut phi ln th muc Ketoan
Properties qua tab Security
+ Chn Advanced
Chn Edit

B chn Include inheritable permissions
from objects parent v click Copy

Click OK OK Chn Edit

Click vo group Users Remove

+ Click vo Add. G Ketoans, tpkt v click
vo nt Check Names
+ Click OK


Phn quyn Read cho group Ketoans

+ Phn quyn Modify cho user kttp
+ Click OK OK
Tng t thc hin vi folder Sale

- Kim tra:
+ Logon bng user kt1 truy cp vo th mc
C:\Data thnh cng; to file, folder => tht
bi.
+ Truy cp vo th mc: C:\Data\Ketoan
thnh cng; to file, folder tht bi; xa file
tht bi
+ Truy cp vo th mc C:\Data\Sale tht
bi.
+ Logoff user kt1 ng nhp bng user kttp
truy cp vo th mc C:\Data thnh cng; to
file, folder tht bi; xa th mc Sale tht bi.
+ Truy cp vo th mc C:\Data\Ketoan
thnh cng, to file test3; to th mc Kttp
thnh cng, xa file test1 thnh cng.
+ Truy cp vo th mc C:\Data\Sale tht
bi.

1. Phn quyn bng Special Permission
- ng nhp bng administrator, click chut
phi vo C:\Data\Ketoan chn Properties.
- Trong tab Security, chn Advanced.

Chn Edit

Double click vo kttp nh hnh trn

- B chn Delete trong ct Allow, sau
click OK
- Click OK OK OK

- Kim tra:
Login bng user kttp.
Truy cp vo th mc C:\Data\Ketoan thnh cng.
To file test4, folder thnh cng.
Xa file test2 tht bi.
Xa file 3 do user kttp to ra thnh cng.

2. Take OwnerShip
- ng nhp bng user kttp, truy cp vo th
mc C:\Data\ketoan
- Click chut phi vo th mc Kttp, chn
Properties. Trong tab Security, chn
Advanced v click Edit
- B chn Include inheritable permission
from this objects parent v click Copy

Click OK OK Edit

- Remove tt c ch li mi user Kttp
- Click OK
Logon Administrator v truy cp vo
C:\Data\ketoan\Kttp bo li khng c quyn
truy cp


ly li quyn ta click chut phi vo Kttp,
chn Properties. Trong tab Security, chn
Advanced.

Trong tab Owner, chn Edit.

Chn nhm Administrators v chn Replace
owner on subcontainers and objects.
Click OK
Yes.

- Click OK OK OK

- Truy cp li th mc Kttp thnh cng.


PHN X
SHARE PERMISSON
1. Share folder
Vo Control Panel => Folder Options

Qua tab View, ko thanh cun xung di, b
check Use Sharing Wizard OK.

To th mc C:\Tailieu, trong th mc Tailieu
to file Tailieu1.txt. Click chut phi ln
C:\Tailieu, chn Share

Chn Advaned Sharing.

Tich vo Share this folder chn Permissions
cp cho group Everyone quyn Read OK
OK Close.


Kt ni n folder share
+ Ti my client vo Run g \\192.168.1.200.

+ Truy cp vo Folder share Tailieu, c file tailieu1.txt thnh cng. To file, to folder mi
khng thnh cng.
2. Share n mt Folder
To folder tn Tailieumat ng dn
C:\tailieumat, click chut phi vo folder
Tailieumat chn Share.. Advanced
Sharing. Tch vo Share this folder thm
du $ ng sau tn share.

Chn Permissions, cp cho nhm Everyone
quyn Change OK OK OK.

- Kt ni n Folder share n: T my client vo Run g \\192.168.1.200\tailieumat$

- Truy cp thnh cng
- To file, to folder thnh cng.

3. Map Network Driver truy cp cc share folder
Kt ni Share folder trn my 192.168.1.200
Click chut phi vo Share folder Tailieu
chn Map network drive

mc nh OK
Double click vo My Computer


4. Qun l cc Share Resources
- Vo Run g COMPMGMT.MSC
- Click vo Shared Folders Shares

- Hoc m Server Manager.Vo theo ng dn sau:

5. Kt hp Share v NTFS permission
Click chut phi vo C:\Data Share..

Chn Advanced Sharing


Tch vo Share this folder

Chn Permissions Phn quyn cho nhm
Everyone Full Control
OK OK OK
Kim tra: Trn my client ln lt logon bng User kt1 v kttp. Truy cp vo th mc chia s
Data trn my 192.168.1.200 c quyn tng t nh khi login 2 user ny login trc tip trong
bi NTFS permission.


PHN XI
DISK QUOTA

Click chut phi vo C: chn Properties,
trong tab Quota click vo Enable Quota
Management v Deny disk Space to users
exceeding quota limit

- Chn Quota Entries Click Quota
New Quota Entry..
- G tn user Kttp, Saletp Check Names
- Click OK
Trong hp thoi Add New Quota Entry
mc nh v nhn OK

Click chut phi vo user Kttp chn
Properties


Chn Limit disk Space to v thit lp nh
hnh di

Tng t vi user Saletp

- Click OK

- Click OK OK
- Kim tra:
Logon user Kttp Copy cc file c dung lng ln hn 200MB.
Thy thng bo li cng khng khong trng.


PHN XII
GROUP POLICY MANAGEMENT

1. To v Link Policy ti OU
- M Group Policy Management, vo Run g gpmc.msc. Hoc vo theo ng dn sau:

- Vo theo ng dn nh hnh di

- Click chut phi vo Group
Policy Objects, chn New
- t tn cho GPO l An Control
Panel
- Click chut phi vo GPO An
Control Panel va to, chn Edit


Vo theo ng dn sau:

Double click vo Probibit Access to the
Control Panel. Chn Enabled v click OK

Tr li Group Policy Management. Vo
Domain Technet.com.vn Technet
click chut phi vo Saigon, chn Link an
Existing GPO ..

Chn GPO An Control Panel


- Quan st thy GPO An Control Panel c link vo OU Saigon

- Vo Run g gpupdate /force
- Kim tra: Login ln lt bng cc User
Adminsaigon, Sale1, Sale1, kt1, kt2, kttp khng
thy Control Panel.
2. Inheritance
- M Group Policy Management, chn OU
Technet. Qua tab Group Policy Inheritance


- Tip theo chn SaiGon

- Chn OU Ketoan

- Quan st thy rng GPO trn OU Technet tha k t Domain Technet.com.vn, GPO trn
OU Ketoan c tha k t OU Saigon v domain Technet.com.vn.
3. Block Inheritance Policy
- Click chut phi vo OU Ketoan, chn Block Inheritance


- Quan st thy OU Ketoan khng tha k GPO no t nhng OU pha trn n.
- Vo Run, g gpupdate /force
- Kim tra:
Logon bng user kt1, Kttp ta thy Control Panel.
Logon bng user Sale2, Saletp ta khng thy Control Panel.
4. EnForce Policy
- Click vo OU Saigon, chn GPO An Control Panel. Click chut phi chn Enforced.
- Chn OU Ketoan v quan st trong tab Group Policy Inheritance khung bn phi.


- Kim tra: Logon li bng user Kt1, Kttp khng thy Control Panel
5. Chnh Order Policy
- B ht Block Inhertitance v Enforce.
- To thm GPO tn Hien Control Panel v link GPO ny vo OU Saigon.
- Click chn GPO An Control Panel v Click vo biu tng dch xung

- Trong tab Group Policy Inheritance ch mc Precedence, GPO no c precedence cng
nh cng c u tin hn.
- Kim tra: Login ln lt cc User Kt1, kttp, sale1, adminsaigon, saletp u hin Control
Panel.
6. Security Filtering
- Trong OU Saigon, chn
GPO An Control Panel.
Trong khung Security
Filtering chn
Authenticated Users, click
Remove v OK.
- Click vo Add, g sales v
nhn vo Check Names.
- Click OK

- Kim tra:

Logon user Saletp, khng thy Control Panel.
Logon user Kttp, thy Control Panel.
7. Xem cc Settings ca GPO
Chn GPO An Control Panel, trong tab Settings khung bn phi click Show

8. Modeling Wizards

- Chn Group Policy Modeling Wizards,
click chut phi chn Group Policy
Modeling Wizard..

Click Next

- xem OU Saigon b p nhng Policy g, mc User Information v Computer
Information. Browse n OU Saigon. Click Next.

Click Next. Chn Default-Fisrt-Site

Next, chn Authenticated Users

- Cc bc cn li mc nh, click Next.


- Quan st thy chi tit cc GPO p ln OU Saigon

9. Disable mt phn ca GPO
- i khi ta ch s dng mt phn trong ca GPO (v d User Configuration), tng tc qu
trnh x l nn tt nhng phn khng dng n.
- Chn GPO An Control Panel. Trong tab Details, mc GPO Status ta chn Computer
Configuration settings disable
- Click OK.


PHN XIII
NG DNG GPO

1. Deploy Software trn User
M Group Policy Management. Chn
Group Policy Objects, click chut phi chn
New

t tn GPO Deploy Microsoft Visio

Click chut phi vo Deploy Microsoft Visio
chn Edit

Vo theo ng dn hnh di:


Nhp ng dn b ci Microsoft Visio

Click Open v chn Assigned

Click chut phi vo Microsoft Office profiles chn Properties

Trong tab Deployemnt, chn nh hnh di

- Click OK
- Chut phi vo OU Saigon Sale Users
and Groups, chn Link an Existing GPO


- Chn Deploy Microsoft Visio v click OK

- Quan st

- Kim tra: Logon user saletp trn my client Thy Microsoft Visio


2. Deploy Software trn Computer
M Group Policy management, click chut
phi vo OU Computer nh hnh di v chn
Greate a GPO in this domain, and link it
here..

t tn GPO Deploy Microsoft Visio on
Computer

Click chut phi vo GPO va to chn Edit

Vo theo ng dn nhu hnh di

- G ng dn b ci Visio chn file .msi
- Open
Chn Assigned v click OK


- Kim tra: Login bng user administrator, saletp, sale2 ta thy phn mm Visio c ci
t.
3. Restrited Group
- To user Support v group Supports.
- Add user Support vo group Supports.
- M Group Policy Management, chn
Default Domain Policy. Click chut phi
chn Edit

Vo nh ng dn hnh di v click chut
phi vo Restricted Group, chn Add group

Browse add group Supports


Click OK OK

- Trong khung This group is a member of:
- Click Add v Browse add group
Administrators

Click OK OK

- Khi ng li my client, kim tra member
ca nhm Local administrators c nhm
Supports.


4. To a mng cho User
- Chn Default Domain Policy, click chut phi chn Edit
- Vo theo ng dn

- Double click vo Logon
- Chn Add

- Chn Browse
- Click chut phi chn NEW Text
Document

- Rename thnh file Logon.bat
- Click Yes


Click chut phi chn Edit

Nhp vo dng net use S:
\\192.168.1.200\Tailieu

- Lu li Open OK OK
- Kim tra: Logon user kttp, sale2,kt1, saletp v m Computer thy mng.

5. Software Restrittion
- Vo Run, g gpmc.msc
- Chn Defautl Domain Policy, click chut
phi chn Edit

Vo ng dn nh hnh di v click chut
phi ln Additional Rules, chn New Hash
Rule


Chn Browse

- Ch ng dn: C:\Program Files\Internet
Explorer\Iexplore.exe
- Click Open

Click OK

- Kim tra: Logon bng user kttp, m chng
trnh Internet Explorer v xut hin thng bo
li

6. Redirect th mc Document ca user ln Server
- To th mc Documents trn C:\
- Share th mc Documents cp quyn Share l Full Control cho nhm Everyone, quyn
NTFS Write cho nhm Domain Users

- Vo Run, g gpmc.msc
- Chn Default Domain Policy, click chut
phi chn Edit
- Vo theo ng dn nh hnh di v click
chut phi vo Documents chn Properties

Chn Base Redirect everyones folder to
the same location

mc Target folder Location chn Create a
folder for each user under the root path.
Trong phn Root Path: Nhp ng dn
mng lu tr th mc Documents ca User


- Click OK

- Click Yes
- Logon user administrator vo my client, chn My Document chut phi chn Properties


PHN XIV
DISTRIBUTED FILE SYSTEM

- Bi lab cn 3 my: DC, DFS1, DFS2:
Chun b 2 my Windows Server 2008, Join member domain
t tn 2 my ny ln lt l DFS1, DFS2
1. Ci Distributed File System
Vo Server Manager, click chut phi vo
Roles, chn Add Roles

Click Next

Chn File Services

- Click Next Next
- Chn Distributed File System


- Chn nh hnh di

- Click Next v Install

- Click Close
2. To Name Space Trn my DFS1
- Vo DFS Management

Click chut phi vo NameSpace, chn New
NameSpace

- Click Browse, g tn my DFS1 v nhn Check Names

- Click OK v Next
- Nhp tn Data

- Chn Edit Settings v cu hnh nh hnh di:

- Click OK v Next
- Chn Domain-Base NameSpace

- Click Next v Create
- Click Close
- Kim tra trn
my DFS1 sau khi
ci t: Trong tab
NameSpace
Servers


- M Explorer ta thy th mc RootDFS c to.

3. To thm Name Space trn my DFS2 t my DFS1
- Ci File Services Role trn DFS2 tng t nh trn DFS1

- Ci xong ta qua my DFS1 m DFS Management, chn \\Technet.com.vn\Data, click chut
phi chn Add NameSpace Server

Chn Browse, g tn my DFS2, nhn vo
Check Names OK

- Chn Edit Settings v cu hnh nh trong
hnh di:
- Click OK v OK
- Click Close
- Click Yes

- Kim tra trn c 2 Server: Ti my DFS2, m
DFS Management Name Spaces chn
Add NameSpaces to


4. To Replication Group trn my DFS1
Click vo Replication, click chut phi chn
New Replication

- Chn MultiPupose Replication group
- Click Next
Nhp Replicate Data Next

- Click Next Click Add g DFS1;DFS2
Check Names
- Click OK


Next

- Chn Full Mesh
- Click Next
Click Next

Chn DFS1, Click Next

Click Add Browse Chn th mc mun
Replicate


Click OK OK
Next
Chn Edit

Chn Enable trong phn Membership status,
click Browse chn th mc Replicate
OK

Click OK
Click Next
Click Create


Close
OK
Quan st

Khi ng li dch v DFS trn 2 my DFS1
v DFS2. Vo Run Services.msc
Restart service.

Kt ni n DFS, ta ng nhp vo My DC,
vo Run g \\technet.com.vn\Data v click
OK

To file TestDFS.txt


5. Kim tra Failover
- Tt my DFS1, t my DC truy cp li \\Technet.com.vn\Data
- To thm file TestReplicate.txt
- Bt my DFS1 ln truy cp li \\Technet.com.vn\Data thy 2 file TestDFS.txt v
TestReplicate.txt
- Tt my DFS2, t my DC truy cp li \\Technet.com.vn\Data vn thy 2 file nh trc khi
c 2 my u bt.


PHN XV
TERMINAL SERVICES

1. Remote Desktop
Logon administrator, click chut phi vo
Computer, chn Properties.

- Trong tab Remote settings, chn Allow
connections from compters running any
sersion of Remote Desktop (less secure)
- Click chn Select Users

- Click Add G u1 Check Names
- Click OK OK
- Cho php User thng Remote Desktop n
my Domain Controller
- M Group Policy Management bng cch
vo Run, g gpmc.msc. Trong Domain
Controllers, click chut phi vo Default
Domain Controllers Policy v chn Edit.


Vo theo ng dn sau:
- Double click vo Allow logon through Terminal Services. Chn Add User or Group
Browse g u1 v nhn vo Check Names. Click OK OK

OK
- T my Client vo Run, g MSTSC


Nhp IP my mun Remote Desktop v nhn
Connect.

G tn ti khon v mt khu.
OK
- Copy file qua Remote Desktop
+ Logoff session va remote
+ Vo Run, g MSTSC
+ Nhp IP my mun Remote Desktop, chn
Opions

Trong tab Local Resources, chn More

Chn Drives
OK
+ Click OK v Connect
+ Nhp Username password nh phn trn
OK
+ Kim tra: M Computer quan st


+ Vo Run g Notepad g k t bt k
2. Terminal Service Manager
- Quan st:
- Trong tab Sesstion


- Trong tab Processes ta thy u1 ang m Notepad.

- T my client tt sesstion remote desktop
- Click OK

- Kim tra Terminal Service Manager thy u1 b Disconnected


- Trong tab Processes thy u1 vn cn s dng chng trnh Notepad

- T my client Remote desktop li thy vn cn nguyn nhng chng trnh m U1 s dng
trc khi Disconnected
- Vo Start Logoff Logoff Now

- Trn my DC quan st Terminal Service Manager


- Trong tab Processes thy khng cn chng trnh Notepad v u1 s dng na.

- S khc bit gia Logoff v Disconnect session Remote Desktop:
Disconected: Cc chng trnh m user s dng khi Remote Desktop vn cn lu trn
b nh ca Server.
Logoff: Cc chng trnh user s dng s b g b khi b nh ca Server.
3. Terminal Service Configuration
- M Terminal Service Configuration

- Click chut phi vo Microsoft RDP6.1, chn Properties


Trong tab Session, chn Override user
settings

Thit lp Session sau 1 pht Disconnected s
t ng Logoff

- Thit lp Session sau 5 pht ch s t ng Disconnected

- Click OK
- Kim tra: T my Client Remote Desktop n DC, khng ng vo chut v bn phim 5
pht sau session s b Disconnect, 1 pht sau session t ng logoff.


PHN XVI
FILE SERVER RESOURCE MANAGER

1. Ci t Role File Server Resource Manager
- M Server Manager
- Vo Roles chut phi vo File Services
Add Roles Services

- Chn File Server Resource Manager
- Click Next.
Trong phn Storage Monitoring chn C: v
click Next

Click Next

Click Install

Click Close


2.To Quota cho th mc
M File Server Resource Manager

Trong Quota Management, chn Quotas
Create Quota..

- Trong Quota path click vo Browse v ch
ng dn n th mc Ketoan
- Click OK
- Trong mc Label chn Quota 5Mb v
Limit: 5 MB
- Click OK
Click Create

- Template Name: 5Mb
- Click OK

Kim tra: Copy folder c dung lng ln hn
5Mb vo th mc Ketoan

3. Cm lu file c phn m rng .exe
M File Server Resource Manager, chn
File Screening Management File Group
Create File Group..

- Trong phn File group name g: Cam file
.exe
- Trong phn File to include g: *.exe v
click add
- Click OK
Chn File Screens, click chut phi chn
Create file Screens..

Click vo Browse ch ng dn n th
mc Ketoan. Chn Define custom file screen
properties, click Custom Properties.


- Chn vo Cam File .exe nh hnh di.
- Click OK
Chn Create

- Template Name: Cam file .exe
- Click OK
Kim tra: Copy file.exe vo th mc Ketoan


PHN XVII
WINDOWS SERVER BACKUP

1. Ci Role Windows Server Backup
M Server Manager Features Add
Features

Chn Windows Server Backup
Click Next
Install

Click Close

M Windows Server Backup, click vo
START nh hnh di:

Click vo Backup One


Click Next

- Chn Full Server (Recommended)
- Click Next
Chn Remote shared Folder

Click Next v nhp ng dn
\\Technet.com.vn\Data

- Click Next, chn VSS copy backup
(Recommended)
- Click Next
Click Backup


Click Close

- Truy cp li \\Technet.com.vn\Data v quan st
2. Recover
- Trc khi Recover xa mt s file trong th
mc Data thc hin khi phuc li d liu.
- M Windows Server Backup, chn
Actions
- Chn Recover

- Chn Another Computer
- Click Next


- Chn Remote Share Folder
- Click Next
- G \\Technet.com.vn\Data
- Click Next
Chn ngy backup
- Click Next
Chn File and Folders
- Click Next
Chn th mc Data

- Click Next


Click Next

Chn Recover

- Kim tra: Cc file v folder trn th mc Data c phc hi

70 - 640 - v2 - Final

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

70 - 640 - v2 - Final

Uploaded by

Copyright:

Available Formats

TRUNG TM O TO CNG NGH THNG TI N TECHNET | www.technet.com.

You might also like