Windows Server 2003

1
Windows Server 2003?????????

• ???
• jeffl_at_ms11.hinet.net

2
What Are User Rights?
3
User Rights vs. Permissions
User Rights Actions on System
Permissions Actions on Object
4
What Is a Restricted Group Policy?

• Use restricted group policy to control membership
• Specify what members belong to a group
• Members that are not specified in the policy are
  removed during configuration or refresh
• To apply restricted group policy
• Define the policy in a security template
• - OR -
• Define the setting directly on a GPO

5
What Is Auditing?

• Auditing tracks user and operating system
  activities and records selected events in
  security logs

• Enable auditing to
• Create a baseline
• Detect threats and attacks

• Determine damages
• Prevent further damage

• Audit access to objects, management of accounts,
  and users logging on and logging off

6
What Is Audit Policy?

• An audit policy determines the security events
  that will be reported to the network
  administrator
• Set up an audit policy to
• Track success or failure of events
• Minimize unauthorized use of resources
• Maintain a record of activity
• Security events are stored in security logs

7
Best Practices for Configuring Auditing
8
Assigning Scripts by Using Group Policy
9
Assigning Group Policy Script Settings
10
What Is Folder Redirection?

• Folder Redirection enables users and
  administrators to redirect the folders to a new
  location
• The new location can be a folder on the local
  computer or a shared folder on the network
• Users can work with documents on a server as if
  the documents are located on the local drive
• Create a standard Desktop
• Reduce size of roaming profiles
• Files Are Not Saved on the
• Client Computer

11
Settings Required to Configure Folder Redirection

• Use basic Folder Redirection for
• Users who use a common area
• - or -
• Users who use private data
• With advanced Folder Redirection, the server
  hosting the folder location is based on group
  membership

12
Setting a Target Location
Use theusername variable
13
Configuring Folder Redirection Settings
14
Software Deployment Process
15
Assigning vs. Publishing Software
Software Distribution Point
16
Default Options for Software Installation
Specify the location of the software
distribution point that contains the .msi package
files
Specify how to deploy the software
Specify whether to use default values or
user-defined values
17
What Are Software Categories?
Software categories function across domains
18
What Is Software Association?
Manage application associations on a per-GPO basis
19
What Is Software Modification?
Single instance on server
You can add and remove modifications only during
deployment of a software package
20
Types of Software Upgrades
Deploy next version of the application
21
How Software Redeployment Works
22
Methods for Removing Deployed Software