Module 8: Remote Administration of Shared Folders Contents Overview Introduction to Monitoring Shared Folders Monitoring Access to Shared Folders on Remote Computers Administering Shared Folders on Remote Computers Lab A: Administering Shares on a Remote Computer 16 Review 24 This course is a prerelease course and is based on Microsoft Windows 2000 Beta software Content in the final release of the course may be different than the content included in this prerelease version All labs in the course are to be completed using the Beta version of Microsoft Windows 2000 Advanced Server Information in this document is subject to change without notice The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted Complying with all applicable copyright laws is the responsibility of the user No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property  1999 Microsoft Corporation All rights reserved Microsoft, MS-DOS, MS, Windows, PowerPoint, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted Other product and company names mentioned herein may be the trademarks of their respective owners Project Lead/Senior Instructional Designer: Red Johnston Instructional Designers: Tom de Rose (S&T OnSite), Meera Krishna (NIIT (USA) Inc.) Program Manager: Jim Cochran (Volt Computer) Lab Simulations Developers: David Carlile (ArtSource), Tammy Stockton (Write Stuff) Technical Contributor: Kim Ralls Graphic Artist: Julie Stone (Independent Contractor) Editing Manager: Tina Tsiakalis Editors: Wendy Cleary (S&T OnSite), Diana George (S&T OnSite) Online Program Manager: Nikki McCormick Online Support: Tammy Stockton (Write Stuff) Compact Disc Testing: ST Labs Production Support: Rob Heiret, Ismael Marrero, Mary Gutierrez (Wasser) Manufacturing Manager: Bo Galford Manufacturing Support: Mimi Dukes (S&T OnSite) Lead Project Manager, Development Services: Elaine Nuerenberg Lead Product Manager: Sandy Alto Group Product Manager: Robert Stewart Module 8: Remote Administration of Shared Folders iii Introduction Presentation: 60 Minutes Lab: 30 Minutes This module provides students with the knowledge and skills that are necessary to monitor and administer shared folders on local and remote computers The module discusses how to use Computer Management to view a list of all shared folders on a computer and the users who have established active sessions on the computer The module also explains how to share a folder on a remote computer and modify permissions for it Finally, the module covers the procedures to send administrative messages to users and disconnect them from sessions and open files on a remote computer There is one lab in this module In it, students will access a share on a remote computer and modify its properties Then, they will change the NTFS file system permissions on a shared folder, disconnect users from a shared folder, and share a folder on a remote computer Materials and Preparation This section provides you with the materials and preparation needed to teach this module Materials To teach this module, you need the following materials: !" Microsoft® PowerPoint® file 1556A_08.ppt !" Module 8, “Remote Administration of Shared Folders” Preparation To prepare for this module, you should: !" Read all the materials for this module Some topics have animated slides that are indicated by an icon in the lower left corner of the slide These slides require you to click them to play the animation !" Review the Delivery Tips and Key Points for each section and topic !" Complete the lab !" Study the review questions and prepare alternative answers for discussion !" Anticipate questions that students may ask Write out the questions and provide answers to them iv Module 8: Remote Administration of Shared Folders Module Strategy Use the following strategy to present this module: !" Introduction to Monitoring Shared Folders Discuss the importance of monitoring shared resources on local and remote computers in order to maintain the security of the network Explain how Microsoft Windows® 2000 provides the Computer Management tool for this task Define the following terms: shares, sessions, and open files !" Monitoring Access to Shared Folders on Remote Computers Demonstrate the procedure to connect to a remote computer by using the animated slide provided in the topic on connecting to a remote computer Then demonstrate how to view information on shared folders, sessions, and open files on a remote computer For each of these tasks, explain the information that is displayed !" Administering Shared Folders on Remote Computers Discuss the procedures to share a folder on a remote computer and modify permissions to it Then explain the need to send administrative messages to users after permissions to a shared folder are modified, and demonstrate the procedure to so Finally, introduce the reasons for disconnecting users from active sessions Open files and walk students through the procedures to perform these tasks Module 8: Remote Administration of Shared Folders Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on the student computers during the labs This information is provided to assist you in replicating or customizing this module with other Microsoft Official Curriculum (MOC) courseware Important The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for course 1556A, Administering Microsoft Windows 2000 Lab Setup There are no setup requirements for the lab in this module Lab Results Performing the lab in this module introduces the following configuration change: !" The addition of the MOC\NT1556A\Labfiles\Public shared folder on drive C v Module 8: Remote Administration of Shared Folders Overview Slide Objective To provide an overview of the module topics and objectives Lead-in In this module, you will learn how to monitor and administer shared folders on remote computers ! Introduction to Monitoring Shared Folders ! Monitoring Access to Shared Folders on Remote Computers ! Administering Shared Folders on Remote Computers Network resources that multiple users use are typically installed in a central location These locations are then shared, and individual users access the resources from the shares A share is the term for a shared location such as a folder or root directory in a partition As a system administrator, you need to monitor the usage of shares regularly to identify the shares that users access most often and to perform maintenance tasks Also, to maintain the security of the network, you must be aware of every share that users access This will ensure that only authorized users are accessing network resources Microsoft® Windows® 2000 provides the ability to administer shared folders on both local and remote computers A local computer is one at which you are present physically, and every other computer on the network is a remote computer This means that a remote computer can be located next to your local computer or at the other end of the network In this module, you will learn about the administrative tasks that you will perform on shared folders At the end of this module, you will be able to: !" Monitor shared folders !" Administer shared folders Module 8: Remote Administration of Shared Folders Introduction to Monitoring Shared Folders Slide Objective ! Administer Shared Folders on Local or Remote Computers To introduce Computer Management Lead-in Windows 2000 provides the Computer Management tool to administer shared folders on local and remote computers Shared Folders Shares Log On Sessions ! Monitor and Administer Active Sessions Open Files Open ! Administer Delivery Tip Explain the following terms: shares, shared folders, sessions and open files Open Computer Management and point out the three subfolders under the Shared Folders folder Open Files on a Share To monitor and administer shares on local and remote computers, Windows 2000 provides Computer Management You can use Computer Management to view information on shared folders and perform tasks such as modifying permissions assigned to shared folders and determining the number of users accessing each shared folder To access Computer Management, on the Start menu, point to Administrative Tools, and then click Computer Management In the Computer Management window that appears, expand System Tools Notice the Shared Folders folder in the expanded items Expand the Shared Folders folder to display the subfolders contained in it Using the Shared Folders folder, you can view a summary of connections and resource use for local and remote computers The Shared Folders folder contains three subfolders: Shares, Sessions, and Open Files Using the Shares subfolder, you administer the shares on a local or remote computer On shared folders you can perform tasks such as sharing an existing folder and setting permissions for a shared folder Using the Sessions subfolder, you can administer user sessions A session is defined as active when a user logs on to a computer from another computer Computer Management provides the capability to view a list of all active sessions on a computer and the users who have activated those sessions Using the Open Files subfolder, you can administer the files on shared folders that users open You can identify the users accessing specific files at given times to determine whether all of them are authorized to so Module 8: Remote Administration of Shared Folders # Monitoring Access to Shared Folders on Remote Computers Slide Objective To introduce monitoring access to shared folders and open files on remote computers Lead-in You can monitor shared folders and open files on remote computers Delivery Tip This section explains using Computer Management to monitor shared folders Prepare students for the topics by providing the following key points of information Key Points You can monitor and administer any computer from a single location in the network You can monitor shared folders, user sessions and open files on any computer to view information about the users accessing the computer ! Connecting to a Remote Computer ! Monitoring Shares on a Remote Computer ! Monitoring User Sessions on a Remote Computer ! Monitoring Open Files on a Remote Computer You need to monitor shared folders to identify the number of users accessing them If a large number of users access the same folder, the rate at which information can be accessed from the shared folder will decrease To maintain an optimal rate of information access and prevent congestion, you must share the information from another location as well To so, you need to create a copy of the shared information on another folder in a different computer and then share that folder You can monitor the sessions that are activated when users establish connections to a remote computer Also, you can monitor open files to determine which users are gaining access to the files in a shared folder and the identity of those users Module 8: Remote Administration of Shared Folders Connecting to a Remote Computer Slide Objective To explain how to connect to a remote computer Lead-in Windows 2000 provides the capability to administer computers without your having to be physically located at them compmgmt - [Computer Management (Local)] Action View compmgmt - [Computer Management (DENVER)] Name Computer Management (Local) System Tools Connect to another computer … Connect to another computer Storage Name Computer Management (DENVER) Server Applications and Services All Tasks System Tools System Tools View Storage Storage Export List… Server Applications and Services Server Applicatio Properties Help Delivery Tip The slide for this topic is animated The icon on the lower left corner indicates the animated slide Use the slide to demonstrate the procedure to connect to a remote computer In a large network, the ability to administer computers without having to be present at their physical locations simplifies administration greatly With Windows 2000, you can administer computers and resources such as shared folders from a remote location To administer remote resources, you first need to connect to the remote computer on which the resources are located To connect to a computer at a remote location: In the Computer Management window, right-click Computer Management (Local) and then click Connect to another computer In the Select Computer dialog box, click the remote computer to which you need to connect, and then click OK Notice that Computer Management (Local) now reads Computer Management (Remote computer name) This indicates that you can now perform tasks on the remote computer as if you were working on it locally 12 Module 8: Remote Administration of Shared Folders To modify share permissions for a shared folder on a remote computer: In the Properties dialog box for the remote share, click the Share Permissions tab Specify which of the share permissions—Full Control, Change, or Read— you need to allow or deny to each user by selecting the appropriate check boxes Note You can modify NTFS permissions only for shared folders on NTFS partitions To modify NTFS permissions for a shared folder on a remote computer: In the Properties dialog box for the remote share, click the Security tab Specify which of the NTFS permissions that you need to allow or deny to each user by selecting the appropriate check boxes Note Permissions on shared folders are not effective until a user accesses the shared folder over the network Module 8: Remote Administration of Shared Folders 13 Sending Administrative Messages to Users Slide Objective To describe how to send administrative messages to users and the reasons for doing so Send Console Message Message: Lead-in This server will shut down in minutes for maintenance Please save all work in progress and then disconnect You may lose data if your files are open when the server is shut down You can send administrative messages to users and computers Send Cancel Recipients: DENVER Add VANCOUVER NORTHAMERICA Delivery Tip Provide a scenario when administrative messages are sent to users For example, before disconnecting open files and sessions to change permissions to a shared folder, you send a message to inform users about the event Remove You can send administrative messages to one or more users or computers If there is going to be a disruption to a computer on which network resources are shared, you should send administrative messages to users with current connections to the computer Some common reasons for sending administrative messages are to notify users when you intend to: !" Perform a backup or restore operation !" Disconnect users from a resource !" Upgrade software or hardware !" Shut down the computer To send an administrative message to users accessing a remote computer: In the Computer Management window, on the Action menu, click Send Console Message In the Send Console Message dialog box, type the message that you want to send By default, all currently connected computers appear in the list of recipients to which you can send a message You can add other users or computers to this list by using the Add button, and you can remove users and computers from the list by using the Remove button Click Send Using this method, you can send messages only to those users who are connected to a remote computer To send a message to all users on the network, use the net send command To send a message to all users on the network: • At a command prompt, type net send /domain:domain_name message This command is useful in large network environments where administrative messages about the status of servers must be sent to all users on the network 14 Module 8: Remote Administration of Shared Folders Disconnecting User Sessions on a Remote Computer Slide Objective To describe how to disconnect users from sessions on a remote computer and to explain the reasons for doing so compmgmt - [Computer Management (DENVER)\System Tools\Shared Folders\Sessions] Action View Computer Management (DENVER) System Tools Performance Logs and Alerts Local Users and Groups System Information Services Shared Folders Shares Sessions Sessions Open Files Event Viewer Device Manager Storage Server Applications and Services Lead-in You can disconnect users who have network connections to a remote computer Delivery Tip Provide a scenario when user sessions are disconnected For example, to help multiple users access a server with limited licenses, you should monitor all sessions and close idle sessions User Judyl Computer Type Open Files Connected Idle LONDON Windows 12:05:27 AM 12:0 Close Session Open File Close All Tasks Refresh Help You can disconnect one or all users with network connections to a remote computer Disconnect users when you want to: !" Have changes to shared folder permissions and NTFS permissions on a remote computer take effect immediately A user retains all permissions for a shared resource that were assigned when the user connected to the resource These permissions are evaluated again the next time that a user makes a connection !" Free idle connections on a remote computer so that other users can make connections if the maximum number of connections has been reached Important After you disconnect a user, the user can immediately make a new connection If the user gains access to a shared folder from a Windows-based client computer, the client computer will automatically reestablish the connection with the shared folder It will so without user intervention unless you change the permissions to prevent the user from gaining access to the shared folder or you stop sharing the folder to prevent any user from gaining access to the shared folder To disconnect a single user from a shared file on a remote computer, connect to the remote computer, and, in the Sessions folder in the Computer Management window, right-click the user name and click Close Session To disconnect all users from a specific share, right-click the Sessions folder, and then click Disconnect All Sessions Caution To prevent data loss, always notify users when a computer on which network resources are shared will be out of service Additionally, make sure that no users are in the process of gaining access to shared folders or files when you stop sharing a folder or shut down the computer ... will perform on shared folders At the end of this module, you will be able to: !" Monitor shared folders !" Administer shared folders Module 8: Remote Administration of Shared Folders Introduction... iv Module 8: Remote Administration of Shared Folders Module Strategy Use the following strategy to present this module: !" Introduction to Monitoring Shared Folders Discuss the importance of. .. all of them are authorized to so Module 8: Remote Administration of Shared Folders # Monitoring Access to Shared Folders on Remote Computers Slide Objective To introduce monitoring access to shared