Active Directory (AD)

• NTDS.DIT is in winnt\system32
• Now you can put machines into groups
• You cannot apply policies to groups, just to organizational units
• Groups
  1. Machine local groups - Pretty much unchanged from NT Workstation
  2. Domain local groups. Local groups, just as they are on a domain controller. See domain local groups Administrators, Backup Operators, etc. by running dsa.msc. Note: you cannot use the local users and groups snap-in aster the computer becomes a domain controller.
  3. Domain global groups - can still only be made on domain controllers and put into local groups. Can contain users and other global groups.
  4. Universal groups - can contain any global or universal group from any domain in the forest, but not from outside the forest. All new Windows 2000 domains start up in mixed mode and will not create universal groups.
• AD Users and Conputers pre-installed groups - these are legacy containers from NT4 networks.
  1. Builtin - local groups from NT
  2. Computers
  3. Domain Controllers
  4. ForeignSecurityPriniciples
  5. Users
• You can create users at any level you like and then move them to OUs by right clicking and selecting "move."
• User names
  1. look like email addresses
  2. unique to the domain
  3. different from group names
  4. 20 characters (just the first part) You can make them longer but it truncates them at 20 for the legacy name part.
  5. No special characters, but can use spaces
  6. Right-clicking the user name lets you change almost anything you want about an account.
  7. You add the user to groups after the account is created.
• Put Accounts into Global groups, place global groups into Domain Local groups, and assign Permissions to Domain Local groups.

Bootable Drive Image CD

Install Drive Image Pro. It gives you several choices of boot disks, including 3 types of network capable ones and a standalone one. Choose the standalone one and make the two disks. Throw #2 away.

The problem with the disk you just made is that it doesn't access the CDROM. In order to get it to do that you have to add 2 things and edit 2 things.
1. From a Windows boot disk, copy MSCDEX.EXE to the floppy. These are the CD extensions.
2. You also need a cd driver. Make a folder on the floppy and name it CDROM. Inside put the TRICD.SYS driver, as it has worked with every CD drive I've ever tried. Windows 98 has the OAKCDROM.SYS driver on it, and it works great, too, so you could, I think, put that one in there.

After those two things are added, it's time to do a little editing.
1. Make your autoexec.bat look like this (the part I added is in red):

@ECHO OFF
@PROMPT $P$G
pqpacket
mouse
A:\MSCDEX.EXE /D:TSYCD1 /L:Z
ECHO.
ECHO.
ECHO This custom bootdisk was made by Glenn Evanish.
ECHO.
ECHO Drive Image will load automatically.
ECHO.
ECHO There are more instructions coming soon.
ECHO.
ECHO.
ECHO Drive Image will start soon. Get ready...
pqdi

After it starts pqpacket and the mouse, I had it start MSCDEXE. I don't know what /D:TSYCD1means. /L:Z makes the CDROM drive Z:\ drive - a safe bet for an unchanging drive letter. You can echo anything you want to the screen. Finally it starts pqdi.

2. Make your config.sys look like this (the part I added is in red):
DEVICE=HIMEM.SYS
FILES=60
STACKS=0,0
BUFFERS=30
LASTDRIVE=Z
DEVICE=A:\CDROM\TRICD.SYS /PS DMA=NO /D:TSYCD1

You can see that it calls the driver that's in the CDROM folder. I don't know or care about the rest. It works.

Now to make a bootable CD with that, you use Easy CD Creator 4.
1. Click the triangle next to "New" and choose bootable CD. It will ask you for the boot disk. Stick it in and it will create 2 files which will appear in the CD Layout Window called BOOTCAT.BIN and BOOTIMG.BIN. Those are all you need.

2. Add the Drive Image image that you want to restore.

3. Click the Record button on the toolbar to create your bootable CD. It will load pqdi automatically, and you install the image from within the program.

For more information, there is a big tutorial at http://members.ozemail.com.au/~rossstew/drs/bootcd.html#contents

Boot floppy for W2K/XP

If your startup files get hosed, you can use a Linux-style boot floppy with the startup files on it. It doesn't actually boot off of it; it just gets you through to the OS.

Make one like so:

XCOPY c:\boot.ini a:\boot.ini /H
XCOPY c:\ntldr a:\ntldr /H
XCOPY c:\NTDETECT.COM a:\NTDETECT.COM /H

Once in, you can do

XCOPY A:\*.* C:\ /H

Remember that the command console also has FIXBOOT.

Mirror C: Drive - Disk images have a habit of crashing on startup. Here's how I got a disk image to work:

• Installed Win2000 to put it in the MBR. This might have been a waste of time, considering the blue screen I got for my trouble.
• Made disk image on FAT partition of HD with Drive Image 2002
• Booted floppy version of pqdi and brought it back onto the disk.
• Watched it crash on bootup
• Rebooted in safe mode (F8) and it went through OK
• Put the Win2K disk in the CD and clicked to I386/winnt32.exe Just clicked - no command line stuff
• It asked me if I wanted to upgrade. Yes.
• It did a reinstall. It stopped and asked me if I wanted to put in drivers for the scsi and net card and asked for the floppy with the Tekram card driver
• When it finally finished, it was fixed. It said I had to reinstall Office on bootup, but that was it.

How can I:

Configure alerts - Administrative Tools | Computer Management | Performance Logs and Alerts

Boot - Set default - Control Panels | System | Advanced | Startup and Recovery

Boot Options - Hit F8 on boot up for these menus.

Add DNS, WINS, DHCP - Control panel | Add/Remove Programs | Add/Remove Windows components

Convert FAT or FAT32 to NTFS - If you want to convert drive C: to NTFS, type
convert c: /fs:ntfs

Disks - rescan in case you forgot to turn on the MO before booting
MMC | Storage | Disk Management | Action | Rescan all disks

Disks - defragment You can defrag disks (evan zips) using Acessories | System Tools | Disk Defragmenter

Configure DNS, WINS, DHCP - Control panel | Network and Dial-up Connections | Local Area Connections | Properties | TCP/IP | Properties | Advanced

Add a Domain Controller Account - Run DCPROMO.exe

Domains in forest - see - You can see all domains in the forest by running domain.msc.

ERD - You no longer type RDISK from run. You need to install the Recovery Console first.

1. Put in the CD and cd into the i386 directory. Run winnt32.exe /cmdcons
2. Reboot
3. Go into Accessories | System Tools | Backup
4. Click the ERD button

You can get all the information from old WINMSD and more in Administrative tools | Computer Management | System Information

Install a protocol - Control panel | Network and Dial-up Connections | Local Area Connections | Properties | Install | Protocol

Install/Remove/Troubleshoot a device - Right click My Computer | Manage | Device Manager OR Control Panel | Add/Remove Hardware

Install a network card - Control Panel | Add/Remove Hardware
OR Control Panel | System | Hardware | Hardware Wizard

Install a System Unattended -

• Create a folder on your HD and name it sysprep. Copy all the files from \support\tools\deploy.cab on your CD into that folder.
• Click on setupmgr.exe and work through the options. This will produce files named Unattend.txt and Unattend.udf. The ones I made for IEC read like this:

  Unattend.txt read:

  ;SetupMgrTag
  [Data]
  AutoPartition=1
  MsDosInitiated="0"
  UnattendedInstall="Yes"

[Unattended]
UnattendMode=ReadOnly
OEMSkipEula=Yes
OemPreinstall=No

[GuiUnattended]
AdminPassword=<password>
TimeZone=235
OEMSkipWelcome=1

[UserData]
FullName=IEC
OrgName="Nichibei Kaiwa Gakuin"
ComputerName=*

[Display]
BitsPerPel=15
Xresolution=800
YResolution=600

[URL]
Title1="Computer Room Rules"
URL1=http://www.iec-nichibei.or.jp/Desktop.html

[SetupMgr]
ComputerName0=29
ComputerName1=30
ComputerName2=31
ComputerName3=32

[Identification]
JoinWorkgroup=WORKGROUP

[Networking]
InstallDefaultComponents=Yes

Unattend.udf read like this, because the computer room computers were to begin with 29:

;SetupMgrTag
[UniqueIds]
29=UserData
30=UserData
31=UserData

[29:UserData]
ComputerName=29

[30:UserData]
ComputerName=30

[31:UserData]
ComputerName=31

• Save the above files to a floppy.
• Boot off a DOS floppy. Once booted, change and put in the floppy with the files above on it.
• Run the following command:

  winnt /u:a:\unattend.txt /s:z:\i386 /t:c:\

• The setup program will begin, and it will unfortunately copy all files to disk first, wasting a lot of time. On reboot, it will look for the Unattend.txt file on the floppy.

Create Partitions (Old Disk Administrator) - Administrative tools | Computer Management | Storage Can be done on clients remotely from server.

Change IP number - Control panel | Network and Dial-up Connections | Local Area Connections | TCP/IP | Properties

Server Manager is still available if you go to Start | Run | srvmgr.exe

Stop and Start services in Administrative Tools | Services You can also check dependencies and set failure options.

Services - install networking services (WINS, DHCP, DNS, etc) in Control Panel | Add/Remove Programs | Add/Remove Windows components | Networking services

Registry - Backup

• The backup utility is in Accessories | System Tools. After it opens, the top tab is backup and the middle one is restore. The bottom is the ERD.
• After the wizard starts, the top choice is a full backup, the middle is partial, and the bottom is System State (registry)
• These backups can be huge - 208 MB on a new system.
  
• These backups can be scheduled.

Otherwise you can run regedit and got to Registry | Export registry file. The same system produced an 11 MG file doing this.

Create a share - Administrative Tools | Computer Management | click Shared Folders | Right click icons on right | New

Add a local user - Control panel Users and Passwords | Add -OR- right-click My Computer | Manage | Local Users and Groups | Right click on Users

Network Command-Line Commands

Nbtstat –a pentiumwkstn = gives NetBIOS remote machine name table

Name Type Status
PENTIUMWKSTN <00> UNIQUE Registered
DOMAIN <03> GROUP Registered
(Etc.)
MAC address = 00-60-97-AF-5A-0E

netstat –A 192.168.1.2 gives the same thing

nbtstat –c (C is for cache) Lists the remote name cache including the IP address

Name Type Host Address Life [sec]
PENTIUMSERVER <00> UNIQUE 192.168.1.2 240
PENTIUMWKSTN <00> UNIQUE 192.168.1.2 300
Nbtstat –n (N is for names) Lists local NetBIOS names
Name Type Status
PENTIUM2 <00> UNIQUE Registered
DOMAIN <20> GROUP Registered

Nbtstat –r (r means resolved) Lists names resolved by broadcast and via WINS
NetBIOS names resolution and registration statistics

Resolved by Broadcast = 0
Resolved by Name Server = 5

Nbtstat –R (R means Reload) Purges and reloads LMHOSTS

Nbtstat –S (S means sessions)

NetBIOS connection table
Local Name State In/Out Remote Host Input Output
PENTIUM2 <00> Connected Out 192.168.1.1 266B 434B
GLENN <03> Listening In

Netstat –a (a means all) Displays all connections and listening ports. (Server-side connections are normally not shown).

Active Connections
Proto Local Address Foreign Address State
TCP pentium2:1284 0.0.0.0:18510 LISTENING
UCP pentium2:1020 *:*

Netstat –e (e means ethernet)

Interface Statistics
Received Sent
Bytes 3863460 4622738
Unicast packets 27238 27371
Non-unicast packets 389 297
Discards 0 0
Errors 0 0
Unknown protocols 0 0

Netstat –n (n means numerical) Displays addresses and port numbers in numerical form

Active Connections
Proto Local Address Foreign Address State
TCP 127.0.0.1:1029 127.0.0.1:1042 ESTABLISHED
TCP 192.168.1.1:139 192.168.1.2:1025 ESTABLISHED

Netstat –p proto Name the protocol you want and it gives you statistics.

Netstat –p TCP
Active Connections
Proto Local Address Foreign Address State
TCP pentium2:1029 localhost:1042 ESTABLISHED
TCP pentium2:nbsession pentium2:1693 ESTABLISHED
TCP pentium2:nbsession pentium.domain.cxm:1063 ESTABLISHED

Netstat –r (r means route) Displays the routing table

Active Routes:
Network Address Netmask Gateway Address Interface Metric
127.0.0.0 255. 0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.1 192.168.1.1 1
192.168.1.1 255.255.255.255 127.0.0.1 127.0.0.1
ETC.
Active Connections
Proto Local Address Foreign Address State
TCP pentium2:1029 localhost:1042 ESTABLISHED
TCP pentium2:nbsession pentium.domain.cxm:1025 ESTABLISHED
Etc.

Netstat –e –s –p TCP This will show statistics for TCP, including Interface statistics, TCP statistics, and Active Connections. These are since the last reboot.

IPCONFIG only has /all /renew and /release

Nslookup

–d Lists all records for the DNS domain.
-s Lists well-known services of computers in the DNS domain.

Recovery Console - Install recovery console with <CDdrive>:\I386\winnt32 /cmdcons

After you have installed the recovery console, it becomes available on the boot loader window. It is a command line utility. Commands you can run:

• attrib
• batch
• cd
• chkdsk
• cls - wipes the screen clear of any previous output
• copy or extract
• dir
• disable - disables the named service or driver
• enable - enables the named service or driver
• diskpart - replaces fdisk
• fixboot - writes a new boot sector on the system partition
• fixmbr - Writes a new MBR on for the partition boot sector
• format
• listsvc - lists all services running on the installation
• logon - select the installation you want to repair
• map - displays drive letter mappings currently in place (for use with diskpart)
• mkdir
• more, type
• rd or rmdir
• rename or ren
• Systemroot - makes the current directory the system root, whatever that means
• Extract - extracts a cab file (works only if you're running it from the install disk)

map [enter] will show all partitions. Then you can run format g: [/q] [fs:filesystem]
/q = quick format The default is ntfs if you don't specify a filesystem.

exit gets you out of the console.

Sound for Room 17 Global English

• Bring back sound panel Tweakui.cpl | Control Panel | mmsys.cpl
• Start | Accessories | entertainment | Sound Recorder | henshu menu | audio properties | rokuon | onryou | click the mike on ryou menu menu and set slider to medium
• Right click on sound icon in sustem tray | open volume control panel | options menu | properties | Make sure mide is checked in the scroll box | click rokuon and OK

System properties has five tabs:

1. General - Info about computer (can't change)
2. Network Identification - change workgroup and computer name, Network ID
3. Hardware - Hardware wizard, Device Manager, Hardware profiles
4. User Profiles - can change to roaming profiles here
5. Advanced -
   a. Performance - change application response and virtual memory
   b. Environment variables - can see shich partition Winnt is on now
   c. Startup and Recovery - Change which system boots as the default (edit boot.ini) and set memory dumps