Module 8: Remote Administration of Shared Folders

Then demonstrate how to view information on shared folders, sessions, and open files on a remote computer.. Introduction to Monitoring Shared Folders Shared Folders Shares Sessions Open

Contents

Overview 1

Introduction to Monitoring Shared Folders 2

Monitoring Access to Shared Folders on

This course is a prerelease course and is based on

Microsoft Windows 2000 Beta 3 software Content in the

final release of the course may be different than the content

included in this prerelease version All labs in the course

are to be completed using the Beta 3 version of

Microsoft Windows 2000 Advanced Server

Module 8: Remote Administration of Shared Folders

purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property

 1999 Microsoft Corporation All rights reserved

Microsoft, MS-DOS, MS, Windows, PowerPoint, and Windows NT are either registered

trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries

The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted

Other product and company names mentioned herein may be the trademarks of their respective owners

Project Lead/Senior Instructional Designer: Red Johnston

Instructional Designers: Tom de Rose (S&T OnSite), Meera Krishna (NIIT (USA) Inc.) Program Manager: Jim Cochran (Volt Computer)

Lab Simulations Developers: David Carlile (ArtSource), Tammy Stockton (Write Stuff) Technical Contributor: Kim Ralls

Graphic Artist: Julie Stone (Independent Contractor)

Editing Manager: Tina Tsiakalis

Editors: Wendy Cleary (S&T OnSite), Diana George (S&T OnSite)

Online Program Manager: Nikki McCormick

Online Support: Tammy Stockton (Write Stuff)

Compact Disc Testing: ST Labs

Production Support: Rob Heiret, Ismael Marrero, Mary Gutierrez (Wasser)

Manufacturing Manager: Bo Galford

Manufacturing Support: Mimi Dukes (S&T OnSite)

Lead Project Manager, Development Services: Elaine Nuerenberg

Lead Product Manager: Sandy Alto

Group Product Manager: Robert Stewart

Introduction

This module provides students with the knowledge and skills that are necessary

to monitor and administer shared folders on local and remote computers The module discusses how to use Computer Management to view a list of all shared folders on a computer and the users who have established active sessions on the computer The module also explains how to share a folder on a remote computer and modify permissions for it Finally, the module covers the procedures to send administrative messages to users and disconnect them from sessions and open files on a remote computer

There is one lab in this module In it, students will access a share on a remote computer and modify its properties Then, they will change the NTFS file system permissions on a shared folder, disconnect users from a shared folder, and share a folder on a remote computer

Materials and Preparation

This section provides you with the materials and preparation needed to teach this module

Materials

To teach this module, you need the following materials:

!"Microsoft® PowerPoint® file 1556A_08.ppt

!"Module 8, “Remote Administration of Shared Folders”

Preparation

To prepare for this module, you should:

!"Read all the materials for this module Some topics have animated slides that are indicated by an icon in the lower left corner of the slide These slides require you to click them to play the animation

!"Review the Delivery Tips and Key Points for each section and topic

!"Complete the lab

!"Study the review questions and prepare alternative answers for discussion

!"Anticipate questions that students may ask Write out the questions and provide answers to them

Presentation:

60 Minutes

Lab:

30 Minutes

Module Strategy

Use the following strategy to present this module:

!"Introduction to Monitoring Shared Folders Discuss the importance of monitoring shared resources on local and remote computers in order to maintain the security of the network Explain how Microsoft Windows® 2000 provides the Computer Management tool for this task Define the following terms: shares, sessions, and open files

Demonstrate the procedure to connect to a remote computer by using the animated slide provided in the topic on connecting to a remote computer Then demonstrate how to view information on shared folders, sessions, and open files on a remote computer For each of these tasks, explain the information that is displayed

!"Administering Shared Folders on Remote Computers Discuss the procedures to share a folder on a remote computer and modify permissions to it Then explain the need to send administrative messages to users after permissions to a shared folder are modified, and demonstrate the procedure to do so Finally, introduce the reasons for disconnecting users from active sessions Open files and walk students through the procedures to perform these tasks

Customization Information

This section identifies the lab setup requirements for a module and the configuration changes that occur on the student computers during the labs This information is provided to assist you in replicating or customizing this module with other Microsoft Official Curriculum (MOC) courseware

The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at

the end of the Classroom Setup Guide for course 1556A, Administering

Overview

Computers

Network resources that multiple users use are typically installed in a central location These locations are then shared, and individual users access the resources from the shares A share is the term for a shared location such as

a folder or root directory in a partition

As a system administrator, you need to monitor the usage of shares regularly

to identify the shares that users access most often and to perform maintenance tasks

Also, to maintain the security of the network, you must be aware of every share that users access This will ensure that only authorized users are accessing network resources

Microsoft® Windows® 2000 provides the ability to administer shared folders on both local and remote computers A local computer is one at which you are present physically, and every other computer on the network is a remote computer This means that a remote computer can be located next to your local computer or at the other end of the network

In this module, you will learn about the administrative tasks that you will perform on shared folders At the end of this module, you will be able to:

!"Monitor shared folders

!"Administer shared folders

In this module, you will learn

how to monitor and

administer shared folders on

remote computers

Introduction to Monitoring Shared Folders

Shared Folders Shares Sessions Open Files

!Administer Shared Folders

on Local or Remote Computers

!Monitor and Administer Active Sessions

!Administer Open Files on a Share

Log On

Open

To monitor and administer shares on local and remote computers, Windows 2000 provides Computer Management You can use Computer Management to view information on shared folders and perform tasks such as modifying permissions assigned to shared folders and determining the number

of users accessing each shared folder

To access Computer Management, on the Start menu, point to Administrative

Tools, and then click Computer Management In the Computer Management

window that appears, expand System Tools Notice the Shared Folders folder

in the expanded items Expand the Shared Folders folder to display the subfolders contained in it Using the Shared Folders folder, you can view a summary of connections and resource use for local and remote computers The Shared Folders folder contains three subfolders: Shares, Sessions, and Open Files Using the Shares subfolder, you administer the shares on a local or remote computer On shared folders you can perform tasks such as sharing an existing folder and setting permissions for a shared folder

Using the Sessions subfolder, you can administer user sessions A session is defined as active when a user logs on to a computer from another computer Computer Management provides the capability to view a list of all active sessions on a computer and the users who have activated those sessions Using the Open Files subfolder, you can administer the files on shared folders that users open You can identify the users accessing specific files at given times to determine whether all of them are authorized to do so

Slide Objective

To introduce Computer

Management

Lead-in

Windows 2000 provides the

Computer Management tool

to administer shared folders

on local and remote

computers

Delivery Tip

Explain the following terms:

shares, shared folders,

sessions and open files

Open Computer

Management and point out

the three subfolders under

the Shared Folders folder

# Monitoring Access to Shared Folders on

Remote Computers

You need to monitor shared folders to identify the number of users accessing them If a large number of users access the same folder, the rate at which information can be accessed from the shared folder will decrease To maintain

an optimal rate of information access and prevent congestion, you must share the information from another location as well To do so, you need to create a copy of the shared information on another folder in a different computer and then share that folder

You can monitor the sessions that are activated when users establish connections to a remote computer Also, you can monitor open files to determine which users are gaining access to the files in a shared folder and the identity of those users

Slide Objective

To introduce monitoring

access to shared folders

and open files on remote

computers

Lead-in

You can monitor shared

folders and open files on

remote computers

Delivery Tip

This section explains using

Computer Management to

monitor shared folders

Prepare students for the

topics by providing the

following key points of

information

Key Points

You can monitor and

administer any computer

from a single location in the

network

You can monitor shared

folders, user sessions and

open files on any computer

to view information about

the users accessing the

computer

Connecting to a Remote Computer

compmgmt - [Computer Management (Local)]

System Tools Storage Server Applications and Services

Action View

Computer Management (Local) Name

Connect to another computer … All Tasks

View Export List…

Properties Help

Connect to another computer

compmgmt - [Computer Management (DENVER)]

Computer Management (DENVER)

System Tools Storage Server Applications and Services

System Tools Storage Server Applicatio Name

In a large network, the ability to administer computers without having to be present at their physical locations simplifies administration greatly With Windows 2000, you can administer computers and resources such as shared folders from a remote location

To administer remote resources, you first need to connect to the remote computer on which the resources are located

To connect to a computer at a remote location:

1 In the Computer Management window, right-click Computer Management

(Local) and then click Connect to another computer

2 In the Select Computer dialog box, click the remote computer to which you need to connect, and then click OK

Notice that Computer Management (Local) now reads Computer Management

(Remote computer name) This indicates that you can now perform tasks on the

remote computer as if you were working on it locally

The slide for this topic is

animated The icon on the

lower left corner indicates

the animated slide Use the

slide to demonstrate the

procedure to connect to a

remote computer

Monitoring Shares on a Remote Computer

compmgmt - [Computer Management (DENVER)\System Tools\Shared Folders\Shares]

Action View Computer Management (DENVER) System Tools

Performance Logs and Alerts Local Users and Groups System Information Services Shared Folders

Shared Folder

Event Viewer Device Manager Storage Server Applications and Service

Shares

Shared Path

Sessions Open Files

Public

SYSVOL

D:\WINNT C:\

Windows

Windows

0 0 0 3 0 0

2

0 Type # Cli

As the administrator, you have the ability to view all shares on the network, including hidden shares This helps you monitor all the shares on the network

to ensure network security Also, monitoring the shares helps you to determine whether any share on a server is being accessed by a large number of users If

it is, you must take appropriate action to reduce the load on the server

To view information about remote shared folders:

1 Connect to the remote computer on which the remote shared folder is located

2 In the Computer Management window, expand System Tools, expand

Shared Folders, and then click Shares The details pane displays

information on all shares

The following table describes the information available on the shared folders

Column name Description Shared Folder The name given to the folder when it was shared

Shared Path The path to the shared folder

Type The type of network connection used to access the remote

computer, either Windows, NetWare or Macintosh

# Client Redirections

The number of users who have made connections to the shared folder

Comment Comment about the folder provided when the folder was shared

Windows 2000 does not update the list of shares, open files, and user

sessions automatically To update these lists, on the Action menu, click

Monitoring User Sessions on a Remote Computer

compmgmt - [Computer Management (DENVER)\System Tools\Shared Folders\Sessions]

Computer Management (DENVER) System Tools

Performance Logs and Alerts Local Users and Groups System Information Services Shared Folders

Event Viewer Device Manager Storage Server Applications and Services

Shares Sessions Open Files

The following table describes the information that is available in the Sessions folder

Column name Description User The user with a current network connection to the computer

Computer The computer name of the user’s computer

Type The type of network connection used to access the remote

computer: Windows, NetWare, or Macintosh

Open Files The number of files that the user has open on the computer

Connected Time The time in hours and minutes that has elapsed since the user

established the current session

Idle Time The time that has elapsed since the user last initiated an action

Guest Whether the user connected to the computer using the built-in

Guest account

Slide Objective

To explain how to monitor

user sessions on a remote

Monitoring Open Files on a Remote Computer

compmgmt - [Computer Management (DENVER)\System Tools\Shared Folders\Open Files]

Action View Computer Management (DENVER) System Tools

Performance Logs and Alerts Local Users and Groups System Information Services Shared Folders

Event Viewer Device Manager Storage

Server Applications and Service

Shares Sessions Open Files

Open Files

Open File Accessed By Type # Locks Open Mode

\PIPE\srvsvc Administrator Windows 0 Write+Read

Status.doc Judyl Windows 0 Read

A shared folder may have a large number of files that are accessed by multiple users As an administrator, it is important for you to know which files within a shared folder are accessed most often and the identity of the users accessing those files To access information about the users who have opened connections

to each file in a shared folder, you use the Open Files folder in Computer Management

To access information about remote open files:

1 Connect to the remote computer on which the open file is located

2 Click System Tools, click Shared Folders, and then click Open Files The

details pane displays information on all open files

The following table describes the information available on the open files

Column name Description Open File The name of the open file being accessed

Accessed By The logon name of the user who has the file open

Type The type of network connection used to access the remote computer:

Windows, NetWare, or Macintosh

# Locks The number of locks on the file Applications can request that the

operating system lock a file in order to gain exclusive access and prevent other programs from making changes to the file

Open Mode The type of access, such as Read or Write, that the user’s application

was granted when the file was opened

You can monitor the status

of all files that are opened

# Administering Shared Folders on Remote Computers

Computer

Computer

To provide a location from which multiple users can access information that is common to everyone, you can put the information in an existing folder and share it or create a new folder, put the information in it, and then share it After you create shared folders on a computer, you need to administer them to ensure that they are being used optimally The task of administering shared folders includes creating the shared folders, limiting the number of users who can connect to the shared folders, modifying permissions to the shared folders, and stopping the folders from being shared when they are no longer required

If you need to take away users’ access rights to a, you can send an e-mail message to the users and then disconnect them from an open file or end a session

With Windows 2000, you can perform all these administrative tasks for shared folders on both a local and a remote computer However, you must have the appropriate rights to do so To administer a computer running Windows 2000 Professional, you must be a member of the Administrators Domain Local group

or the Power Users group To administer a Windows 2000 Server, you must be

a member of the Administrators Domain Local group or the Server Operators group

In this section, you will learn

how to share folders and

monitor shared folders

Prepare students for the

topics by providing the

following key points

information

Key Points

You can share an existing

folder or create a new folder

and share it

You can modify the default

permissions assigned to a

shared folder

After modifying permissions,

you can send messages to

users on the network and

then disconnect open files

and sessions

Sharing a Folder on a Remote Computer

compmgmt - [Computer Management (DENVER)\System Tools\Shared Folders\Shares]

Action View Computer Management (Local) System Tools

Performance Logs and

Local Users and Groups System Information Services Shared Folders

Shared Folder

Event Viewer Device Manager Storage Server Applications and

Shares

Shared Path

Sessions Open Files

access ADMIN$

C$

deploy excel IPC$

NETLOGON package SYSVOL temp User Folders word

C:\deploy\access C:\WINNT.1 C:\

C:\deploy C:\deploy\excel C:\WINNT.1\SYSVOL…

c:\package C:\WINNT.1\SYSVOL…

C:\temp C:\User Folders C:\deploy\word

Windows Windows Windows Windows Windows Windows Windows Windows

0 0 0 3 0 0 2 0

Type # Client Redirec

Create Shared Folder Wizard

Name the Shared Folder and Control Computer Access

You can control use of the shared folder by naming it appropriately and limiting the operating systems that have access to it.

You will share the following folder: \\DENVER\C$\REPORTS

Type a shared folder name that will be seen by network users.

Name: Reports

Type a a description for the shared folder (optional).

Description:

Computers running the following operating systems have access to the shared folder:

Microsoft Windows Novell NetWare Apple Macintosh

< Back Next > Cancel

You can use Computer Management to share a folder on a remote computer

When you use this method, the Full Control shared folder permission is automatically assigned to the Everyone group

To share a folder:

1 Connect to the remote computer on which the folder to be shared is located

2 In the Computer Management window, click Shared Folders, right-click

Shares, and then on the Shares menu, click New File Share

3 In the Create Shared Folder wizard, click the name of the folder (if you need

to share an existing folder) or specify a name to create a new folder to

share, and then click Next

Now you need to set permissions to limit access to the shared folder

4 To change permissions, select one of the three options that the following

table describes, and then click Next

Option Description Keep the current permissions Inherited permissions from the parent

folder are retained

Only I have full control, but others can read files in this folder

The owner is given the Full Control permission The Everyone group is given Read Only access

Everyone has access and full control The Everyone group is given Full

Control

• To allow permissions inheritance, select the Apply these permissions to

all folders and files in this folder check box

• To prevent permissions inheritance, clear the Apply these permissions

to all folders and files in this folder check box

You can share existing

folders or create new folders

then click Next Optionally, you can type a description for the shared

folder

6 To finish creating the shared folder, click Finish

If you do not need a folder to be shared any more, you can stop sharing it

To stop sharing a folder:

!"Right-click the shared folder, and then click Stop Sharing

If you stop sharing a folder while a user has a file open, the user may lose data

Important