index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... ·...

26
Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout tools, troubleshooting, 824 account security, 315-322 account security settings (GPOs), 291 accounts, user (creating with CSVDE output), 736-738 ACR (Array Configuration Replicator Utility), 554 action plans, troubleshooting Active Directory, 811-816 Active Directory (AD) advantages, 915 authoritative restores, 873 back link, nonrestored object links, 881-882 backups, 895-897 cluster server integration, 1001 design and deployment, 925-928 disaster recovery. See disaster recovery, AD impact on Exchange design, 935-936 logical design. See logical design of Active Directory monitoring, 693-694, 707 event logs, 696 MOM, 696-697 native tools, 694-695 OVOW, 699-707 Quest software, 697-698 Replication Monitor, 695-696 new features. See new features, Active Directory objects exporting, 725-731 importing, 725-726, 731-735 replication. See replication restoring authoritative restores, 877-878 back link, 880, 888 database, 893-897 forests, 897-900 massive object deletions, 878-880 operations masters, 888-893 SYSVOL, 888 troubleshooting. See troubleshooting, Active Directory write operations, 894 Active Directory Application Mode (ADAM), 378 Active Directory Installation Wizard, 867 Active Directory Link Recovery Manager. See ADLRM Active Directory Load Balancing Tool (ADLB), 34, 61 Active Directory Service Interface (ADSI), 1065 Active Directory Topology Viewer. See ADTV Active Directory Users and Computer snap-in, 61 ACU (Array Configuration Utility), 126-127, 740 AD. See Active Directory (AD) AD Connector (ADC), 944 AD structure section (assessment data template), 242-244 ADAM (Active Directory Application Mode), 378 adapters, network adapters, 71 Adaptive Enterprise (AE), 106 ADC (AD Connector), 944 ADI zone configuration (DNS), 402-404 ADLB (Active Directory Load Balancing Tool), 34, 61 ADLRM (Active Directory Link Recovery Manager), 884-888 administration of HP SIM, 614-617 administration and management structure section (assessment data template), 251-253 administration-based OUs, logical design, 280-281 administrative models, Exchange 2003, 941-943 Administrator password, 859 ADMT utility, 194-201 ADPrep utility, preparing forests and domains for in-place upgrade, 183-187 ADSI (Active Directory Service Interface), 1065 ADSIedit tool, 870-871 accidental object deletions, 879 ADTV (Active Directory Topology Viewer), 694, 698, 702-707 ADU, 843 Olsen_Index.qxd 9/16/04 1:25 PM Page 1125

Upload: others

Post on 19-Mar-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

Index

Symbols100 servers, 1098-1099

AAccount Lockout, 61, 317-322Account Lockout tools, troubleshooting, 824account security, 315-322account security settings (GPOs), 291accounts, user (creating with CSVDE output), 736-738ACR (Array Configuration Replicator Utility), 554action plans, troubleshooting Active Directory, 811-816Active Directory (AD)

advantages, 915authoritative restores, 873back link, nonrestored object links, 881-882backups, 895-897cluster server integration, 1001design and deployment, 925-928disaster recovery. See disaster recovery, ADimpact on Exchange design, 935-936logical design. See logical design of Active Directorymonitoring, 693-694, 707

event logs, 696MOM, 696-697native tools, 694-695OVOW, 699-707Quest software, 697-698Replication Monitor, 695-696

new features. See new features, Active Directoryobjects

exporting, 725-731importing, 725-726, 731-735

replication. See replicationrestoring

authoritative restores, 877-878back link, 880, 888database, 893-897forests, 897-900massive object deletions, 878-880

operations masters, 888-893SYSVOL, 888

troubleshooting. See troubleshooting, Active Directorywrite operations, 894

Active Directory Application Mode (ADAM), 378Active Directory Installation Wizard, 867Active Directory Link Recovery Manager. See ADLRMActive Directory Load Balancing Tool (ADLB), 34, 61Active Directory Service Interface (ADSI), 1065Active Directory Topology Viewer. See ADTVActive Directory Users and Computer snap-in, 61ACU (Array Configuration Utility), 126-127, 740AD. See Active Directory (AD)AD Connector (ADC), 944AD structure section (assessment data template),

242-244ADAM (Active Directory Application Mode), 378adapters, network adapters, 71Adaptive Enterprise (AE), 106ADC (AD Connector), 944ADI zone configuration (DNS), 402-404ADLB (Active Directory Load Balancing Tool), 34, 61ADLRM (Active Directory Link Recovery Manager),

884-888administration of HP SIM, 614-617administration and management structure section

(assessment data template), 251-253administration-based OUs, logical design, 280-281administrative models, Exchange 2003, 941-943Administrator password, 859ADMT utility, 194-201ADPrep utility, preparing forests and domains for

in-place upgrade, 183-187ADSI (Active Directory Service Interface), 1065ADSIedit tool, 870-871

accidental object deletions, 879ADTV (Active Directory Topology Viewer), 694, 698,

702-707ADU, 843

Olsen_Index.qxd 9/16/04 1:25 PM Page 1125

Page 2: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

advanced memory protection technologies1126

advanced memory protection (AMP) technologies, 117advertising as Terminal Server (281307), 1079AE (Adaptive Enterprise), 106Aelita Domain Migration Wizard utility, 202affinity (site), 1103Age of Directories, 702agents, Management Agents, 739, 741, 798

components, 799-800installation, 802-810System Management home page, 739Verson Control, 746, 779-782

help file requirements, 786-787security, 782-783

Web-enabled, 799Windows 2000 architecture, 801-802

alerts and PMP workload, 507aliases (WMIC), 721AMD Opteron processors, 95AMP (advanced memory protection) technologies, 117antiSPAM requirements, Exchange 2003 deployment,

930-932API (Application Program Interface), 921appending log files (example 8.2), 574Applicable Support Packs toolbar (RDU), 760application assessment (migration planning), 463application behavior (186499), 1079Application Center, 1007application classes (WMI), 995application compatibility of Domain Rename, 40-42Application Compatibility Toolkit, 463application partitions, 28-30

creating, 32DomainDnsZones, 401-403example scenario, 31-32ForestDnsZones, 401-403ForestDnsZones and DomainDnsZones, 30-31

Application Program Interface (API), 921application test plan, pilot (migration planning), 429application validation section (assessment data

template), 246application-monitor resources (MSCS), 984-988APPSEC, 1075architecture

of HP SIM, 586-587IDC architecture, 109of PMP, 504-505of RDP, 621-629

Windows edition, 629-636arguments, Remote Deployment Console Utility,

770-772Array Configuration (ACU), Management Agents, 740Array Configuration Replicator Utility (ACR), 554Array Configuration Utility (ACU), 126-127Array Type Utility (ARRTYPE), 557ARRTYPE (Array Type Utility), 557assessment phase (migration planning), 220, 223-224

application assessment, 463benefits analysis and recommendations, 255-256

best practices, 256data gathering. See data gathering, assessment phase

(migration planning)infrastructure impact, 254network assessment, 463team members, 224-228training requirements, 255

assisted server installation (SmartStart), 495-497Asynch Mgmt tab, 808attacks, time synchronization security, 411-412attributes, user (importing objects), 731-734authentication, 67. See also IAS

time synchronization in, 408-411Universal Group Membership Caching. See

Universal Group Membership Cachingauthoritative restore (FRS), troubleshooting, 364authoritative restores, 873, 877-878authorization

DHCP, 393time synchronization in, 410-412

auto site coverage, 379autoconfiguration process, ProLiant servers, 492-493autoenrollment of users, 87-88automated and intelligent management features in

ProLiant platforms, 112automatic logon fails (260711), 1080automatic reconnection feature (323258), 1080automatic reconnects, RDC, 1053Automatically Backup System Protected Files with

System State option, 860-861automation with tasks (HP SIM), 608-609

BBackup Domain Controllers (BDCs), 891Backup Exec, 903backups

Active Directory, 858-860, 895-897Disaster Recovery Plan, 857-858DHCP, 392high availability, 901-903Install from Media (IFM) feature, 21-22, 45-46recovery solutions, 903-905, 909Windows Server 2003, 859

bandwidthof existing network, documentation of, 375-377Terminal Services (RDC), 1053

batch files, 554. See also server batch filesBDCs (Backup Domain Controllers), 891benefits, VPNs, 1018benefits analysis, assessment phase (migration

planning), 255-256best body support (Outlook 2003), 949best practices. See also troubleshooting

assessment phase (migration planning), 256File Replication Service (FRS), 361-362, 365Remote Desktop Administration, 1059-1061replication topology, 343-349server consolidation, 1001-1002

Olsen_Index.qxd 9/16/04 1:25 PM Page 1126

Page 3: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

client requirements, PMP 1127

SSSTK (SmartStart Scripting Toolkit), 549Terminal Server infrastructure design, 1077

BHS (Bridgehead Server), 955, 1101load balancing, 34replication load balancing, 331-333, 341-343

BindView migration tools, 203BIOS, WMIC, 724BIOS Serial Console, troubleshooting, 849-850BL (DNS Block-List filtering), 930BL class servers. See ProLiant BL-e class blade servers;

ProLiant BL-p class blade serversBL-e class, 1091BL-p class, 1092-1093BL20p blade server, 1092BL40p blade server, 1093blade servers

advantages, 114-115deployed server configuration, 662-666in Deployment Server Console, 657-658image capture, 660-662image deployment, 662-663new features, 97-98physical design phase (migration planning), 420-421ProLiant BL-e class, 115ProLiant BL-p class, 115RDP features, 620-621rip and replace, 655-656, 666-668scripted installation deployment, 658-660Windows Server 2003 installation, 453-454

boot options, ProLiant servers, 493boot utilities, server batch file creation, 555-556bootable server configuration floppy disks, creating,

561-565booting

DHCP and PXE boot sequence, 623-624from SAN, 682-689

“Branch Office Deployment” (replication), 333-334branch office network links, VPNs, 1016-1017Bridgehead Server. See BHSbridges, site link, 1104-1105Broadcast Name Resolution, 68-69browse list prevention (262852), 1080-1081buffer packing (Outlook 2003), 949Build Guides, physical design phase (migration

planning), 422, 425burflags, 1104business justification, migration to Exchange 2003,

919-920business plans

hard cost savings, 158-162incidental cost savings, 163postponing migration, 167-168presenting to management, 164-166ProLiant cost savings, 163-164ROI, 153-159TCO, 154-155technical justification, 166-167

Ccache, Universal Group Membership Caching. See

Universal Group Membership CachingCached Exchange Mode (Outlook 2003), 384, 946-947CAL Token, 1074calculating ROI (Return on Investment), 155-159capacity planning, PMP, 507case studies, 1087

configuring remote access for employees at HP,1043-1046

disaster recovery, 910Eastman Chemical Company, 1087Georgia Department of Transportation (GDOT),

1088Greek Ministry of Interior Web site, 116Hewlett-Packard Corporation (HP), 1088HP and Compaq merger, 107-109migration planning

county government office, 204-207Eastman Chemical Company, 207-213Hewlett-Packard (HP) and Compaq merger,

213-218Reed Elsevier, 1088-1089replication topology

Hewlett-Packard (HP), 354multi-tier topology, 351-353overlooking DefaultIPSiteLink, 349-350Reed Elsevier, 354-357

XYZ Company, Terminal Services datacenter solution, 1077-1079

categories, Exchange 2003 servers, 955, 959CD Eject Utility (CDEJECT), 557CD-based Windows Server 2003 deployment, 560CDEJECT (CD Eject Utility), 557Central Datacenter deployment, Exchange 2003

servers, 961Central Management Server. See CMScentralized placement, Exchange 2003 servers, 960-961certificate rules (Software Restriction Policies), 74certificate templates, editing, 84-85change order, 1104chief architects, design team members, 262CICA (Compaq Intelligent Cluster Administrator), 980CIM Studio, 710circular logging, Exchange 2003, 953-954classes

ProLiant BL-p class servers, 1093WMI, 715-717, 724

clean installs versus upgrades, cluster deployment,968-970

client access, Exchange 2003, 945-946Client Access Point (RDP—Windows edition), 631client configuration, 404-406client connections, Terminal Server Licensing, 1072Client Creator (Terminal Services), 1051client error messages, 1066client license renewal (248430), 1081client requirements, PMP (Performance Management

Pack), 508-509

Olsen_Index.qxd 9/16/04 1:25 PM Page 1127

Page 4: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

Client Side Extensions1128

Client Side Extensions (CSEs), 51-52client-side DNS settings, 54-55clients

defined, 621error messages, 1066RDC interface, 1051-1052RDP—Windows edition client components, 632-636Remote Desktop, 1051Terminal Server, error messages, 1107-1117Terminal Services, 1051

Clone Mode (Mail Migration Wizard), 940cluster service password, changing, 999cluster support, Windows Server 2003 installation, 448cluster-aware applications, Generic Script resource

(MSCS), 985-986cluster.log file, new features, 999clustering, Exchange 2003, 954ClusterRecovery.exe, 998clusters. See also MSCS, NLB

defined, 980deployment, 968

and CICA, 980and Exchange Server, 976-978and IIS, 978and NAS, 979-980replacement upgrades, 973-974rolling upgrades versus downtime upgrades,

971-973and SQL, 979StorageWorks minimum requirements, 974-975StorageWorks upgrades, 975-976upgrade paths, 970-971upgrades versus clean installs, 968-970

monitoring with HP SIM, 602-605ProLiant server support information, 1007server consolidation, 966-967supported Windows Server 2003 SKUs, 967-968VBS, 1119, 1123

CMAK (Connection Manager Administration Kit),1034, 1037-1039, 1043

CMS (Central Management Server)HP SIM architecture, 586system requirements for HP SIM installation,

590-591command prompt installation,

Windows Server 2003, 456command-line interface, ADMT, 196-197command-line syntax, Remote Deployment Console

Utility, 769command-line utilities (Terminal Services), 1064commands

CSVDE, 735-738DCDiag, troubleshooting, 820DSadd, 694DSget, 694DSmod, 694DSmove, 694DSquery, 695

DSrm, 695export filters, 728-731NetDiag, troubleshooting, 821Repadmin, 875showvector, 889

communications plan, pilot (migration planning), 430Compaq and Hewlett-Packard (HP) merger case

study, migration planning, 213-218Compaq and HP merger case study, 107-109Compaq Disk Formatting Utility (CPQFMT), 556Compaq Disk Partition Creation Utility (CPQDISK),

554-556Compaq Intelligent Cluster Administrator (CICA), 980components

EBS, 904Management Agents, 799-800

compression. See data compressionconditional forwarding (DNS), 394-395Confdisk.exe, 998configuration

deployed blade servers, 662-666Event Notifier, 809RBSU, 849RDU, 763-765remote access, HP case study, 1043-1046Remote Desktop for Administration, 1057

configuration audit trail, Management Agents, 740configuration files (Deployment Server directory

structure), 676Configuration NC, Exchange design, 937Configuration Replication Utility (CONREP), 553configuration rights, HP SIM, 615-616configuration utilities, 125-129configuration wizard (MSCS), 996-997configuring

ADI zones, 402-404clients, 404-406DNS with DCPromo, 401DNS and zone properties, 405-406Kerberos policies, 413servers and arrays for Windows Server 2003

installation, 489-490, 493-494connection filtering, Exchange 2003, 930-931Connection Manager Administration Kit (CMAK),

1034Connection Manager Kit Creation Wizard, 1034connection objects, 1101connections, RDC, 1051-1054CONREP (Configuration Replication Utility), 553console connection, Remote Desktop for

Administration, 1058console connections, Terminal Services, 1063consolidation, 966. See server consolidationconsultants, assessment team members, 225contingency plan, pilot (migration planning), 430continuity and component commonality on ProLiant

servers, 113-114core techologies in ProLiant platforms, 110-113

Olsen_Index.qxd 9/16/04 1:25 PM Page 1128

Page 5: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

demotion process 1129

cost savingshard cost savings, 158-162incidental cost savings, 163ProLiant servers, 163-164

cost-benefit analysis, Domain Rename, 43-44county government office case study, migration

planning, 204-207CPQDISK (Compaq Disk Partition Creation Utility),

554-556CPQFMT (Compaq Disk Formatting Utility), 556CPQLODOS (Lights-Out DOS Utility), 554Credential Manager, 82-83Cross Certification trust model, 83-84cross forest trusts, 89-93cross-forest authentication, 67CSEs (Client Side Extensions), 51-52CSV, styles, 722CSVDE, 879

creating OUs, 736-738creating user accounts, 736-738importing objects, 735

CSVDE utility, 193customer case studies. See case studiescustomer service. See technical supportcustomizing

Jobs pane (Deployment Server Console), 678-681ProLiant Integration Module for Deployment

Server, 681-682SIM console, 597-598

D-d command, 728data collection, troubleshooting Active Directory,

816-818data compression

inter-site data compression, performance, 34replication topology, 339-342

Data Encryption Standard. See DESdata gathering, assessment phase (migration

planning), 228-229AD structure section, 242-244application validation section, 246existing system environment section, 230growth section, 253introduction section, 230management and administration structure section,

251-253security section, 248-251server systems topology section, 231-241user environment section, 247-248Windows 2003 infrastructure section, 241-242Windows 2003 network services section, 245-246

Data Link Control (DLC) protocol, removal ofsupport for, 70

data streams, 902databases

Active Directory, restoring, 893-897Exchange 2003, 950-953

NTDS.DIT, 897NTFRS jet database, 1105

datacentersTerminal Services case study, 1077-1079Windows 2000 Datacenter, 970-971

DC Locator settings, 53-54DCDiag, troubleshooting, 820DCgpofix.exe, 50DCPromo, 44, 858

demoting DCs, 386DNS configuration, 401Install from Media (IFM) feature, 21-22, 45-46troubleshooting, 829-834unattended answer files, 46-48

DCs (Domain Controllers), 23, 856, 925and account security, 316-317demoting, 386disaster recovery, 856full system state backup, 859GC servers, 925-926Lag, 880naming standards, 285placement near Exchange 2003 servers, 925-928recovering FSMO role holders, 888-890refreshing the cache, 17-18renaming, 23

DNS delegation records, 27-28GUI method, 24-25Netdom method, 24, 27

repairs, 860-862hardware differences, 864-865lag sites, 871-873manual demotion, 865-870nonauthoritative restores, 862-863tombstonelifetime setting, 864

server placement, 381-383DDNS (dynamic DNS), 1030default application partitions, 30-31default OUs, 281DefaultIPSiteLink case study, replication topology,

349-350defragmentation, 897Degpofix troubleshooting tool, 61delegation of administrative permissions,

Exchange 2003, 942-943delegation records (DNS), renaming DCs, 27-28delegation schemes (DNS), 394-397

_msdcs zone, 396, 398-401deleted objects, tombstonelifetime attribute, 334-335deleting

cache for entire site, Universal Group MembershipCaching, 17-18

objectsback link, 880, 888restoring massive deletions, 878-880

Demilitarized Zone (DMZ), 930demoting DCs, 386demotion process (GCs), 23

Olsen_Index.qxd 9/16/04 1:25 PM Page 1129

Page 6: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

demotions, DCs and GCs1130

demotions, DCs and GCs, 865-870deployed server configuration, 662-666deployment

AD, 925-928of blade servers, scripted installation deployment,

658-660of clusters. See clusters, deploymentof ProLiant servers

installation requirements, 550-551server batch file creation, 554-558server configuration floppy disk creation, 558-559server profile creation, 552-554strategies for, 546-547

PSP, 757, 778RDU, 758-768, 773-775return codes, 776in Windows, 757Windows examples, 776-778

of target servers, 582of Windows Server 2003, 559-560

Deployment Agent for DOS, 633Deployment Agent for Linux, 633Deployment Agent for Windows, 633deployment jobs, 669-670deployment phase (migration planning), 221Deployment Server (RDP—Windows edition), 630-631Deployment Server Console, 647-651, 678-681Deployment Server Console (RDP—Windows

edition), 631Deployment Server Database (RDP—Windows

edition), 631Deployment Server directory structure, 674-678deployment utilities, 129-134deployment, 682. See also RDPdepth of OU tree, 280-281DES (Data Encryption Standard), 1014design, 261, 375. See also logical design of Active

Directory; physical design phase AD, 925-928Exchange 2003, 934-946

design phase (migration planning), 220design reviews (migration planning), 220design team, 219, 227. See also assessment phase

(migration planning), team membersmigration planning, Active Directory logical design,

261-263Designated File Types policy (Software Restriction

Policies), 79development team, assessment team members, 226device drivers, new features, 65devices, Remote Desktop Protocol, 1058DFS (Distributed File System), 35

new features, 34-35troubleshooting, 836

DFS replica sets, 359DHCP (Dynamic Host Configuration Protocol),

621-629, 1030assessment data gathering, 233, 245new features, 392-393

DHCP server (RDP—Windows edition), 632diagnostics. See also troubleshooting

Management Agents, 740Diagnostics Online Edition Maintenance utility,

troubleshooting, 847diagnostics utilities, 128-129Dial Tone messaging service, 921Direct backup option, 905directories

morphed, 1105staging, 1106

directory infrastructure, technical assessment (migration to Exchange 2003), 925-933

directory lookup functionality, GC servers, 926Directory Services (DS), 915

integration with iLO and RILOE II, 100Directory Services Repair Mode. See DSRMDirectory Store, 893directory synchronization

Exchange 2003, 943-945multi-forest deployment of Exchange design, 938

disabling intersite compression, 340disaster recovery, 855-856

Active Directory, 856, 860-862authoritative restores, 873, 877-878back link, 880, 888database, 893-897forests, 897-900hardware differences, 864-865lag sites, 871-873manual DC demotion, 865-870manual GC demotion, 865-870massive object deletions, 878-880nonauthoritative restores, 862-863operations masters, 888-893SYSVOL, 888tombstonelifetime setting, 864

backing up Active Directory, 858-860case study, 910DCs, 856Disaster Recovery Plan. See Disaster Recovery Plandowntime, 900-901ProLiant, 900-901

backup recovery solutions, 903-905, 909high availability, 901-903RAIS, 903

Disaster Recovery Plan, 856backups, 857-858developing, 857recovery requirements, 858SLA (Service Level Agreement), 857testing, 858validation, 858

Disaster Recovery Site (DRS), 898-899disaster recovery tools (MSCS), 998discontinued software products, 484disk utilities, server batch file creation, 556disks, sizing Exchange 2003 servers, 955

Olsen_Index.qxd 9/16/04 1:25 PM Page 1130

Page 7: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

Encrypting File System 1131

Display tab (RDC remote connections), 1052Distributed File System. See DFSdistributed placement, Exchange 2003 servers, 960-961DL servers, 1094-1096. See also ProLiant DL serversDL140 server, 1099DL145 server, 1099DL320 server, 1094DL360 server, 1094DL380 server, 1094DL560 server, 1095DL580 server, 1095DL740 server, 1095DL760 server, 1096DLC (Data Link Control) protocol, removal of

support for, 70DLG (Domain Local Group), 882DLG Amer-DLG1, 882DMZ (Demilitarized Zone), 930DNS (Domain Name Service), 393

assessment data gathering, 234-235, 242-245Check, 830new features, 64-65, 393-400, 403-406server placement, 378-379troubleshooting, 824-825

DNS Block-List filtering. See BLDNS delegation records, renaming DCs, 27-28DNS properties, configuring, 405-406documentation

physical design phase (migration planning), 431-432pilot (migration planning), 430RDP, 690-691

documentation files (Deployment Server directorystructure), 678

Domain Controller Rename, 23DNS delegation records, 27-28GUI method, 24-25Netdom method, 24, 27

Domain Controllers. See DCsdomain functional level, 170-171Domain Local Group (DLG), 882domain local groups, security planning and design,

309-310Domain Migration Wizard utility, 202Domain Name Service. See DNSdomain namespace, naming standards, 283-284Domain naming master, 890domain naming master (FSMO role), 386Domain Rename, 36-38

application compatibility, 40-42capabilities of, 39cost-benefit analysis, 43-44Exchange recovery, 42-43limitations of, 40versus Prune and Graft, 39

domain structureassessment data gathering, 243-244logical design, 263-273

DomainDnsZones application partition, 30-31, 401-403

DomainPrep utility, AD impact on Exchange 2003design, 936

domainsobject links, 882preparing for in-place upgrade, 183-187Qamericas.Qtest.cpqcorp.net, 882renaming, 36-38

downtime, disaster recovery, 900-903downtime upgrades versus rolling upgrades, cluster

deployment, 971-973drivers, 65, 498-499. See also device driversDrizzle mode (data replication mode), 947DRS (Disaster Recovery Site), 898-899DS. See Directory ServicesDSAccess, 926-927DSadd command, 694dsadd troubleshooting tool, 61Dsadd utility, 193DSget command, 694dsget troubleshooting tool, 61Dsget utility, 194DSmod command, 694dsmod troubleshooting tool, 61Dsmod utility, 193DSmove command, 694Dsmove utility, 193DSProxy, 928DSquery command, 695dsquery troubleshooting tool, 61Dsquery utility, 193DSRM (Directory Services Repair Mode), 874DSrm command, 695dsrm troubleshooting tool, 61Dsrm utility, 193dynamic DNS (DDNS), 1030Dynamic Host Configuration Protocol (DHCP), 621,

1030dynamic resource optimization in ProLiant

platforms, 112

EEAP (Extensible Authentication Protocol), 1011Eastman Chemical Company case study, 1087

migration planning, 207-213EBS (Enterprise Backup Solution), 903-904EDB.CHK file, 894editing certificate templates, 84-85Effective Permissions tab (ACL properties), 87-88efficiency, HP SIM, 588EFS (Encrypting File System), 80-82Embedded Server Setup feature, ProLiant servers,

492-493empty root domain, 269EMS, troubleshooting, 849enclosures, ProLiant BL-p class servers, 1092encrypted files, sharing, 80-82Encrypting File System (EFS), 80-82

Olsen_Index.qxd 9/16/04 1:25 PM Page 1131

Page 8: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

encryption1132

encryptionsession encryption, Remote Desktop

Administration, 1059-1060Terminal Services, 1067

Enforcement policy (Software Restriction Policies), 79enterprise assessment. See assessment phase

(migration planning)Enterprise Backup Solution (EBS), 903-904enterprise networks, RDP implementation, 638-639error messages

Terminal Server client, 1107general error messages, 1107-1114licensing error messages, 1115-1117

Terminal Services, 1066error reporting policies, 56-57ESE (Extensible Storage Engine), 953ESM (Exchange System Manager), 921evaluation, pilot (migration planning), 431evaluation licenses, 690event logs

monitoring Active Directory, 696troubleshooting, 822-823

Event Notifier, configuration, 809Event Viewer, 1064events

monitoring with HP SIM, 602-605WMI, 719-720

eventvwr.msc, 1064examples

log files, 574network software repository, preparing, 579-581

Exchange 2003, 915-917deployment

antiSPAM requirements, 930-933security, 929-930

DSAccess, 926-927migration to, 917-918

Exchange design, 934-946planning, 919-921technical assessment of current environment,

922-933Partition Occupancy parameter (Global Catalog

servers), 20ProLiant servers, 961

GC servers, 962-963recovering, 42-43server sizing and placement, 949, 954-955

centralized placement, 960-961circular logging, 953-954clustering, 954databases, 950-953distributed placement, 960-961server categories, 955, 959storage groups, 950transaction logs, 953-954

versions, 918Exchange Administration Delegation Wizard, 943Exchange Administrator, 942

Exchange Full Administrator, 942Exchange logs, sizing Exchange 2003 servers, 955Exchange Server, cluster deployment, 976-978Exchange System Manager (ESM), 921Exchange View Only Administrator, 942ExDeploy tool, 918, 935existing system environment section (assessment data

template), 230Experience tab (RDC remote connections), 1052exporting objects, 725-731Extensible Authentication Protocol (EAP), 1011Extensible Storage Engine (ESE), 953External Connector, Terminal Server, 1073external time sources, time synchronization, 413

FFastlane Migrator utility, 202fault management, Management Agents, 739fault tolerance features in ProLiant platforms, 111Fibre Channel adapters, diagnostics utilities, 129file association feature (257592), 1081-1082File Copy Utility (FILECOPY), 557File Replication Service. See FRSfile services, physical design phase (migration

planning), 418-419FILECOPY (File Copy Utility), 557filters

exporting objects, 728-731GPO filtering, 293-295WMI filtering, 295-301

financial plans. See business plansFIPS.SYS, 73firewalls, integration with RRAS NAT function, 69Firmware Maintenance CD, 481-482flexibility, HP SIM, 588Flexible Single Master Operations. See FSMOforcing cache refreshes, 17forest functional level, 172-173forest native mode, 63forest settings, tombstonelifetime setting, 864forest structure, logical design, 273-277forest trusts, 87. See also cross forest trustsForestDnsZones application partition, 30-31, 401-403ForestPrep utility, AD impact on Exchange 2003

design, 935-936forests

Active Directory, restoring, 897-900intra- and inter-forest migrations, 193-194preparing for in-place upgrade, 183-187

formatting WMIC, 722-723forums, ProLiant technical support, 487Free/Busy information, IOPF utility, 938FRS (File Replication Service), 357-359, 1104-1106

best practices, 361-362, 365latency, 360-361new features, 34-35replica set structure, 358-359SYSVOL file structure, 360troubleshooting, 365-372, 836

Olsen_Index.qxd 9/16/04 1:25 PM Page 1132

Page 9: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

HP case studies 1133

FRSDiag.exe (FRS troubleshooting tool), 367-370FSMO (Flexible Single Master Operations), 385

server placement, 385-391FSMO role holders, 888-890Full items data replication mode, 947full system state backup, 859functional levels, 62-63

Windows, 169-175

G-g command, 728GAL (Global Address List), 926Gantt charts, 165GC Caching. See Universal Group Membership CachingGC servers, 925

directory lookup functionality, 926Exchange on ProLiant servers, 962-963replication topology, 337-338

GCs (Global Catalog servers), 1019full system state backup, 859new features, 19-23placement for Exchange servers, 927placement near Exchange 2003 servers, 925-928placement for Outlook clients, 928repairs, 860-862

manual demotion, 865-870server placement, 384-385

GDOT (Georgia Department of Transportation), casestudy, 1088

General tab (RDC remote connections), 1052generations, ProLiant server modeling system, 114Generic Script resource (MSCS), 985-986geo-clusters, 983Georgia Department of Transportation (GDOT), case

study, 1088Global Address List (GAL), 926Global Catalog servers. See GCsgoals (migration planning)

assessment phase, 228pilot, 426

GPMC (Group Policy Management Console), 51, 60,302-306

GPO filtering, 293-295GPOs, naming standards, 288GPResult tool, 302GPresult troubleshooting tool, 60GPupdate troubleshooting tool, 61GPupdate.exe, 50graphic output, ADTV, 705Graphical User Interface. See GUIGreek Ministry of Interior Web site case study, 116Grillenmeir, Guido, 884group membership links, 882-888Group Policy, 1065

Active Directory logical design, 288-306new features, 50

client-side DNS settings, 54-55CSEs (Client Side Extensions), 51-52

DC Locator settings, 53-54DCgpofix.exe, 50error reporting, 56-57GPMC (Group Policy Management Console), 51GPupdate.exe, 50Net Logon settings, 53Remote Assistance, 55RPC troubleshooting, 57System Restore, 55-56time services, 57user rights changes, 52WMI filters, 58-60

troubleshooting, 834-836Group Policy Editor, 1068-1069Group Policy Management Console. See GPMCGroup Policy settings, DNS, 402Group Policy-based OUs, logical design, 278-279groups

naming standards, 286security groups. See security groups

growth section (assessment data template), 253GUI (Graphical User Interface), 593. See also UI

for HP SIM, 593-598NLB management GUI, 1004

GUI method, renaming DCs, 24-25GUICMD.EXE, 569

HHAL (Hardware Abstraction Layer), 865hang detection (MSCS), 999-1000hard cost savings (business planning), 158-162hard drives, 119-120hardware, Active Directory disaster recovery, 864-865Hardware Abstraction Layer (HAL), 865hardware configuration settings, modifying, 682hardware sizing, Exchange 2003 servers, 955, 959hash rules (Software Restriction Policies), 74Header mode (data replication mode), 947help, WMIC, 722help files, Verson Control Agent, 786-787Hewlett-Packard. See HPHFORM, styles, 722high availability, 901-903. See also MSCS; NLBhistory, VPNs, 1010-1012history of ProLiant servers, 103-106home networks, new features, 65-66home pages, System Management, 739Hot Plug RAID memory, Windows Server 2003

installation, 449-450hotfixes, WMIC, 724HP case studies, 1088

Compaq merger case study, 107-109, 213-218configuring remote access for employees, 1043-1044

Compaq’s VPN service, 1044merging HP and Compaq services, 1044-1045ProLiant specifications for VPN servers, 1046VPN services, 1043-1044

replication topology, 354

Olsen_Index.qxd 9/16/04 1:25 PM Page 1133

Page 10: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

HP Data Protector1134

HP Data Protector, 903HP OpenView Virtual Replicator. See SWVRHP ProLiant Server Troubleshooting Guide, 843HP ProLiant servers. See ProLiant serversHP SIM (HP Systems Insight Manager), 583-617HPQnet-DC3, 890HTABLE, styles, 722HTTP.sys, support for, 70HYPERCFG (Integrated ATA RAID Replication

Utility), 554

IIAS (Internet Authentication Service), 1019

installation of Windows Server 2003, 1019-1029new features, 67

IDC architecture, 109-110IDS (Intrusion Detection Servers), 1015IETF (Internet Engineering Task Force), 1010IFM (Install from Media) feature, 21-22, 45-46IGMP (Internet Group Management Protocol), 1006

NLB support, 1006-1007IGMP (Internet Group Management Protocol) v3,

support for, 70IIS, cluster deployment, 978iLO (integrated Lights-Out) technology, 122-123

Directory Services integration, 100integration with Deployment Server Console,

648-649troubleshooting, 850-851

iLO Advanced Features Pack, Terminal Services passthrough, 1061-1062

image capture, blade servers, 660-662image deployment, blade servers, 662-663image files (Deployment Server directory s

tructure), 676IML (Integrated Management Log), troubleshooting,

847-848IMP (Insight Management Pack) for MOM

(Microsoft Operations Manager), 143-144implementation, VPNs, 1016-1018implementation phase, 221importing objects, 725-726, 731

adding users, 733-735CSVDE, 735user attributes, 731-734

in-place upgrades, 179-189inbound logs, 1104inbound replica partners, 1105incidental cost savings (business planning), 163individual objects, authoritative restores, 878Industry Standard Servers, history of ProLiant servers,

103-106Infrared Data Association (IrDA) protocol, removal of

support for, 70infrastructure impact, assessment phase (migration

planning), 254Infrastructure master, 389, 891initial setup, HP SIM, 598-602

initial user logon, enabling Universal GroupMembership Caching, 6-10

innovation, history of ProLiant servers, 104-105Insight Diagnostics, troubleshooting, 848-849Insight Integration for CA Unicenter, 140-141Insight Integration for HP OpenView, 141-142Insight Integration for Tivoli Enterprise Console

(TEC), 139-140Insight Integration for Tivoli NetView (AIX), 142-143Insight Integration modules, 139-144Insight Management Pack (IMP) for Microsoft

Operations Manager (MOM), 143-144Insight Management Agents. See Management AgentsInsight Manager, PMP integration, 506Insight Manager 7, 138, 583. See also HP SIM

new features in HP SIM, 585PMP integration, 505

Install from Media (IFM) feature, 21-22, 45-46installation

HP SIM, 589, 592-593Management Agents, 802

requirements, 802SmartStart CD, 804-805SNMP, 803-810TCP, 803-804

PMP, 509PSP component software, 766-768, 773-775RDC, 1059RDP, 643, 645-646RDP—Windows edition client components, 635-636RDP—Windows edition server components, 634-635requirements for SSSTK deployment methods,

550-551RPM (Resource Partitioning Manager), 513-515SIM, 786software maintenance, 750VCRM, 787-797Windows Server 2003. See Windows Server 2003,

installationWMI Agent, 809-810

installation paths, SmartStart CD, 495-498Integrated ATA RAID Replication Utility

(HYPERCFG), 554Integrated Management Log utility, troubleshooting,

847-848integrated pilot (migration planning), 427integrity checking, 897Intel Offload Cards, 1046Intel Xeon processors, 96intelligent management features in ProLiant

platforms, 112inter-forest migrations, 193-194Inter-Organization Public Folder utility (IOPF

utility), 938inter-site data compression, performance, 34interfaces, RDC (Remote Desktop Connection),

1051-1052interim mode (Windows functional levels), 172

Olsen_Index.qxd 9/16/04 1:25 PM Page 1134

Page 11: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

logical design of Active Directory 1135

internal networks, VPNs, 1017-1018Internet Authentication Service (IAS), 67, 1019Internet Connection Firewall, 80-81Internet Engineering Task Force (IETF), 1010Internet Explorer, settings VCRM, 789-790Internet Group Management Protocol (IGMP), 1006Internet Group Management Protocol (IGMP) v3,

support for, 70Internet Protocol Security. See IPSecInternet Zone rule (Software Restriction Policies), 74interoperability, Windows functional levels, 172-175intersite compression, disabling, 340Intersite Topology Generator (ISTG), 1102

performance, 33intra-forest migrations, 193-194introduction section (assessment data template), 230Intrusion Detection Servers (IDS), 1015IOPF utility (Inter-Organization Public Folder

utility), 938IPSec (Internet Protocol Security), 72, 1010IPSec over NAT tunnels, 67IPSECMON MMC monitoring tool, 72IPv6 protocol, support for, 69IPX/SPX protocol, removal of support for, 70IrDA (Infrared Data Association) protocol, removal of

support for, 70isolated pilot (migration planning), 427ISTG (Intersite Topology Generator), 33, 1102

J-Kjob objects

capturing non-RPM job objects, 533-534defined, 513

Jobs pane (Deployment Server Console),customization, 678-681

journal wrap, troubleshooting, 363junction points, 360

defined, 1105troubleshooting, 361

KCC (Knowledge Consistency Checker), 1102topology generation time, 330

Kerberos. See also authentication; authorizationforest trusts, 87policy configuration, 413

Key Recovery Agent, 85-87

L-l command, 728L2F (Layer 2 Forwarding), 1010L2TP (Layer 2 Transport Protocol), 1010L2TP over NAT tunnels, 67Lag DCs, 880lag sites, 871-873LAN on Motherboard (LOM) feature, 235latency, FRS, 360-361Layer 2 Forwarding (L2F), 1010Layer 2 Transport Protocol (L2TP), 1010LDAP (Lightweight Directory Access Protocol), 1019

LDIFDE, 879Ldifde, export filters, 728-731Ldifde utility, 193LDP, accidental object deletions, 879least-cost path, 1102legacy protocols, removal of support for, 70License Server requirements, Terminal Server

infrastructure design, 1076License Server Security Group policy, Terminal Server,

1074licensing

PMP, 510ProLiant Essentials software, 146RDP, 689-690

Lights-Out DOS Utility (CPQLODOS), 554Lights-Out Management (iLO, RILOE), 648Lights-Out technology, iLO (integrated Lights-Out),

122-123Lightweight Directory Access Protocol (LDAP), 1019lingering objects, 335-336

AD replication, 33Link Value Replication (LVR), 882Linked Value Replication (LVR), 49links

objectsADLRM, 884-888anomalies, 882group membership, 882-884nonrestored, 881-882

site, 1104Linux imaging jobs, 674load balancing

BHS, 34replication, 331-333, 341-343

Local Quorum (MSCS) quorum scheme, 981Local Resources tab (RDC remote connections), 1052lockout, account lockout, 317log files, 574, 894

MSCS, 997-999logbooks, version control, 748logging and PMP workload, 507logical design of Active Directory (AD), 261-264

design team members, 261-263domain structure, 263-273File Replication Service. See FRSforest structure, 273-277Group Policy, 288-306naming standards, 282-288OU structure, 278-282replication topology. See replication topologysecurity planning and design, 309

account security, 315-322NTFS and share permissions, 312role-based security, 311-312security groups, 309-310security templates, 313-315Software Update Service, 323-325Windows Update Service, 325-326

trust definitions, 306-308

Olsen_Index.qxd 9/16/04 1:25 PM Page 1135

Page 12: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

logon, authentication1136

logon, authentication. See authenticationLogon Locally right, 52LOM (LAN on Motherboard) feature, 235Loven, Cliff, 1087LSREPORT.EXE, 1075LSVIEW.EXE, 1075LVR (Link Value Replication), 882LVR (Linked Value Replication), 49

M-m command, 728mail and messaging administrators, assessment team

members, 225mail connectivity, multi-forest deployment of

Exchange design, 938Mail Migration Wizard, 939

Clone Mode, 940mail-enabled applications, technical assessment

(migration to Exchange 2003), 924maintenance, software, 744-746

acquisition, 746-748best practices, 751-755installation, 750maintenance cycle, 745notification, 746-748SmartStart for Servers, 748tools, 746version control, 748-750

Majority Node Set (MSCS) quorum scheme, 981-983managed systems

HP SIM architecture, 586-587setup, 600-602system requirements for HP SIM installation,

591-592managedBy object, 883Management Agents, 135-136, 739-741, 746, 798

components, 799-800installation, 802-810System Management home page, 739Web-enabled, 799Windows 2000 architecture, 801-802

management and administration structure section(assessment data template), 251-253

Management CD, 486Management Information Base (MIB), 612management processors, ProLiant servers, 121-124management sponsors, assessment team members, 226management structure, Exchange 2003 design, 928-929management utilities, 134-146, 1074manual installation, Windows Server 2003, 454-455

from Windows 2000, 472-473from Windows NT 4.0, 468-469

manual server installation (SmartStart), 497-498MAPI (messaging application programming

interface), 918memory

ProLiant servers, 117-119sizing Exchange 2003 servers, 955

menu bar (RDU), 759Message Queue Triggers, clustering, 988messaging application programming interface

(MAPI), 918messaging infrastructure, technical assessment

(migration to Exchange 2003), 922-924messaging services, Dial Tone, 921methods, WMI, 714-715MIB (Management Information Base), 612Microsoft, calculating ROI, 156-159Microsoft Cluster Server. See MSCSMicrosoft Database Engine. See MSDEMicrosoft Exchange 2000 Infrastructure Design, 917Microsoft Exchange 2003, 915-917

deployment, 929-933DSAccess, 926-927migration to, 917-918

Exchange design, 934-946planning, 919-921technical assessment of environments, 922-933

ProLiant servers, 961-963server sizing and placement, 949, 954-955

centralized placement, 960-961circular logging, 953-954clustering, 954databases, 950-953distributed placement, 960-961server categories, 955, 959storage groups, 950transaction logs, 953-954

versions, 918Microsoft Exchange 2003 2003, 917Microsoft Management Console. See MMCMicrosoft Operations Framework. See MOFMicrosoft Operations Manager. See MOMMicrosoft Systems Architecture Internet Data

Center, 109Microsoft Windows. See Windowsmigration planning, 151-152, 462. See also deploy-

ment; upgrade pathsActive Directory (AD) logical design, 261-264

design team members, 261-263domain structure, 263-273File Replication Service (FRS), 357-372forest structure, 273-277Group Policy, 288-306naming standards, 282-288OU structure, 278-282replication topology, 326-357security planning and design, 309-326trust definitions, 306-308

application assessment, 463assessment phase. See assessment phasebusiness plans. See business planscase studies

county government office, 204-207Eastman Chemical Company, 207-213Hewlett-Packard (HP) and Compaq merger,

213-218

Olsen_Index.qxd 9/16/04 1:25 PM Page 1136

Page 13: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

naming contexts 1137

functional levels, 169domain functional level, 170-171features available, 175-177forest functional level, 172-173interim mode, 172interoperability, 172-175

methodologies, 177-178in-place upgrade, 179-189intra- and inter-forest migrations, 193-194ProLiant post-upgrade tasks, 192ProLiant system requirements, 178-179restructure method, 189-192

network assessment, 463phases of migration, 218-221physical design. See physical design phase

(migration planning)pilot, 425-430process, 464tools, 194

ADMT, 194-201Aelita Domain Migration Wizard, 202BindView migration tools, 203NetIQ migration tools, 203ProLiant migration tools, 204Quest Fastlane Migrator, 202

upgrade paths, 464-465migration to Exchange 2003, 917-918

Exchange design, 934-935, 946AD impact, 935-936administrative models, 941-943client access, 945-946Configuration NC, 937directory synchronization, 943-945multi-forest deployment, 937-940resource forests, 940-941single forest deployment, 937

planning, 919business justification, 919-920SLAs, 920-921

technical assessment of the current environment, 922directory infrastructure, 925-933exisiting messaging organization, 922-923mail-enabled applications, 924messaging systems topology, 923-924

minimum requirements. See requirementsMission-Critical Microsoft Exchange 2000, 917mixed mode (Windows 2000), 169. See also

functional levelsML servers, 1096-1098ML110 server, 1098ML310 server, 1096ML330 server, 1097ML350 server, 1097ML370 server, 1097ML530 server, 1097ML570 server, 1098MMC (Microsoft Management Console), 1029, 1058modeling system of ProLiant servers, 114-116

modems, removal of support for, 71MOF, styles, 722MOM (Microsoft Operations Manager), 696-697, 918monitoring

Active Directory. See Active Diretory, monitoringwith HP SIM, 602-605IPSec, 72and PMP workload, 507-508

Monitoring and Managing Microsoft Exchange 2003, 917morphed directories, troubleshooting, 361morphed directory, 1105MoveTree utility, 193MSA IDC, 109MSCluster_Cluster class, 989MSCluster_Event classes, 990-991MSCluster_Network class, 991MSCluster_NetworkInterface class, 991MSCluster_Node class, 991MSCluster_Resource class, 992-993MSCluster_ResourceGroup class, 993-994MSCluster_ResourceType class, 994-995MSCluster_Service class, 995MSCS (Microsoft Cluster Server), 965

new features, 1002-1003application-monitor resources, 984-988cluster management tools, 996-1001quorum schemes, 980-984server consolidation best practices, 1001-1002spooler resource updates, 996WMI cluster management, 988-996

_msdcs zone delegation (DNS), 396-401MSDE (Microsoft Database Engine), 884MSMQ, clustering, 988multi-forest deployment, Exchange design, 937

directory synchronization, 938IOPF utility, 938mail connectivity, 938one-off migrations, 939-940OSTs, 940

Multi-NIC Boot Utility package, 583multi-tier topology case study, replication topology,

351-353multi-valued attributes, LVR, 49multimaster model (replication) versus single-master

model, 327-329multiple datacenter deployment, Exchange 2003

storage groups, 950multiple domain model, logical design, 269-273multiple instances of GPOs, 290multiple-forest structures versus single-forest

structures, 275-276

N-n command, 728Name Service Provider Interface (NSPI), 926namespace. See logical design of Active Directory (AD)naming configuration, SMART array controllers, 120naming contexts (NCs), 28-32, 169

Olsen_Index.qxd 9/16/04 1:25 PM Page 1137

Page 14: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

naming standards1138

naming standardsActive Directory logical design, 282-288assessment data gathering, 244

NAS (Network Access Servers), 979-980, 1019NAT (Network Address Translation), 67-69native mode (Windows 2000), 169native mode. See functional levelsnavigation, WMIC, 721NCs. See naming contextsNDTSutil tool, 876Net Logon settings, 53NetBEUI (NetBIOS Extended User Interface)

protocol, removal of support for, 70NetBIOS, assessment data gathering, 233NetBT Gateway, 68-69NetDiag, troubleshooting, 821Netdom method, renaming DCs, 24, 27NetIQ migration tools, 203NETSH.exe command, 393network, documentation of existing bandwidth,

375-377Network Access Servers. See NASnetwork adapters

assessment data gathering, 235-237removal of support for, 71

network adapters (NICs), 446-448network administrators, assessment team members, 225network assessment (migration planning), 463Network backup option, 905network bridge feature, 65-66network clients

HP SIM architecture, 587system requirements for HP SIM installation, 592

Network Interface Controllers (NICs), 446-448Network Load Balancing (NLB), 965network services

assessment data gathering, 245-246physical design phase (migration planning), 392

DHCP, 392-393DNS, 393-406remote access, 407

network services section (assessment data template),233-235

network software repository, creating, 578-582network structure. See architectureNetwork Time Protocol (NTP), 36network topology map (assessment data template),

233-234network-based Windows Server 2003 deployment,

561-582bootable server configuration floppy disk creation,

561-565network software repository creation, 578-582server batch file creation, 573-577server profile script files creation, 565, 568-573target server deployment, 582

networking, new features. See new features, networking

new featuresActive Directory (AD), 4

application partitions, 28-32DCPromo, 44-48Domain Controller Rename, 23-28Domain Rename, 36-44FRS and DFS, 34-35functional levels, 62-63GC (Global Catalog) improvements, 19-23Group Policy, 50-60Linked Value Replication (LVR), 49replication, 33-34scalability, 62schema, 64time synchronization, 36Time To Live (TTL) stamp, 64troubleshooting tools, 60-62Universal Group Membership Caching, 4-19

DHCP, 392-393DNS, 393-406in HP SIM, 585MSCS, 1002-1003

application-monitor resources, 984-988cluster management tools, 996-1001quorum schemes, 980-984server consolidation best practices, 1001-1002spooler resource updates, 996WMI cluster management, 988-996

networking, 64, 71-72DNS, 64-65home networks, 65-66Internet Authentication Service (IAS), 67protocols, 69-70Remote Desktop, 66-67RRAS, 67-69

NLB, 1004-1007GUI, 1004IGMP support, 1006-1007unicast warning message, 1005virtual clusters, 1004-1005

ProLiant Servers, 94blade servers, 97-98iLO and RILOE II Directory Services

integration, 100OBDR tape drives, 100-101SIM (Systems Insight Manager), 98-99x86 processors, 94, 97

remote access, 407security, 72-73

Credential Manager, 82-83cross forest trusts, 89-93EFS (Encrypting File System), 80-82Internet Connection Firewall, 80-81PKI (Public Key Infrastructure), 83-88Software Restriction Policies, 73-79

in SSSTK (SmartStart Scripting Toolkit) Release 2.2, 549

Olsen_Index.qxd 9/16/04 1:25 PM Page 1138

Page 15: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

payback period 1139

WMI (Windows Management Instrumentation),93-94

WMP (Workload Management Pack) v2.0, 512NFS Server (RDP—Windows edition), 630NICs (Network Interface Controllers), 446-448NIMDA virus, 313NLB (Network Load Balancing), 965

new features. See new features, NLBNLTest, troubleshooting, 821-822non-RPM job objects, capturing, 533-534nonauthoritative restore (FRS), troubleshooting, 365nonauthoritative restores, 862-863Notification Area Shortcut Menu, 1041NSPI (Name Service Provider Interface), 926NTBackup, 858NTDS, 823NTDS.DIT database, 897NTDS.DIT file, 893NTDSUtil troubleshooting tool, 61NtEvent class, 724NTFRS jet database, 1105NTFS permissions, security planning and design, 312NTP (Network Time Protocol), 36NTP server designation, time synchronization, 414

O-o command, 728OAB (offline address book), 947OBDR (one button disaster recovery) tape drives,

100-101objects

connection, 1101deletions, restoring massive deletions, 878-880exporting, 725-731importing, 725-726, 731

adding users, 733-735CSVDE, 735user attributes, 731-734

individual objects, authoritative restores, 878links

ADLRM, 884-888anomalies, 882group membership, 882-884nonrestored, 881-882

managedBy, 883restoring back links, 880, 888

offline address book (OAB), 947offline stores (OSTs), 940one button disaster recovery (OBDR) tape drives,

100-101one-off migrations, multi-forest deployment of

Exchange design, 939-940Open Shortest Path First (OSPF) protocol, removal of

support for, 70Open Systems Interconnection Layer 2 tunneling

protocols, 1010OpenSSH, system requirements for HP SIM

installation, 592

OpenView for Windows. See OVOWOpenView Virtual Replicator. See SWVROperations Agent, 700Operations Console, 700Operations Management Server, 700operations masters, restoring, 888-893Opteron processors, 95optimization, bandwidth (Terminal services RDC),

1053Option ROM Configuration for Arrays (ORCA), 126ORCA (Option ROM Configuration for Arrays), 126ORCA menu, 493-494Organizational Units. See OUsOS imaging jobs, 673-674OSI (Open Systems Interconnection) Layer 2

tunneling protocols, 1010OSPF (Open Shortest Path First) protocol, removal of

support for, 70OSTs (offline stores), 940OU structure, logical design, 278-282OUs (Organizational Units), 944

creating CSVDE output, 736-738deleting accidental object deletions, 879

outbound logs, 1105outbound replica partners, 1106Outlook 2003, 946

Cached Exchange mode, 946-947improved replication, 948-949Unicode support, 947-948

output formatting, WMIC, 722-723overlooking DefaultIPSiteLink case study, replication

topology, 349-350override version increase, authoritative restores, 878overriding License Server discovery process (279561),

1082OVOW (OpenView for Windows), 694

ADTV, 702-704graphic output, 705replication topology, 704-707

monitoring Active Directory, 699-707tier components, 700troubleshooting with, 700-702

P-p command, 728Partial Attribute Set (PAS) replication, 19-21partitions

naming contexts (NCs) as, 169resource partitions, 513

partnership between ProLiant and Windows, 106PAS (Partial Attribute Set) replication, 19-21pass through (Terminal Services), 1061-1062password migration, ADMT, 197-199passwords

Administrator, 859cluster service password, changing, 999

path rules (Software Restriction Policies), 74payback period (business planning), 153

Olsen_Index.qxd 9/16/04 1:25 PM Page 1139

Page 16: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

PC Hot Plug support1140

PCI Hot Plug support, Windows Server 2003 installation, 449

PDC Emulator, 889, 891PDC Emulator (FSMO role), 388Per Device mode (licensing), 1071-1073Per User mode (licensing), 1071-1073performance

inter-site data compression, 34ISTG (Intersite Topology Generator), 33processor comparison, 96sizing Exchange 2003 servers, 955

performance analysis, PMP. See PMPPerformance Management Pack. See PMPperformance monitoring, Management Agents, 740Personal Firewall, 80personal stores (PST), 947physical design phase (migration planning), 375

Build Guides, 422, 425documentation, 431-432documentation of existing network, 375-377file and print services, 418-419network services, 392

DHCP, 392-393DNS, 393-406remote access, 407

ProLiant servers, 419-422server placement, 377-378

DCs, 381-383DNS, 378-379FSMO, 385-391GCs, 384-385Site Affinity, 379-382

time synchronization. See time synchronizationphysical environment, assessment data gathering, 240Pile On issue (in-place upgrades), 187-189pilot (migration planning), 425-426

application test plan, 429communications plan, 430contingency plan, 430documentation and tools, 430evaluation, 431requirements and goals, 426schedule, 428support plan, 428-429user selection, 427

pilot phase (migration planning), 221PKI (Public Key Infrastructure), 83-88Placement, Exchange 2003 servers, 960-961planning migration to Exchange 2003, 919

business justification, 919-920SLAs, 920-921

plans (Disaster Recovery Plan), 856. See alsomigration planning

backups, 857-858developing, 857recovery requirements, 858SLA (Service Level Agreement), 857testing, 858validation, 858

PMP (Performance Management Pack), 501-510, 744PMP (ProLiant Essentials Performance Management

Pack), 144Point-to-Point Tunneling Protocol (PPTP), 1010policies

License Server Security Group, Terminal ServerLicensing, 1074

Prevent License Upgrade, Terminal ServerLicensing, 1073

Remote Access, 1021, 1024Single Session, 1066software restriction, Terminal Services, 1067

ports, Exchange 2003, 929Post-Outlook 2000 clients, Exchange 2003, 946postponing migration, 167-168PPTP (Point-to-Point Tunneling Protocol), 1010Pre-Boot Execution (PXE), 1091Pre-Outlook 2000 clients, Exchange 2003, 945Preboot eXecution Environment Enable/Disable

Utility (PXEBOOT), 556Preboot Execution Environment. See PXEprefailure warranty

hard drives, 120on ProLiant server memory, 118

Preferred Bridgehead Server (BHS), 1102Prevent License Upgrade policy, Terminal Server, 1073primary installation, Windows Server 2003, 456print services, physical design phase (migration

planning), 418-419printers

naming standards, 287redirected names (Terminal Services RDC), 1052redirection, Terminal Services, 1066spooler resource updates (MSCS), 996

private keys, recovering, 85-87privileges. See user privilegesProcess Monitor tab, 808processes

adding to resource partitions, 526-532viewing in resource partitions, 529-532

processorssizing Exchange 2003 servers, 954x86 processors, 94

Programs tab (RDC remote connections), 1052project leaders, assessment team members, 226project managers, design team members, 262ProLiant

disaster recovery, 900-901backup recovery solutions, 903-905, 909high availability, 901-03RAIS (Redundant Array of Independent

Servers), 903troubleshooting

proactive troubleshooting, 837servers, 838-845utilities, 846-852

ProLiant 100 servers, 1098-1099ProLiant BL-e class blade servers, 115

Olsen_Index.qxd 9/16/04 1:25 PM Page 1140

Page 17: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

RBL (real-time block) 1141

ProLiant BL-e class servers, 1091ProLiant BL-p class blade servers, 115ProLiant BL-p class servers, 1092-1093ProLiant DL servers, 116, 1094-1096ProLiant DL380 G3 Server, 1046ProLiant Essentials Foundation Pack, 129-130, 146,

479, 501ProLiant Essentials Performance Management Pack

(PMP), 144, 501-507, 510ProLiant Essentials Rapid Deployment Pack. See RDPProLiant Essentials software, 478

discontinued products, 484Management CD, 486PMP (Performance Management Pack), 144, 501-510ProLiant Essentials Foundation Pack, 129-130, 146,

479, 501ProLiant Essentials value packs, 146, 480-481, 501ProLiant Firmware Maintenance CD, 481-482ProLiant Software Maintenance CD, 482-483SmartStart CD, 484-485SSSTK. See SmartStart Scripting ToolkitWMP. See Workload Management Pack

ProLiant Essentials value packs, 146, 480-481, 501ProLiant Essentials Workload Management Pack

(WMP), 144-145ProLiant Firmware Maintenance CD, 481-482ProLiant Integration module components, 669-674,

681-682ProLiant Integration Module for Deployment Server

(RDP—Windows edition), 632ProLiant Integration Module for NFS Server

(RDP—Windows edition), 632ProLiant ML servers, 1096-1098ProLiant network adapters, assessment data gathering,

235-237ProLiant Server Setup and Management kit. See

ProLiant Essentials Foundation PackProLiant servers

cluster support information, 1007configuration software tools and utilities, 124-129continuity and component commonality, 113-114core techologies, 110-113cost savings, 163-164deployment. See deploymentExchange 2003, 961-963history of, 103-106management processors, 121-124memory, 117-119migration tools, 204modeling system, 114-116new features. See new features, Proliant serverspartnership with Windows, 106physical design phase (migration planning), 419-422post-upgrade tasks, 192software and drivers Web site, 498-499storage options, 119-121system requirements for migration, 178-179systems management software tools and utilities,

134-146

technical support, 487Windows Server 2003 installation. See

Windows Server 2003, installationWindows Server 2003 upgrades. See

Windows Server 2003, upgradesProLiant Software Maintenance CD, 482-483ProLiant Support Pack. See PSPproperties

resources in clusters, sample VBS, 1119, 1123WMI, 714, 718-719

protocolsnew features, 69-70Remote Desktop Protocol, device support, 1058

providers, WMI, 709-713Prune and Graft versus Domain Rename, 39PSP (ProLiant Support Pack), 132, 755

deployment, 757, 778in Windows, 757RDU, 758-768, 773-775return codes, 776Windows examples, 776-778

manual downloads, 750RDU. See RDU (Remote Deployment Utility)remote deployment, 750requirements, 756

PSP files, updating, 682PST (personal stores), 947Public Folder Proxy container, 936Public Folders, 938-939Public Key Infrastructure (PKI), 83PXE (Preboot Execution Environment), 622-629, 1091PXE server (RDP—Windows edition), 631PXEBOOT (Preboot eXecution Environment

Enable/Disable Utility), 556

Q-RQamericas.Qtest.cpqcorp.net domain, 882QDG (Query Based Distribution Group), 927QOS Packet Scheduler, 51Query, 1064Quest, monitoring Active Directory, 697-698Quest Fastlane Migrator utility, 202Quest Reporter, 698quorum schemes (MSCS), 980-984Quser, 1064

-r command, 728rack servers, ProLiant DL servers, 116RADIUS (Remote Authentication Dial-In User

Service), 1011Radius Proxy, IAS server as, 67RAID ADG (Advanced Data Guarding), 120-121RAIS (Redundant Array of Independent Servers), 903Rapid Deployment Pack. See RDPRAS (remote access servers), 1018RAWXML, 722RBL (real-time block), 930

Olsen_Index.qxd 9/16/04 1:25 PM Page 1141

Page 18: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

RBSU (ROM-Based Setup Utility)1142

RBSU (ROM-Based Setup Utility), 125-126configuration, 849main menu, 489-491versions, 491

RDC (Remote Desktop Connection), 1051client interface, 1051-1052connections, 1051-1054console connection, 1058installing, 1059low bandwidth optimization, 1053redirected printer names, 1052resource redirection security, 1053SmartCards, 1053switching to remote sessions, 1053virtual channels, 1054Windows CE, 1055

RDP (ProLiant Essentials Rapid Deployment Pack),133-134, 619

architecture, 621-629benefits, 620-621blade server rip and replace, 655-656, 666-668booting from SAN, 682-689deployed server configuration, 662-666Deployment Server Console, 647-651, 678-681Deployment Server directory structure, 674-678documentation, 690-691image capture, 660-662image deployment, 662-663implementation examples, 636-643installation requirements, 643-646licensing, 689-690ProLiant Integration module components, 669-674,

681-682scripted installation deployment, 658-660virtual bays, 650-654Windows edition architecture, 629-636

RDU (Remote Deployment Utility), 131-133, 746,758, 769-772

Applicable Support Packs toolbar, 760component configuration, 763-765control window, 758menu bar, 759Repository toolbar, 759Repository view tree, 760-761Revision History and Properties option, 762-763target computer list, 761-762Target Machine toolbar, 760-761

real-time block list (RBL), 930REBOOT (Reboot Utility), 556recepient filtering, Exchange 2003, 933recommendations

assessment phase (migration planning), 255-256VPNs, 1019

recommended system configuration,Windows Server 2003 installation, 438

recoveringDCs, FSMO role holders, 888-890Exchange, 42-43private keys, 85-87

recovery requirements, Disaster Recovery Plan, 858Recovery Storage Group (RSG), 921redirected printer names, Terminal Services (RDC),

1052redirection

printers, Terminal Services, 1066resources, RDC, 1053

Redundant Array of Independent Servers (RAID), 903Reed Elsevier case study, 1088-1089

replication topology, 354-357refreshing the cache, 14-18Regional Datacenter deployment, Exchange 2003

servers, 961Registry settings, 15-17, 1079-1082Relative Identifiers. See RIDsreliability, ProLiant server memory, 117-119reliable time source designation, time

synchronization, 413-415remote access

configuration, HP case study, 1043-1046new features, 407

Remote Access Policies, 1021, 1024remote access servers (RAS), 1018Remote Assistance policy, 55Remote Authentication Dial-In User Service

(RADIUS), 1011remote connections

RDC, 1052Terminal Server infrastructure design, 1077

Remote Deployment Console Utility, 769command-line arguments, 770-772command-line syntax, 769

Remote Deployment Utility. See RDURemote Desktop, 61, 66-67

clients, 1051troubleshooting, 823

Remote Desktop Connection. See RDCRemote Desktop for Administration, 1055

advantages, 1056-1057best practices, 1059-1061configuration, 1057console connection, 1058iLO Advanced Features Pack, Terminal Services pass

through, 1061-1062installing RDC, 1059Remote Desktop Protocol, 1058session encryption levels, 1059-1060sessions, 1056

Remote Desktop Protocol, device support, 1058Remote Desktop User Group, 1065Remote Desktop Web Connection

console connection, 1058RDC, 1054

Remote Desktops MMC, Terminal Services consoleconnections, 1063

remote dial-in users, VPNs, 1016Remote Insight Board (RIB), 1046Remote Insight Lights-Out Edition II. See RILOE II

Olsen_Index.qxd 9/16/04 1:25 PM Page 1142

Page 19: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

role-based security 1143

Remote Insight tab, 809remote management support, Windows Server 2003

installation, 450Remote Procedure Calls. See RPCsremote sessions, switching to Terminal Services, 1053remote site logon, Universal Group Membership

Caching, 14removal process (GCs), 23renaming

DCs, 23DNS delegation records, 27-28GUI method, 24-25Netdom method, 24, 27

domains, 36-38application compatibility of Domain Rename,

40-42capabilities of Domain Rename, 39cost-benefit analysis, 43-44Domain Rename versus Prune and Graft, 39Exchange recovery, 42-43limitations of Domain Rename, 40

rendom.exe, update to, 43Repadmin command, 875Repadmin troubleshooting tool, 61repeating command (WMIC), 723replacement upgrades, cluster deployment, 973-974replica partners, defined, 1106replica set structure (FRS), 358-359replica sets, defined, 1106replication

Active Directory, 33-34, 899ADTV, 704-707BHS, 1101ISTG, 1102KCC, 1102least-cost path, 1102LVR (Linked Value Replication), 49Outlook 2003 improvements, 948-949PAS (Partial Attribute Set) replication, 19-21Preferred Bridgehead Server, 1102site affinity, 1103site link bridges, 1104-1105site links, 1104sites, 1102troubleshooting, 826-829

replication dampening, 329Replication Monitor, monitoring Active Directory,

695-696replication topology, 326

best practices, 343-349case studies

Hewlett-Packard (HP), 354multi-tier topology, 351-353overlooking DefaultIPSiteLink, 349-350Reed Elsevier, 354-357

FRS. See FRS (File Replication Service)GC servers, 337-338improvements, 339-343

limitations, 329-336replication dampening, 329single-master model versus multimaster model,

327-329reporting feature (HP SIM), 613-614repositories, software, 784Repository toolbar (RDU), 759Repository view tree (RDU), 760-761requirements

HP SIM installation, 590-592installation requirements for SSSTK deployment

methods, 550-551Management Agents installation, 802pilot (migration planning), 426PMP, 508-509ProLiant migration, 178-179PSP, 756RDP installation, 643-646RPM, 513StorageWorks minimum requirements, cluster

deployment, 974-975Terminal Server infrastructure design, 1076-1077

resource domain migration, Hewlett-Packard (HP)and Compaq merger case study, 215-216

resource forests, Exchange design, 940-941Resource Kity, Terminal Server Licensing, 1075Resource Partitioning Manager (RPM), 510resource partitions, 513

adding processes to, 526-532capturing non-RPM job objects, 533-534creating, 520-524rules, 532viewing processes, 529-532

resourcesclusters, sample VBS, 1119, 1123RDC, redirection security, 1053

restoringActive Directory. See Active Directory, restoringDHCP, 392

restriction policies, Terminal Services, 1067restructure method (migration planning), 189-192return codes, PSP, 776Return on Investment (ROI), 152Revision History and Properties option (RDU),

762-763RIB (Remote Insight Board), 1046RID master (FSMO role), 387-388RIDs, master, 890rights. See user rightsRILOE, integration with Deployment Server Console,

648-649RILOE II (Remote Insight Lights-Out Edition II), 123

Directory Services integration, 100troubleshooting, 850-851

rip and replace (blade servers), 655-656, 666-668ROI (Return on Investment), 153

calculating, 155-159role-based security, 311-312, 614

Olsen_Index.qxd 9/16/04 1:25 PM Page 1143

Page 20: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

roles, restoring operations masters1144

roles, restoring operations masters, 890rollback plan, pilot (migration planning), 430rolling upgrades versus downtime upgrades, cluster

deployment, 971-973ROM-based enhancements to ProLiant servers, 491-492ROM-Based Setup Utility (RBSU), 125-126Routing and Remote Access Server. See RRASRPC troubleshooting policies, 57RPCs (Remote Procedure Calls), 918, 1014RPM (Resource Partitioning Manager), 510-546RRAS (Routing and Remote Access Server), 67-69, 1029RSG (Recovery Storage Group), 921rules

processing order, 77-78resource partitions, 532

SSAFER. See Software Restriction PoliciesSAM (Security Accounts Manager), 915SAN backup option, 905SANs (Storage Area Networks), 682-689, 921SBC (Server Based Computing), 1050scalability, new features, 62Scaling Microsoft Exchange 2000, 917schedule, pilot (migration planning), 428schema, new features, 64Schema master, 386, 890script files (Deployment Server directory structure), 677scripted install jobs, 669scripted installation deployment, blade servers, 658-660scripted installation, 469scripting ADMT, 196scripts

accidental object deletions, 879WMI, 713-720

SCU (System Configuration Utility), 129searches, accidental object deletions, 879Secure RPC Authentication. See SRASecure Sockets Layer. See SSLsecurity

assessment data gathering, 241authentication. See authenticationauthorization. See authorizationclient workstations, new features, 247DHCP and PXE, 628-629encryption, Terminal Services, 1067Exchange 2003 deployment, 929-930features comparison chart, 249-250Management Agents, 741new features. See new features, securityNIMDA virus, 313of time synchronization, 411-412planning and design, 309

account security, 315-322NTFS and share permissions, 312role-based security, 311-312security groups, 309-310security templates, 313-315

Software Update Service (SUS), 323-325Windows Update Service (WUS), 325-326

RDC, resource redirection, 1053role-based security, 614, 783Verson Control Agent, 782-783wireless LANs, 71

Security Accounts Manager (SAM), 915security groups, 309-310Security Levels (Software Restriction Policies), 74Security Policy Editor, 1065security principals, naming standards, 284-288security section (assessment data template), 248-251security templates, 313-315seizing roles (FSMO), 390-391sender filtering, Exchange 2003, 932senior systems engineers, design team members, 262senior systems/process engineers, design team

members, 262Server Based Computing (SBC), 1050server batch files, creating, 554-558, 573-577server blades. See blade serversserver classes, physical design phase (migration

planning), 421-422server configuration floppy disks, creating, 558-559server consolidation

best practices, 1001-1002clusters, 966-967

server placement, 377-378DCs, 381-383DNS, 378-379FSMO, 385-391GCs, 384-385Site Affinity, 379-382

server profile script files, creating, 565, 568-573server profiles, creating, 552-554server requirements, Terminal Server infrastructure

design, 1076server systems topology section (assessment data

template), 231-241Server utility, troubleshooting, 846-847servers

Exchange 2003, sizing and placement, 949-955,959-961

GC. See GCsnaming standards, 285Operations Management, 700ProLiant 100, 1098-1099ProLiant BL-e class, 1091ProLiant BL-p class, 1092-1093ProLiant DL, 1094-1096ProLiant ML, 1096-1098ProLiant servers, Exchange 2003, 961-963RDP—Windows edition server components, 630-635troubleshooting, 838-843, 845

Service Level Agreements (SLAs), 857, 920Session Directory, 1067-1069session encryption, Remote Desktop Administration,

1059-1060

Olsen_Index.qxd 9/16/04 1:25 PM Page 1144

Page 21: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

subtrees, authoritative restores 1145

sessions, Remote Desktop for Administration, 1056Set Boot Order Utility (STBTORDR), 556SETBOOT (Set Boot Utility), 556Setup and Installation and User Guides, 843Shadow Volume scheduling, 987-988share permissions, security planning and design, 312sharing encrypted files, 80-82short message service (SMS), 881showvector command, 889showvector option, 889Sign Disk Utility (SIGNDISK), 557SIGNDISK (Sign Disk Utility), 557SIM (System Insight Manager), 98-99, 136-138,

741-743, 749, 779-780, 783installation, 786obtaining, 785-786security, 783verson control, 750

Simple Network Time Protocol (SNTP), 36simple networks, RDP implementation, 636-637single datacenter deployment, Exchange 2003 storage

groups, 950single domain model, logical design, 267-268single forest deployment, Exchange design, 937Single Session policy, 1066Single Sign On (SSO) capability, 82-83single-forest structures versus multiple-forest

structures, 275-276single-label DNS domains, client configuration, 406single-master model (replication), versus multimaster

model, 327-329Site Affinity, server placement, 379-382site coverage, 379site links, naming standards, 287Site Replication Service (SRS), 944sites

affinity, 1103defined, 1102links, 1104-1105naming standards, 287

sizing Exchange 2003 servers, 954-955SKUs. See Windows Server 2003 SKUsSLAs (Service Level Agreement), 857, 920

migration to Exchange 2003, 920-921slow links, replication over, 333-334SMART array controllers, 120-121SmartCards

RDC, 1053troubleshooting, 824

SmartStart, 130-131SmartStart CD, 484-485

installation paths, 495-498Management Agents installation, 804-805

SmartStart for Servers, 748SmartStart installation paths, 452-461SmartStart Scripting Toolkit. See SSSTKSMS (short message service), 881snapshots, Volume Shadowing feature, 987-988

SNMP, Management Agents installation, 803-810SNTP (Simple Network Time Protocol), 36software

HP SIM (HP Systems Insight Manager), 583-617maintenance. See maintenance, softwareProLiant Essentials software. See ProLiant Essentials

softwareRDP. See RDPrepositories, 784restriction policies, Terminal Services, 1067supported for Windows Server 2003 installation,

441-442updates, VCRM, 744Web site for, 498-499

Software Maintenance CD, 482-483Software Maintenance Subscription, 748Software Restriction Policies, 51, 73-79Software Update Service (SUS), 323-325Solution Matrix, 152, 155-157Sonar (FRS troubleshooting tool), 366-367Sonar monitoring tool, 61spanning tree algorithm, improvements to, 339special-purpose OUs, 282speed bumps, ProLiant server modeling system, 114spooler resource updates (MSCS), 996SQL, cluster deployment, 979SRA (Secure RPC Authentication), 1014-1015SRS (Site Replication Service), 944SSL (Secure Sockets Layer), 1015SSO (Single Sign On) capability, 82-83SSSTK (SmartStart Scripting Toolkit), 132, 546-550

server deploymentserver batch file creation, 554-558server configuration floppy disk creation, 558-559server profile creation, 552-554

Windows Server 2003 deployment, 559CD-based deployment, 560network-based deployment, 561-582

SSSTK Hardware Configuration jobs, 674SSSTK jobs, 673-674stability, HP SIM, 588staging directories, 362-363, 1106standardization, HP SIM, 589Standby FSMO, 889STATEMGR (State Manager Utility), 557status overview page (HP SIM), 605STBTORDR (Set Boot Order Utility), 556storage, tapes (Windows 2003), 906Storage Area Networks (SANs), 682-689, 921storage groups (Exchange 2003), 950storage options

ProLiant servers, 119-121supported for Windows Server 2003 installation,

442-446Storage Works Virtual Replicator (SWVR), 975StorageWorks, minimum requirements, 974-975style sheets, WMIC, 722-723subtrees, authoritative restores, 878

Olsen_Index.qxd 9/16/04 1:25 PM Page 1145

Page 22: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

support phase (migration planning)1146

support phase (migration planning), 221support plan, pilot (migration planning), 428-429support. See technical supportSurvey Utility, version control, 749SUS (Software Update Service), 323-325switch flooding, 1006SWVR (Storage Works Virtual Replicator), 975synchronization. See time synchronizationsystem administration

Management Agents, 739-741System Management home page, 739

management applicationsPMP, 744SIM, 741-743

monitoring Active Directory, 693-694, 707event logs, 696MOM, 696-697native tools, 694-695OVOW, 699-707Quest software, 697-698Replication Monitor, 695-696

PSP, 755deployment, 757-768, 773-778ProLiant Remote Deployment Console Utility,

769-772requirements, 756

software maintenance. See maintenance, softwareVCRM. See VCRMWindows Management Instrumentation. See WMI

system administrators, assessment team members, 225System Configuration Utility (SCU), 129system environment section (assessment data

template), 230System Erase Utility, 127-128, 674system groups, 587system lists, 586System Lists region (HP SIM), 602-605System Management Homepage, 135-136, 739System Management Setup Wizard, 790-797System Overview dialog box, 534-546system requirements. See requirementsSystem Restore policy, 55-56System Type Utility (SYSTYPE), 557system utilities, server batch file creation, 558systems, monitoring with HP SIM, 602-605systems architects, design team members, 262systems architecture, 109Systems Insight Manager (SIM), 98-99, 136-138, 741systems management utilities, 134-146, 1074SYSTYPE (System Type Utility), 557SYSVOL

file structure, 360replica sets, 359restoring, 888tree, 1106

Ttape drives, OBDR tape drives, 100-101tapes, storage (Windows 2003), 906target computer list (RDU), 761-762Target Machine toolbar (RDU), 760-761target servers, deployment, 582tasks (HP SIM), 606-609TCO (Total Cost of Ownership), 151, 154-155, 1045TCP, Management Agents installation, 803-804TCP/IP, assessment data gathering, 245TCP/UDP port ownership, 71team members (migration planning)

assessment phase, 224-228design team, 261-263

technical assessment, migration to Exchange 2003, 922directory infrastructure, 925-933exisiting messaging organization, 922-923mail-enabled applications, 924messaging systems topology, 923-924

technical justification for migration plans, 166-167technical support

for HP SIM, 616-617ProLiant servers, 487

TEMP.EDB file, 894templates

creating for assessment data gathering, 228-229AD structure section, 242-244application validation section, 246existing system environment section, 230growth section, 253introduction section, 230management and administration structure

section, 251-253security section, 248-251server systems topology section, 231-241user environment section, 247-248Windows 2003 infrastructure section, 241-242Windows 2003 network services section, 245-246

security templates, 313-315Temporary License Expired pop-up messages, 1072Termianl Server Capacity Planning tools, 1075Terminal Server, infrastructure design, 1075-1077Terminal Server client, error messages, 1107

general error messages, 1107-1114licensing error messages, 1115-1117

Terminal Server License Manager, 1066Terminal Server Licensing, 1070-1071

CAL Token, 1074client connections, 1072External Connector, 1073License Server Security Group policy, 1074licensing modes, 1071-1073management tools, 1074Prevent License Upgrade policy, 1073Resource Kit utilities, 1075

Terminal Server Licensing upgrades, 1071

Olsen_Index.qxd 9/16/04 1:25 PM Page 1146

Page 23: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

troubleshooting 1147

Terminal Services, 1049, 1055ADSI, 1065advantages, 1050case study, 1077-1079client, features, 1051Client Creator, 1051client error messages, 1066command-line utilities, 1064console connections, 1062-1063encryption, 1067enhanced features, 1064-1070eventvwr.msc, 1064Group Policy, 1065Group Policy Editor, 1068-1069printer redirection, 1066RDC. See RDCRemote Desktop for Administration. See Remote

Desktop for AdministrationRemote Desktop User Group, 1065SBC (Server Based Computing), 1050Security Policy Editor, 1065Session Directory, 1067-1069Single Session policy, 1066software restriction policies, 1067Terminal Server License Manager, 1066Terminal Server Licensing. See Terminal Server

LicensingTerminal Services Manager, 1066tsadmin.exe, 1064tscc.msc, 1064unattended installations, 1069WMI, 1065WMIC, 724-725

Terminal Services (TS) Client. See Remote DesktopTerminal Services Advanced Client. See TSACTerminal Services Configuration tool, 1064Terminal Services Connection Configuration (TSCC),

1065Terminal Services Manager, 1064-1066terminology, Universal Group Membership Caching,

8-10testing

Disaster Recovery Plan, 858migration planning. See pilot (migration planning)ProLiant server memory, 118

third-party memory, 118-119tier components, OVOW, 700time services policies, 57time synchronization, 89, 407

in authentication process, 408-411in authorization process, 410-412external time sources, 413Kerberos policy configuration, 413new features, 36NTP server designation, 414reliable time source designation, 413-415security against attacks, 411-412troubleshooting, 415-417

Time To Live (TTL) stamp, 64TLS (Transparent LAN Services), 1014TNF (Transfer Neutral Format), 950tombstonelifetime attribute, 334-335, 864tools

boot utilities, server batch file creation, 555-556calculating ROI, 155-159cluster management (MSCS), new features, 996-1001disk utilities, server batch file creation, 556for ProLiant servers

configuration tools, 124-129deployment tools, 129-134systems management tools, 134-146

FRS troubleshooting, 366-372Group Policy management tools, 302-306in HP SIM, 610, 613intra- and inter-forest migrations, 193-194migration planning, 194-204pilot (migration planning), 430in SSSTK (SmartStart Scripting Toolkit), 548-549System Erase, 674system utilities, server batch file creation, 558troubleshooting time synchronization, 415-417troubleshooting tools, new features, 60-62

Tools directory (Deployment Server directory structure), 677

Total Cost of Ownership (TCO), 151, 1045training requirements, assessment phase (migration

planning), 255transaction logs, Exchange 2003, 953-954Transfer Neutral Format (TNF), 950transferring roles (FSMO), 390-391Transparent LAN Services (TLS), 1014troubleshooting. See also best practices

Active DirectoryAccount Lockout tools, 824action plans, 811-816data collection, 816-818DCDiag, 820DCPromo, 829-834defining problems, 810-811DFS, 836DNS, 824-825event logs, 822-823FRS, 836Group Policy, 834-836NetDiag, 821NLTest, 821-822Remote Desktop, 823replication, 826-829SmartCards, 824

error messagesgeneral error messages, 1107-1114licensing error messages, 1115-1117

File Replication Service, 365-372new features, 60-62with OVOW, 700-702

Olsen_Index.qxd 9/16/04 1:25 PM Page 1147

Page 24: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

troubleshooting1148

ProLiantproactive troubleshooting, 837servers, 838-845utilities, 846-852

ProLiant server setup, 494with Remote Desktop, 66-67RPC troubleshooting policies, 57time synchronization, 415-417

trust definitions, Active Directory logical design,306-308

Trusted Publishers policy (Software RestrictionPolicies), 79

TS Client. See Remote DesktopTSAC (Terminal Services Advanced Client), 1054tsadmin.exe, 1064TSCC (Terminal Services Connection Configuration),

1065tscc.msc, 1064Tsdiscon, 1064TSTCST.EXE, 1075TTL (Time To Live) stamp, 64tunnels, VPNs, 1013

UUI (user interface), 593. See also GUI

for RPM (Resource Partitioning Manager), 516-521Ultrasound (FRS troubleshooting tool), 61, 367-369Ultrasound help file (FRS troubleshooting tool),

370-372unattend.txt file, modifying, 681unattended answer files (DCPromo), 46-48unattended installation, Windows Server 2003, 456

from Windows 2000, 473-475from Windows NT 4.0, 469-470

unattended installation text files, 554unattended installations, Terminal Services, 1069unicast warning message (NLB), 1005Unicode support, Outlook 2003, 947-948Universal Group Membership Caching, 4-5

advantages and disadvantages, 19deleting cache for entire site, 18deleting cache for single user, 17enabling, 5-10example scenarios, 11-13refreshing the cache, 14-18Registry settings, 15-17remote site logon, 14terminology, 8-10

universal groups, security planning and design, 309-310Update Sequence Number (USNs), 875updates, software (VCRM), 744upgrade paths

cluster deployment, 970-971replacement upgrades, 973-974rolling upgrades versus downtime upgrades,

971-973for Windows Server 2003, 464-465

upgradesversus clean installs, cluster deployment, 968, 970RPM, 516StorageWorks upgrades, cluster deployment, 975-976Windows 2000 License Server, 1071

upgrading to Windows Server 2003. See alsomigration planning

from Windows 2000, 471-478from Windows NT 4.0, 467, 469-470planning. See migration planningpreparations for, 465-466

USB-based Virtual Media feature, 123user accounts, creating CSVDE output, 736-738user attributes, importing objects, 731-734user environment, assessment data gathering, 240-241user environment section (assessment data template),

247-248user interface. See UIuser migration, Hewlett-Packard (HP) and Compaq

merger case study, 217user privileges and tasks (HP SIM), 606user rights, Logon Locally, 52user selection, pilot (migration planning), 427users

importing objects, 733-735naming standards, 285

USN journal, 1106USNs (Update Sequence Number), raising, 875utilities. See tools

Vvalidating applications, assessment data gathering, 246validation, Disaster Recovery Plan, 858VBSes, resource properties in clusters, 1119, 1123VCRM (Version Control Repository Manager), 139,

744-746, 779IE security settings, 789-790installation, 790-797installation requirements, 787-788obtaining, 785-786SIM, 779-780, 783-786software repositories, 784version control, 749-750Version Control Agent, 779-782

help file requirements, 786-787security, 782-783

VERITAS NetBackup, 903version control, 748-750Version Control Agent, 746, 779-782

help file requirements, 786-787security, 782-783version control, 749with VCRM, 749-750

Version Control Repository Manager. See VCRMversion vector joins, 362, 1106version vectors, 1106versions

Exchange 2003, 918of PMP, 509

Olsen_Index.qxd 9/16/04 1:25 PM Page 1148

Page 25: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

Windows Server 2003 1149

VFLOP (Virtual Floppy Utility), 557VIP (Virtual IP), NLB, 1004-1005virtual bays, 650-654virtual channels, RDC, 1054virtual clusters (NLB), 1004-1005Virtual Floppy Utility (VFLOP), 557Virtual Graphical Remote Console feature, 123virtual LANs (VLANs), 639-641Virtual Private Networks. See VPNsVirtual Snapshot Services (VSS), 918viruses, NIMDA, 313VLANs (virtual LANs), 639-641Volume Sequence Numbers (VSNs), 1106Volume Shadowing feature, 987-988VPNs (Virtual Private Networks), 1009

benefits, 1018configuring remote access, HP case study, 1043-1046history of, 1010-1012implementation, 1016

branch office network links, 1016-1017internal networks, 1017-1018remote dial-in users, 1016

installation of Windows Server 2003, 1029-1033installation of Windows Server 2003 as an IAS

server, 1019-1029ProLiant specifications for VPN servers, 1046recommendations, 1019tunnels, 1013

VSNs (Volume Sequence Numbers), 1106VSS (Virtual Snapshot Services), 918vvjoins, 1106

WW32tm.exe troubleshooting tool, 60, 415-417WANs, RDP implementation, 641-643WBEMTest.exe, 708Web folders, sharing encrypted files, 81web sites

ADLRM, 888Eastman Chemical Company, 1087Georgia Department of Transportation, 1088Hewlett-Packard, 1088ProLiant information for Windows Server 2003

installation, 441ProLiant technical support, 487Reed Elsevier, 1089for software and drivers, 498-499

Web-enabled Management Agents, 799Windows

partnership with ProLiant servers, 106PSP deployment, 757, 776-778

Windows 2000Management Agents, 801-802remote connectivity, 1051security features comparison chart, 249-250upgrading from, 471-478

Windows 2000 Datacenter, cluster deploymentupgrades, 970-971

Windows 2000 Primer Utility, 239Windows 2003

certified tape storage, 906RDC, 1051-1054security features comparison chart, 249-250Terminal Services. See Terminal Services

Windows 2003 64-bit Edition, Terminal Services, 1055Windows 2003 Datacenter Edition, Terminal Services,

1055Windows 2003 Enterprise Edition, Terminal Services,

1055Windows 2003 infrastructure section (assessment data

template), 241-242Windows 2003 network services section (assessment

data template), 245-246Windows 2003 Standard Edition, Terminal Services,

1055Windows 2003 Web Edition, Terminal Services, 1055Windows CE, RDC, 1055Windows imaging jobs, 674Windows Load Balancing Service (WLBS), 1007Windows Management Interface. See WMIWindows NT

security features comparison chart, 249-250upgrading from, 467, 469-470

Windows OS files (Deployment Server directorystructure), 677

Windows scripted install jobs, 670-672Windows Server 2003

backups, 859deployment, 559

CD-based deployment, 560network-based deployment, 561-582

installation, 437blade servers, 453-454cluster support, 448command prompt installation, 456Hot Plug RAID memory, 449-450as IAS server to support VPN servers, 1019-1029known issues and workarounds, 457-461manual installation, 454-455PCI Hot Plug support, 449primary installation, 456ProLiant server setup, 488-498recommended system configuration, 438remote management support, 450SmartStart installation paths, 452-461supported NICs, 446-448supported ProLiant configurations, 437supported ProLiant system platforms, 438, 441supported software, 441-442supported storage options, 442-446unattended installation, 456as VPN servers, 1029-1030, 1033Web sites for ProLiant information, 441

new features. See new featuresRemote Desktop client, 1051

Olsen_Index.qxd 9/16/04 1:25 PM Page 1149

Page 26: Index [ptgmedia.pearsoncmg.com]ptgmedia.pearsoncmg.com/images/0131467581/index/... · 2009-06-09 · Index Symbols 100 servers, 1098-1099 A Account Lockout, 61, 317-322 Account Lockout

Windows Server 20031150

upgradesfrom Windows 2000, 471-478from Windows NT 4.0, 467-470planning for. See migration planningpreparations for, 465-466

WBEMTest.exe, 708Windows Management Instrumentation. See WMI

Windows Server 2003 clusters. See clustersWindows Server 2003 for 64-Bit Extended Systems,

96-97Windows Server 2003 SKUs, cluster support, 967-968Windows System Resource Manager (WSRM), 511Windows Update Service (WUS), 325-326Windows XP, Remote Desktop client, 1051Windows XP client as troubleshooting tool, 60WINS, assessment data gathering, 246WINSTA, 1075wireless LANs, security, 71Wireless Network Policy, 51wizards

Active Direction Installation, 867Connection Manager Kit Creation, 1034System Management Setup, 790-797

WLBS (Windows Load Balancing Service), 1007WMI (Windows Management Interface), 58, 93, 707,

988, 1065architecture, 708-709BIOS, 724classes, 724cluster management, 988-996new features, 93-94and NLB, 1007providers, 709-713scripts, 713-720Terminal Services, 724-725WMIC, 720-723

WMI Agent, installation, 809-810WMI filtering, 295-301WMI filters, 58-60WMIC, 61, 93-94, 720

aliases, 721cluster management, 996commands, 720-723disadvantages, 723help, 722navigation, 721output formatting, 722-723

WMP (Workload Management Pack), 144-145, 510-546workload, PMP, 505, 507workstation managers, assessment team members, 225workstations, naming standards, 285write operations, 894WSRM (Windows System Resource Manager), 511WUS (Windows Update Service), 325-326

X-Zx86 processors, new features, 94, 97Xeon processors, 96XML, 722XMMZERO (XMM Memory Check Disable

Utility), 557XP settings in Windows 2000 (GPOs), 301

zone delegation (DNS), 394-401zone properties (DNS), configuring, 405-406

Olsen_Index.qxd 9/16/04 1:25 PM Page 1150