Windows Server - Groups and Rights

 Windows Server - Groups and Rights

Group	Description	Default user rights
Account Operators	Members of this group can create, modify, and delete accounts for users, groups, and computers located in the Users or Computers containers and organizational units in the domain, except the Domain Controllers organizational unit. Members of this group do not have permission to modify the Administrators or the Domain Admins groups, nor do they have permission to modify the accounts for members of those groups. Members of this group can log on locally to domain controllers in the domain and shut them down. Because this group has significant power in the domain, add users with caution.	Allow log on locally; Shut down the system.
Administrators	Members of this group have full control of all domain controllers in the domain. By default, the Domain Admins and Enterprise Admins groups are members of the Administrators group. The Administrator account is also a default member. Because this group has full control in the domain, add users with caution.	Access this computer from the network; Adjust memory quotas for a process; Back up files and directories; Bypass traverse checking; Change the system time; Create a pagefile; Debug programs; Enable computer and user accounts to be trusted for delegation; Force a shutdown from a remote system; Increase scheduling priority; Load and unload device drivers; Allow log on locally; Manage auditing and security log; Modify firmware environment values; Profile single process; Profile system performance; Remove computer from docking station; Restore files and directories; Shut down the system; Take ownership of files or other objects.
For more User Rights : Download   /    Visit:   http://makeonlinetricks.blogspot.com/

FTP Server Creation Procedure

FTP SERVER CONFIGURATION

Ø  Computer connect with existing server (through LAN cable)

Ø  O.S. Windows 2000 Server with IE 6 & SP4 or Windows 2003

Ø  Internal (or) external modem (both end ho and so)

Ø  Parallel phone connection from existing phone (both end HO and SO)

AT HO :

1.                  Install windows 2000 server and 2003 server and create active directory.  Give server name and domain like XXXftpserver, XXXftpdomain.  Give ip number (give running number in your HO domain and not to give your existing HO server IP number)

2.                  Install modem driver and check diagnostics.

3.                  Go to control panel add and remove programs windows components wizard IIS enable all services (ftp transfer protocol ftp service)

4.                  a. Start -+ Program – Admin Tools – Internet Service Manager

b. Click Domain Name – It Shows Server Name

c. Right click the server name – select ‘new’ – select ‘ftp site’ – give name – give IP address (your computer).

d. Give TCP Port – 21 (always)

e. Give path – D:\SBFTP\Received (Create directory)

f. Give permission – read and write – click finish.

(By default created ftp site will be stopped)

g. Right click newly created FTP site – property – check IP address and TCP port and give connections ‘unlimited’.

5.                  a. Select admin tools – routers and remote access

b. Right click server name – configure routing and remote services – click manual selection.

c. Select server name – ports – right click – select property – click selected modem – configure – make tick in ‘inbound only and inbound and out bound’.

d. Give phone number of this server.

6.                  a. Select admin tools – select active directory users and computers.

b. Create a new user (like XXXftp, YYYftp…) and give the password  same in user name.

c. Right click created new user – select ‘dialin’ tab – make tick in ‘allow access’ – select ‘member of’ tab – make the user in domain user and give administrator rights to that user.

d. Create a network user as available in existing server and give Administratory rights (this domain) to that user.

7.                  Check the IIS and RRAS running correctly.

8.                  a. Install MSSQL 2000 client connectivity only (not to install full setup)

b. Click client connectivity – give the server name (existing old server name) alias

9.                  Install Bridge and Plugin. ( Latest 2.5.2 Version)

AT SOS :

10.              Install modem and create a dialup connection with username, password, and phone number created at HO level same as HO.

11.                Install bridge and Plugin (Latest 2.5.2 Version) and configure the FTP.

  

 (Please delete old ‘PATCH’ database   and create new thro ‘SB Plugin’ software)

Complete Windows Guide

Hello all,

Check the below link for trouble shooting Windows OS, complete information is provided by microsoft.

Click Here

Joining two domains ( Servers)

Domains by default are unable to communicate with other domains, which means somewhere in domain DOP1 cannot access any resource that is part of domain DOP2. Before a trust relationship is configured

(A) an administrator in DOP1 cannot give permission to any user of domain DOP2 for files or printers

(B) a user of domain DOP2 cannot sit at a workstation that is part of domain DOP1 and login

After a trust relationship is defined, say DOP1 trusts DOP2 the following happens

(A)users of domain DOP2 can sit at a workstation that is part of domain DOP1 and login to their own domain DOP2 (it will be displayed in the domain dropdown box)

(B)an administrator of domain DOP1 can grant permission to any user of domain DOP2 to file and print resources

(C)users of domain DOP2 are included in the Everyone group of domain DOP1

In the example above DOP1 is the trusting domain, and DOP2 is the trusted domain. Also the above is a one-way trust relationship, i.e. while domain DOP2 users can use domain DOP1 resources, users of domain DOP1 cannot use domain DOP2 resources. A two-way relationship would allow each domain to access resources of the other (if given permission).

The basics of a trust relationship is to first configure domain DOP2 to allow domain DOP1 to trust it, and then configure domain DOP1 to trust domain DOP2:

(1)Log onto domain DOP2 as Administrator

(2)Start Active Directory Domains & Trusts for Domains (Start - Programs - Administrative Tools)

(3)Select "the properties" of the DOP2 domain then "Trust Tab"

(4)Click the Add button to " the domains that trust this domain" box

(5)Enter the name of the domain you want to be able to trust you, i.e. domain DOP1

(6)You can type a password in the Initial Password and Confirm Password, however this is only used when the trust relationship is started. You can leave it blank Click OK to complete the addition

(7)Close the Trust Relationship dialog box

(8)Log off of domain DOP2 and login onto domain DOP1 as Administrator

(9)start Active Directory Domains & Trusts for Domains (Start - Programs - Administrative Tools)

(10)Select "the properties" of the DOP1 domain then "Trust" tab

(11)Click the Add button to " the domains trusted by this domain" box

(12)Enter the name of domain DOP2 and the password if one was configured in step 6

(13)Click OK and close.

(14)Domain DOP1 nowPublish Post trusts domain DOP2

Thanks to Navneet Devgan, System Manager Ambala

Steps Followed in the New Server Installation

1. WINDOWS 2003 -SERVER INSTALLATION
2.SQL –2000 / 2005 ( DATABASE SERVER INSTALLATION )
3.PREREQUISITIES INSTALLATION
SQL2000 - SP4
SQl2005 - SP1
WINDOWS 2003 SERVER SP2
DOTNET 2.0, 2.1, 3.0, 3.5 ( any one version )
MABRY BARCODE (eMO)
4. Meghdoot software installation
> Server Component and client Application
> Share the server folder
eg. PointofSale , Treasury, Subaccounts, Speednet
5. run the software for Database creation

6. Sanchaypost software installation
( POST folder creation)
7. run the software for Database creation
8. Database restoration ( all databases one by one )
9. Copy the MDB files in to concerned server folder
10. DCL user updation ( for SP only)

Check the correctness of Database restoration