MCSA 2012 lab 70-410, Cheat Sheet of Network Theory

Download MCSA 2012 lab 70-410 and more Cheat Sheet Network Theory in PDF only on Docsity! TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com LOCAL USERS — LOCAL GROUPS CAC BUOC TRIEN KHAI: * Phan 1: Thuc hién trén Window Server 2012 1. Tat User Account Control (UAC) 2. Tao Local User Account 3. Cau hinh Log on tu dong bang account dinh san 4. Tao local group account 5. Network access * Phan 2: Thuc hién trén Windows 8 1. Tao Local User va Group 2. Tham khao céc Option khi nhan Ctrl + Alt + Del 3. Enabled Account Administrator 4. Tham khao cdc Option ctia User Account 5. Cho may tinh tu dong log on voi account dinh san A- CHUAN BI M6 hinh bai lab bao gom 2 may - PCO1: Windows Server 2012 R2 - PC02: Windows Server 2012 R2 - 2 may tat firewall. Kiém tra bang lénh Ping gitta 2 may Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 1 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Tel: 08,39322.735 NHAT NGHE Website: www.nhatnghe.com B- THUC HIEN * Phan 1: Thuc hién trén Window Server 2012 1. Tt User Account Control (UAC) - Nhan t6 hop phim 4+ X > chon Control Panel hoac nhan phim P - 6 muc View By > chon Small icons > Microsoft Partner (Learning chon User Accounts View by: Smallicons * & Language §® Network and Sharing Center El Personalization 3 Power Options &@ Region | Sound 1 System: “2 Text to Speech Windows Update & User Accounts - Nhan vao muc Change User Account Control settings Make changes to your user account @ Manage ancther account ange User Account ¢ settings Administrator Local Account Administrator Password protected 2 Phién Ban Thi Nghiém - Luu Hanh Ndi BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner i E Tel: 08.39322.735 (Learning NHAT NGHE Website: www.nhatnghe.com - Nhan t6 hop phim @ + R, gé lénh Control - O muc Users for this computer > chon UserPasswords2 Administrator. Sau do bd check 6 6 Users must enter a user name and password to use this computer > OK. Type the name of a program, folder, document, or Internet Usethe let beew to grant or deny users access to yeur eernaute, resource, and Windows will open it for you. ‘and te chenge passwerds and other settings Control UserPasswordS2 v (This tack will be created with administrative privileges. - Nhap vao mat khau ctia account Administrator: P@ssword456 > OK. You can set up your computer so that users do not have to type a user name and password to sign in. To do this, specify a user that will be automatically signed in below: User name: Administrator Password: Confirm Password: - Kiém tra: Khéi dong lai may. May tinh ty dong dang nhap bang account Administrator, khong hoi password 4. Tao local group account - Nhan t6 hop phim 4+ R, gé lénh lusrmgr.mse Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 5 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chu6t phai vao Groups, chon New Group © Local Users and Groups (Local) || Name (5 Users Be access Control Assist... 5) Groups inistrators New Group... kup Operators i > tificate Service DC... ptographic Operat... (eoSh ributed COM Users Export List... nt Log Readers Help 1-V Administrators| - 6 muc Group Name > KETOAN ~> Add - Nhap vao ul > Check Names > OK Select this object type: Users, Groups, or Buln securty principals Object Types. From this location POT Locations... Enterthe object names to select (examples) a Ee es 6 Phién Ban Thi Nghiém - Luu Hanh Ndi BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Quan sat thay user ul da durgc thém vao group - Tuong tu, tao thém Group NHANSU va thém KETOAN. user u2 vao group nay. NHANSU 5. Network access - Chuan bi: + Trén PCO1 déi password Administrator thanh P @ ssword123 + Trén PCO? déi password Administrator thanh P @ ssword456 + PCOI log on bang account Administrator - Trén may PCO1, nhan t6 hop phim @ + R, g6 \\PC02 - Hp thoai Windows Security, yéu cau nhap username va password > Khai bdo . inistre yee . Enter network credentials account : Administrator /Password : Enter your credential to connect to: p02 P@ssword456. Sau do nhan OK. { Administrator Domain: PCO1 (Remember my credentials €D The user name or password is incorrect. Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 7 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 os ein Website: www.nhatnghe.com - Trong cita sd New Group, 6 muc Group Name, ban dat tén group la: Boss > Add - Nhap vao ul > Checks Name > OK - Quan st thay user ul di duoc thém vao group Boss > Create. 2. Tham khao cac Option khi nhan Ctrl + Alt + Del - Nhan t6 hop phim Ctrl + Alt + Delete. © 10 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM N ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 Miliening Website: www.nhatnghe.com - Quan sat thay cdc try chon: + Lock: Khéa may tinh + Switch User: Chuyén qua mdi trong 1am viéc ctia user khdc ma khéng tat session hién tai + Sign out: Chuyén qua moi truong lam viéc cla user khdc va tat session hién tai + Task Manager: Ding dé xem céc thong s6 performance ctia méy tinh 3. Enabled Account Administrator - MG File Explorer, chudt phai vao This PC > chon Manage -6 khung bén trai, bung muc Local Users and Groups > chon Users. - Chu6t phai 1én account “Administrator” > chon - B6 check “Account is disabled” > OK. Properties. EE Local Users and Groups (Local) & “or Pros Bi Users Gi Grou Set Password... / Ps By) serinsrctr Bu ut All Tasks > Delete Flame: poaae Description: Buin account for administering the omputer/donsin Properties User uct change pacswerd at rat logon ep |User cannot change password Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 11 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NUATNGHE Tel: 08.39322.735 © esing NHAT NGHE Website: www.nhatnghe.com 4. Tham khao cac Option cua User Account (71 User must change password at next logon [1] User cannot change password (Password never expires (Account is disabled Account is locked out + User must change password at next logon : User phai 46i password trong lan log on dau tién + User cannot change password: User khéng cé quyén déi password + Password nerver expires: Password ctia user khéng bao gid bi hét han + Account is disabled: V6 hiéu héa Account + Account is locked out: Account tam thoi bi khéa 5. Cho méy tinh tu d6ng log on véi account dinh san - Go td hop phim: @ + R, nhap 1énh control - Bo check “ Users must enter a username and. userpasswords2 paswword to use this computer” - G muc “Users for this computer”> chon = Run Administrator => Typethe name of a program, folder, document, or Internet resource, and Windows will open it for you, Users. | Advanced Qpen: | control userpasswords2 v Usethe list below to yrant ur deny users autess ib your Lonputes, and to change passwords and othe settings, me = [[sers must entera user neme and password to use this computer. Users for this computer User Name Properties Password for Administrator “Ta change your pasword, press CHr-Al-Nal and select Change Password. Reset Password, [oc] | cone - Kiém tra : Khéi dong lai may. May tinh tu dong dang nhap bang account Administrator, khong hoi password. 12 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE DOI TAC BAO TAO CUA MICROSOFT TAI VIET NAM 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM NHAT NGHE Tel: 08.39322.735 Microsoft Partner Learning Website: www.nhatnghe.com - Kiém tra: Truy cap vao Control Panel, xuat hién thong bao 146i chan truy cap. - Quay lai cita s6 Local Group Policy Editor. Mé theo dwong dan Local Computer Policy > User Configuration > Administrative Templates > Desktop. O khung bén phai, nhan double click Remove Recycle Bin icon from Desktop > Enabled. - Mo CMD, gé lénh Gpupdate /Force This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator. Fle Tallon View Pap (|B e| 7 J peal Computer Policy “4 Computer Configuration » [5 Software Stings b Windus Settings DD) Adminitrative lemplates Setting State Removeths Desktop Not configured Hide Interne: Exp Not corfigured Remove Computer icon on the deskeep Not configured nove My Documents cern the aktop No. wo figred 4 iB User Configuration Hire Nebunielacaheneicem an destin Ne cortigured Remove Propeiesfromtxe Corrputericen senkot menu No‘ corfigured PG) Windews Settings 4 [5] Adminitrative Templates Control Panel Desito> Netware ‘Shated Fo\cere ‘tert Mew ard Taskbar Remove Praperies from tue Dacumentsicon context rent Do not zed chares of recently opened documents to Networ.. No: corfigured Not configured Don't save setiings at ext Not configured Nor enefighred ff Aero Shake iininw min ming mouse gestine $l System ent adding, dragging, dropping and cosng tre Tackbor.. Not corfigured > LD Windows Cowponents | [=] Pronibit adjusting desktop toolbars No: corfigured CE all settirgs Serr a ea c> 2613 Microsoft Corporation- All rights reserved. ator>Gpupdate /Force Komputer Policy update has completed successfully. Wiser Policy update has completed successfully. kc:\Users\Adninistrator> - Kiém tra: Log off va log on lai may sé thay mat biéu tuong Recycle Bin trén desktop. - Quay lai cita sé Local Group Policy Editor. Mé theo dudng dan Local Computer Policy > User Configuration > Administrative Templates > System. G khung bén phai, nhan double click vao Prevent access to the command prompt > Enabled File Action View Help b (5) Administrative Template #® User Configuration bp (5 Software Settings User Profiles Jownload missing COM components entury interpretation for Vear 2000 strict these programs from being launched from Help, 10 not display the Getting Started welcome screen at logon ustom User Interface 4 [5] Administrative Template Control Panel Desktop =||5 nee ee “Shared Folders revent access to registry editing tools “Start Menu and Teskl }on't run specified Windows applications ‘ystern tun only specified Windows applications b> 5) Windows Componer indows Automatic Updates C2 All Settinas Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 15 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com - Truy cap thi vao CMD sé thay bi bao léi. t Corporation. All rights reserved. ioe ea ee Cee OPO ecoe os CU RCE Us - Sau khi thie hién xong, tra cdc policy via thiét lap vé mac dinh nhw luc dau. 2. Cau hinh Local User Policy - Nhan t6 hop phim ‘+ R, g6 1énh MMC - Ctta s6 Console 1, vao menu File > -6 khung Available snap-ins bén trai, chon Add/Remove Snap-in... hoa nhan t6 hop Group Policy Object Editor > Add phim Ctrl + M File| Action View Favorites Window Help New een ‘You can select snap-ns for this console from those available on yo! Open... Chrl+O extensible snap-ns, you can configure which extensions are enab a a Available snap-ns: Sami Snap-in Vendar| « [ Add/Remove Snaj CtrleM. @kDevice Manager Micros¢ Options... {iDisk Management Microse 1G {gi Event Viewer Micros (Folder Micros¢ ASP Security Monitor Micros¢ SP Security Policy Management —_ Micros Add > [|Link to Web Address Micros - Nhan Finish - Tiép tuc vao menu File, chon Add/Remove Snap-in... > Group Policy Object Editor > Add - Nhan ntit Browse 16 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Qua tab Users > chon Non- Administrators > OK Compas | Users Local Users and Groups compatible with Local Group Policy: Name Group Poicy Object Exists & Administrator No Ries Bi Administrat - Tuwong tu, vao menu File, chon Add/Remove Snap-in... > Group Policy Object Editor > Add > Browse > Qua tab Users, chon User Teo. Quan sat thay c6 3 policy vita add tng voi ting ddi trong: Computer Policy, Non- Administrators Policy va Teo Policy Local Computer\Non-Administrators Policy b .5f Local Computer\teo Policy * TH1: Chinh Local Computer Policy xéa Recycle Bin trén Desktop - MG theo dwong dan: Local Computer Policy > User Configuration > Administrative Templates > Desktop. O khung bén phai, nhan double click Remove Recycle Bin icon from Desktop > Enabled. [File Action View Favorites Window Help | alr] S| om ? 5) Console Root i State [~ 4 [J Local Computer Policy Remove My Documents icon on the desktop Not configu p gi Computer Configuration Hide Network Locations icon on desktop Not config 4 iB User Configuration Remove Properties fram the Computer icon context menu Not configu vy Software Setings Remove Properties from the Documents icon contest menu Not configh » E Windows Settings Do not add shares of recently opened documents to Networ... 4 Ej Administrative Templates cle Bin icon from desktop » a ae Panel Remove Properties fram the Recycle Bin context menu a a Don't save settings at exit Networ “ a Eh Shorea Folders urn off Aero Shake window minimizing mouse gesture t adding, dragging, dropping and closing the Taskber... > (2 Start Menu and Taskbar > OG System it adjusting desktop toolbars P ] indewe Component <n (& All Settings Extended A Standard 16 setting(s) Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 17 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com B- THUC HIEN 1. Password Policy (Thuc hién trén PC01) - Log on Administrator > Tao user bang password : 123 > bdo 16i khOng thé tao duoc do khong thda yéu cau vé do phitc tap cla password - MG Server Manager, vao menu Tools > Local Security Policy Component Services ‘Computer Management Defragment and Optimize Drives Event Viewer iSCSI Initiator Local Security Policy CODEC Data Sources (32-bit) ODBC Data Sources (64-bit) Performance Monitor - M6 Account Polices > Password Policy. Quan sat c6t bén phai File Action View Help ¢»| af] X3| oa Security Settings Policy Security Setting 4 (4 Account Policies 0 passwords remembered > [i Pasowor oti any > [a Account Lockout Policy O days b (1G Local Policies b 2) Windows Firewall with Advanced Sec O characters assword must meet complexity requirements Disabled (5) Network List Manager Policies b (5 Public Key Policies b (5) Software Restriction Policies b (5 Application Control Policies pb & PP Security Policies on Local Compute b (5 Advanced Audit Policy Configuration] fi) Store passwords using reversible encryption Disabled + Enforce password history : S6 password hé théng luu trit (khuyén ding: 24 ) + Maximum password age : Thoi gian str dung téi da ctia | password (khuyén ding: 42 ) 20 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com + Minimum password age : Thdi gian si dung téi thiéu cia 1 password (khuyén ding: 1 ) + Minimum password length : Dé dai t6i thiéu ctia 1 password (khuyén ding: 7 ) + Password must meet complexity requirements: Yéu cau password phitc tap (khuyén ding: Enabled) > Chinh password policy : - Password must meet complexity requirements > Chon Disabled - Cac password policy cdn lai chinh gid tri vé 0 > OK - M6 CMD ~ g6 lénh Gpupdate /Force Kiém tra: - Tao account U1 v6i password : 123 > Tao thanh céng Phién Ban Thi Nghiém - Luu Hanh Néi B6 21 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com 2. Account Lockout Policy - M6 Local Security Policy. Truy cAp theo dung dan Account Policies > Account Lockout Policy - Quan sat céc policy bén phai + Account lockout duration: Thoi gian account bi khéa + Account lockout threshold : S6 lan nhap sai password trirdc khi account bi khéa + Reset account lockout counter after : thoi gian chuyén b6 dém vé gid tri 0 File Action View Help | az] XB & Security Settings Policy Security Setting 4 (1g Account Policies 5] Account lockout duration Not Applicable > Tg Password Policy ‘Account lockout threshold Qinvalid logon attempts > (4g Account Lockout Policy’ fh) Reset account lockout counter after Not Applicable b 1g Local Policies b (2) Windows Firewall with Advanced Sec (5) Network List Manager Policies b (9) Public Key Policies p [5 Software Restriction Policies b (5 Application Control Policies p> & IP Security Policies on Local Compute b 5) Advanced Audit Policy Configuration] 22 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE mE”. NHAT NGHE DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Tel: 08.39322.735 Website: www.nhatnghe.com Microsoft Partner (Learning 4. Network Access * Truong hop 1: Classic - M6 Local Security Policy > Local Policy > Security Options > Double click Network access : Sharing and security model for local account. (Mac dinh Windows Server chay Classic). File Action View Help | af] XO3|\ am B Security Settings Db (4 Account Policies 4 ( Local Policies p (1B Audit Policy » (lg User Rights Assignment > (@ Security Options > © Windows Firewall with Advanced Sec! (5 Network List Manager Policies b (5 Public Key Policies b [5 Software Restriction Policies pb (©) Application Control Policies > & IP Security Policies on Local Compute b (9) Advanced Audit Policy Configuration] g ut > Policy 52] Network access: Allow anonymous SID/Name translation Network access: De not allow anonymous enumeration of Sun Network access: Do not allow anonymous enumeration of S. Network access: Do not allow storage of passwords and cre... Network access: Let Everyone permissions apply to anonym. Network access: Named Pipes that can be accessed anonym... £2] Network access: Remotely accessible registry paths fi] Network access: Remotely accessible registry paths and sub... fi] Network access: Restrict anonymous access to Named Pipes... £2] Network access: Shares that can be accessed anonymously g and security model for local acc / Allow Local System to use computer ident... “i Network security: Allow LocalSystem NULL session fallback Network security: Allow PKU2U authentication reauests to t.. Security Setting Disabled Enabled Disabled Disabled Disabled System\CurrentControlS... System\CurrentControlS... Enabled Not Defined a. Classic: 2 may cing password (Thuc hién trén ca 2 may) - Déi password administrator 1a 123 - Thu hién truy cap bang URL ttt May PCO1 qua May PC02 va ngugc lai - Tai PCO2 : Nhan t6 hop phim 4 +R, gd \\PCO! > truy cap thanh céng ma khéng hdi username va password - Nhdn xét : Khi truy cap vao PCO2 néu account ding dé log on trén May PCO1 tring user name va password voi 1 account trén may PC 02, thi khi network access sé khong bi hoi username va password Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 25 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com b. Classic: 2 may khac password (Thue hién trén ca 2 may) - Déi password administrator May PCO1 thanh 123 , password administrator May PCO2 thanh 456 > Log on vao PCOL bang account administrator - Thuc hién truy cp bang URL tix May PCO1 qua May PCO2 va ngwoc lai - Tai PCOL: Nhan té hop phim 4+R, g6\\PC02 > Hién thong bao doi User name and password > Khai bdo username va password May PC02 > OK > Truy cap thanh céng qua PCO2 Enter network credentials Enter your credentials to connect to: pcO4 | Administrator Ry ic Domain: PCO) (1 Remember my credentials (@ The user name or password is incorrect. 26 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com * Truong hop 2: Guest only (Thuc hién trén ca 2 may) - May PC02: Enabled user Guest. - M6 Local Security Policy > Local Policy > Security Options > Double click Network access: Sharing and security model for local account > Guest only — local users authenticate as Guest. Network access: Sharing and security model for local accounts Classic -local users authenticate as themselves “ (Classic - local users authenticate as themselves: Guest only - local users authenticate as Guest [0K] [_cenest | [_tooir_] - PCO1 truy cp vao PC02: Khéng héi username, password. Mac dinh ching thuc bang account Guest. - PC02 Disable account Guest. PCO1 truy cap vao PC02 sé bi hoi User name va password , tuy nhién di nhap account Administrator ciing khong thé truy cap duge vi chi cé thé truy cap bang bang account Guest (DA bi disable). Enter network credentials Enter your credentials to connect to: peOd PCO1\Administrator ( Remember my credentials A Use another account @ The user name or password is incorrect Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 27 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i earing Website: www.nhatnghe.com a. Phan quyén trén thy muc DATA - Chu6t phai 1én thu muc DATA > Chon Properties > Qua tab Security > Nhan ntit Advanced General | Sharing | Security | Previous Versions | Customize Objectname: CADATA Group or user names: §2, SYSTEM 88, Administrators (PCO1\ Administrators) 88, Users (PCOT\Users) To change permissions, click Edit. Permissions for CREATOR OWNER Allow Deny Full control Modify Read & execute List folder contents: Read Write dlick Advanced 30 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner (Learning i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - Trong tab Permissions > Chon Disable Inheritance CADATA Administrators (PCOT\Administrators) (Change Effective Access For additional information, double-click a permission entry. Te modify a permission entry, select the entry and click Edit (if available). Permission entries: Type Principal Access Inherited from Applies to gg Allow SYSTEM Full control Cf This folder, subfolders and files g Allow — Administrators (PCOT\Admini.... Full control cA This folder, subfolders and files SB Allow — Users (PCOT\Users) Read & execute cA This folder, subfolders and files Allow — Users (PCO1\Users} Special cA This folder and subfolders ( ) peci §B Allow — CREATOR OWNER Full control CA Subfolders and files only ae [Replace all child object permission entries with inheritable permission entries from this object - Trong cita sé Block Inheritance, chon Convert inherited permissions into explicit permissions on this object > OK Me What would you like to do with the current inherited permissions? You are about to block inheritance to this object, which means that permissions inherited from a parent object will no longer be applied to this object. > Convert inherited permissions into explicit permissions on this object. > Remove all inherited permissions from this object. Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 31 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i earing Website: www.nhatnghe.com - Quay lai cita ss DATA Properties > nhan nt Edit. General | Sharing | Security | Previous Versions | Customize Objectname: C:\DATA Group or user names: SA,CREATOR OWNER 88, SYSTEM 82, Administrators (PCO1\Administrators) $2, Users (PCO1\Users) To change permissions, click Edit. Permissions for CREATOR OWNER Full control Modify Read & execute List folder contents. Read Write v For special permissions or advanced settings, Advanced click Advanced. - [9K] [Caneel] [Ari 32 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon Group Users > Remove > OK > OK Objectname: = C:\DATA Group or user names: 82, CREATOR OWNER SYSTEM ‘82, Administrators (PCO1\Administrators) 2, KETOAN (PCOT\KETOAN) 8, NHANSU (PCOT\NHANSU) - Kiém tra : + Lan lvot log on vao may bang quyén KT1, NS1 > MG thu muc C:\DATA > truy cp thanh cong + Tao Folder bat ki > xuat hién bo 16i khéng c6 quyén. Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 35 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i earing Website: www.nhatnghe.com b. Phan quyen cho thu muc Chung - Log on Administrator > Chu6t phai lén thu muc Chung, chon Properties > Tab Security > Chon Edit > Lan Iuot chon ting group KeToan va NhanSu > Cho quyén Allow Full Control > OK > OK. Object name: C:\DATANCHUNG: Object name: C\DATA\CHUNG Group or user names: Group or user names: SA\CREATOR OWNER ‘SB CREATOR OWNER &&SYSTEM (88, KETOAN (PCOT\KETOAN) (82, NHANSU (PCOT\NHANSU) 88, Administrators (PCO1\ Administrators) - Kiém tra: + Lan lvot log on vao bang KT1 , NS1 > truy cap vao thu muc Chung > truy cp thanh céng + Tao, x6a folder bat ki trong thu muc Chung > thanh céng 36 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com c. Phan quyen cho thu muc KETOAN - Chu6t phai 1én thu muc KETOAN > Chon Properties > Qua tab Security > Chon Advanced General | Sharing | Security | Previous Versions | Customize Object name: C:\DATA\KETOAN Group or user names: GA, CREATOR OWNER 8, SYSTEM 2, KETOAN (PCOI\KETOAN) S22 MuANcLLecntMUANISEN, < ty To change permissions, click Edit Permissions for CREATOR OWNER Full control Modify Read & execute List folder contents Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 37 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon group NHANSU > Remove Object name: = C:\DATANKETOAN Group or user names: 2, CREATOR OWNER Permissions for NHANSL Full control Modify Read & execute List folder contents Read [ox | [Ganea_| 40 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon Group KETOAN ~> Chon Allow Full Control > OK > OK Object name: = C:\DATANKETOAN Group or user names: 2, CREATOR OWNER ,sysTEM Kiém tra: - Lan luot log on vao bang KT1 , NSI > truy cap vao thumuc KETOAN > chi cé KT1 truy cap thanh céng, con NS1 khéng truy cap duge. - User KT1 tao , x6a file, folder bat ki trong th muc KETOAN > thanh céng Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 41 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i earing Website: www.nhatnghe.com d. Phin quyen cho thu muc NHANSU - Chu6t phai 1én thu muc NHANSU > Chon Properties > Qua tab Security > Chon Advanced General | Sharing | Security | Previous Versions | Customize Object mame: C:\DATA\NHANSU Group or user names: GA, CREATOR OWNER 8, SYSTEM 2, KETOAN (PCOI\KETOAN) S22 MuANcLLecntMUANISEN, < ty To change permissions, click Edit Permissions for CREATOR OWNER Full control Modify Read & execute List folder contents 42 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon group KETOAN > Remove Object name: C:\DATA\NHANSU Group or user names: 2, CREATOR OWNER Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 45 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon Group NHANSU > Chon Allow Full Control > OK > OK Object name: C:\DATA\NHANSU Group or user names: 2, CREATOR OWNER Permissions for NHANSL Full control Modify Read & execute List folder contents Read - Kiém tra: + Lan lot log on vao bang KT1, NS1 > truy cap vao thy muc NHANSU > chi cé NS1 truy cap thanh céng, con KT1 khong truy cap duge + User NS1 tao , x6a file, folder bat ki trong th muc NHANSU > thanh c6ng 46 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner (Learning i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com 2. Phan quyen thu muc bang Special Permission Phan quyén theo yéu cau: File do User nao tao ra User dé moi xéa diroc - Chu6t phai 1én thu muc KETOAN > Chon Properties > Qua tab Security > nhan vao nut Advanced General | Sharing | Security | Previous Versions | Customize Objectname: C:\DATA\KETOAN Group or user names: 8, SYSTEM 2, KETOAN (PCOI\KETOAN) &, Administrators (COT Administrators) To change pemissions, click Edit Permissions for CREATOR, OWNER Allow Deny Full control Modify Read & execute List folder contents Read Write ¥ For special permissions or advanced settings, | click Advanced. a Phién Ban Thi Nghiém - Luu Hanh Néi B6 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com - Kiém tra : + Lan luot log on bang KTI va KT2 > truy cap vao thu muc KeToan + KTI tao file KT1.txt , KT2 tao file KT2.txt - Log on bang KT1 > x6a file KT2.txt > bao 16i khéng c6 quyén x6a . Xéa file KT 1.txt > thanh céng - Log on bang KT2 > x6a file KT1.txt > bdo 16i khéng c6 quyén x6a . Xéa file KT2.txt > thanh céng 50 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com 3. Take Owner Ship - Log on KT, truy cap vao folder KETOAN > tao folder KT Lfile - Phan quyén NTFS trén thu muc KT Ifile. Chuét phai thu muc KT1File > Chon Properties > Qua tab security > Chon Advanced > Disable Inheritance - Tab Security > chon Edit > Remove tat ca cdc object, ngoai try KT! (Full Control) > nhan OK 2 lan. Objectmame: C:\DATA\KETOAN\KT File Group or user names: & Ee Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 51 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Log on Administrator, truy cap vao folder KETOAN. Truy cap vao folder KT Lfile bi bao 16i khéng thé truy cap > Chu6t phai lén folder KT Lfile, chon Properties > Qua tab Security, chon Advanced General | Sharing | Security | Previous Versions | Customize Object name: = C:\DATA\KETOAN\KT1 File W ‘You must have Read pemmissions to view the properties of this Click Advanced to continue. For special permissions or advanced settings, [ravences_] dick Advanced [ok] [canes] | toni - G muc Owner, chon Change. Name: CADATA\KETOAN\KT IFile Owner: Unable te display current owner. Permissions Auditing | Effective Access (@ You must have Read permissions to view the properties of this object. Click Continue to attempt the operation with administrative permissions. 52 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com SHARE PERMISSION — ACCESS BASE EMULATION (ABE) CAC BUGC TRIEN KHAI 1. Share mét Folder 2. Thue hién Share An 3. Map Network Drive 4. Share 1 folder vdi nhiéu tén 5. Quan ly cdc Shared Resources 6. Access Base Emulation A- CHUAN BI - MG hinh bai lab bao gom 2 may: + PCO1: Windows Server 2012 R2 + PC02: Windows 8.1 Enterprise - PCO1 tao account ul voi password 1a P@ssword , - PCO! tao folder ThucTap trong 6c: Trong thu muc ThucTap tao 2 folder DuLieu va BiMat - Trong cdc folder tao file Abc.txt voi ndi dung ti ¥ - Trén 2 méy tat Firewall, UAC, va kiém tra duong truyén bang lénh Ping Phién Ban Thi Nghiém - Luu Hanh Néi B6 55 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NUATNaHE Tel: 08.39322.735 i eoing NHAT NGHE Website: www.nhatnghe.com B- THUC HIEN 1. Share mot Folder (Thue hién trén PC01) - Chu6t phai lén folder DULIEU chon Share with > Advanced sharing... Home Share = View (Extra large icons {&] Large icons i} Mediumicons GE List 8 in| Navigation pane~ Panes eg: EE Small icons . fi- byy Layout Current view C1 Item check boxes C1 File name extensions Bice Hide selected Options iden items items a Show/hide © @ ~ & [ly ThisPc > Local Disk (C:) » ThucTap ¥_@| [Search ThucTap A | a) Name ™® This PC (& Desktop Bh Bimat Date modified Type 4/19/20149:50AM File folder > Dutieu ANOPNIAG-5) AM — File folder 56 ‘Gi Network 2items (BE) Documents (iB Downloads Db Music |B Pictures \B Videos i Local Disk (C:) (p) Perflogs )) Program Files (}) Program Files DD Snagit (fi ThucTap Dh Bimat Dh Duliew Db Users Windows Open ‘Open in new window Snagit » Restore previous versions Include in library Pin to Start Sendto Cut ‘Copy Paste ‘Create shortcut Delete Rename vk> Properties 1 item selected Phién Ban Thur Nghiém - Luu Hanh Néi B6 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NUATNaHE Tel: 08.39322.735 i eoing NHAT NGHE Website: www.nhatnghe.com - O tab sharing > Nhan vao ntit Advanced Sharing... General | Sharing | Security | Previous Versions | Customize Network File and Folder Sharing Set custom pemmissions, create multiple shares, and set other advanced sharing options. (plAdvanced Sharing... Password Protection People must have a user account and password for this computer to access shared folders. To change this setting, use the Network and Sharing Center. Lo«] [terest] | tosh Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 57 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - Hop thoai yéu cau chung thuc khi dang nhiap > Dién vao ul/ P@ssword. Enter network credentials Enter your credentials to connect to: 192.168.0.4 A eo The user name or password is incorrect. [ul Domain: PCO2 [1] Remember my credentials - Truy cap thanh céng thay Folder DULIEU. Home ‘Share View ? (Ml + Netwo.. + pcOl > v & Search pcO1 I Desktop a (Bb Downloads JD DuLieu Recent places - (Ml This PC oe Network 60 Phién Ban Thi Nghiém - Luu Hanh N6i BO ne mek. NHAT NGHE TRUNG TAM BAO TAO CNTT NHAT NGHE DOI TAC DAO TAO CUA MICROSOFT TAI VII 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Tel: 08.39322.735 Website: www.nhatnghe.com £T NAM Ah Microsoft Partner (Learning 2. Share 4n mot folder (Thue hién tai may PC01) - Chudt phai thu muc BIMAT > Chon Share with > Advanced Sharing Home Mh Cut (3) Copy path [2] Paste shortcut Copy Paste Share bi *K = jove Copy Delete Rename tor tor . View M Be Properties folder . Open> Bi Select all Zt Edit Select none GE Invert selection ©o- ra » This PC » Local Disk (C:) » ThucTap » ¥¢ ] [ Search ThucTap P| Favorites BH Desktop (UB Downloads ‘E| Recent places (iM This PC (fh Desktop (BI Documents (UB Downloads OD Music |B Pictures UB Videos && Local Disk (C:) Gi Network 2items Name Date modified Type Anooo1 A 0-50 ) BiMat File folder Open Open in new window pp Duliew Snagit » Restore previous versions Include in library Pin to Start Sendto Cut Copy Paste Create shortcut Delete Rename File folder cuit Anca tn. Properties <| 1 item selected Phién Ban Thi Nghiém - Luu Hanh Néi B6 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - O tab sharing > Nhan vao ntit Advanced Sharing... General | Sharing | Security | Previous Versions | Customize Network File and Folder Sharing BiMat Not Shared Network Path: Not Shared Share... Advanced Sharing Set custom pemmissions, create multiple shares, and set other advanced sharing options. Password Protection People must have a user account and password for this computer to access shared folders. To change this setting, use the Network and Sharing Center. Lo«] [terest] | tosh 62 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM N ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 Miliening Website: www.nhatnghe.com - Tai may PCO2 nhan t6 hop phim # +R, g6: \PCO1 > OK > Truy cap vao khong thay folder BIMAT. - Tat cita s6 File Explorer > Truy c4p lai \PCOI\BIMAT$ ee Run 7p Typethe name of a program, folder, document, or Internet (St! resource, and Windows will open it for you. Open: | \WPCOT\BIMATS ad i This task will be created with administrative privileges. OK Cancel Browse... - Truy cap vao thu muc BiMat thanh céng. Home Share View t 2 << PCOl > bimatS G Search bimat$ BE Desktop “ Name Date modified ie Downloads . . © bimatt txt 4/19/2014 9:50.AM i=) Recent places 1M This PC im Network Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 65 TRUNG TAM BAO TAO CNTT NHATNGHE , DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM A 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner Tel: 08.39322.735 ole Learning Website: www.nhatnghe.com mek. NHAT NGHE 3. Map Network Drive - Qua may PC02 > truy cap network access vao méy PCO1. - Hp thoai yéu cau chung thuc khi dang nhiap > Dién vao Username va Password cia UI> OK. Enter network credentials Enter your credentials to connect to: PCO1 A (B The user name or password is incorrect. fur Domain: PCO2 (1) Remember my credentials Home Share View .@ 7? ly Network + PCO ~ G)| Search PCO1 2 oir Favorites uti Bi Desktop umee Open (B Downloads Open in new window Ei] Recent places Always available offline Restore previous versions Thi 7 FE This PC Pin to Start si Map network ‘Copy Create shortcut Properties litem 1 item selected = ie] 66 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner ih E Tel: 08.39322.735 Learning NHAT NGHE Website: www.nhatnghe.com - Dé mac dinh céc options > Nhan Finish. @ Map Network Drive What network folder would you like to map? Specify the drive letter for the connection and the folder that you want to connect to: Drive: ae oJ Folder: \PCOT\DuLieu Example: \\server\share Reconnect at sign-in (connect using different credentials Connect to a Web site that you can use to store your documents and pictures. Cancel Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 67 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com 4, Share 1 folder véi nhiéu tén (Thue hién trén PC01) - Chu6t phai lén folder DULIEU > Share with > Chon Advanced sharing... > Advanced sharing > Nhan vao mit Add. Limit the number of simultaneous users to: 16777 = ne Comments: - Khung Share name nhap vao KeToan > OK. 70 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Kiém tra trong hép thoai Advanced Sharing, phan Share name c6 2 tén DuLieu va KeToan. Ketoan Limit the number of simultaneous users to: 1677715 Comments: - Nhan vao nut Permission > Phan quyén lai voi Everyone > Full Control > OK > Close Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 71 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - May PCO2 truy cap server kiém tra két qua thay cd 2 folder dtrgc share vai ten KeToan , DuLieu Home Share View ‘P tl > Metwork » pcOT > Search pc0l a ‘OE Favorites DuLi By Desktop Lieu ie Downloads ‘G] Recent places z pM This PC Gia Network 2 items 72 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - MG Server Manager > File and Storage Services > Shares > Chu6t phai én C:\NhatNghe > Properties 1 Pi Manage ym SHARES VOLUME BED ai spares 14 total Nattighe on PCDI © Capacity 5273 ter Pe Storage Pools Shere Local Path rs sed 4 peor ' iSCSI BiMatS (CATrucTep\Bil Work Folders Dutiew (CAThucTep\Di Ketsan CAThucTep\Di ‘Step Sharing Open Share. Go to Volumes Overview > Properties QUOTA NhatNghe on POD - Chon Settings > danh dau chon vao 6 Enable access-based enumeration > OK > OK NhatNghe ‘Show All Settings Enable access-based enumeration ‘Access-based enumeration displays only the files and folders that a user has permissions to access, Ifa user does not have Read (or equivalent) permissions for a folder, Windows hides the folder from the user's view. Alllow caching of share Caching makes the contents of the share available to offline users. If the BranchCache for Network Files role service is installed, you can enable BranchCache on the share. Enable BranchCache on the file share BranchCache enables computers in a branch office to cache files downloaded from this share, and then allows the files to be securely available to other computers in the branch, LO Encrypt data access When enabled, remote file access to this share will be encrypted. This, secures the data against unauthorized access while the data is transferred ‘to and from the share. If this box is checked and grayed out, an ‘administrator has turned on encryption for the entire server. Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 75 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i ening Website: www.nhatnghe.com - Kiém tra : PCO2 truy cp network Access vao PCOI bang quyén U1: Truy cap thw muc Nhat Nghé quan sat chi thay thu muc Kythuat, khong thay thu muc TroGiang Home Share View © ~ f 2 « pedl > NhatNghe + Search NhatNghe B® Desktop “Name Date modified (UB Downloads ‘| Recent places LD) Kythuat 4/19/2014 10:23 AM 1 This PC Gig Network litem - Tuong tu PC02 truy cap network Access vao PCO! bang quyén U2: Truy cap tht muc Nhat Nghé quan sat thay chi thay thu muc TroGiang, khéng thay thu muc KyThuat. 21th =! NhatNghe -a Nome Share view a) © + t |B « peOl > NhatNghe wv @ || Search NhatNghe p I Desktop * Name ° Date modified T (@ Downloads . Dh Tregiang 4/19/2014 10:23 AMF ‘S) Recent places This PC Gia Network item 76 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com Microsoft Partner Learning DOMAIN CAC BUOC TRIEN KHAI 1. Nang cap Domain Controller 2. Join may Workstation vao Domain 3. Cau hinh Policy trén may Domain Controller a. Cau hinh cho phép dit password don gian b. Cau hinh cho phép Group Users duroc log on trén DC 4. Tao Domain Group va Domain User 5. Cai Remote Server Administrator Tools cho may Client A- CHUAN BI - MG hinh bai lab bao gom 2 may: + PCO1: Windows Server 2012 R2 + PC02: Windows 8.1 Enterprise - Chinh password account Administrator cho ca 2 may 1a 123 - Disable card CROSS. G6 b6 Protocol TCP/IP IPv6 trén card LAN - Kiém tra 2 may lién lac voi nhau bang lénh PING Phién Ban Thi Nghiém - Luu Hanh Néi B6 77 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner (Learning i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - MG Server Manager, vao menu Manage, chon Add Roles and Features Add Roles and Features Remove Roles and Features ‘WELCOME TO SERVER MANAGER Add Servers BF Local Server Hii All Servers Hg File and Storage Services > Create Server Group 0 Configure| Server Manager Properties fol le 1F.U 18 2 Add roles and features 3 Add other servers to manage 4 Create a server group Hide - Man hinh Welcome > Next - Man hinh Select installation type > chon Role-based or feature-based installation > Next DESTINATION SERVER Select installation type PCat Select the installation type. You can install roles and features on a running physical computer or virtual Before You Begin machine, or on an offline virtual hard disk (VHD). @ Role-based or feature-based installation Server Selection - Configure a single server by adding roles, role services, and features. (© Remote Desktop Services installation Install required role services for Virtual Desktop Infrastructure (VDI) to create a virtual machine-based ‘or session-based desktop deployment. Install 80 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Gh ass 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE Tel: 08.39322.735 ares Website: www.nhatnghe.com - Man hinh Select destination server, gitt nguyén nhu mac dinh > Next DESTINATION SERVER Select destination server peat Before You Begin Select a server or a virtual hard disk on which to install roles and features. Installation Type }) Select a server from the server pool ‘© Select a virtual hard disk Server Roles Server Pool Features Filter: Name IP Address Operating System 1 Computer(s) found This page shows servers that are running Windows Server 2012, and that have been added by using the ‘Add Servers command in Server Manager. Offline servers and newly-added servers from which data collection is still incomplete are not shown. Install Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 81 NHAT NGHE TRUNG TAM BAO TAO CNTT NHATNGHE DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner Tel: 08.39322.735 «6 Learning Website: www.nhatnghe.com - Man hinh Select server roles, danh dau chon vao 6 Active Directory Domain Services 82 DESTINATION SERVER Select server roles pot Before You Begin AD DS Confirmation Select one or more roles to install on the selected server, Roles Description Active Directory Domain Services (AD DS) stores information about objects on the network and makes LO Active Directory Federation Services this information available to users (71 Aétive Directory Lightweight Directory Services IO uses domain controllers to give 1] Active Directory Rights Management Services network users access to permitted CD Application Server resources anywhere on the network [J DHE? Server through a single logon process. 1 ONS Server CO Fax Server LH] File and Storage Services (1 of 12 installed) OD Hyper-v (1 Network Policy and Access Services 1 Print and Document Services 1 Remote Access ( Remote Desktop Services 1] Active Directory Certificate Services Install Phién Ban Thi Nghiém - Luu Hanh Néi B6 TRUNG TAM DAO TAO CNTT NHAT NGHE DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Gh 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE Tel: 08.39322.735 Leaning Website: www.nhatnghe.com - Qua trinh cai dat dién ra. Sau khi cai dat xong, nhan vao muc Promote this server to a domain controller Installation progress DESTINATION SERVER cot View installation progress @ Feature installation Configuration required. Installation succeeded on PCO1. Active Directory Domain Services Additional steps are required to make this machine s domain controller. Group Policy Management Remote Server Administration Tools Role Administration Tools AD DS and AD LDS Tools Active Directory module for Windows PowerShell AD DS Tools Active Directory Administrative Center (AD DS Snap-Ins and Command-Line Tools. You can close this wizard without interrupting running tasks. View task progress or open this page again by clicking Notifications in the command bar, and then Task Details. Export configuration settings < Previous Next > Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 85 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Man hinh Deployment Configuration, chon Add a new forest. 6 muc Root domain name, dat tén: NHATNGHE.LOCAL Deployment Configuration a Ee Select the deployment operation Domain Controller Options) : ; © Add_a domain controller to an existing domain Adgitional Options ‘Add a new domain to an existing forest Paths @ Add anew forest Review Options Specify the domain information for this operation Prerequisites Check Root domain name: NHATNGHELOCAL More about deployment configurations < Previous 86 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 tesnrg Website: www.nhatnghe.com - Man hinh Domain Controller Options, 6 muc Specify domain controller capabilities, danh dau chon vao 6 Domain Name System (DNS) server. G muc Type the Directory Services Restore Mode (DSRM) password, nhap vao mat khau P@ssword > Next Domain Controll Deployment Configuration DNS Opti Additional Options Paths Review Options Prerequisites Check . TARGET SERVER er Options PCOt Select functional level of the new forest and root domain Forest functional level: Windows Server 2012 R2 [=] Domain functional level Windows Server 2012 R2 [7] Specify domain controller capabilities Domain Name System (DNS) server [¥] Global C (a Type the Directory Services Restore Mode (DSRM) password Password: ee Confirm password: More about domain controller options Phién Ban Thi Nghiém - Luu Hanh Néi B6 87 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - Chinh Preferred DNS server vé IP May PCO1> OK > Close General You can get IP settings assigned automatically if your network supports this capability. Otherwise, you need to ask your network administrator for the appropriate IP settings. Default gateway: ‘Obtain DNS server address automatically (Validate settings upon exit 90 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com Microsoft Partner old Leaening - Nhan t6 hop phim + R, g6 1énh Sysdm.cpl - Trong tab Computer Name, nhan Change Computer Name | Hardware | Advanced | System Protection | Remote (a Windows uses the flowing infomation to dertfy your computer = onthe network Computer description: For example: "Kitchen Computer" or "Mary's Computer" Full computer name: Pco2 Workgroup WORKGROUP To use a wizard to join a domain or workgroup, click ID Network ID... To rename this computer or change its domain or workgroup, click Change. Phién Ban Thi Nghiém - Luu Hanh Néi B6 91 TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ® 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM i E Tel: 08.39322.735 NHAT NGHE Website: www.nhatnghe.com - GO muc Member of > chon Domain, sau do g6 tén domain NHATNGHE.LOCAL > OK You can change the name and the membership of this computer. Changes might affect access to network resources. Computer name: PCO2 Full computer name: Pco2 Member of @ Domain: NHATNGHE LOCAL (© Workgroup: WORKGROUP - Cita s6 Windows Security, nhap vao Username va password: Administrator/P @ ssword Computer Name/Domain Changes Enter the name and password of an account with permission to join the domain. | Administrator ee Domain: NHATNGHE.LOCAL 92 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - Chon Disabled > OK - Quay lai cita s6 Group Policy Management Editor, nhan double click vao Maximum password age Policy Setting 24 passwords remembered m ro | Minimum password age I days Eo] Minimum password length 7 characters (4 Password must meet complexity requirements Disabled [fy Store passwords using reversible encryption Disabled Phién Ban Thi Nghiém - Luu Hanh Néi B6 95 TRUNG TAM DAO TAO CNTT NHAT NGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM Ah © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHATNGHE — Tel: 08.39322.735 i eoing Website: www.nhatnghe.com - G muc Password will not expire, sta gid tri thanh “0” > OK - Quay lai cita s6 Group Policy Management Editor, nhan double click vao Enforce password history remembered ch] Minimum password age 1 days [2] Minimum password length 7 characters [] Password must meet complexity requirements Disabled [Store passwords using reversible encryption Disabled 96 Phién Ban Thi Nghiém - Luu Hanh N6i BO TRUNG TAM BAO TAO CNTT NHATNGHE Wee” DOI TAC DAO TAO CUA MICROSOFT TAI VIET NAM ee © 105 Ba Huyén Thanh Quan, Quan 3, TP.HCM Microsoft Partner NHAT NGHE Tel: 08.39322.735 lesrting Website: www.nhatnghe.com - 6 muc Do not keep passwords remember, stta gid tri thanh “0” > OK Security Policy Setting [Eepain | ay Enforce password history Define this policy setting Do not keep password history. 0 = passwords remembered Microsoft Windows [Version 6.3.96081 Perse eae Ste ee oe Te IC: \Users\Administrator>Gpupdate “Force Updating policy... Computer Policy update has completed successfully. Miser Policy update has completed successfully. EUR eee Phién Ban Thi Nghiém - Luu Hanh Ndi Bo 97