Mastering windows NT ^{How Do I ...``}

 Convert a FAT volume to an NTFS volume?

1. Do the backup under DOS, a FAT-based backup.
2. Install NT server, but don't reformat the disk to NTFS
3. Reboot under DOS, from a floppy
4. Run the tape restore program and restore the files
5. Boot the server, and run the FAT-to-NTFS conversion program to make the server's disk NTFS

After you've done the conversion, run NTBACKUP immediately and get a first backup of the new disk format.

Use the debug version off NTDETECT.COM?

1. Disk-copy the installation disk onto a blank floppy disk. You must use DISKCOPY because you want a "Xerox" of the disk, boot sector, hidden files and all
2. Look on the CD-ROM in SUPPORT\SUPTOOLS\I386; you'll find a placement for NTDETECT.COM, put it on the copy of the installation disk.
3. Use the installation disk that you just created in line of the one shipped with NT

Get my old fonts back?

1. Open the Control Panel
2. Open the Fonts applets and click the C:\windows\system directory.
3. After a Minute or two of disk activity, you'll see your fonts appear. Select them all (just click on the top one, then scroll down to the bottom font, press the shift key, and click the bottom item), and click OK. You'll see dialog boxes telling you that a copy of this font is already on the system, but just click OK and keep going.

After the last "Remove this font and reinstall" dialog box, just click close on the Fonts dialog box, and close up the Control Panel. Your fonts are now restored.

Send a broadcast message to the entire network?

1. Start the Server Manager.
2. click on the Primary Domain controller.
3. From the menu, select Computer/Send Message
4. Fill in the message and click OK.

Make sure that you're on a workstation, either windows win popup, or an NT workstation. Then go to the UPS/SPS and pull out power plug. Let it run until the server loses power altogether. Check the following

• Did your workstation get a message about the power failure?
• Did you get a message every two minutes, or however far apart you set the message?
• Did you get a final "The UPS service is about to perform final shutdown" message?
• How long was the server able to run with the UPS?

If necessary, go back and adjust the UPS service software if you don't have low battery support and your guesses were wrong about how much you had on the battery.

Install an NT server tape driver?

1. Start NT Setup
2. Click on Options, and then Add/Remove Tape Devices... . You'll see a dialog box like the one in Figure 3.10
3. Don't panic when you don't see your tape drive in the box.; that's normal. For some reason, Microsoft did not include auto-detect on tape drives. You're pretty much on your own here. Click Add...
4. Browse through the model numbers to see if you can find a tape drive that matches yours. If you can't find an exact much, try something close to it.

Once you have the driver setup, you have to restart your server. After restart, you'll be able to use the NTBACKUP program.

Log on to NT server resources from the workgroup connection?

Given that your NT domain does not use Share-level Security, how do you get to a domain resource? Simple: just attach to it. For example, in the case of my Orion Domain, I can attach to the C drive on the primary domain controller, calling it H, by typing.

net use h: "\\eisa server\c"

Now is when it matters where I've made my Workgroup Connection password the same as my domain password. If I've use different password for Workgroup Connection than for my domain, I'll get this message.

The password is invalid for \\EISA SERVER\C.
type the password for \\EISA SERVER\C:

This is confusing the first time you see this, because there is no password for a domain resource. What really happening here is that your DOS workstation requested a domain resource, waking up the domain security system. The domain security system tried to verify your logon by asking the workgroup connection for your domain password. The Workgroup connection has no idea what domain password is, so it just handed the domain security system whatever password you gave the Workgroup connection.The domain security system is smart enough not to reject the logon out of hand. Instead, it sends a message to the workgroup connection that looks like "There is a password on this resource--please supply it,"as if the C drive on the \\EISA server were a share-level workgroup resource. Now you should type in your domain password, and you'll get this response.

The command completed successfully.

Because the Workgroup connection thinks that you've just entered a share-level password, it stores a copy (encrypted) in you PWL file. In take future, you can simply logon with your Workgroup Connection password, and you'll be logged right into your persistent domain connections, as your domain password is entered for you automatically when log onto the Workgroup connection.

Remote-boot NT?

Most PC operating system will support remote boot. NT, however, does not, at least not now.

Fix the system after it can't find NTLDR?

1. boot the system with a DOS-bootable floppy
2. eliminate unnecessary files in the root directory
3. In the \I386 directory of the NT setup CD-ROM (or disk 2 of the setup floppies-not the CD-ROM installation disk), you'll see NTLDR._ It is the compress version of NTLDR (I understand why Microsoft compressed the files on the floppies, but why the CD-ROM version? There's plenty1 of space on that CD-ROM disk)
4. Expand the file onto your root directory either using the EXPAND program from MSDOS-6.0, windows 3.1, or Windows for Workgroups. for example NTLDR._ file were on the CD-ROM, and the CD-ROM was on drive D, then the command would look like this:

expand d:\i386\ntldr._ c:\ntldr.

You should be able to continue the setup now.

Create a generic NT boot floppy?

1. Format a floppy either in the NT file manager or from a command line under NT, do not use a DOS-formatted floppy, or this won't work

   A DOS-formatted floppy looks for DOS boot files IO.SYS and MSDOS.SYS, and NT-formatted floppy looks for the NT boot file NTLDR. (from file manager, just click disk, then Format Disk)

   You're going to copy a bunch of files from the root directory of your server to the floppy in the A drive. The files are hidden, However, so you've got to tell the File manager to show you hidden files.

2. To do that, click view, then by file type, and check the box that says show hidden/system files.
3. Looking in your server's root directory, copy the following files from the server's root to the floppy disk.

NTLDR, NTDETECT.COM, BOOT.INI, NTBOOTDD.SYS, if your server boots from a SCSI hard disk; if not,then you probably won't have this file in the root, and don't need to copy it

Once finished, you'll have a floppy that can essentially "jump start" your system.

Create a logical drive?

1. Open the Disk Administrator and select an area of free space.
2. From the partition menu, select Create Extend... and choose the size of extended partition that you want to make.
3. Having selected the extended partition that you just made, select Create... from the partition menu, and choose the size of the logical drive that you want to make.
4. You'll see the new logical drive shown in royal blue. Exit the Disk Administrator and restart the system for the changes to take affect
5. After rebooting, format the drive to NTFS, HPFS, or FAT

You can now use the logical drive letter like you would any other.

Delete a logical drive?

1. Select the drive in the Disk Administrator and choose Delete from the Partition drop-down menu.
2. A message like one below appear
3. Yes is the default. Once you've confirmed, the logical partition will be deleted and will become and empty extended partition. If you want to convert the extended partition to free space, you must delete it as well.

When you exit the Disk Administrator, you'll be prompted to confirm your changes. Once you've confirmed, click OK to restart the system or press Ctrl-Esc to go to the Program Manager.

Create a volume set?

1. Open the Disk k Administrator and select all the areas of free space that you want to be in the set.
2. From the Partition Menu, choose create volume set.
3. choose the size of the set that you want and click OK. You can choose any size so long as it is within the maximum and minimum parameters.

   When you return to the Disk Administrator, the new volume set will appear in yellow. It will have a drive letter, but won't yet be formatted.

4. Format the new logical drive. You do that by opening a command prompt and typing

   format driveletter: /fs:filesystem

   where driveletter is, of course, the drive letter of the logical drive, and filesystem is FAT, HPFS, or NTFS. For example, to format a newly createddrive E as NTFS, you would type

   format e: /fs:ntfs

Delete a volume set?

1. Go to the Disk Administrator
2. click on the volume set that you want to delete to select it. it will be outlined in black.
3. From the Partition menu, select Delete.

A message box like the one below tells you that all data in that set will be lost. The message box asks you to confirm the action before continuing.

Extend a volume set?

1. From the disk Administrator, select and existing volume set or primary partition that has been formatted (one that is not part of a mirror set or stripe set) and has one or more areas of free space. The volume set must have been previously formatted to extend it.
2. Go the Partition menu and select Extend Volume Set. As you did when you created the volume set, you'll see a dialog box showing the minimum and maximum sizes for the volume set.
3. Enter the size of the volume set that you want, and click OK.

The volume set is now the larger size that you specified, and all area in it will have the same drive letter. The free space that you added is automatically formatted to the same file system as the rest of the volume set.

Create a stripe set without a parity?

1. In the Disk Administrator, select two or more areas of free space on from 2 to 32 hard disks. (Note that, without parity, you need a minimum of only 2 disks, not 3.) To do this, click on the free space on the hard disk and then Ctrl-click on the others, as though you were selecting more than one file in the File Manager.
2. From the partition drop-down menu, choose create stripe Set. You'll see a dialog box that displays the minimum and maxim stripe sizes:
3. Choose the size stripe you want, and click OK.

   The Disk Administrator will now divide the total size of the stripe you selected among the available disks, and then assign a single drive letter to this set. If you selected a size that could not be divided equally among the number of disks involved in the stripe set, the Disk Administrator will around to the nearest number. When you exit, the system will reboot to implement the changes unless you press Ctrl-Esc. The stripe set is now created, but not formatted, as you can see from the picture.

4. To format the stripe set, open a command prompt and type

   format driveletter: /fs:filesystem

   where driveletter is, of course, the drive letter of the logical drive, and filesystem is FAT, HPFS, or NTFS. For example, to format a newly created drive E as NTFS, you would type

   format e: /fs:ntfs

Delete a stripe set?

1. In the Disk Administrator, select the stripe that you want to delete, as you see in this graphic
2. From the Partition drop-down menu, select Delete.

   You'll see a message box advising you that this action will delete all the data. The box asks you to confirm that you want to delete.

3. click on the Yes button in this dialog box.

Set up a mirror?

1. Click on the partition that you want to maintain a copy of (such as the primary partition)
2. By pressing Ctrl and clicking at the same time, choose the free space on another disk that you want to make the other half of the set.

   this area must be the same size as or larger than the partition or drive that you are mirroring. If you select an area of free space that is too small, the system will complain to you that "the free space that you've chosen is not large enough to mirror the partition you have chosen."

3. From the Fault tolerance drop-down menu, select establish mirror.

   Once you've done this, you have established the mirror set. The Disk Administrator now established and equal sized partition in the free space to be mirror, and assign the drive letter, two copies of the file will be saved.

4. Format the new logical drive. You do that by opening a command prompt and typing.

   format driveletter: /fs:filesystem

   where driveletter is, of course, the drive letter of the logical drive, and filesystem is FAT, HPFS, or NTFS. For example, to format a newly created drive E as NTFS, you would type

   format e: /fs:ntfs

Set Break a mirror set?

1. Open the Disk Administrator and select the mirror set that you want to break. when you open the Disk Administrator, you'll see a message like this, telling you that something is different: partner. While the regeneration process is going on, the type on the new half of the mirror set will show you in red. However, it doesn't take long to regenerate mirrored material and the process takes place in the background anyway--you don't have to wait for it to finish to use the computer.

Repair a broken mirror set?

1. Open the Disk Administrator and select the good half of the mirror set and an area of free space the same size of larger than the area to be mirrored.
2. Choose Established Mirror... from the Fault Tolerance menu

   The new mirror set will be displayed in magenta.

Create a stripe set with parity?

1. Open the Disk Administrator and select areas of free space on atleast three physical disks.
2. Pull down the Fault tolerance menu and select Create Stripe Set With Parity
3. fill in the size that you want the stripe set to be, and click OK.

   the system will reboot upon your confirmation, and the stripe set will be initialized. As always, you have to format it from the command line before you can use the drive.

Regenerate a failed stripe set?

1. Put a new disk in place and reboot the system.
2. After you've logged on, go to the disk Administrator and select both the stripe set that you need to fix and an area of free space at least equal in size to the other member of the set.
3. Choose regenerate from the Fault tolerance menu.

   The system will shutdown, and the regeneration process will take place in the background after it restarts. The regeneration process doesn't affect your ability to use the computer or access the information being regenerated.

Create a user account in a domain?

Open User Manager for Domains. Under the User menu, select new user. In the User dialog box:

1. Type in a user name and the user's full name
2. Type in a description of the user or account (optional)
3. Type in the password in the password and confirm password boxes. Select the password characteristics from the options presented. choose whether or not the account will be disabled.
4. Using the Groups, Profiles, Hours Logon From, and Account buttons, do the following: set the user's group membership; user profile, logon script,and/or home directory; hours which the network will be available to the user; from which workstation the user is allowed to logon; and account characteristics (expiration date and account type)
5. When you're done configuring the account as described in step 4, choose Add.

Ensure that a selected list of users are not member of a particular group in the domain?

1. Select the User in the User Manager for Domains Windows
2. From the User menu, choose Properties
3. In the User Properties dialog box, choose Groups. Add the particular group from the Not Member Of box to the Member Of box.
4. Choose OK to save the change
5. In the User Properties dialog box, choose groups again
6. Select the group in the Member Of box and choose Remove

Assign personal profiles, logon scripts, and home directories to group of users?

1. In User Manager for domains, select the user accounts that you want to add the profiles to. You can either do this manually or by using the Select Users command from the User menu.
2. From the User menu, choose Properties
3. Select the Profiles button. Using the wildcards, type in the paths of the profiles, logon script, and home directory's.

   For example, let say you want to do the following:

   • Give each user a personal profile, to be stored on the existing directory PROFILES on a server named MARS
   • Give each user a logon script WINNT\SYSTEM32\REPL\IMPORT\SCRIPTS\startnet.bat
   • Connect each user to a home directory located at \\mars\users

   You would type in the information illustrated in this graphic

   This procedure will do the following:

   • Assign to all of the selected user accounts a personal profile using their own user name as a file name.
   • Set the logon script startntc.bat to start when each user logs on.
   • Create directories with the same name as their user name in the specified path

   For example, the use whose user name is Maeve will have a profile name MAEVE.USR and will be assigned a home directory called MAEVE, which will connect to K when she logs on. Remember to make sure that the permissions on the directories containing the user profiles and the home directories allow the user to access them.

Keep users from logging onto the server's root directory?

Given that C$ is an administrative share that you're not supposed to get rid of, how you can you keep users from logging onto the server's root directory?

The share permissions of the C$ are set and cannot be modified, but they don't give full access to all users on the network. Only users are members of the administrators, Server Operators, and Backup Operators groups can access the server's root from a remote location. Other users cannot connect to C$ without specifying a password.

View the owner of a file?

Select the file in the directory window. From the security menu, choose Owner.

If you are logged on as an administrator and you don't have permission to view the owner, you are presented the option to take ownership of the file.

Taking owner ship would allow you to view all of the security information for the file. Ownership cannot be transferred back to the files original owner.

Make a directory accessible to only one user (or to members of only one group)?

1. Create the directory, if it doesn't exist. Make sure the directory is selected in the directory window.
2. From the Security menu, choose permission.
3. In the permission dialog box, remove all users and groups from the list of those granted permissions on the directory,including everyone.
4. Add the specific user (or group) back in. Give that user or group Full Control over the directory.
5. If you want all user on the network to have their own personal directory,it's more efficient to specify home directory in their user accounts under profiles. If the home directory you specify for the user doesn't already exist on the server, NT server will create the directory and give it the appropriate permissions to make it accessible only to that user. this feature often,however, does not work in NT, forcing you to create personal user directories by hand.

You can make a directory accessible to only one user or group, but you can't really hide the directory's existence from other users on the network. If you really need to make a hidden, private directory for a user,you can create a hidden share whose share permission allow only that user to access it, then tell the user the share name so he or she can connect to it (the hidden share won't show up in the Browse list, so its name will have to be typed in) The directory existence will remain unknown as long as other users don't find out the share name. However, even if they do, other users won't be able to access the directory's contents if all of the permissions on that directory are set appropriately.

Control access for a single file?

Select that file in the directory window. From the security menu, choose Permission.

Configure the file's permissions as needed: Change existing permissions, remove users and groups from those that have permissions, and specify permissions for new users and groups.

Keep in mind that providing access by group instead of individual user is more efficient and more manageable. On a server with many users and many files, specifying permissions on each file can be an astronomical chore.

Set up a printer the first time for network use?

The first time that you're setting up a printer on the network, you need to create it.To do this, go to the Create... option in the Printer menu of the Print Manager.Fill in the appropriate information, including the type of printer, its share name, and whether or not it will be shared with the network.

You can give one physical printer more than one share name, and assign each name to a different group, perhaps with different print privileges. Just repeat the creation process, but assign the printer a different name.

Set up more than one printer under the same name?

To have more than one printer handle print jobs sent to the same print name,you must set up printer pooling. To do this, go to the Properties... Item in the Printers menu and click on the Details... button. Go to the Additional Ports box and select the ports that correspond to the ports where you've plugged in the other printers.

On an NT server machine, you only need one copy of the driver for the type of printer you're pooling, unlike Windows for Workgroups, which requires one copy of the driver for each printer.

Print directly to ports?

To send print jobs directly to the port to which the printer is connected, rather than spooling normally, go to the Properties...item in the Printers menu and click on the Details button, select print Directly to Ports.

Set printer time-outs?

To set the number of seconds between the time that you send a print job to the printer and the time that, if the printer doesn't see the job, it tells you that there is a transmission error, choose the Properties... item in the printers menu and click on the Settings... buttons. In the dialog box that you'll see, type in the number of seconds that you want for the time-out, or use the arrows to raise or lower the number.

Connect a workstation to a shared printer?

The process of connecting a workstation to a networked printer varies with the type of operating system that the workstation is using. To connect DOS and OS/2 machines, use the NET USE command from the command prompt. For Windows for Workgroups, and Windows NT machines, you can use the Print Manager. Printer drivers for each kind of printer must be loaded locally on all kinds of workstations except Windows NT.

Set printer permission?

To control which groups or individuals have access to a networked printer, and the kind of access that they have, go to the security menu in the Print Manager and choose Permissions. Select existing groups and change the kind of printer access that they have, or click on Add... and select new groups to configure. To select individual members of a group, click on the Users button to display membership.

For users in more than one group with different printer permissions, permissions are cumulative except for No Access--if nay group of which that users is a member of is forbidden access to the printer, that overrides all other permissions.

Hide a shared printer?

To share a printer with the network but keep it from showing up when people browse the network for printers, tack a dollar sign onto the ends of its name. That way, users will have to type its name into the printer name box--it won't show up on the list of printers shared with the network.

Set user print priorities?

You can give the print jobs of one person or group priority over those of another person or group. To do this, create another printer for the same print device. Click on the Details button, and you will see a dialog box in which you can set printer priorities. You can set this number from 1 to 99, with 99 being the highest priority. The default is

Set different printing hours for different groups?

Although you can't make a printer accessible to one group for one set of hours and to another for a different set, you can customize printer access hours for different sets of users. Simply create more than one printer (remember, printers are logical entities, distinct from the physical printing devices), set the hours for each printers as you require, and then tell each group what printer to connect to.

Set up event auditing for a printer?

To keep track of printer events, go to the auditing item in the Print Manager's Security menu. By default, no groups are selected for auditing, so you must select a group. Click on the Add button, and a list of possible groups to audit will appear. Select a group, click on the Add button so that the group name appears on the lower box, and then click OK. Once you've selected a group for auditing, you can choose the events that you wish to audit from the list. For each group that you audit, you can set up a special auditing schedule.

Administer the user accounts on a different Domain from my own domain?

First of all, before you can administer another domain's accounts, that domain must trust your domain. let's go back to the domain T.E.D, which trust the domain ORION. How can we administer T.E.D. while logged on in the ORION domain?

members of T.E.D's local group Administrators are the only ones capable of administrating the T.E.D. domain. To administer T.E.D., he or she could simply add a single ORION administrator to T.E.D.'s local administrator group.

Disconnect users from the server?

To disconnect a single user from the server, select the user name from the Connected Users list, then choose the Disconnect button. Hitting the Disconnect All users button will disconnect everyone from the server. When administering a remote server, your own user account shows up a user connected to the IPC$ resource, which will not be disconnected.

You should inform users before disconnecting them--use send message in the Computer menu to relay your intentions to the connected users.

Setup a pre-scheduled job at the local server?

In this example, we're going to schedule an incremental backup to take place every morning at 3:00 a.m. First of all, if you are using Windows NT, type the following command (in an unbroken line)

at 3:00 /every:M,T,W,TH,F "ntbackup backup c: /a /v /t /incremental /d""Daily backup"""

the NTbackup command option /a appends to the current backup tape; otherwise, you over write the tape's previous backup, the /v option verifies the backup, and the /t followed by incremental tells NTbackup to only backup things up with the archive bit set, and so reset the archive bit once the backup is done. In the label, two sets of quotes are interpreted as a single set of quotes.

Set a logon script path for a local server?

To configure the logon script path for the selected server, type in a local path in the Login Scripts Path box of the directory Replication dialog box (the default, C:\WINNT\SYSTEM32\REPL\IMPORT\SCRIPTS, is is usually sufficient). entries are required in this edit field, so don't enter a blank space.

Get one domain to trust another?

Let's say that you have a domin named TRUSTING and you want it to trust the main administrative domain (named TRUSTED) so that it's administrator can manage TRUSTING'S accounts.

TRUSTED'S administrator must perform the following:

1. In the User Manager for Domains, choose Trust Relationship in the Policies menu
2. Choose the Add button next to the Permitted to Trust this Domain list
3. Type in TRUSTING in the Add box, then type in a password (it can be a blank password). Choose OK

TRUSTING is now permitted to trust TRUSTED, but the trust relationship isn't complete until TRUSTING actually takes the action of trusting TRUSTED. To do this, TRUSTING'S administrator must:

1. Open User Manager for Domains in the TRUSTING domain and choose Trust Relationships in the policies menu.
2. Next to the Trusted Domains box, choose Add.
3. In the Add Trusted Domain box, type in TRUSTED and the password provided by TRUSTED'S administrator.

This establishes the trust relationship between the two domains--TRUSTING now trusts TRUSTED.

When you trust another domain,you are giving it the potential to control your domain. Users from TRUSTED can log on at TRUSTING's Workstations, and TRUSTED's local groups can now contain TRUSTING'S global groups.

Share a Novell printer with an NT network?

1. On the NT server machine, Start up the Print Manager
2. Choose the Printer and then Connect to Printer... The connect to Printer dialog box will appear.
3. click on the Netware network option to open up that network, and you'llsee your Netware servers. Open the menu, and you'll see the Netware print queues.
4. Choose a printer

   Even though you'll probably get nasty gram telling you that there is no Windows printer driver on that Novell machine, It's not terribly important, since your DOS and Windows clients use their own local drivers anyway.

5. Click OK.
6. You'll will be asked what kind of printer is on Novell print queue, and that printer's driver will then be taken off the NT installation CD-ROM. The Novell printer will then appear on the Print Manager just as if it were a locally attached printer. You can view its queue, delete documents, and so on.

   Before the rest of your NT network can see the printer, you have to share it from the Printer Properties dialog box.

7. From the Print Manager, choose a printer, then click Printer and printer Properties. Check the box labeled Share this printer on the network

The printer is now available to all NT clients

Make sure the TCP/IP is set up properly?

1. Test to see if you've installed the IP software by "pinging" the built in IP "loopback" address. Typing ping 127.0.0.1.

   If that fails you know that you've done something wrong in the initial installation. Recheck to see if the software is installed on your system.

2. "Ping" your specific IP address. you can do this by typing PING w.x.y.z. where w.x.y.z is the dotted quad notation for your IP address--the one that you entered when you configured TCP/IP on your system. You should get a reply. For example, I'd type ping 222.2.3.69 on my system.

   If that fails, your TCP/IP stack is not installed correctly, or perhaps you entered the IP number incorrectly, or perhaps you gave the same IP number to another workstation.

3. "Ping" your gateway to see that you can get to the gateway, which should be on your subnet. In my case, my gateway is 222.2.3.1, so I type ping 222.2.3.1

   If you can't get to the gateway, make sure the gateway is up and your network connection is all right. Nothing is more embarrassing than calling outside network support only to find that your LAN cable fell out of the back of your computer.

4. Test the name resolution of your system. "Ping" yourself by name. Instead of typing ping 222.2.3.69, I'd type ping Grnhorn.mcc.com (the machine I'm on at the moment). Taht tests HOSTS and/or DNS.
5. "Ping" someone else on your subnet. Again, try using a host name like virtiousity.mcc.com, and if that doesn't work, use the IP address. If the IP address works but the host name doesn't, double-check the HOSTS file.

   If you're successful on all of these tests, TCP/IP should be set up properly.

Build an IP router with NT?

1. Install two network (let's use ethernet for this example) cards in an NT machine. The NT machine need not be an NT server machine and, given the cost of NT server, you're probably better off using a copy of workstation NT.
2. configure the ehternet card on the Rome subnet with an IP address for the Rome subnet (Using our imaginary internet in Figure 13.17). when you are working in the TCP/IP configuration dialog box, you'll notice a single selection drop-down list box labeled adapter; you can use it to control which Ethernet card you are assigning to what IP address.
3. Click the Advanced... button
4. Check Enable IP Routing
5. Click OK until you get out of the control Panel

   The system will reboot, and your router will be active.

   This will allow an IP router to move traffic from one subnet to another. It will not, however, route traffic between three or more subnets.

Enter multiple TCP/IP gateways?

1. In TCP/IP configuration (choose Control Panel, then Network applet, then click on TCP/IP and then on Configure...), click the advance...button. (Look back at Figure 13.15 for an example screen shot of advance TCP/IP.)
2. In the Default Gateway field, enter the IP address or host name of the gateway. Click Add.

   In the example internet in Figure 13.20, you would do this for every machine in the athens subnet. You might make 180.20.31.40 the default gateway (which you can, of course, enter via the control Panel), and 180.31.70 as the additional gateway.

   You must restart your system and restart for the changes to take effect.

Enable LAN Manager to understand broadcasts?

To make LAN Manager understand broadcasts:

1. Open the Control Panel and double click on the Network applet.
2. Under Installed Network Software, choose Server, double click server or click Configure.
3. In the Server Configuration window, select the make Browser Broadcasts to LAN Manager 2.x clients check box.

In a similar vein, if you have a LAN Manager domain that is on the same LAN segment as an NT domain but does not contain any NT workstations, then the LAN Manager servers will not show up on the browse lists unless you go into the Control Panel and, in the Computer Browse, set the LAN Manager domains to be "other domains."

And if you're using windows for Workgroups workstations with LAN Manager servers but the Windows for Workgroups machines don't see the LAN Manager servers, then add the following line to the [network] section of SYSTEM.INI:

LMAnnounce=yes

Back up data?

With a tape in the drive, start the Backup's in the Administrative Tools program group. Select the drive that you want to back up, and then click on the Backup button in the upper left of the screen. Fill in the Backup information dialog box as appropriate, and click OK.

The backup should proceed normally.

Important Note: You cannot read or restore tapes backed up in NT Server 3.5 on server running NT Server version 3.1.

Back up a removable drive?

1. Go to the File Manager or the command prompt and share the drive that you want to backup.
2. Connect to the shared drive from the file Manager or command prompt
3. The backup program will now be able to see the drive under the letter assigned it, so long as you have a disk in the drive

   You're now set. Back it up as you would any other drive.

Restore data from backups?

With the tape from which you want to restore in the drive, begin the Backup program in the Administrative Tools program group. Double-click on the tape icon to catalog it. Once it's catalog, Select the item(s) that you wish to restore, or select the entire dialog, and then click on the Restore button. A dialog box will appear; fill it in as appropriate. The restoration process should take place normally. If you don't have a tape drive, the programs REGBACK and REGREST, available with the NT Resource kit, will save and restore registries to and from floppies.

Restore a disk registry?

1. From Windows NT Backup, restore the CONFIG directory in the System32 directory
2. Reboot your machine
3. Restore the entire backup set except for the Registry files.
4. Reboot your machine again.

The volume should be back to its original state.

Get help from a command prompt?

If you need help with the syntax or other particulars of a command, type

net help command

where command is a command name. The command's help file will be displayed. If the file takes up more than one section, add the |more switch to the end of the help request.

Decipher Help Message Numbers

When you get an error message with a number attached, type

net helpmsg number

to see the help file attached to that error message.

Set Up a User Account from the command Prompt?

to create and customize a user account, first create the user account by typing

net user name /add

where name is the user name for the new account. Once you've created the account, customize it with the options in Table 16.1 by typing

net user name /option

where option is the option that you want to add to the account.

Make changes to the entire User Account database?

to change settings on the entire user account database concerning such matters as forcible logoff times and password ages, type

net accounts /option

where option is a NET ACCOUNTS switch, these switch are shown in the list above.

Change global group settings?

To change anything about a global group (that is, a group that extends across a domain), type the following from the command prompt:

net group /option

where option is the name of a switch.

Change local group settings?

To change anything about a local group (a group particular to the computer on which it exists, not to the entire domain), type

net localgroup /option

where option is one of the switches explained above.

Change the domain that a Computer Is In?

To add a computer to the local domain, type

net computer \\computer /add

To delete it, substitute the /delete for the /add switch. You can only add computers to the domain that you are currently logged onto.

Forcibly Break a Connection between Computers?

to end a connection between two networked computers, go to one of the two computers and type

net session \\computername /delete

where computer name is the name of the computer you wish to disconnect. If don't specify a specific computer, you will break all connection between the computer you're typing on and the rest of the network.

View Available Resource on the Network?

To see what servers are available in your domain, type

net view

to see the resources that a particular server is sharing with the domain, type

net view \\servername

where servername is the name of the server that you want to view. (Incidentally, if the servername contains spaces, put quotation marks around the server name like so: "\\servername".)

If you want to see a server in another domain, type

net view /domain

to see the domains available, type

net view /domain:domainname

to see the list of available servers on a particular domain and then type

net view \\servername /domain:domainname

when you've selected the server that you want

Connect to a Shared Resource?

to access a shared resource on the network, type

net use devicename: \\servername\sharename

where devicename is what you intend to call the connection (such as D: or LPT1), servername is the name of the server sharing the resource, and sharename is the name by which the server is sharing the resource.

Shared a device with a network?

to share a device with a network, type

net share sharename= directory

where sharename is the name by which the device will be known on the network, and directory is the location where the device is found. For example, to share the directory c:\public on the network as Public you'd type

net share public=c:\public

Control a Print Job from the Command prompt?

To pause, continue, or delete a print job from the command prompt, first type

net print \\computername\sharename

where \\computername\sharename is the name of the computer and printer with the print job that you wish to control. This command will give you a list of the pending print jobs for the printer and their jobs number. find the number that corresponds to the print job that you want to control, and. to delete a job, type

net print \\computername job# /delete

To hold or release a job instead of deleting it, substitute the /hold or /release switch for the /delete switch. You don't need to specify the sharename with this command.

Forward My Message to another Machine?

If you are working at a machine other than the one that you're accustomed to using, you can make sure that your messages follow you there. Just type

net name username

on the machine where you'll be working. All messages addressed to that user name or machine name will show up at that location. Messaging names cannot be already in use anywhere else on the netwok.If you try to add a name that's already in use to a messaging name list, it won't work.

Send Messages?

To send messages from the command prompt, use the NET SEND command. Using the parameters described above, you can send messages to individuals or groups, within a domain or across domains.

Synchronize a Workstation's Time with the Server's?

to coordinate a workstation's time with the server's, type

net time \\servername /set

where servername is the name of the server with which you want to coordinate.

Set up RAS for NT or NT server?

1. click on the Networks Icon in the Control Panel. When it's open, choose the Add Software button
2. Select Remote Access Service from the list of software and click continue. The system will prompt you for the file's location. Make sure that it's correct, and click OK
3. Once the service has been installed, you'll be able to add ports for RAS's use. click on the Add.. button and choose the correct port and modem.
4. Click the Settings button to enable or disable the modem options
5. Use the Advanced Configuration button to either permit all callers to access the entire network, or restrict them to the RAS server.

Install RAS on Non-NT Machine?

1. From the command prompt, type setup. the system will count down the files to copy.
2. when it's done. you'll be prompted for the COM port name. If you don't know what COM port your modem uses, check with your documentation. internal modems frequently use COM2.
3. You'll see the configuration screen. Use the Tab key to move to the selection that you need. Since you've already added the port, Move to Select Modem and choose the kind of modem that you have. If you selected the wrong COM port, you can remove it here with the remove port button and create a new one with the Add Port button.
4. When you've finished, restart your computer. RAS is now installed.

If you're setting up RAS on a computer running windows for workgroups or the DOS Workgroup connection, the process is the same except that you'll type wfwsetup in step 1 instead of setup.

Set User Access through the RAS Server?

1. Open the RAS Administrator and select the connection that you want to customize.
2. click Server/Choose Domain or Server...
3. When the list of domain appears, click on the domain's name once, then click OK. You'll see the list of users for that domain.
4. Choose Permissions from the Users menu
5. Click on the name of a Users to whom you want to extend RAS privileges
6. Check the Grant login privilege check box for that user
7. Repeat Step 4 through 6 for all users to whom you want to grant login privileges

Alternatively, you can use the Grant All button to allow everyone to log on to the RAS server. if you do that, go back and de-select the Guest account; don't let it log in on RAS.

Call a RAS Server or Workstation from an NT Machine?

1. Create a phone Book entry
2. Open the RAS service and select the entry that you want
3. Click on the Dial button. RAS will prompt you for the password to that connection. Enter your user password. You may also have to enter the domain to which the RAS server belongs. Click OK

Assuming that you are authorized for this service, your RAS service will now call the other one. If the other server is working properly , it will make the connection and inform you when it's done.

Connect a Non-NT Workstation to a RAS Server?

1. From the command prompt, type unload protocol
2. Type rasload to load the RAS drivers.
3. Type the rasphone to open the RAS Phone Book
4. Create and save a Phone book entry. to do so, click on the file menu and choose Create. fill in the blanks for the connection name (this is up to you--the name is for the identification purposes only), the domain, and telephone number
5. type Alt-D to reach the dial menu, and choose connect. You will be prompted for password, but, if you've selected and entry, the other information should be filled in. Type in your password and press Enter.
6. You will see a dialog box telling you that the system is trying to make the connection and asking you to wait. If you need to stop before the connection is made, press Enter to Cancel

Once the connection is complete, you will see a message telling you that you can now access the network as though you were connected to the LAN.

Create device.LOG?

1. Hang up any remote connection currently in place, and exit RAS.
2. Open the Registry by running REGEDIT32. you can also access the registry from inside the WINMSD.
3. Go to HKEY_LOCAL_MACHINE and access this key:

   \SYSTEM\CurrentControlSet\SERVICES\RASMAN\Parameters

4. Change the value of the logging parameter to 1, so that it looks like this:

   Logging:REG_DWORD:0x1