[...]... Computer Management for more information 2.2.30 Service Pack Service Pack 1 for Windows 2000 addresses a number of operating-system issues regarding system reliability and application compatibility SP1 also includes a new feature called integrated installation that makes an administrator's life simpler: you can apply the service pack to a network distribution point containing the Windows 2000 installation... runas command You can also run a tool in different credentials by right-clicking on it in Windows Explorer and selecting Runas from the shortcut menu 2.2.4 Audit Policy Setting an audit policy for a domain was easy in Windows NT using the User Manager for Domains administrative tool In Windows 2000 you must use Group Policy if you are in a domain environment and configure the appropriate settings of a. .. manually between domains Instead, when you promote a Windows 2000 member server to the role of a domain controller, you can either: • • • • Add it to an existing domain as a peer domain controller Make it the first domain controller of a new child domain under an existing parent domain, with a two-way transitive trust created automatically between the parent and child domains Make it the first domain... using Active Directory Installation Wizard (dcpromo.exe) The hierarchies of domains that result (trees in a forest) are all interconnected by trusts automatically so that any user in any domain can access any resource in any other domain immediately, provided they have suitable permissions For more information on planning Windows 2000 domains and domain structures, see these articles in Chapter 3: Active... Group Policy And it's simple to install and get going, although any real implementation requires careful planning so you won't have to trash it later and start from scratch 1.2.4 ADSI Active Directory Service Interface (ADSI) is a standard set of interfaces for accessing and manipulating information in a directory, as in Active Directory Using ASDI, you can write scripts to automatically manage users,... more information on how to manage DNS in Windows 2000 2.2.12 Domain Controllers In Windows NT, one domain controller was special within a domain—the primary domain controller (PDC) The PDC was the only domain controller with a writable copy of the domain directory database, and all changes made to user, group, or computer accounts in the domain had to be made on the PDC (If the PDC was unavailable,... this as your main administrator workstation You can install these tools by running Adminpak.msi, which is found in the \I386 folder on your Windows 2000 Server compact disc You can run most administrative tools from the command line while logged on to a workstation using an ordinary domain user (as opposed to an administrator) account To do this, you use a Windows 2000 feature known as Secondary Logon... Administrative Tools in Windows NT and Windows 2000 Windows NT Tool Windows 2000 Tool(s) Administrative Wizards No real counterpart, but Administrative Tools perform some high-level administration tasks Backup Accessories System Tools Disk Administrator Computer Management Computer Management Configure Your Server lets you Backup Storage Disk Management Services and Applications DHCP Services and Applications DNS... Private IP Addressing (APIPA) in the article TCP/IP for information on how to disable APIPA For further general information on DHCP, see DHCP and DHCP relay agent in Chapter 3 and Chapter 4 2.2.9 Disk Quotas A good tip when implementing disk quotas is to configure global quotas only and not quotas for individual users Not following this can make quota administration a real headache For more information... overwork causes them to "shuffle off this mortal coil." For information on how to implement this feature, see delegation in Chapter 3 and Chapter 4 2.2.8 DHCP If you are going to deploy and manage IP addressing on Windows 2000 using DHCP, you might want to disable the Automatic Private IP Addressing (APIPA) feature on your machines APIPA causes an IP address to be automatically assigned to a client machine . Service Interface (ADSI) is a standard set of interfaces for accessing and manipulating information in a directory, as in Active Directory. Using ASDI, you can write scripts to automatically manage. Administrative Tools program group, but you can also create and customize your own consoles by adding various snap- ins. By installing the Windows 2000 Administration Tools (found on the Windows. behind Windows 2000 administration, and are especially useful for administrators familiar with Windows NT. The two chapters here are as follows. Chapter 1, outlines the new features incorporated