Copyright: Network Operations Quick Reference
Citation: Network Operations Quick Reference


Welcome
Welcome	1 of 2

Welcome

The Network Operations Quick Reference primarily contains procedures for completing tasks on a network server running Microsoft® Windows NT™ Server. It also contains some procedures for tasks on computers running Windows NT Workstation that work with servers and domains running Windows NT Server.

The Network Operations Quick Reference is intended for network administrators who are already familiar with Windows NT Server and the Windows NT Server System Guide.

All the procedures in this manual are also contained in the Windows NT Server System Guide. If you are new to Windows NT, you may want to initially use the Windows NT Server System Guide rather than this manual while you become familiar with the system.

Once you are more familiar with Windows NT, you may find the Network Operations Quick Reference more useful to refer to while you manage your network. The following differences from the Windows NT Server System Guide make the Network Operations Quick Reference useful for this purpose:

This manual contains only those procedures that network administrators may need to perform while managing a Windows NT network and its servers.

This manual contains only procedures and does not contain any background conceptual information. If you need conceptual information, see the Windows NT Server Concepts and Planning Guide.

To conserve space and keep this manual as small as possible, the procedures in this manual do not include diagrams of the dialog boxes used in the procedure. Also, some of the procedures in this manual are not as detailed as those in the Windows NT Server System Guide.


Conventions
Welcome	2 of 2

Conventions

The following conventional terms, text formats, and symbols are used throughout the printed documentation for Microsoft Windows NT.

Convention	Meaning

Bold	Indicates the actual commands, words, or characters that you type in a dialog box or at the command prompt.

Italic	Indicates a placeholder for information or parameters that you must provide. For example, if the procedure asks you to type filename, you must type the actual name of a file. Italic also indicates new terms and the titles of other books in the Microsoft Windows NT package.

ALL UPPERCASE	Indicates a directory, filename, or acronym. You can use lowercase letters when you type directory names or filenames in a dialog box or at the command prompt, unless otherwise indicated for a specific application or utility.

Monospace	Represents examples of screen text or entries that you might type at the command line or in initialization files.

Indicates a procedure.

Indicates a procedure with only one step.

 	Indicates a list of related information, not procedural steps.

\WINNT or \systemroot	Refers to the Windows NT system tree. This can be\WINNT, \WINNT35, \WINDOWS, or whatever other directory name you specified when installing Windows NT.


Knowing the Basics
Chapter 1	1 of 2

Knowing the Basics

Logging On and Logging Off

The following procedure assumes that no one is logged on at the computer. If another user is logged on, he or she must log off (or you must log the user off) before you can log on.

To log on to Windows NT

1.	Press CTRL+ALT+DEL.

Important

The CTRL+ALT+DEL sequence ensures the security of your system. Even if you see a message already displayed that asks you to enter your password, always press CTRL+ALT+DEL before you type your password.

2.	In the Welcome dialog box, type your username and password.

3.	In the From box, select the domain or computer where the user account you are logging on to is stored.

To log off from the computer

From the File menu in Program Manager, choose Logoff. Or press ALT+F4.

– Or –

Press CTRL+ALT+DEL, and then choose the Logoff button in the Windows NT Security dialog box.


Changing Your Password
Knowing the Basics	2 of 2

Changing Your Password

Use this procedure to change the password of your user account, either on a Windows NT Server domain or on a computer running Windows NT Workstation.

To change your password

1.	Log on to Windows NT (if you aren't logged on already) using the account for which you want to change the password, and then press CTRL+ALT+DEL.

2.	In the Windows NT Security dialog box, choose the Change Password button.

3.	In the Change Password dialog box, type your old password, a new password, and a confirmation in the appropriate boxes, and then choose the OK button.


Managing Domains and Trust Relationships
Chapter 2	1 of 13

Managing Domains and Trust Relationships

Creating a New Domain and Moving a Server to Another Domain

You can create a new Windows NT Server domain only during installation of Windows NT Server on the primary domain controller. If you want to create a new domain and you have already installed Windows NT Server on all your servers, you must reinstall Windows NT Server on the computer that will be the primary domain controller. During installation, specify the new domain name as the domain for the server.

Similarly, to move a server running Windows NT Server from one domain to another, you must reinstall Windows NT Server on the server and specify the name of the domain you are moving it to during installation.

For information on installation, see the Windows NT Server System Guide.


Adding a Windows NT Computer to a Domain
Managing Domains and Trust Relationships	2 of 13

Adding a Windows NT Computer to a Domain

There are three ways to add computers running Windows NT Workstation or servers that are not domain controllers to a domain:

A computer can be added to a domain during Windows NT software installation - if the software is installed by an administrator. For instructions on installing Windows NT, see the Windows NT Server Installation Guide.

After installation, a computer can be added to a domain by an administrator who is logged on at the computer and uses the Network option of that computer's Control Panel. This method is described in the following section.

A computer can also be added to a domain in two steps. First an administrator - who can be logged on anywhere in the domain - uses Server Manager to add the computer to the domain. Then the administrator instructs the computer user to enter some information in the Network option of the workstation's Control Panel. This method is described in "Using Server Manager to Add a Computer to a Domain," later in this chapter.

When you add a computer, if you have selected filtering (for example, you are displaying only servers), and you add a computer of a type that is currently filtered out (for example, you add a workstation), the computer is added to the domain but because of the filtering is not displayed in the Server Manager window.

For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Using Control Panel to Add a Computer to a Domain
Managing Domains and Trust Relationships	3 of 13

Using Control Panel to Add a Computer to a Domain

This procedure can be performed only by users who are members of the Administrators group in the domain, and is performed at the computer joining the domain.

To use Control Panel to add a computer to a domain

1.	At the computer that will join the domain, choose the Network icon in Control Panel.

2.	Choose the Change button next to the Domain or Workgroup name.

3.	In the Domain Settings dialog box, select the Domain option, and then type the name of the domain you want the computer to join.

The computer name, as shown at the top of this dialog box, must be a unique name in the domain.

4.	Select the Create Computer Account In Domain check box.

5.	In the appropriate boxes, type the user name and password for your domain administrator user account.

6.	Choose the OK button.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Using Server Manager to Add a Computer to a Domain
Managing Domains and Trust Relationships	4 of 13

Using Server Manager to Add a Computer to a Domain

Using this method of adding a Windows NT computer to a domain, a domain administrator uses Server Manager to enable the computer to be added to the domain, then a user of the computer being added can finish the procedure at that computer.

To use Server Manager to add a computer to a domain

1.	From the Computer menu, choose Select Domain.

2.	In the Select Domain dialog box, select the domain you want and choose the OK button.

3.	From the Computer menu, choose Add To Domain.

4.	Under Windows NT Computer Type, choose Workstation or Server.

5.	Type the computer name in the Computer Name box.

6.	Choose the Add button.

7.	Choose the Close button.

8.	Instruct the user of that computer to enter this domain name in the Network option in Control Panel, and to verify that the correct computer name is entered there.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Removing a Computer from a Domain
Managing Domains and Trust Relationships	5 of 13

Removing a Computer from a Domain

You can remove workstations and servers from a domain, but you cannot simply remove the primary domain controller. In order to remove the primary domain controller, you must first promote a backup domain controller to primary. If you remove a backup domain controller from a domain, to add the server to a different domain you must reinstall Windows NT Server on it.

To remove a computer from a domain

1.	From the Computer menu, choose Select Domain.

2.	In the Select Domain dialog box, select the domain you want and choose the OK button.

3.	Select a computer from the list in the Server Manager window.

4.	From the Computer menu, choose Remove From Domain.

5.	Instruct the user of that computer to remove this domain name from the Network option in Control Panel, and to enter (as appropriate) another domain name or workgroup name.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Moving a Computer from One Domain to Another
Managing Domains and Trust Relationships	6 of 13

Moving a Computer from One Domain to Another

You can move computers running Windows NT Workstation and servers that are not domain controllers to a different domain. However, you cannot move a backup domain controller to a different domain without reinstalling Windows NT Server on it.

To move a computer from one domain to another

1.	From the Computer menu, choose Select Domain.

2.	In the Select Domain dialog box, select the domain you want to move the computer to and choose the OK button.

3.	From the Computer menu, choose Add To Domain and complete the Add Computer To Domain dialog box.

4.	Instruct the user of that computer to enter the new domain name in the Network option in Control Panel.

5.	From the Computer menu, choose Select Domain and complete the Select Domain dialog box, specifying the old domain.

6.	Select the computer name from the list in the Server Manager window, and then from the Computer menu choose Remove From Domain.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Changing the Name of a Domain
Managing Domains and Trust Relationships	7 of 13

Changing the Name of a Domain

To change the name of a Windows NT domain, you must reenter the domain name on each server and workstation in the domain and then reestablish existing trust relationships.

You can use this procedure only to change the domain name of all computers within a domain. You cannot use this procedure to move a computer from one domain to another.

To change a domain name

1.	On the primary domain controller, choose the Network option in Control Panel.

2.	In the Network Settings dialog box, choose the Change button next to the domain name.

3.	Enter a domain name that is not already in use on your network and then restart the computer.

4.	Repeat steps 2 and 3 on all other Windows NT computers in the domain.

5.	From a primary or backup domain controller, use User Manager for Domains to reestablish any trust relationships with other domains.


Adding LAN Manager 2.x Domains to a Windows NT Domain List
Managing Domains and Trust Relationships	8 of 13

Adding LAN Manager 2.x Domains to a Windows NT Domain List

Windows NT Setup automatically installs computer browser software on your computer. This software enables you to list the computers that belong to each Windows NT domain on your network.

You can also browse LAN Manager 2.x domains from a Windows NT domain, but you must first add the names of these domains to the browsing list on the primary domain controller.

To add LAN Manager domains to a Windows NT domain list

1.	Log on to the primary domain controller and select the Network icon in Control Panel.

2.	In the Network Settings dialog box, select Computer Browser in the Installed Network Software box.

3.	Choose the Configure button.

Windows NT displays the Browser Configuration dialog box.

4.	In this dialog box, select one or more LAN Manager domain names from the list. Choose the Add button, and then choose the OK button.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Promoting a Server to Primary Domain Controller
Managing Domains and Trust Relationships	9 of 13

Promoting a Server to Primary Domain Controller

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

When a server is promoted to primary domain controller, an up-to-date copy of the user account database is replicated from the old primary domain controller to the new one, and then the old primary domain controller is automatically demoted to backup domain controller (unless it is not currently running).

To promote a server to primary domain controller

1.	Select the server to be promoted to primary domain controller from the list of computers in the Server Manager window.

2.	From the Computer menu, choose Promote To Primary Domain Controller.

This procedure can take several minutes. When completed, the old primary domain controller automatically reverts to backup domain controller status.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Demoting a Primary Domain Controller to Backup
Managing Domains and Trust Relationships	10 of 13

Demoting a Primary Domain Controller to Backup

Usually, when a server is promoted to primary domain controller, no special action needs to be taken to demote the former primary to backup domain controller because the system does this automatically.

However, if a server is promoted to primary domain controller while the existing primary domain controller is unavailable (for example, if it is being repaired), and the former primary domain controller later returns to service, you must demote it.

To demote a former primary domain controller to backup

1.	Select the former primary domain controller from the list of computers in the Server Manager window.

On the Computer menu, the Promote To Primary Domain Controller command becomes the Demote To Backup Domain Controller command.

2.	From the Computer menu, choose Demote To Backup Domain Controller.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Synchronizing with the Primary Domain Controller
Managing Domains and Trust Relationships	11 of 13

Synchronizing with the Primary Domain Controller

Synchronization is usually done automatically by the system, but if the user account database on a backup domain controller becomes unsynchronized, you can synchronize it manually to correct the situation. It is rarely necessary.

To synchronize a single backup domain controller with the primary domain controller

1.	Select the backup domain controller from the list in the Server Manager window.

2.	From the Computer menu, choose Synchronize With Primary Domain Controller.

To synchronize all servers of a domain

1.	Select the primary domain controller from the list in the Server Manager window.

2.	From the Computer menu, choose Synchronize Entire Domain.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Establishing a Trust Relationship
Managing Domains and Trust Relationships	12 of 13

Establishing a Trust Relationship

Establishing a trust relationship requires two steps: first one domain must permit a second domain to trust it, and then the second domain must be set to trust the first domain. It is better to do these steps in this order, although it is not required. If you perform these steps in this order, the new trust relationship takes effect immediately. Otherwise, it can take up to 15 minutes for the trust relationship to take effect.

The two steps may need to be performed by separate administrators, if no single person has an administrative account in both domains.

To permit another domain to trust this domain

1.	If User Manager for Domains does not already display the appropriate domain, from the User menu choose Select Domain. In the Select Domain dialog box that appears, specify the name of the domain that will be configured to permit another to trust it.

2.	From the Policy menu, choose Trust Relationships.

The Trust Relationships dialog box lists the trust relationships for the domain.

3.	Choose the Add button next to the Permitted To Trust This Domain box.

4.	In the Domain To Permit box, type the name of the domain that will be allowed to trust this domain.

5.	Type a password in both the Password and Confirm Password boxes.

Passwords are case-sensitive.

6.	In the Permit Domain To Trust dialog box, choose the OK button.

In the Trust Relationships dialog box, the added name appears in the Permitted To Trust This Domain list.

7.	In the Trust Relationships dialog box, choose the Close button.

8.	Provide the password to the administrator of the domain you have permitted to trust this domain. That administrator must complete the trust relationship by having that domain trust this one.

To trust another domain

1.	Obtain a password from the administrator of the domain that will be trusted.

2.	If User Manager for Domains does not already display the appropriate domain, from the User menu choose Select Domain. In the Select Domain dialog box that appears, specify the name of the domain that will be configured to trust another.

3.	From the Policy menu, choose Trust Relationships.

The Trust Relationships dialog box lists the trust relationships for the domain.

4.	Choose the Add button next to the Trusted Domains box.

5.	In the Domain box, type the name of the domain that will be trusted.

6.	In the Password box, type the password required by that domain.

Passwords are case-sensitive.

7.	In the Add Trusted Domain dialog box, choose the OK button.

In the Trust Relationships dialog box, the added name appears in the Trusted Domains list.

8.	In the Trust Relationships dialog box, choose the Close button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Ending a Trust Relationship
Managing Domains and Trust Relationships	13 of 13

Ending a Trust Relationship

When you end a trust relationship, you should do both of the following (in any order):

In the trusting domain, remove the trusted domain from the Trusted Domains box.

In the trusted domain, remove the trusting domain from the Permitted To Trust This Domain box.

To stop trusting another domain

1.	From the User menu in User Manager for Domains, choose Select Domain. In the Select Domain dialog box that appears, specify the name of the domain that will no longer trust the other.

2.	From the Policy menu, choose Trust Relationships.

The Trust Relationships dialog box lists the trust relationships for the domain.

3.	In the Trusted Domains box, select the name of the domain which this domain will no longer trust. Then choose the Remove button next to the Trusted Domains box.

4.	In the resulting message box, choose the OK button.

5.	In the Trust Relationships dialog box, choose the Close button.

To revoke the permission of one domain to trust another domain

1.	From the User menu in User Manager for Domains, choose Select Domain. In the Select Domain dialog box that appears, specify the name of the domain that will no longer permit the other domain to trust it.

2.	From the Policy menu, choose Trust Relationships.

The Trust Relationships dialog box lists the trust relationships for the domain.

3.	In the Permitted To Trust This Domain box, select the name of the domain that will no longer trust this domain. Then choose the Remove button next to the Permitted To Trust This Domain box.

4.	In the resulting message box, choose the OK button.

5.	In the Trust Relationships dialog box, choose the Close button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing Users, Groups, and Security Policy
Chapter 3	1 of 22

Managing Users, Groups, and Security Policy

Creating a New User Account

Use the following procedure only to create new accounts for which you will provide all information. You can also create user accounts by copying other accounts. For more information, see "Copying a User Account," later in this chapter.

To create a new user account

1.	From the User menu, choose New User.

2.	In the Username box, type a unique user name of up to 20 characters.

It can contain any uppercase or lowercase characters except the following:

"    /    \    [    ]    :    ;    |    =    ,    +    *    ?    <    >

3.	In the Full Name box, type the user's complete name.

This entry is optional, but recommended.

4.	In the Description box, type a description of the user or the user account.

This entry is optional, but recommended.

5.	In both the Password and Confirm Password boxes, type a password of up to 14 characters.

Passwords are case-sensitive. Password attributes are controlled by the Account policy. For information see "Managing Security Policy," earlier in this chapter.

6.	Select or clear the check boxes for the various options.

7.	To administer a user account property associated with one of the five buttons at the bottom of the dialog box, choose a button and complete the dialog box that appears.

Choose	To

Groups	Specify the groups in which the user account will be a member.

Profile	Specify a user profile, logon script, or home directory for the user account.

Hours	Specify the hours during which the user account can connect to a server.

Logon From	Specify the workstations from which the user can log on.

Account	Manage the account expiration date, and specify whether this is a global or a local account.

These buttons and their dialog boxes are described in the following sections of this chapter.

8.	Choose the Add button.

The user account is added. The New User dialog box reverts to its default settings.

9.	To add another user account, repeat steps 2 – 8.

10.	When you finish creating new user accounts, choose the Close button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing a User’s Group Memberships
Managing Users, Groups, and Security Policy	2 of 22

Managing a User's Group Memberships

Use the Group Memberships dialog box to manage membership in the groups of this domain or workstation.

Use the following procedure when you are managing group memberships for a new user account you are creating, or when you are modifying group memberships of a single user account. To modify group memberships of multiple user accounts, see "Managing Common Group Memberships for Two or More Accounts," later in this chapter.

To manage group memberships for a single account

1.	Choose the Groups button from the New User, Copy Of, or User Properties dialog box.

In the Group Memberships dialog box, the Member Of box lists the groups this user account belongs to, and the Not Member Of box lists the groups this user account does not belong to.

2.	To add the user account to one or more groups, select one or more groups in the Not Member Of box, and then choose the Add button. Or, select one or more groups in the Not Member Of box, and then drag one of the selected group icons into the Member Of box.

3.	To remove the user account from one or more groups, select one or more groups in the Member Of box, and then choose the Remove button. Or, select one or more groups in the Member Of box, and then drag one of the selected group icons into the Not Member Of box.

You cannot remove the primary group.

4.	To change the user account's primary group, select one global group from the Member Of box, and then choose the Set button.

A primary group is used when a user logs on using Windows NT Services for Macintosh or runs POSIX applications. Only a global group can be set as the primary group.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing a User’s Logon Hours
Managing Users, Groups, and Security Policy	3 of 22

Managing a User's Logon Hours

Use the Logon Hours dialog box to restrict the days and hours during which a user can connect to a server. This does not affect a user's ability to use his or her workstation. The default is to allow a user to connect to a server during all hours of all days of the week.

To manage logon hours

1.	Choose the Hours button from the New User, Copy Of, or User Properties dialog box.

2.	In the Logon Hours dialog box, select the hours to be administered.

To select		Click
One hour		The box for that hour.
A block of hours		The beginning of the block and drag through the rows and columns to the end of the block.
One entire day		That day in the left column.
One hour across all seven days		The top box of that column.
The entire week		The top left box (above Sunday).
3.	Choose either the Allow or Disallow button.

Choose	To
Allow	Allow connections during the selected hours.
Disallow	Deny connections during the selected hours.
4.	Repeat steps 2 and 3 as necessary.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing a User’s Logon Workstations
Managing Users, Groups, and Security Policy	4 of 22

Managing a User's Logon Workstations

Use the Logon Workstations dialog box to restrict the workstations from which users can log on. The default is to allow a user to log on from any workstation.

To manage logon workstations

1.	Choose the Logon From button from the New User, Copy Of, or User Properties dialog box.

2.	Select one of the logon options.

3.	If you select User May Log Onto These Workstations, type computer names in at least one and up to eight of the numbered boxes.

4.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing a User’s Account Information
Managing Users, Groups, and Security Policy	5 of 22

Managing a User's Account Information

Use the Account Information dialog box to define an account expiration date (if any) and to specify the account type for the selected user accounts.

To manage user account information

1.	Choose the Account button from the New User, Copy Of, or User Properties dialog box.

2.	Under Account Expires, select either Never or End Of.

3.	If you select End Of, specify an expiration date in the End Of box.

4.	Under Account Type, select either Global Account or Local Account.

Most accounts are global accounts. Use local accounts only when a trust relationship does not exist with the user's home domain.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing a User’s Environment Profile
Managing Users, Groups, and Security Policy	6 of 22

Managing a User's Environment Profile

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

Use the User Environment Profile dialog box to define the user profile path, logon script name, and home directory for the selected user accounts. All entries in this dialog box are optional.

To configure the user environment profile

1.	Choose the Profile button from the New User, Copy Of, or User Properties dialog box.

2.	To specify a user profile for the selected user accounts, in the User Profile Path box type the full path (including filename) for the user profile. For example, you might type \\cat\profiles\%username%.usr.

When administering multiple user accounts, do not assign the same personal profile to all the accounts. Either use %USERNAME%.USR, or assign a mandatory profile.

3.	To specify a logon script, type the filename in the Logon Script Name box.

4.	To specify a network directory as the home directory, select the Connect box, specify a drive letter, select the To box, and type a network path.

For example, you might specify drive H and type \\cat\users\%username%. When administering the user accounts of a domain, specify a network directory.

5.	To specify a local directory as a home directory, select the Local Path box and type the local path (including the drive letter).

For example, you might type c:\operators\jeffho. When administering the user accounts of a Windows NT workstation, specify a local path.

6.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Copying a User Account
Managing Users, Groups, and Security Policy	7 of 22

Copying a User Account

In many situations it may be quicker and more convenient to copy an existing user account than it would be to create an entirely new one. The main benefit of copying a user account is that the group memberships are copied to the new account.

To make a copy of an existing user account

1.	Select a user account from the list in the User Manager for Domains window, and then choose Copy from the User menu.

2.	In the Copy Of dialog box, configure the user account options as described in "Creating a New User Account," earlier in this chapter.

3.	When the user account is configured, choose the Add button.

The user account is added. The Copy Of dialog box reverts to its original settings.

4.	To add another user account, repeat steps 1 – 3.

5.	When you finish making copies of the selected user account, choose the Close button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Modifying a Single User Account
Managing Users, Groups, and Security Policy	8 of 22

Modifying a Single User Account

When you change the properties of an existing user account, the changes take effect the next time that user logs on.

To modify one user account

1.	In the User Manager for Domains window, double-click a user account. Or select a user account, and then choose Properties from the User menu.

For security, the password is represented by a row of asterisks, with the number of asterisks different from the actual number of characters in the password.

2.	To change the Full Name or the Description, type new text in those boxes.

3.	To change the password, type a password of up to 14 characters in both the Password and Confirm Password boxes.

Remember to provide the new password to the user of this account.

4.	To change the settings of the Account Disabled and the three password options, select or clear those check boxes.

5.	To administer a property associated with one of the five buttons at the bottom of the User Properties dialog box, choose a button and complete the dialog box that appears.

These buttons and their dialog boxes are described in "Creating a New User Account," earlier in this chapter.

6.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Modifying Two or More User Accounts
Managing Users, Groups, and Security Policy	9 of 22

Modifying Two or More User Accounts

The advantage of modifying multiple user accounts is that you can make the same change simultaneously to several accounts. For example, you might select several accounts and add them to a new local group.

To modify two or more user accounts in the same way

1.	In the User Manager for Domains window, select two or more user accounts.

2.	From the User menu, choose Properties.

If all the selected user accounts have an identical description, that text appears in the Description box. If one or more of the accounts have a different description, the Description box is empty.

If all the selected user accounts have the same setting for the Accounts Disabled option or one of the password options, the setting for that check box is displayed. If one or more of the accounts have a different setting for one of the options, that check box is indeterminate (filled with gray).

3.	To change the Description for all the selected user accounts, type new text in that box.

4.	To change an option setting for all the selected user accounts, select or clear the appropriate Accounts Disabled or password check box.

5.	To administer a property associated with one of the five buttons at the bottom of the User Properties dialog box, choose a button and complete the dialog box that appears.

For more information on managing group memberships of multiple accounts (by using the Groups button), see the following section. For information on using the other four buttons, refer to procedures explained previously in this chapter.

6.	Choose the OK button.

Any changes you made are applied to all the selected user accounts.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing Common Group Memberships for Two or More Accounts
Managing Users, Groups, and Security Policy	10 of 22

Managing Common Group Memberships for Two or More Accounts

When two or more user accounts are selected, you can use the Group Memberships dialog box to add all the selected user accounts to one or more groups of this domain or workstation, or to remove all the selected user accounts from one or more groups of this domain or workstation.

To manage common group memberships for two or more user accounts

1.	In the User Manager for Domains window, select two or more user accounts, and then choose Properties from the User menu.

2.	In the User Properties dialog box, choose the Groups button.

In the Group Memberships dialog box, the All Are Members Of box lists the groups that every one of the selected user accounts belong to. If one or more of the selected user accounts do not belong to a particular group, that group is listed in the Not All Are Members Of box.

3.	To add the selected user accounts to one or more groups, select one or more groups in the Not All Are Members Of box, and then choose the Add button. Or, select one or more groups in the Not All Are Members Of box, and then drag one of the selected group icons into the All Are Members Of box.

4.	To remove the selected user accounts from one or more groups, select one or more groups in the All Are Members Of box, and then choose the Remove button. Or, select one or more groups in the All Are Members Of box, and then drag one of the selected group icons into the Not All Are Members Of box.

You cannot remove a primary group.

5.	To change the user account's primary group, select one global group from the Member Of box, and then choose the Set button.

A primary group is used when a user logs on using Windows NT Services for Macintosh or runs POSIX applications. Only a global group can be set as the primary group. If no primary group is shown, it means the selected user accounts are not all set to the same primary group.

6.	Choose the OK button.

When multiple user accounts are selected and the Group Memberships dialog box is open, the groups in the All Are Members Of box always have all the selected user accounts as members. But the groups in the Not All Are Members Of box may have none or some of the selected user accounts as members. If you need to ensure that a group has none of the selected user accounts as members, perform the following procedure.

To ensure that a group has none of the selected user accounts as members

1.	In the Group Memberships dialog box, move the group from the Not All Are Members Of box into the All Are Members Of box.

2.	Choose the OK button to save the change.

3.	In the User Properties dialog box, choose Groups.

4.	In the Group Memberships dialog box, move the group from the All Are Members Of box back into the Not All Are Members Of box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Disabling and Enabling User Accounts
Managing Users, Groups, and Security Policy	11 of 22

Disabling and Enabling User Accounts

A disabled user account still exists, but the user is not permitted to log on. A disabled account continues to appear in the user account list of the User Manager for Domains window. A disabled account can be restored to enabled status at any time.

To disable one or more user accounts

1.	In the User Manager for Domains window, select one or more user accounts.

2.	From the User menu, choose Properties.

3.	Select the Account Disabled check box.

4.	Choose the OK button.

Logons are no longer allowed for those user accounts.

To enable one or more disabled accounts

1.	In the User Manager for Domains window, select one or more user accounts.

2.	From the User menu, choose Properties.

3.	Clear the Account Disabled check box.

4.	Choose the OK button.

Logons are now allowed for those user accounts.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Unlocking User Accounts
Managing Users, Groups, and Security Policy	12 of 22

Unlocking User Accounts

If a user account becomes locked out because of too many bad logon attempts, you can use the following procedure to unlock the account, so that it can log on.

To unlock a user account

1.	In the User Manager for Domains window, select the account to be unlocked.

2.	From the User menu, choose Properties.

3.	Clear the Account Locked Out check box.

4.	Choose the OK button.

Note

You cannot select the Account Locked Out check box to lock out an account. Accounts can only be locked out by too many bad logon attempts. If you want to prevent the use of an account, disable it.


Renaming User Accounts
Managing Users, Groups, and Security Policy	13 of 22

Renaming User Accounts

Any user account can be renamed, including the built-in user accounts. Because a renamed user account retains its security identifier (SID), it retains all its other properties - for example, its description, password, group memberships, user environment profile, logon hours, logon workstations, account information, and any assigned permissions and rights.

To rename a user account

1.	In the User Manager for Domains window, select one user account.

2.	From the User menu, choose Rename.

3.	In the Rename dialog box, type a new user name of up to 20 characters in the Change To box.

4.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Deleting User Accounts
Managing Users, Groups, and Security Policy	14 of 22

Deleting User Accounts

Be certain you want to delete a user account before you do so, because a deleted user account cannot be recovered. It is a good idea to first disable a user account, and then periodically delete the disabled accounts. This is a low-risk way to remove users.

To delete one or more user accounts

1.	In the User Manager for Domains window, select one or more user accounts.

The built-in Administrator and Guest accounts cannot be deleted.

2.	From the User menu, choose Delete.

3.	If a confirmation message appears, choose the OK button.

4.	When the delete message appears, choose the Yes button. If multiple user accounts are selected, choose the Yes To All button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Creating a Global Group
Managing Users, Groups, and Security Policy	15 of 22

Creating a Global Group

A global group can be added either by creating a completely new global group, or by copying an existing global group. The main advantage of copying a group is that the new group will have the same members as the original group. Any rights or permissions granted to the original group are not copied to the new group.

To create a new global group

1.	In the User Manager for Domains window either select the user accounts you want to be the initial members of the new group, or select any group to ensure no user accounts are initially selected.

2.	From the User menu, choose New Global Group.

If you selected one or more user accounts in step 1, the selected users are the initial members of the new group.

3.	In the Group Name box, type a group name of up to 20 characters.

4.	In the Description box, type a description.

5.	To add members to the global group, select one or more user accounts from the Not Members box, and then choose the Add button. Or, select one or more user accounts from the Not Members box, and then drag one of the selected icons into the Members box.

6.	To remove members from the global group, select one or more user accounts from the Members box, and then choose the Remove button. Or, select one or more user accounts from the Members box, and then drag one of the selected icons into the Not Members box.

7.	When the membership of the global group is defined, choose the OK button.

To make a copy of an existing global group

1.	In the User Manager for Domains window, select one global group.

2.	From the User menu, choose Copy.

3.	Define the new group as described in the previous procedure for creating a new global group.

You must provide a group name. You can accept or change the description and group members, which were copied from the original group.

4.	When the membership of the global group is defined, choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Modifying a Global Group
Managing Users, Groups, and Security Policy	16 of 22

Modifying a Global Group

Use this procedure to change the membership of an existing global group, or to change its description.

To modify an existing global group

1.	In the User Manager for Domains window, double-click one global group. Or select the global group, and then choose Properties from the User menu.

2.	To change the description, type new text in the Description box.

3.	To add members to the global group, select one or more user accounts from the Not Members box, and then choose the Add button. Or, select one or more user accounts from the Not Members box, and then drag one of the selected icons into the Members box.

4.	To remove members from the global group, select one or more user accounts from the Members box, and then choose the Remove button. Or, select one or more user accounts from the Members box, and then drag one of the selected icons into the Not Members box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Creating a Local Group
Managing Users, Groups, and Security Policy	17 of 22

Creating a Local Group

A local group can be added either by creating a completely new local group, or by copying an existing local group. The main advantage of copying a group is that the new group will have the same members as the original group. Any rights or permissions granted to the original group are not copied to the new group.

To create a new local group

1.	In the User Manager for Domains window either select the user accounts you want to be the initial members of the new group, or select any group to ensure no user accounts are initially selected.

2.	From the User menu, choose New Local Group.

If you selected one or more user accounts in step 1, the selected users are the initial members of the new group.

3.	To view the Full Names of the listed user accounts, choose the Show Full Names button.

This can be a lengthy operation when the local group contains numerous users from other domains.

4.	In the Group Name box, type a name for the new group.

5.	In the Description box, type a description.

6.	To add members to the local group, choose the Add button and complete the Add Users And Groups dialog box that appears.

You can add global groups and user accounts from this domain and from trusted domains.

7.	To remove members from the local group, select one or more members in the Members box, and then choose the Remove button.

8.	When the membership of the local group is defined, choose the OK button.

To make a copy of an existing local group

1.	In the User Manager for Domains window, select one local group.

2.	From the User menu, choose Copy.

3.	Define the group as described in the previous procedure for creating a new local group.

You must provide a group name. You can accept or change the description and group members, which were copied from the original group.

4.	When the membership of the local group is defined, choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Modifying a Local Group
Managing Users, Groups, and Security Policy	18 of 22

Modifying a Local Group

Use this procedure to change the membership of an existing global group or to change its description.

To modify a local group

1.	In the User Manager for Domains window, double-click one local group. Or select the local group, and then choose Properties from the User menu.

In the Local Group Properties dialog box, the group name is displayed but cannot be changed.

2.	To view the Full Names of the listed user accounts, choose the Show Full Names button.

This can be a lengthy operation when the local group contains numerous users from other domains.

3.	To change the description, type new text in the Description box.

4.	To add members to the local group, choose the Add button and complete the Add Users And Groups dialog box that appears.

You can add global groups and user accounts from this domain and from trusted domains.

5.	To remove members from the local group, select one or more members in the Members box, and then choose the Remove button.

6.	When the membership of the local group is defined, choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Deleting a Group
Managing Users, Groups, and Security Policy	19 of 22

Deleting a Group

Deleting a group removes only that group: it does not delete any user accounts or global groups that were members of the deleted group.

Be certain you want to delete a group before you do so, because a deleted group cannot be recovered.

To delete a group

1.	Select the group from the group list in the User Manager for Domains window.

2.	From the User menu, choose Delete.

3.	If a confirmation message appears, choose the OK button.

4.	When the delete message appears, choose the Yes button.


Managing the Account Policy
Managing Users, Groups, and Security Policy	20 of 22

Managing the Account Policy

The Account policy controls the way passwords must be used by all user accounts, and also determines the computer's account lockout policy. The account lockout feature enables you to make Windows NT Server more secure from intruders who try to log on by guessing the passwords of existing user accounts. When account lockout is enabled, a user account becomes locked if there are a number of incorrect attempts to log on to that account within a specified amount of time. Locked accounts cannot log on. A locked account remains locked until an administrator unlocks it, or until a specified amount of time passes, depending on how you configure account lockout. By default, account lockout is disabled.

Changes to this policy affect each user at the next logon.

To manage the Account policy

1.	From the Policy menu, choose Account.

2.	In the Account Policy dialog box, define the four password parameters.

Parameter		Meaning
Maximum Password Age		The period of time a password can be used before the system requires the user to change it.
Minimum Password Age		The period of time a password must be used before the user is allowed to change it. If you select the Allow Changes Immediately option here, under Password Uniqueness you must select the Do Not Keep Password History option.
Minimum Password Length		The fewest characters a password can contain.
Password Uniqueness		The number of new passwords that must be used by a user account before an old password can be reused. If you enter a uniqueness value here (for example, Remember 4 Passwords), under Minimum Password Age you must specify an age value (for example, Allow Changes In 7 Days).
3.	Select No Account Lockout to specify that users are never locked out because of bad password attempts, or select Account Lockout to enable account lockout. If you choose Account Lockout, you should also set the following parameters.

Parameter		0
Lockout After		The number of incorrect logon attempts that will cause the account to be locked. The range is 1 to 999.
Reset Count After		The maximum number of minutes that can occur between any two bad logon attempts. The range is 1 to 99999. For example, if Lockout After is 5 bad logon attempts, and Reset Count After is 30 minutes, then 5 bad logon attempts, each 29 minutes apart, would cause lockout.
Lockout Duration		Select Forever to cause locked accounts to remain locked until an administrator unlocks them. Select Duration and type a number to cause accounts to remain locked for the specified number of minutes.
4.	Select or clear the Forcibly Disconnect Remote Users From Server When Logon Hours Expire check box.

This option interacts with the Logon Hours defined for a user account. If this option is selected, a user account that exceeds its logon hours is disconnected from all connections to any server in the domain. The user receives a warning message a few minutes prior to expiration of the logon hours.

If this check box is cleared, the user will not be disconnected, but no new connections will be allowed, and a warning message will be sent every 10 minutes.

5.	Select or clear the Users Must Log On In Order To Change Password check box. Selecting this prevents users from being able to change their own passwords when they expire - the user must get help from an administrator. Clearing the box allows users to change their own passwords when they expire, without help from an administrator.

6.	Choose the OK button.


Managing the User Rights Policy
Managing Users, Groups, and Security Policy	21 of 22

Managing the User Rights Policy

User rights determine what groups and users can perform certain actions on the domain or workstation. In most cases you should not have to change how user rights are granted; instead you should specify which users can perform these functions by placing those users in the built-in local groups (such as Users, Administrators, and Print Operators). The built-in local groups have carefully planned sets of rights and abilities.

To manage the User Rights policy

1.	From the Policy menu, choose User Rights.

2.	Select a user right from those listed in the Right box.

When you select a right, the Grant To box lists the groups and user accounts that are assigned that right.

3.	To grant that right to additional groups or user accounts, choose the Add button and complete the Add Users And Groups dialog box that appears.

4.	To remove a group or user account from the list of those granted this right, select a name in the Grant To box, and then choose the Remove button.

5.	Repeat steps 2 through 4 as necessary.

6.	To administer the advanced user rights, select the Show Advanced User Rights option, and then follow steps 2 through 4.

7.	Choose the OK button.

For a more detailed procedure, see Chapter 13, "User Manager for Domains," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Managing the Audit Policy
Managing Users, Groups, and Security Policy	22 of 22

Managing the Audit Policy

Through auditing, you can track selected activities of users. The Audit policy determines the amount and type of security logging Windows NT will perform.

To manage the Audit policy

1.	From the Policy menu, choose Audit.

2.	Select one of the two main auditing options.

If you select	Then

Do Not Audit	No security events are recorded in the security log

Audit These Events	Selected events are recorded in the security log

3.	If you select Audit These Events, specify the events to be audited by selecting or clearing the Success and Failure check boxes for each type of event.

4.	Choose the OK button.


Managing User Environments
Chapter 4	1 of 13

Managing User Environments

Creating a User Profile

A user profile establishes all aspects of a user's environment automatically when the user logs on. This includes the user's network connections, program items, and program groups.

To create a new user profile

1.	Log on to a user account that belongs to the Administrators local group.

It is a good idea to create a special Profile Administrator's account for this purpose, so your own user account and its assigned user profile remain unmodified.

2.	Configure the Windows NT environment of your own computer to be exactly as you want it for the user profile you are creating.

Set all the user-specific options such as program items and program groups, network connections, and screen appearance.

3.	Start User Profile Editor by opening the Administrative Tools group and choosing the User Profile Editor icon. Or from the File menu in Program Manager, choose Run, type upedit, and then choose the OK button.

The User Profile Editor window appears.

4.	If you intend to assign the profile to one or more users, choose the Browse button to the right of the Permitted to Use Profile box. In the User Browser dialog box that appears, add the name of the individual user or the global group you want to assign the profile to.

5.	Set the options under Program Manager Settings.

These options allow you to limit the user's access to some Program Manager functionality.

Note

Selecting Disable Run In File Menu does not prevent users from starting programs from within other programs, by running File Manager or the command prompt, or by changing program-item command lines to run other programs. Other settings in User Profile Editor offer some protection, but User Profile Editor is only part of the comprehensive security system in Windows NT.

6.	Under Program Manager Settings, select a startup group, or None.

The program items in the startup group are started whenever the user logs on.

7.	Under Program Group Settings, define each personal program group as locked or unlocked.

The user cannot change locked program groups or their program items. The user can change unlocked program groups and their program items. You can, however, limit the user's ability to make changes to unlocked groups, as described in the next step.

8.	In the For Unlocked Groups, Allow User To box, select the option to be applied to unlocked personal program groups. The option you choose determines the kind of modifications the user can make.

9.	Select or clear the Allow User to Connect/Remove Connections In Print Manager box.

10.	Save the profile as described in the following section, "Saving a User Profile."

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Saving a User Profile
Managing User Environments	2 of 13

Saving a User Profile

When you save a user profile as a file, you can then use User Manager to assign the profile to users.

To save a user profile as a file

1.	Verify that the name of the user or global group to whom you want to assign the file appears in the Permitted To Use File box. If it does not, or if no name appears there, choose the Browse button next to the box and add the user or global group name in the User Browser dialog box that appears.

2.	Choose the Save As File button.

The Save As dialog box appears.

3.	In the Save File As Type box, select Per-User Profile or Mandatory Profile.

4.	In the Directories box, choose a path. Choose a drive from the list provided. To save the user profile on a shared directory that you are not already connected to, choose the Network button and complete the Connect Network Drive dialog box that appears.

If you choose a network connection, the connection is always established when the assigned user logs on.

5.	In the File Name box, enter a filename.

Personal (per-user) profiles have a file extension of .USR; mandatory profiles have a file extension of .MAN. For personal user profiles, it is often a good idea to give each profile the filename that is the same as the user name of the user assigned to the profile. For example, JeffHo would have the profile JEFFHO.USR.

6.	Choose the OK button.

The user profile is saved with the settings of the options in the User Profile Editor window, plus all user-specific information from the Windows NT configuration of your computer.

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Modifying a User Profile
Managing User Environments	3 of 13

Modifying a User Profile

There are two ways to modify an existing user profile. Which you choose depends on whether you want to modify the entire user environment, including the user's program groups, program items, and network connections, or whether you need only to change settings made in the User Profile Editor dialog box. Both of these procedures are shown below.

To modify all aspects of an existing user profile

1.	From User Manager for Domains, assign the user profile to a user account that belongs to the Domain Admins global group or the Administrators local group.

It is a good idea to create a special Profile Administrator's account for this purpose, as described earlier in this chapter, so your own user account and its assigned user profile remain unmodified.

2.	Log off the system, and then log back on under the administrator's account. This action loads the assigned profile.

Note

Except for the Startup group, the settings in the User Profile Editor window do not affect administrator accounts. For example, even if the Disable Run In File Menu option is selected in a user profile, an administrator account assigned that user profile still has access to the Run command.

3.	Configure the Windows NT environment of your own computer to be exactly as you want it for the user profile you are creating.

4.	Start User Profile Editor by opening the Administrative Tools group and choosing the User Profile Editor icon. Or from the File menu in Program Manager, choose Run, type upedit, and then choose the OK button.

The User Profile Editor window appears.

5.	Set the options in User Profile Editor as described in "Creating a User Profile," earlier in this chapter.

6.	Save the profile as described in "Saving a User Profile," earlier in this chapter.

If you are saving changes to a personal user profile that is already assigned to a user, it is a good idea to save them under a new filename or path name. If you overwrite an existing personal user profile and the assigned user is currently logged on, the old version of the profile overwrites the new one as soon as the user logs off. After you save the edited personal user profile, use User Manager for Domains to update the user profile path assigned to the user account. The next time the user logs on, the new personal user profile is loaded.

To change only the User Profile Editor settings of an existing user profile

1.	Log on to a Windows NT administrator account.

2.	Start User Profile Editor.

The User Profile Editor window appears.

3.	From the File menu, choose Open. In the dialog box that appears, select the user profile you want to change, and then choose the OK button.

4.	Set the options in User Profile Editor as described in "Creating a User Profile," earlier in this chapter.

5.	Save the profile as described in "Saving a User Profile," earlier in this chapter.

If you are saving changes to a personal user profile that is already assigned to a user, it is a good idea to save them under a new filename or path name. If you overwrite an existing personal user profile and the assigned user is currently logged on, the old version of the profile overwrites the new one as soon as the user logs off. After you save the edited personal user profile, use User Manager for Domains to update the user profile path assigned to the user account. The next time the user logs on, the new personal user profile is loaded.

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Copying a User Profile
Managing User Environments	4 of 13

Copying a User Profile

If more than one user is assigned to the same personal user profile, changes made by one user will affect other users. If you want to assign the same personal user profile to a number of users, it is best to make copies of the profile and assign each copy to a different individual.

To copy a user profile

1.	Log on to a Windows NT administrators account.

2.	Start User Profile Editor by opening the Administrative Tools group and choosing the User Profile Editor icon. Or from the File menu in Program Manager, choose Run, type upedit, and then choose the OK button.

The User Profile Editor window appears.

3.	From the File menu, choose Open. In the dialog box that appears, select the user profile you want to copy, and then choose the OK button.

4.	Choose the Browse button next to the Permitted To Use Profile box. In the User Browser dialog box that appears, add the name of the user or global group you want to assign the copy of the profile to.

5.	From the File menu, choose Save As File. Save the profile under a unique filename.

Mandatory user profiles must be assigned the file extension .MAN, and personal user profiles must be assigned the file extension .USR. For personal user profiles, it is often a good idea to give each profile the filename that is the same as the user name of the user assigned to the profile. For example, JeffHo would have the profile JEFFHO.USR.

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Modifying a Computer’s Default Profile
Managing User Environments	5 of 13

Modifying a Computer's Default Profile

A computer's default profile is used when a user logs on to that computer for the first time, or whenever a user's own profile is unavailable.

To modify a computer's default profile

1.	Log on at the computer where you want to modify the default profile.

You must log on to a user account that belongs to the Administrators local group.

2.	Configure the Windows NT environment of the computer to be exactly as you want it for the default profile you are creating.

Set all the user-specific options such as program items and program groups, network connections, and screen appearance.

3.	Start User Profile Editor by opening the Administrative Tools group and choosing the User Profile Editor icon. Or from the File menu in Program Manager, choose Run, type upedit, and then choose the OK button.

The User Profile Editor window appears.

4.	Set the options under Program Manager Settings. These options allow you to limit the user's access to some Program Manager functionality.

Note

Selecting Disable Run In File Menu does not prevent users from starting programs from within other programs, by running File Manager or the command prompt, or by changing program-item command lines to run other programs. Other settings in User Profile Editor offer some protection, but User Profile Editor is only part of the comprehensive security system in Windows NT.

5.	Under Program Manager Settings, select a startup group, or None.

6.	Under Program Group Settings, define each personal program group as locked or unlocked.

7.	In the For Unlocked Groups, Allow User To box, select the option to be applied to unlocked personal program groups.

The option you choose determines the kind of modifications the user can make.

8.	Select or clear the Allow User to Connect/Remove Connections in Print Manager box.

9.	When you are satisfied the profile is set up correctly, choose Save As User Default from the File menu.

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Modifying a Computer’s System Default Profile
Managing User Environments	6 of 13

Modifying a Computer's System Default Profile

A computer's system default profile is used whenever no user is logged on at the computer. Only the screen saver and wallpaper settings of this profile are used.

To modify a computer's system default profile

1.	Log on at the computer where you want to modify the default profile. You must log on to a user account that belongs to the Administrators local group.

2.	Configure the screen saver and wallpaper settings to be the way you want them in the system default profile.

3.	Start User Profile Editor by opening the Administrative Tools group and choosing the User Profile Editor icon. Or from the File menu in Program Manager, choose Run, type upedit, and then choose the OK button.

The User Profile Editor window appears.

4.	From the File menu, choose Save as System Default.

For a more detailed procedure, see Chapter 14, "User Profile Editor," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Deleting a User Profile from a Workstation
Managing User Environments	7 of 13

Deleting a User Profile from a Workstation

Every time a new user logs on at a Windows NT workstation, a local profile is created for the user. Use this procedure to remove obsolete local profiles from a workstation.

To delete a local user profile from a workstation

1.	From Program Manager, choose Windows NT Setup.

2.	From the Options menu in Windows NT Setup, choose Delete User Profiles.

3.	In the User Profiles list, select the user profile you want to remove.

4.	Choose the Delete button to remove the selected profile.

5.	Repeat this process until you have removed all the profiles you want, and then choose the Close button.

Setup warns you if it cannot delete a profile because the profile is currently in use or because you are not logged on as a member of a group that can delete profiles. Otherwise, the selected profiles are deleted from your computer.


Creating a Logon Script
Managing User Environments	8 of 13

Creating a Logon Script

To create a batch-file logon script, simply create a batch file. You can use any Windows NT commands in the batch file. For more information on Windows NT commands, see Chapter 9, "Command Prompt," in the Windows NT Server System Guide.

For the logon script to be run when a user logs on, you must specify the name of the script in the user's account. For more information, see Chapter 3, "Managing Users, Groups, and Security Policy," in this manual.


Setting Up the Replication of Logon Scripts
Managing User Environments	9 of 13

Setting Up the Replication of Logon Scripts

If you use logon scripts in domains with more than one server running Windows NT Server, you should replicate the scripts to all servers in the domain. This ensures that a user's script is run no matter which of the domain's servers authenticates the user's logon request.

The three following sections fully describe how to set up the replication of logon scripts in a domain. These procedures assume that you are not already using directory replication in the domain; if you are, you may be able to skip several of these steps.

The following sections are tailored specifically to the replication of logon scripts. For instructions on setting up directory replication for other uses, see Chapter 5, "Managing File Sharing," in this manual.


Preparing to Replicate Logon Scripts
Managing User Environments	10 of 13

Preparing to Replicate Logon Scripts

Before you can use directory replication in a domain, you must follow the steps in the following procedure to create and configure a special user account that will be used for replication.

To create a logon account for the Directory Replicator service

1.	Use User Manager for Domains to create a domain user account. When creating the account, select the Password Never Expires option, and make certain all logon hours are allowed.

2.	Give this user account membership in the Backup Operators group in the domain.

3.	For each computer that will participate in replication, use Server Manager or the Services option in Control Panel to configure its Directory Replicator service to start up automatically and to log on using the user account created in step 1 above.


Setting Up an Export Server
Managing User Environments	11 of 13

Setting Up an Export Server

Any domain server running Windows NT Server can be set up as an export server.

To set up an export server

1.	If you already have logon scripts created, put them in the \systemroot\SYSTEM32\REPL\EXPORT\SCRIPTS directory of the server that will be the export server.

It is not necessary to already have logon scripts created. Once you set up replication, any scripts added to this directory later will be replicated to the other servers.

2.	In the Server Manager window, double-click the computer name of the server you will configure as an export server.

3.	In the Properties dialog box, choose the Replication button.

4.	In the Directory Replication dialog box, select Export Directories.

5.	If the To List box (under Export Directories) is empty, leave it empty. If this box is empty, the server will export scripts to all servers in the domain by default.

If the To List box is not empty, the name of the domain must appear in it. If it does not, use the Add button to add it.

6.	Select Import Directories.

This way, this server also imports the logon scripts to its IMPORT\SCRIPTS directory. Domain users will use the copies of the scripts in IMPORT\SCRIPTS when they log on. The scripts in EXPORT\SCRIPTS are export masters.

7.	If the To List box (under Import Directories) is empty, leave it empty. If this box is empty, the server will by default import directories from any servers in the domain that are exporting directories.

If the To List box is not empty, the name of the domain must appear in it. If it does not, use the Add button to add it.

8.	To manage locks, stabilization, and subtree replication for the subdirectories exported from this computer, under Export Directories choose the Manage button, and then complete the dialog box that appears.

For more information, see Chapter 5, "Managing File Sharing," in this manual.

9.	In the Logon Script Path, type c:\winnt\system32\repl\import\scripts.

If you installed Windows NT into a directory other than C:\WINNT, adjust this path accordingly.

10.	To exit, choose the OK buttons in the Directory Replication and Properties dialog boxes.

The REPL$ share supporting directory replication is created if it didn't already exist.


Setting Up an Import Computer
Managing User Environments	12 of 13

Setting Up an Import Computer

Use the following steps to set up every server in the domain (other than the export server) as an import computer.

To set up an import computer

1.	In the Server Manager window, double-click the computer name of the computer you will configure as an import computer.

2.	In the Properties dialog box, choose the Replication button.

3.	In the Directory Replication dialog box, select Import Directories.

4.	If the To List box (under Import Directories) is empty, leave it empty. If this box is empty, the server will by default import directories from any servers in the domain that are exporting directories.

If the To List box is not empty, the name of the domain must appear in it. If it does not, use the Add button to add it.

5.	To view a list of the subdirectories that have been imported to this computer, or to manage locks on those imported subdirectories, under Import Directories choose the Manage button, and then complete the dialog box that appears.

For more information, see Chapter 5, "Managing File Sharing," in this manual.

6.	In the Logon Script Path, type c:\winnt\system32\repl\import\scripts.

If you installed Windows NT into a directory other than C:\WINNT, adjust this path accordingly.

7.	To exit, choose the OK buttons in the Directory Replication and Properties dialog boxes.

For a more detailed procedure, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Setting Environment Variables
Managing User Environments	13 of 13

Setting Environment Variables

Windows NT includes both system environment variables and user environment variables. You can change and add both types of environment variables.

To change user environment variables for your computer

1.	In the Control Panel window, choose the System icon.

The System dialog box shows the current system environment variables and the environment variables for the user whose profile is currently active on this computer.

2.	In either the User Environment Variables box or the System Environment Variables box, select the variable you want to change.

The name of the selected variable appears in the Variable box, and its current value appears in the Value box.

You can also select any variable in either the User Environment Variables box or the System Environment Variables box; then click the Variable box, and then type a variable name that does not appear in the list. Variables that you add in this way are appended to the list of environment variables in the box you selected.

3.	In the Value box, type a new value for the variable.

4.	When the Variable and Value boxes contain the new information you want to specify, choose the Set button.

5.	To remove a variable completely, select it, and then choose the Delete button.

6.	When you have completed all changes you want to make to environment variables, choose the OK button.

Choose the Cancel button at any time to remove all changes made in the System dialog box and restore the previous values.

Changes to these variables are stored immediately, but the changes won't affect programs that are already running when the changes are made. You must restart your computer to see the effects of the changes while running, for example, the command prompt.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide. For more background information, see Chapter 4, "Managing User Environments," in the Windows NT Server Concepts and Planning Guide.


Managing File Sharing
Chapter 5	1 of 13

Managing File Sharing

Setting Permissions for a Directory

When you set directory permissions, you are setting permissions on the directory and all the files that exist in the directory. Existing subdirectories and their files are not changed unless you specify to change them. When you create new files and new subdirectories, they inherit their permissions from the directory.

To view or change directory permissions

1.	Select the directory in the directory window. You can select multiple directories.

2.	From the Security menu, choose Permissions. Or choose the Permissions button on the toolbar.

3.	If you want the permissions you set to apply to existing subdirectories and their files, select the Replace Permissions On Subdirectories check box.

4.	To change the permissions of a group or user who already has permissions, select the group or user from the Name box and choose a permission from the Type Of Access box.

You can customize directory and file permissions by choosing Special Directory Access. For more information on special access permissions, see "Setting Special Access Permissions," later in this chapter.

5.	To add another group or user to the Name box, choose the Add button.

For instructions for the resulting dialog box, see the following procedure.

6.	To remove a group or user from the Name box (revoking the group or user's permission), select the group or user from the Name box and choose the Remove button.

7.	Choose the OK button.

To add a group or user to the directory permissions list

1.	In the Directory Permissions dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box.

You can select another domain by using the List Names From box. Domains appear only if your computer is a member of a domain on a Windows NT Server network. The domains shown have a trust relationship with the domain containing the directory.

2.	You can use options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs.

Choose the Show Users button to display the names of users on the selected computer or domain.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain which contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains you want to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the permissions list, select them in the Names box and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names From box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	Select the permission for the groups or users shown in the Add Names box using the Type Of Access box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Setting Permissions for a File
Managing File Sharing	2 of 13

Setting Permissions for a File

To change permissions on a file, you must be the owner of the file, or have been granted permission to do so by the owner. The table below shows permissions for files and the actions available to users for each permission.

To set permissions for a file

1.	Select one or more files from the contents pane of the File Manager directory window.

2.	Choose Permissions from the Security menu, or choose the Permissions button on the toolbar.

3.	To change the permission of a group or user already listed in the Name box, select the group or user and then choose a permission from the Type Of Access box.

To customize the permissions set for the group or user, choose Special Access from the Type Of Access box.

For more information on special access file permissions, see "Setting Special Access Permissions," later in this chapter.

4.	To add a group or user to the Name box, choose the Add button.

For instructions for the resulting dialog box, see the following procedure.

5.	To remove a group or user from the Name box (revoking the group or user's permission), select the group or user from the Name box and choose the Remove button.

6.	Choose the OK button.

To add a group or user to the file permissions list

1.	In the File Permissions dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box.

You can select another domain by using the List Names From box. Domains appear only if your computer is a member of a domain on a Windows NT Server network. The domains shown have a trust relationship with the domain containing the file.

2.	You can select options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs:

Choose the Show Users button to display the names of users on the selected computer or domain.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains you want to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the permissions list, select them in the Names box and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names From box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	In the Type Of Access box, select the permission for the groups or users shown in the Add Names box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Setting Special Access Permissions
Managing File Sharing	3 of 13

Setting Special Access Permissions

In general, the standard directory and file permissions are all you need to secure your directories and files. However, if you need to create a custom set of permissions, you can use special access permissions.

To set special access permissions

1.	To set permissions on directories, select them in the directory window.

To set permissions on all the files in one or more directories, select the files' directories in the directory window.

To set permissions on selected files, select the files in the contents pane of the directory window.

2.	Choose Permissions from the Security menu, or choose the Permissions button on the toolbar.

3.	In the Permissions dialog box, select the group or user you want to grant special access.

If no groups or users are shown, indicating that the directories or files you selected have differing permissions, add a group or user before setting special access permissions.

4.	Open the appropriate Special Access dialog box.

To set permissions on directories, choose Special Directory Access from the Type Of Access box or double-click the name of the group or user.

To set permissions on all the files in the selected directories, choose Special File Access from the Type Of Access box.

To set permissions on selected files, choose Special File Access from the Type Of Access box or double-click the name of the group or user.

The Special Access dialog box shows which access permissions have been granted based on the current standard or special permissions setting.

5.	To set special access permissions, select the check boxes for the access you want to grant.

To grant full control, select Full Control (All).

If you are setting permissions for all files in directories, you can select Access Not Specified. This removes permissions from files in the selected directories and prevents files from inheriting permissions from their directories.

6.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Auditing a File or Directory
Managing File Sharing	4 of 13

Auditing a File or Directory

Before you can set auditing of files and directories, you must first set the Audit policy to audit file and object access. Set the Audit policy using User Manager. For instructions, see Chapter 3, "Managing Users, Groups, and Security Policy," in this manual.

To audit a file or directory

1.	In the File Manager window, select the file or directory.

2.	From the Security menu, choose Auditing.

3.	If you are setting auditing on a directory, and you want your settings to affect the subdirectories and files of this directory, select the Replace Auditing On Subdirectories check box. If you do not want your changes to affect subdirectories and files, clear the check box.

4.	To change the auditing of a group or user shown in the Name box, select the group or user and then select or clear the appropriate check boxes in the Events To Audit box.

5.	To add a group or user to the Name box, select the group or user and then choose the Add button.

For instructions for the resulting dialog box, see the following procedure.

6.	To remove a group or user from the Name box, select the group or user and choose the Remove button.

7.	Select the events to audit, and then choose the OK button.

To add a group or user to the auditing list

1.	In the Auditing dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box. You can select another domain by using the List Names From box.

2.	Use options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs:

To display the names of users on the selected computer or domain, choose the Show Users button.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains you want to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the audit list, select them in the Names box and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names From box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	Choose the OK button.

5.	In the Directory Auditing dialog box, select each of the groups and users you just added in the Name box, and select the appropriate check boxes under Events To Audit.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Taking Ownership of a File or Directory
Managing File Sharing	5 of 13

Taking Ownership of a File or Directory

Use this permission to take ownership of a file or directory. After you do so, you can change permissions for the file or directory.

To take ownership of a file or directory

1.	Select the file or directory in the File Manager window. You can select more than one file or directory at a time.

2.	From the Security menu, choose Owner.

3.	Choose the Take Ownership button.

If you have selected one or more directories, File Manager asks whether you want to take ownership of all files and subdirectories in the trees of the selected directories. Choose Yes if you want to do so.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Sharing a Directory
Managing File Sharing	6 of 13

Sharing a Directory

Sharing a directory makes it available on the network, and other network users can then make connections to the shared directory.

To share a directory

1.	Select the directory you want to share in either pane of the File Manager directory window.

If you are logged on as a member of the Administrators group or if you have permission, you can share a directory on a remote computer. First connect to the computer's shared root directory, for example C$. Then select the directory you want to share.

2.	From the Disk menu, choose Share As, or choose the Share Directory button on the toolbar.

3.	The Share Name box shows the name users will specify to connect to the shared directory. By default, File Manager uses the name of the directory you selected. If you want to share the directory using a different name, type a new share name in the Share Name box. Share names can be up to 12 characters long.

If the directory you selected is already shared, the Share Name box shows the share names for the directory. You cannot give a shared directory a new share name; however, you can create an additional share for this directory by choosing the New Share button.

4.	The path for the directory you selected appears in the Path box. If you decide you want to share a different directory, you can type a different path.

5.	Optionally, type a comment in the Comment box.

Users will see the comment when connecting to the directory using the Connect Network Drive dialog box.

6.	Set a limit on the number of users who can connect to the shared directory at one time in the User Limit box. By default, no limit is set.

7.	To set permissions on the shared directory, choose the Permissions button.

For more information on setting permissions, see "Setting Permissions on a Directory Share," later in this chapter.

8.	Choose the OK button.

File Manager shows that the directory is shared by displaying a shared directory icon next to the directory's name.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Stop Sharing a Directory
Managing File Sharing	7 of 13

Stop Sharing a Directory

If you choose to stop sharing a directory while users are connected, those users may lose their data.

To stop sharing a directory

1.	Select the drive containing the directories you want to stop sharing by selecting the drive's directory window or drivebar button.

2.	From the Disk menu, choose Stop Sharing. Or choose the Stop Sharing button on the toolbar.

3.	The Stop Sharing dialog box shows the computer name of the selected drive and, in the Shared Directories On box, the shared directories on the drive. For each share name, the directory path on the computer is shown. Select the directories you want to stop sharing. If you selected a shared directory before opening the Stop Sharing Directory dialog box, the shared directories corresponding to that directory are already selected.

4.	Choose the OK button.

If any users are connected to a shared directory, File Manager will warn you before sharing is stopped.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Setting Permissions on a Directory Share
Managing File Sharing	8 of 13

Setting Permissions on a Directory Share

When you share a directory, you can set permissions on the share. These permissions affect users that access the directory over the network, but do not affect users working at the server itself.

To view or change share permissions

1.	Select the shared directory whose share permissions you want to change in either the tree or contents panes of the directory window.

2.	From the Disk menu, choose Share As. Or choose the Share Directory button on the toolbar.

3.	In the Share Directory dialog box, choose the Permissions button.

The Access Through Share Permissions dialog box appears.

4.	To change the permissions already assigned to a group or user, select the group or user from the Name box and choose a permission from the Type Of Access box.

5.	To add a group or user to the Name box, choose the Add button. For instructions for the resulting dialog box, see the following procedure.

6.	To remove a group or user from the Name box (revoking the group or user's permission), select the group or user from the Name box and choose the Remove button.

7.	Choose the OK button.

To add a group or user to the shared directory permissions list

1.	In the Access Through Share Permissions dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box.

You can select another domain by using the List Names From box. Domains appear only if your computer is a member of a domain on a Windows NT Server network. The domains shown have a trust relationship with the domain containing the directory.

2.	Use options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs:

To display the names of users on the selected computer or domain, choose the Show Users button.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains you want to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the permissions list, select them in the Names box and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names From box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	In the Type Of Access box, select the permission for the groups or users shown in the Add Names box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Changing a Shared Directory’s Properties
Managing File Sharing	9 of 13

Changing a Shared Directory's Properties

You can change the number of users allowed to connect to a shared directory, a shared directory's comment information, or the shared directory's permissions.

To change a shared directory's properties

1.	Select the shared directory whose properties you want to change in either the tree or contents panes of the directory window in File Manager.

2.	From the Disk menu, choose Share As. Or choose the Share Directory button on the toolbar.

3.	If the directory has been shared more than once, select the name in the Share Name box of the shared directory whose properties you want to change. You can then:

Change the number of users allowed to connect to the directory at one time by selecting, under User Limit, the Unlimited option or the Users option. When you select the Users option, you can either type a limit or use the scroll arrows to raise or lower the limit.

Edit the Comment box to change the description that appears when users see the shared directory listed in the Network Connections dialog box.

Choose the Permissions button to change the permissions on the shared directory. For more information on setting permissions, see "Setting Permissions on a Directory Share," earlier in this chapter.

4.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Viewing or Closing a Shared File
Managing File Sharing	10 of 13

Viewing or Closing a Shared File

Use this procedure to see who is connected to a share file, and optionally to end one or more of those connections.

To view or close a shared file

1.	Choose the file in the contents pane of the directory window in File Manager.

2.	From the File menu, choose Properties.

3.	Choose the Open By button in the Properties dialog box.

4.	To stop use by one or more users, select the user or users and choose the Close Selected button.

To stop use by all users, choose the Close All button.

Caution

When you close a file that is in use, changes made to that file will not be saved.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 4, "File Manager," in the Windows NT Server System Guide. For more background information, see Chapter 5, "Managing Network Files," in the Windows NT Server Concepts and Planning Guide.


Preparing to Use Directory Replication
Managing File Sharing	11 of 13

Preparing to Use Directory Replication

Before you can use directory replication in a domain, you must follow the steps in the following procedure to create and configure a special user account that will be used for replication.

To create a logon account for the Directory Replicator service

1.	Use User Manager for Domains to create a domain user account. When creating the account, select the Password Never Expires option, and make certain all logon hours are allowed.

2.	Give this user account membership in the Backup Operators group in the domain.

3.	For each computer that will participate in replication, use Server Manager or the Services option in Control Panel to configure its Directory Replicator service to start up automatically and to log on using the user account created in step 1 above.


Setting Up an Export Server
Managing File Sharing	12 of 13

Setting Up an Export Server

Any server running Windows NT Server can be set up as an export server, but a computer running Windows NT Workstation cannot.

To set up an export server

1.	From File Manager or the command prompt, create the subdirectories that will be exported. They must be subdirectories of the path \systemroot\SYSTEM32\REPL\EXPORT.

2.	To these subdirectories, add the files that will be exported.

3.	In the Server Manager window, double-click the computer name of the server you will configure as an export server.

4.	In the Properties dialog box, choose the Replication button.

The Directory Replication dialog box contains the following items relating to export replication.

Item	Description

Do Not Export	Stops replication from this computer. Subdirectories and their files are not exported.

Export Directories	Enables replication export. Subdirectories and their files are exported from this computer.

From Path	The directory from which subdirectories and files will be exported.

Manage	Displays the Exported Directories dialog box, where export locks are added or removed, stabilization is enabled or disabled, and the entire subtree or only the first subdirectory is selected for replication.

To List	Subdirectories are exported from this export server to these domains and computers. By default, the To List contains a [blank] entry and the local domain automatically receives exported subdirectories.

Add	Displays the Select Computer dialog box. Used to add a computer or domain to the To List.

Remove	Removes a selected computer or domain from the To List.

5.	In the Directory Replication dialog box, select Export Directories.

6.	To change the directory from which subdirectories will be exported, type a new path in the From Path box.

Because complex permissions support the default path, \systemroot\SYSTEM32\REPL\EXPORT, it is recommended this not be changed.

7.	To export subdirectories to a domain or computer, under Export Directories choose the Add button, and then complete the Select Domain dialog box that appears.

The domain name or computer name is added to the To List.

Note

By default, the To List contains a [blank] entry and the local domain automatically receives exported subdirectories. If any entries are added to the To List, the local domain is no longer exported to, and must be explicitly added to the To List if it is to receive exported subdirectories from this export server.

8.	To stop exporting subdirectories to a domain or computer, under Export Directories select the domain or computer from the To List, and then choose the Remove button.

9.	To manage locks, stabilization, and subtree replication for the subdirectories exported from this computer, under Export Directories choose the Manage button, and then complete the dialog box that appears.

For more information, see the following procedure.

10.	To exit, choose the OK buttons in the Directory Replication and Properties dialog boxes.

The REPL$ share supporting directory replication is created if it didn't already exist.

To manage locks, stabilization, and subtree replication for the subdirectories exported from this computer

1.	In the Directory Replication dialog box, under Export Directories, choose the Manage button.

The Manage Exported Directories dialog box contains the following items.

Item	Description

Export Path	The directory from which subdirectories and files are exported.

Sub-Directory	A list of the subdirectories that are exported from this computer.

Locks	A lock prevents subdirectory export. More than one lock might be applied to a subdirectory. Export occurs only if this column has a value of 0.

Stabilize	Yes indicates that files in this export subdirectory will wait two minutes or more after changes before being exported. No indicates that changed files may be exported immediately. The default is No. To change this setting, use the Wait Until Stabilize check box.

Subtree	Yes indicates that the entire subtree will be exported. No indicates that only the first-level subdirectory will be exported. The default is Yes. To change this setting, use the Entire Subtree check box.

Locked Since	The date and time the oldest lock was placed on this subdirectory.

Export Settings For	Displays the selected subdirectory.

Add Lock	Adds a lock to the selected subdirectory, preventing export.

Remove Lock	Removes a lock from the selected subdirectory. Export only occurs when a subdirectory has 0 locks.

Wait Until Stabilized	If selected, specifies a two minute or longer wait-period during which no changes can occur before files can be replicated from the selected subdirectory. Helps to eliminate partial replication. If cleared, files in the selected subdirectory may be replicated as soon as changes occur. This setting is reflected in the Stabilized column.

Entire Subtree	If selected, all of the subdirectories and files in the selected subdirectory, as well as any subdirectories below that, will be exported. If cleared, only the first-level subdirectory will be exported. This setting is reflected in the Subtree column.

Add	Displays the Add Sub-Directory dialog box, used to add new subdirectories to the list of exported subdirectories.

However, this is usually unnecessary. This does not create the actual subdirectory, and when a subdirectory is created in the export path using File Manager or the command prompt, it is automatically added to the list.

 Remove	Removes the selected subdirectory from the list of exported subdirectories.

However, this is usually unnecessary. If that subdirectory still exists in the export path, it will still be exported and will later reappear in this list.

2.	To temporarily stop exporting a subdirectory, select the subdirectory from the list and then choose the Add Lock button. Or to resume exporting a locked subdirectory, select the subdirectory and then choose the Remove Lock button.

Usually, you should only remove locks that you have applied. Export only resumes when the Locks column shows a value of 0 for the subdirectory.

3.	To export a subdirectory and all the subdirectories in its tree, select the subdirectory and then select the Entire Subtree check box. Or to export only the highest subdirectory in a tree, select the subdirectory and then clear the Entire Subtree check box.

4.	To specify a two minute or longer wait-period during which no changes can occur before files are exported, select a subdirectory and then select the Wait Until Stabilized check box. Or to export files immediately after they are changed and saved, select a subdirectory and then clear the Wait Until Stabilized check box.

5.	To return to the Directory Replication dialog box, choose the OK button.


Setting Up an Import Computer
Managing File Sharing	13 of 13

Setting Up an Import Computer

Both servers running Windows NT Server and computers running Windows NT Workstation can be set up as import computers.

You do not need to create the subdirectories that will be imported, because a subdirectory is automatically created the first time it is imported.

To set up an import computer

1.	In the Server Manager window, double-click the computer name of the computer you will configure as an import computer.

2.	In the Properties dialog box, choose the Replication button.

The following illustration shows the Windows NT Server version of the Directory Replication dialog box. The Windows NT Workstation version of this dialog box is slightly different, and contains only the items related to imported directories.

The Directory Replication dialog box contains the following items relating to import replication.

Item	Description

Do Not Import	Stops importing replicated subdirectories and files.

Import Directories	Allows replicated subdirectories and their files to be imported.

To Path	The directory in which replicated subdirectories and files will be stored. The default is \systemroot\SYSTEM32\REPL\IMPORT.

Manage	Displays the Imported Directories dialog box, where the subdirectories to be imported are specified, and where import locks are added or removed.

From List	Subdirectories are replicated to this import computer from the domains and computers listed here. By default, the From List contains a [blank] entry and this computer automatically imports from the local domain.

Add	Displays the Select Computer dialog box. Used to add a computer or domain to the From List.

Remove	Removes a selected computer or domain from the From List.

3.	In the Directory Replication dialog box, select Import Directories.

4.	To change the directory where imported subdirectories will be stored, type a new path in the To Path box.

Because complex permissions support the default path, \systemroot\SYSTEM32\REPL\IMPORT, it is recommended this not be changed.

5.	To import subdirectories from a domain or computer, under Import Directories choose the Add button, and then complete the Select Domain dialog box that appears.

The domain name or computer name is added to the From List.

Note

By default, the From List contains a [blank] entry and this computer automatically imports from the local domain. If any entries are added to the From List, the local domain is no longer imported from. If needed, it must be explicitly added to the From List.

6.	To stop importing subdirectories from an export server or domain, select the domain or server name in the From List, and then choose the Remove button.

7.	To view a list of the subdirectories that have been imported to this computer, or to manage locks on those imported subdirectories, under Import Directories choose the Manage button, and then complete the dialog box that appears. For more information, see the following procedure.

8.	To exit, choose the OK buttons in the Directory Replication and Properties dialog boxes.

To view a list of, or manage locks for, imported subdirectories

1.	In the Directory Replication dialog box, under Import Directories, choose the Manage button.

The Manage Imported Directories dialog box contains the following items.

Item	Description

Import Path	The directory in which replicated subdirectories and files are stored on this computer.

Sub-Directory	A list of the subdirectories that are imported to this computer.

A subdirectory is automatically imported if it is exported by one of the export servers or domains in the From List of the Directory Replication dialog box.

Locks	A lock prevents import to the subdirectory. More than one lock might be applied to a subdirectory. Import to a subdirectory only occurs if this column has a value of 0.

Status	OK indicates that the subdirectory is receiving regular updates from an export server and the imported data is identical to that exported.

No Master indicates that the subdirectory is not receiving updates. The export server might not be running, or the export server might have stopped exporting updates.

No Sync indicates that the subdirectory has received updates, but the data is not up to date. This could be due to a communications failure, open files on the import or export server, the import server not having access permissions at the export server, or an export server malfunction.

[blank] indicates that replication has never occurred for that subdirectory. Replication may not be properly configured for this import computer, for the export server, or both.

Last Update	The date and time the last update was made to a file in this import subdirectory, or in its subtree.

Locked Since	The date and time the oldest lock was placed on this subdirectory.

Import Settings For	Shows the selected subdirectory.

Add Lock	Adds a lock to the selected subdirectory, preventing import.

Remove Lock	Removes a lock from the selected subdirectory. Import only occurs when a subdirectory has 0 locks.

Add	Displays the Add Sub-Directory dialog box, used to add new subdirectories to the list of imported subdirectories.

However, this is usually unnecessary. This does not create the actual subdirectory; and when a subdirectory is exported by one of the export servers or domains in the From List of the Directory Replication dialog box, it is automatically imported and is added to this list.

Remove	Removes the selected subdirectory from the list.

However, this is usually unnecessary. If that subdirectory is exported by one of the export servers or domains in the From List of the Directory Replication dialog box, it will still be imported and will later reappear in this list.

2.	To temporarily stop importing to a subdirectory, select the subdirectory from the list and then choose the Add Lock button.

3.	To resume importing to a locked subdirectory, select the subdirectory and then choose the Remove Lock button.

Usually, you should only remove locks that you have applied. Import only resumes when the Locks column shows a value of 0 for the subdirectory.

4.	To return to the Directory Replication dialog box, choose the OK button.


Managing Printers
Chapter 6	1 of 19

Managing Printers

Installing a Printer

Use this procedure for either of the following cases:

You are physically installing a printer on a computer running Windows NT Server or Windows NT Workstation.

You are physically installing a printer that connects directly to the network.

To install a printer

1.	From Print Manager's Printer menu, choose Create Printer.

The Create Printer dialog box appears.

2.	In the Printer Name box, type a name for the printer.

This name appears in the title bar of the printer window. It is the name network users running Windows NT will see when connecting to the printer if you share the printer over the network. The name can be up to 32 characters long.

3.	In the Driver box, select the printer's driver.

If your printer does not appear in the list, you can try installing the printer using a compatible driver. For example, if your printer is Hewlett-Packard PCL® compatible, you may be able to use one of the HP® LaserJet® drivers included with Windows NT. Consult your printer's documentation to determine which drivers you can choose.

4.	In the Description box, type an optional description.

Network users will see this description when adding the printer to their available printers. Use the description to inform them about the printer. For example, if the printer is available only during certain hours, you could include that information here.

5.	In the Print To box, choose a destination for printing output:

If you are installing a printer that you have physically connected to a computer, choose the appropriate parallel or serial port, for example, LPT1.

If the port you want does not appear in the list, choose Other. In the Print Destinations dialog box, choose Local Port, and then choose the OK button. Type the name of the new port in the Port Name dialog box and choose the OK button. Print Manager adds the port to the list of print destinations.

If you want to print to a file, choose File. When you print, you are prompted for a filename.

If you are installing a Hewlett-Packard printer that connects directly to the network, choose Other. In the Print Destinations dialog box, choose Hewlett-Packard Network Port and then choose the OK button.

Before you can create a printer that uses a Hewlett-Packard network port, the Data Link Control protocol must be installed and running. You can install the protocol using the Network option in Control Panel.

If you are installing a TCP/IP printer, choose Other. In the Print Destinations dialog box, choose LPR Monitor and choose the OK button.

If you are installing a Digital Print Server, choose Other. In the Print Destinations dialog box, choose Digital Print Server Port and choose the OK button.

For details about completing the configuration dialog boxes, see the online Help.

6.	Choose the OK button.

7.	If the appropriate printer driver is not already installed, Windows NT prompts you to enter the path of the distribution files where the driver is located. Type the path and choose the OK button.

Windows NT prompts you to insert disks as necessary to install the driver.

This completes a basic printer installation. You can specify many other options when installing a printer. For more information, see the following sections of this chapter.

For a more detailed procedure for creating a printer, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Sharing a Printer
Managing Printers	2 of 19

Sharing a Printer

Before you can share a printer, the Server service must be running. You can start the Server service by using the Services option in Control Panel.

To share a printer on the network

1.	In Print Manager, select the printer's icon or window.

2.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

3.	In the Printer Properties dialog box, select the Share This Printer On The Network check box.

In the Share Name box, Print Manager creates a share name for the printer. Computers running Windows NT see the printer name when connecting to the printer; however, computers running MS-DOS™ require a share name that conforms to MS-DOS naming conventions in order to connect.

The share name is based on the printer name. You can edit the share name; however, if you want MS-DOS -based computers to connect to the printer, the share name must follow MS-DOS naming conventions.

4.	In the Location box, type a description of the printer's location to let users know where their documents will be printed. Users see the printer's location in the Connect To Printer dialog box when they add the printer to their list of available printers.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Setting Printing Options
Managing Printers	3 of 19

Setting Printing Options

This section contains updated information for Windows NT version 3.51. Click here to see the new information

The exact printing options that are available depend on the printer. The following table lists typical setup options:

Option	Purpose

Forms	Specifies the size and format of paper used in the printer. Printers that support multiple paper trays or sources for paper allow you to match a form with a source.

Memory	Specifies the amount of memory available in the printer.

Font	Specifies the font cartridges installed in the printer. Controls theloading of soft fonts and font substitution.

Halftone	Adjusts the printing of halftone colors.

To set or change printing options

1.	In Print Manager, select the printer's icon or window.

2.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

3.	In the Printer Properties dialog box, choose the Setup button.

4.	Set the options and then choose the OK button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Setting Job Defaults
Managing Printers	4 of 19

Setting Job Defaults

Job defaults include printing settings such as paper size and orientation. The features that are available depend on the printer. The settings in Print Manager establish how a document prints by default; however, users can change these settings through their applications when they print. Changes made from an application override the settings made in Print Manager.

To set or change job defaults

1.	In Print Manager, select the printer's icon or window.

2.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

3.	In the Printer Properties dialog box, choose the Details button and set defaults in the Document Properties dialog box.

4.	In the Printer Details dialog box, choose the Job Defaults button.

5.	In the Document Properties dialog box, choose the Options button to set more defaults in the Advanced Document Properties dialog box.

6.	In the Document Properties dialog box, choose the Halftone button to adjust halftone printing for color and monochrome graphics.

7.	Choose the OK button to close each dialog box.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Setting Printer Details
Managing Printers	5 of 19

Setting Printer Details

Use the Printer Details dialog box to set the following printer features:

Set the hours a printer is available

Print a separator page

Create a pool of printers

Set printer priority

Specify a print processor

Specify a default data type

Print directly to ports

To set printer details

1.	In Print Manager, select the printer's icon or window.

2.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

3.	In the Printer Properties dialog box, choose the Details button.

4.	To set printing hours, change the values in the Available From and To scroll boxes.

5.	To specify a separator page file, type the name of the file, including its path, in the Separator File Box. The default separator files are listed in the following table, or you can use your own.

Filename		Purpose		Compatible with	Can be edited
SYSPRINT.SEP		Prints a page before each document		PostScript	Yes
PCL.SEP		Switches printer to PCL printing		PCL	Yes
PSCRIPT.SEP		Switches printer to PostScript printing		PostScript	Yes
6.	Set the printer priority in the Priority box. By default, the priority is set to 1, which is the lowest priority. You can set a priority from 1 to 99.

7.	Select the filename of the processor in the Print Processor box.

8.	Select a data type in the Default Datatype box.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Setting Printer Time-outs
Managing Printers	6 of 19

Setting Printer Time-outs

For printers that are connected to a computer's parallel port, use this procedure to specify the amount of time that elapses before Print Manager decides that the printer is not responding and notifies you of an error.

To set time-out options

1.	Select the printer whose time-outs you want to set.

Time-outs can be set only for printers connected to a parallel port.

2.	From the Printer menu, choose Properties.

3.	In the Printer Properties dialog box, choose the Settings button.

4.	Set the number of seconds in the Transmission Retry box.

This determines how long Print Manager will wait for a printer to ready itself to accept more data.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Creating a Printer Pool
Managing Printers	7 of 19

Creating a Printer Pool

When printers are pooled, several printers connected to a server behave as a single printer. When a document is sent to the server, the first available printer in the pool will print it. The printers in the pool must be identical to ensure printing consistency. To create a pool of printers, create a printer and include in the printer definition the additional ports to which the pool printers are connected.

To create a printer pool

1.	From Print Manager's Printer menu, choose Create Printer.

The Create Printer dialog box appears.

2.	In the Printer Name box, type a name for the printer pool.

This name appears in the title bar of the printer window. It is the name network users running Windows NT will see when connecting to the pool if you share it over the network. The name can be up to 32 characters long.

3.	In the Driver box, select the printer driver. All the printers in the pool must use this driver.

If your printer does not appear in the list, you can try installing the printer using a compatible driver. For example, if your printer is Hewlett-Packard PCL compatible, you may be able to use one of the HP LaserJet drivers included with Windows NT. Consult your printer's documentation to determine which drivers you can choose.

4.	In the Description box, type an optional description.

Network users will see this description when adding the printer pool to their available printers.

5.	In the Print To box, choose one of the print destinations to be used by the printer pool (see step 5 in "Installing a Printer," earlier in this chapter).

6.	Choose the OK button.

7.	If the appropriate printer driver is not already installed, Windows NT prompts you to enter the path of the distribution files where the driver is located. Type the path and choose the OK button.

Windows NT prompts you to insert disks as necessary to install the driver.

8.	In Print Manager, select the printer's icon or window.

9.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

10.	In the Printer Properties dialog box, choose the Details button.

11.	In the Printer Details dialog box, select port names from the Print To Additional Ports box that correspond to the printers you want to add to the pool.

A Hewlett-Packard network-attached printer appears in this list only if you have already created a printer for it. To do so, follow the instructions in "Installing a Printer," earlier in this chapter.

If local ports do not appear in this list, you can add them. To do so, use the instructions in the following procedure.

12.	Choose the OK button.

To add a local port

1.	In the Printer Properties dialog box, select Other in the Print To box.

2.	In the Print Destinations dialog box, select Local Port and choose the OK button.

3.	In the Port Name dialog box, type the name of the port you want to add in the Enter A Port Name box, and then choose the OK button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Installing a Printer Driver
Managing Printers	8 of 19

Installing a Printer Driver

Because RISC and x86-based computers use different printer drivers, you may want to install printer drivers for both platforms on your print servers if your network contains a mixture of RISC and x86-based computers.

To install a new printer driver not listed in the Driver box

1.	In Print Manager, select the printer's icon or window.

2.	From the Printer menu, choose Properties. Or choose the Properties button on the toolbar.

3.	In the Printer Properties dialog box, select Other in the Driver box.

4.	In the Install Driver dialog box, specify the drive and path where the printer driver is located and choose the OK button.

If you are installing a second driver for a printer on a server, for example a RISC driver on an x386-based computer, specify the location of the PRINTER.INF file for the RISC drivers, for example a shared directory on the network.

5.	In the Select Driver dialog box, select the driver in the Printer Driver box. If the driver is not located in the directory shown by the Source Directory box, edit the path. Then choose the OK button.

Print Manager installs the new driver.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Creating, Using, and Removing Forms
Managing Printers	9 of 19

Creating, Using, and Removing Forms

A form specifies paper size and the size of margins. When you create a printer, you assign a form to each of the printer's trays. In addition to supporting standard forms, Print Manager allows you to create custom forms and assign them to printers.

To create a form

1.	In Print Manager, from the Printer menu, choose Forms.

2.	In the Form Description box:

In the Name box, type a name for the form.

In the Paper Size box, type the measurements for the width and height of the paper.

In the Print Area Margins box, type the measurements for the left, right, top, and bottom margins.

You can enter sizes in either inches or centimeters by selecting the English or Metric option buttons in the Units box.

3.	Choose the Add button.

4.	Choose the OK button.

To assign a form to a printer

1.	Select the printer to which you want to assign the form.

2.	Choose the Properties button, or choose Properties from the Printer menu.

3.	In the Printer Properties dialog box, choose the Setup button.

4.	Select the source, for example Upper Paper Tray, and the name of the form, for example Letter.

Source and form options are dependent on the printer.

5.	Choose the OK button.

To remove a form

1.	From the Printer menu, choose Forms.

2.	In the Forms On This Computer box, select the form you want to remove. You cannot delete any of the standard forms supplied with Windows NT.

3.	In the Forms dialog box, choose the Delete button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Removing a Printer
Managing Printers	10 of 19

Removing a Printer

Use this procedure to remove the logical representation of a printer from a computer running Windows NT Workstation or server running Windows NT Server.

To remove a printer

1.	In Print Manager, select the printer window or printer icon.

2.	To remove an installed printer, choose Remove Printer from the Printer menu.

To remove a printer to which you are connected over the network, choose Remove Printer from the Printer menu, or choose the Disconnect Printer button on the toolbar.

3.	Print Manager prompts you for confirmation. Choose the Yes button to remove the printer.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Setting or Changing Printer Permissions
Managing Printers	11 of 19

Setting or Changing Printer Permissions

By default, if you have permission to print, you also can control the printing of any document you print. As creator of the document at the printer, you are allowed to control the document through permissions granted the Creator Owner. In general, you should not change the permissions granted to the Creator Owner or remove the Creator Owner from the permissions list.

To set or change printer permissions

1.	In Print Manager, select the printer window or icon for the printer whose permissions you want to set or change.

2.	From the Security menu, choose Permissions.

3.	To change the permission of a group or user already listed in the Name box, select the group or user and then choose a permission from the Type Of Access box.

4.	To add a group or user to the name box, choose the Add button. For instructions for the resulting dialog box, see the following procedure.

5.	To remove a group or user from the name box (revoking the group or user's permission), select the group or user from the Name box and choose the Remove button.

6.	Choose the OK button.

To add a group or user to the printer permissions list

1.	In the Printer Permissions dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box.

You can select another domain by using the List Names From box. Domains appear only if your computer is a member of a domain on a Windows NT Server network. The domains shown have a trust relationship.

2.	Use options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs.

Choose the Show Users button to display the names of users on the current computer or domain.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the permissions list, select them and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names In box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	Select the permission for the groups or users shown in the Add Names box using the Type Of Access box.

5.	Choose the OK button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Auditing a Printer
Managing Printers	12 of 19

Auditing a Printer

Before you can audit a printer, you must first set the Audit policy to audit file and object access. Set the Audit policy using User Manager. For instructions, see Chapter 3, "Managing Users, Groups, and Security Policy," in this manual.

To set or change printer auditing

1.	In Print Manager, select the printer window or icon for the printer that you want to audit.

2.	From the Security menu, choose Auditing.

3.	To change the auditing of a group or user shown in the Name box, select the group or user and then select or clear the appropriate check boxes in the Events To Audit box.

4.	To add a group or user to the Name box, choose the Add button.

For instructions for the resulting dialog box, see the following procedure.

5.	To remove a group or user from the Name box, select the group or user and choose the Remove button.

To add a group or user to the auditing list

1.	In the Printer Auditing dialog box, choose the Add button.

The Add Users And Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box. You can select another domain by using the List Names From box.

2.	Use options in the Add Users And Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs.

Choose the Show Users button to display the names of users on the selected computer or domain.

To see a group's content, select the group and choose the Members button. Users are listed in a new dialog box. On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and choose the Members button. To include the group in the Add Users And Groups dialog box, choose the Add button. To include some of the group's users, select them and choose the Add button.

To add a group or user, you must know which domain contains the group's or user's account. On a Windows NT Server network, choose the Search button to find the domain of a group or user. In the Find Account dialog box, type the name of the group or user in the Find User Or Group box and specify the domains you want to search. Then choose the Search button. To include the groups or users in the Add Users And Groups dialog box, select them in the Search Results box and choose the Add button.

3.	To add groups or users to the audit list, select them in the Names box and choose the Add button, or double-click the name of the group or user.

Or you can type the names of groups and users in the Add Names box. Separate names using a semicolon. If the account of the group or user is not located on the computer or domain shown by the List Names From box, you must specify the location. Type the computer or domain name followed by the group or user name and separate the names using a backslash, for example shipping\ernesta. You can type the name without waiting for Windows NT to list groups in the Names box.

4.	Choose the OK button.

5.	In the Printer Auditing dialog box, select each of the groups and users you just added in the Name box, and select the appropriate check boxes under Events To Audit.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Taking Ownership of a Printer
Managing Printers	13 of 19

Taking Ownership of a Printer

Use this procedure to take ownership of a printer. Once you take ownership, you can change permissions on the printer.

To take ownership of a printer

1.	In Print Manager, select the printer window or icon for the printer.

2.	From the Security menu, choose Owner.

3.	Choose the Take Ownership button.

For a more detailed procedure, see Chapter 6, "Print Manager," in the Windows NT Server System Guide. For more background information, see Chapter 6, "Sharing Printers," in the Windows NT Server Concepts and Planning Guide.


Pausing and Resuming a Printer
Managing Printers	14 of 19

Pausing and Resuming a Printer

Use these procedures to pause and resume the printing of all documents on one or more printers.

To pause all printing on a printer

1.	In Print Manager, select the printer's window or icon.

If a document is selected in the printer window, deselect it by pressing the right mouse button or by pressing the SPACEBAR.

2.	From the Printer menu, choose Pause. Or choose the Pause button on the toolbar.

To resume all printing on a printer

1.	Select the printer's window or icon.

If a document is selected in the printer window, deselect it by pressing the right mouse button or by pressing the SPACEBAR.

2.	From the Printer menu, choose Resume. Or choose the Resume button on the toolbar.


Pausing and Resuming a Single Document
Managing Printers	15 of 19

Pausing and Resuming a Single Document

Use these procedures to pause and resume the printing of individual documents on a Windows NT printer.

To pause printing of a document

1.	In Print Manager, select the document in the printer window.

2.	From the Document menu, choose Pause. Or choose the Pause button on the toolbar.

To resume printing a document

1.	Select the document in the printer window.

2.	From the Document menu, choose Resume. Or choose the Resume button on the toolbar.


Removing Waiting Documents
Managing Printers	16 of 19

Removing Waiting Documents

You can remove (purge) documents that are waiting to print. You can remove a single document or all documents that are waiting to print.

To remove a single waiting document

1.	In Print Manager, select the document in the printer window.

2.	From the Document menu, choose Remove Document. Or choose the Remove Document button on the toolbar.

To remove all waiting documents

1.	Select the printer's window or icon.

2.	From the Printer menu, choose Purge Printer.


Changing Document Printing Order
Managing Printers	17 of 19

Changing Document Printing Order

Use this procedure to change the printing order of any or all documents waiting to be printed on a Windows NT printer.

To change the printing order of a document

In Print Manager, select the document in the printer window, and then drag it to a new position in the printing order.

– Or –

Select the document in the printer window, and then press CTRL+UP ARROW or CTRL+DOWN ARROW to move the document up or down in the printing order.


Restarting a Document
Managing Printers	18 of 19

Restarting a Document

When you restart a document, Print Manager reprints it from the beginning. This is useful to reprint documents when the first printing was ruined by a printer problem such as wrinkled paper. You can restart printing only when the Print Directly To Ports option is off.

To restart printing for a document

In Print Manager, select the document in the printer window, and then choose Restart from the Document menu.


Displaying or Changing Document Details
Managing Printers	19 of 19

Displaying or Changing Document Details

When you display detailed information on a document, Print Manager displays the file's name, status, owner, size in pages and kilobytes, and the time it was sent to the printer. Print Manager also shows who will be notified of the document's status when it prints, the range of time in which the document can be printed, the document's priority, and the document's print processor.

To display details about a document

1.	Select the document in the printer window.

2.	From the Document menu, choose Details. Or choose the Details button on the toolbar.

3.	To change who is notified when the document is printed, type the username of the person you want to notify in the Notify box.

4.	To change the document priority, set the new priority in the Priority box.

5.	To change the period of time when this document can print, set the time period for this document in the Start Time and Until Time boxes.

The time period you set must be within the printer's time period.


Backing Up and Restoring Files
Chapter 7	1 of 6

Backing Up and Restoring Files

Using a New Tape Device

If this is the first time you have used Backup or if you have just installed a new or additional tape backup device, you need to load the appropriate tape backup device driver and then restart your computer to activate it.

To load a tape driver

1.	In the Main program group, double-click the Windows NT Setup icon.

After determining your hardware configuration, the Windows NT Setup dialog box appears.

2.	From the Options menu, choose Add/Remove Tape Devices.

3.	In the Tape Device Setup dialog box, choose the Add button to view a list of the tape devices that are compatible with Windows NT.

4.	Select a device from the list and choose the Install button.

A message asks you to type a path name for the location of the tape device files and then choose Continue. The name of the selected tape device appears within the box in the Tape Device Setup dialog box.

5.	Choose the Close button.

6.	From the Options menu, choose Exit.

A message advises you that your computer configuration has changed and that you must shut down and then restart your computer to use the new configuration.

7.	In the Setup Message box, choose the OK button.

To avoid restarting your computer, you can also use the Devices option in Control Panel to start the tape device.


Backing Up Files
Backing Up and Restoring Files	2 of 6

Backing Up Files

Members of a domain's Administrators and Backup Operators groups (and anyone else who has been granted the Back Up Files user right) can back up all files on a server. Other users can only back up the files that they have permission to read.

To back up files from disk to tape

1.	In the Backup program's Drives window, select the files to back up.

To back up all the files on a drive, select the check box next to the drive in the Drives window, or select the drive and then choose Check from the Select menu.

To back up individual files, select the check box for each filename.

2.	From the Operations menu, choose Backup. Or choose the Backup button in the toolbar.

The Backup Information dialog box appears.

3.	Fill out the options in the top half of the Backup Information dialog box. The following table describes these options.

Item		Description
Current Tape		The current tape's name is shown here unless there is no tape loaded, it is blank, or it has an unrecognized format.
Creation Date		The creation date of the original backup set, or the date when it was last replaced, is automatically displayed here.
Owner		The owner of the tape, that is, whoever put the first backup set on the tape, is automatically displayedhere.
Tape Name		You can use up to 32 characters to create or change a current tape name.
Append		This operation adds the backup set(s) to the end of the last backup set on the active tape. Tape Name and Restrict Access To Owner Or Administrator are unavailable with this operation.
Replace		This operation overwrites all the information on the tape. However, if you do not confirm the choice, another message gives you the option of appending instead.
Verify After Backup		You can select whether or not to perform a verification comparison of the files that are written to tape and the files on the disks.
Restrict Access To Owner Or Administrator		You can designate the tape as "secure." Only the tape owner, or a member of the Administrators or Backup Operators group, can read, write, or erase the tape using the Windows NT Backup program. To restore it on another computer in the same domain, you must be logged on with the same user account name for that domain. Members of the Administrators or Backup Operators group can read, write, or erase a tape on any computer and in any domain.
Hardware Compression		You can request that the tape drive compress the data onto the tape media. However, do not select this optionif you want to move this tape later to another tape drive that does not support hardware compression. This option is available only if the drive containing the Registry is selected.
Backup Local Registry		You can include a copy of the local Windows NT Registry files in the backup set. This option is available only if the drive containing the Registry is selected.
4.	In the Backup Set Information section, type a description for each backup set, and select the backup type to use for each backup set. Use the scroll bar to move between backup sets, if you have more than one. The following table describes the backup types.

Choose	To
Normal	Back up and mark as such all the selected files on the disk. A normal backup is the same as a full backup.
Copy	Back up, but not mark as such, all the selected files on the disk.
Incremental	Back up and mark as such only those selected files that have been modified on the disk.
Differential	Back up, but not mark as such, only those selected files that have been modified on the disk.
Daily	Back up, but not mark as such, only those selected files that have been modified that same day on the disk. (This can be useful if you want to take work home and need a quick way to select the files that you worked on that day.)
5.	In the Log Information section, choose whether to log information about the backup. If you choose to log information, you can type the name of the text file into which the information will be logged, and specify which logging option to use. The logging options are described in the following table.

Choose	To
Full Detail	Log all operations information including the names of all the files and directories that are backed up.
Summary Only	Log only the major operations such as loading a tape, starting the backup, and failing to open a file.
Don't Log	Log no information.
6.	When you are done, choose the OK button to start the backup process. The Backup Status dialog box appears.

7.	If you need to stop a backup job before it is completed, choose the Abort button.

A message asks whether to continue or stop now and show it as a corrupted file. The Summary section then gives the final operation details and shows whether or not the operation completed successfully.

For more detailed procedures, see Chapter 16, "Backup," in the Windows NT Server System Guide. For more background information, see Chapter 8, "Backing Up Network Files," in the Windows NT Server Concepts and Planning Guide.


Using Batch Files to Back Up Files
Backing Up and Restoring Files	3 of 6

Using Batch Files to Back Up Files

You can create a command-line batch file to back up one or more drives on a regular basis. The parameters included in this batch command give you most of the same functionality that is provided in the graphical user interface. You can back up only directories, not individual files, and you cannot use wildcard characters.

The syntax of the ntbackup command follows. For more information see Chapter 9, "Command Prompt," and Chapter 16, "Backup," in the Windows NT Server System Guide.

Syntax

ntbackup operation path [/a][/v][/r][/d "text"][/b][/hc:{on | off}] [/t {option}][/l "filename"][/e][/tape:{n}]

Parameters

operation

Specifies the operation, backup

path

Specifies one or more paths of the directories to be backed up.

/a

Causes backup sets to be added after the last backup set on the tape. When /a is not specified, the program reuses the tape and replaces previous data. When more than one drive is specified but /a is not, the program overwrites the contents of the tape with the information from the first drive selected and then appends the backup sets for the remaining drives.

/v

Verifies the operation.

/r

Restricts access.

/d "text"

Specifies a description of the backup contents.

/b

Specifies that the local Registry be backed up.

/hc:on or /hc:off

Specifies that hardware compression is on or off.

/t {option}

Specifies the backup type. Option can be one of the following:

Normal  All the selected files are backed up and marked as such on the disk.

Copy  All the selected files are backed up, but they are not marked as such on the disk.

Incremental  Among the selected files, only those that have been modified are backed up and marked as such on the disk.

Differential  The selected files that have been modified are backed up, but they are not marked as such on the disk.

Daily  Among the selected files, only those that have been modified that same day are backed up, but they are not marked as such on the disk. (This can be useful if you want to take work home and need a quick way to select the files that you worked on that day.)

/l "filename"

Specifies the filename for the backup log.

/e

Specifies that the backup log include exceptions only.

/tape:{n}

Specifies the tape drive to which the files should be backed up. N is a number from 0 to 9 that corresponds to the tape drive number listed in the Registry.


Loading a Tape’s Catalog
Backing Up and Restoring Files	4 of 6

Loading a Tape's Catalog

When you insert a tape to be restored, only information on the first backup set appears in the right panel. If you want to restore the entire tape, you need to load the tape's catalog to display a list of any other backup sets. If you want to know what files are in each backup set, you need to load the individual catalogs for each backup set.

To load a catalog of the backup sets on a tape

1.	In the Backup program's Tapes window, select the tape whose catalog you want to load.

2.	Double-click that tape's icon.

The Catalog Status dialog box appears and provides the option of stopping the cataloging process.

After searching the tape, a complete list of backup sets appears in the Tapes window, with question marks displayed in each of their icons to show that their individual catalogs have not been loaded.

To load a catalog for an individual backup set

1.	In the Tapes window, select the backup set whose catalog you want to load.

2.	Double-click that backup set's icon.

The Catalog Status dialog box appears and provides the option of stopping the cataloging process.

After searching the tape, a complete list of the directories and files in the backup set appears in a Tape File Selection window. The list in the Tapes window now appears with a plus sign in the backup set's icon to show that it has been cataloged. Corrupt files (that is, files that contain errors) and their corresponding directories are marked by an icon with a red X.


Building Partial Tape and Backup Set Catalogs
Backing Up and Restoring Files	5 of 6

Building Partial Tape and Backup Set Catalogs

If a backup operation spans several tapes and you choose to restore a single backup set, you are prompted to insert the last tape to load the tape catalog information and get a complete list of all the backup sets and their locations. However, if the last tape in such a family set is missing or damaged, you can force Backup to deal with the data on each remaining tape as if it were a single unit rather than a member of a family set. This can be done by starting Backup from the command prompt with the /missingtape switch. Notice, however, that this process will take additional time.

Sometimes, you will want to restore from a tape with files that were not backed up with the Windows NT Backup program. If the tape has the Microsoft tape format (MTF), Windows NT Backup can read it. However, the tape may or may not have the full on-tape catalog (OTC) information that Windows NT Backup produces. Also, some older tape backup devices may not support creating full on-tape catalogs with the Windows NT Backup program.

To build a catalog from a tape without a full on-tape catalog

1.	Insert a tape (compatible with the Microsoft tape format) in the tape backup device.

2.	Load whatever on-tape catalog information is available.

The Catalog Status dialog box appears and provides the option of stopping the cataloging process.

If there is no catalog information, the entire tape is scanned to determine all the backup sets and then you must double-click each backup set's icon to determine its contents.

If there is partial information on the backup sets, that information is accessed quickly and then you must double-click each backup set's icon to determine its contents.


Restoring Tape Files to Disk
Backing Up and Restoring Files	6 of 6

Restoring Tape Files to Disk

When restoring a large number of files, you will need to consider what backup type you used. If you did differential or incremental backups, you will first need to restore the selected files from the most recent normal backup, then files from all subsequent incremental backups of those files, and finally the most recent differential backup performed after the last incremental backup.

To restore tape files to disk

1.	Load the tape's catalog of backup sets and the catalogs for each individual backup set, as described in "Loading a Tape's Catalog."

2.	Select the files to restore.

To restore all files from a tape, in the Tapes window, select the check box for the appropriate tape.

To select individual backup sets to restore, select the check box for each backup set.

To select a few individual files, select the check box for each filename. Or, to select several individual files, select the first filename and then do one of the following:

Press and hold down the SHIFT key and then select the last contiguous filename.

Drag the mouse to the last contiguous filename.

Press and hold down the CTRL key and then select each non-contiguous filename.

Then, after all the filenames are selected, from the Select menu choose Check.

3.	From the Operations menu, choose Restore. Or choose the Restore button on the toolbar.

The Restore Information dialog box appears.

4.	Fill out the necessary information in the top half of the Restore Information dialog box.

5.	In the Log Information section, choose whether to log full details of the restore, summary information, or no information. If you choose to log information, type the name of the file to receive the information.

6.	When you are done, choose the OK button to start the restore process.

The Restore Status dialog box appears.

7.	If you need to stop a restore job before it is completed, choose the Abort button.

A message asks whether to continue or stop now. The Summary section then gives the final operation details and shows whether or not the operation completed successfully.

For more detailed procedures, see Chapter 16, "Backup," in the Windows NT Server System Guide. For more background information, see Chapter 8, "Backing Up Network Files," in the Windows NT Server Concepts and Planning Guide.


Managing Hard Disks, Fault Tolerance, and UPS
Chapter 8	1 of 17

Managing Hard Disks, Fault Tolerance, and UPS

Creating Disk Partitions

This section contains updated information for Windows NT version 3.51. Click here to see the new information

After logging on as a member of the Administrators group, use these procedures to create a primary or extended disk partition, or to create logical drives in an extended partition.

To create a primary partition

1.	In Disk Administrator, select an area of free space on a disk.

2.	From the Partition menu, choose Create.

Disk Administrator displays what the minimum and maximum sizes for the primary partition can be.

3.	In the Create Primary Partition dialog box, type the size of the primary partition that you want to create.

4.	Choose the OK button.

To create an extended partition

1.	In Disk Administrator, select an area of free space on a disk.

2.	From the Partition menu, choose Create Extended.

Disk Administrator displays what the minimum and maximum sizes for the extended partition can be.

3.	In the Create Extended Partition dialog box, type the size of the extended partition that you want to create.

4.	Choose the OK button.

To create logical drives in an extended partition

1.	Select an area of free space in an extended partition.

2.	From the Partition menu, choose Create.

Disk Administrator displays what the minimum and maximum sizes for the logical drive can be.

3.	In the Create Logical Drive dialog box, type the size of the logical drive that you want to create.

4.	Choose the OK button.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Formatting and Labeling Partitions
Managing Hard Disks, Fault Tolerance, and UPS	2 of 17

Formatting and Labeling Partitions

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

Before you can store files and directories on the partitions or partition sets that you have created, you must commit the changes to disk and format each partition or partition set individually for use with the file system with which you want to work. You can also assign descriptive volume labels at this time.

To format a partition and label the volume

1.	Select the newly created partition or partition set.

2.	From the Partition menu, choose Commit Changes Now.

3.	From the Tools menu, choose Format.

4.	In the Format dialog box, select the file system that you want and type a name in the Label box.

5.	If you do not want Windows NT to scan for bad sectors in the partition during the formatting process, choose the Quick Format option. This option is not available for formatting mirror sets and stripe sets with parity.

6.	Choose the OK button to initiate the format request.

A message asks you to confirm this request.

If you choose Yes, a box appears while the disk is being formatted to show you how quickly the process completes. The Formatting Disk box also provides you with the option of canceling the process. However, be aware that choosing Cancel will not necessarily return a volume to its previous state.

To change or delete a volume label

1.	Select the formatted volume.

2.	From the Tools menu, choose Label.

3.	In the Label dialog box, type the new name for the volume label.

4.	Choose the OK button to commit the change.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Changing the File System on a Partition
Managing Hard Disks, Fault Tolerance, and UPS	3 of 17

Changing the File System on a Partition

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

If you want to change the file system on an existing HPFS or FAT partition to the NTFS format, you can use the CONVERT.EXE utility from the command prompt.

If you want to change the file system on an existing NTFS partition, you must first back up all the information, reformat the partition, and then restore the files. However, if Windows NT is installed on the NTFS partition, you cannot reformat the partition from the command prompt nor delete it from within Disk Administrator. Instead, you must use the Setup program.

To reformat an NTFS partition containing Windows NT

1.	Back up the information on the partition.

2.	Start the Windows NT installation procedure.

3.	Choose Express or Custom Installation.

4.	When Windows NT Setup asks you to select the partition on which you would like to install, select the NTFS partition and type P to delete the partition.

5.	Either continue from here using the Setup program to recreate and format the partition, or quit the Setup program and use the MS-DOS fdisk and format commands to complete the process.


Marking Partitions as Active
Managing Hard Disks, Fault Tolerance, and UPS	4 of 17

Marking Partitions as Active

The system partition for Windows NT is the volume that has the hardware-specific files needed to load Windows NT. On x86-based computers, it must be a primary partition that has been marked as active for startup purposes and must be located on the disk that the computer accesses when starting up the system. There can only be one active system partition at a time, which is denoted on the screen by an asterisk. If you want to use another operating system, you must first mark its system partition as active before restarting the computer.

To mark a partition as active on an x86-based computer

1.	Select the primary partition that contains the startup files for the operating system that you want to activate.

2.	From the Partition menu, choose Mark Active.

A message advises you that the partition has been marked active and that the operating system on that partition will be started after you restart your computer.

3.	In the Disk Administrator message box, choose the OK button.

An asterisk appears in the color bar of the active partition.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Assigning Drive Letters
Managing Hard Disks, Fault Tolerance, and UPS	5 of 17

Assigning Drive Letters

Windows NT allows the static assignment of drive letters. When a new hard disk is added to an existing computer system, it will not affect statically assigned drive letters.

However, this static assignment of drive letters occurs only after Disk Administrator has been used on the workstation. Until then, drive letters are assigned by Windows NT in a manner similar to that used by MS-DOS.

Note

Be careful when making drive-letter assignments because many MS-DOS and Windows programs make references to a specific drive letter. For example, the Path environment variable shows specific drive letters in conjunction with program names.

To assign a drive letter

1.	In Disk Administrator, select the partition or logical drive whose drive letter you want to assign.

2.	From the Tools menu, choose Drive Letter.

3.	In the Assign Drive Letter dialog box, select the appropriate option button.

If you decide to assign a drive letter, you can either accept the next letter available or select a different one.

4.	Choose the OK button to commit the change.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Assigning CD-ROM Drive Letters
Managing Hard Disks, Fault Tolerance, and UPS	6 of 17

Assigning CD-ROM Drive Letters

In addition to supporting the static assignment of drive letters on volumes and partitions, Disk Administrator also supports assigning a permanent drive letter to CD-ROM drives.

Choosing the CD-ROM Drive Letter command under the Tools menu provides you with a list of device names to which you can make drive-letter assignments per name. However, you do not have the option of removing a drive letter altogether. It is also possible that a letter cannot be assigned because the CD-ROM is in use by some application in the system. If this happens, a warning message appears. You must then close the application accessing the CD-ROM drive and choose the command again.

To assign a CD-ROM drive letter

1.	From the Tools menu, choose CD-ROM Drive Letter.

A list appears showing all the CD-ROM drives attached to the computer.

2.	Select the CD-ROM drive whose drive letter you want to assign.

3.	Accept the next letter available or select a different one.

4.	Choose the OK button to commit the change.


Creating and Deleting Volume Sets
Managing Hard Disks, Fault Tolerance, and UPS	7 of 17

Creating and Deleting Volume Sets

MS-DOS does not have volume-set functionality and cannot recognize any volume sets that are created by Windows NT. Therefore, if you create a volume set on a dual-boot computer, those partitions become unusable by MS-DOS.

When you no longer want to have a volume set, or you want to reorganize the data on your disks, or you have a problem with a faulty disk drive, you should first back up all the information on the volume set and then choose the Delete command. Deleting the volume set deletes all the information contained in the volume set.

To create a volume set

1.	In Disk Administrator, select two or more areas of free space on from one to 32 hard disks by selecting the first area of free space, and then pressing CTRL and clicking each of the other areas.

2.	From the Partition menu, choose Create Volume Set.

Disk Administrator displays the minimum and maximum sizes for the volume set.

3.	In the Create Volume Set dialog box, type the size of the volume set that you want to create.

4.	Choose the OK button.

If you choose to use less than the total available space, Disk Administrator divides the total size by the number of disks to create almost equal-sized unformatted partitions in each of the selected disks and assigns a single drive letter to the collection of partitions that make up the volume set.

To delete a volume set

1.	Select the volume set that you want to delete.

2.	From the Partition menu, choose Delete.

A message advises you that all the data will be lost and asks you to confirm that you want to delete it.

3.	In the Confirm message, choose the Yes button.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Extending Volumes and Volume Sets
Managing Hard Disks, Fault Tolerance, and UPS	8 of 17

Extending Volumes and Volume Sets

After you extend an NTFS volume or volume set, you must quit and save your changes. Disk Administrator then forces the system to restart and formats the new area without affecting any existing files on the original volume or volume set.

To extend a volume or volume set

1.	In Disk Administrator, select an existing volume (that is not part of a stripe set or mirror set) or a volume set and one or more areas of free space.

2.	From the Partition menu, choose Extend Volume Set.

Disk Administrator displays the minimum and maximum sizes for the volume set.

3.	In the Create Extended Volume Set dialog box, type the size of the volume set that you want to create.

4.	Choose the OK button.

Depending on the size that you specified, Disk Administrator determines how much of the free space to use.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Deleting Partitions, Volumes, or Logical Drives
Managing Hard Disks, Fault Tolerance, and UPS	9 of 17

Deleting Partitions, Volumes, or Logical Drives

Before you delete partitions, volumes, or logical drives under Windows NT, you need to ensure that the information on them has been backed up onto another storage medium and verified, or is no longer needed.

No deletions actually happen until you agree to save them when you quit Disk Administrator or until you choose the Commit Changes Now command under the Partition menu.

To delete a partition, volume, or logical drive

1.	In Disk Administrator, select the partition, volume, or logical drive.

2.	From the Partition menu, choose Delete.

A message advises you that all data will be lost and asks you to confirm your action.

3.	In the Confirm message, choose the Yes button.

The partition, volume, or logical drive and any data are deleted, and the space becomes free again.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Creating and Deleting Stripe Sets
Managing Hard Disks, Fault Tolerance, and UPS	10 of 17

Creating and Deleting Stripe Sets

Operating systems, such as MS-DOS, that do not have stripe-set functionality cannot recognize any stripe sets that are created by Windows NT. Therefore, if you create a stripe set on a dual-boot computer, those partitions become unusable by MS-DOS.

When you no longer want a stripe set or you have a problem with a faulty disk drive, you should first back up all the information on the stripe set and then choose the Delete command. Deleting the stripe set deletes all the information there.

To create a stripe set

1.	In Disk Administrator, select two or more areas of free space on from two to 32 hard disks by selecting the first area of free space on the first disk, and then pressing CTRL and clicking an additional area of free space on each of the other hard disks.

2.	From the Partition menu, choose Create Stripe Set.

Disk Administrator displays the minimum and maximum sizes for the stripe set.

3.	In the Create Stripe Set dialog box, type the size of the stripe set that you want to create.

4.	Choose the OK button.

Disk Administrator divides the total size by the number of disks to create equal-sized unformatted partitions in each of the selected disks and assigns a single drive letter to the collection of partitions that make up the stripe set. If you choose a number that cannot be divided equally, Disk Administrator rounds to the closest higher or lower value.

To delete a stripe set

1.	Select the stripe set that you want to delete.

2.	From the Partition menu, choose Delete.

A message advises you that all the data will be lost and asks you to confirm that you want to delete it.

3.	In the Confirm message, choose the Yes button.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Saving and Restoring Disk Configuration Information
Managing Hard Disks, Fault Tolerance, and UPS	11 of 17

Saving and Restoring Disk Configuration Information

In addition to the Emergency Repair disk that you created during Setup, Disk Administrator provides options for saving and restoring the following currently defined disk configuration information: assigned drive letters, volume sets, stripe sets, stripe sets with parity, and mirror sets. You should be sure to do this before upgrading the operating system to a newer version to ensure that you do not lose your current configuration information.

To save disk configuration information

1.	In Disk Administrator, from the Partition menu, choose Configuration.

2.	From the Configuration menu, choose Save.

A message describes what will be saved and where you should save it. It also warns you that changes made during this session will not be included.

3.	Insert a blank floppy disk, a floppy disk with a previous version of the configuration information, or the Emergency Repair disk.

4.	Choose the OK button.

To restore disk configuration information

1.	From the Partition menu, choose Configuration.

2.	From the Configuration menu, choose Restore.

A message warns you that this operation will overwrite your current disk configuration information with what was previously saved on the floppy disk. Also, any changes made during this session will be lost.

3.	Insert the floppy disk containing the saved configuration information.

4.	Choose the OK button.

5.	Disk Administrator initiates a restart of your computer.

To search for disk configuration information

1.	From the Partition menu, choose Configuration.

2.	From the Configuration menu, choose Search.

A message warns you that this operation will overwrite your current disk configuration information with the information from a different installation of Windows NT. Also, any changes made during this session will be lost.

3.	Choose the OK button.

Disk Administrator scans your disk for other Windows NT installations and then displays a list of the installations.

4.	Select an installation.

5.	Choose the OK button.

6.	Disk Administrator initiates a restart of your computer.

For more information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide.


Creating and Deleting Stripe Sets with Parity
Managing Hard Disks, Fault Tolerance, and UPS	12 of 17

Creating and Deleting Stripe Sets with Parity

Stripe sets with parity provide fault-tolerance protection. To create one, you need at least three physical hard disks on your computer.

Deleting the stripe set deletes all the information contained in the stripe set. When you want to delete a stripe set with parity so that you can use the disk space for other purposes, be sure to do a backup first if you want to reuse that information.

To create a stripe set with parity

1.	In Disk Administrator, select three or more areas of free space on from three to 32 hard disks by selecting the first area of free space on the first disk, and then pressing CTRL and clicking each additional area of free space on each of the other hard disks.

2.	From the Fault Tolerance menu, choose Create Stripe Set With Parity.

Disk Administrator displays the minimum and maximum sizes for the stripe set with parity.

3.	In the Create Stripe Set With Parity dialog box, type the size of the stripe set that you want to create.

4.	Choose the OK button.

Disk Administrator divides the total size by the number of disks to create equal-sized unformatted partitions in each of the selected disks and assigns a single drive letter to the collection of partitions that make up the stripe set with parity. If you choose a number that cannot be divided equally, Disk Administrator rounds to the closest higher or lower value.

To delete a stripe set with parity

1.	In Disk Administrator, select the stripe set with parity that you want to delete.

2.	From the Partition menu, choose Delete.

A message advises you that all the data will be lost and asks you to confirm that you want to delete it.

3.	In the Confirm message, choose the Yes button.

For more detailed information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide. For more background information, see Chapter 7, "Managing Fault Tolerance and UPS," in the Windows NT Server Concepts and Planning Guide.


Recovering from Disk Failure with a Stripe Set with Parity
Managing Hard Disks, Fault Tolerance, and UPS	13 of 17

Recovering from Disk Failure with a Stripe Set with Parity

When a member of a stripe set with parity fails in a severe manner, such as a loss of power or a complete head crash, it becomes an orphan. You can regenerate the data for the orphaned member of the stripe set from the remaining members.

To regenerate a recoverable stripe set with parity

1.	In Disk Administrator, select the recoverable stripe set.

2.	Select an area of free space of the same size or greater.

If the stripe set failure is due to a power failure or cabling failure on a single device, you can regenerate within the orphaned member of the original stripe set once the hardware state is restored.

3.	From the Fault Tolerance menu, choose the Regenerate command.

4.	Quit Disk Administrator and restart your computer.

The regeneration process occurs in the background, and the stripe set with parity will not appear as healthy in the Disk Administrator status bar until regeneration is complete.

For more detailed information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide. For more background information, see Chapter 7, "Managing Fault Tolerance and UPS," in the Windows NT Server Concepts and Planning Guide.


Establishing a Mirror Set
Managing Hard Disks, Fault Tolerance, and UPS	14 of 17

Establishing a Mirror Set

Disk mirroring protects a partition on a disk from media failure by maintaining a fully redundant copy on another disk.

To establish a mirror set

1.	In Disk Administrator, select the partition that you want to duplicate and an area of free space of the same size or greater on another hard disk by selecting the first partition, and then pressing CTRL and clicking the area of free space.

2.	From the Fault Tolerance menu, choose Establish Mirror.

Disk Administrator creates an equal-sized partition in the free space for the mirror and assigns the drive letter to the mirror set.


Breaking a Mirror Set
Managing Hard Disks, Fault Tolerance, and UPS	15 of 17

Breaking a Mirror Set

The following are two reasons for you to break a mirror set:

If an unrecoverable error occurs on a partition within a mirror set, you need to break the mirror-set relationship to expose the remaining partition as an individual partition or logical drive. If you want, you can then reassign some free space on another disk to create a new mirror set. To create the new mirror set, just follow the instructions in the previous section of this chapter, "Establishing a Mirror Set."

When you want to stop using the mirror set and use the disk space for other purposes. Breaking the mirror set does not delete the information, but it is still safer for you to do a backup first. You will then be ready to delete one of the partitions that made up the mirror set and regain its use as free space.

To break a mirror set

1.	In Disk Administrator, select the mirror set that you want to break.

2.	From the Fault Tolerance menu, choose Break Mirror.

A message advises you that this will end the mirroring relationship and create two independent partitions. It then asks you to confirm that you want to break the selected mirror.

3.	In the Confirm message, choose the Yes button.

To convert the unmirrored partition to free space

1.	Select the unmirrored partition that you no longer need.

2.	From the Partition menu, choose Delete.

A message advises you that all data will be lost and asks you to confirm your action.

3.	In the Confirm message, choose the Yes button.

For more detailed information, see Chapter 18, "Disk Administrator," in the Windows NT Server System Guide. For more background information, see Chapter 7, "Managing Fault Tolerance and UPS," in the Windows NT Server Concepts and Planning Guide.


Setting Up the UPS Service
Managing Hard Disks, Fault Tolerance, and UPS	16 of 17

Setting Up the UPS Service

This section contains updated information for Windows NT version 3.51. Click here to see the new information

The options for configuring the UPS service depend on the specific UPS hardware installed on your system. Incorrect settings can cause unwanted operation of your UPS hardware. For details about possible settings, see the documentation for your UPS device.

To set up the UPS service for a computer

1.	In Control Panel, double-click the UPS icon.

2.	In the UPS dialog box, select the Uninterruptible Power Supply Is Installed On check box, and then specify the serial port where the UPS device is connected.

You cannot select a serial port unless the Uninterruptible Power Supply Is Installed On check box is selected.

3.	If the UPS device on your system can indicate a main power failure, select the Power Failure Signal check box.

This setting corresponds to the CTS pin for the UPS serial port connection.

4.	If the UPS device on your system can send a warning when battery power is low, select the Low Battery Signal check box.

This setting corresponds to the DCD pin for the UPS serial port connection.

5.	If the UPS device can accept a signal from the UPS service telling it to shut off, select the Remote UPS Shutdown check box.

This shuts off the UPS device battery when it is no longer needed. This setting corresponds to the DTR pin for the UPS serial port connection.

6.	For each item that is checked in the UPS Configuration group, specify Negative or Positive for the UPS Interface Voltage.

This setting defines how your UPS device expects to communicate with the UPS service. For information about making this choice, see the documentation for your UPS device.

Depending on what items you've checked in the UPS Configuration group, steps 8 through 11 may or may not be necessary.

7.	If you want a command file to be run before shutdown, select the Execute Command File check box and type the name of the command file to be run in the File Name box.

This file must be in the \systemroot\SYSTEM32 directory, and must have one of the following file extensions:  .BAT, .CMD, .EXE, or .COM.

8.	In the Expected Battery Life box, specify the time in minutes that the system can run on battery power. Check the UPS device documentation for the appropriate setting.

The range is 2 to 720 minutes; the default is 2 minutes.

9.	In the Battery Recharge Time box, specify the time in minutes that the battery must be recharged for every minute of run-time. Check the UPS device documentation for the appropriate setting.

The range is 1 to 250 minutes; the default is 100 minutes for each minute of battery run-time.

10.	In the Time Between Power Failure box, specify the time, in seconds, between when a power failure occurs and when the first message is sent to notify users.

The range is 0 to 120 seconds; the default is 5 seconds.

11.	In the Delay Between Warning Messages box, specify the interval, in seconds, between messages sent to notify users of a power failure and to advise them to stop using the computer.

The range is 5 to 300 seconds; the default is 120 seconds.

12.	Choose the OK button.

Depending on the changes you make in the UPS dialog box, a message asks if you want to start, stop, or restart the UPS service, depending on whether it is currently running. Choose Yes or No. If you choose Yes, Windows NT configures the UPS service to begin automatically each time your system starts up.

You can also start and stop the UPS service using the Services option in Control Panel once the UPS is configured.

For more detailed instructions, see Chapter 5, "Control Panel," in the Windows NT Server System Guide. For more background information, see Chapter 7, "Managing Fault Tolerance and UPS," in the Windows NT Server Concepts and Planning Guide.


Testing Your UPS Configuration
Managing Hard Disks, Fault Tolerance, and UPS	17 of 17

Testing Your UPS Configuration

After configuring UPS options, you or your system administrator should test that your computer is protected from power failure.

To test UPS configuration

1.	Simulate a power failure by disconnecting the power to the UPS device.

The computer and peripherals connected to the UPS device should remain operational and a warning message and/or alert should appear on the computer screen.

2.	Wait until the UPS battery reaches a low level.

At that point system shutdown should occur.

3.	Restore power to the UPS device.

4.	Check the system log in Event Viewer to ensure that all actions were logged and that there were no errors.

If the UPS service is configured to run a command file, you should test that file execution does not exceed the 30 second time limit.

To test command file configuration

Determine a worst case scenario. For example, if your command file starts up a custom application to disconnect logon sessions to a remote computer, test command file execution with a maximum number of logon sessions.

If you have problems running the UPS service, see the system log in Event Viewer for event details related to UPS. For an explanation of UPS, see Chapter 7, "Managing Fault Tolerance and UPS," in the Windows NT Server Concepts and Planning Guide.


Maintaining a Computer
Chapter 9	1 of 21

Maintaining a Computer

Changing the Computer Name of a Windows NT Computer

How you change the computername of a Windows NT computer depends on what role the computer plays. There are different procedures for primary domain controllers, backup domain controllers, and all other Windows NT computers. A computer name cannot be the same as any other computer, workgroup, or domain name on the network.

To change the computer name of a primary domain controller

1.	At the primary domain controller, choose the Network option in Control Panel. In the Network Settings dialog box, choose the Change button next to the computer name. Then type the new name in the Computer Name dialog box and choose the OK button.

2.	Restart the primary domain controller to have the name change take effect.

3.	In Server Manager, select the old computer name from the list of computers and choose the Remove From Domain command from the Computer menu to remove the previous computer name.

To change the computer name of a backup domain controller

1.	Open Server Manager and select the domain to which you are adding the computer. Then add the new computer name to the domain.

2.	On the server whose name you are changing, choose the Network option in Control Panel. In the Network Settings dialog box, choose the Change button next to the computer name. Then type the new name in the Computer Name dialog box and choose the OK button.

3.	Restart the server whose name you have just changed. Notice that the Netlogon service will not yet start on this server.

4.	From any other computer that is a member of the domain, open Server Manager, and choose Synchronize With Domain Controller from the Computer menu.

You can now start the Netlogon service on the renamed server.

5.	Finally, in Server Manager, select the old computer name from the list of computers and choose the Remove From Domain command from the Computer menu, to remove the previous computer name.

To change the computer name of a workstation or server

1.	If the computer is participating in a domain, a domain administrator must first open Server Manager and select the domain to which you are adding the computer. Then add the new computer name to the domain.

2.	At the computer whose name you are changing, in the Network Settings dialog box, choose the Change button next to the computer name.

3.	In the Computer Name dialog box, type a unique name for this computer, and then choose the OK button.

4.	Restart the computer to have the name change take effect.

5.	If the computer is participating in a domain, a domain administrator must remove the old computer name from the domain. To do so, in Server Manager select the old computer name from the list of computers and choose the Remove From Domain command from the Computer menu.

For more information, see Chapter 15, "Server Manager," in the Windows NT Server System Guide. For more background information, see Chapter 3, "How Network Security Works," in the Windows NT Server Concepts and Planning Guide.


Changing the Virtual-Memory Paging File
Maintaining a Computer	2 of 21

Changing the Virtual-Memory Paging File

A virtual-memory paging file is created automatically on your computer when you install Windows NT. Usually, you should leave the paging file at its recommended size for each drive. However, you might want to change the file size if, for example, you frequently work with applications that require a large amount of memory and that could therefore benefit from a larger paging file.

To change the size of your computer's virtual-memory paging file

1.	In Control Panel, choose the System icon.

2.	In the System dialog box, choose the Virtual Memory button.

3.	In the Drive box of the Virtual Memory dialog box, select the drive for which you want to change the paging file size.

4.	In each Paging File Size box, type a number in megabytes to specify the new initial size or maximum size for the paging file, and then choose the Set button.

5.	Choose the OK button to return to the System dialog box.

You must restart your computer to see the effects of the changes.

For more information, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Setting the Default Operating System
Maintaining a Computer	3 of 21

Setting the Default Operating System

Use this procedure to specify the operating system that the boot loader will use the next time you start your computer.

To specify the default operating system for startup

1.	In Control Panel, choose the System icon.

The System dialog box shows the settings for the user whose profile is currently active on this computer.

2.	In the Startup box, select the default operating system from the list of systems installed on your computer.

This is the operating system that the boot loader will propose to start automatically the next time you start your computer.

3.	In the Show List For box, specify the number of seconds the list of choices should be displayed before automatically starting the default operating system.

4.	Choose the OK button.

For more information, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Setting System Recovery Options
Maintaining a Computer	4 of 21

Setting System Recovery Options

When a severe error (called a STOP error, or fatal system error) occurs on Windows NT, the computer can write an event to the system log, alert administrators, dump system memory to a file you can use for debugging, or automatically reboot the server.

If you want to change how Windows NT reacts to a STOP error, use the System option in Control Panel.

To change how Windows NT acts when a STOP error occurs

1.	In Control Panel, choose the System icon.

2.	In the System dialog box, choose the Recovery button.

You must be logged on as a member of the Administrators group to select or clear options in the Recovery dialog box.

3.	In the Recovery dialog box, select the Write An Event To The System Log check box to have Windows NT write an event containing information about the error to the system log when a STOP error occurs.

4.	Select the Send An Administrative Alert check box to have Windows NT send an alert to administrators when a STOP error occurs.

5.	To have Windows NT write the contents of system memory to a log file when a STOP error occurs, select the Write Debugging Information To check box, and type the path and file name of the log file in the text box. To have this log file overwrite any file of the same name, select the Overwrite Any Existing File check box. If you clear this check box, Windows NT will not write a log file if there is already a file by that name.

6.	Select the Automatically Reboot check box to have the computer reboot automatically after a STOP error.

7.	Choose the OK button.

After you change System Recovery options, you may have to restart the server to have the new options take effect. If so, a message will appear instructing you to restart the server.


Changing Application Response Time
Maintaining a Computer	5 of 21

Changing Application Response Time

By default, Windows NT gives priority to the application running in the foreground of your display screen. This application receives more processor time relative to other applications running in the background. (A foreground application is the application running in the active window, topmost on your screen.)

To change the priority of a foreground application relative to other running applications

1.	In Control Panel, choose the System icon.

2.	In the System dialog box, choose the Tasking button.

3.	In the Tasking dialog box, select one of the following options:

Best Foreground Application Response Time (Default)

Foreground Application More Responsive Than Background

Foreground And Background Applications Equally Responsive

The first two options vary the degree of priority given to the foreground application; the last button gives all applications an equal share of processing time.

For more information, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Starting Windows NT with the Last Known Good Configuration
Maintaining a Computer	6 of 21

Starting Windows NT with the Last Known Good Configuration

Windows NT automatically preserves the previous working startup configuration to ensure that you can always start Windows NT in spite of any changes to the system configuration that may occur during a work session. This previous working configuration is called the Last Known Good Configuration.

If you encounter difficulty starting Windows NT, you may choose to start Windows NT using the Last Known Good Configuration.

To start Windows NT with the Last Known Good Configuration

1.	Start your computer and select Windows NT from the boot loader menu (if it does not start automatically).

2.	After you choose Windows NT, or as soon as the screen clears and the words "OS Loader" appear on the screen, hold down the SPACEBAR.

Windows NT displays the Configuration Recovery menu, which asks you to choose either Current Startup Configuration or Last Known Good.

3.	To restore the last working system configuration, choose Use Last Known Good Configuration.

Notice that configuration changes since your system was last successfully started are lost.


Restoring Your System Using the Emergency Repair Disk
Maintaining a Computer	7 of 21

Restoring Your System Using the Emergency Repair Disk

If your system files are corrupt and you are unable to recover the previous startup configuration (Last Known Good Configuration), you can use the Emergency Repair disk to restore your system to its initial setup state. To repair Windows NT on a computer, you must use the Emergency Repair disk specifically created for that computer.

To restore Windows NT with an Emergency Repair disk on an x86-based computer

1.	If you installed Windows NT using the original Setup floppy disks or CD-ROM, start Setup just as you did originally.

For example, insert Setup Disk #1 of the original Windows NT installation disks in drive A and start the computer.

If you installed Windows NT using WINNT.EXE, insert the Setup disk created by WINNT.EXE in drive A and start the computer.

2.	In the first text-based Setup screen, type r to indicate that you want to repair your Windows NT files.

3.	Follow the instructions on the screen, inserting the Emergency Repair disk in drive A and providing any other Windows NT Setup disks as requested.

4.	When the final message appears, remove the Emergency Repair disk from drive A, and then press CTRL+ALT+DEL to restart your computer.

To restore Windows NT with an Emergency Repair disk on a RISC-based computer

1.	Start the Windows NT Setup program as instructed in your manufacturer-supplied documentation.

How you start Windows NT Setup depends on the type of RISC-based computer you are installing on.

2.	In the first text-based Setup screen, type r to indicate that you want to repair your Windows NT files.

3.	Follow the instructions on the screen, inserting the Emergency Repair disk in drive A if Repair asks for it.

4.	When the final message appears, remove the Emergency Repair disk, and then press ENTER to restart your computer.

For more information, see Chapter 12, "System Maintenance with Windows NT Setup," in the Windows NT Server System Guide.


Changing System Settings for Hardware
Maintaining a Computer	8 of 21

Changing System Settings for Hardware

Use the following procedures to change the system settings for your display monitor, keyboard, or mouse.

To change system settings for your display

1.	In Control Panel, choose the Display option.

2.	In the Display Settings dialog box, use the options to change your display settings, as described in the online Help.

3.	To see how these settings work, choose the Test button.

4.	If the test shows that the settings work with your display adapter, choose the OK button.

For more information, including how to install a new display adapter, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.

5.	Optionally, install a new or updated driver file, choose Other, and then when Setup prompts you for a disk, insert a disk containing the driver file in drive A.

If Setup asks you to supply a disk containing driver files, insert the disk in the drive.

6.	Choose the OK button.

If Setup asks you to supply a Windows NT disk, insert the disk in the drive.

After you complete all Setup options and quit Windows NT Setup, a message reminds you to restart your computer for the changes to take effect.

7.	To restart your computer, choose Shutdown from Program Manager's File menu. Do not use the power switch to restart your computer.

For more information, see Chapter 12, "System Maintenance with Windows NT Setup," in the Windows NT Server System Guide.

To change system settings for the keyboard or mouse

1.	Make sure your hardware is set up to match the setting you are changing to.

2.	In Program Manager, choose Windows NT Setup.

3.	From the Options menu in Windows NT Setup, choose Change Mouse Or Keyboard.

4.	In the Change Mouse Or Keyboard dialog box, open the list for the setting you want to change by clicking the arrow at the right of the list.

5.	Make sure your hardware is listed, and then select the setting you want.


Setting Up Applications to Run from Program Manager
Maintaining a Computer	9 of 21

Setting Up Applications to Run from Program Manager

Use this procedure to create program items for applications installed on your computer.

To set up applications to run from Program Manager

1.	In Program Manager, choose Windows NT Setup.

2.	From the Options menu, choose Set Up Applications.

3.	In the Set Up Applications dialog box, specify where Setup should search for applications - either all directories on your hard disk or only the directories listed in your path.

4.	Choose the Search Now button.

5.	If Setup finds applications with executable filenames identical to other applications, a message asks you to select the correct names for the ambiguously named applications on your hard disk. Select the application name(s) in the list, and then choose the OK button.

6.	In the second Set Up Applications dialog box, select the specific applications you want in the left box, and then choose the Add button.

7.	When all the applications you want to install appear in the list on the right, choose the Continue button.

Setup adds program-item icons for the selected applications in the common Applications group in Program Manager. You can move the program-item icons to other program groups, if you want.

For more information, see Chapter 12, "System Maintenance with Windows NT Setup," in the Windows NT Server System Guide.


Installing Multimedia Device Drivers
Maintaining a Computer	10 of 21

Installing Multimedia Device Drivers

When you add a new device to your system, such as a new sound board or video player, you need to install the driver that controls the device. A device driver is a program that allows a specific piece of hardware (or device) to communicate with Windows NT. Although the device may be installed in or connected to your computer, Windows NT does not recognize the device until after you install and configure the appropriate driver.

Most devices come with the appropriate driver. Windows NT also supplies sound drivers for common sound devices, such as sound boards and synthesizers. If you do not have a driver for your device, contact your device dealer or manufacturer about providing one.

Installing a New Driver

To install kernel drivers (drivers that access hardware), you must be logged on as a member of the Administrators group. The drivers you install will be available to all users.

To install a new driver

1.	In the Control Panel window, choose the Drivers icon.

The Drivers dialog box displays a list of the drivers already installed.

2.	In the Drivers dialog box, choose the Add button.

3.	In the Add dialog box, select the driver you want to install from the list, or select Unlisted Or Updated Driver if your driver is not yet known to the system, and then choose the OK button.

4.	You will often get a message saying the driver is already present on your system. If you don't have a driver disk or a new driver somewhere else on your system, you should select the Current button.

If a message asks you to insert the disk that contains the driver file, insert the appropriate disk in drive A. Or, if the driver is located on your hard disk, type the drive and directory where the driver is located.

If you do not know where the driver file is located, choose the Browse button to locate and select the drive and directory that contain the driver file, but do not type the filename for the driver.

5.	If a setup dialog box appears, select the settings required by the driver, such as the port address and interrupts for a sound board.

Important

The settings you specify must not conflict with the settings used by other devices installed on your system, such as a mouse or network card. For example, the interrupts used by each device must be unique. You may get a message about a configuration error having occurred if the hardware used by the drivers you are installing or the options you have requested conflict with the hardware or drivers already installed on your system.

To avoid conflicts, see the manuals for your other hardware devices to determine the settings they use. Then see the manual that came with the device you are configuring for information about its settings.

6.	When you finish selecting the settings, choose the OK button.

Windows NT installs any additional related drivers automatically. These drivers may also require specific settings. In this case, other setup dialog boxes may appear.

7.	Repeat steps 5 and 6 until all related drivers have been configured.

The new driver and any changed driver settings do not take effect until you restart Windows NT. A message asks you if you want to restart Windows NT.

8.	To have the new driver take effect immediately, choose the Restart Now button.

For more information, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Adding and Removing Drivers for SCSI Adapters or Tape Drives
Maintaining a Computer	11 of 21

Adding and Removing Drivers for SCSI Adapters or Tape Drives

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

Use this procedure to add or remove drivers for tape drives or SCSI devices such as a CD-ROM drive.

To add a driver for a SCSI device or tape drive

1.	In Program Manager, choose Windows NT Setup.

2.	From the Options menu in Windows NT Setup, choose Add/Remove SCSI Adapters or choose Add/Remove Tape Devices.

3.	In the SCSI Adapter Setup dialog box, choose the Add button.

4.	In the Select SCSI Adapter Option dialog box, select a driver from the list, and then choose the Install button.

Follow the instructions on the screen. If you are asked to insert a disk, insert the disk in the designated drive, and then choose the OK button.

5.	When driver installation is complete, choose the Continue button to return to Windows NT Setup.

To remove a driver for a SCSI device or tape drive

1.	In the SCSI Adapter Setup list in the Add/Remove dialog box, select the SCSI device or tape device you want to remove.

2.	Choose the Remove button, and then choose the Continue button to return to Windows NT Setup.

For more information, see Chapter 12, "System Maintenance with Windows NT Setup," in the Windows NT Server System Guide.


Adding and Removing Windows NT Components
Maintaining a Computer	12 of 21

Adding and Removing Windows NT Components

You can add and remove various components that are not essential to the operation of Windows NT, such as README files, accessories, games, screen savers, and wallpapers.

To add or remove Windows NT components

1.	In Program Manager, choose Windows NT Setup.

2.	From the Options menu in Windows NT Setup, choose Add/Remove Windows Components.

In the Windows Components dialog box, Setup lists the optional components and the hard disk space required to set them up on your computer:

Components currently on your computer are marked with an X in the check boxes. You can remove some or all of these components.

Total Disk Space Required shows the total hard disk space required by all selected components. This number increases or decreases as you select or clear the components' check boxes.

Disk Space Available shows your computer's total unused hard disk space. This number changes after adding or removing components or files.

Note

Windows NT Setup does not check whether the space required for the files you want to add matches the space available on disk. Check these amounts carefully before proceeding to ensure that you have adequate disk space to add the selected components.

3.	To add or remove a component, do one or more of the following:

To add an entire component (for example, all README files), select the check box next to it.

To remove an entire component, clear the check box.

To add or remove part of a component, follow the steps in the next procedure.

4.	Choose the OK button.

If you are adding a component or part of a component, a message asks you to insert the appropriate Windows NT disk. Insert the disk in the drive, and then choose the OK button.

If you are removing files, a message asks you to confirm the deletion. Choose the Yes button to delete the files.

To add or remove part of a Windows NT component

1.	In the Windows NT Setup dialog box for adding and removing components, choose the Files button next to the component you want to change.

The Customize dialog box lists that component's files. Files on the right are currently included on your computer and can be removed. Files on the left are not included and can be added.

2.	In either list of files, select the names of the files you want to add or remove, and then choose the Add or Remove button. Or choose the Add All button to add all files.

Total Disk Space Required shows the total hard disk space needed for the files you want to set up on your computer. Check this number to be sure there is adequate space on your disk for the files you have selected.

3.	Choose the OK button to return to the Windows NT Setup dialog box, and then choose the Continue button to add or remove the selected files.


Starting and Stopping Devices
Maintaining a Computer	13 of 21

Starting and Stopping Devices

Use these procedures to start and stop devices, and specify whether devices should start automatically when Windows NT starts.

To start or stop a device

1.	In Control Panel, choose the Devices icon.

In the Devices dialog box, if Started is displayed in the Status column for a device, that device driver is loaded. If the Status column is blank, that device driver is not loaded.

The Startup column displays the startup type of each device. The startup types are described in the following procedure.

2.	Select a device.

3.	Choose the Start or Stop button.

Some devices are essential to system operation and cannot be stopped. When such a device is selected, the Stop button is unavailable.

4.	Choose the Close button.

To configure device startup, you must be logged on to a user's account that has membership in the Administrator's local group.

To set the startup type of a device

1.	In Control Panel, choose the Devices icon.

2.	In the Devices dialog box, select a device.

3.	Choose the Startup button.

4.	Select a startup type.

Select	To

Boot	Start the device every time the computer starts. Boot devices start before any other devices. Use for critical devices essential to system operation.

System	Start the device every time the system starts. System devices start after Boot devices. Use for critical devices essential to system operation.

Automatic	Start the device every time the system starts. Automatic devices start after Boot and System devices. Use for devices that are not critical for basic system operation.

Manual	Allow the device to be started by a user or by a dependent device.

Disabled	Prevent the device from being started by a user. However, the device can be started by the system.

Caution

Changing the startup type of a Boot or System device can leave the system in an unusable state.

5.	Choose the OK button.

6.	In the Devices dialog box, choose the Close button.


Installing Network Adapter Cards
Maintaining a Computer	14 of 21

Installing Network Adapter Cards

This section contains updated information for Windows NT version 3.51. Click here to see the new information.

Use this procedure to install device drivers for any network cards you add to the computer after you install Windows NT on it.

To install one or more network adapter cards

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, choose the Add Adapter button.

3.	In the Add Network Adapter dialog box, select the name of the adapter card that is installed in your computer, and then choose the Continue button.

If you have a disk with software from a vendor, select Other.

4.	When Setup asks for a disk, insert the disk in the drive, or type the path of the driver if the file is located on your hard disk or on a network drive. Then choose the OK button.

You may be asked to insert additional disks if more than one disk was provided by the hardware manufacturer. You may also be asked for specific Windows NT installation disks.

5.	When you complete all your changes and close the Network Settings dialog box, a message asks if you want to restart your computer for the changes to take effect. To restart your computer immediately, choose the Yes button.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Installing Protocols and Network Software
Maintaining a Computer	15 of 21

Installing Protocols and Network Software

Use this procedure to install additional network protocols or other modules of network software, such as RPC support, after you have installed Windows NT on a computer.

To install network software

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, choose the Add Software button.

3.	In the Add Network Software dialog box, select the software component you want to install, and then choose the Continue button.

If you have a disk with software from a vendor, select Other.

4.	When Setup asks for a disk, insert the disk in the drive. Or type the path of the software component if the file is located on your hard disk or on a network drive. Then choose the OK button.

You may be asked for additional disks if more than one disk was provided by the hardware manufacturer. You might also be asked for specific Windows NT installation disks.

5.	When you complete all your changes and close the Network Settings dialog box, a message asks if you want to restart your computer for the changes to take effect. To restart your computer immediately, choose the Yes button.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Configuring Network Software and Adapter Cards
Maintaining a Computer	16 of 21

Configuring Network Software and Adapter Cards

Use this procedure to configure adapter cards and their supporting software to achieve the best performance on your system.

The dialog boxes for configuring your adapter and software are supplied by the manufacturer. Most of these dialog boxes contain a Help button to guide you through making choices for optimal settings. For additional information, refer to the documentation for your network adapter card or software.

To configure network software or an adapter card

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, select the name of the item you want to configure in either the Installed Network Software box or Installed Adapter Cards box.

Optionally, in the Description box, type text to describe the component, or keep the description provided by the manufacturer. If you have multiple adapter cards, consider including the slot number of the card in its description.

3.	Choose the Configure button.

Windows NT displays a dialog box specifically for the selected component, as provided by the component manufacturer.

For information about any items in the dialog box, choose the Help button.

4.	Complete options in the dialog box to specify your choices, and then choose the OK button.

For a more detailed procedure, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Enabling and Disabling Network Component Bindings
Maintaining a Computer	17 of 21

Enabling and Disabling Network Component Bindings

By default, Windows NT maximally binds all network components to ensure that they are fully utilized. If you rarely use a particular adapter card and want to reduce the software loaded into memory, you can simply unbind (disconnect) that network adapter card from all network components.

To enable or disable binding paths for selected network components

1.	In Control Panel, choose the Network icon.

2.	In the Network Bindings dialog box, select a binding path.

3.	To enable the binding path, choose the Enable button.

To disable the binding path, choose the Disable button.

The icon next to the selected binding shows the current state of that binding path.

4.	Choose the OK button.


Changing Protocol Binding Order
Maintaining a Computer	18 of 21

Changing Protocol Binding Order

If you have more than one kind of protocol installed, you can set the order in which workstation and NetBIOS software bind to each protocol. You might want to change the binding order for one of the following reasons:

If the protocol you use most frequently is first in the Bindings list, average connection time decreases.

Some protocols are faster than others for certain network topologies. Putting the faster protocol first in the Bindings list improves performance.

To change protocol binding order

1.	In the Network Settings dialog box, choose the Bindings button.

2.	In the Show Bindings For box of the Network Bindings dialog box, select All Components.

3.	Select the binding path to move up or down and use the protocol order buttons to change the binding order.

4.	Choose the OK button.

For more background information, see Chapter 2, "Choosing Network Drivers and Protocols," in the Windows NT Server Concepts and Planning Guide.


Setting the LAN Adapter Number
Maintaining a Computer	19 of 21

Setting the LAN Adapter Number

When you install Windows NT on a computer (and when you install additional protocols or network adapter cards), Windows NT automatically assigns LAN adapter (Lana) numbers to protocol/network adapter card bindings. However, if you have a NetBIOS application that specifies that it must use a certain LAN adapter number, use the following procedure to set it.

To set LAN adapter numbers for special applications

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, select NetBIOS Interface in the Installed Network Software box.

3.	Choose the Configure button.

4.	In the Network Route box, select the protocol whose LAN adapter number you need to change and then type a new number in the Lana Number box.

5.	Complete options in the dialog box to specify your choices, and then choose the OK button.

For more information, see Chapter 5, "Control Panel," in the Windows NT Server System Guide.


Updating or Removing Network Components
Maintaining a Computer	20 of 21

Updating or Removing Network Components

When you remove a network component, the information is removed from your system configuration. The related software remains on your hard disk.

To update a network component

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, select the component you want to update in the Installed Network Software box or the Installed Adapter Cards box.

3.	Choose the Update button.

4.	Complete the dialog boxes that appear.

You will be asked to insert disks from the manufacturer that contain the updated driver information for the selected component.

To remove a network component

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, select the component you want to remove in the Installed Network Software box or the Installed Adapter Cards box.

3.	Choose the Remove button.

4.	Complete the dialog boxes that appear.

The dialog box for removing the component is supplied by the manufacturer. Choose the Help button in the dialog box for more information.


Setting Network Provider Search Order
Maintaining a Computer	21 of 21

Setting Network Provider Search Order

If you have more than one kind of network installed at your site, you can specify the order in which Windows NT searches the various networks for certain operations.

To set network provider search order

1.	In Control Panel, choose the Network icon.

2.	In the Network Settings dialog box, choose the Networks button.

This button is dimmed if no other network providers are available.

3.	In the Access Networks In This Order box, select the name of the network whose order you want to change, and then choose the Up or Down button to move that network higher or lower in the search order.

4.	Continue selecting network names to define the order until all networks are listed in the order you want for searching, and then choose the OK button.


Managing a Running Server
Chapter 10	1 of 14

Managing a Running Server

Locking and Unlocking a Computer

Locking a computer prevents anyone else from working at it locally until you unlock it. Applications continue to run on a locked computer.

Administrators of a computer can override any user's lock of that computer.

To lock a computer

1.	Press CTRL+ALT+DEL to display the Windows NT Security window.

2.	Choose the Lock Workstation button.

To unlock a computer that you locked

1.	Press CTRL+ALT+DEL to display the Workstation Locked window.

2.	Type your password in the Password box.

3.	Choose the OK button.

To override a lock placed by another user

1.	Press CTRL+ALT+DEL to display the Workstation Locked window.

2.	In the Username box, type your username.

3.	In the From box, select the domain or workstation where your account is located.

4.	In the Password box, type your account password.

5.	Choose the OK button.

6.	In the confirmation message box, choose the OK button.


Configuring Server Memory Usage
Managing a Running Server	2 of 14

Configuring Server Memory Usage

You can optimize network responsiveness by specifying how much memory Windows NT Server allocates for server operations.

To configure server memory

1.	In Control Panel, choose the Network option.

2.	In the Network Settings dialog box, select Server in the Installed Network Software box.

3.	Choose the Configure button.

4.	In the Server dialog box, select one of the following options and then choose the OK button.

Option		Description
Minimize Memory Used		Allows memory to be allocated for up to approximately 10 network connections.
Balance		Provides memory for up to approximately 64 connections and is the default setting.
Maximize Throughput for File Sharing		Allocates maximum memory for file sharing applications.
Maximize Throughput for Network Applications		Optimizes server memory for distributed applications that do their own memory caching, such as Microsoft SQL Server.


Managing Administrative Alerts
Managing a Running Server	3 of 14

Managing Administrative Alerts

For alerts to be sent, the Alerter and Messenger services must be running on the computer originating the alert. For alerts to be received, the Messenger service must be running on the destination computer.

To specify who receives administrative alerts

1.	Double-click a computer name in the Server Manager window.

2.	In the Properties dialog box, choose the Alerts button.

3.	To add a user or computer to the list of alert recipients, type the username or computer name in the New Computer Or Username box, and then choose the Add button.

4.	To remove a user or computer from the list of alert recipients, select the username or computer name in the Send Administrative Alerts To box, and then choose the Remove button.

5.	To exit, in the Alerts dialog box choose the OK button, and then in the Properties dialog box choose the OK button.

6.	To have your changes take effect, stop and restart the Server and Alerter services.


Viewing and Managing Server Connections
Managing a Running Server	4 of 14

Viewing and Managing Server Connections

Use this procedure to see who is connected to a server, what resources the server shares, and what resources are in use.

To view and manage server connections

1.	Double-click a computer name in the Server Manager window, or select a computer name and then choose Properties from the Computer menu.

The Properties dialog box displays a usage summary for the computer.

Item	Meaning

Sessions	The number of users remotely connected to the computer

Open Files	The number of shared resources opened on the computer

File Locks	The number of file locks by open resources on the computer

Open Named Pipes	The number of named pipes open on the computer

2.	To change the computer description, type new text in the Description box.

3.	To administer a property associated with one of the five buttons at the bottom of the Properties dialog box, choose a button and complete the dialog box that appears.

The buttons in the following list and their associated dialog boxes are described in procedures following this one. For information on the Alerts button, see "Managing Administrative Alerts," earlier in this chapter. For information on the Replication button, see Chapter 5, "Managing File Sharing," in this manual.

Choose	To

Users	View all the users connected over the network to the computer and the resources opened by a selected user. One or all of the connected users can be disconnected.

Shares	View the computer's shared resources and the users connected over the network to a selected resource. One or all of the connected users can be disconnected. (To create and manage shares, use File Manager or the Shared Directories command in Server Manager.)

In Use	View the open shared resources on the computer. One resource or all resources can be closed.

4.	To exit, choose the OK button.

To view users connected over the network to the computer

1.	Double-click a computer name in the Server Manager window.

2.	In the Properties dialog box, choose the Users button.

In the User Sessions dialog box, the Connected Users box lists the users remotely connected to the computer.

Item	Meaning

Connected Users	The user name of a connected user

Computer	The computer name of the computer where the user is logged on

Opens	The number of resources opened on this computer by the user

Time	The hours and minutes that have elapsed since this session was established

Idle	The hours and minutes that have elapsed since the user last initiated an action

Guest	Whether this user has guest status on the computer

Below the Connected Users box, the Connected Users summary shows the number of users remotely connected to the computer.

3.	To view the resources used by a user, select a user name from the Connected Users box. The Resource box lists shared resources the user is connected to.

Item	Meaning

Resource	The name of a shared resource the selected user is connected to. This could be a shared directory, named pipe, or printer.

Opens	The number of opens against this resource by this user.

Time	The hours and minutes that have elapsed since this resource was first opened.

4.	To disconnect one user from the computer, select the user name from the Connected Users box and then choose the Disconnect button.

To disconnect all users from the computer, choose the Disconnect All button.

Warn users before disconnecting them.

5.	To exit, in the User Sessions dialog box choose the Close button, and then in the Properties dialog box choose the OK button.

To view shared resources

1.	Double-click a computer name in the Server Manager window.

2.	In the Properties dialog box, choose the Shares button.

In the Shared Resources dialog box, the Share Name box lists available resources.

Item	Meaning

Share Name	The name of a shared resource. This could be a shared directory, named pipe, or printer.

Uses	The number of connections to the shared resource.

Path	The path of the shared resource.

3.	To view the users connected to a shared resource, select a share name from the Share Name box.

The Connected Users box lists the connected users.

Item	Meaning

Connected Users	The user name of a user connected to the selected shared resource

Time	The hours and minutes that have elapsed since the user first connected to this shared resource

In Use	Whether the user currently has a file open from this shared resource

Below the Connected Users box, the Connected Users summary shows the number of users connected to the selected resource.

4.	To disconnect one user from all shared resources, select the user name from the Connected Users box and then choose the Disconnect button.

To disconnect all users from all shared resources, choose the Disconnect All button.

Warn users before disconnecting them. Each disconnected user is disconnected from all shared resources on the computer - not just the resource selected in the Share Name box.

5.	To exit, in the Shared Resources dialog box choose the Close button, and then in the Properties dialog box choose the OK button.

To view resources in use

1.	Double-click a computer name in the Server Manager window.

2.	In the Properties dialog box, choose the In Use button.

The Open Resources dialog box shows the resources open on the computer.

Item	Meaning

Open Resources	The total number of open resources on the computer. These could be files, named pipes, or printers.

File Locks	The total number of file locks on open resources.

Opened By	The user name of a user who opened a resource.

For	The permission granted when the resource was opened.

Locks	The number of locks on the resource.

Path	The path of the open resource.

3.	To close a single resource, select one resource from the list and then choose the Close Resource button.

To close all resources, choose the Close All Resources button.

Warn connected users before closing resources.

4.	To update the displayed information, choose the Refresh button.

5.	To exit, in the Open Resources dialog box choose the Close button, and then in the Properties dialog box choose the OK button.


Sending a Message to Connected Users
Managing a Running Server	5 of 14

Sending a Message to Connected Users

For a message to be sent and received, the Messenger service must be running on the computer sending the message and on the computers receiving the message.

To send a message

1.	Select a computer from the list in the Server Manager window.

2.	From the Computer menu, choose Send Message.

3.	In the Send Message dialog box, type your message in the Message box.

4.	Choose the OK button.


Viewing Events
Managing a Running Server	6 of 14

Viewing Events

Use this procedure to view events in the system, security, and application logs in Event Viewer.

To view events

1.	In the Administrative Tools group in Program Manager, choose the Event Viewer icon.

The Event Viewer window appears with one of the three event logs displayed.

2.	To view a different log, choose System, Security, or Application from the Log menu.

3.	To view events on a different computer, first from the Log menu choose Select Computer. In the Computer box, type the computer name you want, or select a computer name in the Select Computer box. Then choose the OK button.

4.	To specify the sort order of events, from the View menu, choose Newest First or Oldest First.

5.	To filter some events from view, follow the procedure in the following section of this chapter.

6.	To search for specific types of events in the log, follow the procedure in "Searching for Events," later in this chapter.

7.	To view details of an event, follow the procedure in "Viewing More Details About an Event," later in this chapter.

8.	When you are done viewing the event logs, choose Exit from the Log menu.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Searching for Events
Managing a Running Server	7 of 14

Searching for Events

Searching for events can be useful when you are viewing large logs. You can search for each event that matches the type, source, or category that you want by choosing Find from the View menu.

To search for specific kinds of events in a log

1.	From the View menu, choose Find.

2.	In the Find dialog box, select any of the Types of events you want to find.

3.	Specify any other Source, Category, Event ID, Computer, and User events you want to find, as described in "Filtering Events," earlier in this chapter.

4.	In the Description box, type text that matches any portion of an event record description.

Because you can search for any portion of an event record description, the complete description is not required.

5.	To specify the direction of the search, select the Up or Down button.

The search direction is independent of the sort order checked on the View menu.

6.	Choose Find Next to begin the search.

To find the next matching event

Press F3 to continue searching without displaying the Find dialog box again.

To restore the default search criteria

In the Find dialog box, choose the Clear button.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Filtering Events
Managing a Running Server	8 of 14

Filtering Events

Use this procedure to filter events from view according to criteria such as time, category, and severity.

To filter events

1.	From the View menu, choose Filter Events.

2.	In the Filter dialog box, specify the characteristics that qualify an event for display in Event Viewer.

The following table describes the options in the Filter dialog box. Entries in the Filter dialog box are not case sensitive.

3.	Choose the OK button to view the filtered events.

To return to the default criteria

In the Filter dialog box, choose the Clear button.

To turn off filtering of events

From the View menu, choose All Events.

The following table describes the options available in the Filter dialog box.

Use	To filter for

View From	Events after a specific date and time. By default, this is the date of the first event in the log file.

View Through	Events up to and including a specific date and time. By default, this is the date of the last event in the log file.

Information¹	Infrequent significant events that describe successful operations of major server services. For example, when a database program loads successfully, it may log an Information event.

Warning¹	Events that are not necessarily significant but that indicate possible future problems. For example, a Warning event might be logged when disk space is low.

Error¹	Significant problems, such as a loss of data or loss of functions. For example, an Error event might be logged if a service was not loaded during Windows NT startup.

Success Audit¹	Audited security access attempts that were successful. For example, a user's successful attempt to log on to the system might be logged as a Success Audit event.

Failure Audit¹	Audited security access attempts that failed. For example, if a user tried to access a network drive and failed, the attempt might be logged as a Failure Audit event.

Source2	A source for logging events, such as an application, a system component, or a driver.

User³	A specific user that matches an actual user name. This field is not case sensitive.

Category³	A classification of events defined by the source. For example, the security event categories are Logon and Logoff, File and Object Access, Use of User Rights, and User and Group Management.

Computer³	A specific computer that matches an actual computer name. This field is not case sensitive.

Event ID²	A specific number that corresponds to an actual event.

¹ This option is not available for LAN Manager 2.x servers.

² This option is not available for audit logs on LAN Manager 2.x servers.

³ This option is not available for error logs on LAN Manager 2.x servers.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Viewing More Details About an Event
Managing a Running Server	9 of 14

Viewing More Details About an Event

Use the following procedure to view more details about any event shown in Event Viewer.

To view more details about an event

1.	In Event Viewer, double-click the event you want to view details about. Or select an event in the list, and then choose Detail from the View menu.

2.	In the Description or Data box, use the scroll box to browse the information about the event.

3.	To view details about other events in sort-order sequence, choose the Next or Previous button.

4.	When you finish viewing details, choose the Close button to return to Event Viewer.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Setting Options for Logging Events
Managing a Running Server	10 of 14

Setting Options for Logging Events

Use this procedure to set the maximum allowed size of the event log and to determine what happens when the event log is full.

To set event logging options

1.	In Event Viewer, from the Log menu, choose Log Settings.

2.	In the Change Settings For box, select the kind of log for which you want to specify settings.

3.	In the Maximum Log Size box, specify the size of the log in kilobytes.

For example, type 640 for a maximum log size of 640 kilobytes. The default setting is 512.

4.	Select an Event Log Wrapping option to define how the events are retained in the log selected in the Change Settings For box.

The options include the following.

Use		To
Overwrite Events As Needed		Have new events continue to be written when the log is full. Each new event will replace the oldest event in the log.
Overwrite Events Older than [ ] days		Retain the log for the number of days you specify before overwriting events. The default setting for this option is seven days. This is the best choice if you want to archive log files weekly.
Do Not Overwrite Events		Clear the log manually rather than automatically. Select this option only if you cannot afford to miss an event-for example, for the security log at a site where security is extremely important. You will probably also want to select the Halt System When Full option under Auditing Policies in User Manager when you select this option.
5.	To restore all default settings, choose the Default button.

6.	Choose the OK button.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Clearing an Event Log
Managing a Running Server	11 of 14

Clearing an Event Log

When a log is full (no more events can be logged), you can free the log by clearing it. If you specify that events cannot be overwritten in a log, you must clear the log periodically - either when the log reaches a certain size or when a message notifies you that the log is full. Archived logs cannot be cleared.

To clear a log

1.	In Event Viewer, switch to the log whose events you want to clear.

2.	From the Log menu, choose Clear All Events.

A message asks if you want to archive the currently logged events. If you answer Yes, the Save As dialog box appears. For more information about this dialog box, see "Archiving an Event Log," later in this chapter.

After you answer Yes or No, Event Viewer empties the current log. All new events are recorded in the log.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Archiving an Event Log
Managing a Running Server	12 of 14

Archiving an Event Log

When you archive an event log, you can save the log in one of three file formats:

Log file format, which you should choose if you want to view the archived log again in Event Viewer.

Text file format, for using the information in an application such as a word processor.

Comma-delimited text file format, for using the information in an application such as a spreadsheet or a flat-file database.

To archive an event log

1.	In Event Viewer, from the Log menu, choose Save As.

2.	In the File Name box, type a filename for the archived log file.

Event Viewer adds the .EVT filename extension for log files, or the .TXT extension for either kind of text format file.

3.	In the Save File As Type box, select a file format option for saving the log information, and then choose the OK button.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Viewing a Log Archived in Log File Format
Managing a Running Server	13 of 14

Viewing a Log Archived in Log File Format

You can view an archived file in Event Viewer only if the log was saved in log file format.

To display an archived log in Event Viewer

1.	In Event Viewer, from the Log menu, choose Open.

2.	In the File Name list, select the filename of the log you want to view, and then choose the OK button.

3.	In the Open File Type dialog box, select the kind of log you saved originally - System, Security, or Application. Then choose the OK button.

If you do not specify the correct log type, the Description displayed for the archived log in the Event Detail dialog box will not be correct.

For a more detailed procedure, see Chapter 17, "Event Viewer," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Using Logs Archived in a Text Format
Managing a Running Server	14 of 14

Using Logs Archived in a Text Format

If you save an event log in text or comma-delimited text format, you can open that file in other applications. Those other applications can be used to filter, sort, and format the archived event records. Or you might combine event records from two or more archived text files to create reports.

For example, you might copy lines of text from an archived log to include as supporting information in an electronic mail message. Or, you might archive a security log in comma-delimited format so you can place the information in a spreadsheet and produce a chart depicting the archived information.

If an archived log is saved in text or comma-delimited text format, the binary data for each event record is discarded. The sequence of data in an event record saved in either text format is the following:

1.Date¹	4.Type	7.User
2.Time	5.Category	8.Computer
3.Source	6.Event	9.Description
¹ Depends on the sort order specified in the View menu.


Monitoring Performance
Chapter 11	1 of 16

Monitoring Performance

Activating the Physical and Logical Disk Counters

Windows NT is able to provide performance data on many aspects of the system. Most of this data is collected automatically, and does not require you to issue a command. The one exception is information on the performance of physical and logical disk activity on your own or another computer. If you plan to collect information about physical and logical disk performance, you must first use the following procedure to start the collection of this data.

To activate the physical and logical disk counters

1.	Log on as a member of the Administrators group.

2.	At the command prompt, type diskperf to view Help information on how to turn diskperf on and off and specify a remote computer's name.

It will also state whether or not the disk performance counters have been activated already on that computer.

3.	Restart the computer to activate the disk performance counters.


Charting Current Activity
Monitoring Performance	2 of 16

Charting Current Activity

By charting current activity, you can see and manipulate a graphical representation of performance.

To chart current network activity

1.	From the View menu in Performance Monitor, choose Chart. Or choose the Chart button on the toolbar.

2.	To open an existing chart settings file, choose Open from the File menu. Then select or type the path name for the .PMC file containing the selections that you want to reuse.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

When you have selected the settings file, choose the OK button to close the File Open dialog box.

3.	To add counters to the chart, choose Add To Chart from the Edit menu. Or choose the Add To Chart button on the toolbar.

4.	To monitor a different computer, type its name in the Computer box of the Add To Chart dialog box. Or click the gray button at the end of the Computer box to display the Select Computer dialog box, and use that to select a computer.

To add more counters for a computer that has already been selected, you can also select that counter from the screen display before choosing the Add To Chart command. That counter's computer will then appear as the default computer.

5.	In the Object box of the Add To Chart dialog box, select an object to monitor from the list of those that are available on the chosen computer.

The Counter and Instance boxes change to display the items that are available for that object on the chosen computer.

6.	In the Counter box, select one or more counters.

For a definition of the selected counter, choose the Explain button.

7.	In the Instance box, select one or more instances if appropriate.

8.	If you do not want the next available color to be assigned to a counter along with the default scale and the default line width and style, make your own selections now.

The scale factor is applied to all the currently selected counters. The factor displayed is multiplied times the counter value, and the product is charted. Notice, however, that the value bar continues to show the actual value, not the scaled value.

9.	Choose the Add button.

10.	Repeat steps 3 – 9 for any additional objects or computers that you want to monitor.

11.	When you finish adding selections, choose the Done button.

A list of your selections appears in the legend at the bottom of the window, and Performance Monitor displays the changing values of your selections on the chart. Notice that each displayed value is usually an average over the last two data reads, which are separated by the length of the time interval.

To save chart selections in a settings file

1.	From the File menu, choose Save Chart Settings As.

2.	In the Performance Monitor - Save As dialog box, select or type a path name for the file that will contain the selections that you want to reuse.

3.	Choose the OK button.


Changing Chart Selections
Monitoring Performance	3 of 16

Changing Chart Selections

Creating a readable chart is important. Sometimes you should change the scale at which you graph the counter information to display the activity more in the center of the chart, but the actual reported values are not changed. To make each counter's line stand out better, you might want to vary the color, style, and width used. You might also want to use the chart-highlighting mode on a selected counter.

To change how a selected counter is represented on the chart

1.	In the legend, select the counter that you want to change.

2.	Double-click the selected counter. Or, from the Edit menu, choose Edit Chart Line. Or choose the Edit Chart Line button on the toolbar.

The same dialog box as the one used for Add To Chart appears, showing only the information for the counter that you selected in the legend.

3.	Change any of the following options:

Select an option under		To
Color		Use colors to reflect your personal preferences.
Scale		Change the scale at which the information is displayed. The numbers shown in the value bar, however, are not scaled.
Width		Make the line thicker or thinner. Thick lines cannot be styled.
Style		Use a different style with a thin line.
4.	Choose the OK button.

The legend information area now displays the new selections.

For more detailed procedures, see Chapter 19, "Performance Monitor," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Logging Current Activity
Monitoring Performance	4 of 16

Logging Current Activity

Logging enables you to record information on the current activity of selected objects and computers for viewing later.

To log current network activity

1.	From the View menu in Performance Monitor, choose Log. Or choose the Log button on the toolbar.

2.	To open an existing log settings file, choose Open from the File menu. Then select or type the path name for the .PML file containing the selections that you want to reuse.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

If there is a log file name associated with that log settings file, be aware that Performance Monitor will start logging data to that log upon opening that settings file.

When you have selected the settings file, choose the OK button to close the File Open dialog box.

3.	To add objects to the log, choose Add To Log from the Edit menu. Or choose the Add To Log button on the toolbar.

4.	To monitor a different computer, type its name in the Computer box of the Add To Log dialog box. Or click the gray button at the end of the Computer box to display the Select Computer dialog box, and use that to select a computer.

To add more objects for a computer that has already been selected, you can also select that object from the screen display before choosing the Add To Log command. That object's computer will then appear as the default computer.

5.	In the Objects box of the Add To Log dialog box, select an object or set of objects to monitor from the list of those that are available on the chosen computer.

6.	Choose the Add button.

7.	Repeat steps 3 - 6 for any additional computers that you want to monitor.

8.	When you finish adding objects, choose the Done button.

A list of your selections appears in the display area.

To save log selections in a settings file

1.	From the File menu, choose Save Log Settings As.

2.	In the Performance Monitor - Save As dialog box, select or type a path name for the file that will contain the selections that you want to reuse.

Notice that Performance Monitor also saves the log file name with the log settings file and will start logging data to that file upon reopening that settings file.

3.	Choose the OK button.


Adding Bookmarks to a Log
Monitoring Performance	5 of 16

Adding Bookmarks to a Log

Log files become more usable when you add bookmark comments at various points while logging. Bookmarks serve as reminders by describing the circumstances under which the file was created or by highlighting major points of interest.

To add a bookmark to a log

1.	From the Options menu, choose Bookmark. Or choose the Bookmark button on the toolbar.

2.	In the Bookmark Comment box, type a comment.

3.	Choose the Add button.

For more detailed procedures, see Chapter 19, "Performance Monitor," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Setting Alerts on Current Activity
Monitoring Performance	6 of 16

Setting Alerts on Current Activity

With the alert log, you can monitor several counters at the same time. When a counter exceeds a given value, the date and time of the event are recorded in the Alert window. A total of one thousand events are recorded, after which the oldest event is discarded when the next new one is added. An event can also generate a network alert. When an event occurs, you can have a specified program run every time or just the first time that it occurs.

To set alerts on current network activity

1.	From the View menu in Performance Monitor, choose Alert. Or choose the Alert button on the toolbar.

2.	To open an existing alert log settings file, choose Open from the File menu. Then select or type the path name for the .PMA file containing the selections that you want to reuse.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

When you have selected the settings file, choose the OK button to close the File Open dialog box.

3.	To add selections to an alert log, choose Add To Alert from the Edit menu. Or choose the Add To Alert button on the toolbar.

4.	To monitor a different computer, type its name in the Computer box of the Add To Alert dialog box. Or click the gray button at the end of the Computer box to display the Select Computer dialog box, and use that to select a computer.

To add more counters for a computer that has already been selected, you can also select that counter from the screen display before choosing the Add To Alert command. That counter's computer will then appear as the default computer.

5.	In the Object box of the Add To Alert dialog box, select an object to monitor from the list of those that are available on the chosen computer.

The Counter and Instance boxes change to display the items that are available for that object on the chosen computer.

6.	In the Counter box, select one or more counters.

For a definition of the selected counter, choose the Explain button.

7.	In the Instance box, select one or more instances if appropriate.

8.	If you do not want the next available color to be assigned to a counter, make your own selections now.

9.	In the Alert If box, select either Over or Under and add a value appropriate for the counter.

10.	In the Run Program On Alert box, select either First Time or Every Time and type the complete path name for the program or macro that you want to run whenever the specified alert occurs.

11.	Choose the Add button.

12.	Repeat steps 3 – 11 for any additional objects or computers that you want to monitor.

13.	When you finish adding selections, choose the Done button.

A list of your selections appears in the Alert Legend box at the bottom of the window, and Performance Monitor displays the resulting alerts in the Alert Log area. Notice that each alert value is usually an average over the last two data reads, which are separated by the length of the time interval.

When a remote computer that is being monitored shuts down, an alert occurs and creates a comment in the alert log. Another alert occurs (with another corresponding comment) when that computer later reconnects.

To save alert log selections in a settings file

1.	From the File menu, choose Save Alert Settings As.

2.	In the Performance Monitor - Save As dialog box, select or type a path name for the file that will contain the selections that you want to reuse.

3.	Choose the OK button.


Changing Alert Selections
Monitoring Performance	7 of 16

Changing Alert Selections

After monitoring the alert log for a while, you may decide to change the Alert If criterion, what program to run and how often to run it, or the color used to display certain alerts.

To change how a selected counter is represented in the alert log

1.	While in Alert view, double-click the selected counter in the legend. Or, from the Edit menu, choose Edit Alert Entry. Or choose the Edit Alert Entry button on the toolbar.

The same dialog box as the one used for Add To Alert appears, showing only the information for the counter that you selected in the legend.

2.	Change any of the following options:

Select an option under		To
Color		Use colors to reflect your personal preferences.
Alert If		Change the alert warning criterion.
Run Program On Alert		Change how often the program is run or change to a different program.
3.	Choose the OK button.

The Alert Legend information area now displays the revised selections.

For more detailed procedures, see Chapter 19, "Performance Monitor," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Creating Reports on Current Activity
Monitoring Performance	8 of 16

Creating Reports on Current Activity

The Report view provides a simple report format for displaying constantly changing counter and instance values for selected objects. The information is presented in columns for each individual instance.

To create reports on current network activity

1.	From the View menu in Performance Monitor, choose Report. Or choose the Report button on the toolbar.

2.	To open an existing report settings file, choose Open from the File menu. Then select or type the path name for the .PMR file containing the selections that you want to reuse.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

When you have selected the settings file, choose the OK button to close the File Open dialog box.

3.	To add selections to a report, choose Add To Report from the Edit menu. Or choose the Add To Report button on the toolbar.

4.	To monitor a different computer, type its name in the Computer box of the Add To Report dialog box. Or click the gray button at the end of the Computer box to display the Select Computer dialog box, and use that to select a computer.

To add more counters for a computer that has already been selected, you can also select that counter from the screen display before choosing the Add To Report command. That counter's computer will then appear as the default computer.

5.	In the Object box of the Add To Report dialog box, select an object to monitor from the list of those that are available on the chosen computer.

The Counter and Instance boxes change to display the items that are available for that object on the chosen computer.

6.	In the Counter box, select one or more counters.

For a definition of the selected counter, choose the Explain button.

7.	In the Instance box, select one or more instances if appropriate.

8.	Choose the Add button.

9.	Repeat steps 3 – 8 for any additional objects or computers that you want to monitor.

10.	When you finish adding selections, choose the Done button.

A list of your selections by computer and object appears in the report area, and Performance Monitor displays the changing values of your selections in the report. Notice that each displayed value is usually an average over the last two data reads, which are separated by the length of the time interval.

To save report selections in a settings file

1.	From the File menu, choose Save Report Settings As.

2.	In the Performance Monitor - Save As dialog box, select or type a path name for the file that will contain the selections that you want to reuse.

3.	Choose the OK button.

For more detailed procedures, see Chapter 19, "Performance Monitor," in the Windows NT Server System Guide. For more background information, see Chapter 9, "Monitoring Network Activity and Performance," in the Windows NT Server Concepts and Planning Guide.


Printing a Snapshot of the Window Display
Monitoring Performance	9 of 16

Printing a Snapshot of the Window Display

In any of the four views, you can use the PRINTSCREEN key to capture a graphical view of the current window at certain intervals or during peak periods to keep a record over time. You can then use the Paintbrush program in the Accessories group to clean up and print out a copy of the window display.

To print a snapshot of the current window

1.	Press ALT+PRINTSCREEN to copy a view of the active window. If Performance Monitor is maximized, press PRINTSCREEN to copy the whole desktop.

2.	Start the Paintbrush program in the Accessories group.

3.	From the Edit menu, choose Paste and then, if you want to save the bitmap to a file, choose Save As from the File menu.

4.	From the File menu, choose Print.


Exporting Data
Monitoring Performance	10 of 16

Exporting Data

When you want to manipulate a snapshot of the current window's data in a spreadsheet or database program before printing it or when you want to change how the information is presented, use the view's Export command.

To export data to a spreadsheet or database program

1.	From the view's File menu, choose the Export command.

The Performance Monitor - Export As dialog box appears.

2.	In the Column Delimiter box, choose either the Tab (*.TSV) or Comma (*.CSV) method for separating the data columns in the file.

3.	Select or type a path name, with the appropriate extension for the column-delimiter, for the file that you want to export.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

4.	Choose the OK button.

5.	Start the spreadsheet or database program.

You can now open and work with your Performance Monitor file.


Selecting an Existing Log File
Monitoring Performance	11 of 16

Selecting an Existing Log File

Before you can use an existing performance log file, you must use this procedure to select and open it.

To select an existing log file

1.	From the Options menu in Performance Monitor, choose Data From.

2.	In the Data Values Displayed From box, select Log File.

3.	In the Log File box, type the log's filename. Or click the gray button at the end of the box to display the Open Input Log File dialog box from which you can select a file.

To select a file that is on another computer, choose the Network button to display the Network Connections dialog box and then select a file.

4.	Choose the OK button.

This also activates the Time Window command in the Edit menu.


Changing the Time Window of Logged Information
Monitoring Performance	12 of 16

Changing the Time Window of Logged Information

You can move around in a log file (that is, change the start and stop times) by using the Time Window command from the view's Edit menu. The times selected will apply to all four views.

Changing the times is easiest to do in the Chart window. Add your selections to the chart first. You can then move the Input Log File Timeframe dialog box out of the way so you can see the gray vertical lines move on the chart as you move the ends of the slide bar.

To change the time window for the logged information

1.	From the Edit menu, choose Time Window.

2.	In the Input Log File Timeframe dialog box, use one or a combination of both of the following methods to specify how much information you want to display.

To change the starting and stopping points to be used, drag the corresponding end of the time interval slide bar. Or use the arrow keys or SHIFT+ARROW keys to move either end.

Notice that in charting, as you drag the ends of the slide bar, you are also moving two gray vertical lines on the chart.

To use bookmarks as starting or stopping points, select the appropriate bookmark and choose either the Set As Start button or the Set As Stop button.

3.	Choose the OK button.

The screen display changes to reflect the selected time frame.


Charting Input Log Files
Monitoring Performance	13 of 16

Charting Input Log Files

Use this procedure to see a graphical view of an existing log file by opening it in Chart view.

To chart an input log file

1.	While in Chart view, from the Options menu, choose Data From.

2.	Select a log file name from either your own computer or another one on the network.

3.	From the Edit menu, choose any of the following commands:

Add To Chart, to choose which counters from which computers to chart.

Edit Chart Line, to change any of the selection settings.

Delete From Chart, to remove any counters that are not interesting or needed.

Time Window, to change the displayed starting and stopping points.

4.	From the Options menu, choose Chart to hide or display any items, change the vertical maximum, or change from a graph format to a histogram.

5.	From the File menu, choose any of the following commands:

Save Chart Settings As, to update changes made to the current chart settings file or to create a new file for these setting selections.

Export Chart, to export the data from the displayed chart to a spreadsheet or database program.


Setting Alerts on Input Log Files
Monitoring Performance	14 of 16

Setting Alerts on Input Log Files

Use this procedure to take an existing log file and set alerts in the Alert Log to see where values exceeded or went below various alert values.

To set alerts on an input log file

1.	While in Alert view, from the Options menu, choose Data From.

2.	Select a log file name from either your own computer or another one on the network.

3.	From the Edit menu, choose any of the following commands:

Add To Alert, to choose which counters from which computers to relog with alerts.

Edit Alert Entry, to change any of the selection settings.

Delete Alert, to remove any counters that are not interesting or needed.

Time Window, to change the displayed starting and stopping points.

4.	From the Options menu, choose Alert to select the update-time interval.

5.	From the File menu, choose any of the following commands:

Save Alert Settings As, to update changes made to the current alert settings file or to create a new file for these setting selections.

Export Alert, to export the data from the alert log to a spreadsheet or database program.


Relogging Input Log Files
Monitoring Performance	15 of 16

Relogging Input Log Files

By changing certain options when relogging, you can significantly condense large log files. You can relog with a longer time interval either all or only selected objects in an existing log file. You can also change the start and stop times and relog only the data within that time frame.

When you direct the output to an existing log file, that output is appended to the end of the file, thus creating a single, smaller archive file.

To relog an input log file

1.	While in Log view, from the Options menu, choose Data From.

2.	Select a log file name from either your own computer or another one on the network.

3.	From the Edit menu, choose any of the following commands:

Add To Log, to choose which objects from which computers to relog.

Delete From Log, to remove any objects that are not needed.

Time Window, to change the displayed starting and stopping points.

4.	From the Options menu, choose Log to change the log file name, the logging interval, and to start relogging.

If you select an existing log file for output, the data will be appended. To enable the Relog File button, you must first provide a filename and select some objects to log.

5.	From the File menu, choose any of the following commands:

Save Log Settings As, to update changes made to the current log settings file or to create a new file for these setting selections.

Export Log, to export the log setting to a spreadsheet or database program.


Creating Reports Based On Input Log Files
Monitoring Performance	16 of 16

Creating Reports Based On Input Log Files

You can create simple reports from existing log files the same as you would with current activity values. However, here the values shown represent the counter values over the selected time frame.

To create a report from an input log file

1.	While in Report view, from the Options menu, choose Data From.

2.	Select a log file name from either your own computer or another one on the network.

3.	From the Edit menu, choose any of the following commands:

Add To Report, to choose which counters from which computers to display in the report.

Delete From Report, to remove any counters that are not interesting or needed.

Time Window, to change the displayed starting and stopping points.

4.	From the File menu, choose any of the following commands:

Save Report Settings As, to update changes made to the current report settings file or to create a new file for these setting selections.

Export Report, to export the data from the report to a spreadsheet or database program.