MCSE TUTORIAL

Workgroup এ  print share user সংখ্যা কিভাবে বাড়ানো যায় -



আমরা জানি যে একটি Workgroup এ ১০ জন user এর  বেশি এক সাথে প্রিন্টার share করতে পারে না। আমরা এখন দেখব কিভাবে ১০ জনের অধিক user কে Workgroup এ প্রিন্টার share দেওয়া যায়।



Run এ ‍গিয়ে  gpedit.msc লিখি তারপর নিচের ধাপগুলো অনুসরন করি-

Computer Config -> Windows Settings -> Security Settings -> Local Policies -> Security Option


Interactive Logon এ ৫০ করে দিক।


ব্যাস এবার ৫০ জন user একসাথে প্রিন্টার এ প্রিন্ট করতে পারবে-



USER Profile error  দেখালে কি করবেন

The User profile service service failed the log on.
user profile cannot loaded.


এই Message এর জন্য যা করতে হবে-


১।প্রথমে POWER বাটনে চাপ দেই কীবোর্ড থেকে F8 বাটনে চাপ দেই  তারপর এরো কী দিয়ে Safe mode with networking  এ যাই কীবোর্ড থেকে ENTER চাপি।

২।কম্পউটার POWER ON হয়ে গেলে   START থেকে SEARCH এ REGEDIT লিখি REGEDIT  এ  RIGHT বাটনে ক্লিক করে RUN AS ADMINISTRATOR  ক্লিক করি।

৩।তারপর H-KEY LOCAL MACHINE থেকে SOFTWARE এ যাই MICROSOFT থেকে WINDOWS NT এ যাই  CURRENT VERSION  থেকে PROFILE LISTএ যাই PROFILE LISTএর যে ফোল্ডারের শেষে .BAKআছে তাকে   RENAME করি .BAK থেকে প্রথমে K বাদ দেই এবং উপরের ফোল্ডারে  RENAME করে  .BAK ADD করি ENTER চাপি নিচের ফোল্ডার থেকে .BA অংশটুকু বাদ দেই।
৪। উপরের ফোল্ডারে ক্লিক করি  তারপর STATE  ডাবল ক্লিক করি VALUE DATA বক্সে 0 করি। এর পর  REF COUNT এ যাই REF COUNT  ডাবল ক্লিক করি VALUE DATA বক্সে 0 করি।



ব্যাস এবার কমিপউটার RESTART করি দেখুন কোন নেই ---- 

OU - container user and computer

sysdm.cpl for my computer properties

Hyper-v Enable in windows 10:

Control panel-> add remove program-> turn windows feature on or off-> Enable hyper-V->ok have to restart pc

Add a OS in hyper-V:
Create Virtual Switch:
 Virtual Switch manager-> 1. external- connect with other virtual machine and all other external 2. internal-> virtual machine and hard machine not external communication 3. privet -> only virtual. we choice internal then  click create virtual switch-> give a virtual switch name-> apply ->ok
Add os:
right click on hyper v manager desktop icon then select- new-virtual machine- next- give a virtual machine name- check store the virtual machine in different location-> select generation 2 gen 1 is before 2008 -> in connection ta  select virtual switch-> create a virtual disk field select your defined space where you want to store all os and data->

After install create a checkpoint/take a snapshot:
first we have shutdown server then have to take checkpoint-> right click on server and select checkpoint-
if we need restore before then we need to revert- right click on server and select revert

Introduction  win ser2016 interface:
Server manager properties- on/off server manager dash board  while login-

Inbound and outbound rules in server2016:

  if connect similar lan but can’t ping then you need check to firewall rules-  from server manager-> tools-> windows firewall  with advanced security-> then -> file and print sharing echo request icmpv4 enable- the right click on this ruls ->properties->advanced -> then select who can ping


ADDC in 2016:

Server manager->manage-> add roles and feature->next->next->next->select Active directory domain service->add feature-> and also select dns ->next->next->install-> promote this server to a domain controller->
add a new forest
Add a domain name->
Forest functional level-it’s can be 2008 to higher-> it’s mens that your all domain functional level 2008  to 2016
Domain functional level-
Next->
DNS Configure:

Tools->dns->Create Revers lookup zone - right click on reverse lookup zone- new zone ->next -> Primary zone -> select to all dns server in this domain worshi.local -> next -> ipv4 revers lookup zone->next -> Network ID ->next -> do not allow dynamic update->next-> finish.
click on froward lookup zone -> click on worshiworld host A [ worshiworld is computername]
double click on it and select  -update associate pointer ptr record -OK

Have to add user from user folder in domain- active directory user and group
Login way from user or client-
199665
Duronto\199665

Organizational unit-
Right click on dc ->new->ou->

Share a folder group wise:

wds- windows deployment service for install os or soft from server. we can deploy os through the network.from iso image.

we need dhcp server for wds server:
configure dhcp server for wds- ipv4-scope options-> in scope option select  boot server host name and in string value tabe add wds server name before that ping the name of server copy the name of server like win2k19-wds.victorinfosol.local and pest the string field
then select boot file file name and check it string filed write that  boot\x64\wdsnbp.com or .cpm
tools -> windows deployment services -> server-right click on server name and select configure server -> next -> integrated with active directory -> next -> give the folder path remove c and write drive latter ->next -> respond to all client computer (known and unknown) don’t need to check naother blank field -> next -> add image to the server now -> finish -> give the iso file path or dvd path -> give a name -> next -> next -> finish


wds and pxe boot- bootable server:
1.       configure ip address and rename server & join server in domain.
2.       install windows deployment service (WDS) role from server manager.
3.       configure wds and add install boot images.
4.       verify wds installation.
5.       deploy client machine by using wds server.

frist we need to join addc from the wds server.
Manage-> add role and feature->next->select wds services->add feature->next->....



WSUS-Windows Server Update Services where we download update, patches-
manage -> add role and features -> next-> check windows server update services ->next -> select web server (IIs) ->next .......... -> check store update and give the path -> make a folder in d drive wsus-data and past the path -> install
after installation is complete tools -> windows server update service -> next -> next ->next........ -> start connecting ->after sync completed –next......... sync automatically 1pm evryday->next -> check begain initial synchronization ->next-> finish
updates -> all update ->approval –unapproved status- any -> referesh and select all update and approved to install   
tools -> group policy management -> group policy object -> right click new give name wsus -> right click on wsus and select edit -> computer configuration -> polices -> Administrative template -> windown component -> windows update ->  specify intranet microsoft update service location -> double click -> Enable -> in frist field http://computername.victorinfosol.local:8530 next field 2nd field is same -> apply – ok  -> automatic update detection frequency – double click ->enable-> interval hour 1 -> apply – ok
turn off auto-restart for updates during active hours – double click -> enable 6am-9pm ->apply ok
configure automatic update- enable -> configure automatic update ->auto download and schedule the install -> check install during automatic maintenance and check also install update other microsoft product also -> apply ok
link the creation- right on server folder (where all server is) -> link a existing gpo -> select wsus -> ok

Hyper-V Backup in win server 2019:
Tools-> hyper-v


Manual:IP/DHCP Relay

Description: Version.png
Applies to RouterOS:v3, v4 +

Contents

 [hide] 
·         1Summary
·         2Properties
·         3Example setup

Summary

DHCP Relay is just a proxy that is able to receive a DHCP request and resend it to the real DHCP server.

Properties

Sub-menu: /ip dhcp-relay

Property
Description
add-relay-info (yes | no; Default: no)
Adds DHCP relay agent information if enabled according to RFC 3046. Agent Circuit ID Sub-option contains mac address of an interface, Agent Remote ID Sub-option contains MAC address of the client from which request was received.
delay-threshold (time | none; Default: none)
If secs field in DHCP packet is smaller than delay-threshold, then this packet is ignored
dhcp-server (string; Default: )
List of DHCP servers' IP addresses which should the DHCP requests be forwarded to
interface (string; Default: )
Interface name the DHCP relay will be working on.
local-address (IP; Default: 0.0.0.0)
The unique IP address of this DHCP relay needed for DHCP server to distinguish relays. If set to 0.0.0.0 - the IP address will be chosen automatically
relay-info-remote-id (string; Default: )
specified string will be used to construct Option 82 instead of client's MAC address. Option 82 consist of: interface from which packets was received + client mac address or relay-info-remote-id
name (string; Default: )
Descriptive name for the relay

DHCP relay does not choose the particular DHCP server in the dhcp-server list, it just send the incoming request to all the listed servers.

Example setup

Let us consider that you have several IP networks 'behind' other routers, but you want to keep all DHCP servers on a single router. To do this, you need a DHCP relay on your network which relies DHCP requests from clients to DHCP server.
This example will show you how to configure a DHCP server and a DHCP relay which serve 2 IP networks - 192.168.1.0/24 and 192.168.2.0/24 that are behind a router DHCP-Relay.
Description: Dhcp-relay.png
IP Address Configuration
IP addresses of DHCP-Server:
[admin@DHCP-Server] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE
 0   192.168.0.1/24     192.168.0.0     192.168.0.255   To-DHCP-Relay
 1   10.1.0.2/24    10.1.0.0       10.1.0.255     Public
[admin@DHCP-Server] ip address>
IP addresses of DHCP-Relay:
[admin@DHCP-Relay] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE
 0   192.168.0.2/24     192.168.0.0     192.168.0.255   To-DHCP-Server
 1   192.168.1.1/24     192.168.1.0     192.168.1.255   Local1
 2   192.168.2.1/24     192.168.2.0     192.168.2.255   Local2
[admin@DHCP-Relay] ip address>
DHCP Server Setup
To setup 2 DHCP Servers on DHCP-Server router add 2 pools. For networks 192.168.1.0/24 and 192.168.2.0:
/ip pool add name=Local1-Pool ranges=192.168.1.11-192.168.1.100
/ip pool add name=Local1-Pool ranges=192.168.2.11-192.168.2.100
[admin@DHCP-Server] ip pool> print
 # NAME                                         RANGES
 0 Local1-Pool                                  192.168.1.11-192.168.1.100
 1 Local2-Pool                                  192.168.2.11-192.168.2.100
[admin@DHCP-Server] ip pool>
Create DHCP Servers:
/ip dhcp-server add interface=To-DHCP-Relay relay=192.168.1.1 \
   address-pool=Local1-Pool name=DHCP-1 disabled=no
/ip dhcp-server add interface=To-DHCP-Relay relay=192.168.2.1 \
   address-pool=Local2-Pool name=DHCP-2 disabled=no
[admin@DHCP-Server] ip dhcp-server> print
Flags: X - disabled, I - invalid
 #   NAME         INTERFACE     RELAY           ADDRESS-POOL LEASE-TIME ADD-ARP
 0   DHCP-1       To-DHCP-Relay 192.168.1.1     Local1-Pool  3d00:00:00
 1   DHCP-2       To-DHCP-Relay 192.168.2.1     Local2-Pool  3d00:00:00
[admin@DHCP-Server] ip dhcp-server>
Configure respective networks:
/ip dhcp-server network add address=192.168.1.0/24 gateway=192.168.1.1 \
   dns-server=159.148.60.20
/ip dhcp-server network add address=192.168.2.0/24 gateway=192.168.2.1 \
   dns-server 159.148.60.20
[admin@DHCP-Server] ip dhcp-server network> print
 # ADDRESS            GATEWAY         DNS-SERVER      WINS-SERVER     DOMAIN
 0 192.168.1.0/24     192.168.1.1     159.148.60.20
 1 192.168.2.0/24     192.168.2.1     159.148.60.20
[admin@DHCP-Server] ip dhcp-server network>
DHCP Relay Config
Configuration of DHCP-Server is done. Now let's configure DHCP-Relay:
/ip dhcp-relay add name=Local1-Relay interface=Local1 \
   dhcp-server=192.168.0.1 local-address=192.168.1.1 disabled=no
/ip dhcp-relay add name=Local2-Relay interface=Local2 \
   dhcp-server=192.168.0.1 local-address=192.168.2.1 disabled=no
[admin@DHCP-Relay] ip dhcp-relay> print
Flags: X - disabled, I - invalid
 #   NAME                        INTERFACE      DHCP-SERVER     LOCAL-ADDRESS
 0   Local1-Relay                Local1         192.168.0.1     192.168.1.1
 1   Local2-Relay                Local2         192.168.0.1     192.168.2.1
[admin@DHCP-Relay] ip dhcp-relay>

[ 
Top | Back to Content ]



wds- windows deployment service for install os or soft from server. we can deploy os through the network.from iso image.

we need dhcp server for wds server:
configure dhcp server for wds- ipv4-scope options-> in scope option select  boot server host name and in string value tabe add wds server name before that ping the name of server copy the name of server like win2k19-wds.victorinfosol.local and pest the string field
then select boot file file name and check it string filed write that  boot\x64\wdsnbp.com or .cpm
tools -> windows deployment services -> server-right click on server name and select configure server -> next -> integrated with active directory -> next -> give the folder path remove c and write drive latter ->next -> respond to all client computer (known and unknown) don’t need to check naother blank field -> next -> add image to the server now -> finish -> give the iso file path or dvd path -> give a name -> next -> next -> finish


wds and pxe boot- bootable server:
1.       configure ip address and rename server & join server in domain.
2.       install windows deployment service (WDS) role from server manager.
3.       configure wds and add install boot images.
4.       verify wds installation.
5.       deploy client machine by using wds server.

frist we need to join addc from the wds server.
Manage-> add role and feature->next->select wds services->add feature->next->....



WSUS-Windows Server Update Services where we download update, patches-
manage -> add role and features -> next-> check windows server update services ->next -> select web server (IIs) ->next .......... -> check store update and give the path -> make a folder in d drive wsus-data and past the path -> install
after installation is complete tools -> windows server update service -> next -> next ->next........ -> start connecting ->after sync completed –next......... sync automatically 1pm evryday->next -> check begain initial synchronization ->next-> finish
updates -> all update ->approval –unapproved status- any -> referesh and select all update and approved to install    
tools -> group policy management -> group policy object -> right click new give name wsus -> right click on wsus and select edit -> computer configuration -> polices -> Administrative template -> windown component -> windows update ->  specify intranet microsoft update service location -> double click -> Enable -> in frist field http://computername.victorinfosol.local:8530 next field 2nd field is same -> apply – ok  -> automatic update detection frequency – double click ->enable-> interval hour 1 -> apply – ok
turn off auto-restart for updates during active hours – double click -> enable 6am-9pm ->apply ok
configure automatic update- enable -> configure automatic update ->auto download and schedule the install -> check install during automatic maintenance and check also install update other microsoft product also -> apply ok
link the creation- right on server folder (where all server is) -> link a existing gpo -> select wsus -> ok

Hyper-V Backup in win server 2019:
Tools-> hyper-v manager to see the installed vm
in the main machine ->disk managemant ( diskmgmt.msc) add another disk for backup thos vm no need change hdd.
Install win server backup-
manage ->add roles and feature ->next......frist one then next ->windows server backup ->next -> install-close
Tools-> windows server backup -> local backup ->backup schedule ->next ->custom ->next-> select item for backup -> hyper-v check ->ok ->next .... ->show all available disk -> select only backup hdd-> select again ->next -> yes -> finish
Backup once -> backup ->close
we can also see this schedule in ( task schedule)
Restore-
local backup-> recover ->this server -> next -> recover item -> next -> hyper –v next ..............

map network drive in active directory user by GPO:
dsa.msc for enter active directory users and computer
gpedit.msc/gpmc.msc ->right click on domain name and select Create aGPO in this domain and link it hare -> give a name like map_Network -> right click on map_Network and select edit-> user configuration –windows settings – Drives Maps – Right click on blank –new –Mapped Drive -> Action-create -> Location – file path –select show the drive and show all drives -> right click on drive group and select link an existing GPO
gpupdate /force for update applied gpo
Deploying printer with active directory:
Control panel –system and security – Administrative tools-> print management-> in print management colsol ->print servers -> Printers add all printers one by one with the ou name ->
gpedit.msc -> users or domain name right click select create gpo in this domain -> give a printer name that like sales 1 printer -> in print management right on this printer and select deploy with group policy -> click on brows -> users domain and select printer name ok -> check the users that gpo applies (per users) ->add ->
another way-
edit gpo sales one printer -> right on it and edit -> users configuration- control panel setting – printers -> right click on printers blank screen -> new share printer -> share path ->and select common – item level targeting -> tergating – new item ->



 active directory site and subnets:-
Tools-> Active directory site and services-> right click on site then select new site -> name mel-site -> another syd-site -> use default site link then ok -> right click on subnet and select new subnets -> in prefix 192.168.14.128/24 (we have give full prefix like 192.168.1.0/24) create all subnets all select thos site and ok ->
for site link-  right click on ip and select site link ->
for site link bridge – right click on ip then select site link bridge-
compmgmt.msc for computer manage
Active directory backup-
install windows server backup-> Manage – add  rules and feature –next...... windows server backup -> next –install ->
Tools – windows server backup -> local backup –backup schedule ->next -> full server ->next ->..........finish
Backup once -> backup->
Restore-    reebot in safe mood from msconfig edit
and restore- system stat-recover

after recover msconfig boot uncheck safe boot
gpmc.msc – for group policy management

Deny all removable media:
gpmc.msc-> right click on group policy object then select new ->give a name like deny_all_removable_device ->ok-> right click on it and select edit->
Right click the policy and click Edit.  This will open Group Policy Management Editor. Navigate to Computer ConfigurationPoliciesAdministrative TemplatesSystemRemovable Storage Access. This is the place where you find settings for Removable Storage Access devices. There are lot of USB settings for multiple devices, however we will configure a setting All Removable Storage classes: Deny all access.
enable it
apply ok
in gpmc right click on ou and then select link and existing gpo


Folder Redirection :

From Server Manager-> file and storage Services-> Shares -. Tasks-new share -> smb share quick -> type a custom path- brows and select folder [ec no need to share before] -> share name add $ sign end of file name for hidden share -> enable access-based en and allow caching of share select both -> customized permission ->disable inheritance and delete unwanted group -> type allow applies to –this folder only  --read & execute ,list folder content, read check -> create

gpmc.msc ->group policy object right click on it then new ->create a gpo-> edit ->user configuration -> windows settings -> Folder redirection ->





1 comment: