Today we finished up the XP Pro book (can you even believe it?), by covering the last three chapters — 14, 15 and 16.
Chapter 14 was over the security settings inside of Windows XP. It’s important to know that there are security settings that are applied to the domain, and filter down onto our domain-joined machine (assuming we’re working in a corporate environment). There are also security settings that can just be configured on the local machine. We’ll learn in NSA 263 that security settings (or any policy settings in general) that are applied to the local machine will get overriden by any policy applied to a site, domain or organizational unit (OU) that might exist in the server infrastructure.
ANYWAY.
We talked about those security settings that are applied locally. We access these settings by opening the Local Security Setting applet in Control Panel. Once open, we have dozens and dozens of possible settings that we can configure, finely tuning our Windows XP machine.
Now, this is all well and good, but I ask you to return to the same scenario I keep bringing you to: imagine that you have a couple hundred machiens to configure instead of just one. And let’s say you had 50 changes to the local policy you had to make on each machine. All of a sudden, the amount of administrative time you’ll be spending configuring these machines goes up and the amount of time you’ll spend on the golf course goes down. Not good. Luckily for us, we have security templates which allow us to create presets to flash-configure our computers.
Windows comes with a few of these templates. It’ll be important to know (roughly) what each of these templates do and why they exist. Most are obvious, although some (setupsec) aren’t necessarily clear.
The next chapter we covered dealt with a topic we’ve already covered somewhat, and will continue to cover over the next several classes — it’s that important: backup. Arguably the most important piece of your network is it’s data, and having your data backed up is crucial in the event of your hard drive crashing. There are three basic backup vehicles included with Windows XP:
- NTBACKUP
- Volume Shadow Copy
- Automated System Recovery (ASR)
NTBACKUP is the utility we use to copy our data. We launch it by typing in NTBACKUP into the run command under the Start button and have the option of running Normal, Copy, Daily, Incremental or Differential-style backups. Since we hammer in the differences in other classes, I’m not going to do that here.
Volume SHadow Copy was a feature new to Windows XP. It’s interesting, becuase it addresses a couple of problems that traditional backup scenarios presented us with: users restoring their own data and data that was currently in use not getting backed up. Volume Shadow Copy solves both of those problems. When enabled, users are able to restore one of a few “old” versions of a file they may have deleted or otherwise corrupted. Secondly, if data was being used while the backup utility was being run (or maybe it was simply left open by a user — how annoying is that?), backup programs would simply skip the unavailable file. Now, the backup utility makes what’s called a “best effort” backup by backing up the second-to-most-recent file. It’s not a 100% fix, but it’s definitely better than skipping the file altogether.
Last but not least, we covered Chapter 16 — dealing with Performance Management with Windows XP. The main tool we looked at today was Performance Monitor, which allowed us to create performance logs, configure alerts and watch just about any aspect of our computers performance in real time — by histograph or simply by hard numbers. It’s actually a cool tool for the price (free!)
And that does it. I do want to remind you that next week, we have a midterm exam scheduled, which will effectively be a “final” exam, over the sixteen chapters we’ve covered so. Make sure that any concepts which are confusing to y0u get cleared up in your mind before next week!
Homework:
- Take Home Exam #5 – download it here.
- Study for the midterm (chapters 1-16) — it’s next week!!!