Blogger Notes

Local Security Policy is a part of Local Policy, it focuses on Security Policies in Windows .

- Start> type Administrative Tools>  Local Security Policy
or
- Start> Run> type secpol.msc 

Let's watch the video :

Part 1 :

Part 2 :

Policy is a rule that we apply to a computer (User and Group, also) and tell them "Do this, not do that"
For example, I don't want user A access drive C, so I set a rule to suit my need.

Local Policy, as I said before "Local" means these rules will affect locally, only to a computer which you configured .

To use Policy, we use a tool call Microsoft Management Control :
- Start > Run > type MMC (not case-sensitive)
- File > Add/Remove Snap-ins ...

Now, let's watch my video , it's more useful than words ^^ :




So, "Group Policy" Configuration file is hosted in C:/Windows/system32

Thanks for visiting my Blog, see ya later !

- "Local" means if user A has an account on computer 1, he cannot use it to access computer 2 ... His account just only use for computer 1 .
- In a company, there many people, they do different job, most of them concern to computer . User A access computer 1 and write his report, user B also use computer 1 to prepare for her project . If both of them use the "same place" on computer 1, probably they can affect their job (A may delete B's date, or change it ...if he hates her - maybe) .

There is a solution that they use different computers, but it's not cost-effective .
So "User Account" has been created to save our money. Now, user A can be represented by an object called uA and user B -> uB . They have "different account, different place" on the same computer .

Problem Solved !

- By doing this, Administrator can easily manage users, by give them some specific rights - can & cannot do some things . For example : Admin give user A the right to access web browser, but he cannot view any pictures on Website .

LAB : I use Windows Server 2008 Enterprise , to create user, delete user ... blah blah, let's see :





In a company , there're 10 users do the same job, and have the same rights .
It's unreasonable when Admin need to do the job : "give the rights to each of them" : 10 times.
So, 10 users will join to a Group, what Admin needs to do is just give the rights to that Group .

Time-effective !

 LAB : I will create a group, join user to that group ... check it out :

First of all, let's talk a little bit about TCP/IP model .
When we talk to each other, we use the same language so everyone can understand .
If computer A wants to send file to computer B, both of them need to use the same language called "Protocol" .

TCP /IP is the most popular stack of Protocols our computers use nowaday to communicate .
TCP/ IP actually is a set of many protocols (for example when computer wants to send e-mail, it uses a protocol named SMTP, when it sends file - it uses FTP ....),  its name is represented by 2 protocols : TCP & IP . So hence the name TCP/IP .
- Every computer has to have at least 1 IP address to communicate with others . Just like my house has a address so some girls can send me some gifts .
- When we talk about IP address, we often talk about IP v4 (v = Version) : It comprises 32 bits (1 & 0) , and divides to 4 portions (called Octet ) separated by 3 dots (.) :
For example : 10000000.11000000.10000001.00000001 
- It's kind of hard to remember so people write it in decimal number : 128.192.129.1
(* You need to know how to convert from Binary to Decimal Number - just search on Google)

- IP addresses also have 2 parts : Host ID and Net ID , just like your house's address has Street number and House number .


2) IP address class :

• Class A : Net ID owns 8 bits, Host ID owns 24 bits .
• Class B : ------------- 16 -------------------16 .
• Class C : ------------- 24 -------------------8 .
• Class D & E : are used for research & multicast .

• X from 1     -> 126 : This IP belongs to class A
• X from 128 -> 191 : This IP belongs to class B
• X from 192 -> 223 : This IP belongs to class C
• X from 224 -> 239 : This IP belongs to class D
• X from 240 -> 255 : This IP belongs to class E

Alright, before starting to learn specific skills about Windows Server . You need some basic understandings in  Networking fundamental.

If you've been through this before, you can skip it, but make sure that you have a glance to know what it is .


Network Topology is kind of shape of Network in your house, your office or your school .

As its name says : all computers connect to a "Ring". If the ring is broken somewhere,  computer cannot communicate with each other .
Just one computer can send data at a time .
Data are sent one-way (clockwise or counter clockwise)
Use method called "Token Passing" - it means if a computer want to send data, it needs a token (like a priority) , taken from other computers .
So, data transfer speed is slow ~ 10 Mbps
=> This Topology is oblivion .



Computers connect to the Bus by T-connector .
If computer 1 want to send data to computer 4, data must be send to computer 2, computer 3 ... => Not assure for security .
If 2 computers are sending data simultaneously - bandwidth is divided by 2 and  so forth .
This topology is easy to expand (just connect a computer to the Bus)
Because of slow speed, it is no longer used in modern Network.


There is always a central device (called HUB - in this figure) .
Every computer becomes a member by connecting to central device .
Speed : 100 Mbps
Easy to deploy and expand .

=> The most popular Network topology is used nowaday .

There're also many topologies, but we just focus on the main ones ; you can find out more about them by doing some Google searches.



- It's a part of your computer (behind a CPU-Case)
- Help computers to communicate to each other, and connect to central device - also .
- To recognise each other, NIC has something called : Address . Imagine that NIC is a house - if I need to send email to you - I need your House's address, right ?
- NIC has 2 types of address :
+  Physical address (MAC address) : Producer provides and cannot be changed - It's unique .
+ Logical address (Netowork address - IP address) : can be changed by administrator .



Today,  Hub is no longer used; instead , we use Switch which provides more efficient functions and enhance speed of transfer, also .

Central devices are used in Star Topology as I wrote in previous section.




2 types of cable :
- UTP : Unshielded Twisted Pair . Cheap.


- STP : Shielded Twisted  Pair . Cover by copper to avoid interferences . Expensive 3 times when compare to UTP cable .