OReilly windows server hacks mar 2004 ISBN 0596006470

•
•
•
•
•
•


TableofContents
Index
Reviews
ReaderReviews
Errata
Academic

WindowsServerHacks
ByMitchTulloch

Publisher :O'Reilly
PubDate :March2004
ISBN :0-596-00647-0
Pages :384


Thetools,orhacksinthisbookreveal
techniquesthatgowellbeyondbasic
managementtasksfoundinmosthandbooks.
Hacksrangefromthosethatdealwith
generaladministrationtomoreesoterichacks
intheareasofnetworkdeployment,patch

management,performance,security,and
backupandrecovery.Nomatterwhich
WindowsServeryouuse--NT,IIS,2000,or


2003--WindowsServerHackswillputthe
knowledgeandexpertiseofveteransystem
administratorstoworkforyou.



•
•
•
•
•
•


TableofContents
Index
Reviews
ReaderReviews
Errata
Academic

WindowsServerHacks
ByMitchTulloch

Publisher :O'Reilly

PubDate :March2004
ISBN :0-596-00647-0
Pages :384



Copyright

Credits
AbouttheAuthor

Contributors



Acknowledgments


Foreword:I'maSci-Fifreak

Preface
WhyWindowsServerHacks?

GettingandUsingtheScripts




HowtoUseThisBook

ConventionsUsedinThisBook



HowtoContactUs

HowThisBookIsOrganized
UsingCodeExamples




GotaHack?


Chapter1.GeneralAdministration
Hacks#1-16

Section1.UseRunAstoPerformAdministrativeTasks




Section2.DragandDroptotheRunMenu

Section4.AutomaticallyLogOnAfterBooting




Section6.ShutDownaRemoteComputer




Section8.ExecuteaCommandonEachComputerinaDomain




Section10.ExtendGroupPolicy




Section12.GetEventLogInformation




Section14.DesktopChecker

Section16.myITforum.com

Section3.FindandReplaceRegistryKeysfromaCommandLine
Section5.WaitforandOptionallyTerminateaProcess
Section7.RenameMappedDrives
Section9.Add,Remove,orRetrieveEnvironmentVariables
Section11.DisableEFS
Section13.ShortcuttoRemoteAssistance
Section15.TopFiveTools


Chapter2.ActiveDirectory
Hacks#17-24

Section17.RetrievetheListofOldDomainComputerAccounts




Section18.AutomateCreationofOUStructure




Section20.DelegateControlofanOUtoaUser




Section22.DisplayActiveDirectoryInformation

Section24.RestoretheActiveDirectoryIconinWindowsXP

Section19.ModifyAllObjectsintheOU
Section21.SendOUInformationinActiveDirectorytoanHTMLPage
Section23.StoreandDisplayContactInformationinActiveDirectory


Chapter3.UserManagement
Hacks#25-35

Section25.SearchforDomainUsers




Section26.ManageUserAccountsinActiveDirectory




Section28.GetUserAccountInformation




Section30.EnumerateGroupMembershiptoaCSVFile

Section32.CheckGroupMembershipandMapDrivesinaLogonScript

Section27.GetaListofDisabledAccounts
Section29.CheckforPasswordsthatNeverExpire
Section31.ModifyUserPropertiesforAllUsersinaParticularOU





Section33.ScriptCreationofaUser'sHomeDirectoryandPermissions



Section35.PutaLogoffIconontheDesktop

Section34.PreventOrdinaryUsersfromCreatingLocalAccounts


Chapter4.NetworkingServices
Hacks#36-47

Section36.ManageServicesonRemoteMachines




Section37.SimplifyDNSAgingandScavenging

Section39.ManuallyRecreateaDamagedWINSDatabase




Section41.EnsureDHCPServerAvailability




Section43.ChangefromStaticIPtoDHCP




Section45.UsenetshtoChangeConfigurationSettings



Section47.ImplementWindows2000NetworkLoadBalancing

Section38.TroubleshootDNS
Section40.ChangeWINSforAllEnabledAdapters
Section42.ChangeaNetworkAdapter'sIPInfo
Section44.ReleaseandRenewIPAddresses
Section46.RemoveOrphanedNetworkCards

Chapter5.FileandPrint
Hacks#48-53

Section48.MapNetworkDrives




Section49.DetermineWhoHasAParticularFileOpenontheNetwork




Section51.AutomatePrinterManagement



Section53.AddPrintersBasedonNameofComputer

Section50.DisplayaDirectoryTree
Section52.SettheDefaultPrinterBasedonLocation


Chapter6.IIS
Hacks#54-61

Section54.BackUptheMetabase

Section55.RestoretheMetabase




Section57.MetabaseHacks




Section59.IISAdministrationScripts



Section61.IISFAQ

Section56.MaptheMetabase
Section58.HidetheMetabase
Section60.RunOtherWebServers


Chapter7.Deployment
Hacks#62-68

Section62.GetStartedwithRIS

Section63.CustomizeRIS





Section64.TuneRIS




Section66.RemoveWindowsComponentsfromtheCommandLine



Section68.EasilyCreateaNetworkBootDisk

Section65.CustomizeSysPrep
Section67.UnattendedInstallationofWindowsComponents


Chapter8.Security
Hacks#69-78

Section69.FundamentalsofaVirus-FreeNetwork

Section70.AntivirusFAQ




Section72.GetaListofLocalAdministrators




Section74.GrantAdministrativeAccesstoaDomainController




Section76.FindComputerswithAutomaticlogonEnabled



Section78.MicrosoftSecurityTools

Section71.RenametheAdministratorandGuestAccounts
Section73.FindAllComputersthatAreRunningaService
Section75.SecureBackups
Section77.SecurityFAQ


Chapter9.PatchManagement
Hacks#79-89

Section79.BestPracticesforPatchManagement




Section80.BeginnersGuidetoEnterprisePatchManagement




Section82.EnumerateInstalledHotfixes




Section84.WindowsUpdateFAQ




Section86.UseAutomaticUpdatesEffectively




Section88.AutomaticUpdatesFAQ

Section81.Patch-ManagementFAQ
Section83.ApplyPatchesintheCorrectOrder
Section85.ObtainUpdatesviatheWindowsUpdateCatalog

Section87.UseGroupPolicytoConfigureAutomaticUpdates
Section89.SoftwareUpdateServicesFAQ


Chapter10.BackupandRecovery
Hacks#90-100

Section90.CollectDisasterRecoveryFiles




Section91.BackUpIndividualFilesfromtheCommandLine




Section93.BackUpandRestoreaCertificateAuthority




Section95.WorkwithShadowCopies

Section92.BackUpSystemStateonRemoteMachines
Section94.BackUpEFS
Section96.BackUpandCleartheEventLogs

Section97.BackUptheDFSNamespace




Section99.RecoveryRoadmap




Section98.RecoverwithAutomatedSystemRecovery
Section100.DataRecoveryofLastResort
Colophon
Index


Copyright©2004O'ReillyMedia,Inc.
PrintedintheUnitedStatesofAmerica.
PublishedbyO'ReillyMedia,Inc.,1005GravensteinHighway
North,Sebastopol,CA95472.
O'Reilly&Associatesbooksmaybepurchasedforeducational,
business,orsalespromotionaluse.Onlineeditionsarealso
availableformosttitles().Formore
information,contactourcorporate/institutionalsales
department:(800)998-9938or
NutshellHandbook,theNutshellHandbooklogo,andthe
O'ReillylogoareregisteredtrademarksofO'ReillyMedia,Inc.
TheHacksseriesdesignations,WindowsServerHacks,the

imageofasqueegee,'Hacks100Industrial-StrengthTipsand
Tricks,'andrelatedtradedressaretrademarksofO'Reilly
Media,Inc.
Manyofthedesignationsusedbymanufacturersandsellersto
distinguishtheirproductsareclaimedastrademarks.Where
thosedesignationsappearinthisbook,andO'ReillyMedia,Inc.
wasawareofatrademarkclaim,thedesignationshavebeen
printedincapsorinitialcaps.
Whileeveryprecautionhasbeentakeninthepreparationofthis
book,thepublisherandauthorsassumenoresponsibilityfor
errorsoromissions,orfordamagesresultingfromtheuseof
theinformationcontainedherein.


Credits
AbouttheAuthor
Contributors
Acknowledgments


AbouttheAuthor
MitchTullochistheauthorofoveradozencomputerbooks,
includingthreeNutshellsforO'Reilly&Associates,Inc.
(MicrosoftExchangeServerinaNutshell,Windows2000
AdministrationinaNutshell,andWindowsServer2003ina
Nutshell),twoencyclopediasforMicrosoftPress(theMicrosoft
EncyclopediaofNetworking,currentlyinitssecondedition,and
theMicrosoftEncyclopediaofSecurity),andastringoftitlesfor
systemadministratorsfromOsborne/McGraw-Hill.Mitchhas
alsowrittenfeaturearticlesforindustrymagazinessuchas

NetworkWorldandMicrosoftCertifiedProfessionalMagazine,
hasdevelopeduniversity-levelcoursesinWindowssystem
administration,andprovidestrainingandconsultinginMicrosoft
platformsandproducts.MitchisbasedinWinnipeg,Canada,
andyoucancontacthimthroughhiswebsite
().


Contributors
Thefollowingpeoplecontributedtheirhacks,writing,and
inspirationtothisbook:
DennisAbbottisacolumnistonmyITforum.com
()andhasbeenworkinginthe
hightechindustryforeightyears.Hehasworkedwith
MicrosoftSystemsManagementServersinceVersion1.1
andwithWindowsNTServersinceVersion3.51.Dennis
discoveredthepowerofMicrosoftscriptingwhilebuilding
in-housesolutionsforsoftwaredistributionthatrequired
industry-standardinfrastructureandaminimumamountof
code.Hehascodednumerousscriptsthatcombine
WindowsManagementInstrumentation,ActiveDirectory
ServiceInterfaces,andWindowsScriptingHosttocreate
simplesolutionstocomplexproblems.Hecurrentlyworks
forSchneiderNationalinGreenBay,WI,wherehebicycles
toworkthroughrain,sleet,orsnow.Previousemployers
includeDellComputersandAdvancedMicroDevices.Hecan
bereachedat
SeanAdemyisacolumnistonmyITforum.com
()andhasbeenintheIT
industryforeightyears.Heisthankfultobeluckyenough

tobeabletoturnahobbyintoacareer.Heisalifelong
residentofSt.Petersburg,FL,wherehecurrentlyresides
withhiswife,Wendy,andson,Kyle.Inhissparetime,you
canusuallyfindSeancheeringforhishometownTampaBay
Buccaneers,playingoneofhisguitars,orfishingthewaters
ofTampaBaywithWendy.YoucanreachSeanat

MichaelBrainardisacolumnistonmyITforum.com


()andhasworkedinthe
computerindustryforthepast10years.Hehasworkedin
Tennessee,Georgia,andFlorida.Duringthattimehehas
workedforcompaniessuchasEastmanChemicalCompany,
CoxCommunications,MCI,andMotorola.Hecurrentlyruns
hisownbusiness,ComputingXperts(CX)
(),intheSouthFlorida
area.Hehasspent6ofhis10yearsinthecomputer
industryadministratingSystemsManagementServer
(SMS),packageautomation,andscripting,andhespentthe
other4yearsofferingautomatedsolutionsutilizingActive
DirectoryandGroupPolicy.Inhiscurrentassignment,heis
workingasaconsultantforMortgageSystemsInternational
todesignanSMS2003hierarchyforaninternational
mortgagecompany.
ChrisCroweworksasaDatabaseAdministratorforTrimble
inChristchurch,NewZealand.HehasaMCP,MCP+I,MCSA,
andMCSE,andhehasbeenaMicrosoftMVPsince1997,
specializinginInternetInformationServer(IIS).Inearly
2000,ChrisstartedawebsitecalledIISFAQ

()asaresourcetohelphim
maintainasetofanswerstofrequentlyaskedquestionson
themicrosoft.public.inetserver.iisnewsgroupon
msnews.microsoft.com.IISFAQhassincegrowntobethe
premierindependentIISresourceontheInternet.Chriscan
bereachedviaIISFAQorviaemailat
MatthewGoedtelisacolumnistonmyITforum.com
()andisPresidentandCEOof
ITCentricInc.(),anITsolutions
andconsultingcompanythatoffersprofessionalservices
andtechnologysolutions.MatthewfoundedITCentricin
2002,withthevisionofformingaleading-edgesolutions
firm,creatinginnovativesolutionswhileensuringcost
effectiveness.PriortoITCentric,hewasSeniorSystems
ArchitectwithNationalLifeofVermont,whereheledthe


designandmigrationtoWindows2000,evaluatedand
redefinedsinglevendorsolutionfordatacenterserverand
storagesolutions,assistedwiththedesignand
implementationofaSANandenterprisebackupsolution,
andmuchmore.PriortoNationalLife,heheldaSystems
EngineerpositionatMerrillLynch,developingchangeand
configurationmanagementsolutionsandassistinginthe
developmentandsupportofaglobalWindowsNT4.0
infrastructure.Matthewhasalsoworkedasaconsultantfor
manyleadingfinancialandretailcompaniesthroughouthis
career,providingsimilarresponsibilities.
JohnGormlyisacolumnistonmyITforum.com
()andhasworkedforaleading

publicaccountingfirmforthelast15years.Heearnedhis
bachelor'sdegreeinAccountingandFinancefromthe
UniversityofCincinnati.Hebeganhiscareerasanauditor
andmadethetransitionintoITnineyearsago,whenhe
wasaskedtoheadtheITdepartmentforthefirm's
Cincinnatilocation.HeisnowaRegionalTechnology
Directorandisresponsibleforallaspectsoftechnology,
includingPCsupport,LAN/WANinfrastructure,
telecommunications,projectmanagement,training,IT
deployments,andpersonnelmanagement.Johnhaswritten
manytrainingcoursesforendusers,technicalarticlesfor
newsletters,andpresentationsspecificallyfortheIT
community.HespecializesinallMicrosoftoperatingsystems
andallversionsofMicrosoftOffice.Healsomaintains
certificationsinNovellNetware(CNE3,4,and5)andisan
A+CertifiedTechnician.JohnlivesinLebanon,OH,withhis
wife,Cynthia,andthreeyoungsonsJohn,Jacob,and
Joshua.Johncanbereachedat
HarveyHendricksisacolumnistonmyITforum.com
()andstartedworkingwith
computersasahobbythatlaterbecameanoccupation.He
boughthisfirstcomputerin1982andtaughthimselfto


writebasiclanguageprograms.Writingprogramssoonwent
frombeingahobbytoanobsession,andwhenacareer
changebecamedesirablehereturnedtocollegeafteran
18-yearhiatus.Therehebecameamemberofanational
honorsocietyandearnedadegreeinComputerSciencein
1993.HeisemployedatagreatcompanyinHouston,

Texas,wherehisresponsibilitiesincludeMicrosoftSystems
ManagementServer,NetworkAssociatesInc.TotalVirus
Defense,IBMTivoliStorageManager,MicrosoftSoftware
UpdateServer,RSASecurID,andSecurPBX.Heholdsthe
followingcertifications:TIACompA+,MicrosoftCertified
Professional,andMicrosoftCertifiedSystemsEngineer.Heis
activeinthemartialarts,holdingaseconddegreeblack
beltinTaeKwonDoandafirstdegreeblackbeltinToritejutsu,andheisamemberingoodstandingofDragon
SocietyInternational.HerideshisHarleyDavidson
motorcycleeverychancehegetsandinhissparetimealso
likesridinghisdirtbikes,scubadiving,camping,hunting,
fishing,andsnowskiing.
DonHiteisacolumnistonmyITforum.com
().Theeldestoffourchildren,
hewasborntoAmericanparentsintheArmyhospitalat
WurzburgGermanyinNovember1957.AfterlivinginBad
Kissingen,Germany,forthefirstfewyearsofhislife,the
HitefamilymovedbacktotheUnitedStateswhenDonwas
stillinkhakiarmydiapers.Educatedbytradeasa
commercialmaintenanceelectricianandholdingamaster
electrician'slicense,Donmadethecareerchangefrom
terminatingcopperconductorcabletoterminatingEthernet
cableintheearly1990s.DonlivesinRaymore,MO,withhis
wife,Ginny.Hehasason,Lee,astepdaughter,Lisa,anda
grandsonnamedBlake.
DavidJaffeisacolumnistonmyITforum.com
()andhasbeeninITforover
sixyears.Hehasworkedwithawidevarietyofapplications

specializinginsystemmanagement.Daveistheco-owner
ofSMSExpert.com(),the
largestproviderofSMSthird-partytools.
JanisKeimisacolumnistonmyITforum.com
()andisthePCTechnical
SupportSupervisorforStateStreet,amutualfunds
companyinKansasCity,MO,andhasover15yearsof
experienceincomputertechnology.AstheSMS
administratorforapproximately1,700workstations,her
responsibilitiesincludesoftwarepackaging,testing,and
deployment.Sheisalsoresponsibleforimagebuildcreation
fromstarttofinish,deploymentofnewPCs,ePO
administration,security-relatedpatchdeploymentforall
workstations,maintenanceofthecompany'sentirefirecall
passwordprocess,andmanagementofsixsupport
personnel.SheisalsocofounderoftheKansasCityRegional
SMSUserGroup(KCRSMSUG).
TimKellyisacolumnistonmyITforum.com
()andisTechnologyLeaderfor
TSYS(),theworld'slargestcreditcard
processingcompany.Timleadstheimplementationof
Microsoft.NET-basedwebservicesandapplications.He
workedforthreeyearsatMicrosoft(1998-2001)duringthe
timeoftheWindows2000rolloutandassistedmultiple
enterprisecustomerswithActiveDirectory
implementations.Hehasworkedextensivelyine-commerce
andthehighlyavailablewebapplicationsspaceduringthe
lastfiveyearsandcountsasspecialtiesIIS,MSCS,MSSQL
highavailabilityandmanagement,ActiveDirectory,and
corenetworktechnologies.Heisagraduateofthe

UniversityofIdahoandreceivedaMaster'sdegreein
BusinessfromAuburnUniversity.TimenjoyshisfamilyLynn,
Russell,andJacksonwhenhe'snotjumpingoutofperfectly
goodairplanes.Hiswebsiteis
.


ThomasLee(isChief
TechnologistatQA,theUK'slargestindependenttraining
firm,andhasworkedwithWindowssinceitwasfirst
released.HegraduatedfromCarnegieMellonUniversityand
subsequentlyworkedontwosuccessfuloperatingsystem
projects(Comshare'sCommanderIIandICL'sVME)before
joiningAndersenConsultingin1981,wherehewasa
managerintheLondonoffice.Hewasanindependent
consultantfrom1987untilhejoinedQAin2003,wherehe
nowlectures,consults,andownsQA'stechnicalportfolio.
ThomasisaMicrosoftCertifiedSystemsEngineer(MCSE),
MicrosoftCertifiedTrainer(MCT),MicrosoftValued
Professional(MVP)andMicrosoftRegionalDirector
(Europe).ThomaslivesinacottageintheEnglish
countrysidewithhiswife,Susan,anddaughter,Rebecca.
TimMintnerisacolumnistonmyITforum.com
()andisPresidentanda
SystemsArchitectConsultantforMMHServices
().TimhasworkedintheIT
industryforover10yearsandhasdesignedMicrosoft
networksforover50companiesintheMidwest.Tim
specializesinMicrosoftInfrastructuretechnologiesandhas
adeepbackgroundinActiveDirectory,SMS,SQLServer,

MOM,Exchange,andISAserver.TimisbasedinSt.Louis,
MO,whereherunstheMicrosoftInfrastructureProfessional
UsersGroup().Timcanoftenbe
foundansweringquestionsintheforumsat
myITforum.com.YoucanreachTimbyemailinghimat

ChrisMosbyisacolumnistonmyITforum.com
()andworkedforthreeyearsat
BechtelHanfordInc.(BHI)asafull-timeSMS/Virus
ProtectionAdministrator.Duringhistenureatthatcompany,
ChristurnedSMSintoanessentialmanagementtoolfor


BHI.HiscompleteredesignofBHI'santivirussystemand
antiviruspolicyledtotheeliminationof7,356virusesand
tozeronetworkdowntimeduetovirusinfectionfrom
January2000untilheleftemploymentatBHIinJune2003.
Atlastreport,thisantivirussystemisstillprotectingthe
BHInetworkandwasabletofendoffthousandsof
additionalvirusinfectionsduringtheglobaloutbreaksof
Blaster,Mimail,Welchia,andSwenvirusesduringtheperiod
ofAugustandSeptember2003.Hisotheraccomplishments
includebeta-testingthecurrentversionofSMSInstallerfor
Microsoft,designingandimplementingtheinitialSMS2.0
systemofBechtelNational'sWasteTreatmentPlantProject,
obtaininghisSymantecProductSpecialistCertificationin
NortonAntiVirusCorporateEdition7.5/7.6,andcoauthoring
ConfiguringSymantecAntiVirusCorporateEdition
(Syngress).ChrisisalsothecreatorofSMSAdmingear
(Chrisnowworks

astheSMSAdministratorforalargeregionalbankandlives
inTupelo,MS,withtheloveofhislife,hiswifeDebbie.He
canbecontactedat
MarcusOhisateamleaderfortheWindowsCore
TechnologiesGroupatCoxCommunications,Inc.
(),specializinginSystems
Management.Heliveshappilywithhiswife,Joanna,in
Alpharetta,GA.Inhissparetime,Marcuswritesarticlesfor
myITforum.com(),maintains
geekstatusbyreadingamoundoftechnicalarticlesand
whitepapers,andhelpshiswifewithherwebsite
().Hecanbereachedat

RobOlsonisacolumnistonmyITforum.com
()andisthefounderof
DudeWorksSoftware(),which
developsadd-onsolutionsforSMSandmanyother
Windowssystems-managementtoolsandsolutionsand


providescustomsystems-managementprogramming
solutions.Robalsoservesasaseniorsoftwaredistribution
engineerforamajorfinancialcompanyintheUnitedStates,
supportingover50,000(andgrowing)SMSclients.Hecan
bereachedat
MarcinPolichthasbeencontributingtoanumberofpopular
technologywebsites,suchasmyITforum.com
(),ServerWatch
(),andDatabaseJournal
()forseveralyears.Whilehe

focusesonengineeringandadministrationoflargeWindows
deployments(primarilyinfinancialinstitutions)involvinga
varietyofWindows-basedproducts,suchasSMS,SQL,IIS,
Exchange,andCitrix,heisalsointerestedinprogramming
andscriptingtopics.Thisinterestisbestexemplifiedbyhis
bookWMIEssentialsforAutomatingWindowsManagement
(SAMS),publishedin2001.HealsocowroteWindows2003
ServerBible(Wiley)andMasteringActiveDirectoryfor
WindowsServer2003(Sybex).Marcinhasalsobeen
activelyinvolvedasatechnicaltrainerinthefieldof
certifications.OneofthefirstrecipientsofWindows2000
andWindows2003MCSEandMCSA,hehasalsoworked
withMicrosoftonsettingcriteriaforWindows2000
Clusteringexam.
BrianRogersisacolumnistonmyITforum.com
()andiscurrentlyaconsultant
withCollectiveTechnologiesInc.(),
providingSMS2.0and2003analysis,proofofconcepts,
implementations,andupgrades,withfocusonpatch
management.Hispreviousexperienceincludesoverfive
yearswithSystemsManagementServer,beginningwith
SMS1.2andcontinuingthroughtoSMS2003;overtwo
yearsasanMCT,teachingSMS1.2and2.0;andoverthree
yearsasanSMS2.0Administrator.


JanetRydingisacolumnistonmyITforum.com
(),basedintheUK,andhas
morethan10yearsofexperienceintheITindustry.
WorkingmainlywithWindowsNT/2000,Citrix,andthe

standardBackOfficeproducts,sheprovidesnetwork
consultationtoavarietyoflargemultinationalorganizations
andhasworkedinthepastforFordMotorCompany,the
MinistryofDefense,andtheNationalHealthService.Janet
holdsanMCSEinNT4and2000,theCitrixCCAandCCSP
certifications,andCisco'sCCNA.Janetiscurrentlyworking
onavarietyofprojectsandislookingtomoveintomore
projectmanagementroles.Shecanbereachedat

PeterRysavyisacolumnistonmyITforum.com
()andiscurrentlythe
webmasterandnetworkadministratoratasmallprivate
businesscollege.Hespendshisdaytakingcareofthe
academicnetworkandlabs,administeringanExchange
emailsystemandthecollegeintranet,supportingthe
campus-widewirelessnetwork,andmaintainingthecollege
website.Inhissparetime,Peterisactivelyinvolvedinthe
TabletPCcommunity,evangelizingtheplatform,
contributingnewsstories,interactingwithusers,and
writingaboutTabletPCsonhiswebsite,TabulaPC
( />HansSchefskeisacolumnistonmyITforum.com
()andhasovereightyears
experienceengineeringanddesigningthearchitectureand
implementationofMicrosoftclient/server-basednetwork
solutions.ConsultingandleadingprojectsintheITindustry,
hehasprovidedtechnicalexpertiseintheareasof
designingandimplementinginfrastructuresforlarge
enterprise-levelcompaniessuchasNabisco,Prudential,
AIG,Simpson,ThatcherandBartlett,Novartis,andHoffman

LaRochePharmaceuticals.In2003,Hanswasawardeda
MicrosoftMostValuableProfessional(MVP)AwardforSMS
forhisoutstandingtechnicalskillsandwillingnesstoshare
knowledgewithhispeers.Asatechnicalauthorat
myITforum.com,heprovidestechnicalinformation,tools,
scripts,andutilitiesforITprofessionalsandadministrators
tobetterassisttheminmanagingtheirMicrosoft-based
solutions.HansiscurrentlyaSeniorActiveDirectoryand
SMSconsultantatalargetelecommunicationscompany
basedinAtlanta,GA.
PatSklodowskiisacontributortomyITforum.com.com
()andaMicrosoftCertified
SystemsEngineerwithovereightyearsofindustry
experience.HisspecialtiesincludeWindowsNT/2000,Active
Directory,SMS,Exchange,andscripting.Patiscurrently
workingasaSeniorEngineerwithaglobalproviderof
engineeringsolutionsandspecializedstaffing.Heis
responsiblefordevelopingnewinitiatives,architectural
solutions,technicalproject-management,andongoing
support.Patcanbereachedat
DonnieTaylorisacolumnistforseveralwebsites,including
myITforum.com(),andis
currentlytheSystemsManagementAdministratorfor
CentralTechnologyServices.Hisdutiesincludethe
installation,maintenance,andadministrationofSMS,MOM,
SQL,andvariousmanagementapplications.Hehasbeen
withCentralTechnologyServicesforfouryears.Donnie
liveswithhiswifeandtwodaughtersinJeffersonCity,MO.
HemethiswifewhileattendingSouthwestMissouriState

University,wherehepursueddegreesinCIS/MIS,English,
andAnthropology.DonnieenjoysPCandconsolegaming,
exploringhisCherokeeheritage,andspendingtimewithhis
family.


DanThomsonisacolumnistonmyITforum.com
()andaninfluentialmemberof
theITstaffatalocalcollege,whereheassistswithmany
aspectsofsupportingthecomputingsystems.Someof
Dan'sresponsibilitiesincludemaintainingantivirussoftware,
OSimaging,grouppolicies,softwaredeployments,and
SMS.Danisalwayshappytosharewheneverhecanand
canbefoundparticipatinginmanyonlineforumsand
newsgroups.Danenjoysspendingtimewithhiswifeand
10-month-olddaughter.
RichardThrelkeldisacolumnistonmyITforum.com
()andwasemployedasa
contractorforMotorola,whereheeventuallyworkedhis
wayuptomanagetheSMSinfrastructureforallof
Motorola'sBoyntonBeachfacilities,includingpackaging,
softwaredeployments,sitemaintenance,clientsupport,
andreporting.AlongwithhislocalSMSresponsibilities,
RichardalsohelpeddeveloppackagesforMotorola'sGlobal
PackagingTeamwhichdistributedsoftwareandsecurity
updatestoworkstationsandserversworldwide.Inlate
2002,RichardmovedtoSanDiego,CA,toworkfor
QUALCOMMInc.().Richard
currentlyheadstheSMSInfrastructurefortheQUALCOMM
CDMATechnologiesdivision,whichspanslocations

worldwide,anddealswithotherActiveDirectoryand
engineeringissues.Outsideofwork,Richardtakespartin
differentSMSforumsandusercommunities,whereheis
regularlyfoundassistingotheradministratorswithissuesin
theirenvironments.RichardisalsoaMicrosoftMVPforSMS
becauseofhiscommunityinvolvement.
RodTrent,managerofmyITforum.com
(),istheleadingexperton
MicrosoftSystemsManagementServer.Hehasover18
yearsofITexperience,8ofwhichhavebeendedicatedto


SMS.HeistheauthorofsuchbooksasMicrosoftSMS
Installer,Admin911:SMS,andIIS5.0:ABeginner'sGuide
andhaswrittenthousandsofarticlesontechnologytopics.
myITforum.comisthecentrallocationforthird-partySMS
support,aswellastheonlinegatheringplaceforIT
professionalsandtheITcommunity.Rodspeaksatleast
threetimesayearatvariousconferencesandisaprincipal
inNetImpress,Inc.().
ChuckYoungisacolumnistonmyITforum.com
()andbeganhisITcareer
duringhistimeintheAirNationalGuard,whenhe
convertedanoldBanyanVinesnetworktoanNT
environment.AfterpursuingadegreeinComputerScience
andholdingseveraljobsinthecomputerindustry,Chuck
nowfindshimselfworkingalmostexclusivelywithMicrosoft
SystemsManagementServer(SMS).Oftenmistakenfor
SMSMAN,Chuckisjustadedicatedperfectionistthatwill
notsettleforlessthan80%;hisphilosophyis"Whygive

100%atanything?Itdoesn'tleaveanythingforthefun
stuff!"Chuckcanbereachedat
OrenZipporiisacolumnistonmyITforum.com
()andiscurrentlyworkingfor
TeamComputers,agold-certifiedSupportCenterfor
Microsoft.Orenspecializesinsystem-managementproducts
andhasalsobeeninvolvedinWindows2000andExchange
2000migrations.Orenalsomanagesanopenforumfor
MicrosoftinIsraelthatsupportsSMSandMOMproducts.
Orenspendshisfreetimescubadiving,mountainclimbing,
andplayingsnooker.Heknowshowtoenjoyagoodfiction
bookandlikestowriteshortstoriesforfun.Youcanreach
himat


Acknowledgments
Talkaboutabookbeingacooperativeventure;thisonewas
definitelyso,forwithoutthetime,expertise,andcontent
contributedbysomanyotherITprofessionalsmanyofthem
columnistsonmyITforum.com()this
bookwouldn'tbethevaluableresourcetoWindowssystem
administratorsthatitis.So,abigthankstoeveryonewho
contributedhackstothisbook.Youdeserveitfirst,sothanks!
AndthanksespeciallytoRodTrent,CEOofmyITforum.com,for
hisfriendshipandsupportthanks,man!
SecondcomesmythankstoRaelDornfest,myeditorat
O'Reilly,whohasbeengreatfuntoworkwithandwhosegentle
proddinghashelpedkeepmefocusedonthetaskat
handmakingthisbookasgoodaspossible.Thanks,Rael!
Thirdinlineforthanksismyagent,NeilSalkindofStudioB

(),forhisfriendshipandsupportin
writingthis,my14thbook.Thanks,Neil!
Fourth,thankstoMTSCommunicationsInc.
()forprovidingInternetservicesandweb
hostingformywebsite(),withspecial
thankstoDinisPrazeresthereatMTS.Thanks!
Lastbutnotleast,thankstomywifeandbusinesspartner,
Ingrid,coauthoroftheMicrosoftEncyclopediaofNetworking,
2ndEditionandconsultantforourcompanyMTITEnterprises.
().Thanks,Schatz!


Foreword:I'maSci-Fifreak
JustbecauseIworkinthecomputertechnologyfield,youmight
automaticallyassumethatI'malsoanavidsciencefiction
reader.And,whiletherearemanyITprofessionalswhohave
neverspokenasinglewordofKlingonoradeptlywieldedalight
sabermadeofpapertowelrolls,ifyoupointyourfingeratme,
youcanrestassuredthatyouraccusationisspoton.Tobefair,
myloveofScienceFictionbeganyearsbeforeIhadmyhands
onacomputerkeyboard.IwaspracticingtheVulcanhand
greetinglongbeforeIwaspottytrained,andIwasmindmeldingwithmyfavoritepetbeforeIknewhowtofeedmyself.
Youcanimaginemyparents'joy.
WhenMitchTullochapproachedmeabouthelpingoutwith
WindowsServerHacks,therewasnohesitationinmyresponse.
EventhoughI'veknownMitchforyearsandhisworkisalways
top-notch,Mitchhasanunfairadvantagewhenitcomesto
makingWindowsServerHackssuccessfulheactuallycarriedthe
nicknameof"TheVulcan"duringhisuniversitydays.So,using
akindofmind-meld,Mitchpiecedtogetheraculminationofthe

mostpowerfulsolutionsonEarthtoloadWindowsServerHacks
withtricks,tips,scripts,tools,andworkaroundstohelp
systemsadministratorsmanagetheirWindows-basednetworks.
We'veallboughtbooksandendedupskippingpagesor
chaptersbecausetheinformationprovidedsimplydoesnot
applytoourspecificsituation.Butbecausetheinformationin
WindowsServerHackscomesfromrealworldexperiencebased
ontried-and-truesolutions,you'llprobablyusemoreofthis
bookthananyotherinyourtechlibrary.
InadditiontoworkingwithMitch,Iwasalsoexcitedthat
WindowsServerHackswouldincludemanysolutionsfromthe
myITforum.comcommunity.AmongthemyITforum.com
membership,you'llfindsomeofthesmartestindividualsinthe


industrywhoarewillingtosharetheirsolutionstohelpmake
theITworldabetterplace.Thisfactbecomesclearlyevidentas
youreadandimplementthesolutionsinthisbook.And,when
you'rereadytofindmoresolutionslikethoserepresentedin
WindowsServerHacks,youcanstopbymyITforum.comand
experiencethecommunity.
Asmanyofyouknow,Vulcansshownoemotion.So,IguessI
mayhaveultimatelytippedmyhatwhenIwasdoublyexcited
thatWindowsServerHackswasanO'Reillyproject.O'Reillyis
oneofthetoppublishersintheworld,spreadinghigh-quality
informationtoITworkerseverywhere.Forthat,Iamhonored
fortheopportunitytointroducethisbook.Iknowyou'llfindit
asusefulasIdo.
Toallthosethatcontributedtothisbook,Isaluteyou.Of
course,thatsalutecomesintheformofaperfectlycrafted

VulcanhandgreetingMitchwouldknow.
RodTrent
Livelongandprosper,Rod.
Mitch:-)