Chapter 1 Introduction to SunLink Server Administration

The SunLink(TM) Server product [ SunLink Server software incorporates AT&T's Advanced Server for UNIX Systems. ] that you have installed within your network will be at once new and familiar to you, the administrator. This guide will introduce you to the product and to your new role as SunLink Server program administrator.

About Your New Server

SunLink Server software is a set of Solaris(TM) operating environment services that enable powerful, highly scalable, highly reliable Sun(TM) computers to perform vital local area network (LAN) tasks within a Microsoft Windows, Windows NT, or mixed-client environment.

As a server within a LAN, a Sun computer with SunLink Server software installed provides file, print, authentication, and primary and backup domain controller (PDC and BDC) services that enable the efficient sharing of computing resources among desktop computer users. Incorporating Microsoft technology, SunLink Server software works like a native Windows NT server in network "neighborhoods" that include systems running Windows NT Server, Windows NT Workstation, Windows 95, Windows 98, and Windows for Workgroups (Windows 3.11). (Note that, in this guide, references to Windows 95 generally apply as well to Windows 98.)

SunLink Server software implements many of the services that are offered by Windows NT Server 4.0. Among these services:

• Windows NT PDC and BDC functionality

• Windows Internet naming Service (WINS)

• Microsoft Remote Procedure Calls (RPCs)

• Windows NT Directory Services (NTDS)

• Windows NT Registry

• Microsoft NTFS-compatible file Access Control Lists (ACLs)

• Event Logging

In addition, SunLink Server software offers user account synchronization between NTDS and related Solaris services.

The additional benefits of Sun computers running the Solaris operating environment include true preemptive multitasking and symmetric multiprocessing. The time-sharing, multiuser model employed by the Solaris operating environment ensures file system integrity and continued server availability--even if a user's application crashes.

About Your New Administration Role

Although it incorporates networking technology from Microsoft, the foundation of SunLink Server software is the Solaris operating environment. A computer running SunLink Server software is not an emulation of a Windows NT server, but rather a distributor of true Windows NT file and print services implemented on the Solaris operating environment.

Once you have set up your SunLink Server computer on the network, users of Microsoft Windows 95-based client computers won't notice that their network services are being provided by a Solaris, rather than Windows NT, server. Their Microsoft Windows 95 clients' views of the Windows NT network servers will merely include one or more new servers that seem the same as the others.

In your role as an administrator of your Windows NT network, you won't notice any differences, either. You will continue to use the same Windows NT tools to perform the same Windows NT network administration tasks that you ordinarily perform. But the presence of the SunLink Server computer in your Windows NT network does mean that you have one additional role that is not the same as Windows NT administration: SunLink Server administration.

The difference between administration of the computer running SunLink Server software on your network and the Windows NT network services provided by SunLink Server software is both critical and occasionally subtle.

For example, you can set up a native Windows NT server as a Windows Internet Naming Service (WINS) database server that resolves client computers' host names to their IP addresses. As a Windows NT administrator, you have probably set up and administered services on one or more WINS servers. Likewise, you can set up the SunLink Server computer as a WINS server and administer its Windows NT network role in the same way that you administer the native Windows NT server.

But note the subtle difference between Windows NT and SunLink Server administrative duties:

• Windows NT network administration - Creating Printer shares

• SunLink Server computer administration - Setting up a Solaris printer that can be shared

To complete the Windows NT printer administrative task, you would use the same Windows NT administration tool that you have always used and you would follow instructions in the tool's online help or in your Windows NT network administration documentation. To complete the SunLink Server printer administration task, you would use the SunLink Server Manager or command-line utility documented in the SunLink Server online help or in this guide.

Similar to the WINS server example, you will find new administrative duties here that are closely related to, but importantly different from, many of your ordinary Windows NT administration tasks. This guide covers all of them; conversely, this guide does not provide instructions for any Windows NT network administration tasks.

Windows NT Administration Tools Overview for Experienced Solaris System Administrators

You may be an experienced administrator of a Windows NT network; in that event, you are already familiar with Microsoft NT administration tools and you can skip this section and proceed to the next, "The SunLink Server Manager or Command Line: Your Choice".

For administrators of a Solaris network, however, this section is a summary of the Windows NT administration tools that make it possible to carry out your Windows NT network responsibilities. Becoming familiar with the functions of these tools will help you discern the difference between a Windows NT network administration task and a SunLink Server administration task.

Nearly all Windows NT network administration tasks are carried out by way of several graphical user interface (GUI) tools. A SunLink Server computer can operate and be administered regardless of whether Windows NT is running on the network. However, client-based network administrative tools running on Windows NT Workstation and Microsoft Windows 95-based client computers enable remote administration of the Windows NT services provided by a SunLink Server system.

To perform Windows NT network administration tasks on a SunLink Server computer from a Microsoft Windows 95-based client computer, you install Windows NT Server Tools. Remote administration is supported for all network functions. Windows NT Server Tools are available in the SunLink Server installation package.

All of the GUI-based tools for Windows NT network administration feature online help.

The most important and most commonly used Windows NT administration tools, and the common administrative tasks associated with them, are described in the following sections. (Depending on which tools package you use and which Windows NT version you are running, you may not have access to one or more of the tools listed in the following sections.)

User Manager for Domains

Windows NT network client computer users gain access to network resources with a single logon and password, from any computer in their own "domain" or other "trusted" domain. No matter which computer they use, their own user environment will be established for them by the Windows NT server at logon. This environment and various other user attributes are maintained by way of the User Manager for Domains tool.

Similar (though not equivalent) information in the world of the Solaris system administrator is stored in the /etc/passwd, /etc/groups, .profile, and .cshrc files.

You use User Manager for Domains for many common tasks, including:

• Managing passwords, including resetting forgotten passwords

• Setting up logon hours

• Setting account expiration dates

• Managing user accounts, including creating, deleting, altering, naming, and disabling

• Creating and modifying a path to the user's profile

• Creating logon scripts for users and specifying their home directories

• Managing groups, including creating, deleting, and changing them and their membership

• Managing security policy, including number of failed logons permitted, users' and groups' rights, and audit policy

• Managing trust relationships among Windows NT domains

Server Manager

Windows NT network resources--such as file services and print services, for example--are allocated from the servers to the client computers as shares. These shares are given names, and accounted for by way of these names. You manage shares and other server-based resources by way of the Server Manager tool.

You use Server Manager for many common tasks, including:

• Setting and managing share permissions for users, viewing a computer's shares, adding new shares, and stopping sharing directories

• Checking who is connected to which server, for how long, and which resources they have open

• Configuring the Windows NT Directory Replicator service

• Specifying path names for logon scripts (script file names are specified by way of User Manager for Domains)

• Sending and managing administrative alerts

• Managing domains and domain controllers

• Managing services

Event Viewer

An event is any significant occurrence in the system or in an application. Some critical events are noted in on-screen messages.

An event that does not require immediate attention is noted in an event log. Event logging starts automatically. With an event log and the Windows NT tool called Event Viewer, you can troubleshoot various hardware and software problems, and monitor Windows NT security events. You also can archive logs in various file formats.

You use Event Viewer for many common Windows NT administrative tasks. Among Event Viewer's features, it:

• Traps and displays all errors and exceptions

• Displays event logs for security, systems, and applications

• Displays event descriptions and details

• Sorts events by timeframe

• Filters events, displaying only those with characteristics you specify

• Searches for events

• Provides Windows NT error codes

System Policy Editor

On computers running Windows NT Workstation or Windows NT Server, the contents of the user profile are taken from the user portion of the Windows NT Registry. Another part of the registry, the local computer portion, contains configuration settings that you can manage along with user profiles.

Using the System Policy Editor, you can create a system policy to control user work environments and actions and to enforce system configuration for all computers running Windows NT Workstation and Windows NT Server.

With system policies, you can control some aspects of user work environments without enforcing the restrictions of a mandatory user profile. You can restrict what users can do from the desktop, such as which options in Control Panel they can use, and customize parts of the desktop or configure network settings.

User Profile Editor

On computers running Windows NT Workstation or Windows NT Server, user profiles automatically create and maintain the desktop settings for each user's work environment on the local computer. (Although you can save user profiles in shared network directories on SunLink Server computers, user profiles have no effect on those particular computers--only on the clients served by them.)

You can create and modify user profiles using the User Profile Editor tool.

In Windows NT and Windows 95, a user profile is created for each user when the user logs on to a computer for the first time. User profiles provide the following advantages to users:

• When users log on to their workstations, they receive the desktop settings as they existed when they logged off.

• Several users can use the same computer, with each receiving a customized desktop when they log on.

• User profiles stored on a server enable the profiles to follow users to any computer running the Windows NT or SunLink Server software on the network. These are called roaming user profiles.

As an administrative tool, user profiles provide the following options:

• You can create customized user profiles and assign them to users to provide consistent work environments that are appropriate to their tasks.

• You can specify common group settings for all users.

• You can assign mandatory user profiles to prevent users from changing any desktop settings.

Other Windows NT tools available to many administrators include WINS Manager, Registry Editor (Regedit32), Disk Administrator, Performance Monitor, and a Backup utility. Detailed information about these and the previously described Windows NT tools, as well as instructions for using them, are included in the tools' online help and your Windows NT network documentation.

The SunLink Server Manager or Command Line: Your Choice

Aside from the administrative tasks that you routinely perform to keep your Windows NT or mixed-client network healthy--and for which you use the previously described Windows NT administration tools--you also need to perform some administration tasks directly on your Solaris system-based computer running SunLink Server software.

Suiting your background and preferences, SunLink Server administration provides a clear choice of methods: by way of a graphical user interface or the Solaris command line. This guide provides instructions on how to accomplish any administrative task on a SunLink Server computer by either method.

---

Note -

Make sure that only one administrator at a time is making changes to any particular server. Neither the command line interface nor the SunLink Server Manager tool will preclude two or more administrators from simultaneously making changes--though the SunLink Server Manager tool will warn you if someone else with administrator privileges is logged on to a particular server.

---

SunLink Server Manager GUI Tool

Fitting comfortably within a Windows NT and Microsoft Windows environment, in which most routine and complex tasks are accomplished by way of GUI-based tools, is the SunLink Server GUI-based administration tool, SunLink Server Manager, shown in the next figure.

You can manage all aspects of SunLink Server administration, which is distinct from Windows NT network administration, by way of SunLink Server Manager--a distributed client-server application based on the Java(TM) programming language from Sun Microsystems. You install the server portion of SunLink Server Manager on the SunLink Server computer, and the client portion on a Solaris, Windows NT 4.0, or Windows 95 client.

Among the most common and most important administration tasks and concerns for which SunLink Server Manager is useful:

• Logon and logoff - To administer a SunLink Server computer from a remote client, you must have special user permissions (known as root in the Solaris and UNIX world). SunLink Server Manager enables you to do this.

• Server startup and shutdown - SunLink Server software includes a set of Solaris server processes that enables the computer to act as a Windows NT network server. SunLink Server Manager alerts you when you are attempting a task that requires shutdown of the SunLink Server program, informs you about whether the server is running, and enables you to start and stop the program without having to invoke any special Solaris commands.

• Domain configuration - SunLink Server Manager covers most SunLink Server domain configuration tasks, including naming the server and the domain, and specifying it as a PDC or a BDC. You can also use the Windows NT Server Manager for SunLink Server configuration tasks.

• Policy configuration - SunLink Server Manager enables you to change various server policy parameters that are special to the SunLink Server computer, and provides context to help you understand the ramifications of policy changes that you put into effect.

• Event management - SunLink Server Manager's Events view, much like the Windows NT Event Viewer tool, enables you to check a variety of events related to SunLink Server operations.

• Database management - SunLink Server Manager enables you to manage and maintain the integrity of various Windows NT-related databases that are stored on your SunLink Server computer--backing up and restoring them, for example. (Altering the content of these databases is a Windows NT administrative function, and not a SunLink Server administrative function.) Among the databases that you can manage with SunLink Server Manager are the Access Control List (ACL), Registry, and Securities Account Manager (SAM).

• NetBIOS - Using SunLink Server Manager, you can set NetBIOS policies, including configuring the service as a WINS proxy.

• Printing - SunLink Server Manager includes a wizard that enables you to set up a Solaris printer, the first step toward setting up print services on a SunLink Server network.

• Online Help - Detailed instructions for all tasks covered by SunLink Server Manager are available online.

Command Line Interface for All Tasks

If you are an experienced administrator of Solaris systems or any other UNIX system, you already know the power of the command line. From the Solaris system prompt you can type in any number of commands to perform every administrative duty.

All of the traditional Solaris commands, and some new ones (including the Windows NT net commands), are available to you. For a rundown of the commands that are most relevant to SunLink Server administration, see Chapter 2, Administering SunLink Server Software at the Command Prompt. That chapter also provides general explanations of the use of Solaris commands to administrators whose Solaris experience is limited.