Server role empathy"

What, CAN server roles be changed? I believe many of my friends will be surprised when they see such titles! Indeed, to enable a server that has been playing the role of local area network domain control, and suddenly assume another role, to enable the normal account of the server to play the role of super administrator, it is difficult to manage and maintain the server as you like, unless you reinstall the server system! As a matter of fact, I'm afraid I can't think of it. The content below in this article will help you easily switch server roles, and all the conversion processes can be completed smoothly through simple settings!

Changing Roles

If your server is installed on Windows 2000 and used as a LAN domain controller, if you want to temporarily cancel the domain controller function of the server and convert it into a common server for use, such a switch requires you to reinstall the server system software; but in fact, you only need to follow the steps below to quickly and quickly achieve the conversion purpose:

FirstFirst, restart the Windows 2000 Server System, and press the F8 function key on the keyboard until the boot menu appears on the System screen;

SecondSelect the "Domain Controller security mode" item in the Startup menu and click the Enter key. In this way, the Windows 2000 server will automatically work in Domain Controller security mode;

Third, Use the super Administrator Account of the local server (this account is only a local account, not a super Administrator Account of the domain controller), and successfully log on to the server system;

FourthAfter the logon operation is completed, click the "run" command in the "Start" menu on the system desktop to open the system running settings box, and enter the string command "Regedit ", click OK to open the registry editing page;

Fifth, Expand the "HKEY_LOCAL_MACHINE \ System \ ControlSet001 \ Control \ ProductionOptions" registry option on the page, and open the interface shown in 1;

Figure 1

SixthIn the right area of the interface, check whether there is a string key value named "ProductType". If not, right-click the blank area, run the "new"/"string value" command in the shortcut menu, and then set the name of the newly created string key value to "ProductType ";

SeventhDouble-click the "ProductType" key value to open the Value Setting dialog box, change the previous "LanNT" to "ServerNT", click "OK", and then restart the computer system, in this way, the Windows 2000 Server System can be converted from the domain controller role to the common server role. If you want to restore the previous role in the future, you only need to change the value of the "ProductType" key value from "ServerNT" to "LanNT.

Knowledge Point: The domain controller is actually a special Windows server installed with the Active Directory, while the Active Directory is a special distributed directory service, the important information of this service can be distributed across multiple workstations or servers in the LAN to ensure that users in the LAN can quickly access the information. Because multiple servers or workstations share the same information, therefore, it has good control capabilities in Information error tolerance. The domain controller stores directory data and manages the interaction between user domains, such as the process of managing user login domains, verifying user logon identities, and searching directories. Generally, one or more domain controllers can be installed in a domain. To configure a common Windows 2000 server as a domain controller, run the dcpromo.exe command directly in the server where the Windows 2000 server system is installed, and then in the pop-up Active Directory Installation Wizard setting window, follow the wizard prompts to complete the configuration of the corresponding information step by step.

Account role transposition

Although Microsoft strongly recommends that you do not use a super Administrator Account to log on to the running server, many server applications are designed in many cases and do not consider the security requirements of the server, as a result, users have to use the super Administrator Account to log on to the server to run the corresponding application software. Considering that running the server directly as a super administrator for a long time will bring many security attacks to the server, especially in the network operating environment, the security pressure is even greater. Can we change our mindset to log on to the LAN server with a common account, and then dynamically convert the account role to the Administrator account when managing the server? To achieve this goal, you may wish to follow these steps:

FirstFirst, log on to the Windows 2000 Server System with a normal account, then open the system resource manager window, and find the IE browser to run the program;

Second, Press the Shift function key on the keyboard, right-click the IE browser to run the program, select the "run mode" command from the shortcut menu that appears, and open the dialog box shown in 2;

Figure 2

ThirdIn the dialog box, select the "user identity running program" option, enter the super administrator's user name and password, and click "OK, the IE browser program will automatically run as the super administrator;

FourthIn the open IE browser window, click the "View" option in the menu bar, and click the "browser bar" and "folder" options from the pop-up lower menu, in the left area of Figure 3, you can view the folder directory structure under the super administrator account;

Figure 3

FifthIn the directory structure window of this folder, you can run any application or system program as a super administrator to perform super management and maintenance operations on the server, for example, when you enter the control panel window, you can add or delete hardware on the server, install or uninstall applications, and set the system virtual memory, you can also move, copy, or delete any folder on the server, or create other accounts on the server;

SixthAfter the management and maintenance task of the server is completed, you only need to close the IE browser window and then exit the Administrator account running role and resume to the normal account running mode, in this way, the risk of other attacks on the server is much lower.

Tips: Super management and maintenance of the server, in fact, you can also not log on to the server, directly in other common workstation, with the help of the "net use" network management command, to map the target program that needs to run as a super administrator into a local disk in a common workstation, and then you can manage and maintain the server like managing and maintaining the local disk. The procedure is as follows:

FirstClick the "Start" menu on the system desktop of the common workstation, and run the "run" command to open the "system run" dialog box. Then, run the "cmd" command, switch the server system to the MS-DOS command line status;

SecondAt the doscommand prompt, enter the string command net use X: \ Server \ aaa "bbb"/user: "ccc" and click the Enter key. It will not take long, the system displays the result of "successful command completion". "X:" is a disk partition symbol in a common workstation, and "Server" is the name of the computer where the Server is located, "aaa" is the shared content that needs to be run as the super administrator, "ccc" is the Super administrator username, and "bbb" is the logon password corresponding to the super administrator username;

ThirdAfter successful ing, open the resource manager window in the normal workstation. You will see that the target content for super management has been mapped to the content of the local workstation, in this case, you can manage and maintain the server as you maintain the local content;

FourthAfter the super maintenance task for the server ends, you also need to switch the server system to the MS-DOS command line status and execute net use X at the doscommand prompt: the \ Server \ aaa/delete command ends the switch of the Server account role to ensure Server security.