This installation and setup tutorial applies to servers using Windows2003 as the operating system, with the purpose of enabling the server to support common network programming languages including ASP, PHP, and. Net1.1,. Net2.0, support common databases including access, MySQL, MSSQL, support FTP, support common components including AspJpeg, JMail, lyfupload, dynamic, Isapi_rewrite.
This tutorial altogether
divided into eight pieces:
system installation and setup, software installation and settings, file and folder permissions, System services, security policy, system components, registration form, software security Chapter。 This article discusses the first one:
system installation and Setup
First, System Preparation
Required Software : Windows2003 original installation files, Windows2003 patch sets, server hardware drivers, SQL Server 2000 installation files, SQL Server sp4,mysql installation files, PHP installation files, Zend optimizer installation files, Serv_u (optional), aspjpeg,jmail,lyfupload, dynamic components, isapi_rewrite,ghost.
Windows2003 and SQL SERVER 2000 installation files can be purchased on a genuine CD or other access. Windows2003 is best to be the original, and SQL SERVER 2000 can choose either an enterprise version or a standard version.
The Windows2003 patch set includes Windows2003 SP2 and SP2 patches. Download the Windows2003 SP2 from Microsoft website or other download station, download Windows2003 SP2 Patch set from the download station, and now (February 2008) can find the patch set that contains all the patches until February 2008.
SQL SERVER SP4 can be downloaded directly from the Microsoft website or downloaded from the download station.
Server hardware drivers should be shipped at the same time that the server was purchased.
MySQL installation files, php installation files, Zend optimizer installation files can be downloaded to its official website for free, or to other download sites.
Serv_u,aspjpeg,jmail,lyfupload, moving components, isapi_rewrite and ghost can be obtained by purchase or other means.
second, System installation
Partitioning
The server's hard drive is 250G, divided into 4 districts, c disk do system disk (20G), D disk do database and software disk (60G), e disk do Web site directory (120G), F disk to do backup disk (40G), in NTFS format to 4 areas.
Note:Where's the 10G? In fact, the hard drive Factory is 1000 into the capacity of the system, and the computer is 1024 into the calculation, so there will be a difference in the size of the hard drive, the difference is greater.
Installation System
Start the server, set the BIOS to start the disc, reboot, insert the WINDOWS2003 installation disk into the CD drive, and install the Windows2003 operating system as prompted. Detailed installation process illustrated in http://www.juyo.org/juyo/original/windows2003-install/
Note:Windows2003 It is best to choose the original, such as the official retail version or VLK version of the big client version, and so try not to choose a modified such as tomato Garden version or ghost version.
Install Drive
System installation Complete, enter the system, according to
Motherboard-
video card-
sound card-
Network card-
Other equipmentIn order to install all types of drivers.
Install Patches
Use the download patch set to install the patch, first install Winodws2003 SP2, then perform the patch set, after the patch set Windows Update.
It is worth mentioning that Windows Update installs the. NET Framework 2.0: Select Custom in the first window of update, and after the search there is a "software, optional" option on the left side of the update window, which is selected in the Microsoft. Net Framework 2.0:x86 (KB829019) "Before the hook, select Install this support."
Setting the Manage Your Server window does not eject when you log on
Start your computer, eject the Manage Your Server window, and check the "Do not show this page when you log on" at the bottom left of the window.
Add IIS Service
Enter the control Panel, perform add or Remove Programs → add/Remove Windows components, enter the Windows Components wizard window, select Application Server, click Details, double-click Internet Information Services, and tick the following options: Internet Information Service Manager; Common files; WWW service. OK to return to the Windows Components wizard window click Next to add a good IIS service.
Modify the request maximum value
Turn off the IIS Admin Service, locate the MetaBase.xml in the Windows\system32\inesrv directory, and open it, locate the aspmaxrequestentityallowed, and modify it to the desired value. The default is 204800, or 200K, to modify it to 20480000 (20M), and then restart the IIS Admin service.
Modify buffer maximum (maximum download file size)
Turn off the IIS Admin Service, locate the MetaBase.xml in the Windows\system32\inesrv directory, and open it, locate the aspbufferinglimit, and modify it to the desired value. The default is 4M, modify it to 10240000 (10M), and then restart the IIS Admin service.
Enable parent Path
Open Internet Information Services (IIS) Manager, right-click web site, select Properties-> home directory-> Configure-> option, and then tick "Enable parent path".
error message for custom script error
Open Internet Information Services (IIS) Manager, right-click web site, select Properties-> the home directory-> configure-> debugging, and then check the "send the following text error message to client" under "script error message" To modify the content of the error message as a custom content.
let IIS support ASP
Open Internet Information Services (IIS) Manager, open Web Service extensions, select Active Server Pages, and click Allow.
Modify log file directory
Open Internet Information Services (IIS) Manager, right "website" → "Properties", under the Web Site tab, under the active log format under "Properties", left click, pop-up "Logging properties", in the "Modify log file directory" Enter a new default log directory in the text box below (preferably set to a non-operating system disk). Click "Advanced" to tick the item you want to record, click two times "OK"
Remove unnecessary IIS extension mappings
Open Internet Information Services (IIS) Manager, right-click web site → properties, locate configuration under the Home Directory tab, click Open Application Configuration, and under Application extensions, modify the mapping relationship for the extension.
speed up task bar
Right-click on the taskbar, select Properties, keep the taskbar in front of other windows, show time, and all other removal.
resource sharing hidden dangers
Right-click My Network Places-properties, open the Internet connection interface, select the active network card, right-click, select Properties, click Microsoft Network Client, click Uninstall, and Confirm uninstall in the pop-up dialog box. Left click on "File and printer Sharing for Microsoft Network", click "Uninstall" and select "Yes" in the pop-up dialog box to confirm the uninstall.
Unbind the NetBIOS and TCP/IP protocols
Right-click the Network Places, properties, open the Network Connections interface, select the active network card, right-click, select Properties, double-click Internet (TCP/IP) in the Pop-up Properties box, click Advanced-WINS, and select Disable NetBIOS on TCP/IP , click "Confirm" three times to close the local connection properties.
Turn off the autoplay feature
Click "Start"-"Run", enter Gpedit.msc, open the Group Policy Editor, expand Computer Configuration-Administrative Templates-system, locate the Turn off AutoPlay option in the right window, double-click, select Enabled on the upper portion of the Open dialog box, and select All drives ", click" OK "to complete the setup.
Remove or disable users who are not required by the system
In addition to the administrator, Internet Guest account, starting the IIS process account, and the ASPNET account outdoors, all other accounts that exist within the system are disabled, including guest, SQL DEBUG (automatically added when SQL Server is installed, as explained here), and terminal User, and so on.
prohibit default sharing
Click "Start"-"Run", enter "Regedit", open Registry Editor, open registry key "Hkey_local_machine\system\currentcontrolset\services\lanmanserver\ Parameters ", create a new DWORD value in the right window, with the name set to AutoShareServer and the value set to 0.
Modify the location of My Documents
Right-click My Documents, select Properties, and modify the target folder location to a non-system disk.
Modify the location of virtual memory or disable virtual memory
Choose one of the two to disable virtual memory if memory is large enough. If the memory is not very large, or modify the virtual memory to the hard disk of the non-system disk. In general, it is not recommended to disable virtual memory, encountered over 4G of memory running virtual host memory is not enough.
to modify the location of virtual memory:Right-click on "My Computer" and choose "Properties"-"advanced"-"performance"-"Settings"-"Advanced"-"virtual Memory"-"Change", select the system disk in the Drive selection box, select "No Paging File", and then select "Custom Size" in the non-system disk such as D, and enter "Initial size" and "Maximum value , click "OK" to confirm the modification.
To disable virtual memory:Right-click on "My Computer" and choose "Properties"-"advanced"-"performance"-"Settings"-"Advanced"-"virtual Memory"-"change" to
Have the drive Select "No paging File", then click "OK" to confirm the modification.
Improve system performance
Right-click on "My Computer", select "Properties"-"advanced"-"performance"-"Settings", select "Adjust for best performance";
Open My Computer, select Tools-Folder Options-General, select "Use Windows traditional Style folder" and click "View" to select "Hide protected operating system files", "Do not cache thumbnails", "show full path in Address bar", and all other options are canceled.
Turn off Desktop themes and screen saver
Right-click in the desktop space, select "Properties", click "Desktop", select "None" in the "Background" selection box;
Right-click in the Desktop space, select Properties, click Screen Saver, and select None in the Screen saver selection box.
Right-click in the desktop space, select "Arrange Icons" and remove "Show Desktop Icons".
Open Remote Desktop
Right-click My Computer, select Properties-Remote, and select the Allow users to connect remotely to your computer check box. Click "Select Remote user ..." To add or remove users who are allowed to use Remote Desktop in the dialog box that appears, and click OK to exit the settings.
to modify a port on a remote Desktop
Remote Desktop default of 3389 is a lot of scanning tools to scan, we change the port, reduce some unnecessary threats.
Click "Start"-"Run", enter "Regedit" to open Registry Editor, open registry key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\wds\ Rdpwd\tds\tcp ", find" Portnamber ", its default value is 3389, modify it to the port you want such as" 8888 "and any number. Then open "Hkey_local_machine\system\currentcontro1set\control\tenninal server\winstations\rdp-tcp" and find "PortNumber", again, The default value is 3389, which is modified to the same port number as the above modification. Quit Registry Editor.
Delete Inetpub folder
C Packing directory Inetput files may cause security problems, and Web files can not be placed on the system disk, so the Inetpub folder cut to other places to back up, in case you need to use.
Delete Iisadmpwd Directory
The file in this folder is used to change the script such as the password, in the case of the server, the folder should not still exist, delete it. Note that you need to turn off IIS when you delete the Change folder.
Delete Printers Folder
This folder is for Web printing and is not required when making a Web server. C:\Windows\Web\printers\
Backup system
Now reboot the server and make a ghost for the operating system just done.