Manuel d'utilisation / d'entretien du produit Windows NT 4.0 du fabricant Microsoft
Aller à la page of 104
Server Operating System ® White Paper Guide to Microsoft ® Windows NT ® 4.0 Profiles and Policies.
© 1997 Microsoft Corporation. All rights reserved. The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication.
This guide provides information and procedures for implementing Microsoft ® Windows NT ® 4.0 Profiles and Policies on client workstations and servers. A Microsoft Windows NT 4.0 User Profile describes the Windows NT configuration for a specific user, including the user ’ s environment and preference settings.
.
Introduction ................................................................ ......................... TCO and the User Profiles, Policies, and the Zero Administration Kit What are User Profiles and System Policies? Before You Begin Key Terminology Technical Notes Establishing User Profiles – An Overview .
Upgrading Windows NT 3.5x Mandatory Profiles to Windows NT 4.0 Mandatory Profiles 30 Extracting a User Profile for Use on Another Domain or Machine 31 Creating Profiles Without User-Specific Connections 32 Troubleshooting User Profiles with the UserEnv.
Start Menu Shut Down Command Saved Settings Registry Editing Tools Windows Applications Restrictions Custom Programs Custom Desktop Icons Start Menu Subfolders Custom Startup Folder Custom Network Nei.
Extended Characters in 8.3 File Names 77 Read Only Files – Last Access Time 78 Cached Roaming Profiles 78 Slow Network Detection 79 Slow Network Timeout 79 Dialog Box Timeout 79 Registry Entries Not Included in the System Policy Editor ............ 81 Autorun 81 Start Banner 81 For More Information .
Microsoft Windows NT Server White Paper 1 Not too many years ago, information technology professionals faced a serious challenge in controlling the mounting costs of mainframe use.
2 Microsoft Windows NT Server White Paper bilities of Windows NT 4.0, and as such these techniques can readily be adapted to accommodate a corporation ’ s specific computing requirements. In the near future, you will see additional TCO-reducing features appear in Micr o - soft Windows ® 98, Windows NT 5.
Microsoft Windows NT Server White Paper 3 Key Terminology Directory Replication The copying of a master set of directories from a server (called the export server) to specified servers or workstations (called import co m - puters) in the same or other domains.
4 Microsoft Windows NT Server White Paper from any computer. A user who has a roaming profile can log on to any computer for which that profile is valid and access the profile. (Note that a profile is only valid on the platform for which it was cr e - ated — for example, a Windows NT 4.
Microsoft Windows NT Server White Paper 5 A Microsoft Windows NT 4.0 User Profile describes the Windows NT config u - ration for a specific user, including the user ’ s environment and preference settings. A User Profile can be local , roaming , or mandatory .
6 Microsoft Windows NT Server White Paper settings, and portions of the registry can be saved as files, called hives . These hives can then be reloaded for use as necessary. User Profiles take advantage of the hive feature to provide roaming profile functio n ality.
Microsoft Windows NT Server White Paper 7 Windows NT 4.0 and Windows 95 User Profile Differences Windows 95 Profiles are very similar in behavior to Windows NT 4.0 Profiles, but there are some differences. Unlike Windows NT 4.0, Windows 95 downloads and writes User Profiles to the user ’ s home directory.
8 Microsoft Windows NT Server White Paper home directory (or other specified directory if the location has been modified) on the server for the User Profile.
Microsoft Windows NT Server White Paper 9 NOTE: Directories containing roaming User Profiles need at least Add and Read permissions for profiles to be read correctly.
10 Microsoft Windows NT Server White Paper client needs is the correct path. Note that storing profiles on a Windows NT 4.0 Server makes it easier for the administrator to open a user ’ s NTuser.
Microsoft Windows NT Server White Paper 11 3. Delete the network connection and reconnect. Working Around Slow Network Links Slow Net (which is configured in System Policy) was designed to offer a user faster access to his or her User Profile if the system detects a slower network speed, such as a modem line connection.
12 Microsoft Windows NT Server White Paper Creating a New Roaming User Profile for Windows NT 4.0 To create a new roaming User Profile, you must first determine where the user ’ s profile will be stored. You then must create a user account (if one doesn ’ t already exist), and specify a User Profile path.
Microsoft Windows NT Server White Paper 13 8. Place the template profile in the appropriate location for the type of profile distribution that will be used. (The template profile, including customiz a - tions, is stored initially in %systemroot%ProfilesTemplateUser.
14 Microsoft Windows NT Server White Paper 10. Copy the profile appropriate to your implementation. • To copy an existing user ’ s profile to another user: a) From the Windows NT-based machin e hosting the profile to be used, log on as an administrator.
Microsoft Windows NT Server White Paper 15 Once the above steps are completed, the user receives the appropriate profile as follows: • If the user is to receive the Default User profile from a Windows NT 4.0- based workstation, the workstation ’ s default profile is used when the user first logs on.
16 Microsoft Windows NT Server White Paper called TemplateUser . 6. Using the template account (TemplateUser), log on to the local machine or domain. A new directory with the same name as the user name created in Step 2 will be created in the %systemroot%Profiles directory when you first log on.
Microsoft Windows NT Server White Paper 17 NOTES: • When entering the path to the target directory, you can use universal naming convention (UNC) names.
18 Microsoft Windows NT Server White Paper Be cautious if you use the Explorer interface to make these changes. If you have the “ Hide file extensions for known file types ” option enabled (this is the default), be sure to check the properties to be sure that there are not two extensions.
Microsoft Windows NT Server White Paper 19 Creating a New Roaming User Profile for a Windows 95 User If you have Windows 95 users in your domain, you can create r oaming user profiles for them as well. To create a roaming user profile for a Windows 95 user 1.
20 Microsoft Windows NT Server White Paper Creating a New Mandatory User Profile for Windows 95 If you have Windows 95 users in your domain, you ca n create new mandatory user profiles. To create a mandatory user profile for a Windows 95 user: 1. On the client Windows 95-based computer, start Control Panel, and select Passwords .
Microsoft Windows NT Server White Paper 21 System Policy Editor, provides even greater functionality than Windows NT 3.5x deli v ered. Some of the features of System Properties are described next. NOTE: In Windows NT 3.5x, you used the User Profile Editor to modify User Profile properties.
22 Microsoft Windows NT Server White Paper button. This deletes the User Profile on the local machine, but it does not d e - lete the associated User Account.
Microsoft Windows NT Server White Paper 23 the User Profile (local or roaming) is read when he or she logs on. (Note that the user can do this interactively while logged on.) Users do not need admini s - trative privileges to change which profile is used if the profile is not a mandatory profile.
24 Microsoft Windows NT Server White Paper will open to the profile directory used by that account. 3. If you don ’ t know when the user last logged on, look for the NTuser.dat file with a time and date stamp that matches the Modified date displayed in the User Profiles property page.
Microsoft Windows NT Server White Paper 25 Viewing the Contents of the Profiles Directory on a Local Co m puter All locally cached versions of User Profiles are stored in the profiles subdire c - tory of the Windows NT root directory.
26 Microsoft Windows NT Server White Paper You may notice that in a given user ’ s profile directory, there are more files and directories than those listed in the example above.
Microsoft Windows NT Server White Paper 27 at remote workstations. The All Users profile is workstation-specific and co n - tains the common groups for just that computer.
28 Microsoft Windows NT Server White Paper multiple users with the account name John Smith log on to the computer, the first John Smith is assigned a folder named JohnSmith. Subsequent users with the same name are assigned folders named JohnSmith with a numerical suffix appended, for example JohnSmith.
Microsoft Windows NT Server White Paper 29 process. For this reason, we recommend that you use the user name. 6. Click Enter. This adds the profile registry hive as a subkey to HKEY_USERS, as shown in the illustration below. 7. Edit the existing values as necessary.
30 Microsoft Windows NT Server White Paper Upgrading Windows NT 3.5x Server-based Profiles to Windows NT 4.0 Roaming Profiles When you upgrade Windows NT 3.5x roaming profiles (.usr profiles), you do not need to change anything in the profile path configured in the user account.
Microsoft Windows NT Server White Paper 31 When you upgrade a Windows NT 3.5x mandatory profile, the profile path does not need to be modified. However, you will need to create a new ma n - datory profile with the same desired settings.
32 Microsoft Windows NT Server White Paper If a profile has permissions that differ from those needed by the user (for example, if the profile was created for a user on a different domain), the profile permissions must be changed to function correctly.
Microsoft Windows NT Server White Paper 33 nection, those credentials are also stored here. Note that this includes only the domain and user account name; the password is not included.
34 Microsoft Windows NT Server White Paper Sample Log ========================================================= LoadUserProfile. : Entering, hToken = <0xac>, lpProfileInfo = 0x12f4f4 LoadUserPro.
Microsoft Windows NT Server White Paper 35 A System Policy is a set of registry settings that defines the computer r e - sources available to an individual or to a group of users.
36 Microsoft Windows NT Server White Paper this change must be made individually to each workst a tion. When a user of a Windows NT 4.0-based workstation logs on, if the Windows NT 4.
Microsoft Windows NT Server White Paper 37 e applied to the HKEY_CURRENT_USER key in the registry. NOTE: If a setting is ignored (gray) in the group settings, but the same setting is marked as enabled or disabled in the Default User settings, the Default User setting are used.
38 Microsoft Windows NT Server White Paper • What type of restrictions do you want to impose on users? • Will users be allowed to access locally installed common group applic a - tions, or will th.
Microsoft Windows NT Server White Paper 39 The System Policy Editor is a graphical tool that allows you to easily update the registry settings to implement a System Policy. The System Policy Editor is included with Windows NT Server 4.0, but you can install it on Windows NT Workstation-based machines and on Windows 95-based machines as well.
40 Microsoft Windows NT Server White Paper 4. Browse to locate the directory x :AdminApptoolsPoledit (where x is drive A through Z) on the Windows 95 compact disc. 5. Select both Group Policies and the System Policy Editor , and then click OK to Install .
Microsoft Windows NT Server White Paper 41 Your Own Custom .Adm File, ” later in this document. NOTE: The option to Add or Remove will be grayed out if there is a policy file currently open. Close the file in use and then change the template configur a tion.
42 Microsoft Windows NT Server White Paper • If the box is cleared , the policy is not implemented, and if the settings were previously impl e mented, they are removed from the registry. • If the box is grayed , the setting is ignored and unchanged from the last time the user logged on.
Microsoft Windows NT Server White Paper 43 tem Policy Editor . 2. From the File menu, click New Policy . 3. The Default Computer and Default User icons will be displayed.
44 Microsoft Windows NT Server White Paper Creating Alternate Folder Paths You may need to create shared folders for groups of users who need a co m - mon set of tools and shortcuts. Windows NT 4.0 System Policies allows you to create such shared folders.
Microsoft Windows NT Server White Paper 45 Policies Explorer 3. Add the following DWORD value by clicking Edit , New , DWORD value: LinkResolveIgnoreLinkInfo 4. Once entered, double-click this value and set the Value data to 1. Deploying Policies for Windows NT 4.
46 Microsoft Windows NT Server White Paper 3. In the Update mode box, select Manual (use specific path) . 4. In the Path for manual update box, type the UNC path and file name for the policy file.
Microsoft Windows NT Server White Paper 47 Modifying Policy Settings on Stand-Alone Workst a tions If you need to modify settings of a Windows NT 4.0-based wo rkstation user who is not a member of the.
48 Microsoft Windows NT Server White Paper user for whom the changes will apply. If the user is not currently logged on, click Cancel. (The user must be logged on for the changes to take e f fect.) 3. If the user is logged on, click OK. 4. The icons Local Computer and Local User will be displayed.
Microsoft Windows NT Server White Paper 49 These are the only two classes that are valid within the System Policy Editor. The System Policy Editor checks the syntax of each .adm file when the files are loaded, and displays a message if any errors are found.
50 Microsoft Windows NT Server White Paper option is selected within the lower pane of the System Policy Editor (see the di s cussion of PART and the code example below).
Microsoft Windows NT Server White Paper 51 type REG_EXPAND_SZ, for example: PART !!MyPolicy EDITTEXT EXPANDABLETEXT VALUENAME ValueToBeChanged END PART • MAXLEN — Specifies the maximum length of t.
52 Microsoft Windows NT Server White Paper each time the System Policy Editor starts.) Configuring System Policies Based on Geographic Location You may choose to enforce certain environment settings based upon ge o - graphic site location or vicinity.
Microsoft Windows NT Server White Paper 53 will refer the client to multiple servers for the same path. For example, on a Dfs server, the administrator has defined that users connecting to the UNC pat.
54 Microsoft Windows NT Server White Paper The following outlines the locations and values for registry entries that are written to a Windows NT-based workstation or server when you use the Sy s - tem Policy Editor to modify a policy. Knowing the location of these registry settings may help you to resolve problems.
Microsoft Windows NT Server White Paper 55 Color Scheme Category: Desktop Selection : Color scheme Key : HKEY_CURRENT_USER Control Panel Appearance Registry Value Registry Data Description Current REG.
56 Microsoft Windows NT Server White Paper Windows CurrentVersion Policies Explorer Registry Value Registry Data Description NoSetFolders REG_DWORD Off = 0 or value is r e moved; On = 1 Settings Taskb.
Microsoft Windows NT Server White Paper 57 My Computer Drive Icons Category: Windows NT Shell Subcategory : Restrictions Selection : Hide drives in My Computer Description : Removes the ic ons for the drives in My Computer.
58 Microsoft Windows NT Server White Paper Windows CurrentVersion P olicies Network Registry Value Registry Data Description NoEntireNetwork REG_DWORD Off = 0 or value is removed; On = 1 Network Neigh.
Microsoft Windows NT Server White Paper 59 Subcategory : Restrictions Selection : Disable Shut Down command Description : Disables the Shut Down option on the Start menu. Note that this does not disable the user ’ s ability to shut down the computer using the CTRL-ALT-DEL sequence.
60 Microsoft Windows NT Server White Paper Windows CurrentVersio n Policies System Registry Value Registry Data Description DisableRegistr y Tools REG_DWORD Off = 0 or value is removed; On = 1 Windows.
Microsoft Windows NT Server White Paper 61 Custom Programs Category: Windows NT Shell Subcategory : Custom Folders Selection : Custom Program folder Description : Specifies the UNC path for the folder to use when di s - playing folders, files, and shortcuts available when the user selects Programs from the Start menu.
62 Microsoft Windows NT Server White Paper Subcategory : Custom Folders Selection : Hide Start menu subfolders Description : Hides subfolders, such as the user ’ s Programs folder, if a custom Programs folder exists.
Microsoft Windows NT Server White Paper 63 CurrentVersion Explorer User Shell Folders Registry Value Registry Data Description NetHood REG_SZ Off = value is removed; On = text of UNC path to folder.
64 Microsoft Windows NT Server White Paper Explorer File Menu Category : Windows NT Shell Subcategory : Restrictions Selection : Remove File menu from Explorer Description : Removes the File option from Explorer ’ s tool bar. (This option was added in Service Pack 2.
Microsoft Windows NT Server White Paper 65 Microsoft Windows CurrentVersion Policies Explorer Registry Value Registry Data Description NoTrayCo n textMenu REG_DWORD Off = 0 or value is removed; On = 1.
66 Microsoft Windows NT Server White Paper Explorer Registry Value Registry Data Description NoNetConnectDisco n nect REG_DWORD Off = 0 or value is removed; On = 1 Explorer Context Menu Category : Win.
Microsoft Windows NT Server White Paper 67 complete or not. If the value is 0, the logon script is run during the startup of the shell and allows items in the Startup group to start. If the value is 1, the logon script completes before the shell or any items in the Startup group are started.
68 Microsoft Windows NT Server White Paper Explorer Tips Registry Value Registry Data Description Show REG_DWORD Off = 0; On = 1 Default Computer Settings The following data is specific to the options found in the Default Computer po r- tion of the System Policy Editor.
Microsoft Windows NT Server White Paper 69 CurrentControlSet Services SNMP Parameters ValidCommunities Registry Value Registry Data Description Increment numbers begi n ning with 1 REG_SZ On = text of Valid Community # x ; Off = value is removed from registry NOTE: There may be multiple entries in this subkey.
70 Microsoft Windows NT Server White Paper Registry Value Registry Data Description Increment numbers begi n ning with 1 REG_SZ On = text of Trap Configuration # x; Off = value is removed from registry NOTE: There may be multiple entries in this subkey.
Microsoft Windows NT Server White Paper 71 Drive Shares – Server Category : Windows NT Network Subcategory : Sharing Selection : Create hidden drive shares (server) Description : When enabled, creates the administrative shares for physical drives. These shares were created automatically under Windows NT 3.
72 Microsoft Windows NT Server White Paper Print Registry Value Registry Data Description SchedulerThreadPr i ority REG_DWORD Above normal = 1; Normal = 0, Less than normal = ffffffff Error Beep Categ.
Microsoft Windows NT Server White Paper 73 System CurrentControlSet Services RemoteAccess Parameters Registry Value Registry Data Description AuthenticateTime REG_DWORD Off = value is removed , On = time in se c - onds in hexadecimal. Decimal = 20-600; default = 120.
74 Microsoft Windows NT Server White Paper Shared Programs Folder Path Category : Windows NT Shell Subcategory : Custom shared folders Selection : Custom shared Programs folder Description : Specifies.
Microsoft Windows NT Server White Paper 75 Subcategory : Custom shared folders Selection : Custom shared Start menu Description : Specifies the UNC path the folder is to use when di s - playing the folders, files, and shortcuts the user receives as part of the Start menu.
76 Microsoft Windows NT Server White Paper Description : Before the user logs on, displays a custom dialog box with text. Key : HKEY_LOCAL_MACHINE Software Microsoft Windows NT CurrentVersion Winlogon.
Microsoft Windows NT Server White Paper 77 Registry Value Registry Data Description DontDisplayLastUse r Name REG_SZ Off = 0; On = 1 Logon Scripts Category : Windows NT System Subcategory : Logon Selection : Run logon scripts synchronously Description : Determines whether the shell waits for the logon script to complete or not.
78 Microsoft Windows NT Server White Paper Key : HKEY_LOCAL_MACHINE System CurrentControlSet Control FileSystem Registry Value Registry Data Description NtfsAllowExtendedCharacterIn8dot3Name REG_DWORD.
Microsoft Windows NT Server White Paper 79 Slow Network Detection Category : Windows NT User Profiles Selection : Automatically detect slow network connections Description : Enables or disables detection of a slow network.
80 Microsoft Windows NT Server White Paper Registry Value Registry Data Description Show REG_DWORD Off = 0 or value is removed; On = time in se c - onds in hexadecimal.
Microsoft Windows NT Server White Paper 81 The following section describes the locations and values for useful registry entries that are available in the operating system, but not available in the Sy s - tem Po l icy Editor.
82 Microsoft Windows NT Server White Paper Registry Value Registry Data Description NoStartBanner REG_DWORD 0 = enabled; 1= di s abled..
Microsoft Windows NT Server White Paper 83 For more information when configuring your network, refer to the following: • Windows NT Server Concepts and Planning Guide − Chapter 3, “ Mana g - ing User Work Environments ” (part of the Windows NT Server product documentation).
84 Microsoft Windows NT Server White Paper User Profile Flowcharts These flowcharts illustrate how User Profiles operate within the Windows NT 4.0 operating system, and give the administrator an at-a-glance look at the procedures to take and the internal processing that occurs when User Profiles are impl e mented under Windows NT 4.
Microsoft Windows NT Server White Paper 85 Begin Profile Process: Does the user already have a profile from Windows NT 3.5x? No Yes Is the profile .usr or .man? Will the user be mandated to receive the profile for logon? No Yes Configure the user profile path for the account with: servershare<username>.
86 Microsoft Windows NT Server White Paper Workstation boots, computer account is validated, and user enters logon credentials Receive data from Domain Controller about User Account Flag as not availa.
Microsoft Windows NT Server White Paper 87 (Continued) from Command to Load Profile Set USERPROFILE environment variable Check build number for version Load the User Profile Apply System Policy Save settings to Registry Same? Process UserDiff Registry changes (from major version change) Different? Flowchart 3.
88 Microsoft Windows NT Server White Paper Call made to check server profile Check for .man extension in profile path Flag as mandatory Start timer, check the existence of the profile path, and after completion, stop timer No Yes Directory File Nothing Access denied error Windows NT 3.
Microsoft Windows NT Server White Paper 89 System Policy Flowchart This flowchart illustrates how System Policy is applied in the Windows NT 4.0 operating system, and gives the administrator an at-a-glance look at the internal processing that occurs when policies are implemented under Windows NT 4.
90 Microsoft Windows NT Server White Paper The following are typical user profile scenarios that you may encounter in the future or may have already encountered.
Microsoft Windows NT Server White Paper 91 • Administrator action: Create a folder with the name myuser.pdm in the existing folder myservermyshare , and then place the desired mandatory profile into the new folder. • User action: None. • Notes: Once this procedure is performed, the Windows NT 3.
92 Microsoft Windows NT Server White Paper the extension .man. For example, use myservermysharemyuser.man. Then manually create the myuser.man folder manually in the myservermyshare directory. Places the mandatory profile for the user in this new folder.
Microsoft Windows NT Server White Paper 93 Important Information for Administrators Regarding User Logons and User Logoffs • Changes that you make to server-based profiles can be lost if you do not modify the last modification date/time stamp.
94 Microsoft Windows NT Server White Paper Recent Updates to Policies Since Retail Release The following changes have been made to System Policies support since the initial retail release of Windows NT 4.
Microsoft Windows NT Server White Paper 95 The articles below can be referenced either on TechNet or by using the Microsoft Knowledge Base on Microsoft ’ s Web site: http://www.microsoft.com/kb/ . Profiles Q141714 How to Use %LOGONSERVER% to Distribute User Pr o files Q154120 Debugging User Profiles and System Policies in Windows NT 4.
96 Microsoft Windows NT Server White Paper Q156432 Windows NT 4.0 Policy Restriction Error at Logon Q155956 Cannot Restore Default Setting for Shutdown Button Q163215 System Policies May Not Work With.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Microsoft Windows NT 4.0 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Microsoft Windows NT 4.0 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Microsoft Windows NT 4.0, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Microsoft Windows NT 4.0 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Microsoft Windows NT 4.0, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Microsoft Windows NT 4.0.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Microsoft Windows NT 4.0. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Microsoft Windows NT 4.0 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
