IT NT Server Services Windows 2000 Installation .

010

Windows 2000 servers in the St. Paul, centralized environment, should not
be installed with FTP, Telnet, or the Guest account active. If they are
needed they need management justification before they are installed. If
FTP is installed it must have anonymous FTP disabled.

Create Driver diskettes if third party drivers are required.

Installation and Configuration of Windows 2000:

Operating System Install

1. Boot from the Windows 2000 Server CD
2. Press F6 if you need to load Third Party SCSI or RIAD Drivers
3. Press Enter to continue setup at Welcome to setup
4. If prompted Press “C” to continue setup if setup has determined that your hard disk is
new
5. Press F8 to accept license agreement
6. Highlight unpartitioned space
7. Press C to create a partition
8. Create 9GB System Partition
9. Enter to create
10. Highlight New(unformatted) and press Enter to install
11. Highlight Format the partition using NTFS file system and press Enter to Continue
12. System will reboot when it has finished this portion of setup
13. Remove any floppies from the A: Drive

Operating System Setup

14. Select Next at the regional settings
15. Enter Name/Organization (3M Company/3M Company)- Select Next
16. Enter CD key (on back of CD case)– Select Next
17. Select licensing per seat – Select Next
18. Enter server name and administrators password (it must be complex) – Select Next
19. Highlight Accessories and Utilities and Select Details
20. Unselect Communications , Games, and Multimedia – Select OK
21. UnCheck Indexing Service
22. UnCheck Internet Information Services (IIS)
23. Highlight Management and Monitoring Tools - Select Details
24. Select Simple Network Management Protocol Select OK
25. Unselect Script Debugger
26. Highlight Terminal Services - Select Details
27. Select Enable Terminal Services - Select OK
28. Select Next to setup Windows 2000 components
29. Set Date, Time, and Time zone - Select Next
30. Select Remote Administration Mode for Terminal Services Setup - Select Next
31. Select Custom settings networking Settings - Select Next
32. Select Install
33. Highlight Protocol – Select Add
34. Highlight Network Monitor Driver – Select OK
35. Highlight Internet Protocol (TCP/IP) and Select Properties
36. Select Use the following IP Address
37. Enter IP address, subnet mask and default gateway

2/10/08 1
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

38. If local DNS enter in Preferred DNS

39. Otherwise enter [Link] for Preferred DNS server
40. Enter [Link] for Alternate DNS server
41. Select Advanced
42. Select WINS tab
43. Select ADD and enter [Link] Select ADD
44. Select ADD and enter [Link] Select ADD
45. Select OK to Advanced TCP/IP Settings
46. Select OK to Internet Protocol (TCP/IP) Properties
47. Select Next to Networking Components
48. Select Yes, make this computer a member of the following domain
49. Enter domain name – Select Next
50. Type in administrator ID and password for the domain you wish to join Select OK
51. Remove CD and any floppies when prompted
52. Select finish to finish setup
53. System will reboot

Note If you have an HP LT6000 you must execute the following file \\integration\windows
2000\installation documentation\HP\[Link] on the server you are installing at this point in the
installation. If you do not run this file now, you will experience lockups.

Operating System Configuration

54. Logon as administrator
55. Select I will configure this server later – Select Next
56. Uncheck Show this screen at startup
57. Close Windows 2000 configure your Server
58. From Start/Settings/Control panel – Select System
59. Select Advanced tab– Startup and Recovery - change Display List of Operating Systems
for: to 5 sec – Select OK to Startup and Recovery
60. OK to exit System Properties
61. Select Display
62. Select Screen saver tab- set screen saver to default screen saver, set wait to10 min. and
password protect – Select OK to Display Properties
63. Select Settings tab
64. Set screen area to 800x600 – OK
65. Select OK to display settings
66. Select Yes to keep settings
67. Close Control Panel
68. Right Click on Menu Bar
69. Select Properties
70. UnCheck Use Personalized Menus
71. Select Advanced Tab
72. Check Display Logoff
73. Select OK to Task Bar and Start Menu Properties
74. From Start/Programs/Administrative tools – Select Event Viewer. Right click the
application log – Select Properties
75. Select - Overwrite Events as Needed –
76. Set Maximum log size to 2048 - Select OK
77. Repeat for Security and System logs
78. Close Event Viewer

2/10/08 2
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

79. From My Computer/Explorer/Tools/Folder Options/View – Uncheck Hide file extensions

for known file types
80. Select OK to Folder Options
81. Close My Computer
82. From Start/Programs/Administrative Tools – Select Services
83. Double click DHCP Client Service
84. Change startup Type for DHCP Client Service to Manual
85. Select OK to DHCP Client Service Properties
86. Double click Distributed File System Service
87. Change startup Type for Distributed File System Service to Manual
88. Select OK to Distributed File System Service Properties
89. Double click Distributed Transaction Coordinator Service
90. Change startup Type for Distributed Transaction Coordinator Service to Manual
91. Select OK to Distributed Transaction Coordinator Service Properties
92. Double click IPSEC Policy Agent Service
93. Change startup Type for IPSEC Policy Agent Service to Manual
94. Select OK to IPSEC Policy Agent Service Properties
95. Double click License Logging Service
96. Change startup Type for License Logging Service to Disable.
97. Select OK to License Logging Service Properties
98. Double click Print Spooler Service
99. Change startup Type for Print Spooler Service to Manual
[Link] OK to Print Spooler Service Properties
[Link] click Removable Storage Service
102. Change startup Type for Removable Storage Service to Manual
[Link] OK to Removable Storage Service Properties
[Link] click System Event Notification Service
105. Change startup Type for System Event Notification Service to Manual
[Link] OK to System Event Notification Service Properties
[Link] click Telnet Service
108. Change startup Type for Telnet Service to Disable
[Link] OK to Telnet Properties
[Link] Services
[Link] Notepad
[Link] “This file is used to skip the SMS Logon Script”
[Link] file as C:\[Link]
[Link] Notepad
[Link] Start/Programs/Administrative Tools – Select Computer Management
[Link] System Tools double click on Local Users and Groups
[Link] click on Users
[Link] click on TSInternetUser account – Select Disable
[Link] TSInternetUser Account Password (Auditing requirement)
[Link] Guest Account Password (Auditing requirement)
[Link] click on the Administrator account and select Rename
[Link] Administrator account to snoitarepo
[Link] Computer Management

Security Settings
[Link] Start/Programs/Administrative Tools – Select Local Security Policy
[Link] Account Policies
[Link] Password Policy

2/10/08 3
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

[Link] Enforce Password History to 5

[Link] Maximum Password Age to 90
[Link] Minimum Password Age to 1
[Link] Minimum Password Length to 8
[Link] Password must meet Complexity Requirements to Enable
[Link] Account Lockout Policy
[Link] Account Lockout Duration to 0
[Link] to suggested settings
[Link] Reset Account Lockout Counter After to 60 minutes
[Link] Local Policies
[Link] Audit Policy
[Link] Audit Logon Events
[Link] Success and Failure – OK
[Link] Audit Policy Change
[Link] Success and Failure – OK
[Link] Audit System Events
[Link] Success and Failure - OK
[Link] Local Security Policies
[Link] Start/Programs/Administrative Tools – Select Terminal Services Configuration
[Link] Connections
[Link] Click RDP-TCP
[Link] Sessions Tab
[Link] Override User Settings – Set End a disconnected Session to 5 minutes
[Link] OK to RDP-TCP Properties
[Link] Server Settings
[Link] Click Active Desktop
[Link] Disable Active Desktop
[Link] OK to Active Desktop
[Link] Terminal Services Configuration
[Link] Click My Computer - Select Properties
[Link] Network Identification Tab
[Link] Properties button
[Link] More button
[Link] [Link] for Primary DNS Suffix of this Computer
[Link] OK to DNS Suffix and NetBIOS Computer Name
[Link] OK to Identification Changes
[Link] OK to Reboot Required
[Link] OK to System Properties
[Link] Yes to Restart Computer

Windows Time Service

166. From Start/Run - Type Net time /Setsntp:ntptime

Configuring SNMP
[Link] Start/Programs/Administrative Tools – Select Services
[Link] click SNMP Service
[Link] Agent Tab
[Link] IT Operations for Contact
[Link] BLDG 224 Bank ? Rack ? for Location
[Link] Traps Tab

2/10/08 4
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

[Link] sniw-wins for Community Name – Select Add to List

[Link] compaqhdm03 for the trap destination
[Link] Security Tab
[Link] Edit
[Link] sniw-wins for Community Name
[Link] Community rights to Read Write
[Link] OK to SNMP Service Configuration
[Link] “Send Authentication Trap”
[Link] OK to SNMP Service Properties (Local Machine)
[Link] SNMP Services

Installing Resource Kit

183. Map a network drive to \\integration\Windows 2000 – Use your WINS logon
[Link] folder “ReskitSupplement1”
[Link] “[Link]”
[Link] Next to Microsoft Windows 2000 Resource Kit Setup Wizard
[Link] I Agree to End User License Agreement – Select Next
[Link] Next to User information
[Link] Typical to Installation Type– Select Next
[Link] Next to begin Install
[Link] Yes to Install Active Perl
[Link] Next to Active Perl Welcome
[Link] Yes to Active Perl License Agreement
[Link] Yes to Active Perl Installation Notes
[Link] Next to Destination Location
[Link] Next to Active Perl Components
[Link] Next to Active Perl Options
[Link] Next to Active Perl IIS Options
[Link] Next to Active Perl Program Folder
[Link] Next to Start Copying files
[Link] No to Review Release Notes
[Link] Finish
[Link] “ircmd”

Installing Support Tools

[Link] Back to return to Windows 2000 directory on Integration server
[Link] folder “SUPPORT”
[Link] folder “TOOLS”
[Link] [Link]
[Link] Next to Windows 2000 Support Tools Setup Wizard
[Link] Next to User Information
[Link] Typical to Installation type – Select Next
[Link] Next to begin Installation
[Link] Finish

RCMD Server Install

[Link] Start/Progarms/Administrative Tools – Select Services
[Link] click Remote Command Service
[Link] Automatic for Startup Type
[Link] OK to Remote Command Service Properties
[Link] Services

2/10/08 5
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

Installing Recovery Console

[Link] your Windows 2000 Server or Advanced Server CD.
[Link] Start/Run - Type D:\I386\WINNT32 /CMDCONS
[Link] Yes to install the Recovery Console.
[Link] OK to Recovery Console successfully Installed

Creating Server name on screen

[Link] Start/Programs/accessories – Select paint
[Link] file c:\winnt\prairie wind
[Link] A button for text
[Link] rectangle across bottom of prairie wind image for server name location
[Link] font to Impact, point size to 26 and type to italic
[Link] cursor in lower left of rectangle and type in server name
[Link] File then save
[Link] Paint
[Link] click on the desktop – select properties
[Link] tab – select Prairie Wind
[Link] Picture Display - Stretch
[Link] OK

Drive Configuration
[Link] Click My Network Places - Select Properties
[Link] Click Local Area Connection – Select Properties
[Link] Configure button
[Link] Advanced Tab
[Link] Link Speed and Duplex
[Link] to Appropriate speed/Duplex (100Mbps/Full Duplex Datacenter)
[Link] OK to LAN Adapter Properties
[Link] OK to Local Area Connection Properites
[Link] Click Local Area Connection – Select Rename
[Link] in Appropriate name (Corporate ip or Backup ip) - Enter
[Link] Click Second Local Area Connection if Backup NIC is used - Repeat steps (59-66)
[Link] Network Dial-up Connections
[Link] click My Computer– Select Manage
[Link] Disk Management located under Storage
[Link] Next to Write Signature and Upgrade Disk Wizard
[Link] all disk
[Link] Next to write signature to disks
[Link] Next to Disks to want to upgrade
[Link] Finish
[Link] Disk you want to create
[Link] Click – Select Create Volume
[Link] Next to Create Volume Wizard Welcome
[Link] Simple Volume - Next
[Link] Next to Selected Disks for Volume
[Link] Next to Drive Letter
[Link] Perform Quick Format
[Link] Next
[Link] Finish
[Link] for all additional disks

2/10/08 6
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

[Link] out of Computer Management

Securing Drives
[Link] click on My Computer
[Link] Click on E: Select Properties – Security tab - remove everyone from the
permissions on e: drive and add the Local Administrator’s Group, full control
[Link] OK to Exit E: Properties
[Link] for all additional data drive letters
[Link] My Computer

Diskperf Setup
[Link] Start/Run enter CMD to get a Dos command prompt.
[Link] the command prompt type DISKPERF -y and press enter.
271.A prompt comes up that all physical and logical disk performance tools are set to start at
boot.

IE 6.0 Upgrade
[Link] click Internet Explorer – Select Properties
[Link] Connection tab
[Link] LAN Settings button
[Link] - Automatically detect settings
276. Check “Use automatic configuration script” Address:[Link]
[Link] “Use a proxy server” Address:[Link], Port:3128
[Link] “Bypass proxy server for local addresses” – OK
[Link] OK to Local Area Network (LAN) Settings
[Link] to Internet Properties
281. Map a network drive to \\integration\Software – Use your WINS logon
[Link] folder “IE 6.0sp1”
[Link] “[Link]”
[Link] the License Agreement – Next
[Link] Next to Windows Update: Internet Explorer and Internet Tools
[Link] Finish when setup is complete
[Link] will reboot

MDAC Upgrade
288. Map a network drive to \\integration\Software – Use your WINS logon
[Link] folder “MDAC”
[Link] Folder “MDAC 2.7 SP1”
[Link] “mdac_typ.exe”
[Link] the License Agreement – Next
[Link] Finish to begin installation
[Link] Close to exit MDAC setup

Service Pack and Hotfixes

[Link] click on My Computer
296. Open \\Integration\Windows 2000
[Link] Folder “Service Packs”
[Link] Service Pack 3
299. Server will reboot.

2/10/08 7
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]
IT NT Server Services Windows 2000 Installation .010

300. From \\Integration\Windows 2000 Open Folder “Hotfixes”

[Link] click on the file SP3HF-Q3-03
302. Install latest Perl Script BASE, located at \\Integration\Windows 2000\Base Script
[Link] the server.

HP ProLiant Agents and Drivers

202. Install latest HP ProLiant Agents and Drivers located at \\integration\ntcsp
W2K = \\integration\ntcsp\6_20a_W2K\[Link]
203. Reboot Server.

Install NAV - Set Live Update time to 3:00am

Install Backup software as required

Have Tivoli installed

You have now completed the Default NTSPAS install, all other instructions are
defined in “Windows 2000 Master [Link]” located in
\\integration\windows 2000

2/10/08 8
/var/www/apps/collegelist/repos/collegelist/trunk/collegelist/tmp/scratch7/[Link]