How can you improve logon performance on remote networks? (MS Windows Server 2003)
You can do this by enabling universal group membership caching (MS Windows Server 2003). If you have remote networks where it just isn't practical or cost-effective to install a global catalog server, you can configure that office's domain controllers to cache users' universal group membership information. Enabling these servers to cache the universal group information significantly improves users' logon performance. To begin, from the Start menu, choose Administrative Tools | Active Directory Sites And Services. In the console tree, select the remote site for which you want to enable universal group membership caching. Next, in the details pane, right-click on NTDS Site Settings and choose Properties. Check Enable Universal Group Membership Caching, and from the Refresh Cache From dropdown list, select the site from which you want to refresh the domain controllers' cache. Select the option if you want the domain controllers to refresh their caches from the nearest global catalog server. Click OK to save your changes.
How can you reset a server's security to the default values? (MS Windows Server 2003)
If you're unsure of a server's security configuration or you simply want to reset its configuration to the default values, you can use the Setup Security.inf template to do so. To apply this template, begin by opening a Microsoft Management Console. Next, choose File | Add/Remove Snap-In. Click Add. In the list of available snap-ins, select Group Policy Object Editor and click Add. Verify that the focus is set to Local Computer and click Finish. Click Close, and then click OK. In the console tree, expand Computer Configuration and Windows Settings. Right-click on Security Settings and choose Import Policy. In the list of available security templates, select Setup Security.inf and click Open. Your server's security is now reset to the default values for Windows Server 2003.
Note: Be aware that the Group Policy Object Editor automatically applies the settings in the Setup Security.inf template as soon as you import it. Don't perform the import unless you're sure that you want to reset your server's security configuration.How can you export a server's security configuration to a template? (MS Windows Server 2003)
Windows Server 2003 enables you to use templates to automatically tighten a server's security. If you've already configured the security of one of your servers and would like to use its same settings on other servers, you can use the secedit command line utility to export the server's security configuration to a template file. For example, if you want to export all of a server's domain security configuration settings to a template file named fileserver.inf, open a Command Prompt window and use the following syntax:
secedit /export /cfg fileserver.inf
Secedit creates the new template file in your current folder. To make it easy to use this template, you should copy it to the \System-Root%\Security\Templates folder. Finally, apply this template to other servers on your network by using group policy, local policy, secedit, or the Security Configuration And Analysis MMC.
How do you disable the Shutdown Event Tracker? (MS Windows 2003)
Each time you shut down a Windows Server 2003 server, you see a Shut Down Windows dialog box that requires you to explain why you're shutting down the computer. You can use this information to track the shutdowns of your computers, especially unplanned shutdowns due to hardware or software problems. Although tracking shutdowns can help you identify problems, if your computers are stable, this Shut Down Windows dialog box can be somewhat of a nuisance. If you don't feel that you need to track shutdowns, you can disable the Shutdown Event Tracker by using local group policy. From the Start menu, choose Run. In the Open text box, type gpedit.msc and click OK. In the console tree, expand Computer Configuration\Administrative Templates and then select the System folder. In the details pane, double-click on Display Shutdown Event Tracker. Select Disabled, and then click OK.