Windows 2000
Windows 2000 (also referred to as Win2K) is a preemptible,interruptible, graphical and business-oriented operating system that is designed towork with either uniprocessor or symmetricmulti-processor 32-bit Intel x86 computers. It is part of the Microsoft Windows NT line of operating systems and was released on February 172000. It was succeeded by Windows XP in October 2001 andWindows Server 2003 in April 2003.Windows 2000 is classified as a hybrid kernel operating system, and its architecture is divided into two modes: usermode and kernel mode. The kernel mode provides unrestricted access tosystem resources and facilitates the user mode, which is heavily restricted and designed for most applications.
Windows 2000 was made available in four editions: Professional, Server, Advanced Server, and Datacenter Server. Additionally,Microsoft offered Windows 2000 Advanced Server Limited Edition, which was released in 2001 and runs on 64-bit Intel Itanium microprocessors.All editions of Windows 2000 have common functionality, including many system utilities such as the Microsoft Management Console and standard system management applications such as a diskdefragmentation utility. Support for people with disabilities was improved with a number of new assistive technologies, and Microsoft included increased support for different languages and localeinformation. All versions of the operating system support the Windows NT filesystem, NTFS 5, theEncrypting File System, as well as basic and dynamic disk storage. The Windows2000 Server family has additional functionality, including the ability to provide ActiveDirectory services (a hierarchical framework of resources), Distributed File System(a file system that supports sharing of files) andfault-redundant storage volumes. Windows 2000 can be installed anddeployed to corporate desktops through either an attended orunattended installation. Unattended installations rely on the use ofanswer files to fill in installation information, and can beperformed through a bootable CD using Microsoft Systems ManagementServer, by the System Preparation Tool.
Microsoft has marketed Windows 2000 as "the most secure Windows we've ever shipped"[2], however it has become the target of a number of high-profile virusattacks such as Code Red and Nimda, and more than six years after its release, continues to receive patches for securityvulnerabilities on a near-monthly basis.
HistorySee also: History of MicrosoftWindowsWindows 2000 is a continuation of the Microsoft Windows NT line of operating systems,replacing its predecessor, Windows NT 4.0. Originally called Windows NT 5.0,Microsoft changed the name to Windows 2000 on October 27 1998[3] It was alsothe first Windows version that was released without a code name,though Windows 2000 Service Pack 1 was codenamed "Asteroid" and Windows 2000 64-bit was codenamed "Janus" (not to be confusedwith Windows 3.1, which had the same codename). The first beta for Windows 2000 wasreleased on September 27 1997 and several further betas werereleased until Beta 3 which was released on April 29 1999. Fromhere, Microsoft issued three release candidates between July and November 1999, and finally released the operating system topartners on December 12 1999.[4] The public received the full version of Windows 2000 on February 17 2000 and the press immediately hailed it as the most stableoperating system Microsoft had ever released[citation needed]. InformationWeek summarized the release "our tests show the successor to NT 4.0 is everything we hoped itwould be. Of course, it isn't perfect either."[5]Wired News later described the results of the February launch as "lackluster"[6]. Novell was not so impressedwith Microsoft's new directory service architecture as they found it to be less scalable or reliable than their ownNovell Directory Services (NDS) technology.[7]
Originally, Windows 2000 was planned to replace both Windows 98 and Windows NT 4. However, that was later changed. Instead, anupdated version of Windows 98 called Windows 98 Second Edition was released in 1999 as a successor to Windows 98. In 1999,Microsoft started development on a project called Windows Neptune, which was supposed tobe a home-user edition of Windows 2000. However, the project lagged in production time – and only one alpha release was built.Windows Me was released as a substitute, and the Neptune project was cancelled in favour ofWhistler (Windows XP). The only elements of the Neptune project which were included in Windows 2000 were the ability to upgradefrom Windows 95 or Windows 98, and support for the FAT32 file system.
On September 29 2000, Microsoft released Windows 2000Datacenter Server, targeted at large-scale computing systems with support for 32 processors.
Four service packs were released for Windows 2000: Service Pack 1 (SP1) onAugust 15 2000, Service Pack 2 (SP2) on May 16 2001, Service Pack 3 (SP3) on August 292002 and its last Service Pack (SP4) on June 26 2003. Microsoft has stated that they will not release a Service Pack 5, but instead, have made available an "UpdateRollup" for Service Pack 4. Microsoft phased out all development of their Java VirtualMachine (JVM) from Windows 2000 in Service Pack 3.
Windows 2000 has since been superseded by newer Microsoft operating systems. Microsoft replaced Windows 2000 Server productswith Windows Server 2003, and Windows 2000 Professional with Windows XP Professional.
Architecture 
The Windows 2000 operating system architecture consists of two layers (user mode and kernel mode), with many different moduleswithin both of these layers.
See also: Architecture of the Windows NToperating system lineWindows 2000 is a highly modular system that consists of two main layers: a usermode and a kernel mode. The user mode refers to the mode in which userprograms are run. Such programs are limited in terms of what system resources they have access to, while the kernel mode hasunrestricted access to the system memory and external devices. All user mode applications access system resources through theexecutive which runs in kernel mode.
User modeUser mode in Windows 2000 is made of subsystems capable of passing I/O requests to theappropriate kernel mode drivers by using the I/O manager. Two subsystems make up the user mode layer of Windows 2000: theenvironment subsystem and the integral subsystem.
The environment subsystem was designed to run applications written for many different types of operating systems. Theseapplications, however, run at a lower priority than kernel mode processes. There are three main environment subsystems:
- Win32 subsystem runs 32-bit Windows applications and also supports Virtual DOS Machines (VDMs), which allows MS-DOS and16-bit Windows 3.x (Win16) applications to run on Windows.
- OS/2 environment subsystem supports 16-bit character-based OS/2 applications and emulatesOS/2 1.3 and 1.x, but not 32-bit or graphical OS/2 applications as used on OS/2 2.x or later.
- POSIX environment subsystem supports applications that are strictly written to either thePOSIX.1 standard or the related ISO/IEC standards.
The integral subsystem looks after operating system specific functions on behalf of the environment subsystem. It consists ofa security subsystem (grants/denies access and handles logons), workstation service (helps the computer gainnetwork access) and a server service (lets the computer provide network services).
Kernel modeKernel mode in Windows 2000 has full access to the hardware and systemresources of the computer. The kernel mode stops user mode services and applications from accessing critical areas of theoperating system that they should not have access to.
Each object in Windows 2000 exists in its own namespace. This is ascreenshot from SysInternal's WinObj
The executive interfaces with all the user mode subsystems. It deals with I/O, object management, security and processmanagement. It contains various components, including:
- Object manager: a special executive subsystem that all other executive subsystems must pass through to gain access toWindows 2000 resources. This is essentially a resource management infrastructure service that allows Windows 2000 to be anobject oriented operating system.
- I/O Manager: allows devices to communicate with user-mode subsystems by translating user-mode read and write commandsand passing them to device drivers.
- Security Reference Monitor (SRM): the primary authority for enforcing the security rules of the security integralsubsystem. [8]
- IPC Manager: short for Interprocess Communication Manager,manages the communication between clients (the environment subsystem) and servers (components of the executive).
- Virtual Memory Manager: manages virtual memory, allowing Windows 2000 to usethe hard disk as a primary storage device (althoughstrictly speaking it is secondary storage).
- Process Manager: handles process and thread creation and termination
- PnP Manager: handles Plug and Play and supports device detection andinstallation at boot time.
- Power Manager: the power manager coordinates power events and generates power IRPs.
- The display system is handled by a device driver contained in Win32k.sys. The Window Manager component of thisdriver is responsible for drawing windows and menus while the GDI (graphicaldevice interface) component is responsible for tasks such as drawing lines andcurves, rendering fonts and handling palettes.
The Windows 2000 Hardware Abstraction Layer, or HAL, is a layer betweenthe physical hardware of the computer and the rest of the operating system. It was designed to hide differences in hardware andtherefore provide a consistent platform to run applications on. The HAL includes hardware specific code that controls I/Ointerfaces, interrupt controllers and multiple processors.
The hybrid kernel sits between the HAL and the executive and provides multiprocessorsynchronization, thread and interrupt scheduling and dispatching, trap handling and exception dispatching. The hybrid kerneloften interfaces with the process manager[9] and isresponsible for initialising device drivers at bootup that are necessary to get the operating system up and running.
Common functionality
Certain features are common across all editions of Windows 2000, among them being NTFS 5, the Microsoft Management Console (MMC), the EncryptingFile System (EFS), dynamic and basic disk storage, usability enhancements and multi-language and locale support. Windows2000 also has several standard system utilities included as standard. As well as these features, Microsoft introduced a newfeature to protect critical system files, called Windows File Protection. This prevents programs(with the exception of Microsoft's update programs) from replacing critical Windows system files and thus making the systeminoperable.[10]
Microsoft recognized that the infamous Blue Screen of Death (or stop error)could cause serious problems for servers that needed to be constantly running and so provided a system setting that would allowthe server to automatically reboot when a stop error occurred. Also included is an option to dump any of the first64KB of memory to disk (the smallest amount of memory that is useful for debugging purposes, also known as a minidump), a dump of only the kernel's memory, or a dump of the entirecontents of memory to disk, as well as write that this event happened to the Windows 2000 event log. In order to improveperformance on computers running Windows 2000 as a server operating system, Microsoft gave administrators the choice ofoptimizing the operating system's memory and processor usage patterns for background services or for applications.
NTFS 5
Windows 2000 supports disk quotas, which can be set via the "Quota" tab found in the hard disk properties dialog box.
Main article: NTFS
Microsoft released the third version of the NTFS file system — also known as version 5.0 — as part of Windows 2000; thisintroduced quotas, file-system-level encryption,sparse files and reparse points. Sparse files allow for the efficient storage of data setsthat are very large yet contain many areas that only have zeroes. Reparse points allow theobject manager to reset a file namespace lookup and let file system drivers implement changed functionality in a transparentmanner. Reparse points are used to implement volume mount points, junctions,Hierarchical Storage Management, Native Structured Storage and SingleInstance Storage. Volume mount points and directory junctions allow for a file to be transparently referred from one file ordirectory location to another.
Encrypting File SystemMain article: Encrypting File System
The Encrypting File System (EFS) introduced strong file-level encryptionto Windows. Itallows any folder or drive on an NTFS volume to be encryptedtransparently to the end user. EFS works in conjunction with the EFSservice, Microsoft's CryptoAPI and the EFS File System Run-Time Library (FSRTL). As ofSeptember 2006, its encryption has not been compromised.
EFS works by encrypting a file with a bulk symmetric key (also known as theFile Encryption Key, or FEK), which is used because it takes a relatively smaller amount of time to encrypt and decrypt largeamounts of data than if an asymmetric key cipher is used. The symmetric key thatis used to encrypt the file is then encrypted with a public key that isassociated with the user who encrypted the file, and this encrypted data is stored in the header of the encrypted file. Todecrypt the file, the file system uses the private key of the user to decrypt the symmetric key that is stored in the fileheader. It then uses the symmetric key to decrypt the file. Because this is done at the file system level, it is transparent tothe user.[11]
Also, in case of a user losing access to their key, support for recovery agents that can decrypt files is built in to EFS.
Basic and dynamic disk storageMain article: Logical Disk Manager
Windows 2000 introduced the Logical Disk Manager for dynamic storage. Allversions of Windows 2000 support three types of dynamic disk volumes (along with basic storage): simple volumes,spanned volumes and striped volumes:
- Simple volume: this is a volume with disk space from one disk.
- Spanned volumes: multiple disks spanning up to 32 disks. If one disk fails, all data in the volume is lost.
- Striped volumes: also known as RAID-0, a striped volume stores all its data acrossseveral disks in stripes. This allows better performance because disk read and writes are balanced across multipledisks.
Windows 2000 also added support for the iSCSI protocol.
Accessibility support
The Windows 2000 onscreen keyboard map allows users who have problems with using the keyboard to use a mouse to input text.
Microsoft made an effort to increase the usability of Windows 2000 for people with visual and auditory impairments and otherdisabilities. They included several utilities designed to make the system moreaccessible:
- FilterKeys: These are a group of keyboard related support for people withtyping issues, and include:
- SlowKeys: Windows is told to disregard keystrokes that are not held down for a certain time period
- BounceKeys: multiple keystrokes to one key to be ignored within a certain timeframe
- RepeatKeys: allows users to slow down the rate at which keys are repeated via the keyboard's keyrepeat feature
- ToggleKeys: when turned on, Windows will play a sound when either the CAPS LOCK, NUM LOCK or SCROLL LOCK keys arepressed
- MouseKeys: allows the cursor to be moved around the screen via the numeric keypad instead of the mouse
- On screen keyboard: assists those who are not familiar with a given keyboard by allowing them to use a mouse to entercharacters to the screen
- SerialKeys: gives Windows 2000 the ability to support speech augmentation devices
- StickyKeys: makes modifier keys (ALT, CTRL and SHIFT) become "sticky" — in other words a user can press the modifierkey, release that key and then press the combination key. Normally the modifier key must remain pressed down to activate thesequence. (Activated by pressing Shift 6 times quickly)
- On screen magnifier: assists users with visual impairments by magnifying the part of the screen they place their mouseover.
- Narrator: Microsoft Narrator assists users with visual impairments withsystem messages, as when these appear the narrator will read this out via the sound system
- High contrast theme: to assist users with visual impairments
- SoundSentry: designed to help users with auditory impairments, Windows 2000 will show a visual effect when a sound isplayed through the sound system
Language & locale supportWindows 2000 has support for many languages other than English. It supportsArabic, Armenian, Baltic, Central European, Cyrillic, Georgian, Greek, Hebrew, Indic, Japanese, Korean, Simplified Chinese, Thai, Traditional Chinese, Turkic, Vietnamese and Western European languages. [12] Italso has support for many different locales, a list of which can be found on Microsoft'swebsite.
Games supportWindows 2000 included version 7.0 of the DirectX application programming interfaces, commonlyused by game developers on Windows 98.[13] The majority of games written for recent versions of DirectX could therefore run on Windows 2000,in contrast to Windows NT 4.0, which only provided support for DirectX 3.
System utilities
The Microsoft Management Console (MMC) is used for administering Windows 2000 computers.
Windows 2000 introduced the Microsoft Management Console (MMC), which is used to create, save, and open administrative tools.Each of the tools is called a console, and most consoles allow an administrator to administer other Windows 2000 computersfrom one centralised computer. Each console can contain one or many specific administrative tools, called snap-ins.Snap-ins can be either standalone (performs one function), orextensions (adds functionality to an existing snap-in). In order toprovide the ability to control what snap-ins can be seen in a console,the MMC allows consoles to be created in author mode orcreated in user mode. Author mode allows snap-ins to be added, newwindows to be created, all portions of the console tree can bedisplayed and for consoles to be saved. User mode allows consoles to bedistributed with restrictions applied. User mode consolescan have full access granted user so they can make whatever changesthey desire, can have limited access so that users cannot addto the console but they can view multiple windows in a console, or theycan have limited access so that users cannot add to theconsole and also cannot view multiple windows in a console. [14]
The Windows 2000 Computer Management console is capable of performing many system tasks. It is pictured here starting a diskdefragmentation.
The main tools that come with Windows 2000 can be found in the Computer Management console (found in Administrative Tools inthe Control Panel). This contains the event viewer — a means of seeing events and the Windows equivalent of a log file, a system information viewer, the ability to view open shared folders and shared folder sessions,a device manager and a tool to view all the local users and groups on the Windows 2000 computer. It also contains a diskmanagement snap-in, which contains a disk defragmenter as well as other disk management utilities. Lastly, it also contains aservices viewer, which allows users to view all installed services and to stop and start them on demand, as well as configurewhat those services should do when the computer starts.
The REGEDIT.EXE utility on Windows 2000.
The REGEDT32.EXE utility showing the same part of the registry.
Windows 2000 comes bundled with two utilities to edit the Windows registry.One actslike the Windows 9x REGEDIT.EXE program and the other could editregistry permissions in the same manner that Windows NT'sREGEDT32.EXE program could. REGEDIT.EXE has a left-side tree view thatbegins at "My Computer" and lists all loaded hives.REGEDT32.EXE has a left-side tree view, but each hive has its ownwindow, so the tree displays only keys. REGEDIT.EXE representsthe three components of a value (its name, type, and data) as separatecolumns of a table. REGEDT32.EXE represents them as a listof strings. REGEDIT.EXE was written for the Win32 APIand supportsright-clicking of entries in a tree view to adjust properties and othersettings. REGEDT32.EXE was also written for the Win32 APIand requires all actions to be performed from the top menu bar. BecauseREGEDIT.EXE was directly ported from Windows 98, it does not support permission editing (permissions do not exist in Windows 9x). Therefore, theonly way to access the full functionality of an NT registry was with REGEDT32.EXE, which uses the older multiple document interface (MDI), which newer versions of regedit do not use.Windows XP was the first system to integrate these two programs into one, adopting theREGEDIT.EXE behavior with the additional NT functionality.
The System File Checker (SFC) also comes bundled with Windows 2000. It is a commandline utility that scans system files and verifies whether they were signed by Microsoft and works in conjunction with theWindows File Protection mechanism. It can also repopulate and repair all the files in the Dllcache folder. [15]
Recovery ConsoleMain article: Recovery Console
The Recovery Console is usually used to recover unbootable systems.
The Recovery Console is an application that is run from outside the installed copy of Windows and that enables a user toperform maintenance tasks that cannot be run from inside of the installed copy, or cannot be feasibly run from another computeror copy of Windows 2000. It is usually used to recover the system from errors causing booting to fail, which would render othertools useless.
It presents itself as a simple command line interface. The commands arelimited to ones for checking and repairing the hard drive(s), repairing boot information (including NTLDR), replacing corrupted system files with fresh copies from the CD, or enabling/disabling services and driversfor the next boot.
The console can be accessed in one of two ways:
- Starting from the Windows 2000 CD, and choosing to enter the Recovery Console instead of continuing with setup, or
- Installing the Recovery Console via Winnt32.exe, with the /cmdcons switch. However, the console can then only be used if thesystem boots to the point where NTLDR can start it.
Server family functionality
The Windows 2000 server family consists of Windows 2000 Server, Windows 2000 Advanced Server and Windows 2000 DatacenterServer.
All editions of Windows 2000 Server have the following services and functionality built-in:
- Routing and Remote Access Service (RRAS) support, facilitating dial-up and VPN connections, support for RADIUS authentication, networkconnection sharing, Network Address Translation, unicast and multicastrouting
- DNS server, including support for DynamicDNS. Active Directory relies heavily on DNS.
- Microsoft Connection Manager Administration Kit and Connection Point Services
- Support for distributed file systems (DFS)
- Hierarchical Storage Management support, a service that runs inconjunction with NTFS that automatically transfers files that are not used for some period of timeto less expensive storage media
- Fault tolerant volumes, namely it supports Mirrored and RAID-5
- Group policy (part of Active Directory)
- IntelliMirror, a collection of technologies for fine-grained management of Windows 2000 Professional desktops (roamingprofiles, software installation, settings management).
- Kerberos authentication
- Public Key Infrastructure (PKI) support
- Terminal Services and support for the Remote Desktop Protocol (RDP)
- Internet Information Server (IIS) 5
Distributed File SystemMain article: Distributed File System(Microsoft)
The Distributed File System, or DFS, allows shares in multiple different locations to belogically grouped under one folder, or DFS root. When users try to access a share that exists off the DFS root, the useris really looking at a DFS link and the DFS server transparently redirects them to the correct file server and share. ADFS root can only exist on a Windows 2000 version that is part of the server family, and only one DFS root can exist on thatserver.
There can be two ways of implementing DFS on Windows 2000: through standalone DFS, or through domain-based DFS. Standalone DFSallows for only DFS roots that exist on the local computer, and thus does not use Active Directory. Domain-based DFS roots existwithin Active Directory and can have their information distributed to other domain controllers within the domain — this providesfault tolerance to DFS. DFS roots that exist on a domain must be hosted on a domain controller or on a domain member server. Thefile and root information is replicated via the Microsoft File Replication Service (FRS). [16]
Active DirectoryMain article: Active Directory
A new way of organizing Windows network domains, or groups of resources, calledActive Directory, was introduced with Windows 2000 and obsoleted Windows NT's traditional domain model. Active Directory'shierarchical nature allowed administrators a built-in way to manage user and computer policies, user accounts, and toautomatically deploy programs and updates with a greater degree of scalability and centralization than provided in previousWindows versions. It is one of the main reasons many corporations migrated to Windows 2000. User information stored in ActiveDirectory also provided a convenient phone book-like function to end users. Active Directory domains can vary from smallinstallations with a few hundred objects, to large installations with millions of objects. Active Directory contains the abilityto organise and link groups of domains into a contiguous domain name space to formtrees. Groups of trees existing outside of the same namespace can be linked together to form forests.
Active Directory services can only be installed on a Windows 2000Server, Advanced Server, or Datacenter Server computer, andcannot be installed on a Windows 2000 Professional computer. However,Windows 2000 Professional was the first client operatingsystem able to exploit Active Directory's new functionality. As part ofan organization's migration, Windows NT clients continuedto function until all clients were upgraded to Windows 2000Professional, at which point the Active Directory domain could beswitched to native mode and maximum functionality achieved.
Active directory requires a new DNS server that supports SRV resource records, or that anorganization's existing DNS infrastructure be upgraded to support this functionality. It also requires that one or more domaincontrollers exist to hold the Active Directory database and provide Active Directory directory services.
Volume fault toleranceAlong with support for simple, spanned and striped volumes, the server family of Windows 2000 also supports fault tolerantvolume types. The types supported are mirrored volumes and RAID-5 volumes:
- Mirrored volumes: the volume contains several disks, and when data is written to one it is mirrored to the otherdisks. This means that if one disk fails, the data can be totally recovered from the other disk. Mirrored volumes are also knownas RAID-1.
- RAID-5 volumes: a RAID-5 volume consists of multiple disks, and it uses block-level striping with parity data distributed across all member disks. Shoulda disk fail in the array, the parity blocks from the surviving disks are combined mathematically with the data blocks from thesurviving disks to reconstruct the data on the failed drive "on-the-fly" (this works with various levels of success).
Versions
Microsoft released various versions of Windows 2000 to cater to different markets and business needs. It released Windows 2000Professional, Windows 2000 Server, Windows 2000 Advanced Server and Windows 2000 Datacenter Server:
- Windows 2000 Professional was designed as the desktop operating system for businesses and power users. It is the basicunit of Windows 2000, and the most common. It offers greater security and stability than many of the previous Windows desktopoperating systems. It supports up to two processors, and can address up to 4GB of RAM.The system requirements were a PentiumProcessor @133MHz or greater, at least 64 MB of RAM, 650 MB of harddrive space, and a CD-ROM drive (recommended: Pentium II, 128MB of RAM, 1 GB of hard drive space, and CD-ROM drive).
- Windows 2000 Server products share the same user interface with Windows 2000Professional, but contain additional components for running infrastructure and application software. A significant component ofthe server products is Active Directory, which is an enterprise-wide directory servicebased on LDAP. Additionally, Microsoft integrated Kerberos network authentication, replacing the often-criticised NTLMauthentication system used in previous versions. This also provided a purely transitive-trust relationship between Windows 2000domains in a forest (a collection of one or more Windows 2000 domains thatshare a common schema, configuration, and global catalogue, being linked with two-way transitive trusts). Furthermore, Windows2000 introduced a DNS server which allows dynamic registration of IP addresses.
- Windows 2000 Advanced Server is a variant of Windows 2000 Server operating system designed for medium-to-largebusinesses. It offers clustering infrastructure for high availability and scalability ofapplications and services, including main memory support of up to 8 gigabytes (GB) on Physical Address Extension (PAE) systems and the ability to do 8-way SMP. It has support forTCP/IP load balancing and enhancedtwo-node server clusters based on the Microsoft Cluster Server (MSCS) in theWindows NT Server 4.0 Enterprise Edition. [17] A limitededition 64 bit version of Windows 2000 Advanced Server was made available via the OEM Channel. Italso supports failover and load balancing.
- Windows 2000 Datacenter Server is a variant of the Windows 2000 Server that is designed for large businesses that movelarge quantities of confidential or sensitive data frequently via a central server.As with Advanced Server, it supports clustering, failover and load balancing. Its system requirements are normal, but arecompatible with vast amounts of power:
- A Pentium-class CPU at 400 MHz or higher - up to 32 aresupported in one machine
- 256 MB of RAM - up to 64 GB is supported in one machine
- Approximately 1 GB of available disk space
DeploymentWindows 2000 can be deployed to a site via various methods. It can be installed onto servers via traditional media (such asvia CD) or via distribution folders that reside on a shared folder. Installations can be attended or unattended. An attendedinstallation requires the manual intervention of an operator to choose options when installing the operating system. Unattendedinstallations are scripted via an answer file, or predefined script in the form of an INI filethat has all the options filled in already. The Winnt.exe or Winnt32.exe program then uses that answer file to automate theinstallation. Unattended installations can be performed via a bootable CD, using Microsoft Systems Management Server (SMS), via the SystemPreparation Tool (Sysprep), via running the Winnt32.exe program using the /syspart switch or via running the RemoteInstallation Service (RIS).
The Syspart method is started on a standardised reference computer —though the hardware need not be similar — and it copiesthe required installation files from the reference computer's harddrive to the target computer's hard drive. The hard drive doesnot need to be in the target computer and may be swapped out to it atany time, with hardware configuration still needing to bedone later. The Winnt.exe program must also be passed a /unattendswitch that points to a valid answer file and a /s file topoint to the location of one or more valid installation sources.
Sysprep allows the duplication of a disk image on an existing Windows 2000 Server installation to multiple servers. This meansthat all applications and system configuration settings will be copied across to the new Windows 2000 installations, but it alsomeans that the reference and target computers must have the same HALs, ACPIsupport, and mass storage devices — though Windows 2000 automaticallydetects plug and play devices. The primary reason for using Sysprep isfor deploying Windows 2000 to a site that has standardhardware and that needs a fast method of installing Windows 2000 tothose computers. If a system has different HALs, mass storagedevices or ACPI support, then multiple images would need to bemaintained.
Systems Management Server can be used to upgrade system to Windows2000 to multiple systems. Those operating systems that canbe upgraded in this process must be running a version of Windows thatcan be upgraded (Windows NT 3.51, Windows NT 4, Windows 98and Windows 95 OSR2.x) and those versions must be running the SMSclient agent that can receive software installation operations.Using SMS allows installations to happen over a wide geographical areaand provides centralised control over upgrades tosystems.
Remote Installation Services (RIS) are a means to automatically install Windows 2000 Professional (and not Windows 2000Server) to a local computer over a network from a central server. Images do not have to support specific hardware configurationsand the security settings can be configured after the computer reboots as the service generates a new unique security ID (SID)for the machine. This is required so that local accounts are given the right identifier and do not clash with other Windows 2000Professional computers on a network. [18] RIS requiresthat client computers are able to boot over the network via either a network interface cardthat has a Pre-Boot Execution Environment (PXE) boot ROM installed or that it has a network card installed that is supported by the remote boot disk generator. The remote computer must also meet the Net PCspecification. The server that RIS runs on must be Windows 2000 Server and the server must be able to access a networkDNS Service, a DHCPservice and the Active Directory services. [19]
Total cost of ownershipSee also: Studies related toMicrosoftIn October 2002, Microsoft commissioned IDC to determine thetotal cost of ownership (TCO) for enterprise applications on Windows 2000 versusthe TCO of Linux on the same enterprise applications. IDC looked at security and otherinfrastructure tasks, and Web Serving. According to the report, Windows 2000 had a lower TCO for four infrastructure items andLinux had a lower TCO for web serving. IDC's report was based on telephone interviews of IT executives and managers of 104North American companies in which they determined what they were using for a specificworkload for file, print, security and networking services.
IDC determined that the four areas where Windows 2000 had a betterTCO than Linux — over a period of five years for an averageorganization of 100 employees — were in the use of file, print, networkinfrastructure and security infrastructure. Theydetermined, however, that Linux had a better TCO than Windows 2000 whenit came to web serving. The report also found that thegreatest cost was not in the procurement of software and hardware, butin staffing costs and downtime. The report did not takeinto consideration the impact of downtime to the profitability of thebusiness (although they did apply a 40% productivityfactor, in order to recognize that employees are not entirelyunproductive during periods of IT infrastructure downtime) thoughit did find that Linux servers had less unplanned downtime than Windows2000 Servers. They found that most Linux servers ran lessworkload per server than Windows 2000 servers and also found that noneof the businesses they interviewed used 4-way SMP Linuxcomputers. IDC also did not take into account specific applicationservers — servers that need low maintenance and are providedby a specific vendor — when they performed their study. The report didemphasise that TCO was only one factor in consideringwhether to use a particular IT platform, and also noted that asmanagement and server software improved and became betterpackaged the overall picture that was being shown in their report couldchange. [20]
Security flawsA number of potential security issues have been noted in Windows 2000. A common complaint is that "by default, Windows 2000installations contain numerous potential security problems. Many unneeded services are installed and enabled, and there is noactive local security policy"[21]. In addition to thechoice of insecure defaults, according to SANS, the most common flaws found in the OS areremotely exploitable buffer overflow vulnerabilities [22]. Other flaws in the operating system that have received criticism include theuse of vulnerable encryption techniques [23].
Computer worms first came into the public spotlight during the period where Windows2000 was the dominant server operating system. Code Red and Code Red II were famous (and highly visible to the worldwide press) worms that exploited vulnerabilities of the indexing service of Windows 2000's Internet Information Services (IIS). In August 2003, two major worms named theSobig worm and the Blaster wormbegan to attack millions of Microsoft Windows computers, resulting in the largest down-time and clean-up cost to that date. The2005 Zotob worm was blamed for security compromises on Windows 2000 machines atHomeland Security, the New York Times,ABC and CNN[24].
Service PacksThroughout its life, Windows 2000 has received four full service packs and one rollup update package which is the latestservice pack for Windows 2000. Many Windows 2000 users were hoping for a Windows 2000 Service Pack 5, but Microsoft cancelledthis project early on in its development. Service pack 5 went on to become Update Rollup 1 for Service Pack 4. Microsoftstates that this update will meet customers needs better than a whole new service pack, and will still help Windows 2000customers secure their PCs, reduce support costs, and allow their systems to support the current generation of computerhardware.[25]
Because Windows 2000 is now in the Extended support phase of the Microsoft Lifecycle Policy[1] there will be no future service packs for Windows 2000. Only critical updates will be provided for Windows 2000unpaid. |
发表于 2007-2-13 11:15
| 
发表于 2007-2-13 12:10
| 
发表于 2007-2-13 12:32
| 