# data[].attributes.body
You need to use gpedit.msc (Group Policy) This doesn't ship with windows 7 /10 home editions, but it does with enterprise. College computers you are building  have this facility and we will use in lesson and record. To use gpedit.msc type 'run' in the search box (from start button) - then 'gpedit.msc'

# data[].attributes.body
Key word here is EVALUATE. explain WHY these features will be a benefit to Frame and Glass

# data[].attributes.attachment_link.description
Password policies can be set depending on the needs of the organization. For example, it is possible to specify minimum password length, no blank passwords, and maximum and minimum password age. It is also possible to prevent users from reusing passwords and ensure that they use specific characters in their passwords, making the passwords more difficult to crack.

# data[].attributes.attachment_link.description
The best security policy is to lock the account indefinitely by setting the lockout duration to zero. When this is done, only an administrator can unlock the account. This will prevent hackers from trying to access the system again and will force users who are locked out to seek help from an administrator, which is usually a good idea.

# data[].attributes.body
Search Youtube for 'Edit Group Policy' for further info

# data[].attributes.attachment_link.readable_text
Windows only: If you have a computer that multiple people access and you'd like to keep them from accessing a certain drive on your computer, a simple edit in the Local Group Policy Editor can make that happen.

If you're running Windows 2000 and above-unfortunately excluding Windows Vista and Windows 7 home editions-you can easily restrict access to local drives by changing a flag in the Local Group Policy Editor, which is launched by typing gpedit.msc in the run box, and selecting which drives you would like to restrict. Over at How-To Geek they explain:

Now navigate to User Configuration \ Administrative Templates \ Windows Components \ Windows Explorer. Then on the right side under Setting, double click on Prevent access to drives from My Computer.

From there you can access the drive restriction options seen in the screenshot above and select which drives you would like to restrict. For a screen-by-screen walkthrough and additional tips, check out the full guide at How-To Geek. Have another trick or tip for Windows security using built-in tools? Let's hear about it in the comments below.

How To Restrict Access To Drives In My Computer In Windows [via How-To Geek]

# data[].attributes.attachment_link.title
Use the Policy Editor to Restrict Drive Access in Windows

# data[].attributes.attachment_link.description
Windows only: If you have a computer that multiple people access and you'd like to keep them from accessing a certain drive on your computer, a simple edit in the Local Group Policy Editor can make that happen.

# data[].attributes.body
-NTFS (Central File management System)
-Shared Printer access
-Hardware sharing
-Shared disk sharing
-Differnt users can have different roles
-Manage which files/folders each user can have access to (Directory Management)
-Single sign on (to multiple machines)
-Enables remote access
-Easy to add new machines (eg, wireless access too)
-Active Directory Domain services (helps keep identities secure)
-Central Backup / automated
-Backups automatically / centrally
-Massive Storage
-Email management

# data[].attributes.headline
Broad Information about possible actions through Policies

# data[].attributes.subject
Broad Information about possible actions through Policies

# data[].attributes.attachment_link.description
This site uses cookies for analytics, personalized content and ads. By continuing to browse this site, you agree to this use.

# data[].attributes.body
There is also a pdf of another book on Blackboard.

# data[].attributes.attachment_link.readable_text
Windows Server 2016, Microsoft's newest server operating system, has the potential to be a big hit with businesses, IT professionals, and users. Developed alongside Windows 10, the Windows Server team worked closely with the System Center and Azure teams to establish a tightly-knit ecosystem. The end result delivers a seamless Microsoft experience from beginning to end; it bridges familiar technologies such as Active Directory and virtualization with modern infrastructure concepts, like containerization, federated services, and cloud-based services.

For the latest information on Windows Server 2016, check this article periodically, as this "living" guide will be updated when Microsoft releases new information about the OS.

SEE: All of TechRepublic's smart person's guides and cheat sheets

Executive summary

What is Windows Server 2016? Windows Server 2016 is Microsoft's latest iteration of its server line of operating systems and the successor to Windows Server 2012 R2.

Why does Windows Server 2016 matter? Windows Server 2016 includes a number of new features to its core foundation, including identity management and enhanced security capabilities to ensure data and access to data maintains its integrity from end to end, regardless of whether it's stored locally or in the cloud.

Who does Windows Server 2016 affect? Businesses relying on Microsoft services to empower their business functions, and the IT pros that are responsible for managing this infrastructure.

When was Windows Server 2016 released? Microsoft released Windows Server 2016 on October 12, 2016, ending development of its software cycle and making the final code or "gold master" generally available for download.

How can I get Windows Server 2016? Windows Server 2016 is available for purchase and download directly from Microsoft's website and authorized resellers worldwide.

Additional resources:

What is Windows Server 2016?

Released initially as a Technical Preview on October 1, 2014, Windows Server 2016 was available for download directly from Microsoft for free as part of a public beta test. Upon reaching its gold master status, Microsoft made its Release to Manufacturing (RTM) version available on September 26, 2016. The latest release of Microsoft's Windows Server operating system was delivered for general availability on October 12, 2016 ( Figure A).

Figure A

Microsoft's goal with Windows Server 2016 is to further assimilate local resources with public and private cloud infrastructures to provide a greater degree of manageability over various computing environments (virtualized and physical), while keeping it seamless for businesses and users to be productive. The Windows Server 2016 team worked alongside the System Center team to integrate services and to extend coherence.

Windows Server 2016 includes several important changes to the core operating system and many new features in an effort to double down on the security of Microsoft's products, as well as the data being used by endpoints. New and upgraded features include the following.

Nano Server: Similar to Windows Server Core mode, a Nano Server must be remotely administered, as it provides no local logon capability and only supports 64-bit applications. Nano Server is optimized for use in private clouds and data centers, as well as running web services, such as DNS or IIS.

Windows containers: Unlike virtual machines, containers allow for operating system-level virtualization by providing just enough access to the OS, libraries, and underlying resources to host applications in an isolated user-space.

Active Directory Domain Services: Privileged Access Management (PAM) helps to address the theft of credentials by working with Microsoft Identity Manager (MIM) to protect the Active Directory (AD) forest from accounts with privileged access. Additionally, new processes are in place for requesting administrative access and monitoring of such accounts, including the expiring links feature, which limits the administrative window period based on a specified time frame.

Active Directory Federation Services (ADFS) continues to provide simple, secure identity federation and Single Sign-On (SSO) between ADFS-secured enterprises and partner organizations. New in 2016 is the ability to authenticate users stored in LDAP or cloud-based providers.

Hyper-V introduces hot management of virtual networking adapters and memory for virtual machines. For security-minded administrators, Windows Server 2016 includes shielded virtual machines that minimize tampering with or the theft of data and virtual machine states by encrypting both and preventing the inspection of video signals and disks.

Windows Defender: Microsoft's Windows Server Antimalware application is installed by default in Windows Server 2016 in an effort to detect and neutralize malware threats in real-time with automatic updating.

Storage Spaces Direct enables the building of high-availability storage from local storage systems, including JBODs stored locally or networked as part of a storage pool.

PowerShell 5.0: Continuing the trend towards being Microsoft's de facto management terminal, PowerShell retains its backwards compatibility while introducing new cmdlets and modules for remote management and scripting of clients, servers, and applications.

In addition to the new features, the installation method has been modified so that, by default, the Server Core versions of the OS are installed. Introduced in Windows Server 2008, Core refers to a hardening of the OS by which the attack surface of the server is minimized by removing the GUI and any unnecessary optional installations.

This has been an optional install method in previous iterations of Windows Server, and now in Windows Server 2016, it is the default option. The full install, or "Desktop Experience" version, is still available as an option during the initial installation process for users that require the additional resources ( Figure B).
Figure B

Windows Server, version 1709

On October 17, 2017, Microsoft released Windows Server, version 1709 as part of its announced Semi-Annual Channel releases. This version includes new features and advancements for Nano Server, virtualization, and containerization, and it adds support for managing Linux subsystems.

Nano Container: Nano Server, introduced in previous versions of Windows Server, has been deprecated and replaced by Nano Container. Essentially, a Nano running within a container image, bringing with it an almost 80% reduction in image size.

Server Core as a container: The Server Core container image is almost 60% smaller, while being further optimized for life-and-shift scenarios, as well as migrating applications into containers.

Linux support: By installing the optional Windows Subsystem for Linux feature, users can download, install, and run Linux distributions on Windows Server.

Software-defined networking: One of the newest features is the encryption of traffic between virtual machines on a virtual switch, utilizing Datagram Transport Layer Security (DTLS) to encrypt packets between VMs on encryption-enabled subnets to prevent eavesdropping, tampering, and forgery of data in transit.

Docker support: Docker's container-as-a-service was already allowed in Windows Server 2016; in version 1709, you can install Docker natively, and support Windows-based and Linux-based Docker containers from within Windows.

Storage Replica: The Storage Replica protections added in Windows Server 2016 have been expanded to include Test Failover, which mounts snapshots of replicated storage for temporary testing or backup purposes. Also included is Project Honolulu support, a graphical management console for server-to-server replication, which previously required PowerShell to manage.

Windows Server 2016 Editions

Windows Server 2016 is available in Standard and Datacenter Editions. Additionally, Microsoft has released Hyper-V Server 2016, which is a hypervisor that installs on bare-metal servers to run multiple virtualized OSes. Windows Server Essentials 2016 brings the Windows Server infrastructure to small businesses; this edition allows these organizations not to worry about complex CAL licensing requirements.

System requirements:

Processor: 1.4Ghz 64-bit processor

RAM: 512 MB

Disk Space: 32 GB

Network: Gigabit (10/100/1000baseT) Ethernet adapter

Optical Storage: DVD drive (if installing the OS from DVD media)

Video: Super VGA (1024 x 768) or higher-resolution (optional)

Input Devices: Keyboard and mouse (optional)

Internet: Broadband access (optional)

Additional resources:

Why does Windows Server 2016 matter?

Just like with Windows 10 where Microsoft recreated much of the underlying operating system, taking into account the change in landscape brought on by smartphones and tablets, Windows Server 2016 represents the culmination of several principles: Compute, Identity, Management and Automation, Networking, Storage and Security and Assurance.

These are further broken down into the core elements of the OS, infusing Virtualization, Active Directory, Systems Administration, Network Management and Software Defined Network (SDN) Technologies, Disk Management and Availability, and Cloud Integration and Management together to bring enterprises to the future of technology-without abandoning the equipment they are currently using today.

Windows Server 2016 Standard Edition is a full-featured server OS that fuses the rock-solid performance of the Windows Server line with modern infrastructure advancements. It shares much in common with the Datacenter Edition, as all of the core features are available to both. The Datacenter Edition includes support for a greater number of Hyper-V containers, as well as new storage features and enhanced security aimed squarely at protecting virtual machines and network communications with its "zero trust" implementation.

Hyper-V Server 2016 is similar to the Windows Server Core Mode in previous versions of Windows Server with one major notable exception: It does not include any of the roles and services available to the Standard and Datacenter Editions. The reason for this omission is due to Hyper-V Server 2016 being a hypervisor that is installed onto bare-metal (physical) servers; it simply does not require any roles and services, as it serves to host virtual machines only.

Windows Server Essentials 2016 (formerly known as Small Business Server or SBS) is a full server operating system with certain limitations. Designed with SMBs in mind, Server Essentials 2016 aims to provide Active Directory Domain Services along with user/computer management for workspaces of up to 25 users and 50 devices. It offers a wide range of the new and updated features of the larger Standard Edition, while scaling others down to offer an affordable, easy-to-use solution perfect for a first server. Unlike Standard and Datacenter Editions, Server Essentials does not require the use of Client Access Licenses (CALs) for each user or device accessing the server, which is a huge cost saver.

Windows Server, version 1709

The focus of Windows Server, version 1709 lies squarely on Server Core, containers, and microservices in an effort to reduce image sizes when hosting services or migrating existing code bases. The shift from previous versions of Windows Server allows systems administrators and developers to deploy containerized images that have been reduced dramatically and further optimized, while providing modernized security to protect virtual machines (VMs), encrypt network transmissions using software-defined networking, and provide enhanced storage and disaster recovery protection through failover and replication features.

Additional resources:

Who does Windows Server 2016 affect?

While upgrading to Windows Server 2016 is not a requirement per se, businesses and various IT fields using recent versions of Windows Server will see several instant benefits to upgrading, including enhanced security, virtualization/containerization, and management of identity and storage. And yet, ZDNet contributing writer Ken Hess noted that, according to a November 2015 Spiceworks survey, "...almost half of IT pros state that they have no plans to adopt it or that they don't know if they will adopt it or not."

SEE: Virtualization Policy (Tech Pro Research)

Consolidation of servers through virtualization will increase ROI on newly purchased hardware, while lowering the overall resources used by decommissioning previous physical servers. Windows Containers will allow for multiple applications to be hosted from the server with finite resources, essentially allowing corporations to do more with less. If your enterprise is hosting its own private cloud, or transitioning to a public or a hybrid cloud setup, the additional security included with Active Directory Federated Services along with Nano Server technologies will keep unauthorized access to a minimum while permitting authorized users to access necessary applications, data, and intranet sites.

Windows Server, version 1709

Windows Server, version 1709 primarily affects systems and server administrators, especially those tasked with managing virtualized infrastructures. The move to add Linux support and management of Linux servers, including container support will also affect Linux admins that run mixed networks in a hybrid format for both Linux and Windows.

To a lesser degree, users will be affected given the move to virtualization and containerization of web-based software applications, legacy applications, and how the technology allows for faster deployment and better performance-even on existing hardware.

Additional resources:

When was Windows Server 2016 released?

Public beta testing via Technical Preview 1 (TP1) began on October 1, 2014. As subsequent improvements were made, additional TPs were released for public download; TP4 was made available on November 19, 2015.

RTM was released on September 26, 2016, ending development of its software cycle and making the final code or "gold master" available for download. General availability to all Microsoft software partners rolled out on October 12, 2016 with build number 10.0.14393; and included with the finished code, Microsoft added the following features to the 1607 build:

UI: Improvements were made to enhance the user experience (GUI). OS performance changes were made as well.

Windows Hello: The popular Windows 10 security feature that manages access to Windows systems through the use of multi-factor authentication, including biometrics, to further secure devices and data.

Evaluation to Licensing Path: Microsoft included a 180-day evaluation for enterprises to test Windows Server 2016 prior to upgrading production networks to the latest OS. The conversion process is built right in and is as simple as entering a new product key to register the correct license.

Additional fixes were made available to correct minor issues reported during the Technical Preview period, including Start Menu and Login screen adjustments to correct corruptions. Also, Windows Store apps have been removed, by default, resulting in a cleaner installation.

Volume licensing information is available through Microsoft's Volume Licensing Service Center. General pricing information (PDF) is detailed in the Windows Server 2016 Licensing Datasheet, except Hyper-V Server 2016, which is offered as a free download that does not require a product key-only activation with Microsoft.

Windows Server, version 1709

Microsoft released Windows Server, version 1709 on October 17, 2017, and has since made it available as downloadable images for Software Assurance customers from the Volume Licensing Service Center (VLSC) portal, as well as from the Azure Marketplace for Azure customers.

Note: Version 1709 is an update to the Windows Server family-not an update installable over an existing Windows Server 2016 installation; it is a full-version installation that will require a clean install in order to reap the benefits of the new server OS.

Additional resources:

How can I get Windows Server 2016?

Users can obtain Windows Server 2016 directly from Microsoft, authorized resellers, and Microsoft partners. According to ZDNet contributing writer Mary Jo Foley, the shift to per-core pricing from per-processor in an effort to "align the licensing of its public and private cloud offerings" is noticeable ( Figure C).

Figure C

Additional resources:

# data[].attributes.attachment_link.title
Windows Server 2016: The smart person's guide

# data[].attributes.attachment_link.description
Windows Server 2016, Microsoft's newest server operating system, has the potential to be a big hit with businesses, IT professionals, and users. Developed alongside Windows 10, the Windows Server team worked closely with the System Center and Azure teams to establish a tightly-knit ecosystem.

# data[].attributes.attachment_link.readable_text
The basic purpose of a network operating system or NOS is that it controls the accesses of files form multiple users. It is used to run the computers that are to act as servers so that they can carry out all the functions for the network. It supports the hardware and also ensures the security by authentication procedures while logging in, restrictions as to who can and can't access the system and the authorization to access to various locations in the system. It also provides directory services, replication, storage, printing and remote access.

# data[].attributes.attachment_link.title
What Are The Functions Of Network Operating System?

# data[].attributes.attachment_link.description
Answer (1 of 2): The basic purpose of a network operating system or NOS is that it controls the accesses of files form multiple users. It is used to run the computers that are to act as servers so that they can carry out all the functions for the network.

# data[].attributes.attachment_link.provider_name
Technology Solutions That Drive Business

# data[].attributes.attachment_link.readable_text
There's some good news for IT managers deploying Windows Server 2008: Backup and Restore has been reworked in this edition to leverage the Volume Shadow Copy Service (VSS) and block-level transfers for faster backups, and it also integrates with recovery tools for simplified restoration of files and the operating system.

Windows Server 2008 disposes of the aging NTBACKUP utility and introduces Windows Server Backup, an optional feature that can be installed through Server Manager. As in Vista's Complete PC Backup, Microsoft's virtual hard drive (VHD) format is used to create file-based images of disk volumes. Before I address how to work with the new software, it's important to note that several important features of NTBACKUP have been dropped from Windows Server Backup.

Windows Server Backup - Need to Know

The software is primarily designed for disk-to-disk use; tape drives are not supported. While disk-to-disk backup promises a simple, reliable and affordable solution, the lack of portability for offsite backups could be an inconvenience with some hardware. Even though bays for removable drives are becoming more common in low-end servers, removable hard drives are expensive compared with tape. Limited support for writable DVD is provided (no recovery operations for individual files, folders or application data are allowed), along with external USB drives.

Much like Complete PC Backup in Vista, you can't back up individual files and folders, only complete volumes. Another NTBACKUP feature, the verify option, is available only when the backup destination is removable media, so you can't always run consistency checks. While it's possible to set the backup destination to a mapped drive or NTFS mount point, it's no longer possible to back up a network drive, or local drives that are not formatted with NTFS. Backups of the system volume contain everything necessary to restore a working server, but if you want to back up just the system state, you'll need to use the command line.

The situation looks a little better in the recovery area, with the added ability to select individual files and folders using the GUI or the command line. The Windows Recovery Environment can be used in combination with backups to restore files and folders or entire volumes and perform bare-metal restores.

Application Support and VSS

Software that supports the Volume Shadow Copy Service can be registered with Windows Server Backup via a VSS writer, but the ability to make an online backup of Exchange is no longer available. The lack of support for Exchange seems a little off the mark, considering it's unlikely anyone wants to make offline database backups regularly. Microsoft's Exchange team promises a VSS plug-in for Windows Server Backup sometime in the future. They also say that Windows Small Business Server 2008 will include support for backing up Exchange.

Windows Server Backup offers two types of backup: VSS copy and VSS full. VSS copy, which is the default and recommended option, preserves application logs (if they exist) on selected volumes without updating files' archive bits. Archive bits are file attributes used to mark files as backed up. This lets Windows Server Backup work in parallel with third-party software that's used to back up applications such as Exchange, without interfering with incremental or differential backup schedules that such applications support.

In contrast, VSS full backups truncate application transaction logs and update the archive bit of all backed-up files. While there's no option to select an incremental backup in the GUI, if you use a volume that contains a previous backup, only changes made since the last backup will be saved, giving ultra-fast performance.

Creating a Scheduled Backup

Regardless of the limited functionality, it's worth knowing how to perform basic tasks with the built-in software. Log on to Server 2008 using an account with local administrator privileges:

1. From the command prompt run servermanagercmd.exe -install Backup-Features.

2. When the backup features have finished installing, open Windows Server Backup from Administrative Tools on the Start menu.

3. In the Actions pane on the right, click Backup Schedule.

4. Click Next on the Getting Started dialog. Choose Full Server on the Select backup configuration screen. Click Next to continue.

5. On the Specify backup time screen, leave the default option of once a day at 21:00 selected and click Next.

6. On the Select destination disk screen, I've selected my external drive (E:\) (Figure 1). To select an internal disk, click Show All Available Disks. Click Next to continue.

7. At this point you'll be warned that the destination disk will be dedicated to backup (to facilitate moving the disk offsite) and formatted and hidden from Windows Explorer (to ensure integrity). Click Yes to continue.

8. You should note the disk's label from the Label destination disk dialog, and write it on the disk enclosure, if it's external or removable, so it can be easily identified in the future. Click Next and then Finish on the confirmation screen. The Backup Schedule Wizard will then format the disk and you will be presented with a summary screen, telling you when the first backup is scheduled to run. Click Close to continue.

9. You should now see information about the backup you've just created in the Windows Server Backup console under Status (Next Backup) and Scheduled Backup. To run the scheduled job ahead of time, click Backup Once in the Actions pane, in Backup options leave the default settings, click Next and then Backup on the confirmation screen.

If you have multiple disks available for use with Windows Server Backup, the Backup Schedule Wizard lets you specify more than one backup destination. When a scheduled backup runs, a disk will be chosen randomly, if more than one configured destination disk is connected. Therefore, you should make sure that only the required disk is connected before the scheduled start time.

System State Backups

The system state is included in our full backup, but what if we want to run a quick system state backup without the overhead of the entire system volume? The Windows Server Backup console doesn't provide for this, but we can perform this task from the command line:

1. Since our destination disk has been dedicated to backup tasks by Windows Server Backup and hidden from Windows Explorer, we'll have to determine the volume's name using the following command:wbadmin get versions

Backup time: 04/07/2008 06:25
Backup target: Fixed Disk labeled WIN-XRG 2008_07_03 14:38 DISK_01(\\?\Volume{e01f7065-48ff-11dd-83fb-000c29d73f77})
Version identifier: 07/04/2008-05:25
Can Recover: Volume(s), File(s), Application(s), Bare Metal Recovery, System State

2. The disk's label should match what you wrote down when preparing the disk for scheduled backup. The volume name then needs to be specified, to back up the system state as shown below:

wbadmin start systemstatebackup -backupTarget:\\?\Volume{e01f7065-48ff-11dd-83fb-000c29d73f77}

Restoring Files

Restoring files can be done from the command line using wbadmin or from the Windows Server Backup console. Let's use the console to restore a file:

1. Open the Windows Server Backup console from Administrative Tools on the Start menu.

2. Click Recover in the Actions pane on the right.

3. Leave This server selected and click Next on the Getting started screen.

4. On the Select backup date dialog, select the date and time of the backup you want to use for the restore operation and click Next (Figure 2).

5. Leave the default option of Files and folders selected on the Select recovery type dialog and click Next.

6. Expand the disk's label under Available items, highlight the files you want to restore in the right pane and click Next (Figure 3).

7. On the Select recover options dialog, leave the default options selected to restore the files to the original location. Click Next to continue.

8. Review the confirmation screen and click Recover. Once the restore is completed, click Close on the Recover progress dialog.

Using WinRE to Restore a Server

In the event of a disaster, backups made by Windows Server can be used in conjunction with the Windows Recovery Environment (WinRE) to get your server back up and running with a minimum of fuss. Boot your server into WinRE from the Windows Server 2008 media or from the hard disk if WinRE's preinstalled:

1. Select your language, regional preferences and click Next.

2. Click Repair your computer on the Install Windows dialog.

3. On the System Recovery Options dialog, select the operating system to repair and click Next.

4. Click Windows Complete PC Restore on the System Recovery Options screen. This will erase files and restore the system volume.

5. Click Next to use the most recent backup on the Restore your entire computer from a backup dialog (Figure 4).

6. Check Format and repartition disks on the Choose how to restore backup screen. The disk that contains the backup will be automatically excluded from this operation. If you have any additional volumes in the backup, an option to Only restore system disks is given to exclude the extra volumes from the restore process (Figure 5). Click Next to continue.

7. Review the final dialog and click Finish.

From the System Recovery Options window, it's also possible to launch a command prompt and use wbadmin. In WinRE, wbadmin offers more flexible recovery options than the Windows Complete PC Restore wizard. wbadmin start recovery is for restoring individual volumes, applications or files/folders. wbadmin start sysrecovery is for running a complete PC restore. To run a complete PC restore from the command prompt:

1. Issue the following command lines:wbadmin get disks

wbadmin get versions -backupTarget:d:

In this case I can use the drive letter as indicated by the wbadmin get disks command, as it's not hidden in WinRE.

2. Run wbadmin get versions -backupTarget:d: to list the backups stored on the target volume. There are two backups to choose from (Figure 6).

3. Run a restore from the latest backup, using the version identifier from the output of the wbadmin get versions command:

wbadmin start sysrecovery -version:07/04/2008-06:14 -backupTarget:d:

4. Follow the prompts to complete the restore operation.

IT Takeaway: Backup and Restore in Windows Server 2008

The restore features in Windows Server Backup are appealing, but let down by inflexible backup options and lack of support for Exchange Server and tape drives. Windows Server Backup might be useful in scenarios where disk-to-disk is used as the primary backup method. However, all but the most basic removable and disk-to-disk backup systems feature their own management and backup software, or are compatible with popular applications such as Symantec's Backup Exec. Whatever your backup strategy, it's likely that Windows Server Backup won't provide for all your needs. That might change in the future when support for Exchange is added.

Russell Smith is an independent consultant based in the United Kingdom who specializes in Microsoft systems management.

# data[].attributes.attachment_link.title
Hands On: Backup and Restore in Windows Server 2008

# data[].attributes.attachment_link.description
There's some good news for IT managers deploying Windows Server 2008: Backup and Restore has been reworked in this edition to leverage the Volume Shadow Copy Service (VSS) and block-level transfers for faster backups, and it also integrates with recovery tools for simplified restoration of files and the operating system.

# data[].attributes.attachment_link.readable_text
There are several fundamental problems with using biometrics such as fingerprints, facial recognition etc for authentication. It's even more problematic when encryption is involved.

There are two major problems with using biometrics for authentication.

1. If there is no other human actually watching you 'apply' the biometric, it's really hard to ensure that the biometric is really attached to the real person. Think 3D-model of face, or chopped off thumb :-( .

2. You can't change your face or your fingerprint, and it's not a secret, so once that knowledge is in the wrong hands it's a technological arms race against physical and electronic spoofing devices such as fake thumbs or thumbprint reader bypass technology just to name a few. You're for ever stuck with your face and your fingers.

This makes it pretty clear that pure biometric authentication is only suitable when the asset being protected is of sufficiently low value that an attacker will not find the cost and risk of bypassing it worthwhile.

The current trend of incorporating fingerprint authentication in mobile devices is troubling. The value represented by a modern mobile device, including the assets potentially reachable indirectly such as online accounts, could easily make spoofing worthwhile. In some parts of the world it does not require too much imagination to envision people being robbed not only of their phones as today, but of a fingertip at the same time tomorrow.

We already have a situation where identity theft is a major headache. But this can actually be handled, even if the process is hampered by outdated systems and laws. If biometrics continue to gain headway, we may get a group of people who will never fully integrate into society since their biometrics once stolen can never by recovered or changed. The theft may occur individually, or from corporate or government databases.

While the likelyhood of a national or corporate fingerprint database leaking is perhaps low, it's not zero. With time it will happen. Once it's happened it can never be undone.

A stolen password on the other hand, is comparatively trivial to change.

Biometrics for encryption

Quite frequently we get requests for integrating various forms of biometrics into AxCrypt instead of, or as complements to the password. The problem here is that properly designed encryption systems assume an attacker has huge resources and full knowledge of everything. Except one single piece of information: the decryption key. This is all that must be kept secret, and it must also be kept secret. Everything depends on this key being secret. In AxCrypt terms the password is ultimately the key that must be secret.

A fingerprint is unique, but it is not secret and it cannot be changed. It is entirely unsuitable to use directly or indirectly as an encryption key.

It is possible to do what mobile device manufacturers do, to use internal trusted hardware as the guardian of the secret keys which will only release the secrets if authenticated by for example a fingerprint. This is how Apple Touch ID works. But, remember the caveats of biometric authentication mentioned above. The internal trusted hardware can always be fooled by a sufficiently well made device or artifact, and frequently the required fingerprint is even found all over the device itself!

Happy AxCrypting!

Svante, Developer and Co-Founder AxCrypt AB.

# data[].attributes.attachment_link.title
Encryption and biometrics - AxCrypt - File Security Made Easy

# data[].attributes.attachment_link.description
There are several fundamental problems with using biometrics such as fingerprints, facial recognition etc for authentication. It's even more problematic when encryption is involved. There are two major problems with using biometrics for authentication. If there is no other human actually watching you 'apply' the biometric, it's really hard to ensure that the biometric is ...

# data[].attributes.attachment_link.description
Computer security software or cybersecurity software is any computer program designed to enhance information security.

# data[].attributes.attachment_link.title
Best Network Security Software | 2018 Reviews of the Most Popular Systems

# data[].attributes.attachment_link.description
Find and compare Network Security software. Free, interactive tool to quickly narrow your choices and contact multiple vendors.

# data[].attributes.attachment_link.readable_text
Physical Security addresses actions you can take to protect buildings, property, and assets against intruders. When designing a physical security program, the three levels you need to protect are your outer perimeter, your inner perimeter, and your interior. If you can implement two or three forms of security at each level, then you will more than likely have an effective physical security system.

Outer Perimeter Security

The outer perimeter of your property is defined by your actual property lines. In securing the outer perimeter, your goal is to control who can walk or drive onto your property. One of the more extreme forms of perimeter security is a barbed wire fence with a gate protected by an armed guard. In other cases, a simple hedge may be sufficient. In deciding what type of perimeter security to implement, you need to weigh the risk of an intruder entering your property with the cost of the available physical security measures.

Two security concepts involved in perimeter security are Natural Access Control and Territorial Reinforcement.

Natural Access Control

Criminals like to feel that they are in control as they enter and exit an area. When they are in control, they have a low perception of risk, since they believe they can move about unnoticed. However, this sense of control can be denied by limiting and clearly marking the approaches to buildings and properties, thereby channeling visitors into a defined area.

Natural Access Control is the use of building and landscaping features to guide people as they enter and exit a space. When applying Natural Access Control, both entrances and exits should be taken into consideration. Not only do you want to discourage intruders, but you also want to close off any potential escape routes.

Territorial Reinforcement

The purpose of Territorial Reinforcement is to prevent unauthorized entry and to create a clear distinction between public and private property. This distinction is important for two reasons: legitimate occupants have a sense of ownership and will notice people who don't belong; intruders, on the other hand, will have a hard time blending in. Territorial Reinforcement is not the same thing as perimeter security, but the goal of both is the same: keeping intruders off of your property.

Inner Perimeter Security

Your inner perimeter consists of the doors, windows, and walls of your building(s). Protecting your inner perimeter is usually accomplished with locks, keys and alarm systems. The purpose of locks and keys is to keep intruders out. An electronic access control system is also a useful tool to control the flow of traffic into your inner perimeter. Finally, the alarm system warns you when the perimeter is breached. When designing any perimeter security system, be careful not to lose control of your keys. If an unauthorized person can make copies of your keys without your knowledge, then you have a serious security weakness.

Interior Security

Interior security is your final level of security and consists of the interior of your building(s).

Security cameras are an effective tool for monitoring the interior of your business as well as recording evidence of crimes for later investigation. You can protect your interior with motion detectors that will sense the presence of intruders, security guards, and volunteer floor marshalls. Electronic access control systems can also be employed to control the flow of traffic within your facility and prevent unauthorized people from gaining access to protected areas.

Conclusion

While many of the means to provide perimeter and interior security overlap (for example, security guards and cameras can protect your perimeter or interior), thinking in terms of these three levels, and trying to implement two or three physical security measures at each level, will help you to implement appropriate physical security measures.

# data[].attributes.attachment_link.title
Here's What You Need to Know About Securing Your Building and Property

# data[].attributes.attachment_link.description
Physical Security addresses actions you can take to protect buildings, property, and assets against intruders. When designing a physical security program, the three levels you need to protect are your outer perimeter, your inner perimeter, and your interior.

# data[].attributes.attachment_link.readable_text
Crime Prevention Through Environmental Design (CPTED) is a set of design principles used to discourage crime. The concept is simple: Buildings and properties are designed to prevent damage from the force of the elements and natural disasters; they should also be designed to prevent crime.

The four elements of CPTED are Natural Surveillance, Territorial Reinforcement, Natural Access Control and Maintenance.

My series of CPTED articles delve into each one of these elements in some detail.

This checklist can be printed and used in conjunction with those articles to implement CPTED at your facility. Although every item on this list may not apply to your particular space, you can these principles to improve anything from a home office to a high-rise building.

Natural Surveillance

Criminals thrive on anonymity. They do not like to be seen or recognized, so they will normally choose situations where they can hide and easily escape. Natural surveillance, then, is simply arranging your property for maximum visibility.

Natural Surveillance Checklist:

Windows signs should cover no more than 10% of the window surface

Interior of the space should be visible from the sidewalk or street

Interior furniture and displays should be no higher than 5' to maintain visibility

Exterior parking lots should be well lit so that people can be recognized from 25' away

Exterior parking lots should be visible from inside the space

Street and/or sidewalk should be visible from inside the space

All entrances should be visible from within the space

Nonworking surveillance cameras should be repaired or removed

Interior lighting should remain on at night

Bushes should be no higher than 36"

Trees should be no higher than 7'

Territorial Reinforcement

The purpose of Territorial Reinforcement is to create a clear distinction between public and private property. This is important for two reasons: legitimate occupants have a sense of ownership and will notice people who don't belong; intruders, on the other hand, will have a hard time blending in.

Territorial Reinforcement Checklist:

Property lines should be well marked by fences, shrubbery, short walls or similar means

Receptionist/cash register/or greeter should be positioned to screen all people entering the space

Natural Access Control

Criminals like to feel that they are in control as they enter and exit an area. When they are in control, they have a low perception of risk, since they believe they are able to move about unnoticed. However, this sense of control can be denied by limiting and clearly marking the approaches to buildings and properties, thereby channeling visitors into a defined area. Natural Access Control is the use of building and landscaping features to guide people as they enter and exit a space.

Natural Access Control Checklist:

Walkways, landscaping, and driveways should lead visitors to a controlled entrance

Access to the roof should be secured

Exterior door hinges should not be accessible from outside

Exterior doors should be locked with deadbolts

Deadbolts should have a minimum 1" throw and the strike plates should be anchored to the door frame

All keys should be accounted for

If keys cannot be accounted for, locks should be re-keyed and a key control policy instituted

Windows should be locked

Access to ladders should be secured

Maintenance

Surprising as it may seem, many experts believe that a well-maintained property can deter crime. Why? Because a poorly maintained building demonstrates that its owner is no longer able or willing to control his property. It thus becomes an invitation to any criminal who wants to seize control.

Maintenance Checklist:

Graffiti should be removed or painted over

Weeds should be removed

Debris should be removed from the grounds

All lighted signs should be in working order

All light fixtures should be in working order

# data[].attributes.attachment_link.title
Here's a Building Security Checklist to Help with Crime Prevention

# data[].attributes.attachment_link.description
Crime Prevention Through Environmental Design (CPTED) is a set of design principles used to discourage crime. The concept is simple: Buildings and properties are designed to prevent damage from the force of the elements and natural disasters; they should also be designed to prevent crime.

# data[].attributes.body
Network Services

# data[].attributes.attachment_link.description
In computer networking, a network service is an application running at the network application layer and above, that provides data storage, manipulation, presentation, communication or other capability which is often implemented using a client-server or peer-to-peer architecture based on application layer network protocols.

# data[].attributes.attachment_link.description
The slides contains a detail material about the services of networks(Common) in Data Communication