File-Server - Smith.N Studio

2010
ICT24H.NET

ICT24H TEAM

[QUN L TP TIN TRONG
WINDOWS SERVER 2008]
Ti liu c thc hin bi nhm ICT24H
Smith Nguyen Studio.
https:/ / www.facebook.com/ SmithNguyenStudio
ICT VIETNAM COMMUNITY ICT24H.NET

I C T 2 4 H . N E T

Page 1
C rt nhiu loi ti liu, t nhng bng bo co ti chnh, nhng k hoch kinh doanh cho n nhng
bng thuyt trnh bo co v bn hng phi c chia s trn mng ca bn trong khi n vn cn cha
c an ton t nhng truy cp cha c chng thc n. Windows Server 2008 cung cp cho bn
cng ngh cho php bn c th bo mt cng nh ti liu ca bn lun trng thi n nh.
kim sot truy cp, s dng NTFS permission v Encrypting File System (EFS). cung cp ti liu
thm cho cc phng ban, bn c th to mt vng khng gian Distributed File System (DFS) v s dng
chc nng reaplication (nhn bn) d sao chp tp tin gia cc server. Bn c th s dng quota gii
hn vic lu tr trn cng. Vi chc nng shadow copy and backup cho php bn c th khi phc li
d liu b hng. Trong chng ny, bn c th hc c cch s dng nhng cng ngh trn v c
tm hiu nhng tnh nng trong dch v File Services trong Windows Server 2008.
Ch trong chng ny
Cu hnh mt File server.
Cu hnh Distributed File System (DFS)
Cu hnh dch v shadow copy.
Cu hnh sao lu v khi phc.
Qun l quota cng.
Nhng bi hc trong chng ny
Bi hc 1: Vn v qun l bo mt cc tp tin.
Bi hc 2: Th mc chia s.
Bi hc 3: Sao lu v khi phc tp tin.
Trc khi bt u
hon tt nhng bi hc trong chng ny, bn nn thc hin cc cng vic sau:
2 my tnh ci t Windows Server 2008
Nng cp ln Domain Controller
Ci t role File Service trong my tnh chy Windows Server 2008
Tn server l Server1 v domain l ict24h.net. Server phi c ti thiu 2 a thc hin vic
sao lu t a ny sang a kia.
Tn server cn li l Server2 v c join vo domain ict24h.net.
Bi hc 1: Vn qun l bo mt cc tp tin
Windows Server 2008 l phin bn c s dng nhiu nht trong cc doanh nghip, cung cp cho bn
2 cng ngh kim sot truy cp cc tp tin v th mc, bao gm NTFS file permission v Encrypting
File System.


I C T 2 4 H . N E T

Page 2

Sau bi hc, bn c th:
S dng NTFS file permission kim sot truy cp n cc tp tin v th mc.
S dng EFS bo v cc tp tin t nhng hnh vi xm nhp.

NTFS File Permission
NTFS file permission xc nh ngi dng no c th xem hoc cp nht c cc tp tin. V d bn s
dng NTFS file permission cho php phng qun l nhn s c truy cp vo tp tin cha cc thng tin
l lch ca nhn vin trong khi khng mt nhn vin no phng khc c th truy cp n nhng tp
tin ny.
Mc nh NTFS file permission c s dng cho ngi dng v cc th mc trong h thng. Nhng mc
nh ny dnh cho 3 kiu tp tin sau:
User files: Nhng ngi dng c ton quyn kim sot i vi tp tin ca h. Nhng qun tr
vin cng c ton quyn kim sot. Nhng ngi dng khc ngoi tr qun tr vin th khng th
c hoc ghi ln nhng tp tin .
System files: Ngi dng c th c, nhng khng th ghi. Nhng tp tin ny nm trong th
mc h thng %SystemRoot% v cc th mc con trong .
Program files: ging nh permission trong cc tp tin h thng, lu tr trong th mc
%ProgramFIles% ,cho php ngi dng chy cc ng dng v ch cho php qun tr vin ci t
ng dng. Nhng ngi dng c quyn c v qun tr vin c ton quyn kim sot.
Thm vo , cng c nhng th mc mi c to ra a h thng v c gn ton quyn kim
sot i vi qun tr vin, ngi dng ch c th xem.
Trn File server, bn cn gn quyn cho nhm ca ngi dng cho php h cng tc lm vic cng
nhau. V d bn c th to mt th mc cho tt c nhn vin thuc nhm Marketing c c v cp
nht nhng nhng nhn vin bn ngoi nhm ny khng c quyn truy cp. Qun tr vin c th gn cho
ngi dng hoc nhm mt s quyn hn trn tp tin hoc th mc :
List Folder Content: ngi dng c th m c th mc nhng khng m c cc tp tin
trong .
Read: ngi dng c th xem c ni dung trong mt th mc v m c cc tp tin trong
. Nu ngi dng ch c quyn Read m khng c quyn Read & Execute th h cng s khng
th thc thi c tp tin.
Read & Execute: ngoi quyn Read nh trn, quyn ny cho php ngi dng c th chy
c cc ng dng, cc tp tin.
Write: ngi dng c th to nhng tp tin trong mt th mc nhng khng th xem c
chng. Quyn ny tht s hu ch nu to mt th mc v ngi dng c th a cc tp tin
ln th mc ny v khng c quyn truy cp vo cc tp tin ca ngi khc cho d h thy tp
tin .
Modify: nhng ngi dng c th xem, chnh sa v xa tp tin hoc th mc.
Full Controll: ngi dng c quyn ny c th thc hin bt c thao tc no trn tp tin hoc
th mc, bao gm vic to, xa v thm ch l sa c quyn i vi nhng tp tin v th mc.

I C T 2 4 H . N E T

Page 3
bo v mt file hoc th mc vi NTFS, lm theo cc bc sau:
1. M Windows Explorer.
2. R-click vo mt tp tin hoc th mc, sau chn Properties.
3. Click vo tab Security.
4. Click Edit. Hp thoi Permission hin th.
5. Nu ngi dng m bn mun cu hnh truy cp khng hin th trong danh sch Group or user
names bn c th click Add, sau nhp tn ti khon v click OK.
6. V d bn mun cho ngi dng c tn Guest ch c php m th mc Marketing nhng
khng c php m cc tp tin ti liu trong . Bn nh du chn vo List folder contents
danh sch Permission for Guests.

7. Bn c th thc hin li bc 5 v 6 cho nhng ngi dng khc.
8. Click OK hai ln hon tt.
Nu bn cu hnh Full Control cho mt ngi dng trong nhm no nhng li hy quyn Full Control
i vi nhm th ngi dng cng khng c quyn Full Control. V d, bn l nhn vin thuc
nhm Marketing, c qun tr vin cu hnh Full Control. Tuy nhin nu qun tr vin hy quyn Full
Control i vi nhm Marketing th bn s mt quyn Full Control.

Thm vo , c hn 12 quyn c bit bn gn cho mt ngi dng hoc mt nhm. gn quyn
c bit, click Advance tab Security .

I C T 2 4 H . N E T

Page 4
Bn c th cu hnh NTFS file permission bng dng lnh, s dng lnh icacls. xem y hng
dn v lnh ny bn c th g lnh
icacls /?
NTFS file permission s dng c khi ngi dng ng nhp my tnh ca h hay truy cp th mc
thng qua mng.
Encrypting File System
NTFS cung cp phng thc bo v cc tp tin v th mc khi Windows ang chy. Tuy nhin, mt
hacker c th truy cp n my tnh ca bn v bng nhng k thut khai thc, thm nhp, hacker s c
c quyn Full Control.
EFS bo v cc tp tin v th mc ca bn bng cch m ha chng trn a. Nu hacker c th xm
nhp vo my tnh d m tp tin th hacker buc phi bit mt m c th chng thc trc khi m
tp tin.
EFS h tr t phin bn Windows 2000 tr i.
Cu hnh bo v tp tin v th mc vi EFS
bo v mt tp tin v th mc vi EFS, thc hin cc bc sau:
2. R-lick vo tp tin hoc th mc sau chn Properties.
3. Trn tab General, click Advanced.
4. nh du chn Encrypt contents to secure data.
5. Click OK 2 ln.
Nu bn m ha mt th mc, Windows s t ng m ha tt c cc tp tin mi trong th mc .
ln m ha mt th mc hay tp tin u tin, Windows s nhc bn sao lu key m ha.

I C T 2 4 H . N E T

Page 5

Chia s cc file c m ha bng EFS
Nu bn mun chia s cc file c m ha bng EFS cho nhng ngi dng khc, bn cn thm cc
iu kin chng thc vo tp tin. Bn khng cn thc hin nhng bc chia s tp tin thng qua mng;
EFS ch c tc dng vi nhng tp tin c truy cp trn my tnh ni b v Windows t ng gii m
nhng tp tin ny trc khi chia s chng.
chia s cc tp tin c m ha EFS, thc hin cc bc sau:
1. M ca s Properties trn file c m ha.
2. Trn tab General, click Advanced.
3. Click Detail.
4. Click Add.
5. Chn ngi dng m bn mun gn quyn truy cp, sau click OK.
6. Click OK 3 ln v ng tt c cc hp thoi.
Cu hnh EFS s dng Group Policy
Ngi dng c th chn vic m ha EFS cho tp tin hoc th mc ca h. Tuy nhin trn thc t, hu
ht ngi dng khng nhn thc c vic m ha m s khng s dng EFS. V th bn nn s dung
Group Policy m bo cc my tnh thuc domain c cu hnh bo mt nhm p ng nhu cu an
ton thng tin trong doanh nghip.
Vi cng c Group Policy Management Editor, bn c th cu hnh EFS bng cch r-click vo
Computer Configuration > Policies > Windows Settings > Security Settings > Public Key
Policies > Encrypting File System v chn Properties m hp thoi Encrypting File System
Properties.

I C T 2 4 H . N E T

Page 6
File Encryption using Encrypting File System (EFS): mc nh, EFS c kch hot. Nu
bn chn Dont allow, nhng ngi dng s khng th m ha tp tin bng EFS.

Encrypt the content of the users Documents folder: ty chn ny cho php t ng m
ha th mc Document ca ngi dng. Mc d mt s th mc gm c nhng thng tin b mt,
m ha th mc Document nng co tnh bo mt
EFS bo v cc tp tin ngay c khi h iu hnh khng hot ng. V th, nu mt ai ly trm laptop
ca bn th h cng khng th truy cp vo tp tin dc m ha bi EFS nu nh ti khon cha
c ng nhp vo. Nu bn bt EFS, bn nn cu hnh mn hnh desktop ca bn t ng kha trong
vi pht nu khng s dng.
Require a smart card for EFS: nh du chn vo y hn ch vic s dng phn mm
chng thc cho EFS. Nu ngi dng c smart card v bn yu cu ngi dng ny a th
smart card truy cp tp tin c m ha.
Create caching-capable user key from smart card: nu nh du chn v cc ty chn
trc cng c nh du, ngi dng ch cn a th smart card ln u tin khi h truy cp
vo cc tp tin c m ha. Nu v hiu ha ty chn ny, smart card phi lun c s
dng mi khi truy cp tp tin.
Enable pagefile encryption: m ha cc trang tp tin. Windows s dng cc trang tp tin
lu tr cc bn sao chp d liu c lu tr b nh v bao gm c nhng bn sao chp
tp tin c m ha EFS. Tuy nhin bn sao chp cc tp tin m ha bng EFS ny li khng
c m ha, iu ny c th khin hacker c th tm ra nhng trang tp tin nu nh ty chn
ny b v hiu ha.
Display key backup notifications when user key is created or changed: nu nh du
chn, Windows s nhc ngi dng sao lu key EFS mi khi key m ha c to hoc thay i.
Allow EFS to generate seft-signed certificate when a certification authority is not
avaiable: nu v hiu ha ty chn ny, cc my client cn phi lin h chng thc ln u
tin khi mt tp tin c m ha. y c th ngn chn ngi dng nu nh h t kt ni
mng khi bt EFS ln u tin. cho php EFS tm c mt chng thc t mt CA ngoi
tr vic t ng chng thc, bn nn cu hnh mt CA v kch hot ch t ng np. Bi thc
hnh s hng dn bn chi tit v vn ny.
Thm vo , bn nn xem xt v cu hnh cc ty chn sau:
Computer configuration > Policies > Administrative Templates > Network > Offline
Files > Encrypt the offline files cache. Cho php m ha Offline Files. Bn s c tm hiu
Offline Files bi hc th 2.
Computer Configuration > Policies > Administrative Templates > Windows
Components > Search > Allow indexing of encrypted files: nu bn cho hin th cc tp
tin c m ha, k tn cng c th thy ni dung ca tp tin m ha . V hiu ha ty
chn ny ngn chn ngi dng tm kim nhng tp tin ny.
Cu hnh Data Recovery Agent khi phc key EFS
Mt tp tin c m ha s khng th truy cp c nu nh khng c key, ngay c qun tr vin h
thng v nu mt key, th tp tin ny s khng c gii m m ra. V th bn cn phi khi phc tp
tin m ha, EFS h tr DRA. DRA c th gii m mt tp tin c m ha. Trong Active Directory, bn

I C T 2 4 H . N E T

Page 7
c th s dng Group Policy cu hnh mt hoc nhiu ti khon ngi dng nh DRA cho ton doanh
nghip. cu hnh DRA, thc hin cc bc sau:
1. Ci t chng thc mt CA. V d, bn c th ci t role Active Directory Certificate Services.
2. To mt ti khon ngi dng thc hin DRA.
3. M Group Policy Object bng cng c Group Policy Management Editor.
4. R-click vo Computer Configuration > Policies > Windows Settings > Security Settings
> Public Key Policies > Encrypting File System, sau chn Create Data Recovery
Agent. Group Policy Management Editor to mt tp tin khi phc ly li chng thc t ti
khon DRA.
Thc hnh: M ha v khi phc tp tin
Trong bi thc hnh, bn to 2 ti khon: mt ti khon s m ha tp tin vi EFS v DRA s truy cp
tp tin m ha ny. Sau bn s m ha mt tp tin, xc nhn ti khon khng th truy cp c tp
tin ny. Cui cng s dng DRA khi phc tp tin c m ha ny.
Bi thc hnh 1: Cu hnh mt DRA
1. Ci t role Active Directory Certificate Services trn DC.
2. To ti khon c tn EFSUser v a vo nhm Domain Admin c th ng nhp vo DC. Bn
s dng ti khon ny to v m ha mt tp tin.
3. To mt ti khon c tn DRA v a vo nhm Domain Admin. ng nhp bng ti khon DRA.
4. Trn Server Manager, r-click Features > Group Policy Management > Forest:ict24h.net
> Domains > ict24h.net > Default Domain Policy v chn Edit.
5. Click Computer Configuration > Policies > Windows Settings > Security Settings v
chn Public Key Policies. Ti khung chi tit, double click vo Certificate Services Client
Auto-Enrollment. Thit lp Enable cho Configuration Model, sau click OK.
6. R-click vo Computer Configuration > Poicies > Windows Settings > Security Settings
> Public Key Policies > Encrypting File System v chn Create Data Recovery Agent.
Bi thc hnh 2: M ha mt tp tin
Trong bi thc hnh ny, bn s dng ti khon mi to l EFSUser to mt tp tin dng text
1. Trn Server1, ng nhp bng ti khon EFSUser.
2. Click Start v chn Document.
3. Trong ca s Document, r-lick vo Documents v chn Properties.
4. Trn tab General, click Advance. nh du chn Encrypt contents to secure data, sau
click OK 3 ln.
5. M ti liu m ha v thm on ch Hello ict24h.net.
Bi thc hnh 3: Th truy cp mt tp tin c m ha
Trong bi thc hnh ny, bn s dng ti khon Administrator (cha c cu hnh nh mt DRA) v gi
lp mt k tn cng th truy cp vo mt tp tin m mt ngi dng khc m ha.

I C T 2 4 H . N E T

Page 8
1. Trn Server1, ng nhp bng ti khon Administrator. Ti khon ny c quyn trn
Server1 nhng khng c cu hnh DRA.
2. Click Start, chn Computer.
3. Ti ca s Computer, m C:\Users\EFSUser\Document.
4. Double click v Encrypted document. Mt thng bo hin th dng ch Access is denied
error. Bn cng s nhn c thng bo tng t thm ch bn ci li h iu hnh hoc kt
ni n cng t mt my tnh khc.
Bi thc hnh 4: Khi phc mt tp tin c m ha
Trong bi thc hnh ny, bn s dng ti khon DRA truy cp tp tin c m ha, sau xa b
m ha t tp tin nhng ngi dng khc c th truy cp c.
1. Trn Server1, ng nhp bng ti khon DRA. Ti khon ny c cu hnh DRA.
2. Click Start, chn Computer.
3. Trong ca s Computer, m C:\Users\EFSUser\Documents. Hp thoi UAC hin th.
4. Double click vo Encrypted document khung Detail. Bn s nhn c thng bo v c th
truy cp c tp tin.
5. Ti ca s Windows Explorer, r-click vo tp tin c m ha v chn Properties. Trn
tab General, click Advanced. B chn dng Encrypt contents to secure data, sau click
OK 2 ln. Ti khon DRA xa m ha, co php cc ti khon khc c th truy cp vo nhng
tp tin m ha trc .
Tm tt bi hc
NTFS file permission kim sot truy cp cc tp tin khi Windows ang chy, cho d ngi
dng c truy cp tp tin t my tnh ca h hay thng qua mng i chng na. NTFS file
permission cho php bn c th gn cho ngi dng v nhm c cc quyn xem, ghi hoc
ton quyn.

EFS m ha nhng tp tin, gip bn bo v chng khi Windows khng lm vic. Mc d s m
ha cung cp phng thc bo mt kh mnh, th im yu ch nu ngi dng qun key h
khng th truy cp c tp tin m ha. bo v tt hn, bn c th s dng Active
Directory Group Policyt cu hnh DRA cho php khi phc li key m ha khi b qun.
Trc nghim
1. Bn to mt th mc c tn Marketing trn my tnh c tn File Server v cu hnh NTFS
permission gn quyn Read cho nhm Domain User v quyn Modify cho nhm Marketing. Bn
chia s th mc v gn quyn Read cho nhm Everyone. Nam - mt ti khon thuc c nhm
Marketing v nhm Domain Users ng nhp vo my tnh FileServer truy cp vo th mc
Marketing. Nam c nhng quyn hn no?
A. Khng c quyn truy cp
B. Read
C. Write
D. Full Control

I C T 2 4 H . N E T

Page 9
2. Bn to mt th mc v c bo v bng EFS bao gm c mt tp tin c chia s qua mng.
Bn chia s th mc ny v s dng NTFS, cho php ngi dng c th m tp tin. Bn nn lm
g cho php ngi dng truy cp vo tp tin c m ha m khng gim i tnh bo mt?
A. R-click vo tp tin, sau chn Properties. Trn tab Security, thm ti khon ngi
dng.
B. R-click vo tp tin, sau chn Properties. Trn tab General, click Advanced. Click
Details, sau thm ti khon ngi dng.
C. R-click vo tp tin, sau chn Properties. Trn tab General, click Advanced. B
chn dng Encrypt contents to secure data.
D. Khng lm g c.

Bi hc 2: Chia s th mc
Mt trong nhng phng php cng tc ph bin nht l chia s cc ti liu trong nhng th mc chia
s. Nhng th mc chia s ny cho php bt c ngi dng no c th truy cp n nu trong cng
mi trng mng. Cc th mc chia s cho php ti liu c tp trung ha v nhn vin c th d dng
qun l chng nu nh h mun chia s chng n hng nghn my tnh client.
Dch v File Services trong Windows Server 2008 cung cp cho bn nhng tnh nng mnh trong vic
chia s th mc v qun l cc tp tin. Vi s ci tin v quota, Windows c th thng bo cho ngi
dng v cc qun tr vin nu nh ngi dng s dng vt mc dung lng cho php. DFS cung cp
cho bn kh nng tp trung ha cu trc th mc chia s t nhiu my tnh khc nhau v t ng nhn
bn cc tp tin trong cc th mc. Offline Files t ng sao chp nhng tp tin chia s n cc thit b
my tnh cm tay cho php ngi dng c th truy cp n nhng tp tin ny ngay c khi h t kt
ni mng.
Sau bi hc, bn s c:
Ci t File Services
S dng quota thng bo n bn khi ngi dng s dng vt qu mc dung lng cho php.
Chia s th mc thng qua mng.
S dng DFS to mt vng khng gian chia s th mc trn nhiu server.
S dng Offline File cho php ngi dng c th truy cp n tp tn v th mc ngay c khi
h b t kt ni mng.
Thi lng cho bi hc: 55 pht

Ci t File Services
Windows Server 2008 c th chia s nhng th mc m khng cn bt c role no. Tuy nhin, vic ci
t dch v File Services cho bn nhng cng c qun l hu dng, gip bn c th lm vic vi DFS, cu
hnh quota, to cc bn bo co lu tr v nhng tnh nng khc. ci t File Services, thc hin theo
cc bc sau:
1. Trn Server Manager, r-lick Roles > Add Role.
2. Trn trang Before you begin, click Next.
3. Trn trang Server Roles, nh du chn vo File Services. Click Next.
4. Trn trang File Services, click Next.

I C T 2 4 H . N E T

Page 10
5. Trn trang Select role services, chn cc role sau:
File Server: mc d n khng cn thit cho vic chia s tp tin, nhng khi thm role
ny vo s cho php bn s dng cng c Share and Storage management.
Distributed File System: cho php chia s tp tin bng cch s dng vng khng gian
DFS v nhn bn cc tp tin trn DFS server. Nu bn chn dch v ny, h thng s
hin th khung cu hnh vng khng gian.
File Server Resource Manager: ci t nhng cng c to ra cc bo co lu tr,
cu hnh quota v xc nh cc chnh sch v tp tin. Nu bn chn dch v ny, h
thng s hin th khung cho php bn kch hot chc nng gim st dung lng lu tr
trn cng.
Services for Network File System: cung cp kh nng kt ni n cc my tnh chy
h iu hnh Unix chia s tp tin.
Windows Search Service: hin th cc tp tin tm kim nhanh hn khi cc my
client kt ni n cc th mc chia s. Dch v ny t khi c s dng trong doanh
nghip m bo tnh ring t.
Windows Server 2003 File Services: cung cp dch v tng thch vi my tnh chy
Windows Server 2003.
6. p ng ci t cc dch v m bn chn trn.
7. Trn trang Confirmation, click Install.
8. Trn trang Results, click Close.
Bn c th s dng cc cng c trong dch v File Services bng cch click Role > File Services trn
Server Manager.
S dng Quota
Khi nhng ngi dng chia s trn mt cng, cho d l ti my tnh hay thng qua mng th dung
lng cng s nhanh chng y. Vi chc nng quota, bn c th d dng gim st ngi dng s
dng dung lng cng. Thm vo , khi bn thit lp quota gii hn s dng, ngi dng s
khng th lm tng thm dung lng cng.
Vi Windows Server 2008, bn nn s dng Quota Management d cu hnh quota. Bn cng c th
cu hnh quota bng cc lnh DirQuota. Thm vo , bn c th cu hnh quota bng Group Policy
hoc Windows Explorer.
Cu hnh Disk Quota bng cng c Quota Management
Sau khi ci t File Server Resource Manage, bn c th qun l cng bng cch s dng cng c
Quota Management. Trn Server Manager, click Roles > File Services > Share and Storage
Management > Files Server Resource Manager > Quota Management.
Creating Quota Templates: Quota Management h tr s dng quota template. Bn c th s dng
mt quota template thit lp quota cho cng. Windows Server 2008 gm cc chun template sau:
100 MB Limit: nh ngha mt hard quota (quota ngn chn ngi dng to thm cc tp tin)
ch cho php s dng dung lng khng qu 100MB cho mi ngi dng, vi e-mail cnh bo
c gi n cho ngi dng mi khi dung lng t t 85-95%. Khi t 100% quota, template
ny s gi mt e-mail n ngi dng v qun tr vin.

I C T 2 4 H . N E T

Page 11
200 MB Limit reports to user: cho php s dng 200 MB cho mi ngi dng, e-mal cnh bo
dn ngi dng khi t n 85-95%. Khi t 100%, template ny s gi e-mail n ngi dng
v qun tr vin, ng thi gi bng bo co s dng cho ngi dng.
200 MB limit with 50 MB extension: Khi t n dung lng 200MB, my tnh s gi e-mail
n ngi dng v qun tr vin sau cho php m rng ln n 250 MB.
250 MB extended limit: template ny cho php ngi dng s dng khng qu 250MB.
Monitor 200 GB Volume usage: e-mail thng bo mi khi t n 70%, 80% 90% v 100%
khi cng t n cc mc % tng ng 200GB.
Monitor 500 MB share: e-mail s thng bo mi khi t n 80%, 100% v 120% tng ng
vi 500 MB.
to quota template, bn c th r-lick vo Quota Template trn Quota Management, sau chn
Create quota template. Trn hp thoi Create quota template, chn chun m bn mun s dng,
sau click Copy.
1. Chn v r-click vo Quotas trn Server Manager. Sau chn Create quota.

2. Click Browse v chn mt th mc bn cn p dng quota, sau click OK.

I C T 2 4 H . N E T

Page 12
3. Chn Auto apply template and create quotas on existing and new subfolders. Vi la
chn ny cho php bn p dng templae ny n bt c th mc mi no c to bn trong
th mc m bn va chn bc 2.
4. Chn Derive properties from this quota temmplate, sau chn quota danh sch. Mt
khc, bn c th chn Define custom quota properties v click Custom properties xc
nh quota ny khng da trn cc quota tn ti trc .
5. Click Create.
Cu hnh Disk Quota bng dng lnh
Bn c th s dng lnh DirQuota cu hnh quota. V d, p dng chun 200 MB Limit report cho
th mc C:\ICT24H bn g lnh sau:
dirquota quota add /Path:C:\ICT24H /SourceTemplate:200 MB Limit Reports To User
s dng chun 100 MB, s dng lnh sau:
dirquota quota add /Path:C:\ICT24H /Limit:100MB /Type:Hard
tm hiu v cc lnh DirQuota bn c th g lnh:
dirQuota /?
Cu hnh Disk Quota bng Windows Explorer
Mc d bn nn s dng Quota Management cu hnh quota trn Windows Server 2008, tuy nhin
h iu hnh h tr bn qun l quota bng Windows Explorer. cu hnh quota bng Windows
Explorer, thc hin cc bc sau:
2. R-click vo cng bn mun cu hnh quota, sau chn Properties. Bn khng th cu hnh
quota cho tng th mc c th.
3. Trn tab Quota, nh du chn Enable quota management.

I C T 2 4 H . N E T

Page 13

4. Chn Limit disk space to v thit lp gi tr dung lng.
5. nh du chn vo Log event when a user exceeds their quota limit hoc Log event
when a user exceeds their warning level cnh bo.
6. Nu bn nh du chn Deny disk space to users exceeding quota limit, ngi dng s
khng th lu hoc cp nht cc tp tin khi h vt qua phm vi quota cho php.
7. Click Quota Entries xem dung lng s dng hin ti ca cng. Trn ca s Quota
Entries, double click vo ngi dng cu hnh quota cho ngi dng .

I C T 2 4 H . N E T

Page 14

8. Click OK n hp thoi Quota Setings for., ng Quota Entries. cng ang cu
hnh, click OK sau ng ca s Local Disk Properties. Nu hin th khung thng bo, click
OK kch hot quota.
Cu hnh Disk quota bng Group Policy
Bn c th cu hnh quota bng Group Policy mt cch n gin. Trong cng c Group Policy
Management Editor, chn Computer Configuration > Policies > Administrative Templates >
System > Disk Quotas.
Enable Disk Quotas: bn phi bt chnh sch ny s dng quota.
Enforce Disk Quota Limit: tng t vi la chn Deny disk space to users exceeding
quota limit khi cu hnh Windows Explorer.
Default Quota Limit and Warning level: xc nh gii hn v cnh bo cc cp .
Log Event when Quota limit exceeded: tng t vi la chn Log event when a user
exceed their quota limit khi cu hnh Windows Explorer.
Log Event when quota warning level exceeded: tng t la chn Log event when a
user exceeds their warning level trong Windows Explorer.
Apply Policy to removable media: xc nh quota c p dng hoc xa b. Bn nn v
hiu ha chnh sch ny.
Chia s th mc
Bn c th chia s th mc thng qua mng v cho php cc my tnh khc co th truy cp n.
Chia s th mc t Windows Explorer
Cch n gin nht chia s th mc l r-click vo th mc trong Windows Explorer v chn Share.
Hp hoi File Sharing hin th cho php bn la chn ngi dng m bn mun truy cp c th mc.
Click Share to th mc chia s v click Done.

I C T 2 4 H . N E T

Page 15

C cc cp quyn cho bn la chn:
Reader: ch c quyn c. Tng t quyn Read NTFS file permission.
Contributor: cho php c v ghi.
Co-owner: cho php ngi dng c th thay i quyn ca tp tin chng hn gn thm quyn
c v ghi. Tng t quyn Full Control.
Owner: quyn ny cho php ngi dng c th to tp tin chia s v cho php thay i quyn.
Tng t quyn Full Control.
Chia s th mc s dng chc nng Provision a shared folder
wizard
Bn c th chia s th mc, cu hnh quota v thit lp bo mt bng Provision a shared folder
wizard.
1. Trn Server Manager, r-click vo Roles > File Services > Share and Storage
Management v chn Provision share.
2. Trn trang Shared folder location, click Browse v chn th mc chia s.
3. Trn trang NTFS Permission, chn Yes, change NTFS Permission . Sau click Edit
Permission nu bn mun thit lp quyn hn. Cu hnh NTFS l iu nn lm. Click OK, sau
click Next.

I C T 2 4 H . N E T

Page 16
4. Trn trang Share Protocols, chn kiu chia s s dng Windows (SMB-Server Message Block)
hoc s dng UNIX ( Network File System). Chn SMB cng c th p dng cho cc my client
s dng h iu hnh UNIX. Click Next.
5. Trn trang SMB Settings, click Advance nu bn mun thay i mc nh s lng ngi dng
ng thi hoc Offline Files. Click Next.
6. Trn trang SMB Permission, chn quyn hn bn mun gn. to quyn hn ty , chn
User and Group have a Custom share permission v click Permission. Click Next.

7. Trn trang Quota Policy, chn Apply Quota nu bn mun p dng quota ny. Sau chn
quota template. Click Next.
8. Trn trang File Screen Policy, nh du chn Apply file screen nu bn mun cho php tp
tin c th no trn th mc. Sau chn tp tin bn mun s dng. Click Next.
9. Trn trang DFS Namespace Publishing, chn Publish the SMB share to a DFS
Namespace nu mun a tp tin n vng khng gian DFS. Sau , cung cp thng tin DFS.
Click Next.
10. Trn trang Review Settings and Create Share, click Create.
11. Click Close.
Chia s th mc bng dng lnh

I C T 2 4 H . N E T

Page 17
Bn c th chia s th mc bng lnh net share.
xem danh sch chia s, g lnh:
net share
to mt chia s, g lnh theo cu trc sau:
net share ShareName=Path [/GRANT:user, [READ|CHANGE|FULL]]
[/CACHE:Manual|Document|Programs|None|]
V d chia s th mc ICT24H nm trong C:\, s dng tn chia s l Networking, chia s n mi
ngi v cho php h c, thc hin lnh sau:
net share Networking=C:\ICT24H /GRANT:Everyone,Read
xa th mc chia s Networking, s dng /DELETE
net share Networking /DELETE
xem hng dn v y cc lnh, g lnh
net share /?
Kt ni n th mc chia s
Cc my client kt ni n th mc chia s thng qua mng bng lnh \\ <tn server>\ <tn chia s>.
V d, nu bn mun chia s th mc Networking trn Server1, bn c th kt ni bng cch g
\\Server1\Networking. Bn c th truy cp n mt tp tin chng hn ti liu network.doc bng cch g
\\Server1\Networking\network.doc.
Ngoi ra bn c th s dng lnh dir truy cp n th mc
dir \\Server1\Networking
Hu ht ngi dng truy cp th mc thng hay s dng thm k t cng. Mc d chng ta thng
hay t tn l C nhng bn c th t l Z. Cc my client c th kt ni n nhng th mc chia s
bng cch click Map Network Drive trn Windows Explorer hoc click vo menu Tools v chn Map
Network Driver. V d bn mun truy cp th mc Networking trn M, g lnh sau:
net use M:\Server1\Networking
Tng quan v DFS
Vi nhng doanh nghip ln thng c hng t hoc thm ch hng trm File server. y chnh l vn
nan gin khi m ngi dng kh nh c server no lu tr tp tin no .
DFS cung cp cho bn mt vng khng gian duy nht cho php ngi dng c th kt ni n bt c th
mc chia s no trong doanh nghip. Vi DFS, tt c mi th mc chia s c th c truy cp. V d,
Active Directory ca bn l ict24h.net, bn c th to vng khng gian DFS \\ict24h.net\dfs. Sau , bn

I C T 2 4 H . N E T

Page 18
c th to th mc \\ict24h.net\dfs\networking v a chng n th mc chia s dnh cho c
\\server1\networking v \\server2\networking.
Bn cnh vic cung cp mt vng khng gian cho php ngi dng c th d dng tm tp tin, DFS co
th cho php nhn bn nhng tp tin chia s.
Ci t DFS
Bn c th ci t DFS khi ci t File Services s dng Add Roles Wizard hoc bn cng c th thm
dch v DFS bng cch s dng Server Manager, r-click vo Roles > File Services > Add Role
Services. D bn c ci t trc hay sau khi ci t cng s n bc cu hnh DFS, thc hin cc
bc sau:
1. Trn trang DFS Namespaces, to mt vng khng gian mi. t tn cho vng khng gian, v
d l ICT24H Ebook Centre.
2. Trn trang Namspace Type, bn c th chn Domain-based namespace (dnh cho mi
trng Active Directory) hoc Standalone-based namspace (dnh cho mi trng
workgroup). Nu tt c server chy Windows Server 2008, nh du chn vo Enable
Windows Server 2008 mode. Click Next.
3. Trn trang Credentials, chn ti khon to vng khng gian, ti khon ny phi thuc nhm
Domain Admin.
4. Trn trang Namspace Configuration, bn c th click Add sau thm cc th mc vo. Bn
c th lm thao tc ny lc sau cng c (s dng DFS Management).

5. Click Next.

I C T 2 4 H . N E T

Page 19

To mt vng khng gian DFS t DFS Management
thc hin vic to mt DFS t DFS Management, thc hin cc bc sau:
1. Trn Server Manager, r-click Roles > File Services > DFS Management > Namspaces v
chn New Namespace.
2. Trn trang Namespace Server, nhp tn server cha vng khng gian. Bn c th thm cc
server khc cha vng khng gian thi gian sau. Ngi dng khng th thy c tn
server khi h truy cp n vng khng gian DFS. Click Next.
3. Trn trang Namespace Name and Settings, nhp tn. y l tn vng khng gian chia s khi
m ngi dng truy cp vo. V d: \\ict24h.net\Ebook. Click Edit Settings thit lp
permisison cho vng khng gian. Click Next.
4. Trn trang Namspace Type, bn c th chn Domain-based namespace (dnh cho mi
trng Active Directory) hoc Standalone-based namspace (dnh cho mi trng
workgroup). Nu tt c server chy Windows Server 2008, nh du chn vo Enable
Windows Server 2008 mode. Click Next.

I C T 2 4 H . N E T

Page 20

5. Trn trang Review Settings and Create Namspace, click Create.

I C T 2 4 H . N E T

Page 21

6. Trn trang Confirmation, click Close.
Sau khi to xong vng khng gian, bn c th r-click vo n v chn Properties. Ca s Properties
hin th 3 tab:
General: cho php bn nhp m t v vng khng gian.
Referrals: khi mt my client truy cp n vng khng gian hoc mt th mc no , my
client s nhn c mt danh sch cc server t DC. Cc my client lun lun c gng truy cp
n my tnh target u tin trong danh sch v nu my tnh target khng p ng th cc
my truy cp s rt hng trong danh sch. Tab ny cho bn kim sot ng thi nhiu target
trn danh sch c sp xp th t. Chn Select random order t danh sch Orderng
method cung cp danh sch cho tt c target. Chn Lowest cost cc client trc tip kt
ni n target gn nht. Nu bn mun s dng target thuc Active Directory khc th chn
Exclude targets outside of the clientsite.
Advanced: c 2 s la chn cho bn. Optimize for consistency cu hnh vng khng gian
trn server truy vn n DC chnh (PDC) mi ln c s thay i vng khng gian, gip bn
tit kim thi gian. Optimize for scalability gim s lng truy vn bng cch truy vn dn
domain controller gn nht.

I C T 2 4 H . N E T

Page 22

Thm th mc vo mt vng khng gian DFS
thm th mc vo vng vng khng gian DFS, thc hin cc bc sau:
1. Trn Server Manager, click Roles > File Services > DFS Management > Namespaces.
2. R-click vo vng khng gian v chn New Folder.
3. Nhp tn th mc. Nu bn mun th mc bao gm c nhng tp tin, click Add v chn th
mc chia s.
4. Click OK.
Cu hnh DFS bng dng lnh
Bn c th s dng lnh DFSUtil cu hnh DFS. V d, xem th mc gc DFS trn domain
ict24h.net, g lnh sau:
dfsutil domain ict24h.net
xem th mc gc DFS trn mt server c th no , chng hn l server1, g lnh sau:
dfsutil server server1
xem cc target trn vng khng gian, g lnh sau:

I C T 2 4 H . N E T

Page 23
dfsutil target \\ict24h.net\Networking //vi ict24h.net l tn domain v Networking
l tn vng khng gian.
xem target i vi th mc, g lnh sau:
dfsutil link \\ict24h.net\Networking\Ebook
xem thng tin client trong Active Directory, g lnh sau:
dfsutil client siteinfo <PC01> //vi PC01 l tn client mun xem.
xem y lnh DFS g dfsutil /? . khc phc s c v DFS s dng lnh DFSDiag, bn c th
xem y cc lnh bng cch g dfsdiag /?.
Offline Files
Ngi dng c th truy cp n nhng th mc chia s thm ch ngay c khi h t kt ni n mng
ni b. Offline Files cho php cc client c th t ng lu tr mt bn sao ca tp tin trn th mc chia
s v cho php truy cp khi ngi dng khng th kt ni n mng. Sau khi kt ni, Offline File s ng
b ha v nhc ngi dng c th x l nhng xung t nu c.
Cc qun tr vin c th cu hnh Offline Files trn th mc chia s v ngi dng c th cu hnh Offline
Files khi h kt ni n th mc chia s. cu hnh Offline File, thc hin cc bc sau:
1. Trn Server Manager, click Roles > File Services > Share and Storage Management.
2. Ti khung chi tit l danh sch chia s, r-click vo th mc bn mun cu hnh v chn
Properties.
3. Ti tab Sharing, click Advanced.
4. Ti ca s Advanced, click tab Caching v chn 1 trong 3 la chn sau:
Only the files and program that users specify are available offline: ngi dng
phi t chn cc tp tin m h mun truy cp trng thi offline. Ty chn ny thch
hp khi nhng ngi dng hiu cch s dng Offline Files.
All files and programs that users open from the share are automatically
available offline: Nhng tp tin m ngi dng truy cp trong khi kt ni mng s
c t ng lu tr vi s lng ln c gii hn. Ty chn ny thch hp khi ngi
dng cha bit v Offline Files.
No files or programs from the share are available offline: ngn chn ngi dng
truy cp Offline Files. y l ty chon tt nht dnh cho nhng ti liu b mt.


I C T 2 4 H . N E T

Page 24

Bn cng c th cu hnh Offline Files Windows Explorer bng cch click Advanced Sharing trn tab
Sharing ca th mc v chn Caching.
Thc hnh: Lm vic vi th mc chia s
Trong bi thc hnh ny, bn to mt vng khng gian DFS.
Bi thc hnh 1: Ci t dch v Distributed File System
Trong bi thc hnh, bn phi ci t dch v File Services v Distributed trn c Server1 v Server2. Sau
, bn s to mt vng khng gian DFS c cha trong c Server1 v Server2, tip theo bn s to
th mc chia s. Th mc chia s ny s t ng nhn bn.
hon thnh bi thc hnh ny, Server1 l domain controller c tn ict24h.net v Server2 thuc
domain ict24h.net.
1. Ti Server1, trn Server Manager, r-click vo Roles > Add Roles.
2. Trn trang Before youu begin, click Next.
3. Trn trang Server Roles, nh du chn vo File Services. Click Next.
4. Trn trang File Services, click Next.

I C T 2 4 H . N E T

Page 25
5. Trn trang Select Role Services, chn Distributed File System v File Server Resource
Manager. Click Next.
6. Trn trang Create a DFS Namspaces, nhp tn vng khng gian l Public. Click Next.
7. Trn trang Namspace Type, mc nh. Click Next.
8. Trn trang Namespace Configuration, click Next.
9. Trn trang Configure Storage Usage Monitoring, nh du chn tt c cc cng v click
Next.
10. Trn trang Report Options, click Next.
Bi thc hnh 2: Thm mt server vo vng khng gian DFS
1. Ti Server1, trn Server Manager, r-click vo Roles > File Services > DFS Management >
NameSpaces > ict24h.net > Public. Sau chn Add Namespace Server..

2. Click Browse. Ti hp thoi Select Computer, nhp Server2 v click OK. Nu khung nhc
lnh hin ra yu cu bn bt u dch v DFS trn Server2, click Yes. Click OK mt ln na
ng ca s Add Namespace Server.
3. Trn khung chi tit, click tab Namespace Servers. Ch 2 server trong danh sch. Nu
mt trong 2 server khng hot ng, my client vn c th kt ni n server cn li truy cp
th mc.

I C T 2 4 H . N E T

Page 26
Bi thc hnh 3 Thm mt th mc c nhn bn vo vng
khng gian DFS
Sau khi bn to vng khng gian DFS v lu tr n trn c 2 server. Bn s to th mc chia s vi
tn Ebooks trn c Server1 v Server2, sau thm th mc Ebooks vo vng khng gian DFS v cu
hnh n nhn bn.
1. Ti Server1, trn Server Manager, r-click vo Roles > File Services > Share and Storage
Management. Sau click vo Provision Share.
2. Trn trang Shared Folder Location, g C:\Ebooks. Click Next. Khung nhc lnh hin th,
click Yes to th mc.
3. Trn trang NTFS Permission, chn Yes, change NTFS Permission. Click Edit Permission v
gn quyn cho nhm Users l quyn Modify. Click OK, sau click Next.
4. Trn trang Share Protocols, nhp tn chia s l Ebooks. Click Next.
5. Trn trang SMB Settings, click Advance. Ti tab Caching, chn No files or programs from
the share a available offline. Click OK, sau click Next.
6. Trn trang SMB Permission, chn Adminstrators have Full Control; All other Users and
Groups have only Read access. Click Next.
7. Trn trang Quota Policy, nh du chn Apply Quota. Chn Auto apply template to create
quotas on existing and new subfolders. Sau , ti danh sch Derive properties from
this quota template, chn 200 MB Limit with 50 MB Extension. Click Next.
8. Trn trang File Screen Policy, nh du chn Apply File Screen. Ti danh sch Derive
Properties from this File screen template, chn Block Excutable Files. Click Next.
9. Trn trang DFS Namespace Publishing, nh du chn Publish the SMB share to a DFS
namespace. Ti Parent folder in namespace, nhp \\ict24h.net\Public. Ti New folder
name, nhp Ebooks. Click Next.
10. Trn trang Review settings and create share, click Create.
11. Click Close.
12. Ti Server2, to mt th mc, gn quyn Modify cho nhm Users sau chia s th mc ny.
G lnh sau:
mkdir C:\Ebooks
icacls C:\Ebooks\ /grant users:M
net share Files=C:\Ebooks /GRANT:Users,READ /GRANT:Administrators,FULL
/CACHE:None
Ti Server1, thm th mc \\Server1\Ebooks vo \\ict24h.net\Public\Ebooks
1. Ti Server1, trn Server Manager, r-click \\ict24h.net\Public v chn Refresh.
2. Trn Server Manager, r-click \\ict24h.net\Public\Ebooks v chn Add Folder Target.
3. Ti hp thoi New folder target, nhp \\Server2\Ebooks. Click OK
4. Ti hp thoi Replication, click Yes to nhn bn gia Server1 v Server2.
5. Trn trang Replication Group and Replicated Folder name, click Next.
6. Trn trang Replication Eligibility, click Next.
7. Trn trang Primary Member, chn Server1. Click Next.
8. Trn trang Topology Selection, chn Full Mesh. Click Next.
9. Trn trang Replication Group Schedule and Bandwidth, click Next.

I C T 2 4 H . N E T

Page 27
10. Trn trang Review Settings and Create Replication Group, click Create.
11. Trn trang Confirmation, click Close.
12. Ti hp thoi Replication Delay, click OK.
13. Trn Server Manager, chn DFS Management > Namespace > ict24h.net > Public >
Ebooks. Click Replication. C Server1 v Server2 c trong danh sch.
14. Trn Server Manager, click DFS Management > Replication > ict24h.net > Public >
Ebooks.
Bi thc hnh 4: Kim tra nhn bn DFS
Trong bi thc hnh ny, bn kt ni vo vng vng khng gian DFS v to mt tp tin, xc nhn n t
ng nhn bn.
1. Trn Server1, ng nhp bng ti khon khc ti khon Administrator, click Start >
Computer.
2. Trong ca s Computer, click Map Network Drive.
3. Trn Map Network Drive, g \\ict24h.net\Public\Ebooks. Sau click Finish.
4. Trn a nh x, r-click vo khng gian trng, chn New, sau chn Text Document. Bn
s khng to c tp tin v nhm Users ch c quyn Read.
5. Trn Windows Explorer, chn C:\Ebooks. Sau , r-click vo khng gian trng, chn New >
Text Document. t tn cho tp tin mi to l Text File. Sau m tp tin v nhp dng ch
Hello ICT24H.
6. Trn Server2, m Windows Explorer v xem th mc C:\Ebooks. Ch tp tin Text File
c nhn ban. M tp tin ny bn s thy dng ch Hello ICT24H.
Tng quan bi hc
File Services gip bn c th qun l th mc, quota v to bo co lu tr.
Bn c th xc nh ngng gii hn v thng bo ngi dng cng nh qun tr vin mi khi
mt ngi dng no vt qu gii hn dung lng s dng cho php trn cng. Bn c th
cu hnh quota bng Windows Explorer hoc s dng lnh DirQuota.
DFS xc nh mt vng khng gian bao gm cc th mc chia s khc nhau c tp trung ha.
V th, ngi dng c th tm n chnh xc tp tin hoc th mc.
Offline Files l mt tnh nng mi trong Windows, cho php sao chp cc tp tin v th mc
trong mng n my tnh ngi dng c th truy cp chng mi khi h b t kt ni n
mng. Offline Files c th t ng ng b tp tin khi ngi dng tr li trng thi kt ni.
Trc nghim
1. Bn to mt th mc c tn Marketing v cu hnh NTFS permission gn cho nhm Domain
Users c quyn Read v nhm Marketing c quyn Modify. Bn chia s th mc v gn cho
nhm Everyone quyn Reader. Dandoh l nhn vin phng Marketing ti khon Dandoh thuc
nhm Marketing v cng thuc nhm Domain Users - cn truy cp vo nhng tp tin trn th
mc thng qua mng. Trn thc t, Dandoh c quyn hn nh th no?
A. No Access
B. Read

I C T 2 4 H . N E T

Page 28
C. Write
D. Full Control
2. Bn ang s dng Windows Server 2008 Server Core. Bn cn to mt th mc chia s. Bn s
dng lnh no?
A. Net
B. Netsh
C. Share
D. Ipconfig
3. Doanh nghip ca bn c mt tr s chnh vi 7 chi nhnh vn phng. Bn trin khai mt DFS
servser dnh cho tr s v cc vn phng. Bn cnh , bn thm mt vng khng gian DFS
cho mi DFS server. Bn mun cc client kt ni n cc DFS server cc b nu nh n hot
ng ri sau kt ni n cc DFS server khc nu nh DFS server cc b ny khng hot
ng. Bn nn chn phng thc no?
A. Random Order
B. Lowest Oder
C. Excludes targets outside of the clientsite
D. Clients fall back to preferred target.
4. kim sot tt cng, bn cn s dng quota gi e-mail n ngi dng mi khi h s
dng vt qu 80 MB dung lng cng, ngoi ra bn khng cho php ngi dng vt qu
100 MB. Bn nn s dng phng php no hiu qu nht.
A. To hard quota v gii hn 80 MB, sau to thm mt hard quota khc gii hn 100
MB.
B. To mt soft quota gii hn 80 MB v to soft quota th hai gii hn 100 MB.
C. To mt hard quota duy nht gii hn 100 MB. To cnh bo khi t n 80%.
D. To mt soft quota duy nht gii hn 100MB. To cnh bo khi t n 80%.
5. Bn cn cu hnh quota trn my tnh chy Windows Server 2008 Server Core. Bn cn s dng
lnh g?
A. FileScrn
B. DirQuota
C. StorRept
D. Net
Bi hc 3: Sao lu v khi phc tp tin
Bn c th s dng phn mm backup ca hng th 2 thc hin backup server. Tuy nhin, vi
Windows Server 2008, bn c th s dng nhng tnh nng backup c sn trong . Mc d Windows
Server Backup khng th p ng c tt c nhng nhu cu backup ton b, chng hn nh backup
Active Directory, GPO nhng n c th backup v restore tp tin trong ton b cng.

Sau bi hc, bn c th:
Qun l lu tr shadow copy.
S dng Windows Server Backup khi phc li tp tin v cng.
Thi lng bi hc : 30 pht


I C T 2 4 H . N E T

Page 29

Shadow Copy
Shadow copy cho php s dng phn mm sao lu truy cp cc tp tin m bn s dng. Nu phn
mm sao lu (gm Windows Server Backup hoc phn mm hng khc) cn truy cp vo tp tin th
Volume Shadow Copy s to ra mt bn sao (shadow copy) ca tp tin hin ti sau cho php qu
trnh sao lu c php truy cp vo bn sao v thc hin vic sao lu.
Qun l Shadow Copy t Windows Explorer
Bn c th qun l shadow copy s dng Windows Explorer. Thc hin cc bc sau:
1. Ti Windows Explorer, r-click vo cng v chn Configure Shadows Copies.
2. Ti danh sch Select a volume, chn a bn mun cu hnh.
3. Click Enable, sau click Yes cho php chy chc nng shadow copy trn a. Hoc bn
c th click Disable v click Yes tt chc nng ny.

4. Click Setting xem cc thng tin v dung lng s dng.

I C T 2 4 H . N E T

Page 30
5. Click Create Now to shadow copy.
6. Click OK
Qun l Shadow Copy bng dng lnh
Bn c th to shadow copy bng lnh vssadmin. V d, bn mun to shadow copy cho a C:\, g
lnh sau:
vssadmin create /For=C:
xem lu tr hin ti ca shadow copy, g lnh sau:
vssadmin list shadowstorage
xem cc shadow copy hin din cng nh thi gian to ra n, g lnh sau:
vssadmin list shadows
xem y cc lnh, g
vssadmin /?
Windows Server Backup
Windows Server Backup sao chp ton b a thnh tp tin nh dng *.vhd trn a th 2. Sau
thc hin vic sao lu v bn c th khi phc tng tp tin hoc ton b a. Nu Windows khng th
khi ng (nguyn nhn c th do a h thng gp trc trc), bn c th khi ng my tnh t
source ci t Windows, khi phc a h thng t phn sao lu trc .
Ci t Windows Server Backup
ci t Windows Server Backup, thc hin cc bc sau:
1. Trn Server Manager, r-click Features > Add Features.
2. Trn trang Features, click Windows Server Backup Features v nh du chn Windows
Server Backup. Nu bn mun thc hin sao lu bng dng lnh th nh du chn
Command-line Tools.

I C T 2 4 H . N E T

Page 31

By gi, bn c th truy cp vo Windows Server Backup t Administrative Tools hoc c th s dng
lnh Wbadmin sao lu.
Cu hnh thc hin sao lu
cu hnh cho vic sao lu, thc hin cc bc sau:
1. Cick Start > Administrative Tools > Windows Server Backup. Nu h thng yu cu xc
nhn UAC, click Continue tip tc.
2. Ti khung Action bn phi, click Backup Once.
3. Trn trang Backup Options, chn Different option. Click Next.
4. Trn trang Server Backup Configuration, click chn kiu sao lu Full Server hoc chn
Custom nu bn mun chn sao lu ty th mc hoc a ty . Click Next.
5. Trn trang Select Items for Backup, chn thnh phn m bn mun sao lu. Click Next.

I C T 2 4 H . N E T

Page 32

6. Trn Specify Destination Type, chn hnh thc lu tr dng a hoc th mc chia s. Sau
click Next.
7. Trn trang Select Backup Destination, chn ni lu tr cc sao lu. Click Next.
8. Trn trang Specify Advanced Option, mc nh VSS Copy Backup bo v cc tp tin
VSS log. Click Next.
9. Trn trang Confirmation, click Backup.
10. Trn trang Backup Progress, bn c th xem din bin sao lu.
Ln lch sao lu
ln lch sao lu t ng, thc hin theo cc bc sau:
1. Click Start > Administrative Tools > Windows Server Backup.
2. Trn khung Action bn phi, click Backup Schedule.
3. Trn trang Getting Started, click Next.
4. Trn trang Select Backup Configuration, chn sao lu ton b server (Full Server) hoc ty
chn thnh phn sao lu (Custom).
5. nh du chn vo thnh phn m bn ty chn sao lu, click Next.
6. Trn trang Specify Backup Time, chn thi gian bn mun sao lu hng ngy.

I C T 2 4 H . N E T

Page 33

7. Trn trang Select Destination Disk, chn ni lu tr tp tin sao lu. Click Next.
8. Click Yes khi hin khung nhc nh.
9. Trn trang Label Destination Disk, click Next.
10. Trn trang Confirmation, click Finish.
11. Trn trang Summary. Click Close.
Bn c th xem lch sao lu bng giao din Task Scheduler bng cch click Configuration > Task
Cheduler Library > Microsoft > Windows > Backup

I C T 2 4 H . N E T

Page 34

S dng dng lnh sao lu
Bn c th s dng cc dng lnh thc hin sao lu, chng hn trong trng hp bn ang s dng
Windows Server 2008 Server Core. xem cc lnh sao lu, bn c th s dng lnh
wbadmin /?
Kim tra nhanh
1. Lnh no cho bn cu hnh shadow copy?
2. Lnh no cho bn bt u chy sao lu?
Tr li nhanh
1. Vssadmin
2. wbadmin

Khi phc tp tin hoc th mc
Bn c th khi phc tp tin hoc th mc t bn sao lu hoc shadow copy, thc hin cc bc sau:
1. Trn Windows Explorer, r-click vo mt tp tin m bn mun khi phc, sau chn Restore
Previous Versions.
2. nh du chn vo thi im m bn mun khi phc, sau click Restore.

I C T 2 4 H . N E T

Page 35

3. H thng hin th ca s hi bn c mun khi phc li tp tin hoc th mc vo ngy sao
lu hay khng, click Restore.
4. Click OK 2 ln.
Khi phc a
khi phc server t mt sao lu, thc hin cc bc sau:
2. Ti khung Action bn phi, click Recover.
3. Trn trang Getting Started, nh du chn vo server m bn mun khi phc, click Next.
4. Trn trang Select Backup Data, nh du chn sao lu cn bn khi phc. Click Next.
5. Trn trang Select Recovery Type, chn mt trong 3 ty chn sau, sau click Next.
Files and Folders: m tp tin c sao lu. Bn c th chn mt tp tin hay mt
th mc c th no m bn mun sao lu.
Applications: cc ng dng c th c thit lp bng Windows Server Backup lu
tr. y l ty chn chon php bn c th khi phc c cc d liu ca ng dng.
Volumes: cho php bn c th khi phc ton b a. Tuy nhin, bn khng th s
dng ty chn ny khi phc a h thng.

I C T 2 4 H . N E T

Page 36
6. Trn trang Select Items to Recover, m sao lu chn mt th mc v tp tin cn khi
phc, sau click Next. Nu mt hp thoi hin th, click Ok.

7. Trn trang Specify Recovery Options, chn ni lu tr khi phc.

I C T 2 4 H . N E T

Page 37

8. Trn trang Select Volumes, nh du chn a v click Next.
9. Trn trang Confirmation, click Recover.
10. Trn trang Recovery Progress, click Close.
Khi phc khi Windows khng th khi ng
Nu Windows khng th khi ng hoc nu bn cn khi phc ton b k c a h thng t mt sao
lu, bn c th s dng a ci t Windows Server 2008 DVD v s dng cng c Windows Complete
PC Restore Wizard khi phc li h iu hnh. Thc hin cc bc sau:
1. a a ci t Windows Server 2008 vo my tnh v khi ng li.
2. Khi mn hnh Press any key to boot from the CD hin th, nhn bt k mt phm no trn
bn phm.
3. Trn trang Language selection, click Next.
4. Click Repair your computer.

I C T 2 4 H . N E T

Page 38

5. Trn hp thoi System Recovery Options, chn h iu hnh, sau click Next.
6. Click Windows Complete PC Restore.
7. Ti Restore your entire computer from a backup, mc nh. Mt khc, click Restore a
different backup nu bn mun khi phc c nhng sao lu c trc . Click Next.
8. Trn trang Choose how to restore the backup, click Next.
9. Click Finish.
10. nh du chn I confirm v click OK.
Thc hnh: Sao lu v khi phc tp tin
Trong bi thc hnh ny, bn sao lu v khi phc tp tin, s dng shadow copy v Windows Server
Backup.
Bi thc hnh 1: Khi phc mt tp tin t mt shadow copy
Trong bi thc hnh, bn to mt tp tin, sau cu hnh shadow copy v cui cng thc hin khi phc
li tp tin .
1. To mt tp tin dng *.txt trn desktop. M tp tin v nhp dng ch Hello ICT24H. Lu tp
tin li.

I C T 2 4 H . N E T

Page 39
2. R-click vo Command Prompt v chn Run as dministrator. Bn s thc hin vic to mt
shadow copy trong C. G lnh sau:
vssadmin create shadow /For=C:
3. M tp tin. Thay i ni dung t Hello ICT24H thnh Goodbye ICT24H. Lu tp tin li.
4. R-click vo tp tin v chn Restore Previous Versions. Click tab Previous Versions.
5. Chn thi gian va mi to shadow copy. Sau click Restore.
6. Hin th khung xc nhn, click Restore.
7. Cick OK 2 ln.
8. M li tp tin bn s thy ni dung hin th quay li dng ch Hello ICT24H
Bi thc hnh 2: sao lu v khi phc tp tin
Trong bi thc hnh ny, bn thc hin sao lu Server1, khi phc cc tp tin sau khi phc ton b
a h thng.
1. Ti Server1, ng nhp bng ti khon Administrator. Click Start > Administrative Tools >
Windows Server Backup.
2. Ti khung Action bn phi, click Backup Schedule.
4. Trn trang Select Backup Configuration, chn Custom.
5. Trn trang Select Backup Items, nh du chn a h thng sau click Next.
6. Trn trang Specify Backup Time, chn thi gian sao lu cch nhau khong 5 pht. Click Next.
7. Trn trang Select Destination Disk, chn a cha sao lu. Click Next.
8. Click Yes khi hin khung nhc.
9. Trn trang Label Destination Disk, click Next.
10. Trn trang Confirmation, click Finish.
11. Trn trang Summary, click Close.
Sau khi hon tt sao lu, bn bt u tin hnh xa b, sau khi phc tp tin. Thc hin cc bc
sau:
1. Xa th mc C:\Users\EfsUser\Document.
3. Ti Action bn phi, click Recover.
5. Trn trang Select Backup Data, ch n cc bn sao lu c chn. Click Next.
6. Trn trang Select recovery type, chn Files and Folder, v click Next.
7. Trn trang Select Items to Recover, m th mc C:\Users\EfsUsers\Document. Sau click
Next. Click OK nu xut hin hp thoi.
8. Trn trang Specify recovery options, chn ni lu tr khi phc C:\Users\EfsUser. Click Next.
9. Trn trang Confirmation, click Recover.
10. Trn trang Recovery progress, click Close.
By gi bn m Windows Explorer xc nhn th mc C:\Users\EfsUser\Document c khi phc.
Sau xa th mc ny mt ln na v thc hin vic khi phc ton b h thng Windows.

I C T 2 4 H . N E T

Page 40
1. a a ci t Windows Server 2008 vo v khi ng li my tnh.
2. Mn hnh Press any key to boot from the CD hin th, nhn mt phm bt k trn bn phm.
3. Trn trang Language, click Next.
4. Click Repair your computer.
5. Trn hp thoi System recovery options, chn h iu hnh sau click Next.
6. Click Windows complete PC restore.
7. Trn trang Restore your entire computer from a backup, click Next.
8. Trn trang Choose how to restore the backup, click Next.
9. Click Finish.
10. nh du chn I confirm v click OK.
Tng quan bi hc
Windows t ng to mt shadow copy khi cc phn phn sao lu cn truy cp vo tp tin
thc hin sao lu. Mc d bn khng cn quan l shadow copy, bn c th s dng lnh
vssadmin to shadow copy hoc qun l lu tr shadow copy.

Windows Server Backup to mt tp tin c nh dng *.vhd bao gm a cng mi khi sao lu.
Bn c th khi phc tp tin hoc ton b a. S dng lnh wbadmin qun l sao lu.
Trc nghim
1. Bn ang ln k hoch thay i mt s tp tin cu hnh quan trng trong Windows Server 2008.
Lnh no cho php bn khi phc tp tin nu gp vn v bn cn khi phc li?
A. StorRept
B. FileScrn
C. DirQuota
D. Vssadmin
2. Bn s dng Windows Server Backup tin hnh sao lu a D nm trong my tnh c tn
FileServer. u l th mc lu tr sao lu ?
A. D:\WindowsFileBackup\FileServer\
B. D:\WindowsImageBackup\FileServer\
C. D:\WindowsImage\Backup\FileServer\
D. D:\FileServer\WindowsImage\Backup\
3. Bn s dng Windows Server Backup khi phc d liu. Cng vic no sau y bn cn tin
hnh? (chn tt c phng n m bn cho l ng)
A. Khi phc ring tng tp tin.
B. Khi phc a h thng
C. Khi phc a khng phi l a h thng.
D. Ghi ln tp tin ang s dng hin ti.
Tng quan v chng
NTFS permission cho php bn kim sot truy cp mi khi h iu hnh ang hot ng v EFS
bo v tp tin nu nh k tn cng xm nhp vo h iu hnh thnh cng. S dng NTFS

I C T 2 4 H . N E T

Page 41
file permission l mt phng php chnh cn lm v EFS gip bn bo v c cc tp tin trnh
s tn cng xm nhp h iu hnh.

Windows Server 2008 cung cp cho bn cc tnh nng chia s th mc hiu qu. Sau khi ci t
dch v File Service, bn c th qun l a bng cch to quota, t ng thng bo n ngi
dng v qun tr vin khi mt ngi dng no vt ra ngoi phm vi s dng dung lng cho
php. Vi DFS bn c th to mt vng khng gian duy nht cho php ngi dng c th truy
cp dn nhng th mc chia s. Ngoi ra, vi Offline File, ngi dng c th truy cp n cc
tp tin ca h mi khi h khng th kt ni mng.

Shadow copy cho php cc phn mm sao lu c th truy cp n cc tp tin ang s dng
hin ti v chng c th c s dng sao lu trn a mt cch nhanh chng. Cng c
Windows Server Backup cung cp kh nng sao lu ti u, cho php bn c th khi phc cc
tp tin ty hoc ton b a.

Cc thut ng
Hard quota: Gii hn lu tr, ngn chn ngi dng to thm cc tp tin sau khi h ti ngng
gii hn.
Soft quota: Gii hn lu tr cho php ngi dng to thm cc tp tin khi h ti ngng gii
hn. Soft quota c s dng s gi thng bo n qun tr vin
Target: th mc chia s ch nm trn vng khng gian DFS.
Ng cnh
Ng cnh th nht: Ln k hoch trin khai i vi File Services
Bn l k s h thng cho ICT24H. Hin ti, cng ty ang s dng nhng server cc phng ban cho
vic chia s tp tin. Mi phng ban c file server ring v cng ty c khong 100 th mc chia s. Cc
nhn vin d nhm ln khi h cn tm ra tp tin ca h v cc qun tr h thng cng tn nhiu thi gian
phn quyn cho cc th mc. Thm vo , nu server ca mt phng ban gp li, th mc chia s
s khng hin th cho n khi server khi phc li.
Bn hy tr li nhng cu hi sau :
1. Lm th no gim s lng th mc chia s m ngi dng mun kt ni n?
2. Nu bn s dng mt vng khng gian DFS, lm th no m bo ngi dng khng kt ni
n cc th mc chia s ca cc phng ban khc?
Ng cnh th hai: Ln k hoch khi phc khi gp vn ln
Bn l qun tr h thng ca ICT24H. Cng ty ca bn bt u trin khai Windows Server 2008. Xp ca
bn c v lo u v vn khi phc nu server gp vn v a h thng hin ti ang gp li.

I C T 2 4 H . N E T

Page 42
1. Khi t hng server, yu cu cu hnh nh th no p ng vic ln lch sao lu vi Windows
Server Backup?
2. Sau khi tin hnh sao lu, bn s khi phc server nh th no nu a h thng gp li?
3. Bn c th s dng nh sao lu tng t khi phc tp tin m n b xa hay khng?
--- End ---


File-Server - Smith.N Studio

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

File-Server - Smith.N Studio

Uploaded by

Copyright:

Available Formats

2010

You might also like