Small WIN2K XP LAN Management Maintenance
I. Necessity of management and maintenance Due to the rapid spread of the network in recent years, the Win2K / XP vulnerability is constantly discovered. From the release of Expliot, the generation cycle of WORM virus is greatly shortened. Therefore, it is commonplace that the security accident is uncommon, resulting in a loss of the user.
II. Management and maintenance specific implementation
1. Data and system backup Use Symantec Ghost 7.5 Enterprise Edition to make full backup for each computer in LAN, and make incremental backup every week. It is necessary to use the Win2K system self-generation RAID feature on the computer where Symantec Ghost 7.5 is installed, so that more reliability is more reliable.
2. Software deployment and upgrade uses Symantec Ghost 7.5 Enterprise Edition to make a deployment or upgrade application package, which can greatly reduce deployment time and cost.
3. System catastrophic recovery once the system crashes, you can use the Symantec Ghost 7.5 network gram function to quickly repair the computer from Symantec Ghost Server
4. Safety a. System Patch Patch and Management Software Update Services in the LAN can automatically install the latest patch for other machines in the LAN, without artificial intervention, the true cause of WORM virus is unable to install in time Patch b. User passwords Strengthen security awareness of employees, some employees set simple passwords for computer, but they don't know if they are convenient, and others are convenient. Unauthorized access, automatic scanning and disassembling the password WORM virus, resulting in the entire LAN infection, solving. By using a cryptographic policy, forced users to use complex passwords, and change the password d. Unauthorized Sniffer based hub-based hubs, exist unauthorized SNIFFER risks. Thereby, password leakage, solution, replace the shared hub is a switch. However, it is not possible to prevent ARP spoofing Sniffer E. Anti-virus can provide anti-virus anti-drug services to all computers in LAN through the Symantec AntiVirus Corporate Edition 8.0 Control Center and consumers, and unified management and upgrade ---- board card Fault ------ Replacement ---------------------------------- Flowchart: | | - ----- Hardware failure ------ ---- hard disk failure ------ replacement ----- Symantec Ghost Server Recovery ---- Fault Analysis | | Computer Fault --- --- | ------ | ------ System crash ----------- Symantec Ghost Server Recovery ---- ----- Solve Fault ---- Software Failure ------ | NO | | -------- Virus infection ---------- Anti-Virus ------ - ------------------ | NO | | -------- Wrong operation ---------- Repair ----- - -------------------
Appendix A: Deploying Win2K
1. Establish a prototype computer installation system and application software on prototype computers 2. Establish a working computer needed to install the Ghost 7.5 Enterprise Edition 3. Run SID 4.exe on the prototype computer 4. Establish your GHOST network Guide Disks Create a GHOST Network Guidance Disk 5. Making Deployment The Mirror File Required Use GHOST Network Guide Disk Boot Guide Prototype Computer, and establish a mirror file on the work computer 6. Establish a Ghost boot partition image file to build on a work computer Each client GHOST boot partition mirror file 7. Install the GHOST boot partition for each client to boot the client, and install the GHOST boot partition 8. Deployment
Appendix B: Web Ways Deploy Symantec AV
1. Establish a virtual directory SAV, directory path to / program files / sav / clt-inst / webinst2. Set the virtual directory SAV permission to read, the execution license is not. 3. Modify the Start.htm file under / program files / sav / clt-inst / webinst directory // computer name or IP address // Virtual Directory Name // Profile path // installation Document Name // Client installation The minimum disk space required 4. Modify / Program Files / SAV / Files.ini file under CLT-INST / Webinst / Webinst
FileCount = 2Launchapplication = setup.exeinstallOption = /qbfiles1=grc.datfiles2=setup.exe
To use the following installation parameter options, add installOptions = to the [General] section and match the following or more parameters: no response: / Qn Passive: / QB Enable Record: / L:
List: InstallOptions = / qn / l:
- Some IIS needs to rename .ini files to .txt
5. Access http: // server_name / virtual_home_directory / WebinSt / Install Symantec AV requires a client machine, IE version is 4.0 or more, the user must log in to server_name // machine name or IP address Virtual_Home_directory // Virtual Directory Name 2004 / 6/18 by root_119@msn.com
