Windows Server 2008 Server Core - Ebook
Windows Server 2008 Server Core - Ebook
Windows Server 2008 Server Core - Ebook
ﻓﻲ اﻟﺬآﺮى اﻟـ ٦٠ﻟﻠﻨﻜﺒﺔ أﺣﺒﺖ ان اﻗﺪم هﺬا اﻟﻤﻮﺿﻮع اﻟﺬي ﻳﺘﺤﺪث ﻋﻦ Windows Server 2008 COREاﻟﻨﻈﺎم اﻟﺠﺪﻳﺪ
واﻟﻤﻤﻴﺰ ﻣﻦ ﺷﺮآﺔ ﻣﺎﻳﻜﺮوﺳﻮﻓﺖ.
وﻗﺪ اﺧﺘﺮت ذآﺮى اﻟﻨﻜﺒﺔ اﻻﻟﻴﻤﺔ واﻟﻤﺤﺰﻧﺔ ﻟﻜﻞ ﻋﺮﺑﻲ وﻣﺴﻠﻢ ﺷﺮﻳﻒ آﻲ ﺗﺒﻘﻰ ﻓﻠﺴﻄﻴﻦ هﻲ اﻟﻘﻀﻴﺔ داﺋﻤﺎ واﺑﺪا ﻓﻲ اﻟﻘﻠﺐ و
اﻟﻮﺟﺪان ،وآﺎن اﺧﺘﻴﺎري هﺬﻩ اﻟﻠﺤﻈﺔ ﺑﺎﻟﺬات ﻓﻲ ﻣﺤﺎوﻟﺔ ﻟﺮﻓﻊ ﻣﺴﺘﻮاﻧﺎ اﻟﻌﻠﻤﻲ واﻟﻤﻬﻨﻲ ﺑﻤﺎ ﻳﺨﺪم اﻟﻤﻌﺮآﺔ ﻣﻊ اﻟﻌﺪو اﻟﺼﻬﻴﻮﻧﻲ،
ﻻ اﻟﻤﻮﻟﻰ ﻋﺰ وﺟﻞ ﻟﻨﺎ آﻤﺎ اﺣﺒﺒﺖ ان ﺗﻜﻮن هﺪﻳﺔ ﻣﻤﻴﺰة ﻣﻨﻲ ﻟﻜﻞ اﻻﺻﺪﻗﺎء واﻷﺣﺒﺔ ﻋﻞ اﷲ ﻳﻮﻓﻘﻬﻢ وﻳﻬﺪﻳﻬﻢ وﻳﻬﺪﻳﻨﺎ اﺟﻤﻌﻴﻦ ،ﺳﺂ ً
وﻟﻜﻢ اﻟﻔﺎﺋﺪة ﻣﻤﺎ ﺗﻘﺮاوﻧﻪ ﻓﻲ هﺬﻩ اﻟﻤﺎدة اﻟﺠﻤﻴﻠﺔ واﻟﺠﺪﻳﺪة ﻋﻠﻴﻜﻢ .
اﻟﻜﺘﺎب ﻗﺪﻣﻪ ﻣﺸﻜﻮرا ﺟﺰاﻩ اﷲ ﻋﻨﺎ آﻞ ﺧﻴﺮ اﺧﻮﻧﺎ ﻣﻦ ﻣﻨﺘﺪى ﺑﻮاﺑﺔ اﻟﻌﺮب CompLoverوﻗﻤﺖ اﻧﺎ ﺑﺠﻤﻌﻪ ﻓﻲ هﺬا اﻟﻜﺘﺎب ﻟﺘﻌﻢ
اﻟﻔﺎﺋﺪﻩ اﻟﺠﻤﻴﻊ .
اﻟﺪرس اﻻول
ﻓﻬﻢ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر و ﻓﻬﻢ اهﻢ ﻣﻴﺰاﺗﻪ Understanding Windows Server 2008 Server Core
و ﻳﺸﻤﻞ هﺬا اﻟﺪرس ﻣﺎ ﻳﻠﻲ :
• ﻣﺎ هﻮ اﻟﺠﺪﻳﺪ ﻓﻲ هﺬﻩ اﻟﻨﺴﺨﺔ What’s new in the Server Core installation option
• اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﻳﻘﺪﻣﻬﺎ اﻟﺴﻴﺮﻓﺮserver roles
• ﺣﺴﻨﺎت و ﻣﻤﻴﺰات هﺬﻩ اﻟﻨﺴﺨﺔ Benefits of a Server Core installation
• اﻻﺻﺪارات اﻟﺘﻲ ﻳﺄﺗﻲ ﺑﻬﺎ هﺬا اﻻﺻﺪار ﻣﻦ اﻟﻮﻳﻨﺪوز Server Core versions
• دراﺳﺔ اﻣﻜﺎﻧﻴﺔ اﻟﺘﺮﻗﻴﺔ ﻣﻦ اﺻﺪارات وﻳﻨﺪوز ﻗﺪﻳﻤﺔ Upgrading from previous versions
اﻟﺪرس اﻟﺜﺎﻧﻲ
ﺗﻨﺼﻴﺐ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر Installing windows server 2003 core
اﻟﺪرس اﻟﺜﺎﻟﺚ
و ﻳﺸﻤﻞ هﺬا اﻟﺪرس ﻣﺎ ﻳﻠﻲ :
• ﺗﻌﺮﻳﻒ اﻟﻮﻗﺖ و اﻟﺘﺎرﻳﺦ ﻋﻠﻰ اﻟﺴﻴﺮﻓﺮ آﻮر Time & Date Settings in Windows 2008 Server Core
• ﺗﻌﺮﻳﻒ اﻟﻮﻗﺖ و اﻟﺘﺎرﻳﺦ ﻟﻠﻜﻤﺒﻴﻮﺗﺮ ﻓﻲ ﻣﺠﻤﻮﻋﺔ اﻟﻌﻤﻞ Configure Time and Date For Workgroup Pc
• Configure Pc to synchronize its clock with the PDC Emulator
اﻟﺪرس اﻟﺮاﺑﻊ
ﺗﻌﺮﻳﻒ اﻻﻋﺪادات اﻟﻌﺎﻣﺔ ﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر Managing Windows 2008 Server Core Local Settings
و ﻳﺸﻤﻞ اﻻﻣﻮر اﻟﺘﺎﻟﻴﺔ :
• أﺿﺎﻓﺔ و ﺣﺬف ﻣﺴﺘﺨﺪم ﻣﻦ ﻣﺠﻤﻮﻋﺔ اﻻدارة Add & delete a user to the local Administrators group
• اﻟﺘﺤﻜﻢ ﻓﻲ ﻣﺮاﻗﺒﺔ اﻟﻌﻤﻠﻴﺎت ﻋﻠﻰ اﻟﺠﻬﺎز Managing Event viewer
• اﻟﺘﺤﻜﻢ ﺑﺎﻟﺨﺪﻣﺎت ﺑﺸﻜﻞ آﺎﻣﻞ Managing services
• اﻟﺘﺤﻜﻢ ﺑﺎﻟﻌﻤﻠﻴﺎت Process management
• ﺗﻌﺮﻳﻒ اﻟﺬاآﺮة اﻻﻓﺘﺮاﺿﻴﺔ Configure the paging file Virtual memory
اﻟﺪرس اﻟﺨﺎﻣﺲ
اﻟﺘﻌﺮﻳﻔﺎت اﻻﺳﺎﺳﻴﺔ اﻟﺨﺎﺻﺔ ﺑﺎﻟﺸﺒﻜﺎت ﻟﺠﻌﻞ اﻟﺴﻴﺮﻓﺮ 2008آﻮر ﻳﻌﻤﻞ ﻋﻠﻰ اﻟﺸﺒﻜﺔ
Configuring Windows Server 2008 Server Core Basic Networking Settings
و ﻳﺸﻤﻞ اﻻﻣﻮر اﻟﺘﺎﻟﻴﺔ:
• ﺗﻌﺮﻳﻒ اﻋﺪادات آﺮت اﻟﺸﺒﻜﺔ Set the server with a static IP address
• اﻟﺘﻌﺪﻳﻞ ﻋﻠﻰ اﺳﻢ اﻟﺴﻴﺮﻓﺮChange the name of the server
اﻟﺪرس اﻟﺴﺎدس
وﺷﻤﻞ ﻣﺎ ﻳﻠﻲ:
• اﻻﺗﺼﺎل ﺑﺎﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻋﻦ ﺑﻌﺪ Managing Windows 2008 Server Core through RDP
• اﻟﺘﺤﻜﻢ اﻟﻜﺎﻣﻞ ﺑﺎﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻣﻦ ﺧﻼل MMC Snap-insاﻟﻤﻮﺟﻮدة ﻓﻲ وﻳﻨﺪوز ﻓﻴﺴﺘﺎ ووﻳﻨﺪوز ٢٠٠٨
Remotely Managing Windows 2008 Server Core Settings through MMC Snap-ins
اﻟﺪرس اﻟﺴﺎﺑﻊ
:وﻳﺸﻤﻞ ﻣﺎ ﻳﻠﻲ
MMC Snap-ins آﻮر ﻋﻦ ﺑﻌﺪ ﻣﻦ ﺧﻼل2008 • اﻟﺘﺤﻜﻢ ﺑﺎﻟﺠﺪار اﻟﻨﺎري ﻟﻠﺴﻴﺮﻓﺮ
Remotely Managing Windows 2008 Server Core Firewall
و اﻟﺮد ﻋﻠﻴﻪPing • اﻟﺴﻤﺎح ﻟﻠﺠﻬﺎز ﻣﻦ اﺳﺘﻘﺒﺎل اﻣﺮ اﻟـ
Enable Ping Replies from your Windows 2008 Server Core Server
اﻟﺪرس اﻟﺜﺎﻣﻦ
آﻮر ﻟﻠﺸﺒﻜﺔ٢٠٠٨ اﻟﻌﻤﻞ ﻋﻠﻰ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﻳﻘﺪﻣﻬﺎ اﻟﺴﻴﺮﻓﺮ
Installing a server role on a server running Server Core installation
:و ﻳﺸﻤﻞ اﻻﻣﻮر اﻟﺘﺎﻟﻴﺔ
Install And configure the DHCP Server role • ﺗﻌﺮﻳﻒ ﺧﺪﻣﺔ ﻣﻨﺢ اﻟﻌﻨﺎوﻳﻦ اﻟﺘﻠﻘﺎﺋﻴﺔ ﻟﻼﺟﻬﺰة و ادارﺗﻬﺎ
Install and configure the DNS Server role ﻓﻲ اﻟﺪوﻣﻴﻦ او ﻣﺠﻤﻮﻋﺔ اﻟﻌﻤﻞDNS • ﺗﻌﺮﻳﻒ و ادارة اﻟـ
Install the Active Directory Domain Services role • ﺗﺮﻗﻴﺔ اﻟﺠﻬﺎز ﻟﻴﺼﺒﺢ دوﻣﻴﻦ آﻮﻧﺘﺮوﻟﺮ
اﻟﺪرس اﻟﺘﺎﺳﻊ
Active Directory اﻟﺪﻟﻴﻞ اﻟﻨﺸﻂ
:و ﻳﺸﻤﻞ اﻻﻣﻮر اﻟﺘﺎﻟﻴﺔ
Install the Active Directory Domain Services role • ﺗﺮﻗﻴﺔ اﻟﺠﻬﺎز ﻟﻴﺼﺒﺢ دوﻣﻴﻦ آﻮﻧﺘﺮوﻟﺮ
Remove the Active Directory Domain Services role • ﺣﺬف اﻟﺪﻟﻴﻞ اﻟﻨﺸﻂ ﻣﻦ اﻟﺠﻬﺎز
Mange the Active Directory • ادارة اﻟﺪﻟﻴﻞ اﻟﻨﺸﻂ
Understanding Windows Server 2008 Server Core
و ﺑﺴﺒﺐ هﺬﻩ اﻻﻣﻮر ﺟﻤﻴﻌﻬﺎ ﻓﻘﺪ ﻗﺎﻣﺖ ﻣﻴﻜﺮوﺳﻮﻓﺖ ﺑﺎﺻﺪار اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨ﺑﻨﺴﺨﺔ ﺗﻌﻤﻞ ﺑﺪون واﺟﻬﺔ ﻣﺴﺘﺨﺪم و اﻧﻤﺎ
ﺗﻌﻤﻞ ﺑﺎﺳﺘﻘﺒﺎل اﻻواﻣﺮ ﻣﻦ اﻟﻤﺴﺘﺨﺪم ﻣﻦ ﺧﻼل ﺷﺎﺷﺔ اﻷواﻣﺮ اﻟﺴﻮداء Command prompt
و هﺬا ادى اﻟﻰ ﻣﺎ ﻳﻠﻲ :
• وﻓﺮ ﻋﻠﻰ اﻟﻤﻌﺎﻟﺞ اﻟﻜﺜﻴﺮ ﻣﻦ اﻟﺠﻬﺪ و آﺬﻟﻚ ﻋﻠﻰ اﻟﺬاآﺮة و اﻟﻬﺎردﺳﻚ
• زاد ﻣﻦ ﺷﺮﻋﺔ اﻟﺘﺸﻐﻴﻞ و اﻻﻏﻼق ﻟﻠﻮﻳﻨﺪوز
• زاد ﻣﻦ ﺳﺮﻋﺔ اﻟﻘﻴﺎم ﺑﺎﻟﻌﻤﻠﻴﺎت
و هﺬﻩ آﻤﺎ ﻧﻌﺮف ﻟﻴﺴﺖ ﺟﻤﻴﻊ اﻟﺨﺪﻣﺎت و اﻋﺘﻘﺪ ان ﻣﻴﻜﺮوﺳﻮﻓﺖ ﻓﻌﻠﺖ هﺬا ﺣﺘﻰ ﻻ ﻳﺴﺘﻐﻨﻲ اﻟﻤﺴﺘﺨﺪم ﻋﻦ اﻻﺻﺪار اﻟﻌﺎدي ﻣﻦ
هﺬﻩ اﻟﻨﺴﺨﺔ ﻓﻤﺜﻼ ﻻ ﻳﻤﻜﻦ اﻧﺰال اﻟـ ISA serverاو Microsoft Exchange Serverاﻻ ﻋﻠﻰ اﻻﺻﺪار اﻟﻜﺎﻣﻞ .
ﺗﻘﻠﻴﻞ ﺟﻬﻮد اﻟﺼﻴﺎﻧﺔ ﻻﻧﻚ ﻟﻦ ﺗﻨﺰل ﻣﻦ اﻟﺨﺪﻣﺎت اﻻ ﻣﺎ ﺳﺘﺤﺘﺎﺟﻪ و هﺬا ﻣﺸﺎﺑﻪ ﻟﻠﻴﻮﻧﻴﻜﺲ و اﻟﻨﻮﻓﻞ و هﺬا ﺳﺒﺐ ﺛﺒﺎﺗﻬﺎ •
اﻟﻤﻤﻴﺰ و اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻳﺴﻌﻰ ﻟﻴﺠﻤﻊ آﻞ ﻣﺎ هﻮ ﻣﻤﻴﺰ
ﺗﻘﻠﻴﻞ اﺣﺘﻤﺎﻟﻴﺔ اﻻﺧﺘﺮاق ﻻ ن اﻟﻨﺴﺨﺔ ﻻ ﻻ ﺗﺘﻌﺎﻣﻞ اﻻ ﻣﻊ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﺗﻘﺪﻣﻬﺎ ﻓﺴﻴﻜﻮن ﻣﻦ اﻟﺼﻌﺐ اﺧﺘﺮاﻗﻬﺎ او ﻗﺪ •
ﻳﻜﻮن اﻻﻣﺮ ﻏﻴﺮ ﻣﺠﺪي
ﻳﻘﻠﻞ ﻣﺪة ادارة اﻟﺴﻴﺮﻓﺮ اذ ان ﺗﻄﺒﻴﻖ اﻻﻣﺮ ﺑﺸﻜﻞ ﻣﺒﺎﺷﺮ اﺳﺮع ﻣﻦ ﺗﻌﺮﻳﻔﻪ ﻣﻦ ﺧﻼل اﻟﻮاﺟﻬﺔ اﻻﻋﺘﻴﺎدﻳﺔ •
ﻳﻘﻠﻞ ﺣﺠﻢ اﻟﻤﺴﺎﺣﺔ اﻟﻤﺴﺘﺨﺪﻣﺔ ﻣﻦ اﻟﻬﺎردﺳﻚ •
و ﻟﻤﻌﺮﻓﺔ ﺳﻠﺒﻴﺎت اﻟﻨﻈﺎم ﻓﻬﻲ :
• ﻻ ﻳﻤﻜﻦ اﻟﺘﺮﻗﻴﺔ ﻣﻦ اي ﻧﺴﺨﺔ وﻳﻨﺪوز ﺳﺎﺑﻘﻪ اﻟﻰ وﻳﻨﺪوز 2008آﻮر ﻋﻜﺲ اﻟﻨﺴﺨﺔ اﻟﻜﺎﻣﻠﺔ
• ﻻ ﻳﻤﻜﻦ اﻟﺘﺮﻗﻴﺔ ﻣﻦ اﻟﻨﺴﺨﺔ اﻟﻜﻮر اﻟﻰ اﻟﻨﺴﺨﺔ اﻟﻜﺎﻣﻠﺔ و اﻧﻤﺎ ﻳﻠﺰم ﺗﻨﺰﻳﻞ ﻣﻦ اﻟﺒﺪاﻳﺔ
و اﻟﻔﺮق ﺑﻴﻦ اﻟﺜﻼت هﻮ ﻓﺮق ﻓﻲ ﺑﻌﺾ اﻟﺨﺪﻣﺎت اﻟﺒﺴﻴﻄﺔ ﻓﺎﻟـ Standard editionﺑﻪ آﺎﻣﻞ اﻟﺨﺪﻣﺎت و ﻟﻜﻦ ﻻ ﻳﺘﻌﺎﻣﻞ ﻣﻊ
اﻟﻜﻠﺴﺘﺮ ،ﺑﻴﻨﻤﺎ اﻟـ Enterprise editionﻳﺘﻌﺎﻣﻞ ﻣﻊ اﻟﻜﻠﺴﺘﺮ و ﻳﺤﻮي ﺟﻤﻴﻊ اﻟﺨﺪﻣﺎت اﻟﻤﻮﺟﻮدة ﻓﻲ اﻟـ Standard edition
و اﻻﺧﻴﺮ ﻳﺘﻤﻴﺰ ﺑﺎﻟﻘﻮة و اﻟﺜﺒﺎت و ﻳﺤﺘﻮي ﻋﻠﻰ ﺟﻤﻴﻊ اﻟﺨﺪﻣﺎت اﻳﻀﺎ.
وﺑﺸﻜﻞ ﻋﺎم اﻟﻔﺌﺔ اﻟﻤﺴﺘﻔﻴﺪة ﻣﻦ هﺬا اﻟﻨﻈﺎم هﻲ اﻟﻔﺌﺔ اﻟﺘﻲ ﺗﺮﻳﺪ ان ﻳﻜﻮن ﻟﺪﻳﻬﺎ ﺧﺪﻣﺎت ﺷﺒﻜﺎت ﺗﻌﻤﻞ ﺑﺜﺒﺎت اآﺜﺮ و ﺑﺴﺮﻋﺔ اﻋﻠﻰ و
ﺑﺠﻮدة اﻋﻠﻰ و ﺑﻘﻠﺔ اﺣﺘﻤﺎﻟﻴﺎت اﻟﻔﺸﻞ ﺑﺴﺒﺐ اي ﻓﻴﺮوس او . spy ware
ﻣﻼﺣﻈﺔ :ﻋﻨﺪﻣﺎ ﻧﻘﻮل أن Windows Server 2008 Server Coreﻻ ﻳﺴﺘﻬﻠﻚ اﻟﻜﺜﻴﺮ اﻟﻤﺼﺎدر اي اﻧﻪ ﻻ ﻳﻬﻠﻚ اﻟﻤﻌﺎﻟﺞ و
اﻟﺬاآﺮة ﻓﻲ اﻟﻌﻤﻞ ﻟﻤﻌﺎﻟﺠﺔ و اﺣﺘﻀﺎن اﻟﺬاآﺮة ﻟﻪ و هﺬا ﻣﺎ ﺳﻨﻼﺣﻈﻪ ﻣﺴﺘﻘﺒﻼ اﻣﺎ ﺑﺎﻟﻨﺴﺒﻪ ﻟﻼﻣﻜﺎﻧﻴﺎت اﻟﺒﺪاﺋﻴﺔ ﻓﻬﻲ ﻟﻜﻮن هﺬا
اﻟﻮﻳﻨﺪوز ﻳﺤﺘﺎﺟﻬﺎ و هﺬا ﺷﻲء ﺣﺪدﺗﻪ اﻟﺸﺮآﺔ اﻟﻤﻨﺘﺠﺔ ﻟﻌﻠﻤﻬﺎ اآﺜﺮ ﺑﺎﻟﻨﻈﺎم و ﺣﺎﺟﺎﺗﻪ.
اﻣﺎ ﺑﺎﻟﻨﺴﺒﺔ ﻟﻼﺻﺪار اﻟﻜﺎﻣﻞ ﻓﻼ ﻏﻨﻰ ﻋﻨﻪ اﺑﺪا ﻻﻧﻚ ﺳﺘﺤﺘﺎﺟﻪ ﻣﻦ اﺟﻞ ﻧﻈﺎم اﻻﻳﻤﻴﻞ و اﻻﻳﺰا و ﻏﻴﺮهﺎ و ﻟﻜﻦ ﺣﺪﻳﺜﻨﺎ ﻋﻦ اﻟﻜﻮر
هﻮ آﺘﻨﻠﻮﺟﻴﺎ ﺟﺪﻳﺪة اﺻﺪرﺗﻬﺎ ﻣﻴﻜﺮوﺳﻮﻓﺖ ﻓﺎﻻﺻﻞ ﻣﻌﺮﻓﺔ هﺬا اﻟﻨﻈﺎم و ﻣﻌﺮﻓﺔ اﻣﻜﺎﻧﻴﺎﺗﻪ ﻻن اﻟﻨﻈﺎم اﻟﻜﺎﻣﻞ ﺑﺎﻟﻮاﺟﻬﺔ ﺳﻴﻜﻮن ﻣﻦ
اﻟﺴﻬﻞ ﻋﻠﻰ اي ﻣﺪﻳﺮ ﺷﺒﻜﺔ ﻓﻬﻤﻪ ﻻﻧﻪ ﻣﺮﺗﺒﻂ ﺷﻜﻼ ﺑﻤﺎ ﻗﺒﻠﻬﺰ
Installing windows server 2008 core
ﺗﻨﺼﻴﺐ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر
ﻳﻌﺘﺒﺮ اﻟﻮﻳﻨﺪوز ٢٠٠٨و اﻟﻔﻴﺴﺘﺎ ﻣﺘﺸﺎﺑﻬﺎن ﻣﻦ ﺣﻴﺚ ﻃﺮﻳﻘﺔ اﻻﻋﺪاد ) (Installationو ﻓﻲ هﺬا اﻟﺪرس اﻟﺜﺎﻧﻲ ﻣﻦ ﺳﻠﺴﺔ اﻟﺪروس
ﺳﻨﺘﻌﺮف ﻋﻠﻰ آﻴﻔﻴﺔ اﻧﺰال اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر و ﺳﻨﺘﻌﺮف ﻋﻠﻰ اﻟﻤﺘﻄﻠﺒﺎت و اﻣﻜﺎﻧﻴﺎت اﻟﺘﺮﻗﻴﺔ ﻣﻦ ﻧﺴﺦ ﺳﺎﺑﻘﺔ
و ﻗﺒﻞ اﻟﺒﺪاﻳﺔ ﻳﻮﺟﺪ ﻧﺴﺨﺔ ﻣﻦ ﻣﻴﻜﺮوﺳﻮﻓﺖ ﺗﺠﺮﻳﺒﻴﺔ ﻟﻬﺬا اﻟﻤﻨﺘﺞ و ﻳﻤﻜﻦ ﺗﻨﺰﻳﻠﻬﺎ ﻣﻦ اﻟﺮاﺑﻂ اﻟﺘﺎﻟﻲ
آﻮد:
http://www.microsoft.com/windowsserver2008/en/us/trial-software.aspx
ﻧﺒﺪأ ان ﺷﺎء اﷲ ﺑﺎﻟﻤﺘﻄﻠﺒﺎت و اﻻﻣﻜﺎﻧﻴﺎت اﻟﺘﻲ ﻳﻘﺪﻣﻬﺎ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻣﻦ ﺣﻴﺚ اﺳﺘﻴﻌﺎب اﻟﻌﺘﺎد
ﻓﺒﻌﺪ ﺗﻮﻓﺮ اﻗﻞ اﻻﻣﻜﺎﻧﻴﺎت ﻳﻤﻜﻦ اﻟﺒﺪاﻳﺔ ﻓﻲ ﻋﻤﻠﻴﺔ اﻟﺘﻨﺰﻳﻞ واﻟﺘﻨﺼﻴﺐ ﻟﻬﺬا اﻟﻨﻈﺎم
و ﻳﺠﺐ ان ﻧﻔﺮق اﻧﻨﺎ ﻧﺘﺤﺪث ﻋﻦ ﻧﺴﺨﺔ windows server 23008 coreو ﻟﻴﺴﺖ اﻟﻨﺴﺨﺔ اﻟﻜﺎﻣﻠﺔ
و ﻓﻲ ﺣﺎل آﺎن ﻟﺪﻳﻨﺎ هﺎردﺳﻚ ﻣﺸﺒﻮك ﻣﻦ ﺧﻼل SCSI Controllerﻓﺒﺎﻟﻀﻐﻂ ﻋﻠﻰ Load Driverﺳﺘﺘﻤﻜﻦ ﻣﻦ اﺳﺘﻌﺮاض
اﻟﻬﺎردﺳﻚ او اﻟﻔﻠﻮﺑﻲ او اي ﻣﺼﺪر اﺧﺮ ﻳﺤﺘﻮي ﻋﻠﻰ ﻧﺴﺨﺔ ﻣﻦ اﻟﺪراﻳﻔﺮ اﻟﺨﺎص ﺑﺎﻟـ SCSI Controller
ﻣﻼﺣﻈﺔ :اﺛﻨﺎء اﻟﺘﻨﺼﻴﺐ ﻓﺎن ﻧﻮع اﻟﻤﻠﻔﺎت ﺗﺨﺘﺎر وﺑﺸﻜﻞ اﺗﻮﻣﺎﺗﻴﻜﻲ ﺣﺼﺮا ﻣﻦ اﻟﻨﻮع NTFS
New user ﻧﻀﻐﻂ ﻋﻠﻰ
Configure Time and Date Settings in Windows 2008 Server Core
ﺗﻌﺮﻳﻒ اﻟﻮﻗﺖ و اﻟﺘﺎرﻳﺦ ﻋﻠﻰ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر
هﻨﺎك اﻣﻮر اﺧﺮى ﻻ ﺑﺪ ﻓﻴﻬﺎ ﻣﻦ ﺿﺒﻂ اﻟﻮﻗﺖ و اﻟﺘﺎرﻳﺦ و ﻳﺠﺐ اﻟﺘﻨﻮﻳﻪ هﻨﺎ اﻟﻰ اﻣﺮ هﺎم و هﻮ ان آﻞ اﺟﻬﺰة اﻟﺸﺒﻜﺔ او اي ﺟﻬﺎز
ﻣﻌﺮف ﻋﻠﻴﻪ آﺘﻌﺮﻳﻒ اﻓﺘﺮاﺿﻲ ان ﻳﻌﻤﻞ ﺗﻨﺎﻏﻢ ﻟﻠﺴﺎﻋﺔ ﺣﺴﺐ اﻟﺴﻴﺮﻓﺮ اﻟﺨﺎص ﺑﺎﻟﻮﻗﺖ اﻟﻤﻮﺟﻮد ﻟﺪى ﻣﻴﻜﺮوﺳﻮﻓﺖ و ﻟﻜﻦ هﺬا
اﻻﻣﺮ ﻳﺤﺘﺎج اﻟﻰ اﺗﺼﺎل ﺑﺎﻻﻧﺘﺮﻧﺖ و ﻓﻲ ﺣﺎل ﻟﻢ ﻳﻜﻦ ﻟﺪﻳﻨﺎ اﻧﺘﺮﻧﺖ ﻓﻴﺠﺐ اﻟﺘﻌﺪﻳﻞ ﺑﺸﻜﻞ ﻳﺪوي و هﺬا ﻣﺎ ﺳﻨﺸﺮﺣﻪ ﻻﺣﻘﺎ .
و ﺑﻤﺎ اﻧﻨﺎ ﻧﺘﺤﺪث ﻋﻦ Windows server 2008 coreﻓﻴﺠﺐ ان ﻧﺘﻌﻠﻢ آﻴﻒ ﻧﻀﺒﻂ اﻟﻮﻗﺖ ﺣﺘﻰ ﻻ ﺗﻮاﺟﻬﻨﺎ ﻣﺸﺎآﻞ ﻓﻲ
اﻻﺗﺼﺎل ﺑﻴﻦ اﻻﺟﻬﺰة
آﻤﺎ ﻋﻠﻤﻨﺎ ﻓﻲ دروس ﺳﺎﺑﻘﺔ ان اﻟﻮﻳﻨﺪوز آﻮر هﻮ ﻓﻘﻂ اواﻣﺮ ﻓﻴﺠﺐ ان ﻧﻌﺮف اﻻواﻣﺮ اﻟﺘﻰ ﻳﺠﺐ ﺗﻄﺒﻴﻘﻬﺎ ﻟﻀﺒﻂ اﻟﻮﻗﺖ
و ﺳﻨﺒﺪأ ﻓﻲ اﻟﻬﺪف اﻻول و هﻮ ﺗﻌﺪﻳﻞ و ﺿﺒﻂ اﻟﻮﻗﺖ ﻓﻲ ﺑﻴﺌﺔ Workgroup
آﻮد:
Control timedate.cpl
ﻓﻬﺬا اﻻﻣﺮ ﻳﻈﻬﺮ ﻟﻨﺎ اﻟﺴﺎﻋﺔ و هﻲ ﺗﻤﺎﻣﺎ آﻤﺎ ﻓﻲ اﻟﻮﻳﻨﺪوز اﻟﻜﺎﻣﻞ اي ﺳﻨﺮى واﺟﻬﺔ ﻋﺎدﻳﺔ ﻟﻠﺴﺎﻋﺔ
و هﻲ ﻣﻦ اﻻﻣﻮر اﻟﻘﻠﻴﻠﺔ ﻓﻲ Windows 2008 Server Coreاﻟﺘﻰ ﺳﻨﺮاهﺎ ﺑﻮاﺟﻬﺔ ﻣﺴﺘﺨﺪم ﻓﺒﻌﺪ آﺘﺎﺑﺔ اﻻﻣﺮ و ﺿﻐﻂ اﻧﺘﺮ
ﺳﺘﻈﻬﺮ ﻟﻨﺎ آﻤﺎ ﻓﻲ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ:
و ﻟﻠﺘﻌﺪﻳﻞ ﻓﻲ اﻋﺪادات اﻟﻮﻗﺖ اﺿﻐﻂ Change Date and Time
و ﻟﺘﻌﺪﻳﻞ time zoneﻧﻀﻐﻂ ﻋﻠﻰ آﺒﺴﺔ Change Time Zone
آﻮد:
w32tm /config /update /syncfromflags:DOMHIER
ﻣﻼﺣﻈﺔ هﺎﻣﺔ :ﻓﻲ آﺘﺎﺑﺔ اﻻﻣﺮ ﺑﺎن هﻨﺎك ﻣﺴﺎﻓﺔ ﻗﺒﻞ آﻞ /
ﻓﻲ اﻻﻣﺮ اﻟﺴﺎﺑﻖ ﻓﺎﻧﻚ ﻗﻠﺖ ﻟﻠـ Windows 2008 Server Coreان ﻳﻘﻮم ﺑﺘﺤﺪﻳﺚ اﻟﻮﻗﺖ ﻟﺪﻳﻪ ﻣﻦ اﻟﺠﻬﺎز اﻻول
ﻓﻲ اﻟـ Treeو هﻮ اﻟـ PDC Emulatorو هﻮ DOMHIERاي اﻋﻠﻰ ﺟﻬﺎز ﻓﻲ هﺮم اﻟـ Treeاو اﻟﺪوﻣﻴﻦ
و ﻟﻠﺘﻮﺿﻴﺢ اآﺜﺮ اﻧﻈﺮ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ:
و ﺑﻌﺪ ﺗﻌﻠﻴﻢ اﻟﻮﻳﻨﺪوز ان ﻳﺄﺧﺬ اﻋﺪادات اﻟﻮﻗﺖ ﻣﻦ اﻋﻠﻰ هﺮم اﻟـ treeو ﺣﻰ ﻻ ﻧﻨﺘﻈﺮ اﻟﻰ ان ﺗﺤﺪث ﻋﻤﻠﻴﺔ اﻟﺘﻨﺎﻏﻢ ﻧﻜﺘﺐ اﻻﻣﺮ
اﻟﺘﺎﻟﻲ ﻻﺟﺒﺎر اﻟﻮﻳﻨﺪوز ﻋﻠﻰ اﻟﺘﺤﺪﻳﺚ
آﻮد:
w32tm.exe /resync /nowait
Managing Windows 2008 Server Core Local Settings
ﺗﻌﺮﻳﻒ اﻻﻋﺪادات اﻟﻌﺎﻣﺔ ﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر
آﻮد:
>pnputil -i -a <driverinf
ﻣﺜﻼ
آﻮد:
pnputil -i -a VGA.inf
ﻓﺴﻴﻘﻮم اﻟﻮﻳﻨﺪوز ﺑﻘﺮاﺋﺔ اﻟﻤﻠﻒ و ﻣﻌﺮﻓﺔ ﻣﻌﻠﻮﻣﺎت اﻟﻜﺮت اﻟﺬي اﺿﻴﻒ و ﻧﺴﺨﻬﺎ اﻟﻰ اﻟﻨﻈﺎم و ﺗﻌﺮﻳﻒ اﻟﺠﻬﺎز
آﻮد:
net user <user name> <password> /add
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
net user ibrahim 123 /add
آﻮد:
net user <user name> /delete
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
net user ibrahim /delete
ﺑﻬﺬا اﻻﻣﺮ ﻧﻜﻮن ﻗﺪ آﻮﻧﺎ ﻣﺴﺘﺨﺪم ﻣﺤﻠﻲ ﻟﻠﻌﻤﻞ ﻋﻠﻰ اﻟﺴﻴﺮﻓﺮ ﻓﻲ ﺑﻴﺌﺔ اﻟـ Workgroupاﻣﺎ اذا آﺎن ﻟﺪﻳﻨﺎ Domainﻓﺎﻻﻣﺮ
ﻣﺨﺘﻠﻒ ﻻن اﻟﻤﺴﺘﺨﺪﻣﻴﻦ ﻳﻀﺎﻓﻮا اﻟﻰ . Active Directory
و ﻟﻜﻦ ﻗﺪ ﻳﻠﺰﻣﻨﺎ ان ﻧﻀﻴﻒ ﺣﺴﺎب اﻟﻤﺴﺘﺨﺪم ﻓﻲ اﻟﺪوﻣﻴﻦ اﻟﻰ Local administratorsﻟﻠﺠﻬﺎز اﻟﻌﻀﻮ ﻓﻲ اﻟﺪوﻣﻴﻦ ﻟﻴﻜﻮن ﻟﺪﻳﻪ
اﻟﻘﺪرة ﻋﻠﻰ اﻟﺘﺤﻜﻢ ﺑﺎﻟﺠﻬﺎز ﻣﻦ ﺻﻼﺣﻴﺎت و ﻏﻴﺮ ذﻟﻚ و هﺬا اﻻﻣﺮ ﻓﻲ ﺣﺎل ﻟﻢ ﻧﺮد ان ﻧﺤﺪد ﻟﻠﻤﺴﺘﺨﺪم ﺻﻼﺣﻴﺎت و ﻟﻌﻤﻞ ذﻟﻚ
ﻧﺴﺘﻌﻤﻞ اﻻﻣﺮ اﻟﺘﺎﻟﻲ :
آﻮد:
>net localgroup Administrators /add <domain>\<username
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
net localgroup Administrators /add ibrahim.com \ barhomonly
ﻣﺜﺎل اﻟﺘﻮﺿﻴﺤﻲ
آﻮد:
net localgroup Administrators /delete ibrahim.com \ barhomonly
اﻟﺘﺤﻜﻢ ﻓﻲ ﻣﺮاﻗﺒﺔ اﻟﻌﻤﻠﻴﺎت ﻋﻠﻰ اﻟﺠﻬﺎز Managing Event viewer
و اﻟﻜﻞ ﻳﻌﺮف اﻟـ Event viewerو اهﻤﻴﺘﻪ ﻓﻲ ﻣﺮاﻗﺒﺔ ﺣﺎﻟﺔ اﻟﺠﻬﺎز و اﻻﺧﻄﺎء و اﻻﻣﻮر اﻟﺘﻲ ﺗﺤﺼﻞ ﻟﻠﺨﺪﻣﺎت و اﻟﺒﺮاﻣﺞ و
اﻟﺤﻤﺎﻳﺔ و ﻓﻲ اﻟﻮﻳﻨﺪوز ٢٠٠٨آﻮر ﺳﻴﻜﻮن اﻟﺘﺤﻜﻢ آﻠﻪ ﻣﻦ ﺧﻼل اﻻواﻣﺮ و ﺳﻴﻜﻮن اﻟﺪرس ﺣﻮل اهﻢ اﻻواﻣﺮ
اﻻﻣﺮ اﻻول و اﻟﺨﺎص ﺑﻌﺮض اﺳﻤﺎء ﻣﻠﻔﺎت اﻟﻤﺮاﻗﺒﺔ اﻟﺨﺎﺻﺔ ﺑـ System & security & applications
اﻻﻣﺮ هﻮ
آﻮد:
wevtutil el
و ﻟﻌﺮض ﻣﺤﺘﻮى ﻣﻠﻒ ﻣﻌﻴﻦ ﺑﺼﻴﻐﺔ ﻣﻠﻒ ﻧﺼﻲ ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
>wevtutil qe /f:text <log name
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
wevtutil qe /f:text system
اﻻن اذا اردﻧﺎ ﺗﺼﺪﻳﺮ ﻣﻠﻒ ﻣﻦ ﻣﻠﻔﺎت ﻣﺮاﻗﺒﺔ اﻻﺣﺪاث systemﻣﺜﻼ اﻟﻰ ﻣﻜﺎن ﻣﻌﻴﻦ ﻓﺎﻻﻣﺮ آﺎﻟﺘﺎﻟﻲ
آﻮد:
>wevtutil epl System <bath
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
wevtutil epl System C:\backup\system0506.evtx
اﻣﺎ اذا اردﻧﺎ ﺣﺬف اﻻﺣﺪاث و ﺗﺨﺰﻳﻨﻬﺎ ﻓﻲ ﻣﻜﺎن ﻣﻌﻴﻦ ﻟﻤﻠﻒ ﻣﻌﻴﻦ ﻓﺎﻻﻣﺮ آﺎﻟﺘﺎﻟﻲ
آﻮد:
>wevtutil cl Application /bu:<bath
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
wevtutil cl Application /bu:C:\admin\backups\a10306.evtx
اﻟﺘﺤﻜﻢ ﺑﺎﻟﺨﺪﻣﺎت ﺑﺸﻜﻞ آﺎﻣﻞ Managing services
اوﻻ ﻻ ﺑﺪ ﻣﻦ ﻣﻌﺮﻓﺔ ﻣﺎ هﻲ اﻟـ Servicesو ﻣﺎ ﻣﻔﻬﻮﻣﻬﺎ ﻓﻲ اﻟﻮﻳﻨﺪوز ﺑﻜﻞ اﺧﺘﺼﺎر هﻲ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﻳﻘﺪﻣﻬﺎ اﻟﻮﻳﻨﺪوز ﻓﻤﺜﻼ
ﺧﺪﻣﺔ اﻟﻄﺒﺎﻋﺔ ،اﻟـ ..... DHCP , DNS
و ﻟﻌﺮض اﻟﺨﺪﻣﺎت اﻟﻤﻮﺟﻮدة ﻓﻲ اﻟﻮﻳﻨﺪوز ﻧﻜﺘﺐ اي ﻣﻦ اﻻﻣﺮﻳﻦ اﻟﺘﺎﻟﻴﻴﻦ
آﻮد:
sc query
او
آﻮد:
net start
آﻮد:
>sc start <service name
او
آﻮد:
>net start <service name
آﻮد:
>sc stop <service name
او
آﻮد:
>net stop <service name
اﻟﺘﺤﻜﻢ ﺑﺎﻟﻌﻤﻠﻴﺎت Process management
ﺳﻨﺘﺤﺪث ﻋﻦ ادارة اﻟﻌﻤﻠﻴﺎت processو ﻟﻠﺘﻘﺮﻳﺐ ﻳﻤﻜﻦ ﻣﺸﺎهﺪﺗﻬﺎ ﻓﻲ Task manager
و اﻻﻣﺮ اﻟﺬي ﺳﻨﺴﺘﺨﺪﻣﻪ ﻟﻌﺮض آﺎﻣﻞ اﻟﻌﻤﻠﻴﺎت اﻟﺸﻐﺎﻟﻪ ﻧﻜﺘﺐ
آﻮد:
tasklist
آﻮد:
>taskkill /PID <process ID
آﻮد:
wmic pagefileset where name=”<path/filename>” set
>InitialSize=<initialsize>,MaximumSize=<maxsize
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
wmic pagefileset where name="C:\\pagefile.sys" set InitialSize=2048,MaximumSize=2060
ﺗﻌﺮﻳﻒ اﻋﺪادات آﺮت اﻟﺸﺒﻜﺔ Set the server with a static IP address
ﻓﺴﻨﺘﻌﻠﻢ ﻣﻦ ﺧﻼل هﺬﻩ اﻟﻨﻘﻄﺔ آﻴﻒ ﻧﻌﺮف IPو DNSو ﻏﻴﺮهﺎ
ﻟﻤﻌﺮﻓﺔ ﺑﻄﺎﻗﺎت اﻟﺸﺒﻜﺔ اﻟﻤﻮﺟﻮدة ﻋﻠﻰ اﻟﺠﻬﺎز ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh interface ipv4 show interfaces
ﺳﻴﻔﻴﺪﻧﺎ آﺜﻴﺮا هﺬا اﻻﻣﺮ ﻓﻤﻦ ﺧﻼﻟﻪ ﺳﻨﻌﺮف Idxاﻟﺨﺎص ﺑﻜﻞ آﺮت و هﻮ اﻟﺬي ﺳﻴﻔﻴﺪﻧﺎ ﻓﻲ ﺗﻌﺮﻳﻒ آﻞ آﺮت ﺑﺎﻻﻣﺮ ﻓﺴﻨﺮى اﻧﻪ
ﻋﻨﺪﻣﺎ ﻧﺄﺗﻲ ﻋﻠﻰ ﺗﻌﺮﻳﻒ اﻟـ IPﻋﻠﻰ آﺮت ﻣﻌﻴﻦ ﺳﻴﻜﻮن اﻟـ Idxﻣﻦ ﺿﻤﻦ اﻻﻣﺮ
ﺷﺎهﺪ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ:
و ﻧﺄﺗﻲ اﻟﻰ اﻟﻨﻘﻄﺔ اﻟﺘﺎﻟﻴﺔ و هﻲ ﺗﻌﺮﻳﻒ اﻻي ﺑﻲ ﻋﻠﻰ اﻟﻜﺮت ﺑﻬﺬا اﻻﻣﺮ
آﻮد:
>netsh interface ipv4 set address name="<ID>" source=static address=<StaticIP
>mask=<SubnetMask> gateway=<DefaultGateway
ﻓﻲ هﺬا اﻻﻣﺮ ﻗﻤﻨﺎ ﺑﺘﻌﺮﻳﻒ اﻟﻜﺮت اﻟﺬي ﻳﺤﻤﻞ IDXﻣﻌﻴﻦ ﺑـ IPو Default Gatewayو ﻟﻨﻌﻄﻲ ﻣﺜﺎﻻ راﻗﺐ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ
ﻟﻤﻌﺮﻓﺔ اﻻﻋﺪادات اﻟﺠﺪﻳﺪة هﻞ ﻃﺒﻘﺖ ام ﻻ و هﺬا اﻻﻣﺮ ﻣﻌﻬﻮد ﻟﻤﻦ ﻳﺴﺘﺨﺪﻣﻮن اﻟﻮﻳﻨﺪوز ﻓﻲ آﻞ اﺻﺪاراﺗﻪ
و ﻟﻜﻦ ﻗﺪ ﻳﺴﺄل ﺳﺎﺋﻞ آﻴﻒ ﺳﺄﻋﺮف اﻟﻜﺮت ﻟﻠﺤﺼﻮل ﻋﻠﻰ اﻟـ IPﻣﻦ ﺧﻼل DHCPاﻻﻣﺮ ﺳﻬﻞ ﻣﻦ ﺧﻼل ﺗﻄﺒﻴﻖ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh interface ipv4 set address name=<idx> source=dhcp
و ﻟﻨﺄﺗﻲ اﻟﻰ اﻻﻋﺪادات اﻻﺧﺮى و ﻟﻨﺒﺪأ ﺑﺎﻟـ DNSﻓﻠﺘﻌﺮﻳﻒ اﻟـ DNSﺑﺸﻜﻞ ﻳﺪوي ﻧﻄﺒﻖ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh interface ipv4 set dnsserver name=<idx> source=static addr=<DNS server> index= 1
اﻟﻘﻴﻤﺔ اﻟﺘﻲ ﺑﻌﺪ اﻟـ indexهﻲ ﺗﺮﺗﻴﺐ اﻟـ DNSﻓﺎﻟﻘﻴﻤﺔ ١ﻳﻌﻨﻲ اﻧﻪ اﻻول و ﻓﻲ ﺣﺎل آﺎن ﻟﺪﻳﻨﺎ DNSﺛﺎﻧﻲ ﻧﻜﺘﺐ Index=2
و ﻟﺘﻌﺮﻳﻒ اﻋﺪادات اﻟـ DNSﻣﻦ ﺧﻼل اﻟـ DHCPﻧﻄﺒﻖ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh interface ipv4 set dnsserver name=<idx> source=dhcp
وﺷﻤﻞ ﻣﺎ ﻳﻠﻲ:
• اﻻﺗﺼﺎل ﺑﺎﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻋﻦ ﺑﻌﺪ Managing Windows 2008 Server Core through RDP
• اﻟﺘﺤﻜﻢ اﻟﻜﺎﻣﻞ ﺑﺎﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻣﻦ ﺧﻼل MMC Snap-insاﻟﻤﻮﺟﻮدة ﻓﻲ وﻳﻨﺪوز ﻓﻴﺴﺘﺎ ووﻳﻨﺪوز ٢٠٠٨
Remotely Managing Windows 2008 Server Core Settings through MMC Snap-ins
ﻃﺒﻌﺎ اﻟﺤﺪﻳﺚ هﻨﺎ ﻋﻦ ادارة اﻟﺴﻴﺮﻓﺮ ﻋﻦ ﺑﻌﺪ ﻓﻲ ﺣﺎل آﻨﺎ ﺑﻌﻴﺪﻳﻦ ﻋﻨﻪ ﻣﻦ ﺧﻼل RDPو MMC Snap-ins
اﻻﺗﺼﺎل ﺑﺎﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻋﻦ ﺑﻌﺪ Managing Windows 2008 Server Core through RDP
ٌ Remote Desktop Protocolهﻮ ﺑﺮوﺗﻮآﻮل ﻣﻌﺮوف ﻟﺘﻤﻜﻴﻦ ﻣﺴﺘﺨﺪﻣﻲ اﻟﻮﻳﻨﺪوز ﻣﻦ ادارة اﺟﻬﺰﺗﻬﻢ ﻋﻦ ﺑﻌﺪ و ﺳﺒﺐ
وﺟﻮدﻩ ﻓﻲ اﻟﺴﻴﺮﻓﺮ اﻟـ ٢٠٠٨آﻮر هﻮ ﻟﺘﺴﻬﻴﻞ اﻻدارة ﻋﻠﻰ ﻣﺪراء اﻟﺸﺒﻜﺎت ﻋﻦ ﺑﻌﺪ و ﻟﻠﻌﻠﻢ ﻳﺠﺐ ان ﻧﻌﺮف ان اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ
٢٠٠٨ﻳﺤﺘﻮي ﻋﻠﻰ Firewallﻳﺴﺘﺨﺪم ﻟﻔﻠﺘﺮة آﻞ اﻧﻮاع اﻟـ Trafficو ﻣﻨﻬﺎ اﻟـ RDPﻟﺬﻟﻚ ﻻ ﺑﺪ ﻣﻦ اﻟﺴﻤﺎح ﻟﻠﺒﺮوﺗﻮآﻮل ﻓﻲ
اﻟﺠﺪار اﻟﻨﺎري ان ﻳﻤﺮ ﻣﻦ ﺧﻼﻟﻪ.
و ﻃﺒﻌﺎ اﻻﻣﻮر اﻟﺜﻼث اﻻوﻟﻰ ﺗﻌﻠﻤﻨﺎهﺎ ﻓﻲ اﻟﺪروس اﻟﺴﺎﺑﻘﺔ و ﻧﺄﺗﻲ اﻟﻰ اﻻﻣﺮ اﻟﺮاﺑﻊ و اﻟﺬي ﺳﻨﺸﺮﺣﻪ اﻟﻴﻮم
ﺑﺪاﻳﺔ ﻻ ﺑﺪ ﻣﻦ ﺗﺸﻐﻴﻞ اﻟﺨﺪﻣﺔ ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
cscript C:\Windows\System32\Scregedit.wsf /ar 0
ﻟﻠﻤﻼﺣﻈﺔ اﻟﻘﻴﻤﺔ ٠هﻲ ﺗﻌﻨﻲ ان اﻟﻘﺎﻋﺪة اﻟﺘﻲ ﺗﻤﻨﻊ اﺻﺒﺤﺖ ﻗﻴﻤﺘﻬﺎ ﺻﻔﺮ اي ﻏﻴﺮ ﻓﻌﺎﻟﺔ و ﻟﻠﺘﺄآﺪ و ﻣﺸﺎهﺪة اﻟﺘﻐﻴﺮات ﺑﻌﺪ ﺗﻨﻔﻴﺬ
اﻻﻣﺮ ﻧﻄﺒﻖ اﻻﻣﺮ اﻟﺘﺎﻟﻲ :
آﻮد:
cscript C:\Windows\System32\Scregedit.wsf /ar /v
ﺷﺎهﺪ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ :
ﻓﺎذا وﺟﺪﻧﺎ اﻟﻘﻴﻤﺔ ﺗﺴﺎوي ﺻﻔﺮ ﻓﻴﻌﻨﻲ ان اﻻﻣﺮ ﻗﺪ ﺗﻢ و اﺻﺒﺢ ﺑﺈﻣﻜﺎﻧﻨﺎ اﻟﻌﻤﻞ ﻋﻦ ﺑﻌﺪ و ﻟﻜﻦ ﺑﻘﻲ ﻋﻠﻴﻨﺎ اﻟﺴﻤﺎح ﻟﻼﺗﺼﺎل ﻣﻦ
ﺧﻼل اﻟﻔﻴﺮوول و ﻳﺼﺒﺢ ﺑﻌﺪهﺎ ﺑﺎﻣﻜﺎﻧﻨﺎ ان ﻧﺘﺤﻜﻢ ﺑﺎﻟﺠﻬﺎز ﻋﻦ ﺑﻌﺪ ﻣﻦ ﺧﻼل RDPو ﻟﻜﻦ هﻨﺎك اﻣﺮ هﺎم و هﻮ ان اﻟﻮﻳﻨﺪوز
ﺳﻴﺮﻓﺮ ٢٠٠٨ﻳﺘﻌﺎﻣﻞ ﻣﻊ اﻟﻮﻳﻨﺪوز ﻓﻴﺴﺘﺎ ﺑﺸﻜﻞ ﻣﺨﺘﻠﻒ ﻋﻦ اﻟﻮﻳﻨﺪوز XPاو ٢٠٠٣ﻓﺎن اردت ان ﺗﺴﻤﺢ ﻟﻠﻮﻳﻨﺪوز ﻏﻴﺮ اﻟﻔﻴﺴﺘﺎ
ﻣﻦ اﻻﺗﺼﺎل ﻋﻦ ﺑﻌﺪ ﻓﻴﺠﺐ اﻟﻐﺎء ﻣﺴﺘﻮى اﻟﺤﻤﺎﻳﺔ اﻟﻘﺼﻮى اﻟﻤﻌﺮف ﻓﻲ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨ﺗﻠﻘﺎﺋﻴﺎ و ﻟﻠﻘﻴﺎم ﺑﺬﻟﻚ ﻧﻄﺒﻖ
اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
cscript C:\Windows\System32\Scregedit.wsf /cs 0
هﺬا ﻃﺒﻌﺎ ﻓﻲ ﺣﺎل آﻨﺎ ﻧﺴﺘﺨﺪم وﻳﻨﺪوز ﻣﺎ ﻗﺒﻞ اﻟﻔﻴﺴﺘﺎ ﻻﻧﻪ ﻳﺘﻌﺎﻣﻞ ﻣﻊ اﻟﻔﻴﺴﺘﺎ ﺑﻄﺮﻳﻘﺔ ﺧﺎﺻﺔ ﻻﻧﻬﻤﺎ ﺻﻤﻤﺎ ﺳﻴﺮﻓﺮ و آﻠﻴﻨﺖ
و اﻻن ﻟﻨﺄﺗﻲ اﻟﻰ ﺗﻌﺮﻳﻒ ﻗﺎﻋﺪة ﺧﺎﺻﺔ ﻓﻲ اﻟﻮﻳﻨﺪوز ﻓﻴﺮوول ﻟﻠﺴﻤﺎح ﺑﺎﻻﺗﺼﺎل
آﻮد:
netsh advfirewall firewall set rule group="Remote Desktop" new enable=yes
ﺷﺎهﺪ اﻟﺼﻮرة اﻟﺘﺎﻟﻴﺔ
آﻮد:
netsh advfirewall firewall set rule group="Remote Administration" new enable=yes
ﺑﻬﺬا ﻧﻜﻮن ﻗﺪ ﺳﻤﺤﻨﺎ ﻟﻼﺗﺼﺎﻻت ﻣﻦ ﺧﻼل MMCو اﻻن اﻧﺘﻬﻴﻨﺎ ﻣﻦ اﻟﺴﻴﺮﻓﺮ ﻧﺬهﺐ اﻟﻰ اﻟﻮﻳﻨﺪوز اﻟﺬي ﻧﺮﻳﺪ اﻟﺘﺤﻜﻢ ﻣﻦ ﺧﻼﻟﻪ
ﺑﺎﻟﺴﻴﺮﻓﺮ
و ﺑﻌﺪهﺎ ﺳﺘﻈﻬﺮ ﻟﺪﻳﻨﺎ ﻧﺎﻓﺬﻩ ﻓﻴﻬﺎ آﻞ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﺗﺪار ﻣﻦ ﺧﻼل اﻟـ MMCﺷﺎهﺪ اﻟﺼﻮرة
ﺷﺎهﺪ ﻋﺪد اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﻳﻤﻜﻦ اﻟﺘﺤﻜﻢ ﺑﻬﺎ ﻋﻦ ﺑﻌﺪ ﻓﻠﻨﺨﺘﺮ ﻣﺜﻼ Computer Management
اﻻن ﻇﻬﺮت ﻟﻨﺎ ﻟﻮﺣﺔ ادارة اﻟﺴﻴﺮﻓﺮ ﻳﻤﻜﻨﻚ اﻟﺘﺤﻜﻢ ﺑﻜﻞ ﺷﻴﺊ ﺗﻘﺮﻳﺒﺎ
و ﻳﺠﺐ اﻟﺘﻨﺒﻴﻪ اﻟﻰ ﻧﻘﻄﺔ هﺎﻣﺔ ﺳﻴﺘﺴﺎﺋﻞ اﺣﺪآﻢ اذا ﻣﺎ اﻟﻔﺎﺋﺪة ﻣﻦ ﺗﻌﻠﻢ اﻻواﻣﺮ اذا آﻨﺎ ﻗﺎدرﻳﻦ ﻋﻠﻰ اﻻدارة ﻋﻦ ﺑﻌﺪ ؟
اﻟﺠﻮاب هﻮ اﻧﻚ ان ﻟﻢ ﺗﻔﻬﻢ آﻴﻒ ﺗﺴﻴﺮ اﻻﻣﻮر ﺧﻠﻒ اﻟـ GUIﻓﺎﻧﻚ ﻟﻦ ﺗﺴﺘﻄﻴﻊ ﺣﻞ اﻟﻤﺸﺎآﻞ ﺑﺴﻬﻮﻟﺔ هﺬا اوﻻ و ﺛﺎﻧﻴﺎ ﻻ ﺑﺪ ﻣﻦ
ﺗﻌﺮﻳﻒ IP , Hostname , Firewall Ruleو هﺬا آﻠﻪ ﻣﻦ ﺧﻼل اﻻواﻣﺮ ﻃﺒﻌًﺎ
Remotely Managing Windows 2008 Server Core Firewall
وﻳﺸﻤﻞ ﻣﺎ ﻳﻠﻲ:
• اﻟﺘﺤﻜﻢ ﺑﺎﻟﺠﺪار اﻟﻨﺎري ﻟﻠﺴﻴﺮﻓﺮ 2008آﻮر ﻋﻦ ﺑﻌﺪ ﻣﻦ ﺧﻼل MMC Snap-ins
Remotely Managing Windows 2008 Server Core Firewall
• اﻟﺴﻤﺎح ﻟﻠﺠﻬﺎز ﻣﻦ اﺳﺘﻘﺒﺎل اﻣﺮ اﻟـ Pingو اﻟﺮد ﻋﻠﻴﻪ
Enable Ping Replies from your Windows 2008 Server Core Server
ﻳﺘﻤﻴﺰ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨ﺑﻘﺪرة هﺎﺋﻠﺔ ﻋﻠﻰ اﻟﺪﻓﺎع ﻏﻦ ﻧﻔﺴﻪ و ﻋﻠﻰ اﻟﻘﺪرة ﻋﻠﻰ اﻟﺘﺼﺪي ﻟﻠﻬﺠﻤﺎت ﻣﻦ ﺧﻼل وﺳﻴﻠﺔ دﻓﺎع
اوﻟﻴﺔ و هﻲ اﻟﻮﻳﻨﺪوز ﻓﻴﺮوول اﻟﻤﺘﻘﺪم و ﻟﻴﺲ آﻤﺎ اﻻﺻﺪار اﻟﻤﻮﺟﻮد ﻓﻲ اﻟﻮﻳﻨﺪوز ٢٠٠٣و اﻧﻤﺎ هﺬا اﻻﺻﺪار ﺑﻘﺪة اﻓﻀﻞ ﺑﻜﺜﻴﺮ و
ﺗﺨﺼﻴﺼﺎت اآﺜﺮ ﻟﻔﻠﺘﺮة اﻟﺘﺮاﻓﻴﻚ و ﺳﻨﺘﻌﻠﻢ ﻓﻲ هﺬا اﻟﺪرس آﻴﻔﻴﺔ اﻟﺘﺤﻜﻢ ﺑﻪ ﻣﻦ ﺧﻼل اﻟـ . MMC
ﻃﺒﻌﺎ ﻓﻲ دروس ﺳﺎﺑﻘﺔ ﺗﻌﻠﻤﻨﺎ آﻴﻔﻴﺔ اﻟﺘﻌﺎﻣﻞ ﻣﻊ اﻟﻔﻴﺮوول ﻣﻦ ﺧﻼل اﻻواﻣﺮ و اﻟﻤﻮﺿﻮع ﺳﻴﻜﻮن آﺒﻴﺮ ﺟﺪا و ﻣﺮهﻖ ان
اﺿﻄﺮرﻧﺎ ان ﻧﺤﻔﻆ آﻞ ﺧﺪﻣﺔ ﻟﺬﻟﻚ ﻻ ﺑﺪ ﻣﻦ اﺳﺘﻌﻤﺎل اﻻدارة ﻋﻦ ﺑﻌﺪ ﻣﻦ ﺧﻼل واﺟﻬﺔ ﻣﺴﺘﺨﺪم ﻟﺘﺴﺮﻳﻊ ﻋﻤﻠﻴﺔ اﻻدارة
ﻃﺒﻌﺎ ﺳﻨﺴﺘﺨﺪم اﻟـ MMCاﻟﻤﻮﺟﻮد ﻓﻲ اﻟﻮﻳﻨﺪوز ﻓﻴﺴﺘﺎ او وﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨ﻟﻼﺗﺼﺎل ﺑﺴﻴﺮﻓﺮﻧﺎ اﻟﺤﺎﻟﻲ .
ﻃﺒﻌﺎ ﻳﺠﺐ اﻻﺧﺬ ﺑﻌﻴﻦ اﻟﺤﺴﺒﺎن اﻧﻪ ﻳﺠﺐ ان ﻧﻜﻮن ﻗﺪ ﻋ َﺮﻓﻨﺎ ﻋﻨﻮان ﻟﻠﺠﻬﺎز و ﻋﺮﻓﻨﺎ اﺳﻢ ﻟﻪ و ﻋﺮﻓﻨﺎ ﺣﺴﺎب و رﻗﻢ اﻟﻤﺮور
ﻟﻠـ .Administrator
آﻮد:
netsh advfirewall set currentprofile settings remotemanagement enable
Enable Ping Replies from your Windows 2008 Server Core Server
و اﻻن ﻟﻨﺄﺗﻲ اﻟﻰ اﻣﺮ اﻟـ Pingو هﻮ ﻣﻬﻢ اذ ﻳﺴﺘﺨﺪم ﻓﻲ اﻟﻜﺜﻴﺮ ﻣﻦ ﺣﺎﻻت ﻓﺤﺺ و ﻋﻼج اﻟﺸﺒﻜﺎت و ﻣﺎ ﺳﻨﺘﺤﺪث ﻋﻨﻪ هﻮ
اﻟﺴﻤﺎح ﻟﻠﺠﻬﺎز ﻣﻦ اﺳﺘﻘﺒﺎل اﻣﺮ اﻟـ Pingو اﻟﺮد ﻋﻠﻴﻪ ﻓﻲ اﻟﻮﺿﻊ اﻟﻄﺒﻴﻌﻲ ﻓﺎﻟﻔﻴﺮوول ﻳﻤﻨﻊ اﻟـ pingﺷﺎهﺪ اﻟﺼﻮرة
و ﻟﻦ ﻧﺘﺤﺪث ﻣﻦ وﺟﻬﺔ ﻧﻈﻠﺮ اﻟـ MMCﻓﻘﻂ و اﻧﻤﺎ ﺳﻨﺘﻌﻠﻢ آﻴﻒ ﻧﺴﻤﺢ ﻟﻪ ﻣﻦ ﺧﻼل اﻻواﻣﺮ اﻳﻀﺎ
آﻮد:
netsh firewall set icmpsetting 8
ﻻﺣﻆ اﻟﺼﻮرة
ﻟﻼﺗﺼﺎل ﺑﺎﻟـ coreﻣﻦ ﺧﻼل ﻣﻦ ﺧﻼل ﻧﻈﺎم ﺗﺸﻐﻴﻞ اﺧﺮ ﻏﻴﺮ اﻟﻔﻴﺴﺘﺎ وﻏﻴﺮ اﻟﺴﺮﻓﺮ ٢٠٠٨ﺑﻮاﺳﻄﺔ RDPﻳﺠﺐ اﻟﻐﺎء اﻟﻤ ﺴﺘﻮى
اﻟﻌﺎﻟﻲ ﻟﻼﻣﺎن اﻟﻤﺘﻮاﻓﻖ ﻓﻘﻂ ﻣﻊ اﻟﻮﻳﻨﺪوز ﻓﻴﺴﺘﺎ و ٢٠٠٨و ﻟﻠﻘﻴﺎم ﺑﻬﺬا اﻻﻣﺮ ﻧﻄﺒﻖ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
Cscript c:\windows\system32\scregedit.wsf /cs 0
اﻣﺎ ﻣﻦ ﺧﻼل اﻟـ MMCﻓﺎﻻﻣﺮ ﻣﺨﺘﻠﻒ ﺑﻌﺾ اﻟﺸﻲء ﻓﻤﺜﻼ ان اردت ان ﺗﺸﺒﻚ ﻋﻠﻰ اﻟ ـ Coreﻣ ﻦ وﻳﻨ ﺪوز ٢٠٠٣او XPﻓ ﻼ
ﻣ ﺸﻜﻠﺔ ﻣ ﻊ اﻟ ـ COMPUTER MANAGMENTﻣ ﺜﻼ و ﻟﻜ ﻦ ﻻ ﻳﻤﻜ ﻦ اﻻﺗ ﺼﺎل ﻣ ﻦ اﻟ ﺴﺎﺑﻘﺔ ﻋﻠ ﻰ ﺧﺪﻣ ﺔ اﻟﻔﻴ ﺮوول ﻻﻧﻬ ﺎ
ﺗﺨﺘﻠﻒ ﻓﻲ ﺑﻨﻴﺘﻬﺎ ﻋﻦ اﻟـ MMCاﻟﻤﺒﺮﻣﺞ ﺑﺎﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ
Installing a server role on a server running Server Core installation
اﻟﻌﻤﻞ ﻋﻠﻰ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﺳﻘﺪﻣﻬﺎ اﻟﺴﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻟﻠﺸﺒﻜﺔ
ﻃﺒﻌﺎ ﻣﻦ ﺧﻼل اﻟﻌﻨﻮان ﻳﺒﺪو واﺿﺤﺎ ﻟﺪﻳﻨﺎ اﻧﻨﺎ ﻧﺘﺤﺪث ﻋﻦ اﻟﺨﺪﻣﺎت اﻟﺘﻲ ﻳﻘﺪﻣﻬﺎ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻟﻠﺸﺒﻜﺔ و اﻟﺘﻲ
داﺋﻤﺎ ﻋﻬﺪﻧﺎ هﺎ آﺨﺪﻣﺎت اﺳﺎﺳﻴﺔ ﻓﻲ اي ﺷﺒﻜﺔ
ﻓﻲ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر ﺗﻜﻮن اﻟﺨﺪﻣﺔ ﻣﻮﺟﻮدة و ﻟﻜﻨﻬﺎ ﻏﻴﺮ ﻣﻔﻌﻠﺔ ﻟﺬﻟﻚ ان اردﻧﺎ ﺗﻔﻌﻴﻠﻬﺎ ﻓﻌﻠﻴﻨﺎ ان ﻧﺴﺘﺨﺪم اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
start /w ocsetup DHCPServerCore
ﻣﻊ اﻻهﺘﻤﺎم ﺑﺸﻜﻞ رﺋﻴﺴﻲ ﻓﻲ آﻴﻔﻴﺔ آﺘﺎﺑﺔ اﻟﺤﺮوف.
ﺑﻬﺬا ﻧﻜﻮن ﻗﺪ ﺷﻐﻠﻨﺎ اﻟﺨﺪﻣﺔ و ﻟﻜﻦ ﻗﺪ ﻳﺴﺄل ﺳﺎﺋﻞ آﻴﻒ اﻋﺮف اﻧﻬﺎ ﻗﺪ اﺻﺒﺤﺖ ﻣﺘﻮﻓﺮة ﻓﺎﻟﺠﻮاب ﻣﻦ ﺧﻼل اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
oclist
و اﻻن ﻟﻨﺄﺗﻲ اﻟﻰ اﻣﺮ ﻣﻬﻢ ﺟﺪا و هﻮ ﺗﺸﻐﻴﻞ اﻟﺨﺪﻣﺔ و هﻨﺎ ﺳﻨﺘﺤﺪث ﻋﻦ ﺣﺎﻟﺘﻴﻦ
اﻻوﻟﻰ اذا آﺎن DHCPﻋﻀﻮ ﻓﻲ اﻟﺪوﻣﻴﻦ ﻓﻴﺠﺐ ﻋﻤﻞ authorizeﻟﻪ ﻓﻲ Active Directory
و ﻳﻤﻜﻦ ذﻟﻚ ﻣﻦ ﺧﻼل netshاﻟﻤﻌﺮوﻓﺔ و ﻳﻤﻜﻦ ﻣﻦ ﺧﻼﻟﻬﺎ اﻟﺘﺤﻜﻢ اﻟﻜﺎﻣﻞ ﺑﺎﻟﺨﺪﻣﺎت دون اﻟﺤﺎﺟﺔ اﻟﻰ واﺟﻬﺔ ﻟﻼدارة
ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ ﻟﻞ authorize
آﻮد:
Netsh dhcp add server <server name> server ip
ﻣﺜﺎل
آﻮد:
Netsh dhcp add server dc-contoso-01.contoso.com 192.168.1.1
و ﻻﻟﻐﺎء اﻟـ authorizationﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
Netsh dhcp delete server <server name> server ip
و اﻻن ﻧﺄﺗﻲ اﻟﻰ اﻟﺨﻄﻮة اﻟﺘﺎﻟﻴﺔ و هﻲ اﺿﺎﻓﺔ Scopeو هﻤﺎ ﺳﻨﺪرس ﻋﺪة اﺣﺘﻤﺎﻻت
(١اذا اردﻧﺎ اﺿﺎﻓﺔ scopeﻳﺤﺘﻮي ﻋﻠﻰ ﺳﺒﻨﺖ آﺎﻣﻠﺔ ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
"netsh dhcp server <server ip> add scope <network ID> <subnet mask> <description
ﻣﺜﺎل ﺗﻮﺿﻴﺤﻲ
آﻮد:
netsh dhcp server 192.168.1.1 add scope 192.168.1.0 255.255.255.0 arabsgate.com
آﻮد:
>netsh dhcp server <server ip
scope <scope name> add iprange 192.168.1.1 192.168.1.254
و اﻻن اذا اردﻧﺎ اﺳﺘﺜﻨﺎء ﻣﺠﺎل ﻣﻌﻴﻦ ﻣﻦ اﻻرﻗﺎم ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh dhcp server <server ip> scope 192.168.1.0
add excluderange 192.168.1.1 192.168.1.20
اذا اردﻧﺎ اﺿﺎﻓﺔ ﻣﻌﻠﻮﻣﺎت او ﺧﻴﺎرات اﻟﺴﻜﻮب و هﻲ اﻟﺮاوﺗﺮ و اﻟـ DNSﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ ﻻﺿﺎﻓﺔ اﻟﺮاوﺗﺮ او : Gateway
آﻮد:
netsh dhcp server 192.168.1.1 scope 192.168.1.0
set optionvalue 003 IPADDRESS 192.168.1.1
ﻓﻲ اﻻﻣﺮ اﻟﺴﺎﺑﻖ اﺿﻔﻨﺎ ﻋﻨﻮان اﻟﺮاوﺗﺮ ﺣﺘﻠﻰ ﻳﻤﻨﺢ ﻟﻼﺟﻬﺰة و ﻳﺘﻌﺮف اﻟـ DHCPﻋﻠﻰ هﺬا اﻟﺨﻴﺎر ﺑﺎﻟﺮﻗﻢ ٠٠٣
اﻻن ﻻﺿﺎﻓﺔ اﻟـ DNSﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
netsh dhcp server 192.168.1.1 scope 192.168.1.0
set optionvalue 006 IPADDRESS 192.168.1.1 192.168.1.2
و ﻓﻲ هﺬﻩ اﻟﺤﺎﻟﺔ ﺳﻨﻤﻨﺢ اﻻﺟﻬﺰة ﺟﻬﺎزﻳﻦ ﻟﻠـ DNSﻓﻲ ﺣﺎل آﺎن ﻋﻨﺪﻧﺎ اآﺜﺮ ﻣﻦ واﺣﺪ
آﻮد:
netsh dhcp server 192.168.1.1 scope 192.168.1.0 set state 1
و اﻻن ﻟﺮؤﻳﺔ اﻟﺘﻐﻴﺮات اﻟﺘﻲ ﺣﺪﺛﺖ و ﻣﻌﺮﻓﺔ اﻟﺘﻌﺮﻳﻔﺎت اﻟﻜﺎﻣﻠﺔ ﻟﻠـ DHCPﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
Netsh dhcp server show scope
و اﻻن ﻧﺄﺗﻲ ﻓﻲ اﻟﺨﺘﺎم اﻟﻰ ﻧﻘﻄﺔ هﺎﻣﺔ و هﻲ ان ﺧﺪﻣﺔ اﻟـ DHCPﻻ ﺗﻌﻤﻞ ﺑﺸﻜﻞ ﺗﻠﻘﺎﺋﻲ ﻓﻲ اﻟﻮﻳﻨﺪوز اﻻ ﺑﻌﺪ اﻟﺴﻤﺎح ﻟﻬﺎ ﺑﺬﻟﻚ
ﻣﻦ ﺧﻼال هﺬا اﻻﻣﺮ
آﻮد:
sc config dhcpserver start= auto
آﻮد:
net start dhcpserver
اﻣﺎ ﻣﻦ ﺣﻴﺚ اﻻﺳﺘﺨﺪام ﻓﻲ اﻟﺸﺒﻜﺎت اﻟﺪاﺧﻠﻴﺔ ﻻ ﺑﺪ ﻣﻦ وﺟﻮد اﻟـ DNSﻓﻲ اﻟﺪوﻣﻴﻦ و إﻻ ﻓﺈن ﻋﻤﻠﻴﺔ اﻧﺸﺎء اﻟﺪوﻣﻴﻦ ﺳﺘﻔﺸﻞ و ﻟﻦ
ﻧﺤﺼﻞ ﻋﻠﻰ ﻣﻴﺰة اﻟﺪوﻣﻴﻦ و آﺬﻟﻚ ﺳﺘﻜﻮن ﻋﻤﻠﻴﺔ Logonﺳﺘﻜﻮن ﻓﺎﺷﻠﺔ.
و ﻳﺤﺪث ذﻟﻚ ﺑﺎن ﺗﻘﻮم اﻟﺴﻴﺮﻓﺲ اﻟﻤﻮﺟﻮدة ﻓﻲ اﻟﻮﻳﻨﺪوز DNS Clientﺑﺎﻻﺗﺼﺎل ﺑﺎل DNS Serverو ﺗﺴﺄﻟﻪ ﻣﺎ إذا آﺎن هﻮ
اﻟﻤﺴﺆول ﻋﻦ اﻟﺪوﻣﻴﻦ اﻟﺘﻲ هﻮ ﻋﻀﻮ ﺑﻬﺎ
ﻳﻘﻮم اﻟـ DNSﺑﺎﻟﺒﺤﺚ ﻋﻦ zoonﻟﻪ ﻧﻔﺲ اﺳﻢ اﻟﺪوﻣﻴﻦ ﻓﺈن و ﺟﺪ ﻳﻘﻮم ﺑﺈرﺳﺎل ﻣﻌﻠﻮﻣﺎت اﻟﺪوﻣﻴﻦ آﻨﺘﺮوﻟﺮ و اﻟﺘﻲ ﺗﺴﻤﻰ SRV
recordﻓﻴﺘﻌﺮف اﻟﺠﻬﺎز ﻋﻠﻰ ﻋﻨﻮان اﻟﺪوﻣﻴﻦ آﻨﺘﺮوﻟﺮ ﻓﻴﺼﺒﺢ اﻻﺗﺼﺎل ﺑﻪ ﻣﺒﺎﺷﺮﻩ
هﺬﻩ ﻣﻘﺪﻣﺔ ﺑﺴﻴﻄﺔ ﻋﻦ اﻟـ DNS Serviceو ﻟﻨﺪﺧﻞ ﺑﺎﻟﺘﻔﺎﺻﻴﻞ اﻟﻌﻤﻠﻴﺔ ﻟﺘﺸﻐﻴﻞ اﻟﺨﺪﻣﺔ و ﺗﻌﺮﻳﻔﻬﺎ
اوﻻ ﻟﺘﻨﺰﻳﻞ اﻟﺨﺪﻣﺔ ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
start /w ocsetup DNS-Server-Core-Role
و اﻻن ﻧﺄﺗﻲ اﻟﻰ اﻟﻘﺴﻢ اﻟﻤﻬﻢ و هﻲ ادارة اﻟﺨﺪﻣﺔ و ﺗﻌﺮﻳﻒ اﻟـ Zoneو ﻳﻜﻮن ذﻟﻚ ﺑﺎﺣﺪى اﻟﻄﺮق اﻟﺘﺎﻟﻴﺔ
(٢ﺑﺎﺳﺘﻌﻤﺎلMMC
اوﻻ ﻻﺿﺎﻓﺔ Zoneﻧﺴﺘﺨﺪم اﻻﻣﺮ اﻟﺘﺎﻟﻲ و هﻮ ﻋﺎم و ﻳﺮاﻋﻰ ﺗﻐﻴﻴﺮ ﻧﻮع اﻟـ Zone
آﻮد:
dnscmd [ServerName] /zoneadd ZoneName ZoneType
ﻣﺜﺎل :ﻟﺘﻌﺮﻳﻒ Primary Zoneﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ ﻳﺴﻤﻰ Edu.arabsgate.comﻓﻲ ﺳﻴﺮﻓﺮ اﺳﻤﻪ
SRV1.arabsgate.comو ﻳﺨﺰن ﻓﻲ ﻣﻠﻒ اﺳﻤﻪ arabsgate.com.dnsﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
dnscmd srv1.arabsgate.com/ZoneAdd edu.arabsgate.com/Primary /file arabsgate.com
و ﻟﻨﺄﺗﻲ اﻻن اﻟﻰ آﻴﻔﻴﺔ ﺟﻌﻞ اﻟﺴﻴﺮﻓﺮ ﻳﻨﺸﻲء Reverse lookup Zoneﺑﺸﻜﻞ ﺗﻠﻘﺎﺋﻲ ﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
dnscmd SRV1.arabsgate.com /config /disableautoreversezones 0
آﻮد:
dnscmd SRV1.arabsgate.com /zoneadd arabsgate.com /Secondary 192.168.1.2
ﻓﻲ اﻻﻣﺮ اﻟﺴﺎﺑﻖ اﻣﺮﻧﺎ اﻟﺴﻴﺮﻓﺮ ﺑﻌﻤﻞ Zoneﺛﺎﻧﻮي ﻟـ Arabsgate.comو أﺧﺬ اﻟﻨﺴﺨﺔ اﻟﺮﺋﻴﺴﻴﺔ ﻣﻦ اﻟﺴﻴﺮﻓﺮ 192.168.1.2
و اﻻن ﻟﻨﺄﺗﻲ اﻟﻰ آﻴﻔﻴﺔ اﺿﺎﻓﺔ A recordاي اﺿﺎﻓﺔ اﺳﻢ ﻣﻘﺎﺑﻞ IP
آﻮد:
dnscmd SRV1.arabsgate.com /RecordAdd arabsgate.com SRV22 A 192.168.1.100
ﻓﻲ اﻻﻣﺮ اﻟﺴﺎﺑﻖ اﺿﻔﻨﺎ ﻣﺪﺧﻞ ﻳﺤﺘﻮي ﻋﻠﻰ اﺳﻢ ﺳﻴﺮﻓﺮ SRV22و اﻟﺬي ﺳﻴﻜﻮن ﻋﻨﻮاﻧﻪ 192.168.1.100
و ﻻﺿﺎﻓﺔ CNAMEاو ﻣﺎ ﻳﺴﻤﻰ Aliasﻣﺜﻼ اذا اردﻧﺎ ان ﻧﺨﻌﻞ اﻟـ SRV22ﻳﻜﻮن ﻟﻪ اﻳﻀﺎ اﺳﻢ WWWﻓﺎﻧﻨﺎ ﺳﻨﺴﺘﻌﻤﻞ هﺬا
اﻻﻣﺮ
آﻮد:
dnscmd SRV1.arabsgate.com /RecordAdd arabsgate.com www CNAME SRV22.arabsgate.com
آﻮد:
dnscmd SRV1.arabsgate.com /zonedelete arabsgate.com
و اﻻن اﺧﻴﺮا اذا اردﻧﺎ اﻟﻐﺎء ﺗﺜﺒﻴﺖ ﺧﺪﻣﺔ اﻟـ DNSﻧﻜﺘﺐ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
ﻣﻼﺣﻈﺔ :ان إﻣﻜﺎﻧﻴﺔ اﻟﺮﺑﻂ ﻣﻊ DNSﺁﺧﺮ ،ﻣﺜﻞ إﻣﻜﺎﻧﻴﺔ ﺗﺤﻮﻳﻞ اﻟﻄﻠﺐ اﻟﻰ DNSﺁﺧﺮ هﺬا ﻣﺎ ﻳﺴﻤﻰ ﺑﺎﻟـ Forwarderو هﻮ
ﺗﻌﺮﻳﻒ اﻓﺘﺮاﺿﻲ ﻓﻲ اﻟﻮﻳﻨﺪوز DNSو ﺳﻴﻌﻤﻞ اﻻﻧﺘﻘﺎل او اﻟﺘﺤﻮﻳﻞ اﻟﻰ اﻟـ DNSاﻟﻤﻌﺮف ﻋﻠﻰ آﺮت اﻟﺸﺒﻜﺔ
Active Directory
ﺗﺮﻗﻴﺔ اﻟﺠﻬﺎز ﻟﻴﺼﺒﺢ دوﻣﻴﻦ آﻮﻧﺘﺮوﻟﺮ Install the Active Directory Domain Services role
آﻤﺎ ﻻﺣﻈﻨﺎ ﻣﻦ اﻟﻌﻨﻮان ﻓﺎن اﻟﺤﺪﻳﺚ ﻋﻦ آﻴﻔﻴﺔ ﺗﻜﻮﻳﻦ دوﻣﻴﻦ ﺑﺎﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر و هﻮ اﻣﺮ ﻣﻬﻢ ﻟﺘﻜﺘﻤﻞ ﻣﻬﺎم اﻟﻮﻳﻨﺪوز
اﻻﺳﺎﺳﻴﺔ ﻓﻲ ﺑﻨﺎء اﻟﺸﺒﻜﺎت اذ ﻻ ﻳﻤﻜﻦ اﻧﺸﺎء ﺷﺒﻜﺔ ﻟﻤﻴﻜﺮوﺳﻮﻓﺖ ﺑﺪون ان ﻳﻜﻮن اﻟﺪوﻣﻴﻦ هﻮ اﻟﺠﺰء اﻻهﻢ ﺑﻬﺎ.
ﻟﻨﺪﺧﻞ ﻓﻲ اﻟﻤﻮﺿﻮع ﻃﺒﻌﺎ اﻟﻜﻞ ﻳﻌﺮف اﻧﻨﺎ اذا اردﻧﺎ ﺗﺤﻮﻳﻞ اي ﻧﺴﺨﺔ ﺳﻴﺮﻓﺮ اﻟﻰ دوﻣﻴﻦ آﻨﺘﺮوﻟﺮ ﻳﺠﺐ آﺘﺎﺑﺔ اﻻﻣﺮ اﻟﺘﺎﻟﻲ
آﻮد:
dcpromo
و اﻻﻣﺮ ﻣﺸﺎﺑﻪ هﻨﺎ و ﻟﻜﻦ ﻻﻧﻨﺎ ﻻ ﻧﺘﺤﺪث ﻋﻦ واﺟﻬﺔ ﻣﺴﺘﺨﺪم ﻓﺎﻟﻤﻮﺿﻮع ﻳﺨﺘﻠﻒ ﺑﻌﺾ اﻟﺸﻲء و ﻳﻜﻤﻦ هﺬا اﻻﺧﺘﻼف ﻓﻲ اﻧﻨﺎ
ﻳﺠﺐ ان ﻧﺤﻀﺮ ﻣﻠﻒ ﻳﺤﺘﻮي ﻋﻠﻰ اﻻﺟﻮﺑﺔ اﻟﺘﻲ ﺗﻄﻠﺒﻬﺎ ﻋﻤﻠﻴﺔ اﻟﺘﺮﻗﻴﺔ و هﻮ ﻣﺎ ﻳﺴﻤﻰ ﺑﺎﻟـ Answer fileو ﺳﻨﺪرس ﻋﺪة ﺣﺎﻻت
و ﺳﻨﻌﻄﻲ اﻣﺜﻠﺔ ﻋﻦ ﻣﻠﻔﺎت ﺣﺴﺐ اﻟﺤﺎﻟﺔ اﻟﻤﻄﻠﻮﺑﺔ .
ﻟﻨﺒﺪأ ﺑﺘﺤﻀﻴﺮ اﻟﻤﻠﻒ اﻟﺬي ﺳﻴﺤﺘﻮي ﻋﻠﻰ اﺟﺎﺑﺔ اﻻﺳﺌﻠﺔ و ﺳﺄﻋﻄﻲ ﻋﺪة ﻧﻤﺎذج ﻟﻤﻠﻔﺎت ﺟﺎهﺰة و ﻳﻌﺪل ﻋﻠﻴﻬﺎ ﺣﺴﺐ اﻟﺤﺎﻟﺔ
اﻟﻤﻮﺟﻮدة ﻟﺪﻳﻨﺎ.
اﻟﺤﺎﻟﺔ اﻻوﻟﻰ :ﻟﻌﻤﻞ دوﻣﻴﻦ ﺟﺪﻳﺪة و ﻓﻮرﺳﺖ ﺟﺪﻳﺪة ﻧﺴﺘﺨﺪم اﻟﻤﻠﻒ اﻟﺘﺎﻟﻲ ﻣﻊ اﻟﺘﻌﺪﻳﻞ ﺣﺴﺐ اﻟﻄﻠﺐ
آﻮد : HTML
InstallDNS=yes
NewDomain=forest
>NewDomainDNSName=<The fully qualified Domain Name System (DNS) name
>DomainNetBiosName=<By default, the first label of the fully qualified DNS name
>SiteName=<Default-First-Site-Name
ReplicaOrNewDomain=domain
>ForestLevel=<The forest functional level number
>DomainLevel=<The domain functional level number
">DatabasePath="<The path of a folder on a local volume
">LogPath="<The path of a folder on a local volume
RebootOnCompletion=yes
">SYSVOLPath="<The path of a folder on a local volume
>SafeModeAdminPassword=<The password for an offline administrator account
ﻣﻊ اﻻﺧﺬ ﺑﻌﻴﻦ اﻻﻋﺘﺒﺎر اﻻﻣﻮر اﻟﺘﺎﻟﻴﺔ
و هﻲ اﻟﻤﻘﺼﻮد ﺑﻬﺎ ﻣﺴﺘﻮى اﻟﺪوﻣﻴﻦ او اﻟﻔﻮرﺳﺖ و ﻳﻘﺎس ﻣﺴﺘﻮاهﺎ ﺑﻨﻮع اﻟﻮﻳﻨﺪوز اﻟﻤﻮﺟﻮد ﻋﻠﻰDomainLevel •
اﻟﺪوﻣﻴﻦ آﻮﻧﺘﺮوﻟﺮ و ﺳﻴﻜﻮن اﻟﺮﻗﻢ آﺎﻟﺘﺎﻟﻲ
و اﻻﻣﺮ ﻧﻔﺴﻪ ﻳﻨﻄﺒﻖ ﻋﻠﻰ ﻣﺴﺘﻮى اﻟﻔﻮرﺳﺖ و اﻻن ﻟﻨﺄﺧﺬ اﻟﻤﻠﻒ اﻟﺴﺎﺑﻖ و ﻧﻌﺪﻟﻪ ﺣﺴﺐ ﻣﺎ ﻧﺰﻳﺪ
: HTML آﻮد
[DCINSTALL]
InstallDNS=yes
NewDomain=forest
NewDomainDNSName=arabsgate.com
DomainNetBiosName=arabsgate
SiteName=<Default-First-Site-Name>
ReplicaOrNewDomain=domain
ForestLevel=2
DomainLevel=2
DatabasePath=%systemroot%\NTDS
LogPath=%systemroot%\NTDS
RebootOnCompletion=yes
SYSVOLPath=%systemroot%\SYSVOL
SafeModeAdminPassword=P@$$w0rd
ﻓﻲ ﻓﻮرﺳﺖ ﺟﺪﻳﺪة و ﺷﺠﺮة ﺟﺪﻳﺪة و آﺬﻟﻚ اﻣﺮﻧﺎ ﺑﺘﻌﺮﻳﻒ ﺧﺪﻣﺔArabsgate.com و هﻜﺬا ﻧﻜﻮن ﻗﺪ اﻧﺸﺄﻧﺎ دوﻣﻴﻦ ﺟﺪﻳﺪة اﺳﻤﻪ
ﻋﻠﻰ ﻧﻔﺲ اﻟﺴﻴﺮﻓﺮDNS اﻟـ
ﻟﻌﻤﻞ دوﻣﻴﻦ ﺗﻜﻮن ﺟﺰء ﻣﻦ دوﻣﻴﻦ رﺋﻴﺴﻴﺔ ﻧﺴﺘﺨﺪم اﻟﺼﻴﺎﻏﺔ اﻟﺘﺎﻟﻴﺔ ﻟﻠﻤﻠﻒ:اﻟﺤﺎﻟﺔ اﻟﺜﺎﻧﻴﺔ
: HTML آﻮد
[DCINSTALL]
ParentDomainDNSName=<Fully qualified DNS name of parent domain>
UserName=<The administrative account in the parent domain>
UserDomain=<The name of the domain of the user account>
Password=<The password for the user account> Specify * to prompt the user for credentials
during the installation.
NewDomain=child
ChildName=<The single-label DNS name of the new domain>
SiteName=<The name of the AD DS site in which this domain controller will reside> This site
must be created in advance in the Dssites.msc snap-in.
DomainNetBiosName=<The first label of the fully qualified DNS name>
ReplicaOrNewDomain=domain
DomainLevel=<The domain functional level number> This value cannot be less than the current
value of the forest functional level.
DatabasePath="<The path of a folder on a local volume>"
LogPath="<The path of a folder on a local volume>"
SYSVOLPath="<The path of a folder on a local volume>"
InstallDNS=yes
CreateDNSDelegation=yes
DNSDelegationUserName= <The account that has permissions to create a DNS delegation> The
account that is being used to install AD DS may differ from the account in the parent domain
that has the permissions that are required to create a DNS delegation. In this case, specify the
account that can create the DNS delegation for this parameter. Specify * to prompt the user for
credentials during the installation.
DNSDelegationPassword= <The password for the account that is specified for
DNSDelegationUserName> Specify * to prompt the user for a password during the installation.
SafeModeAdminPassword=<The password for an offline administrator account>
RebootOnCompletion=yes
ﻓﻴﺠﺐ ان ﻧﻌﻄﻴﻪ اﻟﺼﻼﺣﻴﺔ ﻟﻼﺳﺘﺠﺎﺑﺔDNS Server ﻣﻊ اﻻﺧﺬ ﺑﻌﻴﻦ اﻻﻋﺘﺒﺎر اﻧﻨﺎ اذا اردﻧﺎ ان ﻧﻌﺮف اﻟﺴﻴﺮﻓﺮ اﻟﺠﺪﻳﺪ آـ
و آﻤﺎ ﻻﺣﻈﻨﺎ ﻓﻲ اﺧﺮ اﻟﻤﻠﻒ ﻓﺎﻟﺴﻄﻮر ﺗﺤﺪدDelegation of authority ﻟﻠﻄﻠﺒﺎت اﻟﺨﺎﺻﺔ ﺑﺎﻟﺪوﻣﻴﻦ اﻟﻔﺮﻋﻴﺔ و هﻮ ﻣﺎ ﻳﺴﻤﻰ
. اﻟﺮﺋﻴﺴﻲ اﻟﻰ اﻟﻔﺮﻋﻲDNS اﻻﺟﺎﺑﺎت اﻟﺨﺎﺻﺔ ﺑﻌﻤﻠﻴﺔ ﻧﻘﻞ اﻟﺼﻼﺣﻴﺔ ﻣﻦ اﻟـ
: HTML آﻮد
[DCINSTALL]
ParentDomainDNSName=arabsgate.com
UserName=administartor
UserDomain=arabsgate.com
Password=PaSSw0rD
NewDomain=child
ChildName=edu.arabsgate.com
SiteName=Default-First-Site-Name
DomainNetBiosName=eduarabsgate
ReplicaOrNewDomain=domain
DomainLevel=3
DatabasePath==%systemroot%\NTDS
LogPath==%systemroot%\NTDS
SYSVOLPath=%systemroot%\SYSVOL
InstallDNS=yes
CreateDNSDelegation=yes
DNSDelegationUserName=administrator
DNSDelegationPassword=PaSSw0rD
SafeModeAdminPassword=P@ssw0RD
: HTML آﻮد
DCINSTALL]
UserName=<The administrative account in the domain of the new domain controller>
UserDomain=<The name of the domain of the new domain controller>
Password=<The password for the UserName account>
SiteName=<The name of the AD DS site in which this domain controller will reside> This site
must be created in advance in the Dssites.msc snap-in.
ReplicaOrNewDomain=replica
DatabasePath="<The path of a folder on a local volume>"
LogPath="<The path of a folder on a local volume>"
SYSVOLPath="<The path of a folder on a local volume>"
InstallDNS=yes
ConfirmGC=yes
SafeModeAdminPassword=<The password for an offline administrator account>
RebootOnCompletion=yes
ﻋﻦ ﺳﻴﺮﻓﺮ ﻣﻌﻴﻦ ﻣﻊ اﻻﺑﻘﺎء ﻋﻠﻰ اﻟﺪوﻣﻴﻦ و ﻳﻜﻮن ﺗﻨﺴﻴﻖ ﻣﻠﻒ اﻻﺟﺎﺑﺔ آﺎﻟﺘﺎﻟﻲActive Directory ازاﻟﺔ:اﻟﺤﺎﻟﺔ اﻻوﻟﻰ
: HTML آﻮد
[DCINSTALL]
UserName=<An administrative account in the domain>
UserDomain=<The domain name of the administrative account>
Password=<The password for the UserName account>
AdministratorPassword=<The local administrator password for the server>
RemoveApplicationPartitions=yes
RemoveDNSDelegation=yes
DNSDelegationUserName=<The DNS server administrative account for the DNS zone that
contains the DNS delegation>
DNSDelegationPassword=<The password for the DNSDelegationUserName account>
RebootOnCompletion=yes
ﻋﻦ اﺧﺮ دوﻣﻴﻦ آﻮﻧﺘﺮوﻟﺮ ﻓﻲ دوﻣﻴﻦ ﻣﻌﻴﻨﺔ ﻧﺴﺘﺨﺪم اﻟﺼﻴﺎﻏﺔ اﻟﺘﺎﻟﻴﺔActive Directory هﻲ ازاﻟﺔ اﻟـ:و اﻟﺤﺎﻟﺔ اﻟﺜﺎﻧﻴﺔ
: HTML آﻮد
[DCINSTALL]
UserName=<An administrative account in the parent domain>
UserDomain=<The domain name of the UserName account>
Password=<The password for the UserName account> Specify * to prompt the user for
credentials during the installation.
IsLastDCInDomain=yes
AdministratorPassword=<The local administrator password for the server>
RemoveApplicationPartitions=If you want to remove the partitions, specify "yes" (no quotation
marks) for this entry. If you want to keep the partitions, this entry is optional.
RemoveDNSDelegation=yes
DNSDelegationUserName=<The DNS server administrative account for the DNS zone that
contains the DNS delegation>
DNSDelegationPassword=<The password for the DNS server administrative account>
RebootOnCompletion=yes
: HTML آﻮد
[DCINSTALL]
UserName=<An administrative account in the parent domain>
UserDomain=<The domain name of the UserName account>
Password=<The password for the UserName account> Specify * to prompt the user for
credentials during the installation.
IsLastDCInDomain=yes
AdministratorPassword=<The local administrator password for the server>
RemoveApplicationPartitions=If you want to remove the partitions, specify "yes" (no quotation
marks) for this entry. If you want to keep the partitions, this entry is optional.
RemoveDNSDelegation=yes
DNSDelegationUserName=<The DNS server administrative account for the DNS zone that
contains the DNS delegation>
DNSDelegationPassword=<The password for the DNS server administrative account>
RebootOnCompletion=yes
و اﻻن ﺑﻌﺪ ﺗﺠﻬﻴﺰ اﻟﻤﻠﻒ ﻧﻨﺴﺨﻪ اﻟﻰ اﻟﺠﻬﺎز ﻋﻦ ﻃﺮﻳﻖ اﻟﺸﺒﻜﺔ اي ﻟﻮ اﻧﻚ وﺿﻌﺘﻪ ﻋﻠﻰ ﻣﻠﻒ ﻣﺸﺘﺮك و اﺳﺘﺨﺪﻣﺖ اﻣﺮ
:آﻮد
net use
:آﻮد
dcpromo /unattend:<path of the answer file>
ﻓﺎن اﻻﻣﺮ ﺳﻴﻜﻮن آﺎﻟﺘﺎﻟﻲComplover ﻣﺒﺎﺷﺮة و آﺎن اﺳﻤﻪC ﻣﺜﻼ ﻟﻮ اﻧﻨﺎ ﻧﺴﺨﻨﺎ اﻟﻤﻠﻒ ﻋﻠﻰ اﻟـ
:آﻮد
dcpromo /unattend:C:\COMPLOVER.TXT
:آﻮد
shutdown /r /t 0
ادارة اﻟﺪﻟﻴﻞ اﻟﻨﺸﻂ Mange the Active Directory
ﻻدارة اﻟـ Active Directoryاﻟﺘﻲ ﻋﺮﻓﻨﺎهﺎ ﻋﻠﻰ اﻟﻮﻳﻨﺪوز ﺳﻴﺮﻓﺮ ٢٠٠٨آﻮر ﻳﺠﺐ اﺳﺘﺨﺪام ﻣﺎ ﻳﺴﻤﻰ ﺑﺎﻟـ
Remote Server Administrative Tools on Windows Vistaو هﻲ ﺗﻤﺎﻣًﺎ آﺎﻟﺘﻲ ﻓﻲ اﻟﻮﻳﻨﺪوز ٢٠٠٣و ﻟﻜﻦ ﻣﻊ
اﻟﺘﻄﻮرات اﻟﺨﺎﺻﺔ ﺑﺎﻻﺻﺪار اﻟﺠﺪﻳﺪ ﻣﻦ اﻟـ Active Directoryو ﻳﻤﻜﻦ ﺗﻨﺰﻳﻠﻬﺎ آﺄي ﺑﺮﻧﺎﻣﺞ ﻋﻠﻰ وﻧﺪز ﻓﻴﺴﺘﺎ وﻣﻦ ﺛﻢ
اﻻﺗﺼﺎل ﺑﺎﻟـ . DC
او ﻣﻦ ﺧﻼل Windows Server 2008 Domain Controllerﻣﻦ ﺧﻼل اﻟـ Consolاﻟﺨﺎص ﺑﺎﻟـ Active Directory
وهﻜﺬا ﻧﻜﻮن ﻗﺪ اﻧﻬﻴﻨﺎ اﻟﺘﻌﺮف اﻟﻰ هﺬا اﻟﻨﻈﺎم اﻟﺠﺪﻳﺪ ودراﺳﺔ اهﻢ ﺧﺪﻣﺎﺗﻪ وﻣﻜﻮﻧﺎﺗﻪ راﺟﻴﻦ ﻣﻦ اﻟﻤﻮﻟﻰ ﻋﺰ وﺟﻞ ان ﻳﻮﻓﻘﻜﻢ وﻳﺪﻳﻢ
ﻋﻠﻴﻜﻢ اﻟﺼﺤﺔ واﻟﻌﺎﻓﻴﺔ.