Novell Home

NDS for NT: What can I administer from NWAdmin?

Novell Cool Solutions: Feature
By Jason Blackett

Digg This - Slashdot This

Posted: 16 Sep 1999
 

NDS for NT is a dream machine for administrators who have to manage both Windows NT and NetWare networks. As you know, NDS for NT centralizes the administration of the two operating systems, and eliminates a lot of the headaches and hassles associated with administering domains?which has a net result of freeing up your evenings and weekends.

It's definitely cool, and we haven't heard from anyone who wants to argue the cool factor. But?(there's always a but) we have heard that taking NDS for NT out for a drive the first couple of times can be a bit confusing. Why? Because it's not always clear which tasks should be done in NDS and which tasks should be done in NT, and it's often not clear whether you should use NDS tools or NT tools to complete the tasks.

It's a little like taking your best friend's Porsche for a drive. (Congratulations, if you really do have a friend crazy enough to let you do this. It's highly unlikely, but for the sake of metaphor, stick with us.) You know how to drive, but all the controls are in a different place than they are say on your 1993 Ford Escort. So?you find yourself reaching for the indicators and instead you end up switching on the wipers. It just takes a little time to get used to where everything is, but once you do, it's a breeze. Well, it's the same thing with NDS for NT. The first few times you use it you may find yourself switching on the wipers (so to speak) when you really want to turn on the indicators. If this happens or has happened to you, you're not alone. We've heard from many a wise and seasoned administrator, who has experienced this, and sent us questions like this one:

I have a problem with seeing any shares on the NT Domain in NetWare Administrator. Please HELP!

On the surface, looks like something isn't working, but it's really just a case of using the wipers where you need to use your brights. The issue at the center of this reader's question is that NT Shares aren't accessible through NWAdmin as NDS objects, so you need to administer them in NT, but who knew?

So, that's the purpose of this article: to eliminate some, if not all, of the questions about what can be managed using NetWare Administrator in a Windows NT domain using NDS for NT 2.01. Think of it as a quick tour of our NDS for NT Porsche, and the next time you start to wonder if you can do something from NWAdmin, check this handy table for the info.

Action

Can it be done?

How?

Manage NT File Shares

NTFS file shares and permissions are both contained in the NT file system. Because only the SAM is migrated to NDS, this means you can't administer file using normal NDS administration methods.

NDS for NT 2.0 and higher do provide limited functionality through the NT Tools tab of the snap-in to create and set rights on NT file shares.

In order to manage NT file shares from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and pick the File and Folder Sharing wizard.

This starts the Microsoft File and Folder Sharing wizard which lets you create and set file rights on any workstation or server in the domain.

Manage NT Print Shares

Management of NT print shares is not currently possible.

N/A

Manage NT Groups

Windows NT groups, both local and global, can be created through NWAdmin. However, many people want to be able to create an NDS group, and then make this group a member of the domain, so the same group can be used in NT and NDS. This functionality is not currently available.

To create an NT local or global group in NWAdmin, right-click the domain object, and then select Create. Choose either a local or global group.

Users can be added to groups either from the Domain Access tab of the user or from the Membership tab of the group object.

Windows NT Trust Relationships

Once NDS for NT is installed, many people believe that trusts can be eliminated, because users can be members of multiple domains. This is a misconception.

The problem with this scenario is that the user has to be authenticated using untrusted authentication methods. This means the user will be able to access all resources in the domain that the workstation logs into, but for any other domains the user is a member of, a separate login will be required for each resource.

Trust relationships must be administered through User Manager for Domains. To perform trust administration in NWAdmin you can launch the User Manager for Domains tool from the NT Tools tab of the domain object.

In order to manage NT Trust Relationships from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and pick the User Manager for Domains icon.

This starts User Manager for Domains for the selected domain.

Windows NT Permissions

Windows NT permissions are not contained in the SAM database, but are linked using SIDs. For this reason, administration must be performed through User Manager for Domains.

NT Permissions are the options such as "Log on locally" and "Log on as a service" specified in the Rights policy in User Manager for Domains.

In order to manage Windows NT permissions from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and select the User Manager for Domains icon.

This starts User Manager for Domains for the selected domain.

Terminal Server and Citrix MetaFrame Configuration Options

Microsoft's Terminal Server product and Citrix's MetaFrame product extend the functionality of User Manager for Domains to include functions specific to a multi-user environment. These options are not currently exposed through NWAdmin, but can be administered using User Manager for Domains through the NT Tools snap-in.

In order to manage Windows NT Terminal Server and Citrix MetaFrame options from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and select the User Manager for Domains icon.

This starts User Manager for Domains for the selected domain.

Windows NT Servers & Workstations

NWAdmin provides limited functionality to administer NT workstations and domains that are members of the domain. Through NWAdmin you can create a new workstation object which will create an account for the workstation.

BDC and Trust accounts must be created through Server Manager. Also, It isn't possible to view the file shares or much of the other information, shown through Server Manager, about a workstation using NWAdmin. To perform these tasks, you can launch Server Manager from the NT Tools tab of the domain object.

In order to manage Windows NT Workstations and Servers from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and select the Server Manager icon.

This starts Server Manager for the selected domain.

View Windows NT Event Viewer

Using the NT Tools option of the domain it is possible to view the event log of any workstation or server in the domain if the machine is currently reachable through the RPC protocol.

To view the event log from NetWare Administrator (NWADMN32), you must be running on an NT workstation or server. Select the details of the domain object and pick the Event Viewer.

You will then be prompted to choose a server or workstation from which to retrieve the event log information. Once you select the workstation the event viewer will launch.


Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com

© 2014 Novell