(转)部署Windows Server 2003终端服务

在Windows Server 2003中，终端服务没有被默认安装，需要我们进行手动添加：

　　依次单击“开始→控制面板→添加或删除程序”，在“添加或删除程序”对话框中单击“添加/删除Windows组件”选项卡。然后勾选“组件”列表中的“终端服务器”选项。这时可能会弹出一个关于IE安全配置的警告对话框，单击“是”按钮将其关闭并依次单击“下一步”按钮。

　　在打开的“为应用程序兼容性选择默认权限”对话框中，系统给出了两种安装模式，即“完整安全模式”和“宽松安全模式”。我们选择“完整安全模式”并单击“下一步”按钮。无需插入安装光盘，文件复制完毕单击“完成”按钮即可。

　　■ 配置终端服务器

　　1． 赋予用户权限

　　默认情况下只有系统管理员组用户（Administrators）和系统组用户（SYSTEM）拥有访问和完全控制终端服务器的权限，另外远程桌面用户组（Remote Desktop Users）的成员只拥有访问权限而不具备完全控制权。而在很多时候，默认的权限设置往往并不能完全满足我们的实际需求，因此我们还需要赋予某些特殊用户远程连接的权限：

　　依次单击“开始→管理工具→终端服务配置”，在打开的“终端服务配置”对话框中双击右侧窗格中的“RDP-Tcp” 连接。打开“RDP-Tcp属性”对话框。然后切换到“权限”选项卡下，单击“添加”按钮，在“输入对象名称来源”编辑框中填入准备赋予权限的用户名（如 hanjiang）并单击“确定”按钮。

　　返回“RDP-Tcp属性”对话框后，在“组和用户名称”列表中单击刚刚添加的用户“hangjiang”，然后根据需要勾选权限列表框中的复选框。例如我们勾选允许“来宾访问”、“用户访问”复选框（如图1）。

2． 限制并发连接数量

　　默认情况下，终端服务对远程连接不限制数量，并且只允许两个并发管理远程桌面连接。考虑到节约服务器系统资源问题，我们可以对并发连接数量加以限制，以保证服务器保持较高的性能。设置方法如下：

　　在“RDP-Tcp属性”对话框中切换至“网卡”选项卡。在“网卡”下拉列表中选中使用RDP-Tcp协议的网卡，然后点选“最多连接数”单选框，并在右侧的微调框中调整并发连接数值（例如：20）。

　　3． 设置客户端可用的本地资源

　　在“RDP-Tcp属性”对话框中切换至“客户端设置”选项卡，可以勾选“禁用下列项目”区域中的项目以限制对客户端资源的使用。例如在勾选“音频映射 ”复选框后，服务器端的声音将不能通过客户端的声卡播放。而有时用户的需求恰恰相反，比如必须使用本地的打印机。那么这时必须保证“Windows打印机映射”和“LPT端口映射”两项是非选中状态（如图2）。

　　■ 连接终端服务器

　　1． 安装客户端

　　用户要想远程连接到终端服务器，首先需要安装客户端。假设Windows Server 2003的系统目录在C盘，那么可以在“C:WindowsSystem32ClientTsclientWin32”目录下找到客户端安装程序。通过“ 网上邻居”或其他方式将客户端安装程序分发给客户机并完成安装。

　　2． 远程连接

　　在客户机上依次单击“开始→所有程序→远程桌面连接”，在打开的对话框中单击“选项”按钮切换至详细的登录对话框。在“计算机名”编辑框中键入终端服务器的IP地址，在“用户名”编辑框中键入“hanjiang”并单击“连接”按钮。出现Windows登录对话框后键入已授权的用户名的密码即可完成连接。

　　小提示：当然要想成功连接到终端服务器，必须保证允许进行“远程桌面”连接：右击“我的电脑”→执行“属性”→切换至“远程”选项卡→勾选“允许用户远程连接到您的计算机”复选框。

　　■ 应用实例

　　假设用户“hanjiang”不在单位，但是需要在单位服务器的Windows Server 2003环境下运行某一应用程序。这时他就可以在本地机安装终端服务器客户端，然后通过“远程桌面连接”连接至单位的终端服务器进行操作

win2003 安装 UF 852 安装注册错误解决办法

win2003 安装 UF 852 安装注册错误解决办法
复制C:\Program Files\Common Files\System\ado下的
msadox.dll 和 msadomd.dll到c:\windows\system32
运行
regsvr32 msadox.dll
regsvr32 msadomd.dll
修复u852重新启动server

Set up LDAP

LDAP ports
By default the LDAP task listens for LDAP client requests over TCP/IP port 389, but the LDAP service can also listen for requests over an SSL port, usually port 636.
Run directory tree verification manually
You Can run directory tree verification manually, for example if you've added document to a directory since you last started the LDAP service.
Tell Ldap VerifyDIT
Note:
If you organization uses more than one Global Domain document, you must select "Yes" in the Use as default Global domain" field of the Global Domain document you want to use LADP service forms.
A DNS domain name retrieved from the OS of the machine on which the LDAP service runs.
The syntax is: user's hierarchical name%notesdomain@hostname
For example Randin Boweker/Marketing/East/Acme%Acme@acme.com
Prevent the LDAP service on the administration server
DA->Configuration->All server documents->select server->edit server->Ports->Internet Ports->Directory
Disable "SSL port status"
Disable "TCP/IP port status"
Save & Close
run restark task LDAP
Disable LDAP service
Add Notes.ini setting "DisableLDAPOnAdmin=1"
Remove LDAP from the Server Tasks on Notes.ini setting
Change LDAP service port and security configuration
DA->Configuration->All server documents->select server->edit server->Ports->Internet Ports->Directory
Enforce server access settings:
Yes to apply the "Access server" and "Not access server" settings set in the server access section on the security tab of this server document to authenticated LDAP clients connecting to the LDAP service over the TCP/IP port.
No (Default) to specify that the LDAP service ignore the Server Access settings.
Save & Close
Run restart task LDAP
Full-text index directories serverd by LDAP
DA->Configuration->LDAP->Settings (If you see the prompt "Unable to locate a server configuration document for this domain. Would you like to create one now?" Click Yes->LDAP tab->Edit LDAP settings->"Automatically FUll Text Index Domino Directory?"
Yes to enable the LDAP service to create and update full-text indexes automatically.
No (default) to prevent the LDAP service from creating and updating full-text indexes automaticlly.
Click Save&Close
Note: If you select No to disable this feature, you must delete manually any full text index(s) which you want to remove.
Choose which method to use
When you use the Domain Configuration Settings document to allow or deny access to an attribute, the access applies to all entries that contain the attribute. However, when you use the database ACL/Extended ACL, you can deny access to an attribute contained in entries at a particular branch of the directory tree.
Use the Domain Configuration settings document to customize anonymous LDAP search access to a directory
DA->Configuration->LDAP->Settings (If you see the prompt "Unable to locate a server configuration document for this domain. Would you like to create one now?" Click Yes->LDAP tab->Edit LDAP settings->"Choose fields that anonymous users can query via LDAP "Select Attribute Types"
Add/Remove attributes on the field.
Click OK ->Save & Close
Enable/Disable LDAP write access
DA->Configuration->LDAP->Settings (If you see the prompt "Unable to locate a server configuration document for this domain. Would you like to create one now?" Click Yes->LDAP tab->Edit LDAP settings->"Allow LDAP user write access"
Yes to allow directory change
No (default) to prevent directory changes via LDAP
Save & Close
Restart Domino server
Rules to follow when this directory is the primary directory and there are multiple matches on the distinguished name being compared/modified
″Don’t modify any″ (default):
Prevents the operation from occurring. The LDAP service returns an error, and you can investigate the duplicate names/naming rules.
″Modify first match″:
v Carries out the LDAP modify, delete, or compare operation on the first entry encountered in a directory enabled for LDAP write operations that matches the distinguished name specified in the operation.
v Carries out the LDAP add operation in the Domino Directory configured in directory assistance database that is enabled for LDAP write operations and has the most specific matching rule and the lowest search order
″Modify all matches″
v Carries out the LDAP modify, delete, or compare operation on all the entries encountered that match the distinguished name specified in the operation.
v Carries out the LDAP add operation in all the Domino Directories configured in the directory assistance database with a matching rule that most specifically matches the distinguished name specified in the add operation, and that are enabled for LDAP write operations.

Timeout
The maximum time, in seconds, allowed for LDAP client searches; default is 0.
Maximum number of entries returned
The maximum number of directory entries the LDAP service returns to LDAP clients as search results; default is 0, meaning that there is no limit. For example, specify 100.
Minimum characters for wildcard search
The minimum number of characters that must precede the first wildcard in a search filter when the wildcard is combined with a substring; default is 1.
Enable LDAP alternate language search
Allow Alternate Language Information documents Yes
DN Required on Bind
Yes to require distinguished names as LDAP client logon names for name-and-password security
No (default) to not require distinguished names for client logon names.
Configuring character encoding for LDAP V2 clients
To support LDAP V2 clients that don’t use UTF-8, you can change the default encoding to prevent the LDAP service from using UTF-8 character encoding for V2 clients. If you prevent the use of UTF-8 character encoding for LDAP V2 clients, then the LDAP service may sometimes be unable to return results containing international characters to V2 clients that use UTF-8.
Note: The LDAP service always uses UTF-8 character encoding when returning results with international characters to LDAP V3 clients, for example, Microsoft Outlook Express clients and Notes clients.
Encode results in UTF8 for LDAPV2 clients
Yes (default) to use UTF-8 character encoding for LDAP V2 clients.
v No to prevent the use of UTF-8 character encoding for LDAP V2 clients.
Add Alternative language for users
DA->People & Groups->Open select people->edit person->Action->Add Alternate Language
Use desktop policy to automate setup of LDAP account for the LDAP service.
DA->People & Groups->Policy->New policy->Desktop Policy->Account
Inherit Default Accounts Settings from Parent
Select to inherit default account settings from parent
Enforce Default Accounts Settings in Children
Select to enforce default account settings in children
Account Names
A descriptive name for the LDAP service account; users see this name in the list of directories the client can search. If you specify more than one account -- for example, an account for another Internet service -- separate account names with commas (,).
Server Addresses
The host name of the server running the LDAP service -- for example, ldap.acme.com.
Protocols
LDAP
Use SSL Connection
Yes to use SSL; otherwise, No.
Show current LDAP service configuration
Tell ldap showconfig
To show the status of LDAP service configuration as well as the status of the LDAP service settings controlled through the NOTES.INI file,
Tell ldap showconfig debug

安装配置MRTG

一：安装网络流量监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

安装软件：
apt-get install apache2
apt-get install mrtg
apt-get install snmpd

编辑snmpd：
vim /etc/snmp/snmpd.conf

查找到类似的行，修改为如下所示：（仅仅修改屏蔽或放开）
# sec.name source community
# com2sec paranoid default public # kommentieren
com2sec readonly default public # <- auskommentieren
#com2sec readwrite default private

重启snmpd服务：
/etc/init.d/snmpd restart

重新生成mrtg的配置文件：
cfgmaker public@localhost > /etc/mrtg.cfg

（注意）如果仅仅监视一个IP地址采用如下命令：
cfgmaker public@192.168.0.1 >> /etc/mrtg.cfg

生成mrtg的主页：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

二安装CPU负载监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

安装软件：
apt-get install sysstat

建立CPU脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.cpu
#!/bin/bash
cpuusr=`/usr/bin/sar -u 1 3 | grep Average | awk '{print $3}'`
cpusys=`/usr/bin/sar -u 1 3 | grep Average | awk '{print $5}'`
UPtime=`/usr/bin/uptime | awk '{print $3""$4""$5}'`
echo $cpuusr
echo $cpusys
echo $UPtime
hostname

使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.cpu

修改 /etc/mrtg.cfg 在文件最后加入cpu项目
Target[cpu]: `/opt/mrtg/mrtg.cpu`
MaxBytes[cpu]: 100
Options[cpu]: gauge, nopercent, growright
YLegend[cpu]: CPU loading (%)
ShortLegend[cpu]: %
LegendO[cpu]: CPU us;
LegendI[cpu]: CPU sy;
Title[cpu]: CPU Loading
PageTop[cpu]:

CPU Loading

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

三安装WWW连接数监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

建立WWW脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.www
#!/bin/bash
all=`netstat -a | grep www|awk '{print $5}'|sort | wc -l|awk '{print$1 - 1}'`
user=`netstat -a | grep www|awk '{print $5}'|cut -d":" -f1|sort| uniq |wc -l | awk '{print $1 - 1}'`
if [ "$all" = "-1" ]; then
echo 0
else
echo $all
fi
if [ "$user" = "-1" ]; then
echo 0
else
echo $user
fi
UPtime=`/usr/bin/uptime | awk '{print $3 " " $4 " " $5}'`
echo $UPtime
hostname


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.www

修改 /etc/mrtg.cfg 在文件最后加入www项目
Target[www]: `/opt/mrtg/mrtg.www`
MaxBytes[www]: 500
Options[www]: nopercent, growright
YLegend[www]: Online Users
ShortLegend[www]: %
LegendI[www]: Connect :
LegendO[www]: Online :
Title[www]: WWW Connect
PageTop[www]:

WWW Connect

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

四安装内存使用监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

建立RAM脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.ram
#!/bin/bash
# run this script to check the mem usage.
totalmem=`/usr/bin/free |grep Mem |awk '{print $2}'`
usedmem=`/usr/bin/free |grep Mem |awk '{print $3}'`
UPtime=`/usr/bin/uptime | awk '{print $3""$4""$5}'`
echo $totalmem
echo $usedmem
echo $UPtime
hostname

使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.ram

修改 /etc/mrtg.cfg 在文件最后加入ram项目
Target[ram]: `/opt/mrtg/mrtg.ram`
#Unscaled[ram]: dwym
MaxBytes[ram]: 2048000
Title[ram]:Memory
ShortLegend[ram]: &
kmg[ram]:kB,MB
kilo[ram]:1024
YLegend[ram]: Memory Usage :
Legend1[ram]: Total Memory :
Legend2[ram]: Used Memory :
LegendI[ram]: Total Memory :
LegendO[ram]: Used Memory :
Options[ram]: growright,gauge,nopercent
PageTop[ram]:

Memory

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

五安装FTP连接数监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

建立FTP脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.ftp
#!/bin/bash
all=`netstat -a | grep ftp|awk '{print $5}'|sort | wc -l|awk '{print$1 - 1}'`
user=`netstat -a | grep ftp|awk '{print $5}'|cut -d":" -f1|sort| uniq |wc -l | awk '{print $1 - 1}'`
if [ "$all" = "-1" ]; then
echo 0
else
echo $all
fi
if [ "$user" = "-1" ]; then
echo 0
else
echo $user
fi
UPtime=`/usr/bin/uptime | awk '{print $3 " " $4 " " $5}'`
echo $UPtime
hostname


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.ftp

修改 /etc/mrtg.cfg 在文件最后加入ftp项目
Target[ftp]: `/opt/mrtg/mrtg.ftp`
MaxBytes[ftp]: 500
Options[ftp]: nopercent, growright
YLegend[ftp]: Online Users
ShortLegend[ftp]: %
LegendI[ftp]: Connect :
LegendO[ftp]: Online :
Title[ftp]: FTP Connect
PageTop[ftp]:

FTP Connect

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

六安装CPU温度监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

安装软件：
apt-get install mbmon

建立CPU温度脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.temp
#!/bin/bash
/usr/bin/mbmon -c 1 -i -T 4 -u -n
exit 0


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.temp

修改 /etc/mrtg.cfg 在文件最后加入cpu项目
Target[temp]: `/opt/mrtg/mrtg.temp`
MaxBytes[temp]: 100
Title[temp]: CPU Temperature
PageTop[temp]:

CPU Temperature

Options[temp]: gauge,absolute,unknaszero,growright
YLegend[temp]: Temperature(C)
ShortLegend[temp]: (C)
Legend1[temp]: CPU Temperature
Legend2[temp]: M/B Temperature
LegendI[temp]: CPU Temp.
LegendO[temp]: M/B Temp.

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

七硬盘读写监视[默认5分钟采集一次]

切换到超级用户：
sudo -sH

建立硬盘读写脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.disk
#!/bin/bash
hd=sda
disk=/dev/$hd
UPtime=`/usr/bin/uptime |awk '{print $3""$4""$5}'`
KBread_sec=`iostat -x $disk|grep $hd |awk '{print 8$}'`
KBwrite_sec=`iostat -x $disk|grep $hd |awk '{print 9$}'`
echo $KBread_sec
echo $KBwrite_sec
echo $UPtime
hostname


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.disk

修改 /etc/mrtg.cfg 在文件最后加入硬盘读写
Target[disk]: `/opt/mrtg/mrtg.disk`
Title[disk]: Disk HDA I/O Utilization Report
#Unscaled[disk]: dwym
MaxBytes[disk]: 10240000
PageTop[disk]:

Disk I/O Utilization Report

kmg[disk]: KB,MB,GB
LegendI[disk]: Disk I/O KBread/sec
LegendO[disk]: Disk I/O KBwrite/sec
Legend1[disk]: Disk I/O KBread/sec
Legend2[disk]: Disk I/O KBwrite/sec
YLegend[disk]: Megabytes
ShortLegend[disk]: &
Options[disk]: growright,gauge,nopercent

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

八：磁盘使用

切换到超级用户：
sudo -sH

建立磁盘使用脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.df
#!/usr/bin/perl
foreach $filesystem (`df -kl | grep -v "Filesystem"`)
{
@df = split(/\s+/,$filesystem);
$total += $df[1];
$usage += $df[2];
}
print "$total\n";
print "$usage\n";
hostname


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.df

修改 /etc/mrtg.cfg 在文件最后加入
Target[disk]: `/opt/mrtg/mrtg.df`
Title[disk]: Disk Space
Unscaled[disk]: dwym
MaxBytes[disk]: 465247550
kmg[disk]: KB,MB,GB
LegendI[disk]: Total Disk Space
LegendO[disk]: Used Disk Space
Legend1[disk]: Total Disk Space
Legend2[disk]: Used Disk Space
YLegend[disk]: Megabytes
ShortLegend[disk]: &
Options[disk]: growright,nopercent
PageTop[disk]:

Disk Space

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

九：交换分区

切换到超级用户：
sudo -sH

建立交换分区脚本：
mkdir /opt/mrtg
vim /opt/mrtg/mrtg.swap
#!/bin/bash
# This script to monitor the swap usage.
totalswap=`/usr/bin/free |grep Swap |awk '{print $2}'`
usedswap=`/usr/bin/free |grep Swap |awk '{print $3}'`
echo "$totalswap"
echo "$usedswap"


使脚本可以执行：
chmod +755 /opt/mrtg/mrtg.swap

修改 /etc/mrtg.cfg 在文件最后加入
Target[swap]: `/opt/mrtg/mrtg.swap`
MaxBytes[swap]: 2048000
Title[swap]:Memory State of Server
ShortLegend[swap]: &
kmg[swap]:kB,MB
kilo[swap]:1024
YLegend[swap]: Swap Usage
Legend1[swap]: Total Swap
Legend2[swap]: Used Swap
LegendI[swap]: Total Swap
LegendO[swap]: Used Swap
Options[swap]: growright,gauge,nopercent
PageTop[swap]:

Swap

重新生成索引页面：
indexmaker /etc/mrtg.cfg > /var/www/mrtg/index.html

访问：
http://localhost/mrtg/

汉化就是在conf文件里加一个language=chinese或者其它的什么吧，在windows里是这样的，linux下没试过

Set up Domino Directroy

The following information is stored on the primary Domino server
Person
Group
Mail-in Database
Resource
Any custom documents you add
Domino Configuration
The configuration server only stores the Domino Configuration information
Change a configuration Directory to a primary Domino directory
DA->Files->open Names.nsf->File->Replication->Options for this application->Space Savers->Select "All Fields" on Include field->Deselect "Documents that meet a selection formula"->OK->make replicate with Domino server.
Restart Domino server
Change a primary Domino to a configuration Directory
DA->Files->open Names.nsf->File->Replication->Options for this application->Space Savers->Select "Configureation Document only" on Include field->Deselect "Documents that meet a selection formula"->OK->make replicate with Domino server.
Note
You can't change the user register server to a configuration server .
Prevent use a Domino Directory as a remote primary
DA->Configuration->server->Current server->Basic->Deselect "Allow this directory to be used as a remote primary directory for other servers"->Save & close
Use Administrator field to control access to individual document
DA->Files->Open names.nsf->open the document which you want to control->Administrator (In the Administrator field, enter the namesof individual administrator or the name of a group of administrators who can edit this document)->Save & Close
Categorize a user by corporatre hierarchy
DA->People & Groups->Select people->edit Person document->Work/Home->Below Hirarchy1, enter categories in the "Leve 0" field by which to sort the user's name (You can add 7 level at most)->Save & Close
Customize the Directory profile
DA->File->open Names.nsf->Action->Edit Directory profile
Change the proper field which you need.
[Domain defined by this Domino Directory
The name of the Domino domain for this directory. Domino completes this field automatically as part of first server setup.
Condensed server directory catalog for domain
The file name for a condensed Directory Catalog used by servers in the domain. As an alternative to using this field, you can specify the file names for individual condensed Directory Catalogs in the ″Directory catalog database name on this server″ field in the Basics section of Server documents. Setting up a directory catalog is optional.
Sort all new groups by default
Choose one:
v Yes to display the members of a new group in alphabetical order.
v No (default) to display members of a group in the order in which you add them. If you select No, you can still override this option and alphabetize members of a specific group.
Use more secure Internet Passwords
Choose one:
v Yes (default) to use strong encryption for Internet passwords.
v No to use less secure encryption available with previous releases of Domino.
Allow the creation of Alternate Language Information documents
Choose one:
v Yes (default) to allow you to create Alternate Language Information documents that enable LDAP clients to search for user information in an alternate language.
v No to prevent the creation of Alternate Language Information documents.
List of administrators who are allowed to create Cross Domain Configuration documents in the Administration Process Requests database
Enter the names of users who can create Cross Domain Configuration documents to allow the Administration Process to submit requests between Domino domains. Scheduling replication of the Domino]

Set up the Administration Process

Automates tasks of Administration Process
Name management tasks:
Such as rename person/group, delete person/group/server name, re certify users, and store Internet certificate.
Mail file management tasks:
Such as delete mail file and move mail file.
Server document-management tasks:
Such as store CPU count, Store platform, and place network protocol information in server document.
Roaming user management:
Such as roaming user setup, move roaming users to other servers, upgrade a nonroaming user to roaming status, and downgrade roaming user to nonroaming users
User mail file management tasks:
Such as performing ACL changes and enabling agents.For example, the "Out of Office" agent is enabled and disabled by Notes client users.
Person document management tasks:
Such as storing the user's Notes version and client platform information.
Replica management tasks:
Such as create replica, move replica, or delete all replicas of a database.
Control the size of Administration requests database
DA->File->Select admin4.nsf->right click->Properties->Replication settings->Space saver->
Modify the "Remove document not modified in the last # days" (The default value is 7 days)
Suspend administration request process
DA->Configuration->All Server Documents->Select server->Server task->Administration Process
Suspend admin Process at:
Enter the time of administration requests stops
Restart Admin process at:
Enter the time of administration requests starts
click Save and Close
Force an administration process request to run:
Tell adminp process new/Tell adminp p ne
(Processes request schedule as immediate or interval)
Tell adminp process immediate/ Tell adminp p im
(Processes request schedule as immediate )
Tell adminp process interval / Tell adminp p in
(Processes request schedule as interval)
Tell adminp process daily/ Tell adminp p da
(Processes request schedule as daily)
Tell adminp process delayed/ Tell adminp p de
(Processes request schedule as delayed)
Tell adminp process mail policy/ Tell adminp p ma
(Applies mail policy to affected user's mail file)
Check errors of ADMIN4.NSF
DA->Server->Analyses->Administration requests->All errors by date/All errors by server
Delete errors: "Remove from view"
Reprocess error requests: "Reprocess Select Requests"
Schedule Administration Process requests:
DA->Configuration->All Server Documents->Select server->Server task->Administration
Fill the proper fields
Maximum number of threads:
[Default is 3. You must restart adminp if you have changed the number]
Interval
[The number of minutes that pass between the processing of name-management requests -- rename, delete, and recertify. The default is 60 minutes.]
Execute once a day requests at
[The time when updates to Person documents occur and ″Rename person in unread lists″ requests run. The default is 12 AM.]
Interval between purging mail file and deleting when using object store
[The number of days that pass between running the Object Collect task against a mail file that uses shared mail and deleting the mail file. The default is 14 days.]
Start executing on
[The day on which Updates to Authors and Readers fields in a database and discovery of shared and private design elements for a deleted person occur. The default is Sunday. ]
Start executing at
[The time when the updates to Authors and Readers fields in a database and discovery of shared and private design elements for a deleted person occur. The default is 12 AM.]
Mail file moves expire after
[The number of days during which the Notes client will update mail-related changes. The default is 21 days. Valid values are 7 to 60, inclusive.]
Store Admin Process log entries when status of no change is recorded
[Logs a ″No change″ status entry in the Administration Process log each time a database is scanned to determine whether an administration request requires a change to that database and no change is made. The default is No. Keeping this field set to ″No″ may greatly reduce the size of the Administration Request database.
For more information controlling the size of the Administration Requests database, see the topic ″Controlling the size of the Administration Requests database.″]
Suspend Admin Process at
[(Optional) Time when the Administration Process stops processing requests. To conserve server resources, suspend the Administration Process during peak computer hours.
For more information on suspending the Administration Process, see the topic ″Suspending administration request processing.″]
Restart Admin Process at
[(Optional) Time when the Administration Process starts processing requests again. To conserve server resources, set the Administration Process to restart during non-peak computer usage hours. For more information on suspending the Administration Process, see the topic ″Suspending administration request processing.″]
Add/remove administration server /person:
DA->open "names.nsf"->File->Application->Access control->Extended Access ->Select user /server ->In the Access field , in the allow column, click Administer
Remove
DA->open "names.nsf"->File->Application->Access control->select user/server->Remove

用花生壳建立多个邮件域收发邮件实例

用花生壳建立多个邮件域收发邮件实例
1)建立两个Domino域
一个建立在可以连接到internet得主机上可以作为gateway服务器使用。此Domino服务器为
Name: D1
Domain: AAA.net
IP: 192.168.1.2
第二个服务器可以建立在内网任何可以连接到D1的地方. 此服务器为
Name: D2
Domain:BBB.cc
IP:192.168.30
2)D1与D2进行交叉认证
１启动Administrator软件，连接到您的服务器，点击＂配置＂标签．
２点击右边屏幕＂工具＂－－＂验证字＂－－＂交叉验证＂
３选择您自己的cert.id或server.id，输入其口令
４选择被验证的对方的cert.id或server.id，点击按钮＂交叉验证＂
5 把D2的names.nsf 复制到 D1的data目录下改名为d2-names.nsf
6 在notes.ini中添加Names=names.nsf,D2-names.nsf
3)建立两个连接 (Domino Administrator->Messaging->Connection)
D2->D1


D1->D2
把上面连接文档的源和目的进行交换
把relpication/Router下的replication task禁用
4)在D1和D2上分别建立 adjacent 域(Domino Administrator->Messaging->Domain)
D1->D2

D2->D1

5)在D1建立global Domino (Domino Administrator->Messaging->Domain)
1 建立 AAA.net


2 建立 BBB.cc
操作如上图把AAA.net改为BBB.cc就可以了.
6)在D2上设置relay host 为192.168.1.2
Domino Administrator->Configuration->server->Configurations->select server->Basic->
"relay host for messages leaving the local internet domain"
在D1上设置允许外部邮件通过该主机
Domino Administrator->Configuration->server->Configurations->select server->Restrictions & controls ->SMTP inbound Controls->"Allow messages only from the following the ineternet hosts to be sent to external internet Domain"
设置为192.168.1.30
7)
在花生壳的主页http://www.oray.net/注册一个花生壳护照；
申请两个域名AAA.net 和 BBB.cc
激活域名
在D1安装并启用一个花生壳客户端，比如花生壳2008；
这样就可以同过D1向外发送和接收邮件了
邮件地址分别为
user@AAA.net (D1所在的域）
user@BBB.cc (D2所在的域）