Configure USB flash drive as key of your computer

1. First of All Insert USB Drive on Windows PC then you will have to Change USB Drive Letter to A.

2. Press Windows + R to Open Run Command.

3. Now enter Syskey command and Click OK.

4. Now Securing the Windows Account Database windows prompt the Select Encryption Enabled button and then Click on Update.

5. Now Startup key window prompt then Select System Generated Password button and then Select Store Startup Key on Floppy Disk and then Click on OK.

6. Now it will ask to insert USB drive to Save Startup Key then Click on OK Now It will show Startup Key has been saved on USB Drive then again Click on OK.
7. now Account Database Startup Key was changed now Click on OK.

Now you restart you PC then you will see the Windows Startup Key Disk will prompt at Start it require to Insert USB Flash Drive to Login at Startup.

Configure your computer to work normally
1. Follow above Steps 2 to 4.
2. Now Select System Generated Password Button and then Select Store Startup Key Locally and then Click on OK.

3. It will ask to insert that USB Drive then Click on Ok and Again Click on OK.
restart your system then it will start normally there is no need to Insert USB Drive at Startup.

Enable write protection usb flash drive

Enable Write Protection USB Flash Drive

1. Plug your USB Flash Drive into your Computer which you want to make write Protected.

2. Now press StartButton and Type CMD and hit enter. Command prompt windows will show on your computer screen.

 

3: Now on Command Prompt windows type DISKPARTon the Command Line and hit Enter. DISKPART is a utility through which can access Hard Drive Partition easily.

4. Now you have accessed Diskpart utility, type List Diskcommand on the Command Line. It will show physical attached disk with your Computer.

5. You will have to select USB Flash Drive disk from the list, in my case my Flash Drive is Disk 1. Select Disk 1and hit Enter button. It will show you message Disk 1 is selected.

 

6. Now enter this command ATTRIBUTES DISK SET READONLYcommand in Command Line and then hit Enter. Then it will show message “Disk attributes set successfully”. Unplug your USB drive from your computer and plug it again.

 

7. Your Flash Drive has been write Protected and work read-only if you will try to add, remove or Change Data any data, it will show an Error message” The disk is Write-Protected” 

 

Now Write Protection has been enabled on your Flash-drive and no need to worry about to access data from unauthorized access. It also safe you disk from Malware and Viruses attack.

HOW TO BACKUP AND RESTORE ACTIVE DIRECTORY ON SERVER 2008

Let’s talk about how to backup AD in Windows Server 2008 and how to restore it. Today I’ll show you:

• what you need to do to get your Server 2008 ready for backup
• how to backup Active Directory on Server 2008
• how to perform an Authoritative Restore of Active Directory
• how to perform Active Directory Snapshots

Prerequisites: Getting Server 2008 Ready for Backup

Before you can backup Server 2008 you need to install the backup features from the Server Manager.

1. To install the backup features click Start → Server Manager.

2. Next click Features → Add Features

3. Scroll to the bottom and select both the Windows Server Backup and the Command Line Tools

4. Click Next, then click Install

Backing up Server 2008 Active Directory

Now that we have the backup features installed we need to backup Active Directory. You could do a complete server backup, but what if you need to do an authoritative restore of Active Directory?

As you’ll notice in Server 2008, there isn’t an option to backup the System State data through the normal backup utility.

So what do we do? We need to go “command line” to backup Active Directory.

1. Open up your command prompt by clicking Start and type “cmd” and hit enter.

2. In your command prompt type “wbadmin start systemstatebackup -backuptarget:e:” and press enter.

Note: You can use a different backup target of your choosing

3. Type “y” and press enter to start the backup process.

When the backup is finished running you should get a message that the backup completed successfully. If it did not complete properly you will need to troubleshoot.

Now you have a system state backup of your 2008 Server!

Authoritative Restore of Active Directory

So now what if you accidentally delete an OU, group, or a user account and it’s already replicated to your other servers? We will need to perform an authoritative restore of the Active Directory object you accidentally deleted.

1. To do this you will need to boot into DSRM (Directory Services Restore Mode) by restarting your server and pressing F8 during the restart.

2.Choose Directory Services Restore Mode from the Advanced Boot menu.

3. Login to your server with your DSRM password you created during Active Directory installation.

4. Once you’re logged into your server and in DSRM safe mode, open a command prompt by clicking Start, type “cmd“, and press enter.

5. To make sure you restore the correct backup it’s a good idea to use the “wbadmin get versions” command and write down the version you need to use.

6. Now we need to perform a non-authoritative restore of Active Directory by typing “wbadmin start systemstaterecovery -version:04/14/2009-02:39“.

Note: The version of backup will vary depending on your situation. Type “y” and press enter to start the non authoritative restore.

7. Go grab some coffee and take a break while the restore completes.

8. You can mark the sysvol as authoritative by adding the –authsysvol switch to the end of the wbadmin command.

9. But if you want to restore a specific Active Directory object then you can use the ever familiarntdsutil.

For this example we are going to restore a user account with a distinguished name of CN=Test User,CN=Users,DC=home,DC=local. So the commands would be:

ntdsutil
activate instance ntds
authoritative restore
restore object “cn=Test User,cn=Users,dc=home,dc=local”

Note: The quotes are required

10. Reboot your server into normal mode and you’re finished. The object will be marked as authoritative and replicate to the rest of your domain.

Using Active Directory Snapshots

There is a really cool new feature in Windows Server 2008 called Active Directory Snapshots. Volume Shadow Copy Service now allows us to take a snapshot of Active Directory as a type of backup. They are very quick to create and serve as another line of defense for your backup strategy.

With your server booted into normal mode open a command prompt by clicking Start, type “cmd“, and press enter.

We are going to use the ntdsutil again for creating the Active Directory snapshots. The commands are:

ntdsutil
snapshot
activate instance ntds
create
quit
quit

So now that you have a snapshot of AD, how do you access the data? First we need to mount the snapshot using ntdsutil. The commands are:

ntdsutl
snapshot
list all
mount 1 — (Note: You should mount the correct snapshot you need; for this example there is only 1.)
quit
quit

Your snapshot is mounted, but how do you access the data? We need to use the dsamain command to accomplish this. Then we need to select an LDAP port to use. The command is as follows:

dsamain –dbpath c:\$SNAP_200905141444_VOLUMEC$\WINDOWS\NTDS\ntds.dit –ldapport 10001

The result should look like this:

Now we need to go to Start, Administrative Tools, then Active Directory Users andComputers.

Right click Active Directory Users and Computers and select Change Domain Controller.

In the area that says < Type a Directory Server name [:port] here > enter the name of your server and the LDAP port you used when running the dsamain command.

For my example it would be: WIN-V22UWGW0LU8.HOME.LOCAL:10001

Now you can browse the snapshot of Active Directory without affecting anything else negatively.

Your AD

Installation and configuration FTP server in RHEL 7

File Transfer Protocol (FTP) is a most popular way to transfer files from one machine to another machine across a network in heterogeneous environment. If you take an example of NFS (Network File system) it has an restriction to it can’t be access from other platform such as windows. FTP server does not have such a restriction it can be accessed from Linux OR windows OR OSx. Let’s see installation and configuration FTP server in RHEL 7.

• Whenever we install vsftpd package installed then ftp user will be created
• ftp user home directory will be set as /vat/ftp ftp’s document root path.
• Vsftpd has been very popular because it is a very fast.
• Lightweight FTP server and very easy to configure.

Server profile:
Packages : vsftpd
Daemon : vsftpd
Port Numbers : 20, 21
Config file path : /etc/vsftpd/vsftpd.conf

Features:

1. It is very secure and fast
2. Bandwidth throttling
3. IPv6 ready
4. Encryption support through SSL integration
5. Virtual IP configurations
6. Virtual users
7. Per-user configuration
8. Per-source-IP configuration and limits

Installation and Configuration FTP server in RHEL 7

Before going to install the vsftpd packages, ensure that the server has access to internet. If it doesn’t have, configure local YUM repository for vsftpd packages installation.

Install vsftpd yum command

[root@Tech Tutorials ~]# yum install -y vsftpd*

Edit the configuration file. /etc/vsftpd/vsftpd.conf is the main configuration file of ftp server.

[root@Tech Tutorials ~]# vi /etc/vsftpd/vsftpd.conf

#Disable anonymous user Access to secure FTP server
 anonymous_enable=NO
 Allow local users to login in vsftpd.
 local_enable=YES
 Enable write access to local users.
 write_enable=YES
 Uncomment the line chroot_local_user
 chroot_local_user=YES
 Enable writable chroot.
 allow_writeable_chroot=YES

:wq

Restart and enable the vsftpd service

 [root@Tech Tutorials~]# systemctl restart vsftpd.service
[root@Tech Tutorials~] # systemctl enable vsftpd.service

Create a rule for Firewall to allow FTP ports
Now need to allow default FTP port 20 and 21 through firewall.

[root@Tech Tutorials~]# firewall-cmd --permanent --zone=public --add-port=21/tcp
[root@Tech Tutorials~]# firewall-cmd --permanent --zone=public --add-port=21/tcp
[root@Tech Tutorials~]# firewall-cmd --reload

Apply SELinux context to ftp directory. Enable write permission on home directories.

[root@Tech Tutorials~]# semanage fcontext -a -t public_content_rw_t "/var/ftp/pub(/.*)?"
[root@Tech Tutorials~]# restorecon -R /var/ftp/pub
[root@Tech Tutorials~]# setsebool -P ftpd_anon_write 1 OR on

Edit configuration file for enable upload files.

[root@Tech Tutorials~]# vim /etc/vsftpd/vsftpd.conf
 anon_upload_enable=yes #     <-- #Un-Comment this line
:wq!
[root@Tech Tutorials~]# systemctl restart vsftpd
[root@Tech Tutorials~]# chown ftp /var/ftp/pub

Client Side configuration

Install ftp package through yum command

[root@Client ~]# yum install ftp

Test the ftp server and downloading files.

[root@Client ~]# ftp ftp.server.com
ftp> ls
 ftp> cd pub
 ftp> get file1
 ftp>!ls
 ftp> bye

For files uploading. Test the FTP server

[root@Client~]# ftp ftp.server.com
 ftp> cd pub
 ftp> ls
 ctp>!ls
 ftp> put file1
 ftp>bye

Conclusion

Installation and configuration FTP server is completed. FTP protocol is not an platform independent which support multiple platforms.