In your effort to become an MCSE under Windows 2000, you'll need to understand the inner workings of these three crucial services.
Service Station: DNS, DHCP, and WINS
In your effort to become an MCSE under Windows 2000, you'll need to understand the inner workings of these three crucial services.
- By Harry Brelsford
- June 01, 2000
Part of working with Windows 2000 Server is learning
what to implement and what not to implement. This month
I cover three services, DNS, DHCP, and WINS, all possible
implementation candidates. Your server (and network) will
run just fine without DNS, DHCP, or WINS installed, depending
on your situation, so why would you want to run those
services? Let's start with definitions.
Definitions
-
DNS--The Domain Name System
is the default name resolution mechanism for both
Win2K Server and the Internet. It resolves host names
(www.mcpmag.com) to TCP/IP addresses (209.27.114.5).
-
DHCP--Officially known
as Dynamic Host Configuration Protocol, DHCP is used
in organizations to supply network connectivity. The
DHCP service, commonly referred to as the DHCP Server,
issues TCP/IP networking addresses. More on this in
a minute.
-
WINS--The Windows Internet
Name Service is used to find network objects (like
computers) when you're using NetBIOS naming (such
as Machine01). Its roots date back to the NetBEUI
protocol days (when NetBEUI was in favor). You might
know it as the way computer names are displayed when
you double-click My Network Places in Win2K or Network
Neighborhood in Windows 98 and 95.
What These Services Do
DNS is actually pretty easy to understand. It's analogous
to calling directory assistance to get a phone number.
When you make this type of call, you typically communicate
that you want to speak with John Smith in Placerville,
California. The operator resolves the name John Smith
in that location to a phone number such as 206-555-1212.
Then you dial the number and you're connected to John
Smith or his voicemail. DNS resolves host names (the machine
named JohnSmith01) to an IP address (10.0.0.5). You're
then connected to the host machine.
Historically, a drawback to DNS was the fact the DNS
tables, which are consulted to resolve host names to IP
addresses, were static. That is, somewhere someone (or
something) had to make an entry into a DNS file. That
information was then replicated out over the network or
the whole Internet to other DNS servers to make sure everyone
was up to date. The drawback was the manual administration
requirement of DNS. That drawback has been mitigated to
some extent in Win2K because the DNS model is now dynamic.
That is, records in the DNS database are now updated automatically
without operator intervention. (You may or may not know
that in the good old days, someone somewhere had to enter
DNS records manually into a DNS database. Talk about a
bottleneck.)
Master Tip: One big
assumption about dynamic DNS is that the DNS servers support
the RFC (RFC 2136: Dynamic Updates in the Domain Name
System or DNS UPDATE) that allows dynamic updates to DNS.
Clearly, dynamic DNS is intended for homogeneous Win2K
Server networks. Older DNS servers, such as some Unix-based
machines, can't be dynamically updated.
DHCP is one of those things you either love or hate.
Many people love DHCP because it simplifies the life of
the IT admin. Not only does DHCP dish out IP addresses
to client machines on your Win2K network, but it allows
you to provide robust configurations as part of that dishin'
process. For example, you can robustly configure a client
machine with settings ranging from Time Offset to StreetTalk
Directory Assistance (STDA) Servers. Granted, these are
very specific settings (the first example deals with Greenwich
Mean Time and the second deals with Banyan's directory
service (see my April 2000 column for an education on
directory services). Bottom line? You name it when it
comes to TCP/IP-related client machine configurations
in Win2K, and DHCP can do it.
So what's not to love? Several things. MCSEs have become
disenchanted with DHCP because when it doesn't work, the
user gets a notice early in the logon process communicating
that no DHCP server was available. Not only can't the
user log on at this point, but worse, the user typically
can't work productively since they can't access network
resources and perceive their lives to be doomed otherwise.
In other words, the phrase, "No DHCP server available,"
is debilitating in the organization.
It has also been my experience that DHCP performs poorly
in widely dispersed and subnetted enterprises. To be honest,
sometimes it wasn't always apparent why DHCP does or doesn't
perform well; but looking back to one incident at a large
Pacific Northwest hospital, the IT manager took the fleet
of clients machines back to static IP addresses. Perhaps
you have your own negative experience with DHCP and can
relate to this. If you don't use DHCP to serve IP addresses,
you'll need to configure the IP address of your client
machines manually.
Master Tip: I've used
DHCP to pull an MCSE-quality rabbit out of my consulting
hat on more than one occasion. For example, I was once
confronted with a client situation whereby the client
site was anticipating it would receive a range of real
IP addresses from its ISP within a matter of days. Each
PC was to then have a real IP address. Well, days grew
into weeks. In order to get this site up and running,
I created an internal network of IP addresses (using 10.0.0.x)
and had DHCP assign the addresses to the workstations.
The DHCP scope was defined to only lease the addresses
for 72-hours. That way, with the addresses frequently
renewing, when the real IP addresses finally arrived,
rolling out those IP addresses would only be a function
of creating a new DHCP scope with the real IP addresses
and disabling the original DHCP scope. In plain English,
the old 10.0.0.x IP addresses wouldn't be renewed and
the new IP addresses would be leased out. Good stuff to
say the least. More on DHCP scopes in a moment.
WINS is there if you need it and, likewise, not there
if you don't. WINS is included in Win2K Server for legacy
support reasons, the biggest of which is to support legacy
environments such as older NT Server machines. WINS resolves
NetBIOS names to machine addresses. As a mere earthling
you can work with friendly machine names and actually
find the machine (browsing through My Network Places is
an example of this). WINS has a Madison Avenue-like feature
whereby it's updated dynamically. That is, it updates
its name resolution tables dynamically by listening to
machines that advertise their respective NetBIOS names
(as in "Hello! I'm ACCOUNTING01"). That dynamic
updating of its name resolution tables is one of the cool
features that undoubtedly was "borrowed" from
WINS when the smart brains at Microsoft looked for ways
to improve DNS!
Hands-on!
The easiest way to implement DNS and DHCP is to work
from the Configure Your Server window (see Figure 1).
This interface is meant to ease, if not hide, the complexities
of installing services. It's conceptually similar to the
SBS Console in Microsoft Small Business Server.
|
Figure 1. The fool-proof way
to implement DNS and DHCP. |
If you prefer the hard way or, more importantly, you
want to drop down to a granular level to learn DNS and
DHCP to pass your Win2K certification exams, you'll want
to install these services from the Add/Remove Programs
applet in Control Panel by following these steps.
- Click the Start button on your desktop.
- Select Settings and then Control Panel.
- Double-click Add/Remove Programs
- Click Add/Remove Windows Components in the left pane
of the Add/Remove Programs dialog box.
- Select Networking Services in the center of the Windows
Components Wizard dialog box.
- Click the Details button.
- The Networking Services dialog box appears. Select
the Domain Name System (DNS), Dynamic Host Configuration
Protocol (DHCP) and Windows Internet Name Service (WINS)
checkboxes as seen in Figure 2.
|
Figure 2. This is how you manually
install DNS, DHCP, and WINS (via the subcomponents
screen of Networking Services). Note the services
are defined in the Description area of the dialog
box. |
This is how you would install WINS (as seen in Figure
1 above).
- Click OK.
- Click Next on the Windows Components Wizard screen.
- When asked, supply the Win2K Server CD-ROM.
- Click Finish when the Completing the Windows Components
Wizard screen appears.
- Close the Add/Remove Programs dialog box and the
Control Panel. By the way, did you notice that you didn't
need to reboot? It's a pleasant change from the old
NT Server 4.0 days when installing every new service
required a reboot.
Configuring each service (DNS, DHCP, or WINS) occurs
via that service's respective Microsoft Management Console
(MMC). I'll leave configuring DNS for another month-because
it's such a huge topic!). Let's take a quick peek at configuring
DHCP.
- Launch the DHCP MMC from the Administrative Tools
program group.
- Right-click the Win2K server to display the secondary
menu.
- Select New Scope.
- Click Next at the New Scope Wizard.
- Provide a scope name (for example, "Headquarters--Scope
10.x.x.x) and a description and click Next.
- Provide IP address range information. For example,
the Start IP address might be 10.0.0.10 and the End
IP address might be 10.0.0.100. Provide the Subnet mask
information. Your screen should appear similar to Figure
3. Click Next.
|
Figure 3. DHCP scopes are configured
via the New Scope Wizard. Here the IP address and
Subnet Mask information is entered. |
- On the Add Exclusions screen, you typically provide
a small range of IP addresses that aren't leased (say
10.0.0.20 to 10.0.0.25) in this example. These addresses
are typically used for servers and network printers.
Click Next.
Master Tip: No Self
Service. A Win2K Server that acts as a DHCP server must
have a static IP address. It can't serve itself a dynamic
IP address. DHCP only leases IP addresses to clients (including
other Win2K Servers) but not to itself. Note that the
IP address of the server acting as the DHCP server is
typically included in the exclusions (referenced in step
7 above).
- You'll provide a lease duration on the Lease Duration
screen. This is typically measured in days (eight days
is the default). Practically speaking, this is how often
the client machines will renew their IP addresses from
the DHCP server. Click Next.
- The Configure DHCP Options screen appears. Select
Yes or No to configure options. Click Next.
- Provide a router IP address on the Router (Default
Gateway) address screen if you have a router or server
acting as a default gateway on your network. Click Next.
- Provide the Parent domain name and DNS server information.
Click Next.
- Provide WINS server information (name and IP address)
if you have a WINS server on your network. Click Next.
Master Tip: The same
Win2K Server machine can act as a DNS, DHCP, and WINS
server.
- On the Activate Scope screen, select Yes or No depending
on whether you want to activate your new DHCP scope
now or later. Click Next.
- Click Finish on the Completing the New Scope Wizard
screen. You have now configured a DHCP scope.
To configure DHCP scope properties (a good thing to practice
to pass the demanding Win2K MCSE certification exams),
right click on the scope folder in the right pane of the
DHCP MMC and select Properties. The resulting screen,
the Scope DHCP Server Properties, should look similar
to Figure 4.
|
Figure 4. Learn the finer points
of DHCP configurations by viewing the property sheet
for the DHCP scope. |
Another DHCP dialog box of interest is the Scope Options
dialog box seen in Figure 5. Here you configure minute
details of a DHCP scope. Again, very important on the
Win2K MCSE certification exams.
|
Figure 5. Learn those Scope Option
selections for both your real world use of Win2K Server
and passing the Win2K MCSE certification exams. |
Exam Implications
And speaking of exams (and without speaking outside of
school or violating my Microsoft non-disclosure agreement),
I can safely say that once again Microsoft has placed
a premium on "stick-time," otherwise known as
the long hours you pound the Win2K keyboard. Books are
fine, and it never hurts to read columns such as this
(for which I thank you), but there's nothing like stick
time. For example, I recently took the beta test version
of 70-216, Implementing and Administering a Microsoft
Win2K Network Infrastructure exam, and discovered that-beyond
the typical branch office and remote user story problems-over
half of the exam was dedicated to DNS, DHCP, and WINS
topics. While some of these questions were ivory tower
planning questions, many more were hands-on dialog box
selection-type questions. Your heard it here first.