Editing Windows 2000 (section)

=== Server family features ===
The Windows 2000 Server family consists of Windows 2000 Server, Windows 2000 Advanced Server, Windows 2000 Small Business Server, and Windows 2000 Datacenter Server.

All editions of Windows 2000 Server have the following services and features built in:
* [[Routing and Remote Access Service]] (RRAS) support, facilitating [[Dial-up access|dial-up]] and [[Virtual Private Network|VPN]] connections using [[IPsec]], [[L2TP]] or [[L2TP#L2TP/IPsec|L2TP/IPsec]], support for [[RADIUS]] authentication in [[Internet Authentication Service]], network connection sharing, [[Network Address Translation]], [[unicast]] and [[multicast]] [[routing]] schemes.
* Remote access security features: Remote Access Policies for setup, verify Caller ID (IP address for VPNs), callback and Remote access account lockout<ref>{{Cite web |date=September 11, 2008 |title=Elements of Secure Remote Access |url=https://technet.microsoft.com/en-us/library/cc958001.aspx |url-status=live |archive-url=https://web.archive.org/web/20111218042732/http://technet.microsoft.com/en-us/library/cc958001.aspx |archive-date=December 18, 2011 |access-date=November 13, 2011 |website=Technet.microsoft.com}}</ref>
* Autodial by location feature using the ''Remote Access Auto Connection Manager'' [[Windows service|service]]
* [[Extensible Authentication Protocol]] support in [[Internet Authentication Service|IAS]] (EAP-MD5 and EAP-TLS) later upgraded to PEAPv0/EAP-MSCHAPv2 and PEAP-EAP-TLS in Windows 2000 SP4
* [[Microsoft DNS|DNS]] server, including support for [[Dynamic DNS]]. [[Active Directory]] relies heavily on DNS.
* [[IPsec]] support and TCP/IP filtering
* [[Smart card]] support
* Microsoft Connection Manager Administration Kit (CMAK) and Connection Point Services
* Support for [[Distributed File System (Microsoft)|distributed file systems]] (DFS)
* [[Hierarchical Storage Management]] support including remote storage,<ref>{{Cite web |date=October 30, 2006 |title=How to use Remote Storage in Windows 2000 Server |url=http://support.microsoft.com/kb/317369 |url-status=live |archive-url=https://web.archive.org/web/20120110100918/http://support.microsoft.com/kb/317369 |archive-date=January 10, 2012 |access-date=November 13, 2011 |website=Support.microsoft.com}}</ref> a service that runs with [[NTFS]] and automatically transfers files that are not used for some time to less expensive storage media
* [[Fault-tolerant design|Fault tolerant]] volumes, namely [[Redundant array of independent disks#RAID 1|Mirrored]] and [[Redundant array of independent disks#RAID 5|RAID-5]]
* [[Group Policy]] (part of [[Active Directory]])
* ''IntelliMirror'', a collection of technologies for fine-grained [[Systems management|management]] of Windows 2000 Professional clients that duplicates users' data, applications, files, and settings in a centralized location on the network. IntelliMirror employs technologies such as [[Group Policy]], [[Windows Installer]], [[Roaming profile]]s, [[Folder redirection|Folder Redirection]], ''[[Offline Files]]'' (also known as ''Client Side Caching'' or CSC), [[File Replication Service]] (FRS), Remote Installation Services (RIS) to address desktop management scenarios such as user data management, user settings management, software installation and maintenance.
* [[COM+]], [[Microsoft Transaction Server]] and [[Distributed Transaction Coordinator]]
* [[Microsoft Message Queuing|MSMQ 2.0]]
* [[Telephony Application Programming Interface|TAPI]] 3.0
* [[Integrated Windows Authentication]] (including [[Kerberos (protocol)|Kerberos]], Secure channel and [[SPNEGO]] (Negotiate) SSP packages for [[Security Support Provider Interface]] (SSPI)).
* [[MS-CHAP]] v2 protocol
* [[Public Key Infrastructure]] (PKI) and [[Certificate authority|Enterprise Certificate Authority]] support
* [[Terminal Services]] and support for the [[Remote Desktop Protocol]] (RDP)
* [[Internet Information Services]] (IIS) 5.0 and [[Windows Media Services]] 4.1
* Network [[quality of service]] features<ref>{{Cite web |title=An Overview of Windows 2000 Quality of Service |url=https://technet.microsoft.com/en-us/library/bb742478.aspx |url-status=live |archive-url=https://web.archive.org/web/20111203122556/http://technet.microsoft.com/en-us/library/bb742478.aspx |archive-date=December 3, 2011 |access-date=November 13, 2011 |website=Technet.microsoft.com}}</ref>
* A new ''Windows Time service'' which is an implementation of [[Simple Network Time Protocol]] (SNTP) as detailed in IETF {{IETF RFC|1769}}. The Windows Time service synchronizes the date and time of computers in a domain<ref>{{Cite web |date=October 26, 2007 |title=Basic Operation of the Windows Time Service |url=http://support.microsoft.com/kb/224799 |url-status=live |archive-url=https://web.archive.org/web/20111102142801/http://support.microsoft.com/kb/224799 |archive-date=November 2, 2011 |access-date=November 13, 2011 |website=Support.microsoft.com}}</ref> running on Windows 2000 Server or later. Windows 2000 Professional includes an SNTP client.

The Server editions include more features and components, including the Microsoft Distributed File System (DFS), Active Directory support and fault-tolerant storage.

==== Distributed File System ====
{{main|Distributed File System (Microsoft)}}

The Distributed File System (DFS) allows [[Server Message Block|shares]] in multiple different locations to be logically grouped under one folder, or ''DFS root''. When users try to access a [[Shared resource|network share]] off the DFS root, the user is really looking at a ''DFS link'' and the DFS server transparently redirects them to the correct [[file server]] and share. A DFS root can only exist on a Windows 2000 version that is part of the server family, and only one DFS root can exist on that server.

There can be two ways of implementing a DFS namespace on Windows 2000: either through a standalone DFS root or a domain-based DFS root. Standalone DFS allows for only DFS roots on the local computer, and thus does not use Active Directory. Domain-based DFS roots exist within Active Directory and can have their information distributed to other [[domain controller]]s within the domain – this provides [[Fault-tolerant system|fault tolerance]] to DFS. DFS roots that exist on a domain must be hosted on a domain controller or on a domain member server. The file and root information is replicated via the Microsoft [[File Replication Service]] (FRS).<ref>{{Cite web |title=Microsoft KB article 812487: Overview of DFS in Windows 2000 |url=http://support.microsoft.com/kb/812487 |url-status=live |archive-url=https://web.archive.org/web/20070214115202/http://support.microsoft.com/kb/812487 |archive-date=February 14, 2007 |access-date=September 17, 2006}}</ref>

==== Active Directory ====
{{main|Active Directory}}

A new way of organizing [[Windows Server domain|Windows network domains]], or groups of resources, called Active Directory, is introduced with Windows 2000 to replace Windows NT's earlier domain model. Active Directory's hierarchical nature allowed administrators a built-in way to manage user and computer policies and user accounts, and to automatically deploy programs and updates with a greater degree of scalability and centralization than provided in previous Windows versions. User information stored in Active Directory also provided a convenient phone book-like function to end users. Active Directory domains can vary from small installations with a few hundred objects, to large installations with millions. Active Directory can organise and link groups of domains into a contiguous [[domain name]] space to form ''trees''. Groups of trees outside of the same namespace can be linked together to form ''forests.''

Active Directory services could always be installed on a Windows 2000 Server Standard, Advanced, or Datacenter computer, and cannot be installed on a Windows 2000 Professional computer. However, Windows 2000 Professional is the first client operating system able to exploit Active Directory's new features. As part of an organization's migration, Windows NT clients continued to function until all clients were upgraded to Windows 2000 Professional, at which point the Active Directory domain could be switched to [[native mode]] and maximum functionality achieved.

Active Directory requires a DNS server that supports [[SRV resource record]]s, or that an organization's existing DNS infrastructure be upgraded to support this. There should be one or more [[domain controller]]s to hold the Active Directory database and provide Active Directory [[directory services]].

==== Volume fault tolerance ====
Along with support for simple, spanned and striped volumes, the Windows 2000 Server family also supports fault-tolerant volume types. The types supported are ''mirrored volumes'' and ''RAID-5 volumes'':
* Mirrored volumes''':''' the volume contains several disks, and when data is written to one it is also written to the other disks. This means that if one disk fails, the data can be totally recovered from the other disk. Mirrored volumes are also known as [[Redundant array of independent disks#RAID 1|RAID-1]].
* RAID-5 volumes''':''' a [[RAID 5|RAID-5]] volume consists of multiple disks, and it uses [[Block (data storage)|block]]-level striping with parity data distributed across all member disks. Should a disk fail in the array, the parity blocks from the surviving disks are combined mathematically with the data blocks from the surviving disks to reconstruct the data on the failed drive "on-the-fly."