MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory (Exam #70-640)

✍ Scribed by Tomsho, Greg

• Publisher: Course Technology / Cengage Learning
• Year: 2009;2010
• Tongue: English
• Leaves: 653
• Series: Networking (Course Technology Inc.)
• Category: Library

✦ Synopsis

MCTS Guide to MicrosoftWindows Server 2008 Active Directory Configuration prepares students to develop the skills needed to manage a Windows Server 2008 system and to prepare to pass the MCTS 70-640 certification exam. While the focus of topics is on the configuration of Active Directory and related services, coverage of Windows foundational topics such as the file system and networking are also included. Extensive coverage begins with an introduction to Windows Server 2008 and goes on to active directory design, account management, group policy management and configuration, certificate services, AD LDS, AD RMS, AD FS, server core, Windows Hyper-V virtualization, and server management.

✦ Table of Contents

Front Cover......Page 1
Title Page......Page 6
Copyright......Page 7
Brief Contents......Page 8
CONTENTS......Page 10
INTRODUCTION......Page 18
CHAPTER 1 Introducing Windows Server 2008......Page 24
Server Operating System Versus Desktop Operating System......Page 25
Windows Server 2008 Editions......Page 26
Datacenter Edition......Page 27
Comparing Editions......Page 28
NTFS......Page 29
Microsoft Management Console......Page 31
Disk Management......Page 33
File and Printer Sharing......Page 35
Windows Networking Concepts......Page 36
Windows Networking Components......Page 37
Internet Information Services......Page 40
Active Directory Domain Services......Page 42
File Services......Page 43
Print Services......Page 44
New Features in Windows Server 2008......Page 45
Server Manager......Page 46
Server Core......Page 47
Hyper-V......Page 48
Storage Management Enhancements......Page 50
Network Access Protection......Page 51
Terminal Services Enhancements......Page 52
Key Terms......Page 54
Review Questions......Page 55
Case Projects......Page 59
CHAPTER 2 Installing Windows Server 2008......Page 60
Installing the First Server in a New Network......Page 61
Expanding Your Network......Page 74
Server Core: Windows That Doesn't Do Windows......Page 76
Windows Server Installation and Postinstallation Tasks......Page 77
Virtualize Your Server with Hyper-V......Page 83
Reviewing the Benefits of Virtualization......Page 85
Creating Virtual Machines with Hyper-V......Page 86
Basic Virtual Machine Management with Hyper-V Manager......Page 89
Chapter Summary......Page 92
Review Questions......Page 93
Case Projects......Page 97
CHAPTER 3 Introducing Active Directory......Page 98
Windows Active Directory......Page 99
Overview of the Active Directory Structure......Page 100
Installing Active Directory......Page 103
What's Inside Active Directory?......Page 105
The Active Directory Schema......Page 106
Active Directory Container Objects......Page 107
Active Directory Leaf Objects......Page 109
Locating Active Directory Objects......Page 114
Introducing Group Policies......Page 119
The Computer Configuration Node......Page 120
The User Configuration Node......Page 121
How Group Policies Are Applied......Page 124
Chapter Summary......Page 127
Key Terms......Page 128
Review Questions......Page 129
Case Projects......Page 131
CHAPTER 4 Active Directory Design and Security Concepts......Page 134
Working with Organizational Units......Page 135
OU Delegation of Control......Page 138
Active Directory Object Permissions......Page 140
Active Directory Terminology......Page 149
The Role of Forests......Page 153
Understanding Trusts......Page 157
Understanding Domains and Trees......Page 161
Understanding Sites......Page 162
Site Components......Page 164
Chapter Summary......Page 166
Key Terms......Page 167
Review Questions......Page 168
Case Projects......Page 171
CHAPTER 5 Account Management......Page 174
Managing User Accounts......Page 175
Creating and Modifying User Accounts......Page 177
Understanding Account Properties......Page 183
Using Contacts and Distribution Lists......Page 188
Working with User Profiles......Page 190
Roaming Profiles......Page 191
Mandatory Profiles......Page 192
Managing Group Accounts......Page 198
Group Scope......Page 199
Nesting Groups......Page 203
Converting Group Scope......Page 204
Default Groups in a Windows Domain......Page 205
Creating Computer Accounts......Page 209
Managing Computer Accounts......Page 210
Command-Line Tools for Managing Active Directory Objects......Page 211
Bulk Import and Export with CSVDE and LDIFDE......Page 214
Chapter Summary......Page 217
Review Questions......Page 218
Case Projects......Page 222
CHAPTER 6 Windows File and Print Services......Page 224
Windows File Systems......Page 225
The NTFS File System......Page 226
Securing Access to Files with Permissions......Page 238
Share Permissions......Page 239
NTFS Permissions......Page 240
Windows File Sharing......Page 246
Managing Shares with the Shared Folders Snap-in......Page 251
Accessing File Shares from Client Computers......Page 254
Windows Storage Management......Page 256
Share and Storage Management......Page 257
Distributed File System......Page 259
File Server Resource Manager......Page 261
Configuring a Print Server......Page 263
Key Terms......Page 269
Review Questions......Page 270
Case Projects......Page 273
CHAPTER 7 Configuring Group Policy......Page 276
Group Policy Objects (GPOs)......Page 277
Group Policy Replication......Page 285
Creating and Linking GPOs......Page 286
Group Policy Scope and Inheritance......Page 292
Changing Default GPO Inheritance Behavior......Page 294
Policies in the Computer Configuration Node......Page 301
Computer Configuration: Software Settings......Page 302
Computer Configuration: Windows Settings......Page 304
Computer Configuration: Administrative Templates......Page 314
User Configuration: Windows Settings......Page 315
Security Templates Snap-in......Page 321
Security Configuration and Analysis Snap-in......Page 322
Secedit.exe......Page 324
GPO Management with GPMC......Page 325
GPO Backup and Migration......Page 326
Group Policy Results and Modeling......Page 329
The ADMX Central Store......Page 330
Group Policy Preferences......Page 331
Chapter Summary......Page 334
Key Terms......Page 335
Review Questions......Page 336
Case Projects......Page 340
CHAPTER 8 Introduction to Windows Networking......Page 342
Windows Networking Terminology......Page 343
The Network and Sharing Center......Page 344
TCP/IP Operation and Configuration......Page 350
IPv4 Address Configuration......Page 351
IP Configuration Command-Line Tools......Page 357
Managing Protocols......Page 361
Internet Protocol Version 6......Page 366
IPv6 Overview......Page 367
Chapter Summary......Page 370
Review Questions......Page 371
Case Projects......Page 374
CHAPTER 9 Configuring DNS for Active Directory......Page 376
The Structure of DNS......Page 377
DNS Zones......Page 380
Installing DNS......Page 384
Creating DNS Zones......Page 385
Aging and Scavenging Resource Records......Page 391
Start of Authority Records......Page 394
Name Server Records......Page 395
Zone Delegation......Page 396
Zone Transfers......Page 398
Using WINS with DNS......Page 401
DNS Forwarders......Page 403
Root Hints......Page 405
Round Robin......Page 406
Recursive Queries......Page 407
Event and Debug Logging......Page 408
DNS Troubleshooting......Page 410
Monitoring DNS Performance......Page 412
Chapter Summary......Page 413
Key Terms......Page 414
Review Questions......Page 415
Case Projects......Page 419
CHAPTER 10 Configuring and Maintaining the Active Directory Infrastructure......Page 420
Forest Functional Levels......Page 421
Domain Functional Levels......Page 422
Raising Domain and Forest Functional Levels......Page 425
Preparing a Forest and Domain for Windows Server 2008 with Adprep......Page 429
Removing Domain Controllers and Domains......Page 430
Migrating Domain Objects......Page 432
Configuring Shortcut Trusts......Page 433
Configuring Forest Trusts......Page 437
Configuring Trust Properties......Page 441
Configuring Intrasite Replication......Page 444
Knowledge Consistency Checker (KCC)......Page 445
Connection Objects......Page 446
Global Catalog Replication......Page 449
Special Replication Situations......Page 450
Creating Sites......Page 451
Configuring Site Links......Page 455
Working with Operations Master Roles......Page 459
Operations Master Best Practices......Page 460
Managing Operations Master Roles......Page 461
Chapter Summary......Page 463
Key Terms......Page 464
Review Questions......Page 465
Case Projects......Page 468
CHAPTER 11 Active Directory Certificate Services......Page 472
Public Key Infrastructure Overview......Page 473
PKI Terminology......Page 474
AD CS Terminology......Page 476
Standalone and Enterprise CAs......Page 477
Creating a CA Hierarchy......Page 478
Installing the AD CS Role......Page 479
Configuring Certificate Templates......Page 484
Configuring Certificate Enrollment Options......Page 487
Configuring the Online Responder......Page 495
Creating a Revocation Configuration......Page 497
CA Backup and Restore......Page 499
Key and Certificate Archival and Recovery......Page 500
Chapter Summary......Page 503
Review Questions......Page 504
Case Projects......Page 507
CHAPTER 12 Additional Active Directory Server Roles......Page 508
Active Directory LDS Overview......Page 509
Installing and Configuring AD LDS......Page 510
AD FS Overview......Page 517
AD FS Role Services......Page 518
AD FS Design Concepts......Page 519
Active Directory Rights Management Service......Page 521
AD RMS Components......Page 522
AD RMS Deployment......Page 523
Read Only Domain Controllers......Page 525
RODC Installation......Page 526
Credential Caching......Page 528
Read-Only DNS......Page 531
Key Terms......Page 532
Review Questions......Page 533
Case Projects......Page 536
CHAPTER 13 Server Management and Monitoring......Page 538
Windows Server Backup and Restore......Page 539
Active Directory Backup and Restoration......Page 547
Active Directory Defragmentation......Page 550
Active Directory Monitoring......Page 551
Event Viewer......Page 552
Task Manager......Page 553
Reliability and Performance Monitor......Page 554
Windows System Resource Manager......Page 562
Monitoring Active Directory Replication......Page 564
Common Server Core Configuration Tasks......Page 565
Managing Server Core Remotely......Page 567
Additional Server and Active Directory Tools......Page 568
Chapter Summary......Page 569
Review Questions......Page 570
Case Projects......Page 573
APPENDIX A: MCTS 70-640 Exam Objectives......Page 576
APPENDIX B: Windows Server 2008 Active Directory Configuration Resources......Page 580
APPENDIX C: Virtual Machine Instructions for Selected Activities......Page 584
APPENDIX D: A Step-by-Step Guide to Using Server Virtualization Software......Page 594
GLOSSARY......Page 630
INDEX......Page 636