MCTS GUIDE TO CONFIGURING MICROSOFT WINDOWS SERVER 2008 ACTIVE DIRECTORY (EXAM # 70-640)

MCTS Guide to Microsoft-Windows Server? 2008 Active Directory Configuration prepares students to develop the skills needed to manage a Windows Server 2008 system and to prepare to pass the MCTS 70-640 certification exam. While the focus of topics is on the configuration of Active Directory and related services, coverage of Windows foundational topics such as the file system and networking are also included. Extensive coverage begins with an introduction to Windows Server 2008 and goes on to active directory design, account management, group policy management and configuration, certificate services, AD LDS, AD RMS, AD FS, server core, Windows Hyper-V virtualization, and server management. Front Cover......Page 1 Title Page......Page 6 Copyright......Page 7 Brief Contents......Page 8 CONTENTS......Page 10 INTRODUCTION......Page 18 CHAPTER 1 Introducing Windows Server 2008......Page 24 Server Operating System Versus Desktop Operating System......Page 25 Windows Server 2008 Editions......Page 26 Datacenter Edition......Page 27 Comparing Editions......Page 28 NTFS......Page 29 Microsoft Management Console......Page 31 Disk Management......Page 33 File and Printer Sharing......Page 35 Windows Networking Concepts......Page 36 Windows Networking Components......Page 37 Internet Information Services......Page 40 Active Directory Domain Services......Page 42 File Services......Page 43 Print Services......Page 44 New Features in Windows Server 2008......Page 45 Server Manager......Page 46 Server Core......Page 47 Hyper-V......Page 48 Storage Management Enhancements......Page 50 Network Access Protection......Page 51 Terminal Services Enhancements......Page 52 Key Terms......Page 54 Review Questions......Page 55 Case Projects......Page 59 CHAPTER 2 Installing Windows Server 2008......Page 60 Installing the First Server in a New Network......Page 61 Expanding Your Network......Page 74 Server Core: Windows That Doesn't Do Windows......Page 76 Windows Server Installation and Postinstallation Tasks......Page 77 Virtualize Your Server with Hyper-V......Page 83 Reviewing the Benefits of Virtualization......Page 85 Creating Virtual Machines with Hyper-V......Page 86 Basic Virtual Machine Management with Hyper-V Manager......Page 89 Chapter Summary......Page 92 Review Questions......Page 93 Case Projects......Page 97 CHAPTER 3 Introducing Active Directory......Page 98 Windows Active Directory......Page 99 Overview of the Active Directory Structure......Page 100 Installing Active Directory......Page 103 What's Inside Active Directory?......Page 105 The Active Directory Schema......Page 106 Active Directory Container Objects......Page 107 Active Directory Leaf Objects......Page 109 Locating Active Directory Objects......Page 114 Introducing Group Policies......Page 119 The Computer Configuration Node......Page 120 The User Configuration Node......Page 121 How Group Policies Are Applied......Page 124 Chapter Summary......Page 127 Key Terms......Page 128 Review Questions......Page 129 Case Projects......Page 131 CHAPTER 4 Active Directory Design and Security Concepts......Page 134 Working with Organizational Units......Page 135 OU Delegation of Control......Page 138 Active Directory Object Permissions......Page 140 Active Directory Terminology......Page 149 The Role of Forests......Page 153 Understanding Trusts......Page 157 Understanding Domains and Trees......Page 161 Understanding Sites......Page 162 Site Components......Page 164 Chapter Summary......Page 166 Key Terms......Page 167 Review Questions......Page 168 Case Projects......Page 171 CHAPTER 5 Account Management......Page 174 Managing User Accounts......Page 175 Creating and Modifying User Accounts......Page 177 Understanding Account Properties......Page 183 Using Contacts and Distribution Lists......Page 188 Working with User Profiles......Page 190 Roaming Profiles......Page 191 Mandatory Profiles......Page 192 Managing Group Accounts......Page 198 Group Scope......Page 199 Nesting Groups......Page 203 Converting Group Scope......Page 204 Default Groups in a Windows Domain......Page 205 Creating Computer Accounts......Page 209 Managing Computer Accounts......Page 210 Command-Line Tools for Managing Active Directory Objects......Page 211 Bulk Import and Export with CSVDE and LDIFDE......Page 214 Chapter Summary......Page 217 Review Questions......Page 218 Case Projects......Page 222 CHAPTER 6 Windows File and Print Services......Page 224 Windows File Systems......Page 225 The NTFS File System......Page 226 Securing Access to Files with Permissions......Page 238 Share Permissions......Page 239 NTFS Permissions......Page 240 Windows File Sharing......Page 246 Managing Shares with the Shared Folders Snap-in......Page 251 Accessing File Shares from Client Computers......Page 254 Windows Storage Management......Page 256 Share and Storage Management......Page 257 Distributed File System......Page 259 File Server Resource Manager......Page 261 Configuring a Print Server......Page 263 Key Terms......Page 269 Review Questions......Page 270 Case Projects......Page 273 CHAPTER 7 Configuring Group Policy......Page 276 Group Policy Objects (GPOs)......Page 277 Group Policy Replication......Page 285 Creating and Linking GPOs......Page 286 Group Policy Scope and Inheritance......Page 292 Changing Default GPO Inheritance Behavior......Page 294 Policies in the Computer Configuration Node......Page 301 Computer Configuration: Software Settings......Page 302 Computer Configuration: Windows Settings......Page 304 Computer Configuration: Administrative Templates......Page 314 User Configuration: Windows Settings......Page 315 Security Templates Snap-in......Page 321 Security Configuration and Analysis Snap-in......Page 322 Secedit.exe......Page 324 GPO Management with GPMC......Page 325 GPO Backup and Migration......Page 326 Group Policy Results and Modeling......Page 329 The ADMX Central Store......Page 330 Group Policy Preferences......Page 331 Chapter Summary......Page 334 Key Terms......Page 335 Review Questions......Page 336 Case Projects......Page 340 CHAPTER 8 Introduction to Windows Networking......Page 342 Windows Networking Terminology......Page 343 The Network and Sharing Center......Page 344 TCP/IP Operation and Configuration......Page 350 IPv4 Address Configuration......Page 351 IP Configuration Command-Line Tools......Page 357 Managing Protocols......Page 361 Internet Protocol Version 6......Page 366 IPv6 Overview......Page 367 Chapter Summary......Page 370 Review Questions......Page 371 Case Projects......Page 374 CHAPTER 9 Configuring DNS for Active Directory......Page 376 The Structure of DNS......Page 377 DNS Zones......Page 380 Installing DNS......Page 384 Creating DNS Zones......Page 385 Aging and Scavenging Resource Records......Page 391 Start of Authority Records......Page 394 Name Server Records......Page 395 Zone Delegation......Page 396 Zone Transfers......Page 398 Using WINS with DNS......Page 401 DNS Forwarders......Page 403 Root Hints......Page 405 Round Robin......Page 406 Recursive Queries......Page 407 Event and Debug Logging......Page 408 DNS Troubleshooting......Page 410 Monitoring DNS Performance......Page 412 Chapter Summary......Page 413 Key Terms......Page 414 Review Questions......Page 415 Case Projects......Page 419 CHAPTER 10 Configuring and Maintaining the Active Directory Infrastructure......Page 420 Forest Functional Levels......Page 421 Domain Functional Levels......Page 422 Raising Domain and Forest Functional Levels......Page 425 Preparing a Forest and Domain for Windows Server 2008 with Adprep......Page 429 Removing Domain Controllers and Domains......Page 430 Migrating Domain Objects......Page 432 Configuring Shortcut Trusts......Page 433 Configuring Forest Trusts......Page 437 Configuring Trust Properties......Page 441 Configuring Intrasite Replication......Page 444 Knowledge Consistency Checker (KCC)......Page 445 Connection Objects......Page 446 Global Catalog Replication......Page 449 Special Replication Situations......Page 450 Creating Sites......Page 451 Configuring Site Links......Page 455 Working with Operations Master Roles......Page 459 Operations Master Best Practices......Page 460 Managing Operations Master Roles......Page 461 Chapter Summary......Page 463 Key Terms......Page 464 Review Questions......Page 465 Case Projects......Page 468 CHAPTER 11 Active Directory Certificate Services......Page 472 Public Key Infrastructure Overview......Page 473 PKI Terminology......Page 474 AD CS Terminology......Page 476 Standalone and Enterprise CAs......Page 477 Creating a CA Hierarchy......Page 478 Installing the AD CS Role......Page 479 Configuring Certificate Templates......Page 484 Configuring Certificate Enrollment Options......Page 487 Configuring the Online Responder......Page 495 Creating a Revocation Configuration......Page 497 CA Backup and Restore......Page 499 Key and Certificate Archival and Recovery......Page 500 Chapter Summary......Page 503 Review Questions......Page 504 Case Projects......Page 507 CHAPTER 12 Additional Active Directory Server Roles......Page 508 Active Directory LDS Overview......Page 509 Installing and Configuring AD LDS......Page 510 AD FS Overview......Page 517 AD FS Role Services......Page 518 AD FS Design Concepts......Page 519 Active Directory Rights Management Service......Page 521 AD RMS Components......Page 522 AD RMS Deployment......Page 523 Read Only Domain Controllers......Page 525 RODC Installation......Page 526 Credential Caching......Page 528 Read-Only DNS......Page 531 Key Terms......Page 532 Review Questions......Page 533 Case Projects......Page 536 CHAPTER 13 Server Management and Monitoring......Page 538 Windows Server Backup and Restore......Page 539 Active Directory Backup and Restoration......Page 547 Active Directory Defragmentation......Page 550 Active Directory Monitoring......Page 551 Event Viewer......Page 552 Task Manager......Page 553 Reliability and Performance Monitor......Page 554 Windows System Resource Manager......Page 562 Monitoring Active Directory Replication......Page 564 Common Server Core Configuration Tasks......Page 565 Managing Server Core Remotely......Page 567 Additional Server and Active Directory Tools......Page 568 Chapter Summary......Page 569 Review Questions......Page 570 Case Projects......Page 573 APPENDIX A: MCTS 70-640 Exam Objectives......Page 576 APPENDIX B: Windows Server 2008 Active Directory Configuration Resources......Page 580 APPENDIX C: Virtual Machine Instructions for Selected Activities......Page 584 APPENDIX D: A Step-by-Step Guide to Using Server Virtualization Software......Page 594 GLOSSARY......Page 630 INDEX......Page 636 Introducing Windows Server 2008 Installing Windows Server 2008 Introducing Active Directory Active Directory design and security concepts Account management Windows file and print services Configuring group policy Introduction to Windows Networking Configuring DNS for Active Directory Configuring and maintaining the Active Directory infrastructure Active Directory certificate services Additional Active Directory server roles Server management and monitoring MCTS 70-640 exam objectives Windows Server 2008 Active Directory configuration resources Virtual machine instructions for selected activities Step-by-step guide to using server virtualization software. CD includes the exam objectives coverage map from appendix A as well as CertBlaster test preparation questions that mirror the look and feel of the MCTS exam 70-640. DVD includes a free 120-day evaluation copy of Windows Server 2008, Enterprise Edition.