Microsoft Windows 2000 to Windows Server · PDF file · 2006-04-16Microsoft Windows 2000 to Windows Server 2003 ... • Diagnose and resolve issues related to client computer configuration

WebLearning Education Services

Microsoft Windows 2000 to Windows Server 2003

Introduction This CD-ROM workshop provides students with the knowledge and new skills that they need to plan, implement, and maintain a Microsoft Windows Server™ 2003 networked environment.

This discovery-based workshop consists primarily of labs that provide hands-on experience focused exclusively on the skills and objectives that align with Exam 70-296: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Microsoft Windows® 2000.

Audience This workshop is intended for expert Windows 2000 systems engineers who plan, implement, and support Windows 2000-based Microsoft Active Directory® directory service networks. The workshop assumes extensive, day-to-day, practical, hands-on experience using Windows 2000 and a preference for learning by doing and discovering in a non-prescriptive lab environment. For a more traditional learning experience, see Course 2297: Planning, Implementing, Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE on Windows 2000.

At Workshop Completion After completing this workshop, students will be able to:

• Plan a Domain Name System (DNS) strategy for an enterprise organization. • Plan for an implementation of Active Directory and for Active Directory

replication. • Implement Active Directory and DNS. • Troubleshoot Transmission Control Protocol/Internet Protocol (TCP/IP), name

resolution, and Group Policy. • Plan and implement cross-forest trusts and new security options. • Use Group Policy in Windows Server 2003 to deploy and restrict software. • Use Group Policy in Windows Server 2003 to set advanced security settings. • Plan and implement secure Routing and Remote Access.

Prerequisites Before attending this workshop, students must have:

Copyright© 2002-2006 WebLearning Network. All Rights Reserved. Page 1 of 27


• A Microsoft Certified Systems Engineer (MCSE) on Windows 2000 certification, or equivalent knowledge and skills.

• A Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 certification, or equivalent knowledge and skills.

Students can gain the prerequisite knowledge and skills by completing the following Microsoft Official Workshop:

• Workshop 2209: Updating Systems Administrator Skills from Microsoft Windows 2000 to Windows Server 2003

Microsoft Certified Professional Exams This workshop will help the student prepare for the following Microsoft Certified Professional exam:

• Exam 70-296: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Microsoft Windows 2000

Workshop Materials The student kit includes a workbook and other necessary materials for this class. This software is provided in the student kit:

• Evaluation copy of Windows Server 2003, Enterprise Edition (for educational use only)

Outline

Unit 1: Introduction to Performing Systems Engineer Skills in Windows Server 2003 This unit explains the systems engineer tasks that are new or different from those performed in Windows 2000 and introduces the scenarios and tools that will be used throughout the workshop.

Unit Objectives After completing this unit, students will be able to:

• Describe, at a high level, the new features in Windows Server 2003 that pertain to the systems engineer job role.

• Use the lab environment and locate key resources that are used to complete the labs.



Unit 2: Planning a DNS Namespace Design This unit shows students the new features of DNS in Windows Server 2003, focusing on planning issues regarding improving fault tolerance in DNS, ensuring DNS resolution across forests, planning for _MSDCS zone availability and security to DNS servers in a forest, and creating DNS zones securely and with the least administrative effort.


• Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.

• Determine when to use stub zones versus conditional forwarding. • Ensure availability of the _MSDCS zone. • Plan Active Directory partitions to replicate zone data when needed. • Evaluate DNS zone security.

Unit 3: Planning Active Directory Deployment This unit shows students new features of Active Directory in Windows Server 2003, focusing on planning issues.


• Evaluate the placement of global catalog servers. • Plan optimal replication by exploiting the following replication enhancements:•

Linked value replication (LVR) • Partial attribute set (PAS) replication • Inter-Site Topology Generator (ISTG) improvements • Evaluate forest and domain functionality (versioning) levels.

Unit 4: Implementing DNS with Active Directory This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to implement Active Directory and DNS.


• Install Active Directory by using the advanced features of the Active Directory Installation Wizard.



• Install and configure DNS. • Implement a conditional forwarder. • Create stub zones. • Ensure high availability on the _MSDCS sub domain. • Create a DNS forward lookup zone. • Raise domain and forest functionality. • Create a new application directory partition. • Set the replication scope of a new application directory partition.

Unit 5: Troubleshooting TCP/IP, Name Resolution, and Group Policy This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to troubleshoot TCP/IP, name resolution, and Group Policy.


• Diagnose and resolve issues related to DNS services. • Troubleshoot Group Policy. • Diagnose and resolve issues related to client computer configuration. • Troubleshoot network connectivity issues.

Unit 6: Planning and Implementing Multiple Forests in Active Directory This unit asks students to plan and implement multiple forests in Active Directory by using the model of adding a new organization to an existing company. Students will implement cross-forest trust, manage user authentication, identify possible security concerns, and come to understand how to resolve naming conflicts between two forests.


• Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.

• Establish forest trusts.



Unit 7: Using Group Policy in Windows Server 2003 to Deploy and Restrict Software This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 pertaining to Group Policy and to learn how they can use it to deploy and restrict software.


• List reasons for controlling a computer user’s environment. • Create a software restriction policy. • Deploy software so that an application is completely installed at user logon. • Use Windows Management Instrumentation (WMI) filters to restrict the

application of Group Policy objects (GPOs). Unit 8: Using Group Policy in Windows Server 2003 to Set Advanced Security Settings

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use Group Policy to implement advanced security settings.


• Configure wireless network settings. • Configure a user environment. • Apply Encrypting File System (EFS) enhancements.

Unit 9: Planning and Implementing Secure Routing and Remote Access This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use them in implementing Routing and Remote Access.


• Plan, implement, and maintain Routing and Remote Access. • Create and implement an Internet Protocol Security (IPSec) policy. • Configure IPSec by using Netsh. • Set up IPSec policy monitoring



Windows NT 4.0 to Microsoft Windows Server 2003

Introduction This CD-ROM course provides students with the knowledge and new skills needed to implement and manage a Microsoft Windows Server™ 2003 networked environment.

Audience This course is intended for systems engineers with experience planning, implementing, and supporting a Microsoft Windows NT® 4.0-based network. The course specifically targets students who have practical, hands-on experience using Windows NT 4.0 and who need to quickly learn how to apply those skills in a Windows Server 2003 environment.

At Course Completion After completing this course, students will be able to:

• Explain the features of the Windows Server 2003 family. • Implement a Domain Name System (DNS) server. • Manage and monitor Domain Name System. • Install the Windows Server 2003 Active Directory® directory service. • Create and manage Active Directory objects. • Implement Group Policy to centrally manage a Windows Server 2003 family

network. • Configure and manage a user environment by using Group Policy. • Configure and support network access. • Secure network traffic and data files. • Use advanced boot options, the Recovery Console, and the Backup utility. • Restore data by using the Backup utility in Windows Server 2003. • Plan and implement secure Routing and Remote Access.

Prerequisites Before attending this course, students must have met at least one of the following prerequisites:

• Certified as a Microsoft Certified Systems Engineer (MCSE) on Windows NT 4.0 • Attended Course 689, Supporting Microsoft Windows NT 4.0 - Enterprise

Technologies • Possess equivalent knowledge and skills.

Microsoft Certified Professional Exams This course will help the student prepare for the following Microsoft Certified Professional exams:



• Exam 70-290: Managing and Maintaining a Microsoft Windows Server 2003 Environment

• Exam 70-291: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

Top of page Course Materials The student kit includes a workbook and other necessary materials for this class.

The following software is provided in the student kit:

• Evaluation copy of Windows Server 2003, Enterprise Edition (for educational use only)

Module 1: Introduction to the Windows Server 2003 Family This module contains information that a systems administrator with Microsoft Windows NT 4.0 experience will benefit from knowing when starting to work on Windows Server 2003.

Module Objectives After completing this module, students will be able to:

• Locate specific topics in the Help and Support System. • Activate Windows Server 2003. • List hardware requirements for Windows Server 2003. • Install and configure Administrative Tools.

Module 2: Implementing the Domain Name System This module contains an overview animation of the role of DNS in the network infrastructure and covers the essential concepts a systems administrator needs to know about a DNS server.


• Describe the role of DNS in the network infrastructure. • Install the DNS Server service. • Configure the properties for the DNS Server service. • Configure a DNS zone. • Configure DNS zone transfers. • Configure dynamic updates. • Configure a DNS client. • Delegate authority for zones.



• Describe how DNS dynamic updates work. • Explain what resource records and record types are. • Explain what dynamic updates are. • Describe how DNS clients register and update their own resource records by using

dynamic update. • Describe how a Dynamic Host Configuration Protocol (DHCP) server registers

and updates resource records by using dynamic update. • Configure DNS manual and dynamic updates. • Explain what an Active Directory-integrated DNS zone is. • Configure Active Directory-integrated DNS zones to use secure dynamic updates.

Module 3: Managing and Monitoring the Domain Name System This module builds on, and continues, content covering DNS.

Module Objectives

After completing this module, students will be able to:

• Manage DNS on a system running Windows Server 2003 and monitor DNS server performance on that system.

• Describe and configure the Time-to-Live value. • Describe how aging and scavenging work. • Configure aging and scavenging. • Explain the purpose of verifying that a resource record exists. • Explain what Nslookup is. • Explain what DNSCmd is. • Explain what DNSLint is. • Verify that a resource record exists by using Nslookup, DNSCmd, and DNSLint. • Describe how simple and recursive queries work. • Test the DNS server configuration. • Apply guidelines for monitoring DNS server performance by using the

Performance console. • Explain DNS event logging. • Monitor DNS server performance by using logging.

Module 4: Installing Windows Server 2003 Active Directory This module gives students the opportunity to install Active Directory, and learn about the new functional levels of Active Directory in Windows Server 2003.


• Explain the basic concepts of Active Directory. • Install Active Directory. • Change the domain functional level.



Module 5: Creating and Managing Active Directory Objects This module contains the information that a systems administrator must know to manage Active Directory objects.


• Create organizational units, user accounts, and computer accounts. • Create and modify groups. • Apply the appropriate strategies when using groups. • Use permissions to control access to Active Directory objects. • Delegate control of Active Directory objects to support secure and decentralized

administration. • Move Active Directory objects. Module 6: Implementing Group Policy to Centrally Manage a Windows Server 2003 Family Network

This module covers planning and implementing multiple forests in Active Directory by adding a new organization to an existing company. Students will implement cross-forest trust, manage user authentication, identify possible security concerns, and come to understand how to resolve naming conflicts between two forests.


• Implement Group Policy objects on a domain. • Modify Group Policy inheritance.

Module 7: Configuring and Managing User Environment by Using Group Policy This module contains content that a Windows Server 2003 systems administrator must have to manage user environments by using Group Policy.


• Configure Group Policy settings. • Use administrative templates in Group Policy to control a user environment. • Use security templates to secure computers. • Assign scripts to control user environments by using Group Policy. • Determine applied Group Policy objects (GPOs).



Self Study: Configuring and Supporting Network Access This module covers how to support network access for remote users. This module focuses primarily on the Windows Server 2003 network access technologies and their related tasks.


• Describe a network access infrastructure. • Configure a wireless connection. • Control remote user access to a network. • Centralize authentication and policy management for network access by using

Internet Authentication Service (IAS).

Self Study: Securing Network Traffic and Data Files This module covers how to secure network traffic, which includes Internet Protocol security (IPSec); and how to secure data files, which include Encrypting File System (EFS).


• Implement IPSec. • Implement IPSec with certificates. • Monitor IPSec • Explain how to use EFS. • Add authorized users. • Decrypt a file or folder. • Recover an encrypted file or folder. Self Study: Implementing Basic Disaster Protection and Recovery Techniques in the Windows Server 2003 Family

This module covers some of the ways to implement disaster protection and recovery techniques in Windows Server 2003. This module focuses on using the Recovery Console and the Backup utility.


• Use Safe Mode. • Use advanced boot options.



• Use the Recovery Console. • Describe the Recovery Console. • Restore files and folders by using the Backup utility. • Restore Active Directory. • Describe Automated System Recovery (ASR). • Recover from a system failure by using ASR. • Restore system data



Systems Administrator Skills from Microsoft Windows 2000 to Windows Server 2003

Introduction This CD-ROM workshop provides students with the knowledge and skills to manage and maintain a Microsoft Windows Server™ 2003 networked environment.

This discovery-based workshop consists primarily of labs that provide hands-on experience focused exclusively on the skills and objectives that align with Exam 70-292: Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Windows® 2000.

Audience This workshop is intended for expert Windows 2000 systems administrators who manage and maintain Windows 2000-based Active Directory® directory service-based networks. The workshop assumes extensive, day-to-day, practical, hands-on experience using Windows 2000 and a preference for learning by doing and discovering in non-prescriptive lab environment. For a more traditional learning experience, see Course 2299: Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Windows 2000.

At Workshop Completion After completing this workshop, students will be able to:

• Identify the systems administration tasks in Windows Server 2003 that are new or different from the tasks performed in Windows 2000.

• Manage user, computer, and group accounts in a Windows Server 2003 Active Directory-based environment.

• Use the Group Policy Management Console (GPMC) to manage Group Policy. • Manage resources and security. • Configure and manage DNS. • Manage servers in remote locations. • Manage Terminal Services. • Manage IIS 6.0 Web Services. • Maintain computers that run Windows operating systems by implementing and

managing Software Update Services. • Prepare for and implement disaster recovery solutions.

Prerequisites Before attending this workshop, students must have:



• Either an MCSA on Windows 2000 or an MCSE on Windows 2000 certification, or equivalent knowledge and skills.

Microsoft Certified Professional Exams This workshop will help the student prepare for the following Microsoft Certified Professional exam:

• Exam 70-292: Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Windows 2000

Workshop Materials The student kit includes a workbook and other necessary materials for this workshop. An evaluation copy of Windows Server 2003, Enterprise Edition (for educational use only), is also provided in the student kit.

Workshop Outline

Unit 1: Introduction to Systems Administration in Windows Server 2003 This unit explains how to perform systems administration tasks in a Windows Server 2003 environment, and introduces the scenarios and tools that will be used throughout the workshop.


• Identify the products in the Windows Server 2003 family. • Describe the tools and resources available to perform tasks throughout the

workshop.

Unit 2: Managing Users, Computers, and Groups This unit explains how to manage users, computers, and groups in an Active Directory directory service environment, taking advantage of the new capabilities available in Windows Server 2003.


• Create user accounts by using CSVDE. • Create user accounts by using the dsadd command. • Modify the properties of multiple accounts. • Create computer accounts by using the dsadd command. • Create groups by using the dsadd command. • Add members to a group by using the dsmod command. • Copy the properties from an existing account when creating a new account. • Find Active Directory objects.



• Move an Active Directory object by using the drag and drop technique of management in Active Directory Users and Computers.

• Reset computer accounts. • Describe the effect of resetting passwords in Windows Server 2003. • Determine the effective permissions on an Active Directory object.

Unit 3: Using the GPMC to Manage Group Policy This unit gives a hands-on, fast-paced opportunity to experienced users to orient themselves to Windows Server 2003 and learn how to use the Group Policy Management Console (GPMC) to manage Group Policy.


• Implement Group Policy by using the GPMC. • Use the gpupdate command to refresh a GPO. • Manage GPOs by using the GPMC, which includes:• Backing up a GPO. • Copying a GPO. • Importing a GPO. • Use Group Policy Results to troubleshoot Group Policy-related issues. • Use Group Policy Modeling to experiment with possible Group Policy

configurations.

Unit 4: Managing Resources and Security This unit explains how to use enhancements to the tools available in Windows Server 2003 to manage resources and security by using Windows Explorer, Group Policy management tools, and the Security Configuration and Analysis tool.


• Determine the effective NTFS permissions for files and folders. • Change the owner for an existing file or folder. • Create custom security templates. • Apply security templates by using Group Policy. • Configure NTFS permissions by using security templates. • Audit security settings by using Security Configuration and Analysis.



Unit 5: Managing DNS This unit gives a hands-on, fast-paced opportunity to experienced users to orient themselves to Windows Server 2003 and learn how to configure and manage DNS.


• Install DNS by using the Manage Your Server tool. • Create forward lookup zones. • Create reverse lookup zones. • Configure DNS conditional forwarding. • Configure DNS zones, which includes:• Configuring zone options. • Configuring zones for secure dynamic update. • Configuring Active Directory integrated zones. • Create DNS stub zones. Unit 6: Managing Servers

This unit explains how to manage servers remotely using secure best practices.

Unit Objectives

After completing this unit, students will be able to:

• Create desktop shortcuts that run the Run as command. • Connect to a remote server by using MMC snap-in tools. • Connect to a remote server by using the Remote Desktop Connection utility. • Determine the best tool to use for remote administration in specific situation. • Configure client connection speed for the Remote Desktop Connection utility. • Configure auto reconnect for the Remote Desktop Connection utility.

Unit 7: Managing Terminal Services This unit explains how to configure and manage Terminal Services and take advantage of the new capabilities available with that service.


• Install Terminal Services. • Install a Terminal Services Licensing server. • Configure Terminal Services, which includes:• Setting the level of encryption for

terminal server user sessions. • Controlling terminal server user connection access. • Configuring time-out settings from remote connections.



• Monitoring remote desktop connection sessions. • Manage user sessions by using Terminal Services Manager. • Diagnose and resolve issues related to Terminal Services security. • Diagnose and resolve issues related to Terminal Server License issues.

Unit 8: Managing IIS 6.0 Web Services This unit explores the new skills needed to manage and maintain the IIS service on Windows Server 2003. This unit will provide students with hands-on experience configuring and managing the IIS service, and highlights the default state of the service when Windows Server 2003 is installed.


• Install IIS 6.0. • Configure authentication. • Install ASP.NET. • Allow ASP.NET in Web service extensions. • Manage ASP.NET configuration files. • Implement Web applications. • Implement application pooling. • Manage the IIS 6.0 metabase. • Manage an IIS server in a remote location. • Monitor and optimize IIS 6.0.

Unit 9: Maintaining Software by Using Software Update Services This unit explains how to use SUS to perform patch management for a networked environment.


• Install and configure SUS on a server. • Configure automatic updates. • Use Group Policy to configure SUS clients. • Manage a software update infrastructure. • Back up and restore an SUS configuration. • Test an SUS implementation.



Unit 10: Managing Disaster Recovery This unit explains how to use the new capabilities available with Windows Server 2003 to restore a system to a previous state. The students will practice troubleshooting and repairing a system by using features such as ASR and driver rollback in a lab environment to restore a system to a predefined state.


• Use Automatic System Recovery (ASR) to back up and restore a server. • Restore data from shadow copies. • Roll back to a previous version of a device driver. • Configure security for backup operations. • Troubleshoot problems associated with restoring data. • Troubleshoot issues related to the boot process



Updating Microsoft Windows 2000 MCSE Skills to Windows Server 2003

Description Because Windows 2000 enjoys such a massive installation base in the world of computer networks, there are literally hundreds of thousands of individuals certified in Microsoft Windows 2000 networking, or who possess equivalent knowledge. But for individuals on the cutting edge, who want an efficient and effective way upgrade to their 2000 networking skills for the new Server 2003 environment, the Updating Microsoft Windows 2000 MCSE Skills to Windows Server 2003 course is the answer. This intensely focused course provides the knowledge and new skills needed to plan, implement, manage and maintain a Microsoft Windows Server 2003 networked environment. Because our expert instructors concentrate solely on the changes from 2000 to Server 2003, this real-world, hands-on course is intended for a very exclusive group of systems engineers ready to upgrade their skills as quickly and efficiently as possible.

Objectives Upon completion of the Updating Microsoft Windows 2000 MCSE Skills to Windows Server 2003 course, the student will be able to:

• Identify the systems administration and systems engineer tasks in Windows Server 2003 that are new or different from the tasks performed in Windows 2000

• Manage user, group, and computer accounts in a Windows Server 2003 Active Directory-based environment

• Manage access to shared resources • Manage and maintain the server environment under Windows Server 2003 • Manage the application server environment under Windows Server 2003 • Manage disaster recovery in a Windows Server 2003 environment • Use Software Update Services to maintain software in a Windows Server

2003 environment • Plan, implement, optimize, and troubleshoot name resolution under

Windows Server 2003 • Plan a public key infrastructure (PKI) and an Internet Protocol Security

(IPSec) deployment in a Windows Server 2003 environment • Plan and troubleshoot local and remote network access under Windows

Server 2003 • Implement Active Directory in a Windows Server 2003 environment • Plan the placement of domain controllers, global catalog servers, and

operations masters under Windows Server 2003 • Plan, implement, manage, and troubleshoot Group Policy in a Windows

Server environment



Audience This course is intended for Microsoft Certified Systems Engineers (MCSEs) certified on Windows 2000 who have hands-on experience supporting a Windows 2000-based Microsoft Active Directory service network, and who need to learn how to leverage those skills in a Windows Server 2003 environment.

Prerequisites Students enrolled in this course should possess an MCSE on Windows 2000 certification, or have equivalent knowledge and skills.

Included Materials 180 Day Trial version copy of Windows Server2003 standard Edition

Included Labs Configuring and Exploring the Windows Administration Environment Secondary Logon Service Managing User, Computer, and Group Accounts Remote Server Administration Using Driver Rollback Using the GPMC to Manage Group Policy Installing and Managing Terminal Services Configuring and Managing IIS 6.0 Using Automated System Recover (ASR) for Disaster Recovery Maintaining Software by Using Software Update Service (SUS) Configuring DNS DNS and Active Directory Advanced DCPROMO and DNS Replication Testing DNS and DCGPOfix Configuring Security Settings RRAS and IPSEC Interforest Trust Relationships Sites and Universal Group Caching Using Group Policies with WMI and RSoP Wireless Access, EFS and ICF

Outline Module 1: User, Computer and Group Management

• The Windows Server 2003 Environment • Installing the Administrative Tools • Creating and Managing User Accounts • Creating and Managing Group Accounts • Creating and Managing Computer Accounts • Configuring and Exploring the Windows Administration Environment • Secondary Logon Service



• Managing User, Computer, and Group Accounts Module 2: Resource Access Management

• 2-2 Managing Shared Folder Permissions • Managing NTFS Permissions • Securing the Server

Module 3: Server Environment Maintenance and Management • Configuring Remote Desktop to Administer a Server • Managing Remote Desktop Connections • Using Device Driver Rollback • Preparing Disks Using the DiskPart Tool • Managing Disk Properties • Remote Server Administration • Using Driver Rollback

Module 4: Application Server Environment Management • Installing and Configuring Internet Information Services 6.0 • Configuring Terminal Services with Group Policy • Planning for High Availability and Scalability • Using the GPMC to Manage Group Policy • Installing and Managing Terminal Services • Configuring and Managing IIS 6.0

Module 5: Disaster Recovery Management • Using Automated System Recovery • Using Shadow Copies • Using Automated System Recover (ASR) for Disaster Recovery

Module 6: Software Maintenance Using Software Update Service • Introduction to Software Update Services • Installing and Configuring Software Update Services • Managing a Software Update Services Infrastructure • Maintaining Software by Using Software Update Service (SUS)

Module 7: Software Maintenance, Name Resolution Planning, Implementation, Optimization and Troubleshooting • Understanding New DNS Features • Planning a DNS Implementation • Implementing DNS • Troubleshooting Host Name Resolution • Planning a WINS Replication Strategy • Configuring DNS • DNS and Active Directory • Advanced DCPROMO and DNS Replication • Testing DNS and DCGPOfix

Module 8: PKI and IPSec Planning and Deployment • Introduction to Public Key Infrastructure • Planning a Public Key Infrastructure • Understanding Default IPSec Policy Rules • Planning an IPSec Deployment • Configuring Security Settings • RRAS and IPSEC

Module 9: Network Access Planning and Troubleshooting



• Selecting Network Access Connection Methods • Selecting Network Access Authentication Methods • Planning a Remote Access Policy Strategy • Troubleshooting Network Access

Module 10: Active Directory Implementation • New Active Directory Features in Windows Server 2003 • Installing Active Directory • Administering Windows Server 2003 by Using the New Active Directory

Features • Configuring Trusts • Interforest Trust Relationships

Module 11: Domain Controller Planning and Placement Considerations • Planning the Placement of Domain Controllers and Global Catalog Servers • Planning the Placement of Operations Masters • Sites and Universal Group Caching

Module 12: Group Policy Implementation, Management, and Troubleshooting • Planning a Group Policy Strategy • Configuring Security by Using Group Policy • Managing Software by Using Group Policy • Troubleshooting Group Policy • Using Group Policies with WMI and RSoP • Wireless Access, EFS and ICF



Updating Microsoft Windows NT 4.0 MCSE Skills to Windows Server 2003 Administration Skills

Description This course provides students who currently have Microsoft Windows NT 4.0 skills with the expertise and skills needed to implement and manage a Microsoft Windows Server 2003 networked environment.This course will prepare students for Microsoft Certified Professional Exam 70-290 or 70-291, and is a core credit for becoming a Microsoft Certified Systems Associate or Engineer.

Objectives After completing this course, you will be able to:

• Explain the editions and features of the Windows Server 2003 family • Implement a Domain Name System (DNS) server • Manage and monitor Domain Name System • Install the Windows Server 2003 Active Directory directory service • Create and manage Active Directory objects • Implement Group Policy to centrally manage a Windows Server 2003 family

network • Configure and manage a user environment using Group Policy • Configure and support network access • Secure network traffic and data files • Use advanced boot options, the Recovery Console, and the Backup utility • Restore data using the Backup utility in Windows Server 2003 • Plan and implement secure Routing and Remote Acces

Audience This course is intended for systems engineers with a thorough understanding of planning, implementing, and supporting a Microsoft Windows NT 4.0-based network. The course specifically targets students who have practical, hands-on experience using Windows NT 4.0 and who want to quickly learn how to utilize those skills in a Windows Server 2003 environment.

Prerequisites Before attending this course, you should meet at least one of the following prerequisites: Certified as a Microsoft Certified Systems Engineer (MCSE) on Windows NT 4.0 Attended Supporting Microsoft Windows NT 4.0 - Enterprise Technologies (689)



Possess equivalent knowledge and skills.


Included Labs Creating a Custom MMC Installing Active Directory Creating a Child Domain Using the Delegation Control Wizard Creating and Linking a GPO Using a GPO for Folder Redirection Encrypting Files Active Directory Backup and Recovery

Outline Module 1: Windows Server 2003 Family

• The Windows Server 2003 Family • Overview of the Help and Support System • Examining Windows Server 2003 Product Activation • Installing the Administration Tools • Creating a Custom MMC

Module 2: Implementing DNS • Introduction to the Domain Name System • Configuring Zones in Windows Server 2003 • Dynamically Updating DNS Servers

Module 3: Managing DNS • Configuring the Time-to-Live Value • Configuring Aging and Scavenging • Using Command-line Utilities to Monitor and Troubleshoot DNS • Testing the DNS Server Configuration • Monitoring DNS Server Performance by Using the Performance Console • Monitoring DNS Server Performance by Using Logging

Module 4: Installing Active Directory • Basics of Active Directory • Installing Active Directory • Changing Functional Levels • Installing Active Directory • Creating a Child Domain

Module 5: Active Directory Objects • Creating Organizational Units, User Accounts, and Computer Accounts • Creating and Modifying Groups • Strategies for Using Groups • Using Permissions to Control Access to Active Directory Objects • Delegating Control of Active Directory Objects to Support Secure,

Decentralized Administration



• Moving Active Directory Objects • Using the Delegation Control Wizard

Module 6: Implementing Group Policy • Implementing Group Policy Objects on a Domain • Modifying Group Policy Inheritance • Creating and Linking a GPO

Module 7: Managing User Environments • Configuring Group Policy Settings • Using Administrative Templates in Group Policy to Control User

Environments • Using Security Templates to Secure Computers • Testing Computer Security Policy • Assigning Scripts to Control User Environments by Using Group Policy • Determining Applied GPOs • Using a GPO for Folder Redirection • Encrypting Files • Active Directory Backup and Recovery



Updating Microsoft Windows 2000 MCSA Skills to Windows Server 2003

Description This critical course provides students who have already demonstrated expertise with Microsoft Windows 2000 with the knowledge and skills to manage and maintain a Microsoft Windows Server 2003 networked environment. Students are not forced to review fundamental concepts from the Windows 2000 set of technologies, but are provided extremely fast-paced and focused preparation for Microsoft’s exam 70-292. This exam will be available only to individuals who hold an Microsoft Certified Systems Administrator (MCSA) on Windows 2000 or Microsoft Certified Systems Engineer (MCSE) on Windows 2000 certification. While this course certainly can be viewed as certification preparation, it is also critical for any student that must support Windows 2003 in any sized organization. This course quickly and efficiently teaches students key 2003 topics such as the new and improved Active Directory and IIS 6.0.

Objectives Upon completion of the Updating Microsoft Windows 2000 MCSA Skills to Windows Server 2003 course, the student will be able to:

Identify the systems administration tasks in Windows Server 2003 that are new or different from the tasks performed in Windows 2000

Manage user, computer, and group accounts in a Windows Server 2003 Active Directory-based environment

Use the Group Policy Management Console (GPMC) to manage Group Policy Manage resources and security Configure and manage Domain Name System (DNS) Manage servers in remote locations Manage Terminal Services Manage Internet Information Services (IIS) 6.0 Web Services Maintain computers that run Windows operating systems by implementing

and managing Software Update Services Prepare for and implement disaster recovery solutions

Audience This course is intended for Windows 2000 systems administrators with experience managing and supporting a Windows 2000-based Active Directory-based network, and who need to learn how to apply those skills in a Windows Server 2003 environment.

Prerequisites Students enrolled in this course should possess an MCSA on Windows 2000 or MCSE on Windows 2000 certification, or possess the equivalent knowledge and



skills. Successful completion of the following courses (or equivalent experience) is strongly recommended:

Managing a Microsoft Windows 2000 Network Environment Microsoft Windows 2000 Active Directory Implementation and

Administration 3.0


Included Labs Configuring and Exploring the Windows Administration Environment Secondary Logon Service Managing Windows Server Accounts Remote Server Administration Using Driver Rollback Managing Group Policy Using GPMC Installing and Managing Terminal Services Configuring and Managing IIS 6.0 Using Automated System Recover (ASR) for Disaster Recovery Configuring SUS to Update Software

Outline Module 1: User, Computer and Group Management

• The Windows Server 2003 Environment • Installing the Administrative Tools • Creating and Managing User Accounts • Creating and Managing Group Accounts • Creating and Managing Computer Accounts • Configuring and Exploring the Windows Administration Environment • Secondary Logon Service • Managing Windows Server Accounts

Module 2: Resource Access Management • 2-2 Managing Shared Folder Permissions • Managing NTFS Permissions • Securing the Server

Module 3: Server Environment Maintenance and Management • Configuring Remote Desktop to Administer a Server • 3-18 Managing Remote Desktop Connections • Using Device Driver Rollback • Preparing Disks Using the DiskPart Tool • Managing Disk Properties • Remote Server Administration • Using Driver Rollback

Module 4: Application Server Environment Management • Installing and Configuring Internet Information Services 6.0



• Configuring Terminal Services with Group Policy • Planning for High Availability and Scalability • Managing Group Policy Using GPMC • Installing and Managing Terminal Services • Configuring and Managing IIS 6.0

Module 5: Disaster Recovery Management • Using Automated System Recovery • Using Shadow Copies • Using Automated System Recover (ASR) for Disaster Recovery

Module 6: Software Maintenance Using the Software Update Service • Introduction to Software Update Services • Installing and Configuring Software Update Services • Managing a Software Update Services Infrastructure • Configuring SUS to Update Software

Module 7: DNS New Features


Documents

Microsoft Windows 2000 to Windows Server · PDF file · 2006-04-16Microsoft Windows 2000 to Windows Server 2003 ... • Diagnose and resolve issues related to client computer configuration