Piltzecker The Real MCTS/MCITP Exam 70-640 Prep Kit

Independent and Complete Self-Paced Solutions
1. Auflage 2011
ISBN: 978-0-08-057014-3
Verlag: Elsevier Science & Techn.
Format: EPUB
Kopierschutz: 6 - ePub Watermark

E-Book, Englisch, 800 Seiten

This exam is designed to validate Windows Server 2008 Active Directory skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exam 70-640.

The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users, three or more physical locations, and three or more domain controllers.

MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management.

In addition MCTS candidates must understand connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

*Designed to help newcomers to Microsoft certification study for and pass MCTS exam for Active Directory on their way to MCITP certification
* THE independent source of exam day tips, techniques, and warnings not available from Microsoft
* Comprehensive study guide guarantees 100% coverage of all Microsoft's exam objectives
* Interactive FastTrack e-learning modules help simplify difficult exam topics
* Two full-function ExamDay practice exams guarantee double coverage of all exam objectives
* Free download of audio FastTracks for use with iPods or other MP3 players
* 1000 page DRILL DOWN reference for comprehensive topic review

Autoren/Hrsg.

Piltzecker, Anthony

Inhaltsverzeichnis

1;Front Cover;1
2;The Real MCTS/MCITP Exam 70-640 Active Directory Configuration Prep Kit;4
3;Copyright Page;5
4;Technical Editor;6
5;Technical Reviewer;7
6;Contributing Authors;8
7;Contents;12
8;Foreword;22
9;Chapter 1: Configuring Server Roles in Windows 2008;34
9.1;Introduction;35
9.2;New Roles in 2008;35
9.2.1;Using Server Manager to Implement Roles;36
9.2.2;Using Server Core and Active Directory;42
9.2.2.1;What Is Server Core?;43
9.3;Read-Only Domain Controllers (RODCs);48
9.3.1;Introduction to RODC;48
9.3.1.1;Its Purpose in Life;48
9.3.1.2;Its Features;49
9.3.2;Configuring RODC;49
9.3.3;Removing an RODC;54
9.4;Active Directory Lightweight Directory Service (LDS);55
9.4.1;When to Use AD LDS;55
9.4.2;Changes from Active Directory Application Mode (ADAM);56
9.4.3;Configuring AD LDS;56
9.4.3.1;Working with AD LDS;59
9.5;Active Directory Rights Management Service (RMS);61
9.5.1;What's New in RMS;61
9.5.2;RMS vs. DRMS in Vista;62
9.5.3;Configuring RMS;63
9.6;Active Directory Federation Services (ADFS);70
9.6.1;What Is Federation?;70
9.6.1.1;Why and When to Use Federation;71
9.6.2;Configuring ADFS;72
9.7;Summary of Exam Objectives;85
9.8;Exam Objectives Fast Track;85
9.9;Exam Objectives Frequently Asked Questions;87
9.10;Self Test;89
9.11;Self Test Quick Answer Key;92
10;Chapter 2: Configuring Network Services;94
10.1;Introduction;95
10.2;Configuring Domain Name System (DNS);96
10.2.1;Identifying DNS Record Requirements;101
10.2.2;Installing and Configuring DNS;105
10.2.3;Using Server Core and DNS;109
10.2.4;Configuring Zones;112
10.2.4.1;Zone Transfer;115
10.2.4.2;Active Directory Records;118
10.2.4.3;Reverse Lookup Zones;119
10.2.4.3.1;Configuring Reverse Lookup Zones;120
10.2.5;Configuring Zone Resolution;124
10.3;Configuring Dynamic Host Configuration Protocol (DHCP);126
10.3.1;DHCP Design Principles;128
10.3.1.1;DHCP Servers and Placement;129
10.3.2;Installing and Configuring DHCP;130
10.3.3;Using Server Core and DHCP;133
10.3.4;Configuring DHCP for DNS;135
10.4;Configuring Windows Internet Naming Service (WINS);136
10.4.1;Understanding WINS Replication;138
10.4.1.1;Automatic Partner Configuration;138
10.4.1.2;Push Partnerships;139
10.4.1.3;Pull Partnerships;140
10.4.1.4;Push/Pull Partnerships;141
10.4.2;Replication Models;141
10.4.2.1;Ring Models;142
10.4.2.2;Hub-and-Spoke Models;142
10.4.2.3;Hybrid Replication Models;143
10.4.3;Static WINS Entries;143
10.4.4;Installing and Configuring;144
10.4.5;Using Server Core for WINS;144
10.4.6;Configuring WINS for DNS;145
10.5;Summary of Exam Objectives;147
10.6;Exam Objectives Fast Track;148
10.7;Exam Objectives Frequently Asked Questions;150
10.8;Self Test;152
10.9;Self Test Quick Answer Key;156
11;Chapter 3: Working with Users, Groups, and Computers;158
11.1;Introduction;159
11.2;Navigating Active Directory Users and Computers;159
11.3;Creating and Modifying User Accounts;162
11.3.1;User Account Types;162
11.3.2;Creating a New Account;163
11.3.3;Domain User Account Considerations;164
11.3.4;Password Considerations;165
11.4;Creating a New Account Using Active Directory Users and Computers;166
11.4.1;Modifying a Domain User Account Using Active Directory Users and Computers;169
11.4.2;Common User Management Options;189
11.4.3;Creating a New User Account Using Script;190
11.4.4;Creating User Template;191
11.4.5;Configuring User Principal Names;192
11.5;Creating and Modifying Computer Accounts;193
11.5.1;Creating a New Computer Account Using Active Directory Users and Computers;194
11.5.2;Modifying a Computer Account Using Active Directory Users and Computers;195
11.5.3;Creating a New Computer Account Using a Script;200
11.5.4;Resetting a Computer Account Using Active Directory Users and Computers;200
11.6;Creating and Modifying Groups;202
11.6.1;Creating a Group;202
11.6.2;Types of Groups;203
11.6.3;Group Scopes;203
11.6.3.1;Universal Groups Replication Concerns;204
11.6.4;Group Strategies;204
11.6.5;Creating a New Group Using Active Directory Users and Computers;205
11.6.6;Modifying a Group Using Active Directory Users and Computers;206
11.6.7;Creating a New Group Using Script;209
11.7;The Delegation of Tasks;210
11.7.1;RODC (Read-Only Domain Controller);217
11.8;Exam Objectives Fast Track;218
11.9;Exam Objectives Frequently Asked Questions;222
11.10;Self Test;225
11.11;Self Test Quick Answer Key;228
12;Chapter 4: Configuring the Active Directory Infrastructure;230
12.1;Introduction ;231
12.2;Working with Forests and Domains;232
12.2.1;Understanding Forests;233
12.2.2;Understanding Domains;233
12.2.3;Forest and Domain Functional Levels;235
12.2.3.1;Using Domain Functional Levels;236
12.2.3.1.1;Using the Windows 2000 Domain Functional Level;237
12.2.3.1.2;Windows Server 2003 Domain Functional Level;237
12.2.3.1.3;Windows Server 2008 Domain Functional Level;238
12.2.3.2;Configuring Forest Functional Levels;239
12.2.3.2.1;Windows 2000 Forest Functional Level (default);239
12.2.3.2.2;Windows Server 2003 Forest Functional Level;240
12.2.3.2.3;Windows Server 2008 Forest Functional Level;241
12.2.3.3;Raising Forest and Domain Functional Levels;241
12.2.3.3.1;Raising the Domain Functional Level;242
12.2.4;Understanding the Global Catalog;243
12.2.4.1;UPN Authentication;245
12.2.4.2;Directory Information Search;245
12.2.4.3;Universal Group Membership Information;247
12.2.5;Understanding GC Replication;247
12.2.5.1;Universal Group Membership;248
12.2.5.2;Attributes in the Global Catalog;248
12.2.6;Placing GC Servers within Sites;249
12.2.6.1;Bandwidth and Network Traffic Considerations;250
12.2.6.2;Universal Group Membership Caching;251
12.2.7;Working with Flexible Single Master Operation (FSMO) Roles;253
12.2.7.1;Placing, Transferring, and Seizing FSMO Role Holders;256
12.2.7.1.1;Locating and Transferring the Schema Master Role;257
12.2.7.1.2;Locating and Transferring the Domain Naming Master Role;260
12.2.7.1.3;Locating and Transferring the Infrastructure, RID, and PDC Operations Master Roles;261
12.2.7.1.4;Placing the FSMO Roles within an Active Directory Environment;265
12.3;Working with Sites;266
12.3.1;Understanding Sites;266
12.3.1.1;Subnets;269
12.3.2;Site Planning;270
12.3.2.1;Criteria for Establishing Separate Sites;270
12.3.2.2;Creating a Site;271
12.3.2.3;Renaming a Site;276
12.3.3;Creating Subnets;277
12.3.3.1;Associating Subnets with Sites;280
12.3.4;Creating Site Links;282
12.3.4.1;Configuring Site Link Cost;285
12.3.5;Understanding Replication;288
12.3.5.1;Intrasite Replication;289
12.3.5.2;Intersite Replication;291
12.3.5.3;Bridgehead Servers;292
12.3.5.4;Site Link Bridges;292
12.3.5.5;Scheduling;293
12.3.5.6;Forcing Replication;294
12.3.5.7;Replication Protocols;294
12.3.6;Planning, Creating, and Managing the Replication Topology;295
12.3.6.1;Planning Replication Topology;295
12.3.6.2;Creating Replication Topology;295
12.3.7;Configuring Replication between Sites;296
12.3.8;Troubleshooting Replication Failure;297
12.3.8.1;Troubleshooting Replication;297
12.3.8.2;Using Event Viewer;298
12.4;Working with Trusts;299
12.4.1;Default Trusts;305
12.4.2;Forest Trusts;305
12.4.3;External Trusts;306
12.4.4;Shortcut Trusts;307
12.4.5;SID Filtering;308
12.5;Summary of Exam Objectives;310
12.6;Exam Objectives Fast Track;312
12.7;Exam Objectives Frequently Asked Questions;314
12.8;Self Test;318
12.9;Self Test Quick Answer Key;323
13;Chapter 5: Understanding Group Policy;324
13.1;Introduction;325
13.2;Types of Group Policies;325
13.2.1;Local Group Policy;326
13.2.2;Non-Local Group Policy Objects;329
13.2.2.1;Preferences;336
13.2.2.2;Network Location Awareness;339
13.2.3;User;340
13.2.4;Computer;341
13.3;Group Policy Hierarchy;342
13.3.1;Site, Domain, and OU Hierarchy;342
13.3.2;Group Policy Processing Priority;344
13.4;Creating and Linking GPOs;347
13.4.1;Creating Stand-Alone GPOs;347
13.4.2;Linking Existing GPOs;348
13.4.3;Creating and Linking at One Time;349
13.5;Controlling Application of Group Policies;351
13.5.1;Enforce;351
13.5.2;Block Inheritance;355
13.5.3;Group Policy Results and Group Policy Modeling;356
13.5.4;WMI;363
13.5.5;Group Policy Filtering;364
13.5.6;Group Policy Loopback;367
13.6;GPO Templates;367
13.6.1;Administrative Templates;368
13.6.2;Security Templates;370
13.6.3;Starter GPOs;374
13.7;Summary of Exam Objectives;379
13.8;Exam Objectives Fast Track;380
13.9;Exam Objectives Frequently Asked Questions;381
13.10;Self Test;383
13.11;Self Test Quick Answer Key;389
14;Chapter 6: Configuring Group Policy;390
14.1;Configuring Software Deployment;391
14.1.1;Installation Overview;391
14.1.2;Publishing to Users;394
14.1.3;Assigning to Users;397
14.1.4;Assigning to Computers;401
14.1.5;Maintenance;403
14.1.5.1;Redeploying Software;403
14.1.5.2;Upgrading Software;404
14.1.6;Removing Software Deployed with Group Policy;408
14.1.6.1;Forced Removal;409
14.1.6.2;Optional Removal;410
14.2;Configuring Account Policies;411
14.2.1;Domain Password Policy;412
14.2.2;Account Lockout Policy;413
14.2.3;Fine-Grain Password and Account Lockout Policies;417
14.2.3.1;Configuring a Fine-Grain Password Policy;419
14.2.3.2;Applying Users and Groups to a PSO with Active Directory Users and Computers;427
14.3;Configuring Audit Policies;430
14.3.1;Logon Events;432
14.3.2;Directory Service Access;434
14.3.2.1;Configuring Directory Service Access Auditing in Group Policy;434
14.3.2.2;Configuring Active Directory Object Auditing;435
14.3.3;Object Access;437
14.3.3.1;Configuring Object Access Auditing in Group Policy;438
14.3.3.2;Configuring Object Level Auditing;438
14.3.4;Other Audit Policies;441
14.4;Configuring Additional Security-Related Policies;442
14.4.1;User Rights;442
14.4.2;Security Options;444
14.4.3;Restricted Groups;448
14.4.3.1;Adding a New Restricted Group;449
14.4.3.2;Modifying a Restricted Group;452
14.4.3.3;Deleting a Restricted Group;453
14.4.4;Administrative Templates;453
14.4.4.1;ADMX Central Store;455
14.4.4.2;Adding ADM Templates to a GPO;457
14.4.4.3;Converting ADM Files to the ADMX Format;460
14.4.4.3.1;Converting ADM Files to ADMX Files Using the Command Prompt;460
14.4.4.3.2;Converting ADM Files to ADMX Files Using the MMC Snap-in;460
14.5;Summary of Exam Objectives;465
14.6;Exam Objectives Fast Track;467
14.7;Exam Objectives Frequently Asked Questions;470
14.8;Self Test;473
14.9;Self Test Quick Answer Key;477
15;Chapter 7: Configuring Certificate Services and PKI;478
15.1;Introduction;479
15.2;What Is PKI?;480
15.2.1;The Function of the PKI;482
15.2.2;Components of PKI;483
15.2.3;How PKI Works;485
15.2.3.1;PKCS Standards;487
15.3;How Certificates Work;493
15.4;Public Key Functionality;496
15.4.1;Digital Signatures;497
15.4.2;Authentication;498
15.4.3;Secret Key Agreement via Public Key;499
15.4.4;Bulk Data Encryption without Prior Shared Secrets;499
15.4.5;User Certificates;512
15.4.6;Machine Certificates;513
15.4.7;Application Certificates;513
15.5;Analyzing Certificate Needs within the Organization;513
15.6;Working with Certificate Services;514
15.6.1;Configuring a Certificate Authority;514
15.6.1.1;Certificate Authorities;515
15.6.1.1.1;Standard vs. Enterprise;515
15.6.1.1.2;Root vs. Subordinate Certificate Authorities;516
15.6.1.1.3;Certificate Requests;517
15.6.1.1.4;Certificate Practice Statement;522
15.6.2;Key Recovery;522
15.6.2.1;Backup and Restore;522
15.6.2.2;Assigning Roles;529
15.6.2.3;Enrollments;529
15.6.2.4;Revocation;530
15.7;Working with Templates;534
15.7.1;General Properties;536
15.7.2;Request Handling;538
15.7.3;Cryptography;539
15.7.4;Subject Name;541
15.7.5;Issuance Requirements;542
15.7.6;Security;545
15.7.7;Types of Templates;546
15.7.7.1;User Certificate Types;546
15.7.7.2;Computer Certificate Types;547
15.7.7.3;Other Certificate Types;549
15.7.7.4;Custom Certificate Templates;549
15.7.8;Securing Permissions;552
15.7.9;Versioning;553
15.7.10;Key Recovery Agent;554
15.8;Summary of Exam Objectives;556
15.9;Exam Objectives Fast Track;557
15.10;Exam Objectives Frequently Asked Questions;559
15.11;Self Test;562
15.12;Self Test Quick Answer Key;565
16;Chapter 8: Maintaining an Active Directory Environment;566
16.1;Introduction ;567
16.2;Backup and Recovery ;567
16.2.1;Using Windows Server Backup ;568
16.2.1.1;Scheduling a Backup ;573
16.2.1.2;Backing Up to Removable Media ;581
16.2.1.3;Backing Up System State Data ;584
16.2.1.4;Backing Up Key Files ;588
16.2.1.5;Backing Up Critical Volumes ;589
16.2.1.6;Recovering System State Data ;590
16.2.1.7;Recovering Key Files ;592
16.2.2;Directory Services Restore Mode ;598
16.2.3;Performing Authoritative and Nonauthoritative Restores ;601
16.2.3.1;Authoritative Restore ;601
16.2.3.2;Nonauthoritative Restore ;608
16.2.4;Linked Value Replication ;608
16.2.5;Backing Up and Restoring GPOs ;608
16.3;Offline Maintenance ;617
16.3.1;Restartable Active Directory ;617
16.3.2;Offline Defrag and Compaction ;620
16.3.3;Active Directory Storage Allocation ;623
16.4;Monitoring Active Directory ;624
16.4.1;The Network Monitor ;624
16.4.2;The Task Manager ;627
16.4.2.1;The Applications Tab ;629
16.4.2.2;The Processes Tab ;630
16.4.2.3;The Services Tab ;631
16.4.2.4;The Performance Tab ;631
16.4.2.5;The Networking Tab ;632
16.4.2.6;The Users Tab ;634
16.4.3;The Event Viewer ;635
16.4.3.1;Custom Views ;635
16.4.3.2;Windows Logs ;638
16.4.3.3;Applications and Services Logs ;639
16.4.3.4;Subscriptions ;640
16.4.4;Replmon ;644
16.4.4.1;Using Replmon ;644
16.4.5;RepAdmin ;651
16.4.6;Windows System Resource Manager ;654
16.4.7;The Windows Reliability and Performance Monitor ;656
16.4.7.1;Resource Overview ;657
16.4.7.2;The Performance Monitor ;658
16.4.7.3;The Reliability Monitor ;660
16.4.7.4;Data Collector Sets ;662
16.4.7.5;Reports ;664
16.5;Summary of Exam Objectives ;666
16.6;Exam Objectives Fast Track ;668
16.7;Exam Objectives Frequently Asked Questions ;670
16.8;Self Test ;672
16.9;Self Test Quick Answer Key ;677
17;Appendix: Self Test Appendix;678
17.1;Chapter 1: Configuring Server Roles in Windows 2008;679
17.2;Chapter 2: Configuring Network Services;684
17.3;Chapter 3: Working with Users, Groups, and Computers;689
17.4;Chapter 4: Configuring the Active Directory Infrastructure;694
17.5;Chapter 5: Understanding Group Policy;701
17.6;Chapter 6: Configuring Group Policy;709
17.7;Chapter 7: Configuring Certificate Services and PKI;715
17.8;Chapter 8: Maintaining an Active Directory Environment;721
18;Index;730