Skip to content

MCTS 70-640 Cert Guide Windows Server 2008 Active Directory, Configuring

Best in textbook rentals since 2012!

ISBN-10: 0789747081

ISBN-13: 9780789747082

Edition: 2011

Authors: Don Poulton

List price: $59.99
Blue ribbon 30 day, 100% satisfaction guarantee!
Out of stock
We're sorry. This item is currently unavailable.
what's this?
Rush Rewards U
Members Receive:
Carrot Coin icon
XP icon
You have reached 400 XP and carrot coins. That is the daily max!

This is a comprehensive, self-study guide for the latest Microsoft Windows Server 2008 R2 exam.
Customers also bought

Book details

List price: $59.99
Copyright year: 2011
Publisher: Que
Publication date: 12/23/2010
Binding: Mixed Media
Pages: 880
Size: 7.00" wide x 9.00" long x 1.75" tall
Weight: 3.432
Language: English

Colin Cowie is host of Everyday Elegance on WE Network and contributing editor for InStyle. He has made countless media appearances and through his event company, Colin Cowie Lifestyles, has planned parties for numerous celebrities. He lives in New York City and Los Angeles.

Introduction
Goals and Methods
How This Book Is Organized
Study and Exam Preparation Tips
Learning Styles
Study Tips
Study Strategies
Pretesting Yourself
Exam Prep Tips
Microsoft 70-640 Exam Topics
Getting Started with Active Directory
The Foundation of Active Directory
X.500
LDAP
Naming Standards of X.500 and LDAP
Distinguished Names
Relative Distinguished Names
User Principal Names
Globally Unique Identifiers
Security Identifiers
Active Directory Canonical Names
The Building Blocks of Active Directory
Namespaces
Objects
Containers
Schemas
Global Catalogs
Partitions
Logical Components of Active Directory
Domains
Trees
Forests
Organizational Units
Sites
Domain Controllers
Global Catalog Servers
Operations Masters
New Features of Active Directory in Windows Server 2008
Server Manager
Adding Roles and Features
Command-Line Server Management
Windows Server 2008 R2
Summary
Installing and Configuring DNS for Active Directory
"Do I Know This Already?" Quiz
The Hierarchical Nature of DNS
Installing DNS on Windows Server 2008 R2
Configuring DNS Zones
DNS Zone Types
Primary Zones
Secondary Zones
Stub Zones
Active Directory Integrated Zones
GlobalNames Zones
DNS Name Server Roles
Primary Name Server
Secondary Name Server
Caching-Only Server
Forwarders
Creating DNS Zones
Forward Lookup Zones
Reverse Lookup Zones
DNS Resource Records
Configuring DNS Zone Properties
Configuring Zone Types
Adding Authoritative DNS Servers to a Zone
Dynamic, Nondynamic, and Secure Dynamic DNS
Zone Scavenging
Time to Live
Integrating DNS with WINS
Command-Line DNS Server Administration
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Installing Active Directory Domain Services
"Do I Know This Already?" Quiz
Planning the Active Directory Namespace
Subdividing the Active Directory Namespace
Administrative or Geographical Organization of Domains
Use of Multiple Trees
Best Practices
Creating Forests and Domains
Requirements for Installing Active Directory Domain Services
Installing Active Directory Domain Services
New Forests
New Domains in Existing Forests
Existing Domains
Performing Unattended Installations of Active Directory
Server Core Domain Controllers
Removing Active Directory
Interoperability with Previous Versions of Active Directory
Forest and Domain Functional Levels
Upgrading Domain and Forest Functional Levels
The Adprep Utility
Running the Adprep /forestprep Command
Running the Adprep /domainprep Command
Upgrading a Windows Server 2003 Domain Controller
Additional Forest and Domain Configuration Tasks
Verifying the Proper Installation of Active Directory
Active Directory Migration Tool v.3.1
Alternative User Principal Name Suffixes
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Configuring DNS Server Settings and Replication
"Do I Know This Already?" Quiz
Configuring DNS Server Settings
Forwarding
Conditional Forwarders
Root Hints
Configuring Zone Delegation
Debug Logging
Event Logging
DNS Security Extensions
Advanced Server Options
Server Options
Round Robin
Disable Recursion
Name Checking
Loading Zone Data
Server Scavenging
Monitoring DNS
Configuring Zone Transfers and Replication
Replication Scope
Types of Zone Transfers
Full Zone Transfer
Incremental Zone Transfer
Configuring Zone Transfers
Configuring DNS Notify
Secure Zone Transfers
Configuring Name Servers
Application Directory Partitions
Installing and Configuring Application Directory Partitions
Creating Application Directory Partition Replicas
Application Directory Partition Reference Domains
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Global Catalogs and Operations Masters
"Do I Know This Already?" Quiz
Configuring Global Catalog Servers
Planning the Placement of Global Catalog Servers
Promoting Domain Controllers to Global Catalog Servers
Using Universal Group Membership Caching
Using Partial Attribute Sets
Configuring Operations Masters
Schema Master
Configuring the Schema
Extending the Schema
Deactivating Schema Objects
Domain Naming Master
PDC Emulator
Time Service
Infrastructure Master
RID Master
Placement of Operations Masters
Transferring and Seizing of Operations Master Roles
Transferring Operations Master Roles
Seizing Operations Masters Roles
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Configuring Active Directory Sites and Replication
"Do I Know This Already?" Quiz
The Need for Active Directory Sites
Configuring Sites and Subnets
Creating Sites
Adding Domain Controllers
Creating and Using Subnets
Site Links, Site Link Bridges, and Bridgehead Servers
The Need for Site Links and Site Link Bridges
Configuring Site Links
Site Link Bridges
Site Link Costs
Sites Infrastructure
Knowledge Consistency Checker
Intersite Topology Generator
Configuring Active Directory Replication
Concepts of Active Directory Replication
Intersite and Intrasite Replication
Distributed File System
One-Way Replication
Bridgehead Servers
Replication Protocols
Ports Used for Intersite Replication
Replication Scheduling
Intersite Replication Scheduling
Intrasite Replication Scheduling
Forcing Intersite Replication
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Additional Active Directory Roles
"Do I Know This Already?" Quiz
New Server Roles and Features
Active Directory Lightweight Directory Services
Installing AD LDS
Installing the AD LDS Role
Installing AD LDS Instances
Configuring Data Within AD LDS
Using the ADSI Edit Snap-in
Using Ldp.exe
Using the Active Directory Schema Snap-in
Using the Active Directory Sites and Services Snap-in
Migrating to AD LDS
Configuring an Authentication Server
Creating AD LDS User Accounts and Groups
Binding to an AD LDS Instance with an AD LDS User
Using AD LDS on Server Core
Active Directory Rights Management Services
Installing AD RMS
Certificate Request and Installation
Self-Enrollments
Delegation
Active Directory Metadirectory Services
Active Directory Federation Services
Installing the AD FS Server Role
Configuring Trust Policies
User and Group Claim Mapping
Configuring Federation Trusts
Creating Claims
Creating Account Stores
Enabling Applications
Creating Federation Trusts
Windows Server 2008 R2 Virtualization
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Read-Only Domain Controllers
"Do I Know This Already?" Quiz
Installing a Read-Only Domain Controller
Planning the Use of RODCs
Installing RODCs
Prestaging an RODC
Managing a Read-Only Domain Controller
Unidirectional Replication
Administrator Role Separation
Read-Only DNS
BitLocker
Preparing Your Computer to Use BitLocker
Enabling BitLocker
Managing BitLocker
Replication of Passwords
Planning a Password Replication Policy
Configuring a Password Replication Policy
Credential Caching
Administering the RODC's Authentication Lists
Syskey
Review all the Key Topics
Definitions of Key Terms
Active Directory User and Group Accounts
"Do I Know This Already?" Quiz
Creating User and Group Accounts
Introducing User Accounts
Introducing Group Accounts
Creating User, Computer, and Group Accounts
Use of Template Accounts
Using Bulk Import to Automate Account Creation
Csvde
Ldifde
Dsadd
Additional Command-Line Tools
Scripts
Configuring the UPN
UPN Suffixes
Adding or Removing UPN Suffixes
Configuring Contacts
Creating Distribution Lists
Managing and Maintaining Accounts
Creating Organizational Units
Configuring Group Membership
AGDLP/AGUDLP
Account Resets
Deny Domain Local Group
Protected Admin
Local Versus Domain Groups
Deprovisioning Accounts
Delegating Administrative Control of Active Directory Objects
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Trust Relationships in Active Directory
"Do I Know This Already?" Quiz
Types of Trust Relationships
Transitive Trusts
Forest Trusts
External Trusts and Realm Trusts
Shortcut Trusts
Creating and Configuring Trust Relationships
Creating a Forest Trust Relationship
Creating External Trust Relationships
Creating Realm Trust Relationships
Creating Shortcut Trust Relationships
Managing Trust Relationships
Validating Trust Relationships
Authentication Scope
SID Filtering
Removing a Cross-forest Trust Relationship
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Creating and Applying Group Policy Objects
"Do I Know This Already?" Quiz
Overview of Group Policy
Components of Group Policy
Group Policy Containers
Group Policy Templates
New Features of Group Policy in Windows Server 2008 and Windows Server 2008 R2
Creating and Applying GPOs
Managing GPOs
Linking GPOs
Managing GPO Links
Deleting a GPO
Delegating Control of GPOs
Specifying a Domain Controller
Configuring GPO Hierarchy and Processing Priority
OU Hierarchy
Enforced
Block Inheritance
Modifying the Sequence of GPO Application
Disabling User Objects
Group Policy Filtering
Security Filtering of GPOs
Windows Management Instrumentation
Windows PowerShell
Configuring GPO Templates
Group Policy Loopback Processing
User Rights
ADMX Central Store
Administrative Templates
Restricted Groups
Starter GPOs
Shell Access Policies
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Group Policy Software Deployment
"Do I Know This Already?" Quiz
Types of Software Deployment
Assigning and Publishing Software
Assigning Software to Users
Assigning Software to Computers
Publishing Software to Users
Deploying Software Using Group Policy
ZAP Files
Software Installation Properties
Software Package Properties
Upgrading Software
Use of Transform Files to Modify Software Packages
Redeployment of Upgraded Software
Removal of Software
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Account Policies and Audit Policies
"Do I Know This Already?" Quiz
Use of Group Policy to Configure Security
Configuring Account Policies
Domain Password Policies
Account Lockout
Unlocking an Account
Kerberos Policy
Fine-Grained Password Policies
Password Settings Precedence
Configuring Fine-Grained Password Policies
Managing Fine-Grained Password Policies
Viewing the Resultant PSO
Security Options
Using Additional Security Configuration Tools
Auditing of Active Directory Services
New Features of Active Directory Auditing
Using GPOs to Configure Auditing
Available Auditing Categories
Configuring Basic Auditing Policies
Configuring Advanced Audit Policies
Using Auditpol.exe to Configure Auditing
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Monitoring Active Directory
"Do I Know This Already?" Quiz
Tools Used to Monitor Active Directory
Network Monitor
Task Manager
Configuring Application Priority
Event Viewer
Customizing Event Viewer
Customizing Event Viewer Detail
Reliability and Performance Monitor
Resource Monitor
Reliability Monitor
Performance Monitor
Data Collector Sets
Windows System Resource Manager
Server Performance Advisor
Monitoring and Troubleshooting Active Directory Replication
Replmon
Repadmin
Replicate
Showmeta
Showreps
Add
Sync
Syncall
Showconn
Replsummary
Dcdiag
Troubleshooting the Application of Group Policy Objects
Resultant Set of Policy
Planning Mode/Group Policy Modeling
Logging Mode/Group Policy Results
Using the Delegation of Control Wizard
Gpresult
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Maintaining Active Directory
"Do I Know This Already?" Quiz
Backing Up and Recovering Active Directory
Backup Permissions
Use of Windows Server Backup
Installing Windows Server Backup
Backing Up Critical Volumes of a Domain Controller
The wbadmin Command
Scheduling a Backup
Using Removable Media
Recovering Active Directory
Directory Services Restore Mode
Performing a Nonauthoritative Restore
Using the wbadmin Command to Recover Your Server
Performing an Authoritative Restore
Recovering Back-Links of Authoritatively Restored Objects
Performing a Full Server Recovery of a Domain Controller
Linked-Value Replication and Authoritative Restore of Group Memberships
The Active Directory Recycle Bin
Enabling the Active Directory Recycle Bin
Using the Active Directory Recycle Bin to Restore Deleted Objects
Backing Up and Restoring GPOs
Backing Up GPOs
Restoring GPOs
Importing GPOs
Using Scripts for Group Policy Backup and Restore
Offline Maintenance of Active Directory
Restartable Active Directory
Offline Defragmentation and Compaction
Online Defragmentation
Offline Defragmentation
Active Directory Database Storage Allocation
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Installing and Configuring Certificate Services
"Do I Know This Already?" Quiz
What's New with Certificate Services in Windows Server 2008?
New Features of Active Directory Certificate Services in Windows Server 2008 R2
Installing Active Directory Certificate Services
Configuring Certificate Authority Types and Hierarchies
Installing Root CAs
Installing Subordinate CAs
Understanding Certificate Requests
Using Certificate Practice Statements
Configuring Certificate Authority Server Settings
Installing the Certificates Snap-in
Working with Certificate Stores
Using Group Policy to Import Certificates
Backing Up Certificates and Keys
Restoring Certificates and Keys
Using Group Policy to Enable Credential Roaming
Backing Up and Restoring Certificate Databases
Assigning Administration Roles
Configuring Certificate Server Permissions
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Managing Certificate Templates, Enrollments, and Certificate Revocation
"Do I Know This Already?" Quiz
Managing Certificate Templates
Understanding Certificate Template Types
Configuring Certificate Templates
Securing Template Permissions
Enabling the Use of Templates
Managing Different Certificate Template Versions
Archiving Keys
Configuring Key Recovery Agents
Managing Certificate Enrollments
Understanding Network Device Enrollment Services
Enabling Certificate Autoenrollment
Configuring Web Enrollment
Configuring Smart Card Enrollment
Creating Enrollment Agents
Using Group Policy to Require Smart Cards for Logon
Managing Certificate Revocation
Configuring Certificate Revocation Lists
Configuring a CRL Distribution Point
Troubleshooting CRLs
Configuring Online Responders
Configuring Responder Properties
Adding a Revocation Configuration
Configuring Arrays
Configuring Authority Information Access
Review All the Key Topics
Complete the Tables and Lists from Memory
Definitions of Key Terms
Practice Exam
Answers to Practice Exam
Answers to the "Do I Know This Already?" Quizzes
Installing Windows Server 2008 R2
Glossary
Elements Available on CD
Memory Tables
Memory Tables Answer Key
TOC, 9780789747082, 11/19/2010