| |
| |
Introduction | |
| |
| |
Goals and Methods | |
| |
| |
How This Book Is Organized | |
| |
| |
Study and Exam Preparation Tips | |
| |
| |
Learning Styles | |
| |
| |
Study Tips | |
| |
| |
Study Strategies | |
| |
| |
Pretesting Yourself | |
| |
| |
Exam Prep Tips | |
| |
| |
Microsoft 70-640 Exam Topics | |
| |
| |
| |
Getting Started with Active Directory | |
| |
| |
The Foundation of Active Directory | |
| |
| |
X.500 | |
| |
| |
LDAP | |
| |
| |
Naming Standards of X.500 and LDAP | |
| |
| |
Distinguished Names | |
| |
| |
Relative Distinguished Names | |
| |
| |
User Principal Names | |
| |
| |
Globally Unique Identifiers | |
| |
| |
Security Identifiers | |
| |
| |
Active Directory Canonical Names | |
| |
| |
The Building Blocks of Active Directory | |
| |
| |
Namespaces | |
| |
| |
Objects | |
| |
| |
Containers | |
| |
| |
Schemas | |
| |
| |
Global Catalogs | |
| |
| |
Partitions | |
| |
| |
Logical Components of Active Directory | |
| |
| |
Domains | |
| |
| |
Trees | |
| |
| |
Forests | |
| |
| |
Organizational Units | |
| |
| |
Sites | |
| |
| |
Domain Controllers | |
| |
| |
Global Catalog Servers | |
| |
| |
Operations Masters | |
| |
| |
New Features of Active Directory in Windows Server 2008 | |
| |
| |
Server Manager | |
| |
| |
Adding Roles and Features | |
| |
| |
Command-Line Server Management | |
| |
| |
Windows Server 2008 R2 | |
| |
| |
Summary | |
| |
| |
| |
Installing and Configuring DNS for Active Directory | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
The Hierarchical Nature of DNS | |
| |
| |
Installing DNS on Windows Server 2008 R2 | |
| |
| |
Configuring DNS Zones | |
| |
| |
DNS Zone Types | |
| |
| |
Primary Zones | |
| |
| |
Secondary Zones | |
| |
| |
Stub Zones | |
| |
| |
Active Directory Integrated Zones | |
| |
| |
GlobalNames Zones | |
| |
| |
DNS Name Server Roles | |
| |
| |
Primary Name Server | |
| |
| |
Secondary Name Server | |
| |
| |
Caching-Only Server | |
| |
| |
Forwarders | |
| |
| |
Creating DNS Zones | |
| |
| |
Forward Lookup Zones | |
| |
| |
Reverse Lookup Zones | |
| |
| |
DNS Resource Records | |
| |
| |
Configuring DNS Zone Properties | |
| |
| |
Configuring Zone Types | |
| |
| |
Adding Authoritative DNS Servers to a Zone | |
| |
| |
Dynamic, Nondynamic, and Secure Dynamic DNS | |
| |
| |
Zone Scavenging | |
| |
| |
Time to Live | |
| |
| |
Integrating DNS with WINS | |
| |
| |
Command-Line DNS Server Administration | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Installing Active Directory Domain Services | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Planning the Active Directory Namespace | |
| |
| |
Subdividing the Active Directory Namespace | |
| |
| |
Administrative or Geographical Organization of Domains | |
| |
| |
Use of Multiple Trees | |
| |
| |
Best Practices | |
| |
| |
Creating Forests and Domains | |
| |
| |
Requirements for Installing Active Directory Domain Services | |
| |
| |
Installing Active Directory Domain Services | |
| |
| |
New Forests | |
| |
| |
New Domains in Existing Forests | |
| |
| |
Existing Domains | |
| |
| |
Performing Unattended Installations of Active Directory | |
| |
| |
Server Core Domain Controllers | |
| |
| |
Removing Active Directory | |
| |
| |
Interoperability with Previous Versions of Active Directory | |
| |
| |
Forest and Domain Functional Levels | |
| |
| |
Upgrading Domain and Forest Functional Levels | |
| |
| |
The Adprep Utility | |
| |
| |
Running the Adprep /forestprep Command | |
| |
| |
Running the Adprep /domainprep Command | |
| |
| |
Upgrading a Windows Server 2003 Domain Controller | |
| |
| |
Additional Forest and Domain Configuration Tasks | |
| |
| |
Verifying the Proper Installation of Active Directory | |
| |
| |
Active Directory Migration Tool v.3.1 | |
| |
| |
Alternative User Principal Name Suffixes | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Configuring DNS Server Settings and Replication | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Configuring DNS Server Settings | |
| |
| |
Forwarding | |
| |
| |
Conditional Forwarders | |
| |
| |
Root Hints | |
| |
| |
Configuring Zone Delegation | |
| |
| |
Debug Logging | |
| |
| |
Event Logging | |
| |
| |
DNS Security Extensions | |
| |
| |
Advanced Server Options | |
| |
| |
Server Options | |
| |
| |
Round Robin | |
| |
| |
Disable Recursion | |
| |
| |
Name Checking | |
| |
| |
Loading Zone Data | |
| |
| |
Server Scavenging | |
| |
| |
Monitoring DNS | |
| |
| |
Configuring Zone Transfers and Replication | |
| |
| |
Replication Scope | |
| |
| |
Types of Zone Transfers | |
| |
| |
Full Zone Transfer | |
| |
| |
Incremental Zone Transfer | |
| |
| |
Configuring Zone Transfers | |
| |
| |
Configuring DNS Notify | |
| |
| |
Secure Zone Transfers | |
| |
| |
Configuring Name Servers | |
| |
| |
Application Directory Partitions | |
| |
| |
Installing and Configuring Application Directory Partitions | |
| |
| |
Creating Application Directory Partition Replicas | |
| |
| |
Application Directory Partition Reference Domains | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Global Catalogs and Operations Masters | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Configuring Global Catalog Servers | |
| |
| |
Planning the Placement of Global Catalog Servers | |
| |
| |
Promoting Domain Controllers to Global Catalog Servers | |
| |
| |
Using Universal Group Membership Caching | |
| |
| |
Using Partial Attribute Sets | |
| |
| |
Configuring Operations Masters | |
| |
| |
Schema Master | |
| |
| |
Configuring the Schema | |
| |
| |
Extending the Schema | |
| |
| |
Deactivating Schema Objects | |
| |
| |
Domain Naming Master | |
| |
| |
PDC Emulator | |
| |
| |
Time Service | |
| |
| |
Infrastructure Master | |
| |
| |
RID Master | |
| |
| |
Placement of Operations Masters | |
| |
| |
Transferring and Seizing of Operations Master Roles | |
| |
| |
Transferring Operations Master Roles | |
| |
| |
Seizing Operations Masters Roles | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Configuring Active Directory Sites and Replication | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
The Need for Active Directory Sites | |
| |
| |
Configuring Sites and Subnets | |
| |
| |
Creating Sites | |
| |
| |
Adding Domain Controllers | |
| |
| |
Creating and Using Subnets | |
| |
| |
Site Links, Site Link Bridges, and Bridgehead Servers | |
| |
| |
The Need for Site Links and Site Link Bridges | |
| |
| |
Configuring Site Links | |
| |
| |
Site Link Bridges | |
| |
| |
Site Link Costs | |
| |
| |
Sites Infrastructure | |
| |
| |
Knowledge Consistency Checker | |
| |
| |
Intersite Topology Generator | |
| |
| |
Configuring Active Directory Replication | |
| |
| |
Concepts of Active Directory Replication | |
| |
| |
Intersite and Intrasite Replication | |
| |
| |
Distributed File System | |
| |
| |
One-Way Replication | |
| |
| |
Bridgehead Servers | |
| |
| |
Replication Protocols | |
| |
| |
Ports Used for Intersite Replication | |
| |
| |
Replication Scheduling | |
| |
| |
Intersite Replication Scheduling | |
| |
| |
Intrasite Replication Scheduling | |
| |
| |
Forcing Intersite Replication | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Additional Active Directory Roles | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
New Server Roles and Features | |
| |
| |
Active Directory Lightweight Directory Services | |
| |
| |
Installing AD LDS | |
| |
| |
Installing the AD LDS Role | |
| |
| |
Installing AD LDS Instances | |
| |
| |
Configuring Data Within AD LDS | |
| |
| |
Using the ADSI Edit Snap-in | |
| |
| |
Using Ldp.exe | |
| |
| |
Using the Active Directory Schema Snap-in | |
| |
| |
Using the Active Directory Sites and Services Snap-in | |
| |
| |
Migrating to AD LDS | |
| |
| |
Configuring an Authentication Server | |
| |
| |
Creating AD LDS User Accounts and Groups | |
| |
| |
Binding to an AD LDS Instance with an AD LDS User | |
| |
| |
Using AD LDS on Server Core | |
| |
| |
Active Directory Rights Management Services | |
| |
| |
Installing AD RMS | |
| |
| |
Certificate Request and Installation | |
| |
| |
Self-Enrollments | |
| |
| |
Delegation | |
| |
| |
Active Directory Metadirectory Services | |
| |
| |
Active Directory Federation Services | |
| |
| |
Installing the AD FS Server Role | |
| |
| |
Configuring Trust Policies | |
| |
| |
User and Group Claim Mapping | |
| |
| |
Configuring Federation Trusts | |
| |
| |
Creating Claims | |
| |
| |
Creating Account Stores | |
| |
| |
Enabling Applications | |
| |
| |
Creating Federation Trusts | |
| |
| |
Windows Server 2008 R2 Virtualization | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Read-Only Domain Controllers | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Installing a Read-Only Domain Controller | |
| |
| |
Planning the Use of RODCs | |
| |
| |
Installing RODCs | |
| |
| |
Prestaging an RODC | |
| |
| |
Managing a Read-Only Domain Controller | |
| |
| |
Unidirectional Replication | |
| |
| |
Administrator Role Separation | |
| |
| |
Read-Only DNS | |
| |
| |
BitLocker | |
| |
| |
Preparing Your Computer to Use BitLocker | |
| |
| |
Enabling BitLocker | |
| |
| |
Managing BitLocker | |
| |
| |
Replication of Passwords | |
| |
| |
Planning a Password Replication Policy | |
| |
| |
Configuring a Password Replication Policy | |
| |
| |
Credential Caching | |
| |
| |
Administering the RODC's Authentication Lists | |
| |
| |
Syskey | |
| |
| |
Review all the Key Topics | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Active Directory User and Group Accounts | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Creating User and Group Accounts | |
| |
| |
Introducing User Accounts | |
| |
| |
Introducing Group Accounts | |
| |
| |
Creating User, Computer, and Group Accounts | |
| |
| |
Use of Template Accounts | |
| |
| |
Using Bulk Import to Automate Account Creation | |
| |
| |
Csvde | |
| |
| |
Ldifde | |
| |
| |
Dsadd | |
| |
| |
Additional Command-Line Tools | |
| |
| |
Scripts | |
| |
| |
Configuring the UPN | |
| |
| |
UPN Suffixes | |
| |
| |
Adding or Removing UPN Suffixes | |
| |
| |
Configuring Contacts | |
| |
| |
Creating Distribution Lists | |
| |
| |
Managing and Maintaining Accounts | |
| |
| |
Creating Organizational Units | |
| |
| |
Configuring Group Membership | |
| |
| |
AGDLP/AGUDLP | |
| |
| |
Account Resets | |
| |
| |
Deny Domain Local Group | |
| |
| |
Protected Admin | |
| |
| |
Local Versus Domain Groups | |
| |
| |
Deprovisioning Accounts | |
| |
| |
Delegating Administrative Control of Active Directory Objects | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Trust Relationships in Active Directory | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Types of Trust Relationships | |
| |
| |
Transitive Trusts | |
| |
| |
Forest Trusts | |
| |
| |
External Trusts and Realm Trusts | |
| |
| |
Shortcut Trusts | |
| |
| |
Creating and Configuring Trust Relationships | |
| |
| |
Creating a Forest Trust Relationship | |
| |
| |
Creating External Trust Relationships | |
| |
| |
Creating Realm Trust Relationships | |
| |
| |
Creating Shortcut Trust Relationships | |
| |
| |
Managing Trust Relationships | |
| |
| |
Validating Trust Relationships | |
| |
| |
Authentication Scope | |
| |
| |
SID Filtering | |
| |
| |
Removing a Cross-forest Trust Relationship | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Creating and Applying Group Policy Objects | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Overview of Group Policy | |
| |
| |
Components of Group Policy | |
| |
| |
Group Policy Containers | |
| |
| |
Group Policy Templates | |
| |
| |
New Features of Group Policy in Windows Server 2008 and Windows Server 2008 R2 | |
| |
| |
Creating and Applying GPOs | |
| |
| |
Managing GPOs | |
| |
| |
Linking GPOs | |
| |
| |
Managing GPO Links | |
| |
| |
Deleting a GPO | |
| |
| |
Delegating Control of GPOs | |
| |
| |
Specifying a Domain Controller | |
| |
| |
Configuring GPO Hierarchy and Processing Priority | |
| |
| |
OU Hierarchy | |
| |
| |
Enforced | |
| |
| |
Block Inheritance | |
| |
| |
Modifying the Sequence of GPO Application | |
| |
| |
Disabling User Objects | |
| |
| |
Group Policy Filtering | |
| |
| |
Security Filtering of GPOs | |
| |
| |
Windows Management Instrumentation | |
| |
| |
Windows PowerShell | |
| |
| |
Configuring GPO Templates | |
| |
| |
Group Policy Loopback Processing | |
| |
| |
User Rights | |
| |
| |
ADMX Central Store | |
| |
| |
Administrative Templates | |
| |
| |
Restricted Groups | |
| |
| |
Starter GPOs | |
| |
| |
Shell Access Policies | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Group Policy Software Deployment | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Types of Software Deployment | |
| |
| |
Assigning and Publishing Software | |
| |
| |
Assigning Software to Users | |
| |
| |
Assigning Software to Computers | |
| |
| |
Publishing Software to Users | |
| |
| |
Deploying Software Using Group Policy | |
| |
| |
ZAP Files | |
| |
| |
Software Installation Properties | |
| |
| |
Software Package Properties | |
| |
| |
Upgrading Software | |
| |
| |
Use of Transform Files to Modify Software Packages | |
| |
| |
Redeployment of Upgraded Software | |
| |
| |
Removal of Software | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Account Policies and Audit Policies | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Use of Group Policy to Configure Security | |
| |
| |
Configuring Account Policies | |
| |
| |
Domain Password Policies | |
| |
| |
Account Lockout | |
| |
| |
Unlocking an Account | |
| |
| |
Kerberos Policy | |
| |
| |
Fine-Grained Password Policies | |
| |
| |
Password Settings Precedence | |
| |
| |
Configuring Fine-Grained Password Policies | |
| |
| |
Managing Fine-Grained Password Policies | |
| |
| |
Viewing the Resultant PSO | |
| |
| |
Security Options | |
| |
| |
Using Additional Security Configuration Tools | |
| |
| |
Auditing of Active Directory Services | |
| |
| |
New Features of Active Directory Auditing | |
| |
| |
Using GPOs to Configure Auditing | |
| |
| |
Available Auditing Categories | |
| |
| |
Configuring Basic Auditing Policies | |
| |
| |
Configuring Advanced Audit Policies | |
| |
| |
Using Auditpol.exe to Configure Auditing | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Monitoring Active Directory | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Tools Used to Monitor Active Directory | |
| |
| |
Network Monitor | |
| |
| |
Task Manager | |
| |
| |
Configuring Application Priority | |
| |
| |
Event Viewer | |
| |
| |
Customizing Event Viewer | |
| |
| |
Customizing Event Viewer Detail | |
| |
| |
Reliability and Performance Monitor | |
| |
| |
Resource Monitor | |
| |
| |
Reliability Monitor | |
| |
| |
Performance Monitor | |
| |
| |
Data Collector Sets | |
| |
| |
Windows System Resource Manager | |
| |
| |
Server Performance Advisor | |
| |
| |
Monitoring and Troubleshooting Active Directory Replication | |
| |
| |
Replmon | |
| |
| |
Repadmin | |
| |
| |
Replicate | |
| |
| |
Showmeta | |
| |
| |
Showreps | |
| |
| |
Add | |
| |
| |
Sync | |
| |
| |
Syncall | |
| |
| |
Showconn | |
| |
| |
Replsummary | |
| |
| |
Dcdiag | |
| |
| |
Troubleshooting the Application of Group Policy Objects | |
| |
| |
Resultant Set of Policy | |
| |
| |
Planning Mode/Group Policy Modeling | |
| |
| |
Logging Mode/Group Policy Results | |
| |
| |
Using the Delegation of Control Wizard | |
| |
| |
Gpresult | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Maintaining Active Directory | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Backing Up and Recovering Active Directory | |
| |
| |
Backup Permissions | |
| |
| |
Use of Windows Server Backup | |
| |
| |
Installing Windows Server Backup | |
| |
| |
Backing Up Critical Volumes of a Domain Controller | |
| |
| |
The wbadmin Command | |
| |
| |
Scheduling a Backup | |
| |
| |
Using Removable Media | |
| |
| |
Recovering Active Directory | |
| |
| |
Directory Services Restore Mode | |
| |
| |
Performing a Nonauthoritative Restore | |
| |
| |
Using the wbadmin Command to Recover Your Server | |
| |
| |
Performing an Authoritative Restore | |
| |
| |
Recovering Back-Links of Authoritatively Restored Objects | |
| |
| |
Performing a Full Server Recovery of a Domain Controller | |
| |
| |
Linked-Value Replication and Authoritative Restore of Group Memberships | |
| |
| |
The Active Directory Recycle Bin | |
| |
| |
Enabling the Active Directory Recycle Bin | |
| |
| |
Using the Active Directory Recycle Bin to Restore Deleted Objects | |
| |
| |
Backing Up and Restoring GPOs | |
| |
| |
Backing Up GPOs | |
| |
| |
Restoring GPOs | |
| |
| |
Importing GPOs | |
| |
| |
Using Scripts for Group Policy Backup and Restore | |
| |
| |
Offline Maintenance of Active Directory | |
| |
| |
Restartable Active Directory | |
| |
| |
Offline Defragmentation and Compaction | |
| |
| |
Online Defragmentation | |
| |
| |
Offline Defragmentation | |
| |
| |
Active Directory Database Storage Allocation | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Installing and Configuring Certificate Services | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
What's New with Certificate Services in Windows Server 2008? | |
| |
| |
New Features of Active Directory Certificate Services in Windows Server 2008 R2 | |
| |
| |
Installing Active Directory Certificate Services | |
| |
| |
Configuring Certificate Authority Types and Hierarchies | |
| |
| |
Installing Root CAs | |
| |
| |
Installing Subordinate CAs | |
| |
| |
Understanding Certificate Requests | |
| |
| |
Using Certificate Practice Statements | |
| |
| |
Configuring Certificate Authority Server Settings | |
| |
| |
Installing the Certificates Snap-in | |
| |
| |
Working with Certificate Stores | |
| |
| |
Using Group Policy to Import Certificates | |
| |
| |
Backing Up Certificates and Keys | |
| |
| |
Restoring Certificates and Keys | |
| |
| |
Using Group Policy to Enable Credential Roaming | |
| |
| |
Backing Up and Restoring Certificate Databases | |
| |
| |
Assigning Administration Roles | |
| |
| |
Configuring Certificate Server Permissions | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
| |
Managing Certificate Templates, Enrollments, and Certificate Revocation | |
| |
| |
"Do I Know This Already?" Quiz | |
| |
| |
Managing Certificate Templates | |
| |
| |
Understanding Certificate Template Types | |
| |
| |
Configuring Certificate Templates | |
| |
| |
Securing Template Permissions | |
| |
| |
Enabling the Use of Templates | |
| |
| |
Managing Different Certificate Template Versions | |
| |
| |
Archiving Keys | |
| |
| |
Configuring Key Recovery Agents | |
| |
| |
Managing Certificate Enrollments | |
| |
| |
Understanding Network Device Enrollment Services | |
| |
| |
Enabling Certificate Autoenrollment | |
| |
| |
Configuring Web Enrollment | |
| |
| |
Configuring Smart Card Enrollment | |
| |
| |
Creating Enrollment Agents | |
| |
| |
Using Group Policy to Require Smart Cards for Logon | |
| |
| |
Managing Certificate Revocation | |
| |
| |
Configuring Certificate Revocation Lists | |
| |
| |
Configuring a CRL Distribution Point | |
| |
| |
Troubleshooting CRLs | |
| |
| |
Configuring Online Responders | |
| |
| |
Configuring Responder Properties | |
| |
| |
Adding a Revocation Configuration | |
| |
| |
Configuring Arrays | |
| |
| |
Configuring Authority Information Access | |
| |
| |
Review All the Key Topics | |
| |
| |
Complete the Tables and Lists from Memory | |
| |
| |
Definitions of Key Terms | |
| |
| |
Practice Exam | |
| |
| |
Answers to Practice Exam | |
| |
| |
| |
Answers to the "Do I Know This Already?" Quizzes | |
| |
| |
| |
Installing Windows Server 2008 R2 | |
| |
| |
Glossary | |
| |
| |
Elements Available on CD | |
| |
| |
| |
Memory Tables | |
| |
| |
| |
Memory Tables Answer Key | |
| |
| |
TOC, 9780789747082, 11/19/2010 | |