Network Services Group .:.

Implementing and Administering Microsoft Windows 2000 Directory Services

Published: July 29, 2002

Introduction

This course is designed to provide students with the knowledge and skills necessary to install, configure, and administer Microsoft Windows® 2000 Active Directory™ directory services. The course also focuses on implementing Group Policy and performing the Group Policy–related tasks that are required to centrally manage users and computers.

At Course Completion

At the end of the course, students will be able to:

•	Identify the concepts of the Active Directory directory service and its logical and physical structures.
•	Implement a Domain Name System (DNS) infrastructure in preparation for installing Active Directory.
•	Install Active Directory on a computer running Windows 2000 Server, and perform post-installation tasks.
•	Set up and administer domain user accounts and groups.
•	Publish resources, including printers and shared folders, in Active Directory.
•	Delegate administrative control of Active Directory objects in Windows 2000.
•	Implement Group Policy.
•	Manage user environments by using Group Policy.
•	Use Group Policy to deploy software.
•	Create and manage trees and forests in a Windows 2000 network, and administer forest-wide resources.
•	Manage Active Directory replication within a site and between sites.
•	Manage operations masters.
•	Manage and restore the Active Directory database.
•	Implement an Active Directory infrastructure that is based on the business requirements of a fictitious organization.

Microsoft Certified Professional Exams

This course will help the student prepare for the following Microsoft Certified Professional exam:

•	Exam 70-217,

Prerequisites

•

Course 2151, Microsoft Windows 2000 Network and Operating System Essentials , or equivalent skills and knowledge.

•

Course 2152, Implementing Microsoft Windows 2000 Professional and Server , or equivalent knowledge and skills. These include:

•	Installing Windows 2000
•	Using administrative tools in Windows 2000
•	Configuring hard disks and partitions
•	Creating users
•	Creating and using security groups to manage access to resources
•	Creating and administering printers
•	Setting up and administering permissions for files and folders

•

Course 2153, Implementing a Microsoft Windows 2000 Network Infrastructure , or equivalent knowledge and skills. This includes installing and configuring Transmission Control Protocol/Internet Protocol (TCP/IP), DNS, and Certificate Services.

•

A thorough understanding of DNS, including hands-on experience configuring DNS, and setting up forward and reverse lookup zones.

The course materials, lectures, and lab exercises are in English. To benefit fully from the instruction, students need an understanding of the English language and completion of the prerequisites.

Course Materials

The course materials are yours to keep.

You will be provided with the following software for use in the classroom:

•	Microsoft Windows 2000 Professional
•	Microsoft Windows 2000 Advanced Server

Course Outline

Day 1

Module 1: Introduction to Active Directory in Windows 2000

Take a closer look: Download Sample Module 1 (Portable Document Format, 1.18 MB).

Topics

Introduction to Active Directory
Active Directory Logical Structure
Active Directory Physical Structure
Methods for Administering a Windows 2000 Network

Skills

Students will be able to:

•	Describe the function of Active Directory.
•	Describe the logical structure of Active Directory.
•	Describe the physical structure of Active Directory.
•	Describe the methods for administering a Windows 2000 network.

Module 2: Implementing DNS to Support Active Directory

Topics

Introduction to the Role of DNS in Active Directory
DNS and Active Directory
DNS Name Resolution in Active Directory
Active Directory Integrated Zones
Installing and Configuring DNS to Support Active Directory

Lab

Installing and Configuring DNS to Support Active Directory

Skills

Students will be able to:

•	Install and configure DNS to support an installation of Active Directory.

Module 3: Creating a Windows 2000 Domain

Topics

Introduction to Creating a Windows 2000 Domain
Installing Active Directory
The Active Directory Installation Process
Examining the Default Structure of Active Directory
Performing Post Active Directory Installation Tasks
Troubleshooting the Installation of Active Directory
Removing Active Directory

Labs

Creating a Windows 2000 Domain
Performing Post Active Directory Installation Tasks

Skills

Students will be able to:

•	Create a Windows 2000 domain by installing Active Directory.
•	Examine the default structure of Active Directory.
•	Perform post Active Directory installation tasks.
•	Troubleshoot common problems that may occur when installing Active Directory.
•	Remove Active Directory by using the Active Directory Installation wizard.

Module 4: Setting Up and Administering Users and Groups

Topics

Introduction to User Accounts and Groups
User Logon Names
Creating Multiple User Accounts
Administering User Accounts
Using Groups in Active Directory
Strategies for Using Groups in a Domain
Troubleshooting Domain User Accounts and Groups

Labs

Setting Up and Administering Domain User Accounts
Setting Up and Administering Groups in a Single Domain

Skills

Students will be able to:

•	Create multiple user accounts by importing user information into Active Directory.
•	Administer user accounts.
•	Use groups to manage access to domain resources.
•	Implement strategies for using security groups to manage access to domain resources.
•	Troubleshoot common problems with administering user accounts and groups.

Day 2

Module 5: Publishing Resources in Active Directory

Topics

Introduction to Publishing Resources
Setting Up and Administering Published Printers
Implementing Printer Locations
Setting Up and Administering Published Shared Folders
Comparing Published Objects and Shared Resources
Troubleshooting Published Resources

Lab

Publishing Resources in Active Directory

Skills

Students will be able to:

•	Set up and administer published printers in Active Directory.
•	Set up printer locations for published printers.
•	Set up and administer published shared folders in Active Directory.
•	Troubleshoot common problems with publishing resources in Active Directory.

Module 6: Delegating Administrative Control

Topics

Object Security in Active Directory
Controlling Access to Active Directory Objects
Delegating Administrative Control of Active Directory Objects
Customizing MMC Consoles
Setting Up Taskpads

Labs

Delegating Administrative Control
Creating Custom Administrative Tools

Skills

Students will be able to:

•	Manage object security in Active Directory.
•	Control access to Active Directory objects.
•	Delegate administrative control of Active Directory objects.
•	Create and deploy customized consoles.
•	Create and deploy customized taskpads.
•	Apply best practices for delegating administrative control.

Module 7: Implementing Group Policy

Topics

Introduction to Group Policy
Group Policy Structure
Working with Group Policy Objects
How Group Policy Settings Are Applied in Active Directory
Modifying Group Policy Inheritance
Delegating Administrative Control of Group Policy
Monitoring and Troubleshooting Group Policy

Labs

Implementing Group Policy
Delegating Group Policy Administration

Skills

Students will be able to:

•	Implement Group Policy.
•	Modify Group Policy inheritance.
•	Delegate administrative control of Group Policy objects.
•	Monitor and troubleshoot Group Policy.

Day 3

Module 8: Using Group Policy to Manage User Environments

Topics

Introduction to Managing User Environments
Introduction to Administrative Templates
Using Administrative Templates in Group Policy
Assigning Scripts in Group Policy
Using Group Policy to Redirect User Folders
Using Group Policy to Help Protect the User Environment
Troubleshooting User Environment Management

Labs

Using Administrative Templates to Assign Registry-Based Group Policy
Using Group Policy to Assign Scripts to Users and Computers
Implementing Folder Redirection Policy
Implementing Security Settings by Using Group Policy

Skills

Students will be able to:

•	Use Administrative Templates in Group Policy to assign registry-based Group Policy to control and configure user and computer environments.
•	Assign scripts, such as startup, shutdown, logon, and logoff, with Group Policy to control user environments.
•	Use Group Policy to redirect folders to a central network location.
•	Use Group Policy to apply security policies to help protect the user environment.
•	Troubleshoot managing user environments by using Group Policy.

Module 9: Using Group Policy to Manage Software

Topics

Introduction to Managing Software Deployment
Windows Installer Technology
Deploying Software
Configuring Software Deployment
Maintaining Deployed Software
Removing Deployed Software
Troubleshooting Software Deployment

Labs

Assigning and Publishing Software
Upgrading and Removing Software

Skills

Students will be able to:

•	Use Group Policy to deploy software.
•	Use Group Policy to configure software deployment.
•	Use Group Policy to maintain software.
•	Use Group Policy to remove software.
•	Troubleshoot common problems with software deployment.

Day 4

Module 10: Creating and Managing Trees and Forests

Take a closer look: Download Sample Module 10 (Portable Document Format, 2.67 MB).

Topics

Introduction to Trees and Forests
Creating Trees and Forests
Trust Relationships in Trees and Forests
The Global Catalog
Strategies for Using Groups in Trees and Forests
Troubleshooting Creating and Managing Trees and Forests

Labs

Creating Domain Trees and Establishing Trusts
Using Groups in a Forest

Skills

Students will be able to:

•	Create and manage trees and forests in Windows 2000.
•	Manage trust relationships in trees and forests.
•	Implement group strategies to gain access to resources across trees and forests.
•	Troubleshoot common problems that can occur when creating and managing trees and forests in Windows 2000.

Module 11: Managing Active Directory Replication

Topics

Introduction to Active Directory Replication
Replication Components and Processes
Replication Topology
Using Sites to Optimize Active Directory Replication
Implementing Sites to Manage Active Directory Replication
Monitoring Replication Traffic
Adjusting Replication
Troubleshooting Active Directory Replication

Labs

Tracking Active Directory Replication
Using Sites to Manage Active Directory Replication
Monitoring Replication

Skills

Students will be able to:

•	Use sites to manage Active Directory replication.
•	Monitor replication traffic.
•	Adjust the replication behavior to improve replication performance.
•	Troubleshoot common problems with Active Directory replication.

Day 5

Module 12: Managing Operations Masters

Topics

Introduction to Operations Masters
Operations Master Roles
Managing Operations Master Roles
Managing Operations Master Failures

Lab

Managing Operations Masters

Skills

Students will be able to:

•	Determine the holder of an operations master role.
•	Transfer and seize an operations master role.

Module 13: Maintaining the Active Directory Database

Topics

Introduction to Maintaining the Active Directory Database
The Process of Modifying Data in Active Directory
The Garbage Collection Process
Backing Up Active Directory
Restoring Active Directory
Moving the Active Directory Database
Defragmenting the Active Directory Database

Labs

Backing Up and Restoring Active Directory
Maintaining the Active Directory Database

Skills

Students will be able to:

•	Back up the system state data by using the Backup utility.
•	Restore Active Directory by restoring the system state data.
•	Move the Active Directory database to a new location.
•	Defragment the Active Directory database.

Module 14: Implementing an Active Directory Infrastructure

Topics

Business Scenario
Requirements for the Active Directory Infrastructure
Class Discussion: How to Implement the Active Directory Infrastructure

Lab

Implementing the Active Directory Infrastructure

Skills

Students will be able to:

•	Perform the tasks necessary to implement an Active Directory infrastructure.