Disegno e Amministrazione di Microsoft Windows 2000 Directory Services

Implementing and Administering Microsoft® Windows® 2000 Directory Services

Course No. 2154 · Five days

This course is designed to provide students with the knowledge and skills necessary to install, configure, and administer MicrosoftÒ WindowsÒ 2000 Active DirectoryÔ directory services. The course also focuses on implementing Group Policy and performing the Group Policy-related tasks required to centrally manage users and computers.

At Course Completion

At the end of the course, students will be able to:

· Identify the concepts of the

Active Directory directory service and its logical and physical structures

· Implement a Domain Name System (DNS) infrastructure in preparation for installing Active Directory

· Install Active Directory on a computer running Windows 2000 Server, and perform post-installation tasks

· Set up and administer domain user accounts and groups

· Publish resources, including printers and shared folders, in Active Directory

· Delegate administrative control of Active Directory objects in Windows 2000

· Implement Group Policy

· Manage user environments by using Group Policy

· Use Group Policy to deploy software

· Create and manage trees and forests in a Windows 2000 network, and administer forest-wide resources

· Manage Active Directory replication within a site and between sites

· Manage operations masters

· Manage and restore the Active

Directory database

· Implement an Active Directory infrastructure that is based on the business requirements of a fictitious organization.

Microsoft Certified Professional Exams

This course helps you prepare for the fol­lowing Microsoft Certified Professional exams:

· Exam 70-217, Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure

Prerequisites

Before attending this course, students must be able to demonstrate the following skills:

· Course 2151A, Microsoft Windows 2000 Network and Operating System Essentials, or equivalent skills and knowledge.

· Course 2152A, Implementing Microsoft Windows 2000 Professional and Server, or equivalent knowledge and skills. This includes installing Windows 2000, using administrative tools in Windows 2000, configuring hard disks and partitions, creating users, creating and using security groups to manage access to resources, creating and administering printers, and setting up and administering permissions for files and folders.

· Course 2153A, Implementing a Microsoft Windows 2000 Network Infrastructure, or equivalent knowledge and skills. This includes installing and configuring Transmission Control

Protocol/Internet Protocol (TCP/IP), DNS, and Certificate Services.

· A thorough understanding of DNS, including hands-on experience configuring DNS, and setting up forward and reverse lookup zones.

The course materials, lectures, and lab exercises are in English. To benefit fully from our instruction, students need an understanding of the English language and completion of the prerequisites.

Course Materials and Software

The course materials are yours to keep.

You will be provided with the following software for use in the classroom:

· Microsoft Windows 2000

Professional

For a referral to a Microsoft Certified Technical Education Center in your area, call (800) SOLPROV. Call your local Microsoft Certified

Technical Education Center for more information and to register for classes.

· Microsoft Windows 2000

Advanced Server

Day 1

Module 1: Introduction to Active Directory in Windows 2000

Topics:

Introduction to Active Directory

Active Directory logical structure

Active Directory physical structure

Methods for administering a Windows 2000 network

Skills:

Students will be able to:

Describe the function of Active Directory.

Describe the logical structure of Active

Directory.

Describe the physical structure of Active

Directory.

Describe the methods for administering a

Windows 2000 network.

Module 2: Implementing DNS to Support Active Directory

Topics:

Introduction to the role of DNS in Active

Directory

DNS and Active Directory

DNS name resolution in Active Directory

Active Directory integrated zones

Installing and configuring DNS to support

Active Directory

Lab:

Installing and configuring DNS to support

Active Directory

Skills:

Students will be able to:

Install and configure DNS to support an installation of Active Directory.

Module 3: Creating a Windows 2000 Domain

Topics:

Introduction to creating a Windows 2000 domain

Installing Active Directory

The Active Directory installation process

Examining the default structure of Active

Directory

Performing post Active Directory installation tasks

Troubleshooting the installation of Active

Directory

Removing Active Directory

Labs:

Creating a Windows 2000 domain

Performing post Active Directory installation tasks

Skills:

Students will be able to:

Create a Windows 2000 domain by installing Active Directory.

Examine the default structure of Active

Directory.

Perform post Active Directory installation tasks.

Troubleshoot common problems that may occur when installing Active Directory.

Remove Active Directory by using the Active

Directory Installation wizard.

Module 4: Setting Up and Administering Users and Groups

Topics:

Introduction to user accounts and groups

User logon names

Creating multiple user accounts

Administering user accounts

Using groups in Active Directory

Strategies for using groups in a domain

Troubleshooting domain user accounts and groups

Labs:

Setting up and administering domain user accounts

Setting up and administering groups in a single domain

Skills:

Students will be able to:

Create multiple user accounts by importing user information into Active Directory.

Administer user accounts.

Use groups to manage access to domain resources.

Implement strategies for using security groups to manage access to domain resources.

Troubleshoot common problems with administering user accounts and groups.

Day 2

Module 5: Publishing Resources in Active Directory

Topics:

Introduction to publishing resources

Setting up and administering published printers

Implementing printer locations

Setting up and administering published shared folders

Comparing published objects and shared resources

Troubleshooting published resources

Lab:

Publishing resources in Active Directory

Skills:

Students will be able to:

Set up and administer published printers in

Active Directory.

Set up printer locations for published printers.

Set up and administer published shared folders in Active Directory.

Troubleshoot common problems with publishing resources in Active Directory.

Module 6: Delegating Administrative

Control

Topics:

Object security in Active Directory

Controlling access to Active Directory objects

Delegating administrative control of Active

Directory objects

Customizing MMC consoles

Setting up taskpads

Labs:

Delegating administrative control

Creating custom administrative tools

Skills:

Students will be able to:

Manage object security in Active Directory.

Control access to Active Directory objects.

Delegate administrative control of Active

Directory objects.

Create and deploy customized consoles.

Create and deploy customized taskpads.

Apply best practices for delegating administrative control.

Module 7: Implementing Group Policy

Topics:

Introduction to Group Policy

Group Policy structure

Working with Group Policy objects

How Group Policy settings are applied in

Active Directory

Modifying Group Policy inheritance

Delegating administrative control of Group

Policy

Monitoring and troubleshooting Group Policy

Labs:

Implementing Group Policy

Delegating Group Policy administration

Skills:

Students will be able to:

Implement Group Policy.

Modify Group Policy inheritance.

Delegate administrative control of Group

Policy objects.

Monitor and troubleshoot Group Policy.

Day 3

Module 8: Using Group Policy to Manage User Environments

Topics:

Introduction to managing user environments

Introduction to Administrative Templates

Using Administrative Templates in Group Policy

Assigning scripts in Group Policy

Using Group Policy to redirect user folders

Using Group Policy to secure the user environment

Troubleshooting user environment management

Labs:

Using Administrative Templates to assign registry-based Group Policy

Using Group Policy to assign scripts to users and computers

Implementing folder redirection policy

Implementing security settings by using Group

Policy

Skills:

Students will be able to:

Use Administrative Templates in Group Policy to assign registry-based Group Policy to control and configure user and computer environments.

Assign scripts, such as startup, shutdown, logon, and logoff, with Group Policy to control user environments.

Use Group Policy to redirect folders to a central network location.

Use Group Policy to apply security policies to secure the user environment.

Troubleshoot managing user environments by using Group Policy.

Module 9 Using Group Policy to Manage Software

Topics:

Introduction to managing software deployment

Windows Installer technology

Deploying software

Configuring software deployment

Maintaining deployed software

Removing deployed software

Troubleshooting software deployment

Labs:

Assigning and publishing software

Upgrading and removing software

Skills:

Students will be able to:

Use Group Policy to deploy software.

Use Group Policy to configure software deployment.

Use Group Policy to maintain software.

Use Group Policy to remove software.

Troubleshoot common problems with software deployment.

Day 4

Module 10: Creating and Managing Trees and Forests

Topics:

Introduction to trees and forests

Creating trees and forests

Trust relationships in trees and forests

The global catalog

Strategies for using groups in trees and forests

Troubleshooting creating and managing trees and forests

Labs:

Creating domain trees and establishing trusts

Using groups in a forest

Skills:

Students will be able to:

Create and manage trees and forests in Windows 2000.

Manage trust relationships in trees and forests.

Implement group strategies to gain access to resources across trees and forests.

Troubleshoot common problems that can occur when creating and managing trees and forests in Windows 2000.

Module 11: Managing Active Directory Replication

Topics:

Introduction to Active Directory replication

Replication components and processes

Replication topology

Using sites to optimize Active Directory replication

Implementing sites to manage Active Directory replication

Monitoring replication traffic

Adjusting replication

Troubleshooting Active Directory replication

Labs:

Tracking Active Directory replication

Using sites to manage Active Directory replication

Monitoring replication

Skills:

Students will be able to:

Use sites to manage Active Directory replication.

Monitor replication traffic.

Adjust the replication behavior to improve replication performance.

Troubleshoot common problems with Active

Directory replication.

Day 5

Module 12: Managing Operations Masters

Topics:

Introduction to operations masters

Operations master roles

Managing operations master roles

Managing operations master failures

Lab:

Managing operations masters

Skills:

Students will be able to:

Determine the holder of an operations master role

Transfer and seize an operations master role.

Module 13: Maintaining the Active Directory Database

Topics:

Introduction to maintaining the Active

Directory database

The process of modifying data in Active

Directory

The garbage collection process

Backing up Active Directory

Restoring Active Directory

Moving the Active Directory database

Defragmenting the Active Directory database

Labs:

Backing up and restoring Active Directory

Maintaining the Active Directory database

Skills:

Students will be able to:

Back up the system state data by using the

Backup utility.

Restore Active Directory by restoring the system state data.

Move the Active Directory database to a new location.

Defragment the Active Directory database.

Module 14: Implementing an Active Directory Infrastructure

Topics:

Business scenario

Requirements for the Active Directory infrastructure

Class Discussion: how to implement the Active

Directory infrastructure

Lab:

Implementing the Active Directory infrastructure

Skills:

Students will be able to perform the tasks necessary to implement an Active Directory infrastructure