MCSA/MCSE 70-294 Exam Cram Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

by Willis, Will; Watts, David

• ISBN13: 9780789736208
• ISBN10: 0789736209
• Edition: 2nd
• Format: Paperback
• Copyright: 2006-09-18
• Publisher: Pearson IT Certification

Summary

MCSA/MCSE 70-294 Exam Cram, Second Editionis the #1-selling quick-study guide to help you pass the 70-294 exam from Microsoft, which is one of the four core exams in the MCSE 2003 and MCSA 2003 certification programs. This new edition covers all exam objectives, including how to implement and manage an active directory service forest and domain structure, plan effective user and group administration policies, configure user environments, and troubleshoot active directory. It also incorporates two full practice exams, and has been updated against Microsoft's official courseware (MOC) that corresponds to this exam, as well as changes made to Windows Server 2003 R2. Test-taking strategies, time-saving study tips, a special Cram Sheet, tips, acronyms, and memory joggers not available anywhere else comes with this, and all, Exam Cram books.

Author Biography

Will Willis (MCSE, A+ Certified Technician, Network+, B.A.) is a senior

network administrator for an international software-development company in

the Dallas/Ft. Worth, Texas area. He shares responsibility for the network and

server infrastructure with other members of the network administration team,

primarily focusing on Microsoft technologies such as Active Directory and

Exchange 2003. He also shares responsibility for server monitoring, documentation,

maintaining disaster recovery preparedness, antivirus strategies, firewalls/

network security, planning and maintaining the infrastructure (servers, routers,

switches, hubs), and ensuring the reliability and availability of network resources

for the global network.

Will began as a help desk tech, providing technical support over the phone for

PC hardware and software and later moved to a desktop/LAN support specialist

position working on a team of eight to support a 3,000+ user multiple-site

network. From that position, Will moved into a job as a network manager,

where he also administered multiple Active Directory domains and servers running

BackOffice applications Exchange Server, IIS, Site Server, SQL Server, and

SMS. He enjoys spending time with his family and writing and recording original

music when not busy being a techie and being active in church, including

teaching Sunday School. Will has co-authored numerous books and scores of

technical articles. He has also written practice exams and tech-edited many

titles. His first album of guitar-based instrumental music, Darkness into Light,

was released in 2002. Will is also a seminary student, finishing a Master of Arts

degree in Theology in the fall of 2006. More information on Will can be found

at www.willwillis.us.

.

Table of Contents

Introduction	1	(20)
Self-Assessment
Chapter 1: The Structure and Components of Active Directory	21	(16)
DNS, Trees, and Forests—The Hierarchy of Active Directory	22	(3)
DNS Namespace	22	(1)
Domains	23	(1)
Domain Trees	24	(1)
Forests	24	(1)
Sites	25	(1)
Domain Controllers and Operations Masters	25	(1)
Trust Relationships and Active Directory Federation Services	26	(2)
Active Directory Components	28	(3)
Active Directory Objects	25	(3)
Active Directory Schema	28	(1)
Directory Service Protocol	29	(1)
Organizational Unit	30	(1)
Global Catalog	30	(1)
Active Directory Application Mode	31	(1)
Exam Cram Questions	32	(2)
Answers to Exam Cram Questions	34	(1)
Need to Know More?	35	(2)
Chapter 2: Planning and Implementing Forests and Domains	37	(44)
The Windows Server 2003 Domain	38	(1)
Requirements for AD	39	(1)
The AD Installation Wizard	40	(10)
Installing Your First Domain	42	(6)
Deciding Which Type of DNS to Use	48	(1)
The Lesser-Known Roles of the Wizard	49	(1)
Fault-Tolerant Replicas	50	(2)
Troubleshooting Your AD Installation	52	(1)
Verifying Your AD Installation	53	(2)
File Verification	53	(1)
SYSVOL	54	(1)
Final Checkpoints	54	(1)
AD Removal	55	(1)
What Removing AD Entails	55	(1)
Troubleshooting AD Removal	56	(1)
Unattended Installation of AD	56	(4)
The GuiRunOnce Section	57	(1)
The DCInstall Section	58	(2)
Post-AD Installation Options	60	(5)
Integrated Zones	61	(1)
Domain Mode Options	61	(4)
Application Data Partitions	65	(2)
Creating an Application Data Partition	66	(1)
Trust Relationships	67	(9)
Transitive Trusts	68	(1)
Forest Trusts	69	(1)
External Trusts	69	(1)
Realm Trusts	70	(1)
Shortcut Trusts	70	(1)
New Trust Wizard	71	(5)
Exam Cram Questions	76	(2)
Answers to Exam Cram Questions	78	(2)
Need to Know More?	80	(1)
Chapter 3: Planning and Implementing an OU Structure	81	(18)
Implementing an Organizational Unit (OU) Structure	82	(1)
Analyzing the Administrative Requirements for an OU	83	(1)
Creating an OU	84	(6)
Moving Objects Within an OU Hierarchy	84	(3)
Delegating Permissions for an OU to a User or to a Security Group	87	(3)
Planning an OU Structure Based on Delegation Requirements	90	(3)
Exam Cram Questions	93	(3)
Answers to Exam Cram Questions	96	(2)
Need to Know More?	98	(1)
Chapter 4: User and Group Administration	99	(36)
Introducing Users and Groups	100	(1)
Planning a User Authentication Strategy	101	(4)
Types of Logon Names	101	(2)
Rules for Logon Names	103	(1)
UPN Suffixes	103	(2)
Administering User Accounts	105	(10)
Creating User Accounts	106	(2)
The csvde Utility	108	(2)
The ldifde Utility	110	(2)
Directory Service Command Line Tools	112	(1)
Common User Management Tasks	113	(2)
Creating a Password Policy for Domain Users	115	(3)
Planning a Smartcard Authentication Strategy	118	(4)
From Passwords to Smartcards, and Back Again	120	(1)
Smartcards and Remote Access	121	(1)
Planning a Security Group Strategy	122	(5)
Defining Group Types	124	(1)
Planning a Security Group Hierarchy Based on Delegation Requirements	125	(2)
User and Group Recommendations	127	(1)
Exam Cram Questions	128	(4)
Answers to Exam Cram Questions	132	(2)
Need to Know More?	134	(1)
Chapter 5: Planning a Group Policy Implementation	135	(60)
Group Policy Overview	136	(3)
Group Policy Objects	137	(2)
Creating and Linking Group Policy Objects	139	(11)
Linking a GPO	146	(3)
Linking Multiple GPOs	149	(1)
Cross-Domain GPO Links	149	(1)
Delegating Administrative Control of Group Policy	150	(3)
Managing Group Policy Links	150	(1)
Creating GPOs	151	(1)
Editing GPOs	152	(1)
Specifying a Domain Controller for Managing Group Policy Objects	153	(1)
Group Policy Inheritance	154	(3)
Block Policy Inheritance	154	(1)
No Override/Enforced	155	(1)
Disabling a GPO	156	(1)
Using Loopback Processing When Applying Group Policy	157	(1)
Filtering Group Policy	158	(1)
Configuring Group Policy Refresh Rates	159	(2)
Controlling User Environments with Administrative Templates	161	(2)
Common Administrative Templates Categories	162	(1)
Policy Application Scenarios	163	(2)
Policy Application Scenario #1	164	(1)
Policy Application Scenario #2	164	(1)
Managing Security Configurations	165	(4)
Security Templates	166	(3)
Assigning Script Policies to Users and Computers	169	(3)
Assigning Scripts Through Group Policy	169	(3)
Use of Folder Redirection	172	(3)
Automatically Enrolling Certificates with Group Policy	175	(2)
Implementing Autoenrollment	176	(1)
Copying, Backing Up, and Restoring GPOs	177	(4)
Copying GPOs	178	(1)
Backing Up GPOs	178	(1)
Restoring GPOs	179	(2)
Troubleshooting Group Policy	181	(11)
Resultant Set of Policy (RSoP)/Group Policy Modeling Wizard	181	(3)
Group Policy Results	184	(8)
Exam Cram Questions	192	(1)
Answers to Exam Cram Questions	192	(1)
Need to Know More?	193	(2)
Chapter 6: Software Distribution with Group Policy	195	(22)
Intellimirror Concepts	196	(1)
Software Installation and Maintenance Overview	197	(2)
Requirements for Software Installation	199	(1)
Deploying Software with Group Policy and Software Installation	199	(7)
Software Deployment to Users and Computers	200	(1)
Configuring Software Installation Properties	201	(2)
Deploying a New Package	203	(1)
Configuring Package Properties	204	(1)
Assigned Versus Published Applications	205	(1)
Phases of Software Deployment	206	(1)
Troubleshooting Software Deployment Problems	207	(4)
General Troubleshooting Guidelines	207	(1)
Various Installation Error Messages	208	(3)
Exam Cram Questions	211	(3)
Answers to Exam Cram Questions	214	(1)
Need to Know More?	215	(2)
Chapter 7: Implementing and Managing Active Directory Sites	217	(26)
Why Use Sites	219	(1)
Sites and Domain Controllers	220	(1)
Creating a Site	221	(2)
Moving Domain Controllers Between Sites	223	(2)
Site Connections	225	(3)
Creating and Configuring a Site Link	225	(3)
Bridgehead Servers	228	(1)
Configuring Preferred Bridgehead Servers	229	(1)
Site Link Bridge	229	(3)
Creating Site Link Bridges	230	(2)
Connection Objects	232	(3)
Optimizing Active Directory Replication with Sites	235	(3)
Replication Within a Site and Between Sites	235	(1)
Protocols That Support Replication	236	(2)
Exam Cram Questions	238	(3)
Answers to Exam Cram Questions	241	(1)
Need to Know More?	242	(1)
Chapter 8: Operations Masters and Global Catalog Servers	243	(28)
Introducing Operations Masters	244	(7)
Identifying Operations Master Role Dependencies	245	(6)
Planning for Business Continuity of Operations Master Roles	251	(7)
Determining and Transferring Operations Master Roles	251	(5)
Permissions for Changing an Operations Master Server	256	(1)
Seizing a Role	256	(2)
Recommendations for Operations Masters	258	(1)
Planning a Strategy for Placing Global Catalog Servers	259	(5)
GC and Logon Validation	259	(1)
Evaluating Network Traffic Considerations When Placing Global Catalog Servers	260	(1)
Evaluating the Need to Enable Universal Group Membership Caching	260	(2)
User Principal Names and Logon Validation	262	(1)
Adding GC Servers	262	(2)
Exam Cram Questions	264	(3)
Answers to Exam Cram Questions	267	(2)
Need to Know More?	269	(2)
Chapter 9: Active Directory Maintenance	271	(26)
Introducing AD Maintenance	272	(14)
Active Directory Data Files	273	(1)
Garbage Collection	274	(1)
Performing Backups	275	(3)
Recommendations for Backing Up Data	278	(1)
Restoring AD	278	(5)
Defragmenting the AD Database	283	(2)
Recommendations for AD Database Maintenance	285	(1)
Monitoring Active Directory	286	(4)
Monitoring Active Directory Replication	287	(3)
Exam Cram Questions	290	(3)
Answers to Exam Cram Questions	293	(2)
Need to Know More?	295	(2)
Chapter 10: Practice Exam 1	297	(24)
Chapter 11: Practice Exam 1 Answer Key	321	(18)
Chapter 12: Practice Exam 2	339	(24)
Chapter 13: Practice Exam 2 Answer Key	363	(18)
Appendix A Windows Server 2003 Active Directory Resources	381	(4)
Appendix B Accessing Your Free MeasureUp Practice Test	385	(2)
Appendix C MeasureUp's Product Features	387	(4)
Multiple Testing Modes	387	(1)
Study Mode	387	(1)
Certification Mode	387	(1)
Custom Mode	388	(1)
Missed Question Mode	388	(1)
Non-Duplicate Mode	388	(1)
Question Types	388	(1)
Random Questions and Order of Answers	389	(1)
Detailed Explanations of Correct and Incorrect Answers	389	(1)
Attention to Exam Objectives	389	(1)
Technical Support	389	(2)
Glossary	391	(16)
Index	407