MCTS Exam Cram
Windows Server 2008 Active Directory, Configuring
Exam 70-640
Don Poulton
Covers the critical information you’ll need to know to score higher on Exam 70-640!
Utilize new features of Windows Server 2008 related to Active Directory
Install and configure Active Directory forests and domains
Plan and implement an Organizational Unit structure
Plan and manage Active Directory infrastructure components, such as operations masters, global catalogs, read-only domain controllers, and sites
Plan, implement, and manage Active Directory using Group Policy
Plan and manage Active Directory roles, including Active Directory Lightweight Directory Services, Active Directory Rights Management Services, and Active Directory Federation Services
Deploy software in Active Directory using Group Policy
Utilize Active Directory features to manage users and groups
Back up and restore Active Directory, and rebuild an Active Directory domain controller from backup
Deploy and manage a public key infrastructure using Active Directory Certificate Services
WRITTEN BY A LEADING EXPERT:
Don Poulton, MCSA, MCSE, A+, Network+, Security+, has been involved in consulting with small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. More recently, he has written or co-authored several certification volumes on Security+, Windows XP, Windows Server 2003, and Windows Vista, published by Que Publishing.
Table of Contents:
Introduction
Self-Assessment
MCTSs and MCITPs in the Real World
The Ideal MCITP Candidate
Put Yourself to the Test
Testing Your Exam Readiness
Well, Let’s Get to It
Chapter 1: Getting Started with Windows Server 2008 Active Directory
The Building Blocks of Active Directory
Domains
Trees
Forests
Organizational Units
Sites
Domain Controllers
Global Catalog
Operations Masters
New Features of Active Directory in Windows Server 2008
Server Manager
Configuring Forests and Domains
Requirements for Installing Active Directory Domain Services
Installing Active Directory Domain Services
Verifying the Proper Installation of Active Directory
Performing Unattended Installations of Active Directory
Server Core Domain Controllers
Active Directory Migration Tool (ADMT) v.3.1
Alternate User Principal Name (UPN) Suffixes
Removing Active Directory
Upgrading from Windows Server 2003
Interoperability with Previous Versions of Active Directory
Upgrading a Windows Server 2003 Domain Controller
Configuring Global Catalog Servers
Promotion of Domain Controllers to Global Catalog Servers
Universal Group Membership Caching (UGMC)
Partial Attribute Sets
Configuring Operations Masters
Schema Master
Domain Naming Master
PDC Emulator
Infrastructure Master
RID Master
Placement of Operations Masters
Transferring and Seizing of Operations Master Roles
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 2: Active Directory and DNS
Configuring DNS Zones
DNS Zone Types
Creating DNS Zones
DNS Records
Configuring DNS Zone Properties
Dynamic, Non-Dynamic, and Secure Dynamic DNS
Time to Live
Zone Scavenging
Configuring DNS Server Settings
Forwarding
Root Hints
Configuring Zone Delegation
Debug Logging
Event Logging
Advanced Server Options
Monitoring DNS
Command-Line DNS Server Administration
Configuring Zone Transfers and Replication
Replication Scope
Types of Zone Transfers
Secure Zone Transfers
Configuring Name Servers
Application Directory Partitions
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 3: Active Directory Sites and Replication
The Need for Active Directory Sites
Configuring Sites and Subnets
Creating Sites
Adding Domain Controllers
Creating and Using Subnets
Site Links, Site Link Bridges, and Bridgehead Servers
The Need for Site Links and Site Link Bridges
Configuring Site Links
Site Link Bridges
Site Link Costs
Bridgehead Servers
Sites Infrastructure
Configuring Active Directory Replication
Intersite and Intrasite Replication
Distributed File System
One-Way Replication
Replication Protocols
Replication Scheduling
Forcing Intersite Replication
Monitoring and Troubleshooting Replication
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 4: Configuring Additional Active Directory Roles
New Server Roles and Features
Active Directory Lightweight Directory Services (AD LDS)
Installing AD LDS
Configuring Data Within AD LDS
Migration to AD LDS
Configuring an Authentication Server
Use of AD LDS on Server Core
Active Directory Rights Management Services (AD RMS)
Installing AD RMS
Certificate Request and Installation
Self-Enrollments
Delegation
Active Directory Metadirectory Services (AD MDS)
Read-Only Domain Controllers
Installing a Read-Only Domain Controller
Unidirectional Replication
Administrator Role Separation
Read-Only DNS
BitLocker
Replication of Passwords
syskey
Active Directory Federation Services (AD FS)
Installing the AD FS Server Role
Trust Policies
User and Group Claim Mapping
Configuring Federation Trusts
Windows Server 2008 Virtualization
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 5: Active Directory Objects and Trusts
Creating User and Group Accounts
Introducing User Accounts
Introducing Group Accounts
Creating User, Computer, and Group Accounts
Use of Template Accounts
Using Bulk Import to Automate Account Creation
Configuring the UPN
Configuring Contacts
Creating Distribution Lists
Managing and Maintaining Accounts
Creating Organizational Units
Configuring Group Membership
AGDLP/AGUDLP
Resetting Accounts and Passwords
Denying Privileges
Protected Admin
Local Versus Domain Groups
Deprovisioning Accounts
Disabling or Deleting Accounts
Delegating Administrative Control of Active
Directory Objects
Configuring Active Directory Trust Relationships
Transitive Trusts
Forest Trust Relationships
External Trust Relationships
Realm Trust Relationships
Shortcut Trust Relationships
Authentication Scope
SID Filtering
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 6: Configuring and Troubleshooting Group Policy
Overview of Group Policy
Group Policy Objects
Creating and Applying GPOs
Managing GPOs
Configuring GPO Hierarchy and Processing Priority
Group Policy Filtering
Group Policy Loopback Processing
Configuring GPO Templates
User Rights
ADMX Central Store
Administrative Templates
Restricted Groups
Starter GPOs
Shell Access Policies
Using Group Policy to Deploy Software
Assigning and Publishing Software
Deploying Software Using Group Policy
Upgrading Software
Removal of Software
Troubleshooting the Application of Group Policy Objects
Resultant Set of Policy
Gpresult
Gpupdate
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 7: Group Policy and Active Directory Security
Use of Group Policy to Configure Security
Configuring Account Policies
Fine-Grained Password Policies
Security Options
Additional Security Configuration Tools
Auditing of Active Directory Services
New Features of Active Directory Auditing
Use of GPOs to Configure Auditing
Use of Auditpol.exe to Configure Auditing
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 8: Monitoring and Maintaining the Active Directory Environment
Backing Up and Recovering Active Directory
Use of Windows Server Backup
Recovering Active Directory
Linked Value Replication
Backing Up and Restoring GPOs
Offline Maintenance of Active Directory
Restartable Active Directory
Offline Defragmentation and Compaction
Active Directory Database Storage Allocation
Monitoring Active Directory
Network Monitor
Task Manager
Event Viewer
Reliability and Performance Monitor
Windows System Resource Manager
Server Performance Advisor
Exam Cram Questions
Answers to Exam Cram Questions
Chapter 9: Active Directory Certificate Services
What’s New with Certificate Services in Windows Server 2008?
Installing Active Directory Certificate Services
Certificate Authority Types and Hierarchies
Installing Root CAs
Installing Subordinate CAs
Certificate Requests
Certificate Practice Statements
Managing Certificate Templates
Certificate Template Types
Configuring Certificate Templates
Managing Different Certificate Template Versions
Key Archival
Key Recovery Agents
Managing Certificate Enrollments
Network Device Enrollment Services
Certificate Autoenrollment
Web Enrollment
Smart Card Enrollment
Creating Enrollment Agents
Configuring Certificate Authority Server Settings
Certificate Stores
Certificate Server Permissions
Certificate Database Backup and Restore
Assigning Administration Roles
Managing Certificate Revocation
Certificate Revocation Lists
Configuring Online Responders
Authority Information Access
Exam Cram Questions
Answers to Exam Cram Questions436
Chapter 10: Practice Exam 1
Exam Cram Questions
Chapter 11: Answer Key to Practice Exam 1
Answers at a Glance
Answers to Exam Cram Questions
Chapter 12: Practice Exam 2
Exam Cram Questions
Chapter 13: Answer Key to Practice Exam 2
Answers at a Glance
Answers to Exam Cram Questions
Appendix A: Need to Know More?
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Glossary
Index
About the Author :
Don Poulton, MCSA, MCSE, A+, Network+, Security+, has been involved with computers since the days of 80-column punch cards. After a career of more than 20 years in environmental science, Don switched careers and trained as a Windows NT 4.0 MCSE. He has been involved in consulting with a couple of small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP.
In addition, Don has worked on programming projects, both in his days as an environmental scientist, and more recently with Visual Basic to update an older statistical package used for multivariate analysis of sediment contaminants.
When not working on computers, Don is an avid amateur photographer who has had his photos displayed in international competitions and published in magazines such as Michigan Natural Resources Magazine and National Geographic Traveler. Don also enjoys traveling and keeping fit.
Don lives in Burlington, Ontario, with his wife, Terry.
