Leerdoelen

• Plan a Domain Name System (DNS) strategy for an enterprise organization.
• Plan for an implementation of Active Directory and for Active Directory replication.
• Implement Active Directory and DNS.
• Troubleshoot Transmission Control Protocol/Internet Protocol (TCP/IP), name resolution, and Group Policy.
• Plan and implement cross-forest trusts and new security options.
• Use Group Policy in Windows Server 2003 to deploy and restrict software.
• Use Group Policy in Windows Server 2003 to set advanced security settings.
• Plan and implement secure Routing and Remote Access.

Lesvorm

Classroom

Specifieke inhoud

This unit explains the systems engineer tasks that are new or different from those performed in Windows 2000 and introduces the scenarios and tools that will be used throughout the workshop. After completing this unit, students will be able to:

• Describe, at a high level, the new features in Windows Server 2003 that pertain to the systems engineer job role.
• Use the lab environment and locate key resources that are used to complete the labs.

Session 2: Planning a DNS Namespace Design

This unit shows students the new features of DNS in Windows Server 2003, focusing on planning issues regarding improving fault tolerance in DNS, ensuring DNS resolution across forests, planning for _MSDCS zone availability and security to DNS servers in a forest, and creating DNS zones securely and with the least administrative effort. After completing this unit, students will be able to:

• Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.
• Determine when to use stub zones versus conditional forwarding.
• Ensure availability of the _MSDCS zone.
• Plan Active Directory partitions to replicate zone data when needed.
• Evaluate DNS zone security.

Session 3: Planning Active Directory Deployment

This unit shows students new features of Active Directory in Windows Server 2003, focusing on planning issues. After completing this unit, students will be able to:

• Evaluate the placement of global catalog servers.

• Plan optimal replication by exploiting the following replication enhancements:
• Linked value replication (LVR)
• Partial attribute set (PAS) replication
• Inter-Site Topology Generator (ISTG) improvements

• Evaluate forest and domain functionality (versioning) levels.

Session 4: Implementing DNS with Active Directory

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to implement Active Directory and DNS. After completing this unit, students will be able to:

• Install Active Directory by using the advanced features of the Active Directory Installation Wizard.
• Install and configure DNS.
• Implement a conditional forwarder.
• Create stub zones.
• Ensure high availability on the _MSDCS subdomain.
• Create a DNS forward lookup zone.
• Raise domain and forest functionality.
• Create a new application directory partition.
• Set the replication scope of a new application directory partition.

Session 5: Troubleshooting TCP/IP, Name Resolution, and Group Policy

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to troubleshoot TCP/IP, name resolution, and Group Policy. After completing this unit, students will be able to:

• Diagnose and resolve issues related to DNS services.
• Troubleshoot Group Policy.
• Diagnose and resolve issues related to client computer configuration.
• Troubleshoot network connectivity issues.

Session 6: Planning and Implementing Multiple Forests in Active Directory

This unit asks students to plan and implement multiple forests in Active Directory by using the model of adding a new organization to an existing company. Students will implement cross-forest trust, manage user authentication, identify possible security concerns, and come to understand how to resolve naming conflicts between two forests. After completing this unit, students will be able to:

• Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.
• Establish forest trusts.

Session 7: Using Group Policy in Windows Server 2003 to Deploy and Restrict Software

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 pertaining to Group Policy and to learn how they can use it to deploy and restrict software. After completing this unit, students will be able to:

• List reasons for controlling a computer user's environment.
• Create a software restriction policy.
• Deploy software so that an application is completely installed at user logon.
• Use Windows Management Instrumentation (WMI) filters to restrict the application of Group Policy objects (GPOs).

Session 8: Using Group Policy in Windows Server 2003 to Set Advanced Security Settings

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use Group Policy to implement advanced security settings. After completing this unit, students will be able to:

• Configure wireless network settings.
• Configure a user environment.
• Apply Encrypting File System (EFS) enhancements.

Session 9: Planning and Implementing Secure Routing and Remote Access

This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use them in implementing Routing and Remote Access. After completing this unit, students will be able to:

• Plan, implement, and maintain Routing and Remote Access.
• Create and implement an Internet Protocol Security (IPSec) policy.
• Configure IPSec by using Netsh.
• Set up IPSec policy monitoring.

Voorbereidende cursussen

• MCSA on Windows Server 2003

This three-day, instructor-led workshop provides students with the knowledge and new skills that they need to plan, implement, and maintain a Microsoft Windows Server 2003 networked environment.

This discovery-based workshop consists primarily of labs that provide hands-on experience focused exclusively on the skills and objectives that align with Exam 70-296: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Microsoft Windows 2000.