Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure

Transcription

1 Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure (Exam )

2 Table of Contents Course Overview... 2 Section 1.1: Introduction to Active Directory... 3 Section 2.1: Installing Active Directory... 4 Section 2.2: Advanced Installation... 5 Section 2.3: Verifying Installation... 7 Section 2.4: Backup and Restore... 8 Section 3.1: Managing Groups Section 3.2: Group Security Planning Section 3.3: Delegating Authority Section 4.1: Planning the Structure Section 4.2: Trust Relationships Section 4.3: Functional Levels Section 4.4: Operation Masters Section 4.5: Schema Section 4.6: Active Directory Objects Section 5.1: Creating and Linking GPOs Section 5.2: Editing GPOs Section 5.3: Group Policy Inheritance Section 5.4: Planning GPOs Section 5.5: Delegating Administration Section 5.6: Software Distribution Section 5.7: Administrative Templates Section 5.8: Folder Redirection Section 5.9: Managing Logon Section 5.10: Managing Certificate Enrollment Section 6.1: Managing Sites Section 6.2: Customizing Replication Section 6.3: Troubleshooting Replication Section 6.4: Global Catalogs Section 6.5: Site License Servers Section 6.6: Application Directory Partitions Practice Exams Appendix A: Approximate for the Course

3 Course Overview 1.0 Active Directory Overview Module 1 provides an introduction to Active Directory. Students receive an overview of Active Directory topology and components, including forests, trees, domains, containers, and objects. 2.0 Installing and Maintaining Active Directory Module 2 teaches students how to install Active Directory. The module also covers troubleshooting tools and techniques. 3.0 Active Directory Security Module 3 covers the methods for securing Active Directory. Topics include security principals, group types, group strategies, permissions, and delegation. 4.0 Managing the Active Directory Structure Module 4 covers the Active Directory management tasks. Students learn design principles as well as management tools and procedures for establishing Active Directory. 5.0 Managing Group Policy Module 5 covers Group Policy. Many students find Group Policy a difficult subject to master. You may want to spend additional time on the sections in this module. 6.0 Sites and Services Module 6 covers Active Directory management across multiple sites. Students learn about replication, site links, site link costs, universal membership caching, and the different types of services that Active Directory uses. Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. 2

4 Section 1.1: Introduction to Active Directory This section introduces the components of Active Directory. The students should be familiar with many of the terms. Describe the components that constitute an Active Directory deployment. Design an Active Directory structure. Identify the tools used for Active Directory configuration and management Plan a strategy for placing global catalog servers Implement an Active Directory directory service forest and domain structure. What was the first directory service? What is a directory information tree? How does Active Directory use DNS? What is the purpose of a global catalog server? Is a global catalog server useful in a single domain environment? What are three examples of a Microsoft Management Console provided with Windows Server 2003? Video/Demo Introduction to Directories 5: Domains, Trees, and Forests 11: Container Objects 4: Sites and Site Links 5: The Active Directory Database 4: Active Directory Consoles 4: Active Directory Console 3:12 Total 38:52 About 40 minutes 3

5 Section 2.1: Installing Active Directory You should be familiar with Active Director installation. If possible, perform an installation operation for the students to observe. Create Active Directory objects like a forest root, a tree, and a domain. Use the Dcpromo tool to configure a domain controller Implement an Active Directory directory service forest and domain structure. o Create the forest root domain. o Create a child domain. o Install and configure an Active Directory domain controller. What does DCPromo do? What are the domain options you'll be offered during installation? What domain configuration information will you need to provide during installation? Video/Demo Active Directory Installation 2: Installing Active Directory 3: Creating a Forest Root 4: Installing a Domain Controller 2:26 Total 12:58 Number of Exam Questions 2 questions About 15 minutes 4

6 Section 2.2: Advanced Installation If possible, create a domain on which you can perform management operations, like renaming and removing Active Directory. Follow the steps to prepare a Windows 2000 Domain for a Windows Server 2003 installation. Select from advanced installation options to facilitate installation procedures. Take the necessary steps to rename Active Directory objects or remove Active Directory Implement an Active Directory directory service forest and domain structure. o Create the forest root domain. o Create a child domain. o Create and configure Application Data Partitions. o Install and configure an Active Directory domain controller. What are two advanced methods of installing active directory? What commands must you run before installing the first Windows Server 2003 server into a Windows 2000 tree? What are the ramifications of renaming a Domain? Which command to you use to remove a domain controller from Active Directory? Video/Demo Preparing a Windows 2000 Domain 2: Advanced Installation Options 2: Renaming Domains and Domain Controllers 4: Removing Active Directory 2:06 Total 11:16 5

7 Number of Exam Questions 2 questions About 15 minutes 6

8 Section 2.3: Verifying Installation Be familiar with the Active Directory installation so that you can show students the settings they should check when troubleshooting problems. Demonstrate the use of the troubleshooting tools. Identify installation problems and take steps to correct them. Examine an Active Directory installation to verify a complete, correct installation. Identify and use tools designed to diagnose and correct installation problems Implement an Active Directory directory service forest and domain structure. How can you verify that Active Directory is installed? What settings should you check as you begin to troubleshoot Active Directory? How can you use each of the available tools to troubleshoot Active Directory? Video/Demo Verifying Installation 4: Troubleshooting Installation 5:43 Total 9:57 About 10 minutes 7

9 Section 2.4: Backup and Restore Know the difference between authoritative and nonauthoritative restores. Prepare examples of each for use during lecture. Establish a backup policy and deployment for Active Directory. Explain the differences between a nonauthoritative restore and an authoritative restore. Choose the correct restore method based on the circumstances Restore Active Directory directory services. o Perform an authoritative restore operation. o Perform a nonauthoritative restore operation. What limitations make System State backups different from regular data backups? What happens during a nonauthoritative restore? What happens during an authoritative restore? What is the difference between the two restore types? What are the steps for an authoritative restore? What are the steps for a nonauthoritative restore? How can you ensure data integrity after doing a restore? Video/Demo Backing Up Active Directory 6: Backing Up Active Directory 2: Performing a Nonauthoritative Restore 3: Backup and Restore Facts 4:02 Total 17:12 8

10 Number of Exam Questions 9 questions About 30 minutes 9

11 Section 3.1: Managing Groups Divide the students into groups. Create a domain, domain local, and universal group. Explore the differences among them with the students. Discuss the differences between builtin and custom groups. Explain when to use custom groups. Prepare examples to show the differences among GUID, SID, and RID. Use the concept of security principals to control access to network resources. Design groups that allow you to enforce the principle of least privilege. Create groups of different scopes and types Implement an Active Directory directory service forest and domain structure Plan a security group strategy. What are two security principals? What is a DACL? What is inheritance? What are the types of Active Directory groups? Why do you create groups? Video/Demo Security Principals 2: Groups 4: Creating Groups 2:37 Total 9:18 10

12 Lab/Activity Create a Domain Group Create a Domain Local Group Create a Universal Group About 30 minutes 11

13 Section 3.2: Group Security Planning Prepare examples to illustrate each of the group strategies. Understand nesting and inheritance. Introduce permissions and the idea of inheritance. Design group strategies based on network deployment needs. Deploy different types of group strategies. Use group strategies to define task delegation Plan an administrative delegation strategy. o Plan an organizational unit (OU) structure based on delegation requirements. o Plan a security group hierarchy based on delegation requirements Plan a security group strategy. What is group nesting? When is a Universal group available? Which type of group has users added to it? How does a Universal group differ from a Domain Local group in its use and membership? Video/Demo Security Group Plan 4: Implementing a Group Plan 3: Assigning Active Directory Permissions 2:20 Total 9:37 12

14 Lab/Activity Implement a Group Strategy 1 Implement a Group Strategy 2 Number of Exam Questions 2 questions About 25 minutes 13

15 Section 3.3: Delegating Authority Organize the students into groups of administrators and users. Give permissions to the administrators groups. Let the students explore the permissions. (Do not perform this activity on a live network.) Describe the types of administrative control and when they are best implemented. Create an Active Directory structure that facilitates delegation Plan an administrative delegation strategy. o Plan an organizational unit (OU) structure based on delegation requirements. o Plan a security group hierarchy based on delegation requirements Plan an OU structure. o Analyze the administrative requirements for an OU. What are the two types of administration? Why would you want to delegate administration? What are two ways of delegating administration? Video/Demo Delegation of Control 2: Delegating Control 3:18 Total 6:04 Number of Exam Questions 6 questions About 15 minutes 14

16 Section 4.1: Planning the Structure Design some scenarios that allow the students to consider different design considerations. Design an Active Directory structure by considering the deployment of forests, domains, and Organizational Units Plan an OU structure. o Analyze the administrative requirements for an OU. o Analyze the Group Policy requirements for an OU structure. What is a forest? Why would you need more than one forest? What is a domain? Why would you need more than one domain? What is the primary reason for creating Organizational Units? Video/Demo Planning the Forest 2: Planning Domains 2: Planning OUs 2:19 Total 8:01 Number of Exam Questions 1 question About 10 minutes 15

17 Section 4.2: Trust Relationships Draw some trust relationships. Help the students analyze site link costs. Identify the different types of trusts used in Active Directory. Create different types of trust relationships including external, shortcut, and forest root trusts Implement an Active Directory directory service forest and domain structure. o Establish trust relationships. Types of trust relationships might include external trusts, shortcut trusts, and cross-forest trusts Manage an Active Directory forest and domain structure. o Manage trust relationships. What is a trust? What is a transitive trust? When would you install a non-transitive trust? If you create two domains, do you have to create a trust manually? Why would you use a one-way trust? Video/Demo Trust Relationships 7: Creating Trust Relationships 4:58 Total 12:43 16

18 Lab/Activity Create an External Trust 1 Create an External Trust 2 Create a Shortcut Trust Create a Forest Root Trust Number of Exam Questions 5 questions About 40 minutes 17

19 Section 4.3: Functional Levels Create a chart of the functional levels, their requirements, and their characteristics to use for class discussion. Identify the characteristics of domain and forest functional levels. Raise the functional levels of domains and forests 103. Implement an Active Directory directory service forest and domain structure. o Set an Active Directory forest and domain functional level based on requirements. What are the functional levels of a domain? What functions do each of the different levels have? When would you raise the domain functional level? What are the requirements to raise functional levels? What are the functional levels of a forest? What determines the forest functional level? Video/Demo Functional Levels 4: Changing Domain and Forest Levels 3:21 Total 8:03 Lab/Activity Raise the Domain Functional Level Raise the Forest Functional Level Raise the Domain and/or Forest Level About 25 minutes 18

20 Section 4.4: Operation Masters Understand each of the operation master roles. Prepare a chart that helps the students understand the tasks each server performs. Transfer operation master roles among domain controllers. Troubleshoot operation master roles to diagnose network problems. Seize an operation master role in the case of a defunct role operations master Plan flexible operations master role placement. o Plan for business continuity of operations master roles. o Identify operations master role dependencies Troubleshoot Active Directory. o Diagnose and resolve issues related to operations master role failure. What is the purpose of an operation master role server? What is a schema master? What is a domain naming master? What is the RID master role? What is the function of a PDC emulator? What does the infrastructure master role do? What is the difference between transferring a role and seizing a role? Video/Demo Operation Master Roles 5: Changing Operation Masters 5:21 Total 10:31 19

21 Lab/Activity Transfer an Operation Master 1 Transfer an Operation Master 2 Transfer the Naming Master Identify Operation Master Placement 1 Identify Operation Master Placement 2 Number of Exam Questions 7 questions About 45 minutes 20

22 Section 4.5: Schema Make a list of Active Directory objects and their attributes that make up the schema. Discuss the function of each object and its attributes. Understand how to extend and manage the schema. Explain the composition of the schema Manage an Active Directory forest and domain structure. o Manage schema modifications. What is the schema? What is metadata? Why does Active Directory store the object definitions as objects? What does it mean to extend the schema? Number of Exam Questions 2 questions About 5 minutes 21

23 Section 4.6: Active Directory Objects Create several OUs to work with during the course of the lecture. Show the students how to migrate an OU. Show its attributes. Create objects inside the OU. Create and manage Active Directory objects, including Organizational Unit, User, Computer, and Group objects. Move objects between domains using the Active Directory Migration Tool. Choose the appropriate tools for Active Directory management tasks Plan an OU structure Implement an OU structure. What does the ADMT do? Why is it better to rename or move an object than delete and recreate it? What tools can you use to create an OU in Active Directory? Video/Demo Managing Active Directory Objects 1: Using the Migration Tool 4:30 Total 6:10 Lab/Activity Create OUs Number of Exam Questions 6 questions About 20 minutes 22

24 Section 5.1: Creating and Linking GPOs Group policy is a concept the students will find difficult. For this module, you need to prepare plenty of examples. You also need an in-depth understanding of Group Policy. Use GPOs to manage computers and users in Active Directory. Create GPOs and links to Active Directory objects. Delete GPOs and their respective links Troubleshoot issues related to Group Policy application deployment. Tools might include RSoP and the gpresult command. What is a group policy? Why would you institute a group policy? What Active Directory objects can you link to a group policy? Video/Demo Group Policy 5: Group Policy Application Order 2: Creating and Linking a GPO 6:26 Total 15:01 Lab/Activity Link an Existing GPO Create and Link a GPO Number of Exam Questions 2 questions About 30 minutes 23

25 Section 5.2: Editing GPOs Set some group policies to review with your students. If possible, implement them on a limited scale to examine their effects. Apply GPO settings to control the computer and user configurations Configure the user environment by using Group Policy. o Distribute software by using Group Policy. o Configure user security settings by using Group Policy Deploy a computer environment by using Group Policy. o Distribute software by using Group Policy. o Configure computer security settings by using Group Policy. What is the purpose of an Administrative Template? What does the Software Settings option allow you to do? What operations do you use the Windows Settings for? What does Security Settings allow an administrator to do? Video/Demo The Group Policy Editor 2: Configuring GPO Settings 4:58 Total 5:47 About 5 minutes 24

26 Section 5.3: Group Policy Inheritance If possible, set some policies on a computer or group of computers. Perform some of the management tasks like blocking inheritance and setting the No Override value. Examine and discuss the effects of the changes with the students. Modify the order in which GPOs are applied. Manage GPOs by disabling the GPO or removing the GPO link. Use Block Inheritance, No Override, WMI Filtering, and Loopback Processing to control GPO application Configure the user environment by using Group Policy. o Configure user security settings by using Group Policy Deploy a computer environment by using Group Policy. o Configure computer security settings by using Group Policy Troubleshoot the application of Group Policy security settings. Tools might include RSoP and the gpresult command. In what order are group policies applied? If there is more than one group policy linked to a domain, what controls the order of application? How does group policy inheritance affect computer or user settings? What is the difference between No Override and Block Inheritance? How can you apply group policy settings to specific users or groups? 25

27 Video/Demo Group Policy Inheritance 4: Controlling Group Policy Application 2: Filtering Group Policy 2: Filtering GPOs 2:22 Total 12:27 Lab/Activity Change the GPO Order Disable a GPO Remove a GPO Link Block Inheritance Set No Override Number of Exam Questions 10 questions About 50 minutes 26

28 Section 5.4: Planning GPOs If possible, set some policies against which you can run the RSoP wizard in both its modes. Discuss the results as part of the lecture. Design GPOs to meet specified requirements for regulating the computer and user environments. Use Group Policy tools to analyze the effects of GPOs in test and live environments Plan Group Policy strategy. o Plan a Group Policy strategy by using Resultant Set of Policy (RSoP) Planning mode. o Plan a strategy for configuring the user environment by using Group Policy. o Plan a strategy for configuring the computer environment by using Group Policy. What are two reasons to use RSoP? What tools or utilities are available for managing group policies? What are best practices for using group policy? Video/Demo Planning OUs for Group Policy 2: Analyzing GPOs 2: Using Resultant Set of Policy (RSoP) 6:06 Total 10:50 27

29 Lab/Activity Implement a GPO 1 Implement a GPO 2 Number of Exam Questions 8 questions About 30 minutes 28

30 Section 5.5: Delegating Administration Prepare different scenarios that would require different delegation strategies. Discuss the pros and cons of each delegation strategy. Explain the three types of delegation: decentralized, centralized, and taskbased. Delegate GPO control depending on the requirements of the chosen delegation strategy Plan an administrative delegation strategy. o Plan an organizational unit (OU) structure based on delegation requirements. o Plan a security group hierarchy based on delegation requirements Plan an OU structure. o Analyze the Group Policy requirements for an OU structure Implement an OU structure. o Delegate permissions for an OU to a user or to a security group. What are common group policy administration tasks? What are the differences between centralized and decentralized administration control? What is tasked-based administration? Video/Demo Delegating Group Policy Administration 3: Delegating GPO Control 5:47 Total 9:27 29

31 About 10 minutes 30

32 Section 5.6: Software Distribution Discuss the types of software that administrators most commonly need to apply across networks. Be familiar with the recommended best practices and discuss them with the students. Perform software distribution management tasks including assigning software, publishing software, and designing software distribution. Implement changes to software distribution by modifying configurations and restrictions Configure the user environment by using Group Policy. o Distribute software by using Group Policy Deploy a computer environment by using Group Policy. o Distribute software by using Group Policy Troubleshoot issues related to Group Policy application deployment. Tools might include RSoP and the gpresult command Maintain installed software by using Group Policy. o Distribute updates to software distributed by Group Policy. o Configure automatic updates for network clients by using Group Policy. What type of drive mapping would you use to point to a software distribution point? Can you use group policies to remove software? Who determines the order software packages are installed? What is a file with the extension MSI? What is a repackaged application? 31

33 Video/Demo Software Distribution 6: Distributing Software 5: Modifying Software Distribution 7: Configuring Software Restriction Policies 9:22 Total 28:52 Lab/Activity Publish Software Assign Software Design Software Distribution 1 Design Software Distribution 2 Number of Exam Questions 15 questions About 65 minutes 32

34 Section 5.7: Administrative Templates Familiarize yourself with the most common Administrative Template settings. Configure some settings to discuss with the students. Manage computers and users by configuring GPOs through the Administrative Templates node. Identify and describe the uses of the various Administrative Templates Plan Group Policy strategy. o Plan a strategy for configuring the user environment by using Group Policy. o Plan a strategy for configuring the computer environment by using Group Policy Configure the user environment by using Group Policy Deploy a computer environment by using Group Policy. What does an administrative template contain? What is the purpose of an.adm file? Where do administrative templates come from? Video/Demo Administrative Templates 2: Configuring Administrative Templates 3:51 Total 6:35 Lab/Activity Configure Administrative Templates 1 Configure Administrative Templates 2 About 20 minutes 33

35 Section 5.8: Folder Redirection Redirect the My Documents folder for your students or on some test machines. Discuss the effects of folder redirection on clients. Redirect folders using GPOs. Identify the folders that can be redirected Configure the user environment by using Group Policy. o Redirect folders by using Group Policy. What is the impact of a roaming user profile and folder redirection? How do you implement folder redirection? What types of folders are redirected? How can you test folder redirection to make sure it is working properly? Video/Demo Folder Redirection 3: Redirecting Folders 4:21 Total 7:32 Lab/Activity Redirect Folders Number of Exam Questions 4 questions About 20 minutes 34

36 Section 5.9: Managing Logon Familiarize yourself with the different account settings. Discuss how each of the settings ties into the design of password and logon policies. Discuss the pros and cons of configuring each setting. Manage user logons by configuring account settings, unlocking accounts, and enforcing password standards. Simplify user logon by modifying UPN suffixes Plan a user authentication strategy. o Create a password policy for domain users. What are the settings administrators can use to enforce password policies? What are the characteristics of complex passwords? What is the purpose of an account lockout policy? What does each of the account lockout settings do? Video/Demo Password Policies 2: Account Lockout 2: Configuring Account Policies 6: Adding a UPN Suffix 2:23 Total 13:50 35

37 Lab/Activity Configure Account Settings 1 Configure Account Settings 2 Configure Password Settings 1 Configure Password Settings 2 Number of Exam Questions 9 questions About 45 minutes 36

38 Section 5.10: Managing Certificate Enrollment This is another difficult concept that the students may find troublesome. Familiarize yourself with the principles of PKI and certificates to clarify students confusions. Describe the uses of PKI. Identify the appropriate circumstances of implementing smart cards. Modify settings to facilitate certificate enrollment for users Plan a user authentication strategy. o Plan a smart card authentication strategy Configure the user environment by using Group Policy. o Automatically enroll user certificates by using Group Policy Deploy a computer environment by using Group Policy. o Automatically enroll computer certificates by using Group Policy. What comprises the Public Key Infrastructure? What is a digital certificate? What is a Certificate Authority responsible for doing? How do public and private keys work? What makes smart cards an effective means of authentication? What requirements must a network meet before implementing smart cards? What are the costs involved in implementing a smart card solution? What does a public key policy allow you to control? What is a trusted root CA? What does a CTL do? What are the uses of auto enrollment? 37

39 Video/Demo Certificates and PKI 3: Smart Cards 1: Public Key Policies 1: Configuring Automatic Certificate Enrollment 3:28 Total 10:25 Number of Exam Questions 3 questions About 15 minutes 38

40 Section 6.1: Managing Sites Prepare examples of sites and subnets. Show students the different types of configurations that can be implemented. Prepare trust examples for discussion. Understand the importance of trusts to be able to explain it to the students. Design, create, and manage site and subnet infrastructure. Manage replication including calculating site link costs Implement an Active Directory site topology. (6.2) o Configure site links Manage an Active Directory site. (6.2, 6.1 o Configure replication schedules. o Configure site link costs. What is a site? What is a site used for? What is the purpose of a site link? What does a site cost do? What are advantages of having sites with transitive trusts? How are replication links chosen? Video/Demo Site Concepts 7: Creating Sites 4:43 Total 11:43 Lab/Activity Rename the Default Site Create a Site and Subnet 39

41 Number of Exam Questions 1 question About 25 minutes 40

42 Section 6.2: Customizing Replication Familiarize yourself with the concept of replication. Understand the components involved in replication like intra- and intersite replication, bridgehead servers, site links. Configure data transport by administering site links and bridgehead servers. Manage replication by performing such tasks as configuring intrasite and intersite replication and forcing replication Implement an Active Directory site topology. o Configure site links. o Configure preferred bridgehead servers Manage an Active Directory site. o Configure replication schedules. o Configure site link costs Troubleshoot Active Directory. o Diagnose and resolve issues related to Active Directory replication. What are the differences between intrasite and intersite replication? What are the characteristics of intra- and intersite replication? What is a site schedule? What are two intersite transport protocols? What is the purpose of a KCC? What is the function of the bridgehead server? How is a preferred bridgehead server determined? 41

43 Video/Demo Active Directory Replication 5: Intersite Transports 4: Managing Replication 6: Designating Bridgehead Servers 1:47 Total 18:04 Lab/Activity Modify Site Links Configure Intersite Replication Configure Intrasite Replication Force Replication Designate a Bridgehead Server Number of Exam Questions 10 questions About 55 minutes 42

44 Section 6.3: Troubleshooting Replication Be familiar with how each of the troubleshooting tools works. If possible, generate data to use as examples during your lecture. Diagnose replication problems using log files in Event Viewer. Monitor replication with Replmon. Manage replication tasks, like scheduling, setting replication intervals, and forcing domain controller synchronization Monitor Active Directory replication failures. Tools might include Replication Monitor, Event Viewer, and support tools. o Monitor Active Directory replication. o Monitor File Replication service (FRS) replication. How does Repelmon help with troubleshooting? What does Repadmin do? What do you use Dsastat for? What is an update sequence number (USN)? What is the Up-to-dateness vector? What is the function of the attribute version number? What is a tombstoned object? What happens during garbage collection? What can you find in Lost and Found? Video/Demo Troubleshooting Replication 4: Monitoring Replication 4:12 Total 8:24 43

45 Lab/Activity Troubleshoot replication Number of Exam Questions 13 questions About 30 minutes 44

46 Section 6.4: Global Catalogs Understand the function of the global catalog server. You should also be familiar with universal group membership and the advantages and disadvantages of using universal groups. Manage Global Catalog servers by creating single or multiple Global Catalog server configurations. Establish universal group membership caching for a site or multiple sites Plan a strategy for placing global catalog servers. o Evaluate network traffic considerations when placing global catalog servers. o Evaluate the need to enable universal group caching Troubleshoot Active Directory. o Diagnose and resolve issues related to Active Directory replication. How does a Global Catalog query work? What are the advantages of having more than one Global Catalog server? What kind of data does a Global Catalog server store? Why doesn't a single domain network need a Global Catalog server? What is the function of Universal Group Membership caching? What considerations should you make before implementing a Global Catalog server? Video/Demo Global Catalog Server Placement 6: Designating a Global Catalog Server 2:12 Total 8:22 45

47 Lab/Activity Designate a Global Catalog Server Enable Universal Group Membership Caching Number of Exam Questions 9 questions About 30 minutes 46

48 Section 6.5: Site License Servers Be familiar with the importance of licensing. Discuss licensing issues with the students, including the risks of running unlicensed products on a network. Manage site licenses by creating, selecting, and changing site licensing servers Manage an Active Directory site. What does a site license server do? How does the license monitoring process work? Video/Demo Site License Server 1: Changing the Licensing Server 1:15 Total 2:26 Lab/Activity Select the Site Licensing Server About 10 minutes 47

49 Section 6.6: Application Directory Partitions There are several different types of partitions. Know and understand each of them. Be familiar with the differences between application directory partitions and other partition types. Describe the circumstances under which application directory partitions are more effective than other partition types. Create and delete application directory partitions and replicas Manage an Active Directory site. o Configure replication schedules. What factors make application directory partitions ideal for storing dynamic data? What types of objects can an application directory partitions store? What limitations do objects in application directory partitions operate under? About 5 minutes 48

50 Practice Exams This section provides information to help prepare students to take the exam and to register for the exam. Students will also have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. For example, all questions that apply to Objective 100. Infrastructure Planning are grouped together and presented in practice exam 100. Infrastructure Planning, All Questions. Students will typically take about minutes to complete each of the following practice exams Infrastructure Planning, All Questions (29 questions) 200. Infrastructure Management, All Questions (38 questions) 300. Users, Computers and Groups, All Questions (17 questions) 400. Group Policy Planning, All Questions (35 questions) 500. Group Policy Management, All Questions (8 questions) The Certification Practice Exam consists of 45 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 90 minutes -- just like the real certification exam. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam. 49

51 Appendix A: Approximate for the Course The total time for the LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure Exam course is approximately 15 hours and 42 minutes. The time is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes assigned per simulation) Questions (1 minute per question) Module Sections Minute HR:MM 1.0 Active Directory Overview 1.1 Introduction to Active Directory : Installing and Maintaining Active Directory 2.1 Installing Active Directory Advanced Installation Verifying Installation Backup and Restore : Active Directory Security 3.1 Managing Groups Group Security Planning Delegating Authority : Managing the Active Directory Structure 4.1 Planning the Structure Trust Relationships Functional Levels Operation Masters Schema Active Directory Objects : Managing Group Policy 5.1 Creating and linking GPOs Editing GPOs Group Policy Inheritance Planning GPOs 30 50

52 5.5 Delegating Administration Software Distribution Administrative Templates Folder Redirection Managing Logon Managing Certificate Enrollment : Sites and Services 6.1 Managing Sites Customizing Replication Troubleshooting Replication Global Catalogs Site License Servers Application Directory Partitions :35 Practice Exams 100. Infrastructure Planning (29 questions) Infrastructure Management (38 questions) Users, Computers and Groups (17 questions) Group Policy Planning (35 questions) Group Policy Management (8 questions) 8 Certification Practice Exam (45 questions) :52 Total :42 51