Lesson Plans LabSim for Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment

Transcription

1 Lesson Plans LabSim for Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment (Exam )

2 Table of Contents Course Overview... 3 Section 0.1: Introduction... 5 Section 0.2: Active Directory Overview... 6 Section 0.3: Group Policy... 8 Section 0.4: Server Administration... 9 Section 1.1: Installing Windows 2003 Server Section 1.2: Automated Installs Section 2.1: Users Section 2.2: Groups Section 2.3: Group Strategy Section 2.4: User Profiles Section 2.5: Computer Accounts Section 2.6: Account Policies Section 2.7: AD Command Prompt Tools Section 3.1: Installing Hardware Devices Section 3.2: Managing Devices and Drivers Section 4.1: File Systems Section 4.2: Disks and Volumes Section 4.3: Performance and Fault Tolerance Section 4.4: Maintaining Disks and Volumes Section 5.1: Backup and Restore Section 5.2: Volume Shadow Copy Services (VSS) Section 5.3: System Recovery Section 6.1: NTFS Permissions Section 6.2: Shared Folders Section 6.3: Share Access Section 6.4: Disk Quotas Section 6.5: Encryption and Compression Section 6.6: Offline Files Section 7.1: Installing and Configuring a Web Site Section 7.2: Securing IIS Section 7.3: Managing IIS Section 8.1: Configuring Printing Section 8.2: Customizing Printing Section 8.3: Managing Printing Section 8.4: Troubleshooting Printing Section 8.5: Internet Printing Protocol (IPP) Section 9.1: Deploying and Updating Software Section 9.2: Software Update Services (SUS) Section 10.1: Auditing Section 10.2: Security Templates Section 11.1: Remote Management Section 11.2: Event Viewer

3 Section 11.3: Monitoring Performance Practice Exams Appendix A: Approximate for the Course

4 Course Overview 0.0 Introduction This module introduces Windows Server 2003, Active Directory, and basic server administration. 1.0 Installation This module explains installation procedures, including automated and remote installations. 2.0 Users, Groups, and Computers This module discusses resource management with user accounts, profiles, and groups. 3.0 Hardware Devices This module covers hardware installation, configuration, and troubleshooting. You should have various pieces of hardware you can work with for this module. 4.0 Disk Storage This module covers volumes, performance, and fault tolerance. It also covers basic principles of disk maintenance, including defragmenting and disk recovery. 5.0 Backup and Recovery This module explains methods for ensuring the availability of data on your network. This includes setting up backups and recovering data in the event of a computer failure. 6.0 File Management This module covers file systems, permissions, rights, shared folders, share permissions, disk quotas, encryption, compression, and offline files for remote access. 7.0 Internet Information Services (IIS) This module covers installing and configuring a Web site, IIIS security, and IIS management. 8.0 Printers This module covers printer configuration, customization, management, and troubleshooting. If possible, get a printer you can work with. 9.0 Installing Software This module introduces software updates and deployment 3

5 10.0 System Security This module introduces the concepts related to securing a network environment Management and Performance This module explains methods for monitoring and optimizing your system. Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. 4

6 Section 0.1: Introduction Students should have the following skills before studying for the Managing and Maintaining a Microsoft Windows Server 2003 Environment exam: Basic computer fundamentals including installing hardware and software and system troubleshooting. Computer networking experience. Experience with managing a desktop computer in a workgroup environment. Video/Demo Windows 2003 Introduction 2:34 Total About 5 minutes 5

7 Section 0.2: Active Directory Overview This section provides an overview of the role of the Active Directory. Details include: Active Directory components: o Domain o Organizational Unit (OU) o Generic Containers o Objects o Domain Controller o Trees and Forests o Sites and Subnets Domain Functional Levels o 2000 Mixed o 2000 Native o 2003 Interim o 2003 Common Windows XP/2003 default groups: o Administrators o Backup Operators o Power Users o Users o Guests Some of the default domain groups that are created in the Builtin folder: o Administrators o Server Operators o Backup Operators o Guests o Network Configuration Operators o Print Operators o Users Domain groups created in the Users folder in Active Directory: o Domain Admins o Domain Computers o Domain Controllers o Domain Guests o Domain Users o Enterprise Admins Methods to control access: o Permissions o User rights 6

8 Lecture Focus Questions: What are the primary container and objects used in Active Directory? What is the hierarchy in a forest? What is a trust relationship? What are the functions of domain controllers? What are the advantages of using organizational units? Video/Demo Active Directory Overview 13: Users and Groups 7:06 Total 20:47 Total About 30 minutes 7

9 Section 0.3: Group Policy This section introduces information about group policy. Details include: Group Policy categories: o Computer configuration o User configuration Intervals that Windows refreshes the effective Group Policy settings Manually refreshing group policy settings Lecture Focus Questions: What is the difference between Computer and User settings in a GPO? To which objects can group policy objects be linked? What principles are used to control the application of group policies? What are the rules to keep in mind when determining the effective permissions of multiple GPOs created at different locations on the domain? Video/Demo Group Policy Objects 5: Creating and Linking a GPO 1: Configuring GPO Settings 1: Controlling GPO Application 4: Configuring GPO Application 1: Effective GPO Settings 3:16 Total 18:15 Total About 20 minutes 8

10 Section 0.4: Server Administration This discusses tools to administer a network: Microsoft Management Console (MMC) Computer Management Administrative Tools Run as Remote Desktop Terminal Services Remote Assistance Students will learn how to: Use preset and custom MMCs. Windows Server 2003 Objectives 404. Manage servers remotely. o Manage a server by using available support tools. Lecture Focus Questions: On which systems can you install the server administration tools? How can you protect administrator user accounts using the Run as... feature? What is the difference between using an MMC to manage a remote computer and using Remote Desktop to complete those same tasks? Video/Demo Microsoft Management Console (MMC) 4:18 Number of Exam Questions 5 questions Total About 15 minutes 9

11 Section 1.1: Installing Windows 2003 Server This section introduces Windows 2003 installation. Details include: Starting the Windows 2003 installation: o From a DOS environment o From within a 32-bit environment Common switches to use with the installation programs Troubleshooting installation: o Using the /debuglevel:logfile switch to create an installation debug log o Using System File Checker (Sfc.exe) to verify the integrity of protected system files o Using Spuninst.exe to uninstall a service pack or hotfix from the command line Licensing o Modes for client access licensing: Per Device or Per User Per Server o Tools for managing licenses: Licensing Control Panel Applet Licensing Administrative Tool o Scenarios for using a license group: More users than computers A user has multiple devices that need simultaneous access o Considerations when you run out of licenses Windows Server 2003 Objectives 403. Manage software site licensing. Lecture Focus Questions: Why would you select one method over another to install Microsoft Windows 2003 operating system? How do you determine when to use Winnt.exe or Winnt32.exe? What factors would you consider when choosing per seat vs. per server licensing? 10

12 Video/Demo Winnt and Winnt32 3: Licensing 3:44 Total 7:42 Number of Exam Questions 8 questions Total About 25 minutes 11

13 Section 1.2: Automated Installs Be familiar with the different types of remote installations and their requirements. Details include: Using an unattended installation to automate the operating system installation Using disk imaging to install Windows to a large number of computers with the same hardware configurations Using Remote Installation Services (RIS) to automate installing Windows Installing Windows by copying the installation files to a network share Students will learn how to: Create an Unattend.txt file Lecture Focus Questions: What are the methods used to perform unattended installations of Windows 2003? What is the process of installing RIS for Remote Installation Services? What operating systems are supported for Remote Installation Services? What are the components that must be installed on a RIS server for Remote Installation Services? Video/Demo Unattended Installation 4: Creating an Unattend.txt File 4: Remote Installation Services (RIS) 2:13 Total 11:04 Total About 15 minutes 12

14 Section 2.1: Users This section introduces user accounts. Familiarize yourself with the creation of user accounts and user properties prior to discussing these concepts in the lecture. Students will learn how to: Create domain user accounts. Modify user account properties, including changing logon and password settings in the user account. Reset the password. Enable and disable an account. Windows Server 2003 Objectives 204. Create and manage user accounts. o Create and modify user accounts by using the Active Directory Users and Computers MMC snap-in Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties. Lecture Focus Questions: What is the difference between a disabled, locked out, or expired user account? What is the best way to handle a user s account when an employee quits the company and will be replaced by a new employee in the near future? What are the recommendations for using a template user account? What properties of a user account do not get duplicated when you copy the user? 13

15 Video/Demo Creating User Accounts 1: User Account Management 2: Managing User Accounts 5:34 Total 9:35 Lab/Activity Create a Domain User Account Modify User Account Properties Change the Logon Name Modify Password Settings Set Account Expiration Enable an Account Modify Multiple Users Create a Template User Number of Exam Questions 9 questions Total About 60 minutes 14

16 Section 2.2: Groups This section introduces groups on the local computer and in the domain environment. Details include: Active Directory defines three group scopes: o Global groups o Domain local groups o Universal groups Types of groups: o Security group o Distribution group Best practices for user and group security Some of the Active Directory default groups that are automatically created in the Builtin folder: o Administrators o Server Operators o Backup Operators o Account Operators o Guests o Network Configuration Operators o Print Operators o Users Some of the additional domain groups are also created in the Users folder in Active Directory: o Domain Admins o Domain Computers o Domain Controllers o Domain Guests o Domain Users o Enterprise Admins Students will learn how to: Create each type of security group and add members. Create a distribution group and add members. Change the group scope. Windows Server 2003 Objectives 203. Create and manage groups. o Identify and modify the scope of a group. o Manage group membership. 15

17 o Create and modify groups by using the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in. Lecture Focus Questions: What are the advantages of using groups when setting permissions? What is the difference between a security group and a distribution group? What is the purpose of each group scope? What are the built-in capabilities of the Power Users group? The Backup Operators group? Video/Demo Group Scopes 4: Domain Local Scopes 3: Creating Groups 1: Built-in Groups 1:51 Total 10:26 Lab/Activity Create a Global Group Create a Domain Local Group Create a Universal Group Create a Distribution Group Change the Group Scope Number of Exam Questions 4 questions Total About 45 minutes 16

18 Section 2.3: Group Strategy This section introduces the different strategies to use groups to manage access to system resources. o ALP o AGDLP o AGUDLP Students will learn how to: Implement a group strategy following Microsoft's recommendations for group membership and nesting. Windows Server 2003 Objectives 203. Create and manage groups. Lecture Focus Questions: What are the circumstances that warrant using a universal group over a global group? When you add a user to a group, when will the permissions be granted that apply to that group? How is the technique of nesting used when assigning permissions to groups? Video/Demo Group Strategy 5: Implementing a Group Strategy 9:09 Total 14:15 Lab/Activity Implement a Group Strategy 1 Implement a Group Strategy 2 17

19 Number of Exam Questions 6 questions Total About 35 minutes 18

20 Section 2.4: User Profiles Familiarize yourself with the different types of profiles and their uses. Create mandatory and roaming profiles to show the students. Be prepared to discuss the best practices for using profiles. Details included in this section include: Common profile manage tasks: o Create a new profile o Edit an existing profile o Create Start Menu or Desktop shortcuts o Copy a profile o Copy a profile from one system to another o Make a mandatory user profile o Make a roaming user profile o Assign a specific profile o Delete a profile Permissions needed to manage and use profiles Roaming user profiles Group Policy settings that control roaming profiles Students will learn how to: Create a mandatory user profile. Create a roaming user profile. Windows Server 2003 Objectives 201. Manage local, roaming, and mandatory user profiles. Lecture Focus Questions: What is the name of the default user profile created when a user is created and where is it stored? What parameters does the user profile allow the user to modify? How do you alter the default user profile to create a mandatory user profile? Since both mandatory and personal user profiles can be modified, what are the differences between the two types of profiles? 19

21 Video/Demo Mandatory Profile 3: Roaming Profile 4: Managing User Profiles 2:15 Total 9:54 Lab/Activity Create a Mandatory Profile Create a Roaming Profile Delete User Profiles Add Mandatory Roaming Profiles Number of Exam Questions 9 questions Total About 45 minutes 20

22 Section 2.5: Computer Accounts This section discusses how computer accounts are Active Directory objects that identify network computers. Students will learn how to: Create computer accounts and manage computer account properties. Disable and reset a computer account. Windows Server 2003 Objectives 202. Create and manage computer accounts in an Active Directory environment Troubleshoot computer accounts. o Diagnose and resolve issues related to computer accounts by using the Active Directory Users and Computers MMC snap-in. o Reset computer accounts Troubleshoot user authentication issues. Lecture Focus Questions: What are the steps required to join a domain manually? What can the administrator do to allow a user to join a computer to a domain during installation? What are the things to consider if a computer account has been created on a domain but doesn t seem to be able to join the domain? What must you do after resetting a computer account? Video/Demo Computer Accounts 3: Joining a Domain 1: Managing Computer Accounts 1:49 Total 6:43 Lab/Activity Create Computer Accounts Disable a Computer Account Reset a Computer Account 21

23 Number of Exam Questions 6 questions Total About 30 minutes 22

24 Section 2.6: Account Policies The section discusses using account policies to control passwords and login properties. Details include: Password settings o Enforce password history o Maximum password age o Minimum password age o Minimum password length o Password complexity o Reversible encryption Account lockout settings: o Account lockout duration o Account lockout threshold o Reset account lockout counter after Consideration when managing account security Conditions to consider when troubleshooting logon problems: o Disabled account o Locked account o Expired account o Logon not permitted o Workstation restrictions o Expired password o No domain controller available o Computer account problems o Using Dsmod o The role of cached credentials Students will learn how to: Configure account settings. Configure password settings. Windows Server 2003 Objectives 206. Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties Troubleshoot user authentication issues. 23

25 Lecture Focus Questions: How does an overly restrictive password requirement compromise the network? What password settings are available to tighten up network security? How do account lockout settings protect the network? Where must account and password policies be configured in Group Policy? Video/Demo Password Policies 3: Setting Account and Password Policies 1:12 Total 4:42 Lab/Activity Configure Account Settings 1 Configure Account Settings 2 Configure Password Settings 1 Configure Password Settings 2 Reset the Password Number of Exam Questions 20 questions Total About 55 minutes 24

26 Section 2.7: AD Command Prompt Tools Many of the Active Directory administrative tasks can be accomplished from a command line. This facilitates the remote management of server systems. Learn the command prompt tools and their functions. Dsadd Dsquery Dsget Dsmod Dsmove Dsrm Movetree Netdom Ldifde Csvde Students will learn how to: Use the following tools to manage Active Directory: Dsadd, Dsquery, Dsget, Dsmod, Dsmove, Dsrm, Movetree, Ldifde, and Csvde. Windows Server 2003 Objectives 203. Create and manage groups. o Find domain groups in which a user is a member. o Create and modify groups by using automation Create and manage user accounts. o Create and modify user accounts by using automation. o Import user accounts. Lecture Focus Questions: What objects can be imported and exported in Active Directory? How do you move objects from one Active Directory to another Active Directory? When would you choose Csvde over Ldifde when moving objects? 25

27 Video/Demo Importing and Exporting 3: AD Management Commands 4: Using Command Prompt Tools 7:07 Total 14:36 Number of Exam Questions 8 questions Total About 25 minutes 26

28 Section 3.1: Installing Hardware Devices This section introduces device installation. If possible have a variety of devices available to attach to the printer (try to have one that requires manual installation of the drivers for demonstration purposes), especially a printer. Concepts covered include: Installing devices Reasons an installation may fail Icons used in Device Manager to identify problem devices Considerations when troubleshooting device installation Students will learn how to: Install hardware devices. Windows Server 2003 Objectives 104. Install and configure server hardware devices. o Configure resource settings for a device. o Configure device properties and settings. Lecture Focus Questions: How do Plug and Play devices simplify installation? What key steps are necessary to install legacy devices? What user rights are required to install devices? Video/Demo Device Installation 1: Installing Devices 3:20 Total 4:59 Lab/Activity Autodetect a Plug and Play Device Install a Legacy Device Total About 20 minutes 27

29 Section 3.2: Managing Devices and Drivers This section discusses the concept of drivers and driver signing. If possible, have a device available to install. Update the driver using the device s Properties dialog box. If not, be familiar enough to show the students the device s properties. Details include: Tools to manage devices: o Device Manager o Control panel Applets o Add Hardware Wizard o Hardware Troubleshooting Wizard Updating drivers Settings to control how unsigned drivers are installed on the system: o Block o Warn o Ignore o Make this action the system default Protecting against unsigned drivers Students will learn how to: Enable, disable, and remove devices. Upgrade or roll back a driver. Configure driver signing. Windows Server 2003 Objectives 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items Install and configure server hardware devices. o Configure driver signing options. o Configure resource settings for a device. o Configure device properties and settings. Lecture Focus Questions: How does driver signing ensure driver integrity? What options are available when setting up driver signing options? How do you ensure that the driver signing options you have selected will be imposed upon all users that log on to the system? What file verification tools are available to verify driver signatures and file integrity? 28

30 Video/Demo Managing Devices and Drivers 2: Driver Signing 2: Configuring Driver Signing 3: Hardware Control Panel Applets 3:22 Total 11:23 Lab/Activity Enable and Disable Devices Remove a Device Upgrade a Driver Configure Driver Signing Number of Exam Questions 12 questions Total About 45 minutes 29

31 Section 4.1: File Systems Familiarize yourself with the different file systems. If possible, create three partitions on a volume. Format each with a different file system. Examine the differences in Computer Management or in Disk Management. Show the compression, quota, and permissions settings in the Local Disk Properties dialog box of the NTFS volume. This section discusses the following: Types of file systems: o FAT o FAT32 o NTFS A comparison of the file system types supported by each operating system Using the Convert.exe utility to modify the file system without reformatting and losing data. Students will learn how to: Format a drive. Convert a drive to NTFS. Windows Server 2003 Objectives 303. Configure file system permissions. Lecture Focus Questions: Which file systems does Windows 2003 support? How do you convert a FAT file system to NTFS? What additional capabilities are added to a FAT32 file system when it is converted to NTFS? Video/Demo File Systems 5: Convert to NTFS 2:10 Total 7:26 30

32 Lab/Activity Format a Drive Convert a Drive Number of Exam Questions 1 question Total About 20 minutes 31

33 Section 4.2: Disks and Volumes This section discusses disks and volumes. Details include: Considerations when using basic disks Considerations when using dynamic disk Factors to consider when choosing to implement basic or dynamic disks Types of volumes: o Simple volume o Extended volume o Spanned volume Managing volumes Students will learn how to: Upgrade a disk to a dynamic disk or revert a disk to a basic disk. Create a simple volume, extend an existing volume, and create a spanned volume. Windows Server 2003 Objectives 101. Manage basic disks and dynamic disks. Lecture Focus Questions: What are the differences between basic and dynamic disks? What new feature is allowed on Server 2003 with dynamic disks not available previously? What are the advantages and disadvantages of spanned volumes? Video/Demo Disk Types 6: Creating a Simple Volume 1: Spanned Volumes 4: Creating Spanned Volumes 1:08 Total 11:23 32

34 Lab/Activity Upgrade a Disk Revert a Disk to Basic Create a Volume Span an Existing Volume Create a Spanned Volume Number of Exam Questions 2 questions Total About 40 minutes 33

35 Section 4.3: Performance and Fault Tolerance This section discusses the different methods for fault tolerance and redundancy. Details include: RAID levels: o RAOD0 o RAID1 o RAID5 Volume Types o Mirrored volume o Striped volume o RAID5 Volume Students will learn how to: Create a striped volume. Create a mirrored volume and mirror an existing volume. Create a RAID-5 volume. Windows Server 2003 Objectives 101. Manage basic disks and dynamic disks Optimize server disk performance. o Implement a RAID solution. o Defragment volumes and partitions. Video/Demo RAID Levels 0: Striping 3: Mirroring 2: Creating Mirrored Volumes 1: RAID-5 5: Creating RAID Volumes 1:42 Total 16:24 34

36 Lab/Activity Create a Striped Volume Create a Mirrored Volume Mirror an Existing Drive Mirror the System Partition Create a RAID Volume Number of Exam Questions 6 questions Total About 50 minutes 35

37 Section 4.4: Maintaining Disks and Volumes This section discusses the methods for defragmenting and recovering disks. Details include: Tools to manage disks: o DiskPart o Defrag o Cscript o Disk Defragmenter o Disk Management Recovering failed disks: o In a spanned volume or striped set o In a mirror configuration o In a RAID5 configuration o In a failed operating system Volume mount points The role of the Boot.ini file The ARC path locates the system file and contains the following elements: o MULTI(x) or SCSI(x) o DISK(x) o RDISK(x) o PARTITION(y) Students will learn how to: Break a mirrored volume Recover from a failed mirrored volume Repair a RAID volume Windows Server 2003 Objectives 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items Recover from server hardware failure. Lecture Focus Questions: What volume types lose all data in the absence of parity and data backup? What are the steps to recovering from a drive failure? What are the functions of the ARC path components? 36

38 Video/Demo Defragmenting a Hard Disk 1: Disk Recovery 1: Recovering from a Failed Disk 2: Boot.ini File 15:52 Total 21:17 Lab/Activity Break a Mirrored Volume Recover a Failed Mirrored Volume Repair a RAID Volume Number of Exam Questions 9 questions Total About 45 minutes 37

39 Section 5.1: Backup and Restore This section covers backup and restore. Concepts covered include: Backup methods: o Full (Normal) o Incremental o Differential o Copy o Daily Backup strategies: o Full Backup o Full + Incremental o Full + Differential o Periodic Copy Backup Data types: o System state o User data o Application data Managing backups Scheduled backups Restoring files Students will learn how to: Manage backup media and devices. Back up and restore data. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Configure security for backup operations Manage backup procedures. o Verify the successful completion of backup jobs. o Manage backup storage media Recover from server hardware failure. o Restore backup data. o Schedule backup jobs. 38

40 Lecture Focus Questions: If you are using mirrored or RAID disks, do you need to back up your system? What file components make up the system state data for Windows 2003 Server? What are the advantages of the different backup types? Which backup strategy would you choose if fast restore times were important? Which strategy would you choose to minimize the number of tapes used? Video/Demo Windows Backup 12: System State Data 6: Choosing a Backup Strategy 5: Backing up Data 4: Restoring Data 2:27 Total 31:26 Number of Exam Questions 27 questions Total About 65 minutes 39

41 Section 5.2: Volume Shadow Copy Services (VSS) This section discusses the operating system feature Volume Shadow Copy Services (VSS). Details covered include: The role of VSS Considerations when enabling and disabling VSS Restoring files Recommendations when working with shadow copies Students will learn how to: Enable shadow copies on a volume. View and restore previous versions of files. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Restore data from shadow copy volumes. Lecture Focus Questions: How is VSS used in a system backup? What happens when the system runs out of room for storing previous versions? What are the client requirements for accessing and restoring previous versions of files? What should you do if a user cannot see the Previous Versions tab for a folder or a file? Video/Demo Using Volume Shadow Copy 3:13 Lab/Activity Enable Shadow Copies Number of Exam Questions 8 questions Total About 20 minutes 40

42 Section 5.3: System Recovery This section introduces the methods available for recovering from system failures. Details include: Methods to recover from system problems: o Driver Rollback o Last Known Good Configuration o Safe Mode o Recovery Console o Automated System Recovery o Windows Backup (Ntbackup) Types of Active Directory restores: o Normal (non-authoritative) o Authoritative o Primary How to restore Active Directory information Students will learn how to: Set up and use ASR. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Implement Automated System Recovery (ASR). o Restore data from shadow copy volumes. o Back up files and System State data to media. o Configure security for backup operations. Lecture Focus Questions: What are the key differences between Driver Rollback and Automatic System Recovery (ASR)? When troubleshooting the network, in what circumstances would you use Safe Mode over Last Known Good? What is the function of the authoritative restore option? 41

43 Video/Demo Driver Rollback and ASR 3: Setting up and Using ASR 1: Troubleshooting System Startup 5: Backing Up and Restoring Active Directory 6:53 Total 18:04 Number of Exam Questions 8 questions Total About 35 minutes 42

44 Section 6.1: NTFS Permissions This section discusses how NTFS permissions are used to control the actions that can be performed on the file or folder. Details include: Permissions for folders and files: o Read o Write o List Folder Contents o Read & Execute o Modify o Full Control How file ownership affects access and assigning permissions Copying or moving files with NTFS permissions Effective permissions are the sum of all permissions from the following sources: o Explicit Assignment o Group membership o Inheritance Determining effective permissions Planning NTFS permissions Students will learn how to: Configure NTFS permissions. From a scenario, select the correct permissions to allow the necessary actions. Copy, remove, and modify inherited permissions. Identify the effective permissions a user has to a file or folder. Windows Server 2003 Objectives 303. Configure file system permissions. o Verify effective permissions when granting permissions. o Change ownership of files and folders. Lecture Focus Questions: When do NTFS permissions apply? What are the differences between the NTFS Full Control permission and the Modify permission? Which permission assignment overrides all other permission assignments? 43

45 Video/Demo NTFS Permissions 6: Setting NTFS Permissions 3: Viewing Effective Permissions 2:46 Total 13:10 Lab/Activity Configure NTFS Permissions Copy and Modify Inherited Permissions Remove Inherited Permissions Number of Exam Questions 6 questions Total About 45 minutes 44

46 Section 6.2: Shared Folders This section introduces shared folders. Details include: The role of shared folders Managing shared folders Accessing a shared folder Hiding a share Students will learn how to: Share and unshare a folder. Configure shared properties. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What tools can you use to share folders? What is the process for hiding a share? How are administrative shares accessed? What limitations are there on sharing folders on desktop operating systems (such as Windows XP Professional)? Video/Demo Share a Folder 3:13 Lab/Activity Share a Folder with a Second Name Unshare a Folder Remove a Shared Folder Number of Exam Questions 6 questions Total About 25 minutes 45

47 Section 6.3: Share Access This section covers the methods for managing access to shared resources. Details include: Share permissions: o Read o Change o Full Control Share permissions work together with NTFS permissions to control access Considerations when managing share access Students will learn how to: Restrict share access through share permissions and user limits. Configure combined NTFS and share permissions. Windows Server 2003 Objectives 301. Configure access to shared folders. o Manage shared folder permissions. Lecture Focus Questions: What are the differences and similarities between NTFS permissions and share permissions? What is the difference between modify and change permissions? How does the access funnel theory help to explain the effective permission when combining NTFS permissions and share permissions? What strategy can be used to secure network resources by combining both NTFS permissions and share permissions? 46

48 Video/Demo Share Permissions 5: Controlling Share Access 1:39 Total 6:51 Lab/Activity Configure Share Permissions Create a Share and Set Permissions Configure Share Limits Configure NTFS and Share Permissions 1 Configure NTFS and Share Permissions 2 Number of Exam Questions 14 questions Total About 55 minutes 47

49 Section 6.4: Disk Quotas This section discusses how disk quotas are set on NTFS volumes. Details include: Considerations when settings disk quotas Quota settings to manage quotas: o Disabled o Tracked o Enforced Actions to take when a user exceeds the quota limit Compressing files will not provide more space when quotas have been set Students will learn how to: Enable disk quota restrictions. Create and modify quota entries for individual users. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor disk quotas. Lecture Focus Questions: Are disk quotas configured on disks, volumes, folders, or files? What effect does compressing files have on the disk quota limit? What actions can be taken when a user exceeds the disk quota limit? How can you have a disk quota configured, but still allow users to exceed the quota limits? What conditions must be met before you can delete a disk quota entry? Which user is exempt from disk quotas? 48

50 Video/Demo Disk Quotas 5: Enabling Quota Management 2: Quota Entries 3: Configuring Quota Entries 2:32 Total 13:28 Lab/Activity Enable Quota Restrictions Create a Quota Entry Modify Quota Limits Delete a Quota Limit Number of Exam Questions 2 questions Total About 35 minutes 49

51 Section 6.5: Encryption and Compression This section covers the encryption and compression features of the NTFS file system. Details include: Considerations when working with EFS Rules to determine the final state of an encrypted file that has been copied or moved. Saving encrypted files on a remote computer Methods for compressing files and folders: o File compression o Zipped folders Considerations when working with folder and file compression Using Compact.exe to set and manage compression Students will learn how to: Encrypt and decrypt a file or folder. Compress a drive, folder, or file. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What are different methods for encrypting a file? Under what circumstances can an encrypted file under EFS lose its encryption? Who can open an encrypted file? What files are not allowed to be encrypted? Where are the advantages and disadvantages of compression? 50

52 Video/Demo File Encryption 6: Encrypting Files 3: Compression 1: Compressing Files 1:24 Total 13:03 Lab/Activity Encrypt a Folder Decrypt a File Compress a Drive Compress a Folder Total About 40 minutes 51

53 Section 6.6: Offline Files This section covers information relevant to mobile computers and offline files. Details include: The role of offline files Configuring offline files Considerations when working with offline files Students will learn how to: On the server, enable, disable, or optimize offline file cache settings. Configure a client computer to use offline files. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What are the different settings available for offline file caching? How does offline file support provide access to shared files? Video/Demo Configuring Offline Files on the Server 1: Configuring Offline Files on the Client 2:46 Total 4:12 Lab/Activity Optimize Program Caching Enable Automatic Caching Disable Share Caching 52

54 Number of Exam Questions 1 question Total About 25 minutes 53

55 Section 7.1: Installing and Configuring a Web Site This section introduces the Internet Information Server (IIS). While IIS was installed by default in Windows 2000 Server, it is not in Windows Server Install IIS through the Add/Remove Programs Control Panel applet. Details include: The role of IIS Making Web content available using the following in IIS: o Home directory o Default home pages o Virtual directories URLS to access the Web site Students will learn how to: Install IIS and selected components. Change the default home page and home directory path. Create a virtual directory. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). Lecture Focus Questions: What is IIS? What is the default home page path? What is a virtual directory? Video/Demo Installing and Administering IIS 2: Creating a Virtual Directory 2:22 Total 5:09 54

56 Lab/Activity Install IIS Change the Default Home Page Change the Home Directory Path Create a Virtual Directory Set the Virtual Directory Home Page Number of Exam Questions 3 questions Total About 35 minutes 55

57 Section 7.2: Securing IIS This section covers the methods for securing IIS. Details include: Authentication methods: o Anonymous Authentication o Basic Authentication o Digest Authentication o Advanced Digest Authentication o Integrated Windows Authentication o Certificate Authentication o.net Passport Authentication Authentication methods can be applied to: o Server o Web site o FTP site o Virtual Directory o File Facts about securing IIS IIS permissions that can be set for Web sites or Web folders: o Read o Write o Script Source Access o Directory Browsing o Execute Permissions Using NTFS permissions for Web content Students will learn how to: Configure Web site authentication. Configure virtual directory authentication and permissions. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). o Manage security for IIS. Lecture Focus Questions: What are the features of the Basic Authentication? What is the disadvantage of Integrated Windows Authentication? What effects would the different Web permissions allow? 56

58 What happens when Web site, directory, and NTFS permissions are all set on Web content? Video/Demo IIS Security 2: Managing IIS Authentication 1: Managing IIS Permissions 3:37 Total 8:18 Lab/Activity Configure Web Site Authentication Configure Virtual Directory Authentication Configure Virtual Directory Permissions Number of Exam Questions 2 questions Total About 30 minutes 57

59 Section 7.3: Managing IIS This section introduces the different management tasks associated with IIS. Details include: Identifying a Web site Managing IIS Students will learn how to: Create a new Web site. Start and stop a Web site. Configure alternate port numbers and host headers for a Web site. Add restrictions for Web site access. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). o Manage security for IIS. Lecture Focus Questions: Where is a default Web site assigned when using IIS Manager? What are the steps to creating a virtual directory? How can you get a Web site to respond to different Web site names? Video/Demo Creating a Web Site 2: Configuring Web Site Identification 2:32 Total 4:51 Lab/Activity Create a New Web Site Limit Web Site Access Stop the Web Site 58

60 Number of Exam Questions 7 questions Total About 30 minutes 59

61 Section 8.1: Configuring Printing This section introduces printing concepts and tasks. Details include: Key printing terms: o Print Server o Printer o Print Device o Print Driver o Print Queue o Printer Port Configuration choices to configure each type of printer Permissions that can be assigned to printers: o Print o Manage Documents o Manage Printer Tasks available to the Printer Operator group Managing print drivers on shared printers Students will learn how to: Install and share a printer. Configure printer permissions. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: How can printer terminology be confusing in a Windows 2003 environment? What are the advantages of network printing? For which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer? 60

62 Video/Demo Printing Concepts 10: Installing a Local Printer 2: Sharing a Printer 2:49 Total 16:04 Lab/Activity Install a Local Printer Share a Printer Create and Share a Printer Unpublish a Printer in Active Directory Add Printer Drivers Configure Printer Permissions Number of Exam Questions 2 questions Total About 50 minutes 61

63 Section 8.2: Customizing Printing This section looks at some advanced printer configurations to customize printing. Configuration techniques include: o Printer pooling o Multiple printer objects Students will learn how to: Configure printer pooling. Customize printing by using priorities, permissions, availability, and multiple printer objects. Windows Server 2003 Objectives 405. Troubleshoot print queues Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device? What are the advantages of print pooling? How can you ensure important print jobs will automatically be printed before any other print jobs? Video/Demo Configuring Printer Pooling 2: Configuring Multiple Printer Objects 5:04 Total 7:29 Lab/Activity Configure Printer Pooling Restrict Printing s Configure Printer Priority 62

64 Number of Exam Questions 2 questions Total About 25 minutes 63

65 Section 8.3: Managing Printing This section introduces the various management tasks administrators may have to deal with. Students will learn how to: Add printer drivers for previous Windows version clients. Manage print jobs in the print queue. Edit print server properties to change the spool location and modify print job notification. Windows Server 2003 Objectives 405. Troubleshoot print queues Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: Where would you go to perform the following tasks? o View the port used by each printer. o Change the driver used by a printer. o Add drivers for download by clients. o Move, pause, or delete print jobs. o Configure notification for print jobs. How do clients obtain the correct driver for shared printers? Where are documents saved prior to printing? Video/Demo Managing Printers 2: Managing the Print Queue 1: Managing the Print Server 2:22 Total 6:06 64

66 Lab/Activity Delete a Print Job Disable Printer Notification Disable Printer Notification (Non-2000 clients) Change the Spool Location Total About 25 minutes 65

67 Section 8.4: Troubleshooting Printing This section introduces print troubleshooting techniques. Students will learn how to: Redirect print jobs to other printers. Windows Server 2003 Objectives 405. Troubleshoot print queues. Lecture Focus Questions: How does a print job get from the sending computer to the printer? How do you recover print jobs when a print device needs to be taken off line? Where is a print job stored once a user has sent it to the printer? Video/Demo Recovering from Printer Failure 4:13 Lab/Activity Redirect Print Jobs Redirect Print Jobs 2 Number of Exam Questions 3 questions Total About 15 minutes 66

68 Section 8.5: Internet Printing Protocol (IPP) This section introduces the Internet Printing Protocol. Students will learn how to: Install the IPP component of IIS. From a client computer, connect to and send a print job to an Internet printer. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor Manage a Web server. o Manage Internet Information Services (IIS). Lecture Focus Questions: What is the functionality of IPP? What are the system requirements for Internet printing? How do users access printers across the Internet? How do you provide intranet printing on client machines? Video/Demo IPP 3: Configuring IPP 7:13 Total 10:30 Number of Exam Questions 2 questions Total About 15 minutes 67

69 Section 9.1: Deploying and Updating Software This section introduces the concepts of software distribution. Details include: File extensions that are used with installer packages: o.msi o.msp o.mst o.zap Using Group Policy to add an installer package to a software installation policy in a GPO: o Assign o Publish Students will learn how to: Create a software distribution package. Customize software distribution to simplify management and control distribution. Windows Server 2003 Objectives 402. Manage software update infrastructure. Lecture Focus Questions: What options are available to deploy applications and programs to client machines? What are the differences between assigning or publishing an application when using group policy? What is the process to troubleshoot software deployment? How are patches and service packs handled differently? 68

70 Video/Demo Deploying Applications 4: Creating a Software Distribution 2: Troubleshooting Software Deployment 2: Service Packs and Patches 1:56 Total 11:58 Number of Exam Questions 2 questions Total About 15 minutes 69

71 Section 9.2: Software Update Services (SUS) This section covers the Software Update Services component of Windows Server Details include: Major SUS components: o SUS on an Internet Information Services (IIS) server o SUS Web site o Automatic Updates o Group Policy settings o Client and Server support Advantages of SUS How SUS works Installing and configuring the SUS server Installing and configuring the SUS client Designing the SUS infrastructure Considerations when using SUS Students will learn how to: Install SUS and configure server settings. Synchronize an SUS server with Microsoft SUS servers. Approve SUS updates. Configure client settings for SUS. Windows Server 2003 Objectives 402. Manage software update infrastructure. Lecture Focus Questions: What is the function of Software Update Services (SUS)? From what location is the SUS available to install on your server? What are the functions of the major components of SUS? What types of files cannot be updated with SUS? 70

72 Video/Demo Configuring SUS 6: Managing SUS Clients 2:49 Total 9:04 Number of Exam Questions 9 questions Total About 25 minutes 71

73 Section 10.1: Auditing This section introduces the concept of auditing as an element of administration. Details include: Audit policies in Group Policy that can be configured: o Account logon o Account management o Logon o Object access o Policy change o Privilege use o Process tracking o System events Considerations when configuring auditing Students will learn how to: Configure auditing using Group Policy. Windows Server 2003 Objectives 206. Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties Troubleshoot user authentication issues. Lecture Focus Questions: What are the types of functions you can audit? What measures should be taken to protect excessive system resources from being consumed by auditing? How does auditing file access differ from auditing other items? Where do you view audit entries? 72

74 Video/Demo Auditing 4: Configuring Auditing 3: Configuring File System Auditing 2:07 Total 10:15 Lab/Activity Configure Auditing 1 Configure Auditing 2 Configure Auditing 3 Number of Exam Questions 6 questions Total About 35 minutes 73

75 Section 10.2: Security Templates This section introduces the use of security templates to help enforce network security. Details include: Predefined security templates: o Setup Security.inf o DC Security.inf o Secure*.inf o Hisec*.inf o Compatws.inf Using Security Analysis and Configuration snap-in to: o Manage security templates o Analyze current settings o Create custom templates o Import an existing template Students will learn how to: Analyze security settings. Configure and apply security templates. Windows Server 2003 Objectives 406. Monitor system performance. Lecture Focus Questions: What are the advantages of security templates? What program is available to access the predefined security templates? What command allows you to analyze and apply templates? Why is it important to clear current settings before importing a new template? 74

76 Video/Demo Security Templates 3: Analyzing Security Settings 2: Configuring and Applying Security Templates 2:48 Total 9:02 Number of Exam Questions 1 question Total About 10 minutes 75

77 Section 11.1: Remote Management This section introduces Terminal Services and remote management. Details include: Modes that Terminal Services can operate in: o Administration Mode (Remote Desktop) o Application Server Mode Statuses for a Terminal Server session: o Active o Idle o Disconnected o Ended Permissions to control the ability to use a Terminal Services connection: o Query Information o Set Information o Remote Control o Logon o Logoff o Message o Connect o Disconnect o Virtual Channels Connection permissions can be granted individually through Special Permissions, or they are granted by allowing the following user access levels: o Full control o User access o Guest access Methods to manage Terminal Services users and properties: o Remote Desktop Users group o User Account Settings o Terminal Services Configuration tool o Terminal Services Manager o Terminal Services Licensing o Remote Desktop client software o Group Policy Configuring settings for Terminal Services Components used with Terminal Services licensing: o Microsoft Clearinghouse o Licensing Server o Terminal Server o Terminal Server Client Configuring a licensing server 76

78 Roles for a licensing server: o Domain Licensing Server o Enterprise Licensing Server Managing terminal services licensing Remote Desktop Remote Assistance Students will learn how to: Install Terminal Services application mode. Manage Terminal Services connections. Enable Remote Desktop on a computer and configure Remote Desktop users. Windows Server 2003 Objectives 302. Troubleshoot Terminal Services. o Diagnose and resolve issues related to Terminal Services security. o Diagnose and resolve issues related to client access to Terminal Services Manage servers remotely. o Manage a server by using Remote Assistance. o Manage a server by using Terminal Services remote administration mode. o Manage a server by using available support tools. Lecture Focus Questions: How is Remote Desktop related to Terminal Services? What is the difference between domain and enterprise licensing servers? What are the limitations of the evaluation period for Terminal Services? What computer operating systems are required for both the novice and the expert workstations when using Remote Assistance? What conditions must be in place in order to use unsolicited remote assistance? 77

79 Video/Demo Terminal Services 7: Installing Terminal Services 3: Remote Assistance 3:59 Total 14:26 Lab/Activity Enable Remote Desktop Number of Exam Questions 22 questions Total About 60 minutes 78

80 Section 11.2: Event Viewer This section introduces using the Event Viewer logs to monitor and analyze system and application errors and warnings. Students will learn how to: Configure log properties. Clear and save a log. Windows Server 2003 Objectives 401. Monitor and analyze events. Tools might include Event Viewer and System Monitor Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor server hardware for bottlenecks. Lecture Focus Questions: What three default log files are available in event viewer? When are additional log files made available in event viewer? What events do the System Log and Application Log monitor? What events does the Security Log monitor? Video/Demo Event Viewer 3: Using Event Viewer 7: Managing Event Logs 2:30 Total 13:04 Lab/Activity Configure Log Properties Clear the System Log Number of Exam Questions 3 questions Total About 25 minutes 79

81 Section 11.3: Monitoring Performance This section discusses tools for monitoring system performance. Details included: Tools to monitor system performance: o Task Manager o Performance Console System Monitor Performance Logs and Alerts o Network Monitor (Netmon) System Monitor uses: o Objects o Counters Common objects available within System Monitor: o Processor o Process o Thread o PhysicalDisk o LogicalDisk o Memory o Cache o Paging File o Network Interface o System Counters to identify potential performance problems or bottlenecks: o CPU Counters o Disk Counters o Memory Counters o Network Counters Students will learn how to: Monitor system performance using Task Manager or System Monitor. Select objects and counters in order to monitor system performance. Windows Server 2003 Objectives 406. Monitor system performance Monitor and optimize a server environment for application performance. o Monitor memory performance objects. o Monitor network performance objects. o Monitor process performance objects. 80

82 o Monitor disk performance objects. Lecture Focus Questions: What built-in monitor utilities are available with Windows 2003? What steps must you complete to setup Network Monitor on the network? What functions does Task Manager provide? What monitor utility could be used to troubleshoot a connectivity problem with a server? Video/Demo Monitoring the System 3: Using Task Manager 3: Using System Monitor 9:09 Total 16:15 Number of Exam Questions 19 questions Total About 45 minutes 81

83 Practice Exams This section provides information to help prepare students to take the exam and to register for the exam. Students will also have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. For example, all questions that apply to Objective 100. Devices are grouped together and presented in practice exam 100. Devices, All Questions. Students will typically take about minutes to complete each of the following practice exams Devices, All Questions (32 questions) 200. Users, Computers, and Groups, All Questions (66 questions) 300. Resource Access, All Questions (48 questions) 400. Server Environment, All Questions (82 questions) 500. Disaster Recovery, All Questions (48 questions) The Certification Practice Exam consists of 44 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 215 minutes -- just like the real certification exam. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam. 82

84 Appendix A: Approximate for the Course The total time for the LabSim for Microsoft s Managing and Maintaining a Server 2003 Environment Exam course is approximately 28 hours and 50 minutes. The time is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes assigned per simulation) Questions (1 minute per question) The breakdown for this course is as follows: Module Sections Minute HR:MM 0.0 Introduction 0.1 Introduction Active Directory Overview Group Policy Server Administration : Installation 1.1 Installing Windows 2003 Server Automated Installs : Users, Groups, and Computers 2.1 Users Groups Group Strategy User Profiles Computer Accounts Account Policies AD Command Prompt Tools : Hardware Devices 3.1 Installing Hardware Devices Managing Devices and Drivers : Disk Storage 4.1 File Systems Disks and Volumes 40 83

85 4.3 Performance and Fault Tolerance Maintaining Disks and Volumes : Backup and Recovery 5.1 Backup and Restore Volume Shadow Copy Services (VSS) System Recovery : File Management 6.1 NTFS Permissions Shared Folders Share Access Disk Quotas Encryption and Compression Offline Files : Internet Information Services (IIS) 7.1 Installing and Configuring a Web Site Securing IIS Managing IIS : Printers 81 Configuring Printing Customizing Printing Managing Printing Troubleshooting Printing Internet Printing Protocol (IPP) : Installing Software 9.1 Deploying and Updating Software Software Update Services (SUS) : System Security 10.1 Auditing Security Templates : Management and Performance 11.1 Remote Management Event Viewer Monitoring Performance :10 84

86 Practice Exams 100: Devices (32 questions) : Users, Computers, and Groups (66 questions) : Resource Access (48 questions) : Server Environment (82 questions) : Disaster Recovery (48 questions) 48 Certification Practice Exam (44 questions) :20 Total :50 85