Lesson Plans LabSim for Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment



Similar documents
Lesson Plans Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment

Managing and Maintaining a Windows Server 2003 Network Environment

LearnKey's Windows Server 2003 Managing a Network Environment with Aaron Spurlock

Table Of Contents. - Microsoft Windows - WINDOWS XP - IMPLEMENTING & SUPPORTING MICROSOFT WINDOWS XP PROFESSIONAL...10

ANNE ARUNDEL COMMUNITY COLLEGE ARNOLD, MARYLAND COURSE OUTLINE CATALOG DESCRIPTION

Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

NE-2273B Managing and Maintaining a Microsoft Windows Server 2003 Environment

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

MCSE Core exams (Networking) One Client OS Exam. Core Exams (6 Exams Required)

Managing and Maintaining a Microsoft Windows Server 2003 Environment

MCSA Security + Certification Program

המרכז ללימודי חוץ המכללה האקדמית ספיר. ד.נ חוף אשקלון טל' פקס בשיתוף עם מכללת הנגב ע"ש ספיר

6425C - Windows Server 2008 R2 Active Directory Domain Services

Configuring Windows Server 2008 Active Directory

R4: Configuring Windows Server 2008 Active Directory

ICT Professional Optional Programmes

Lesson Plans Administering Security in a Server 2003 Network

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

MS-6425C - Configuring Windows Server 2008 Active Directory Domain Services

Microsoft Windows 7. Administration. Instant Reference. William Panek WILEY. Wiley Publishing, Inc.

Paul McFedries. Home Server 2011 LEASHE. Third Edition. 800 East 96th Street, Indianapolis, Indiana USA

Exam: QUESTION 1 QUESTION 2 QUESTION 3 QUESTION 4

Active Directory. Users & Computers. Group Policies

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

NE-6425C Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

6419: Configuring, Managing, and Maintaining Server 2008

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425B: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

MCSA Objectives. Exam : TS:Exchange Server 2007, Configuring

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

CMB 207 1I Citrix XenApp and XenDesktop Fast Track

Configuring and Troubleshooting Windows 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Advanced Diploma In Hardware, Networking & Server Configuration

PLANNING AND DESIGNING GROUP POLICY, PART 1

Configuring Managing and Maintaining Windows Server 2008 Servers (6419B)

Contents 1. Introduction 2. Security Considerations 3. Installation 4. Configuration 5. Uninstallation 6. Automated Bulk Enrollment 7.

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Managing Applications, Services, Folders, and Libraries

Implementing and Supporting Microsoft Windows XP Professional

Hosting Users Guide 2011

NovaBACKUP. Storage Server. NovaStor / May 2011

Lesson Plans Managing a Windows 2003 Network Infrastructure

Microsoft" Windows8 Home Server

NetWrix Password Manager. Quick Start Guide

M6419 Configuring, Managing and Maintaining Windows Server 2008 Servers

Objectives. At the end of this chapter students should be able to:

Citrix Desktop Virtualization Fast Track

MCSE Objectives. Exam : TS:Exchange Server 2007, Configuring

Agency Pre Migration Tasks

Windows 7, Enterprise Desktop Support Technician

"Charting the Course to Your Success!" MOC D Windows 7 Enterprise Desktop Support Technician Course Summary

70-417: Upgrading Your Skills to MCSA Windows Server 2012

TECHNICAL DOCUMENTATION SPECOPS DEPLOY / APP 4.7 DOCUMENTATION

Windows 7, Enterprise Desktop Support Technician Course 50331: 5 days; Instructor-led

Outpost Network Security

MS-50292: Administering and Maintaining Windows 7. Course Objectives. Required Exam(s) Price. Duration. Methods of Delivery.

Course 6425C: Five days

DriveLock Quick Start Guide

Course 6419A: Configuring, Managing and Maintaining Windows Server 2008 Servers

Chapter 5: Fundamental Operating Systems

Course Description. Course Audience. Course Outline. Course Page - Page 1 of 12

VERITAS Backup Exec TM 10.0 for Windows Servers

How To Write A Gpmc Script For A Gpc (Windows 2003) On A Windows 2000 (Windows 2000) On Your Computer Or Your Computer (Windows 3) On An Ipad Or Ipad (Windows 2) On The Macbook

Windows Operating Systems. Basic Security

6445A - Implementing and Administering Windows Small Business Server 2008

Configuring, Managing and Maintaining Windows Server 2008 Servers

MS-50255: Managing, Maintaining, and Securing Your Networks Through Group Policy. Course Objectives. Required Exam(s) Price.

Configuring Windows Server 2008 Active Directory

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain MOC 6425

Exam : Administrating Windows Server 2012 R2. Course Overview

MCSE TestPrep: Windows NT Server 4, Second Edition Managing Resources

Introduction to Windows Server 2003

Configuring, Managing and Maintaining Windows Server 2008 Servers

Administration Guide ActivClient for Windows 6.2

WhatsUp Gold v16.3 Installation and Configuration Guide

Windows Server 2008 R2 Essentials

MCTS Guide to Microsoft Windows 7. Chapter 7 Windows 7 Security Features

Microsoft Exchange 2003 Disaster Recovery Operations Guide

User Guide. CTERA Agent. August 2011 Version 3.0

Deploying a File Server Lesson 2

Configuring, Managing and Maintaining Windows Server 2008 Servers

Introduction p. 1 Approach to the Book p. 2 At Least Three Ways to Do It p. 2 Where to Find the Tools p. 3 Running Tools with Alternate Credentials

Module 4. Managing Groups. Contents: Lesson 1: Overview of Groups 4-3. Lesson 2: Administer Groups Lab A: Administer Groups 4-36

Metalogix SharePoint Backup. Advanced Installation Guide. Publication Date: August 24, 2015

Installing, Configuring, and Managing a Microsoft Active Directory

CHAPTER THREE. Managing Groups

Windows Server 2008 Essentials. Installation, Deployment and Management

Chapter. Managing Group Policy MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER:

Windows 7, Enterprise Desktop Support Technician

Setting Up, Managing, and Troubleshooting Security Accounts and Policies

Module 7 Management. Section 7.1: WSUS. CIST2414 Microsoft Server Administrator. Summary. Windows Server 2008 Server Administrator

Maintaining a Microsoft Windows Server 2003 Environment

Transcription:

Lesson Plans LabSim for Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment (Exam 70-290)

Table of Contents Course Overview... 3 Section 0.1: Introduction... 5 Section 0.2: Active Directory Overview... 6 Section 0.3: Group Policy... 8 Section 0.4: Server Administration... 9 Section 1.1: Installing Windows 2003 Server... 10 Section 1.2: Automated Installs... 12 Section 2.1: Users... 13 Section 2.2: Groups... 15 Section 2.3: Group Strategy... 17 Section 2.4: User Profiles... 19 Section 2.5: Computer Accounts... 21 Section 2.6: Account Policies... 23 Section 2.7: AD Command Prompt Tools... 25 Section 3.1: Installing Hardware Devices... 27 Section 3.2: Managing Devices and Drivers... 28 Section 4.1: File Systems... 30 Section 4.2: Disks and Volumes... 32 Section 4.3: Performance and Fault Tolerance... 34 Section 4.4: Maintaining Disks and Volumes... 36 Section 5.1: Backup and Restore... 38 Section 5.2: Volume Shadow Copy Services (VSS)... 40 Section 5.3: System Recovery... 41 Section 6.1: NTFS Permissions... 43 Section 6.2: Shared Folders... 45 Section 6.3: Share Access... 46 Section 6.4: Disk Quotas... 48 Section 6.5: Encryption and Compression... 50 Section 6.6: Offline Files... 52 Section 7.1: Installing and Configuring a Web Site... 54 Section 7.2: Securing IIS... 56 Section 7.3: Managing IIS... 58 Section 8.1: Configuring Printing... 60 Section 8.2: Customizing Printing... 62 Section 8.3: Managing Printing... 64 Section 8.4: Troubleshooting Printing... 66 Section 8.5: Internet Printing Protocol (IPP)... 67 Section 9.1: Deploying and Updating Software... 68 Section 9.2: Software Update Services (SUS)... 70 Section 10.1: Auditing... 72 Section 10.2: Security Templates... 74 Section 11.1: Remote Management... 76 Section 11.2: Event Viewer... 79 1

Section 11.3: Monitoring Performance... 80 Practice Exams... 82 Appendix A: Approximate for the Course... 83 2

Course Overview 0.0 Introduction This module introduces Windows Server 2003, Active Directory, and basic server administration. 1.0 Installation This module explains installation procedures, including automated and remote installations. 2.0 Users, Groups, and Computers This module discusses resource management with user accounts, profiles, and groups. 3.0 Hardware Devices This module covers hardware installation, configuration, and troubleshooting. You should have various pieces of hardware you can work with for this module. 4.0 Disk Storage This module covers volumes, performance, and fault tolerance. It also covers basic principles of disk maintenance, including defragmenting and disk recovery. 5.0 Backup and Recovery This module explains methods for ensuring the availability of data on your network. This includes setting up backups and recovering data in the event of a computer failure. 6.0 File Management This module covers file systems, permissions, rights, shared folders, share permissions, disk quotas, encryption, compression, and offline files for remote access. 7.0 Internet Information Services (IIS) This module covers installing and configuring a Web site, IIIS security, and IIS management. 8.0 Printers This module covers printer configuration, customization, management, and troubleshooting. If possible, get a printer you can work with. 9.0 Installing Software This module introduces software updates and deployment 3

10.0 System Security This module introduces the concepts related to securing a network environment. 11.0 Management and Performance This module explains methods for monitoring and optimizing your system. Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. 4

Section 0.1: Introduction Students should have the following skills before studying for the Managing and Maintaining a Microsoft Windows Server 2003 Environment exam: Basic computer fundamentals including installing hardware and software and system troubleshooting. Computer networking experience. Experience with managing a desktop computer in a workgroup environment. Video/Demo 0.1.1 Windows 2003 Introduction 2:34 Total About 5 minutes 5

Section 0.2: Active Directory Overview This section provides an overview of the role of the Active Directory. Details include: Active Directory components: o Domain o Organizational Unit (OU) o Generic Containers o Objects o Domain Controller o Trees and Forests o Sites and Subnets Domain Functional Levels o 2000 Mixed o 2000 Native o 2003 Interim o 2003 Common Windows XP/2003 default groups: o Administrators o Backup Operators o Power Users o Users o Guests Some of the default domain groups that are created in the Builtin folder: o Administrators o Server Operators o Backup Operators o Guests o Network Configuration Operators o Print Operators o Users Domain groups created in the Users folder in Active Directory: o Domain Admins o Domain Computers o Domain Controllers o Domain Guests o Domain Users o Enterprise Admins Methods to control access: o Permissions o User rights 6

Lecture Focus Questions: What are the primary container and objects used in Active Directory? What is the hierarchy in a forest? What is a trust relationship? What are the functions of domain controllers? What are the advantages of using organizational units? Video/Demo 0.2.1 Active Directory Overview 13:41 0.2.4 Users and Groups 7:06 Total 20:47 Total About 30 minutes 7

Section 0.3: Group Policy This section introduces information about group policy. Details include: Group Policy categories: o Computer configuration o User configuration Intervals that Windows refreshes the effective Group Policy settings Manually refreshing group policy settings Lecture Focus Questions: What is the difference between Computer and User settings in a GPO? To which objects can group policy objects be linked? What principles are used to control the application of group policies? What are the rules to keep in mind when determining the effective permissions of multiple GPOs created at different locations on the domain? Video/Demo 0.3.1 Group Policy Objects 5:30 0.3.2 Creating and Linking a GPO 1:51 0.3.3 Configuring GPO Settings 1:26 0.3.4 Controlling GPO Application 4:51 0.3.5 Configuring GPO Application 1:21 0.3.6 Effective GPO Settings 3:16 Total 18:15 Total About 20 minutes 8

Section 0.4: Server Administration This discusses tools to administer a network: Microsoft Management Console (MMC) Computer Management Administrative Tools Run as Remote Desktop Terminal Services Remote Assistance Students will learn how to: Use preset and custom MMCs. Windows Server 2003 Objectives 404. Manage servers remotely. o Manage a server by using available support tools. Lecture Focus Questions: On which systems can you install the server administration tools? How can you protect administrator user accounts using the Run as... feature? What is the difference between using an MMC to manage a remote computer and using Remote Desktop to complete those same tasks? Video/Demo 0.4.2 Microsoft Management Console (MMC) 4:18 Number of Exam Questions 5 questions Total About 15 minutes 9

Section 1.1: Installing Windows 2003 Server This section introduces Windows 2003 installation. Details include: Starting the Windows 2003 installation: o From a DOS environment o From within a 32-bit environment Common switches to use with the installation programs Troubleshooting installation: o Using the /debuglevel:logfile switch to create an installation debug log o Using System File Checker (Sfc.exe) to verify the integrity of protected system files o Using Spuninst.exe to uninstall a service pack or hotfix from the command line Licensing o Modes for client access licensing: Per Device or Per User Per Server o Tools for managing licenses: Licensing Control Panel Applet Licensing Administrative Tool o Scenarios for using a license group: More users than computers A user has multiple devices that need simultaneous access o Considerations when you run out of licenses Windows Server 2003 Objectives 403. Manage software site licensing. Lecture Focus Questions: Why would you select one method over another to install Microsoft Windows 2003 operating system? How do you determine when to use Winnt.exe or Winnt32.exe? What factors would you consider when choosing per seat vs. per server licensing? 10

Video/Demo 1.1.1 Winnt and Winnt32 3:58 1.1.4 Licensing 3:44 Total 7:42 Number of Exam Questions 8 questions Total About 25 minutes 11

Section 1.2: Automated Installs Be familiar with the different types of remote installations and their requirements. Details include: Using an unattended installation to automate the operating system installation Using disk imaging to install Windows to a large number of computers with the same hardware configurations Using Remote Installation Services (RIS) to automate installing Windows Installing Windows by copying the installation files to a network share Students will learn how to: Create an Unattend.txt file Lecture Focus Questions: What are the methods used to perform unattended installations of Windows 2003? What is the process of installing RIS for Remote Installation Services? What operating systems are supported for Remote Installation Services? What are the components that must be installed on a RIS server for Remote Installation Services? Video/Demo 1.2.1 Unattended Installation 4:10 1.2.2 Creating an Unattend.txt File 4:41 1.2.5 Remote Installation Services (RIS) 2:13 Total 11:04 Total About 15 minutes 12

Section 2.1: Users This section introduces user accounts. Familiarize yourself with the creation of user accounts and user properties prior to discussing these concepts in the lecture. Students will learn how to: Create domain user accounts. Modify user account properties, including changing logon and password settings in the user account. Reset the password. Enable and disable an account. Windows Server 2003 Objectives 204. Create and manage user accounts. o Create and modify user accounts by using the Active Directory Users and Computers MMC snap-in. 206. Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties. Lecture Focus Questions: What is the difference between a disabled, locked out, or expired user account? What is the best way to handle a user s account when an employee quits the company and will be replaced by a new employee in the near future? What are the recommendations for using a template user account? What properties of a user account do not get duplicated when you copy the user? 13

Video/Demo 2.1.1 Creating User Accounts 1:17 2.1.4 User Account Management 2:44 2.1.5 Managing User Accounts 5:34 Total 9:35 Lab/Activity Create a Domain User Account Modify User Account Properties Change the Logon Name Modify Password Settings Set Account Expiration Enable an Account Modify Multiple Users Create a Template User Number of Exam Questions 9 questions Total About 60 minutes 14

Section 2.2: Groups This section introduces groups on the local computer and in the domain environment. Details include: Active Directory defines three group scopes: o Global groups o Domain local groups o Universal groups Types of groups: o Security group o Distribution group Best practices for user and group security Some of the Active Directory default groups that are automatically created in the Builtin folder: o Administrators o Server Operators o Backup Operators o Account Operators o Guests o Network Configuration Operators o Print Operators o Users Some of the additional domain groups are also created in the Users folder in Active Directory: o Domain Admins o Domain Computers o Domain Controllers o Domain Guests o Domain Users o Enterprise Admins Students will learn how to: Create each type of security group and add members. Create a distribution group and add members. Change the group scope. Windows Server 2003 Objectives 203. Create and manage groups. o Identify and modify the scope of a group. o Manage group membership. 15

o Create and modify groups by using the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in. Lecture Focus Questions: What are the advantages of using groups when setting permissions? What is the difference between a security group and a distribution group? What is the purpose of each group scope? What are the built-in capabilities of the Power Users group? The Backup Operators group? Video/Demo 2.2.1 Group Scopes 4:09 2.2.2 Domain Local Scopes 3:26 2.2.4 Creating Groups 1:00 2.2.10 Built-in Groups 1:51 Total 10:26 Lab/Activity Create a Global Group Create a Domain Local Group Create a Universal Group Create a Distribution Group Change the Group Scope Number of Exam Questions 4 questions Total About 45 minutes 16

Section 2.3: Group Strategy This section introduces the different strategies to use groups to manage access to system resources. o ALP o AGDLP o AGUDLP Students will learn how to: Implement a group strategy following Microsoft's recommendations for group membership and nesting. Windows Server 2003 Objectives 203. Create and manage groups. Lecture Focus Questions: What are the circumstances that warrant using a universal group over a global group? When you add a user to a group, when will the permissions be granted that apply to that group? How is the technique of nesting used when assigning permissions to groups? Video/Demo 2.3.1 Group Strategy 5:06 2.3.2 Implementing a Group Strategy 9:09 Total 14:15 Lab/Activity Implement a Group Strategy 1 Implement a Group Strategy 2 17

Number of Exam Questions 6 questions Total About 35 minutes 18

Section 2.4: User Profiles Familiarize yourself with the different types of profiles and their uses. Create mandatory and roaming profiles to show the students. Be prepared to discuss the best practices for using profiles. Details included in this section include: Common profile manage tasks: o Create a new profile o Edit an existing profile o Create Start Menu or Desktop shortcuts o Copy a profile o Copy a profile from one system to another o Make a mandatory user profile o Make a roaming user profile o Assign a specific profile o Delete a profile Permissions needed to manage and use profiles Roaming user profiles Group Policy settings that control roaming profiles Students will learn how to: Create a mandatory user profile. Create a roaming user profile. Windows Server 2003 Objectives 201. Manage local, roaming, and mandatory user profiles. Lecture Focus Questions: What is the name of the default user profile created when a user is created and where is it stored? What parameters does the user profile allow the user to modify? How do you alter the default user profile to create a mandatory user profile? Since both mandatory and personal user profiles can be modified, what are the differences between the two types of profiles? 19

Video/Demo 2.4.1 Mandatory Profile 3:04 2.4.2 Roaming Profile 4:35 2.4.3 Managing User Profiles 2:15 Total 9:54 Lab/Activity Create a Mandatory Profile Create a Roaming Profile Delete User Profiles Add Mandatory Roaming Profiles Number of Exam Questions 9 questions Total About 45 minutes 20

Section 2.5: Computer Accounts This section discusses how computer accounts are Active Directory objects that identify network computers. Students will learn how to: Create computer accounts and manage computer account properties. Disable and reset a computer account. Windows Server 2003 Objectives 202. Create and manage computer accounts in an Active Directory environment. 205. Troubleshoot computer accounts. o Diagnose and resolve issues related to computer accounts by using the Active Directory Users and Computers MMC snap-in. o Reset computer accounts. 207. Troubleshoot user authentication issues. Lecture Focus Questions: What are the steps required to join a domain manually? What can the administrator do to allow a user to join a computer to a domain during installation? What are the things to consider if a computer account has been created on a domain but doesn t seem to be able to join the domain? What must you do after resetting a computer account? Video/Demo 2.5.1 Computer Accounts 3:44 2.5.2 Joining a Domain 1:10 2.5.3 Managing Computer Accounts 1:49 Total 6:43 Lab/Activity Create Computer Accounts Disable a Computer Account Reset a Computer Account 21

Number of Exam Questions 6 questions Total About 30 minutes 22

Section 2.6: Account Policies The section discusses using account policies to control passwords and login properties. Details include: Password settings o Enforce password history o Maximum password age o Minimum password age o Minimum password length o Password complexity o Reversible encryption Account lockout settings: o Account lockout duration o Account lockout threshold o Reset account lockout counter after Consideration when managing account security Conditions to consider when troubleshooting logon problems: o Disabled account o Locked account o Expired account o Logon not permitted o Workstation restrictions o Expired password o No domain controller available o Computer account problems o Using Dsmod o The role of cached credentials Students will learn how to: Configure account settings. Configure password settings. Windows Server 2003 Objectives 206. Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties. 207. Troubleshoot user authentication issues. 23

Lecture Focus Questions: How does an overly restrictive password requirement compromise the network? What password settings are available to tighten up network security? How do account lockout settings protect the network? Where must account and password policies be configured in Group Policy? Video/Demo 2.6.1 Password Policies 3:30 2.6.2 Setting Account and Password Policies 1:12 Total 4:42 Lab/Activity Configure Account Settings 1 Configure Account Settings 2 Configure Password Settings 1 Configure Password Settings 2 Reset the Password Number of Exam Questions 20 questions Total About 55 minutes 24

Section 2.7: AD Command Prompt Tools Many of the Active Directory administrative tasks can be accomplished from a command line. This facilitates the remote management of server systems. Learn the command prompt tools and their functions. Dsadd Dsquery Dsget Dsmod Dsmove Dsrm Movetree Netdom Ldifde Csvde Students will learn how to: Use the following tools to manage Active Directory: Dsadd, Dsquery, Dsget, Dsmod, Dsmove, Dsrm, Movetree, Ldifde, and Csvde. Windows Server 2003 Objectives 203. Create and manage groups. o Find domain groups in which a user is a member. o Create and modify groups by using automation. 204. Create and manage user accounts. o Create and modify user accounts by using automation. o Import user accounts. Lecture Focus Questions: What objects can be imported and exported in Active Directory? How do you move objects from one Active Directory to another Active Directory? When would you choose Csvde over Ldifde when moving objects? 25

Video/Demo 2.7.1 Importing and Exporting 3:20 2.7.2 AD Management Commands 4:09 2.7.3 Using Command Prompt Tools 7:07 Total 14:36 Number of Exam Questions 8 questions Total About 25 minutes 26

Section 3.1: Installing Hardware Devices This section introduces device installation. If possible have a variety of devices available to attach to the printer (try to have one that requires manual installation of the drivers for demonstration purposes), especially a printer. Concepts covered include: Installing devices Reasons an installation may fail Icons used in Device Manager to identify problem devices Considerations when troubleshooting device installation Students will learn how to: Install hardware devices. Windows Server 2003 Objectives 104. Install and configure server hardware devices. o Configure resource settings for a device. o Configure device properties and settings. Lecture Focus Questions: How do Plug and Play devices simplify installation? What key steps are necessary to install legacy devices? What user rights are required to install devices? Video/Demo 3.1.1 Device Installation 1:39 3.1.2 Installing Devices 3:20 Total 4:59 Lab/Activity Autodetect a Plug and Play Device Install a Legacy Device Total About 20 minutes 27

Section 3.2: Managing Devices and Drivers This section discusses the concept of drivers and driver signing. If possible, have a device available to install. Update the driver using the device s Properties dialog box. If not, be familiar enough to show the students the device s properties. Details include: Tools to manage devices: o Device Manager o Control panel Applets o Add Hardware Wizard o Hardware Troubleshooting Wizard Updating drivers Settings to control how unsigned drivers are installed on the system: o Block o Warn o Ignore o Make this action the system default Protecting against unsigned drivers Students will learn how to: Enable, disable, and remove devices. Upgrade or roll back a driver. Configure driver signing. Windows Server 2003 Objectives 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items. 104. Install and configure server hardware devices. o Configure driver signing options. o Configure resource settings for a device. o Configure device properties and settings. Lecture Focus Questions: How does driver signing ensure driver integrity? What options are available when setting up driver signing options? How do you ensure that the driver signing options you have selected will be imposed upon all users that log on to the system? What file verification tools are available to verify driver signatures and file integrity? 28

Video/Demo 3.2.1 Managing Devices and Drivers 2:44 3.2.6 Driver Signing 2:05 3.2.7 Configuring Driver Signing 3:12 3.2.11 Hardware Control Panel Applets 3:22 Total 11:23 Lab/Activity Enable and Disable Devices Remove a Device Upgrade a Driver Configure Driver Signing Number of Exam Questions 12 questions Total About 45 minutes 29

Section 4.1: File Systems Familiarize yourself with the different file systems. If possible, create three partitions on a volume. Format each with a different file system. Examine the differences in Computer Management or in Disk Management. Show the compression, quota, and permissions settings in the Local Disk Properties dialog box of the NTFS volume. This section discusses the following: Types of file systems: o FAT o FAT32 o NTFS A comparison of the file system types supported by each operating system Using the Convert.exe utility to modify the file system without reformatting and losing data. Students will learn how to: Format a drive. Convert a drive to NTFS. Windows Server 2003 Objectives 303. Configure file system permissions. Lecture Focus Questions: Which file systems does Windows 2003 support? How do you convert a FAT file system to NTFS? What additional capabilities are added to a FAT32 file system when it is converted to NTFS? Video/Demo 4.1.1 File Systems 5:16 4.1.2 Convert to NTFS 2:10 Total 7:26 30

Lab/Activity Format a Drive Convert a Drive Number of Exam Questions 1 question Total About 20 minutes 31

Section 4.2: Disks and Volumes This section discusses disks and volumes. Details include: Considerations when using basic disks Considerations when using dynamic disk Factors to consider when choosing to implement basic or dynamic disks Types of volumes: o Simple volume o Extended volume o Spanned volume Managing volumes Students will learn how to: Upgrade a disk to a dynamic disk or revert a disk to a basic disk. Create a simple volume, extend an existing volume, and create a spanned volume. Windows Server 2003 Objectives 101. Manage basic disks and dynamic disks. Lecture Focus Questions: What are the differences between basic and dynamic disks? What new feature is allowed on Server 2003 with dynamic disks not available previously? What are the advantages and disadvantages of spanned volumes? Video/Demo 4.2.1 Disk Types 6:50 4.2.3 Creating a Simple Volume 1:05 4.2.7 Spanned Volumes 4:22 4.2.8 Creating Spanned Volumes 1:08 Total 11:23 32

Lab/Activity Upgrade a Disk Revert a Disk to Basic Create a Volume Span an Existing Volume Create a Spanned Volume Number of Exam Questions 2 questions Total About 40 minutes 33

Section 4.3: Performance and Fault Tolerance This section discusses the different methods for fault tolerance and redundancy. Details include: RAID levels: o RAOD0 o RAID1 o RAID5 Volume Types o Mirrored volume o Striped volume o RAID5 Volume Students will learn how to: Create a striped volume. Create a mirrored volume and mirror an existing volume. Create a RAID-5 volume. Windows Server 2003 Objectives 101. Manage basic disks and dynamic disks. 103. Optimize server disk performance. o Implement a RAID solution. o Defragment volumes and partitions. Video/Demo 4.3.1 RAID Levels 0:55 4.3.2 Striping 3:21 4.3.4 Mirroring 2:46 4.3.5 Creating Mirrored Volumes 1:47 4.3.9 RAID-5 5:53 4.3.10 Creating RAID Volumes 1:42 Total 16:24 34

Lab/Activity Create a Striped Volume Create a Mirrored Volume Mirror an Existing Drive Mirror the System Partition Create a RAID Volume Number of Exam Questions 6 questions Total About 50 minutes 35

Section 4.4: Maintaining Disks and Volumes This section discusses the methods for defragmenting and recovering disks. Details include: Tools to manage disks: o DiskPart o Defrag o Cscript o Disk Defragmenter o Disk Management Recovering failed disks: o In a spanned volume or striped set o In a mirror configuration o In a RAID5 configuration o In a failed operating system Volume mount points The role of the Boot.ini file The ARC path locates the system file and contains the following elements: o MULTI(x) or SCSI(x) o DISK(x) o RDISK(x) o PARTITION(y) Students will learn how to: Break a mirrored volume Recover from a failed mirrored volume Repair a RAID volume Windows Server 2003 Objectives 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items. 503. Recover from server hardware failure. Lecture Focus Questions: What volume types lose all data in the absence of parity and data backup? What are the steps to recovering from a drive failure? What are the functions of the ARC path components? 36

Video/Demo 4.4.1 Defragmenting a Hard Disk 1:01 4.4.2 Disk Recovery 1:36 4.4.3 Recovering from a Failed Disk 2:48 4.4.8 Boot.ini File 15:52 Total 21:17 Lab/Activity Break a Mirrored Volume Recover a Failed Mirrored Volume Repair a RAID Volume Number of Exam Questions 9 questions Total About 45 minutes 37

Section 5.1: Backup and Restore This section covers backup and restore. Concepts covered include: Backup methods: o Full (Normal) o Incremental o Differential o Copy o Daily Backup strategies: o Full Backup o Full + Incremental o Full + Differential o Periodic Copy Backup Data types: o System state o User data o Application data Managing backups Scheduled backups Restoring files Students will learn how to: Manage backup media and devices. Back up and restore data. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Configure security for backup operations. 502. Manage backup procedures. o Verify the successful completion of backup jobs. o Manage backup storage media. 503. Recover from server hardware failure. o Restore backup data. o Schedule backup jobs. 38

Lecture Focus Questions: If you are using mirrored or RAID disks, do you need to back up your system? What file components make up the system state data for Windows 2003 Server? What are the advantages of the different backup types? Which backup strategy would you choose if fast restore times were important? Which strategy would you choose to minimize the number of tapes used? Video/Demo 5.1.1 Windows Backup 12:20 5.1.2 System State Data 6:02 5.1.3 Choosing a Backup Strategy 5:49 5.1.4 Backing up Data 4:48 5.1.5 Restoring Data 2:27 Total 31:26 Number of Exam Questions 27 questions Total About 65 minutes 39

Section 5.2: Volume Shadow Copy Services (VSS) This section discusses the operating system feature Volume Shadow Copy Services (VSS). Details covered include: The role of VSS Considerations when enabling and disabling VSS Restoring files Recommendations when working with shadow copies Students will learn how to: Enable shadow copies on a volume. View and restore previous versions of files. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Restore data from shadow copy volumes. Lecture Focus Questions: How is VSS used in a system backup? What happens when the system runs out of room for storing previous versions? What are the client requirements for accessing and restoring previous versions of files? What should you do if a user cannot see the Previous Versions tab for a folder or a file? Video/Demo 5.2.2 Using Volume Shadow Copy 3:13 Lab/Activity Enable Shadow Copies Number of Exam Questions 8 questions Total About 20 minutes 40

Section 5.3: System Recovery This section introduces the methods available for recovering from system failures. Details include: Methods to recover from system problems: o Driver Rollback o Last Known Good Configuration o Safe Mode o Recovery Console o Automated System Recovery o Windows Backup (Ntbackup) Types of Active Directory restores: o Normal (non-authoritative) o Authoritative o Primary How to restore Active Directory information Students will learn how to: Set up and use ASR. Windows Server 2003 Objectives 501. Perform system recovery for a server. o Implement Automated System Recovery (ASR). o Restore data from shadow copy volumes. o Back up files and System State data to media. o Configure security for backup operations. Lecture Focus Questions: What are the key differences between Driver Rollback and Automatic System Recovery (ASR)? When troubleshooting the network, in what circumstances would you use Safe Mode over Last Known Good? What is the function of the authoritative restore option? 41

Video/Demo 5.3.1 Driver Rollback and ASR 3:58 5.3.2 Setting up and Using ASR 1:57 5.3.3 Troubleshooting System Startup 5:16 5.3.5 Backing Up and Restoring Active Directory 6:53 Total 18:04 Number of Exam Questions 8 questions Total About 35 minutes 42

Section 6.1: NTFS Permissions This section discusses how NTFS permissions are used to control the actions that can be performed on the file or folder. Details include: Permissions for folders and files: o Read o Write o List Folder Contents o Read & Execute o Modify o Full Control How file ownership affects access and assigning permissions Copying or moving files with NTFS permissions Effective permissions are the sum of all permissions from the following sources: o Explicit Assignment o Group membership o Inheritance Determining effective permissions Planning NTFS permissions Students will learn how to: Configure NTFS permissions. From a scenario, select the correct permissions to allow the necessary actions. Copy, remove, and modify inherited permissions. Identify the effective permissions a user has to a file or folder. Windows Server 2003 Objectives 303. Configure file system permissions. o Verify effective permissions when granting permissions. o Change ownership of files and folders. Lecture Focus Questions: When do NTFS permissions apply? What are the differences between the NTFS Full Control permission and the Modify permission? Which permission assignment overrides all other permission assignments? 43

Video/Demo 6.1.1 NTFS Permissions 6:34 6.1.2 Setting NTFS Permissions 3:50 6.1.7 Viewing Effective Permissions 2:46 Total 13:10 Lab/Activity Configure NTFS Permissions Copy and Modify Inherited Permissions Remove Inherited Permissions Number of Exam Questions 6 questions Total About 45 minutes 44

Section 6.2: Shared Folders This section introduces shared folders. Details include: The role of shared folders Managing shared folders Accessing a shared folder Hiding a share Students will learn how to: Share and unshare a folder. Configure shared properties. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What tools can you use to share folders? What is the process for hiding a share? How are administrative shares accessed? What limitations are there on sharing folders on desktop operating systems (such as Windows XP Professional)? Video/Demo 6.2.1 Share a Folder 3:13 Lab/Activity Share a Folder with a Second Name Unshare a Folder Remove a Shared Folder Number of Exam Questions 6 questions Total About 25 minutes 45

Section 6.3: Share Access This section covers the methods for managing access to shared resources. Details include: Share permissions: o Read o Change o Full Control Share permissions work together with NTFS permissions to control access Considerations when managing share access Students will learn how to: Restrict share access through share permissions and user limits. Configure combined NTFS and share permissions. Windows Server 2003 Objectives 301. Configure access to shared folders. o Manage shared folder permissions. Lecture Focus Questions: What are the differences and similarities between NTFS permissions and share permissions? What is the difference between modify and change permissions? How does the access funnel theory help to explain the effective permission when combining NTFS permissions and share permissions? What strategy can be used to secure network resources by combining both NTFS permissions and share permissions? 46

Video/Demo 6.3.1 Share Permissions 5:12 6.3.2 Controlling Share Access 1:39 Total 6:51 Lab/Activity Configure Share Permissions Create a Share and Set Permissions Configure Share Limits Configure NTFS and Share Permissions 1 Configure NTFS and Share Permissions 2 Number of Exam Questions 14 questions Total About 55 minutes 47

Section 6.4: Disk Quotas This section discusses how disk quotas are set on NTFS volumes. Details include: Considerations when settings disk quotas Quota settings to manage quotas: o Disabled o Tracked o Enforced Actions to take when a user exceeds the quota limit Compressing files will not provide more space when quotas have been set Students will learn how to: Enable disk quota restrictions. Create and modify quota entries for individual users. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor disk quotas. Lecture Focus Questions: Are disk quotas configured on disks, volumes, folders, or files? What effect does compressing files have on the disk quota limit? What actions can be taken when a user exceeds the disk quota limit? How can you have a disk quota configured, but still allow users to exceed the quota limits? What conditions must be met before you can delete a disk quota entry? Which user is exempt from disk quotas? 48

Video/Demo 6.4.1 Disk Quotas 5:14 6.4.2 Enabling Quota Management 2:25 6.4.4 Quota Entries 3:17 6.4.5 Configuring Quota Entries 2:32 Total 13:28 Lab/Activity Enable Quota Restrictions Create a Quota Entry Modify Quota Limits Delete a Quota Limit Number of Exam Questions 2 questions Total About 35 minutes 49

Section 6.5: Encryption and Compression This section covers the encryption and compression features of the NTFS file system. Details include: Considerations when working with EFS Rules to determine the final state of an encrypted file that has been copied or moved. Saving encrypted files on a remote computer Methods for compressing files and folders: o File compression o Zipped folders Considerations when working with folder and file compression Using Compact.exe to set and manage compression Students will learn how to: Encrypt and decrypt a file or folder. Compress a drive, folder, or file. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What are different methods for encrypting a file? Under what circumstances can an encrypted file under EFS lose its encryption? Who can open an encrypted file? What files are not allowed to be encrypted? Where are the advantages and disadvantages of compression? 50

Video/Demo 6.5.1 File Encryption 6:47 6.5.2 Encrypting Files 3:31 6.5.6 Compression 1:21 6.5.7 Compressing Files 1:24 Total 13:03 Lab/Activity Encrypt a Folder Decrypt a File Compress a Drive Compress a Folder Total About 40 minutes 51

Section 6.6: Offline Files This section covers information relevant to mobile computers and offline files. Details include: The role of offline files Configuring offline files Considerations when working with offline files Students will learn how to: On the server, enable, disable, or optimize offline file cache settings. Configure a client computer to use offline files. Windows Server 2003 Objectives 301. Configure access to shared folders. Lecture Focus Questions: What are the different settings available for offline file caching? How does offline file support provide access to shared files? Video/Demo 6.6.1 Configuring Offline Files on the Server 1:26 6.6.2 Configuring Offline Files on the Client 2:46 Total 4:12 Lab/Activity Optimize Program Caching Enable Automatic Caching Disable Share Caching 52

Number of Exam Questions 1 question Total About 25 minutes 53

Section 7.1: Installing and Configuring a Web Site This section introduces the Internet Information Server (IIS). While IIS was installed by default in Windows 2000 Server, it is not in Windows Server 2003. Install IIS through the Add/Remove Programs Control Panel applet. Details include: The role of IIS Making Web content available using the following in IIS: o Home directory o Default home pages o Virtual directories URLS to access the Web site Students will learn how to: Install IIS and selected components. Change the default home page and home directory path. Create a virtual directory. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). Lecture Focus Questions: What is IIS? What is the default home page path? What is a virtual directory? Video/Demo 7.1.2 Installing and Administering IIS 2:47 7.1.6 Creating a Virtual Directory 2:22 Total 5:09 54

Lab/Activity Install IIS Change the Default Home Page Change the Home Directory Path Create a Virtual Directory Set the Virtual Directory Home Page Number of Exam Questions 3 questions Total About 35 minutes 55

Section 7.2: Securing IIS This section covers the methods for securing IIS. Details include: Authentication methods: o Anonymous Authentication o Basic Authentication o Digest Authentication o Advanced Digest Authentication o Integrated Windows Authentication o Certificate Authentication o.net Passport Authentication Authentication methods can be applied to: o Server o Web site o FTP site o Virtual Directory o File Facts about securing IIS IIS permissions that can be set for Web sites or Web folders: o Read o Write o Script Source Access o Directory Browsing o Execute Permissions Using NTFS permissions for Web content Students will learn how to: Configure Web site authentication. Configure virtual directory authentication and permissions. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). o Manage security for IIS. Lecture Focus Questions: What are the features of the Basic Authentication? What is the disadvantage of Integrated Windows Authentication? What effects would the different Web permissions allow? 56

What happens when Web site, directory, and NTFS permissions are all set on Web content? Video/Demo 7.2.1 IIS Security 2:55 7.2.2 Managing IIS Authentication 1:46 7.2.6 Managing IIS Permissions 3:37 Total 8:18 Lab/Activity Configure Web Site Authentication Configure Virtual Directory Authentication Configure Virtual Directory Permissions Number of Exam Questions 2 questions Total About 30 minutes 57

Section 7.3: Managing IIS This section introduces the different management tasks associated with IIS. Details include: Identifying a Web site Managing IIS Students will learn how to: Create a new Web site. Start and stop a Web site. Configure alternate port numbers and host headers for a Web site. Add restrictions for Web site access. Windows Server 2003 Objectives 409. Manage a Web server. o Manage Internet Information Services (IIS). o Manage security for IIS. Lecture Focus Questions: Where is a default Web site assigned when using IIS Manager? What are the steps to creating a virtual directory? How can you get a Web site to respond to different Web site names? Video/Demo 7.3.1 Creating a Web Site 2:19 7.3.3 Configuring Web Site Identification 2:32 Total 4:51 Lab/Activity Create a New Web Site Limit Web Site Access Stop the Web Site 58

Number of Exam Questions 7 questions Total About 30 minutes 59

Section 8.1: Configuring Printing This section introduces printing concepts and tasks. Details include: Key printing terms: o Print Server o Printer o Print Device o Print Driver o Print Queue o Printer Port Configuration choices to configure each type of printer Permissions that can be assigned to printers: o Print o Manage Documents o Manage Printer Tasks available to the Printer Operator group Managing print drivers on shared printers Students will learn how to: Install and share a printer. Configure printer permissions. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: How can printer terminology be confusing in a Windows 2003 environment? What are the advantages of network printing? For which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer? 60

Video/Demo 8.1.1 Printing Concepts 10:21 8.1.3 Installing a Local Printer 2:54 8.1.5 Sharing a Printer 2:49 Total 16:04 Lab/Activity Install a Local Printer Share a Printer Create and Share a Printer Unpublish a Printer in Active Directory Add Printer Drivers Configure Printer Permissions Number of Exam Questions 2 questions Total About 50 minutes 61

Section 8.2: Customizing Printing This section looks at some advanced printer configurations to customize printing. Configuration techniques include: o Printer pooling o Multiple printer objects Students will learn how to: Configure printer pooling. Customize printing by using priorities, permissions, availability, and multiple printer objects. Windows Server 2003 Objectives 405. Troubleshoot print queues. 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device? What are the advantages of print pooling? How can you ensure important print jobs will automatically be printed before any other print jobs? Video/Demo 8.2.2 Configuring Printer Pooling 2:25 8.2.4 Configuring Multiple Printer Objects 5:04 Total 7:29 Lab/Activity Configure Printer Pooling Restrict Printing s Configure Printer Priority 62

Number of Exam Questions 2 questions Total About 25 minutes 63

Section 8.3: Managing Printing This section introduces the various management tasks administrators may have to deal with. Students will learn how to: Add printer drivers for previous Windows version clients. Manage print jobs in the print queue. Edit print server properties to change the spool location and modify print job notification. Windows Server 2003 Objectives 405. Troubleshoot print queues. 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor print queues. Lecture Focus Questions: Where would you go to perform the following tasks? o View the port used by each printer. o Change the driver used by a printer. o Add drivers for download by clients. o Move, pause, or delete print jobs. o Configure notification for print jobs. How do clients obtain the correct driver for shared printers? Where are documents saved prior to printing? Video/Demo 8.3.1 Managing Printers 2:08 8.3.2 Managing the Print Queue 1:36 8.3.4 Managing the Print Server 2:22 Total 6:06 64

Lab/Activity Delete a Print Job Disable Printer Notification Disable Printer Notification (Non-2000 clients) Change the Spool Location Total About 25 minutes 65

Section 8.4: Troubleshooting Printing This section introduces print troubleshooting techniques. Students will learn how to: Redirect print jobs to other printers. Windows Server 2003 Objectives 405. Troubleshoot print queues. Lecture Focus Questions: How does a print job get from the sending computer to the printer? How do you recover print jobs when a print device needs to be taken off line? Where is a print job stored once a user has sent it to the printer? Video/Demo 8.4.1 Recovering from Printer Failure 4:13 Lab/Activity Redirect Print Jobs Redirect Print Jobs 2 Number of Exam Questions 3 questions Total About 15 minutes 66

Section 8.5: Internet Printing Protocol (IPP) This section introduces the Internet Printing Protocol. Students will learn how to: Install the IPP component of IIS. From a client computer, connect to and send a print job to an Internet printer. Windows Server 2003 Objectives 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. 409. Manage a Web server. o Manage Internet Information Services (IIS). Lecture Focus Questions: What is the functionality of IPP? What are the system requirements for Internet printing? How do users access printers across the Internet? How do you provide intranet printing on client machines? Video/Demo 8.5.1 IPP 3:17 8.5.2 Configuring IPP 7:13 Total 10:30 Number of Exam Questions 2 questions Total About 15 minutes 67

Section 9.1: Deploying and Updating Software This section introduces the concepts of software distribution. Details include: File extensions that are used with installer packages: o.msi o.msp o.mst o.zap Using Group Policy to add an installer package to a software installation policy in a GPO: o Assign o Publish Students will learn how to: Create a software distribution package. Customize software distribution to simplify management and control distribution. Windows Server 2003 Objectives 402. Manage software update infrastructure. Lecture Focus Questions: What options are available to deploy applications and programs to client machines? What are the differences between assigning or publishing an application when using group policy? What is the process to troubleshoot software deployment? How are patches and service packs handled differently? 68

Video/Demo 9.1.1 Deploying Applications 4:53 9.1.2 Creating a Software Distribution 2:14 9.1.3 Troubleshooting Software Deployment 2:55 9.1.4 Service Packs and Patches 1:56 Total 11:58 Number of Exam Questions 2 questions Total About 15 minutes 69

Section 9.2: Software Update Services (SUS) This section covers the Software Update Services component of Windows Server 2003. Details include: Major SUS components: o SUS on an Internet Information Services (IIS) server o SUS Web site o Automatic Updates o Group Policy settings o Client and Server support Advantages of SUS How SUS works Installing and configuring the SUS server Installing and configuring the SUS client Designing the SUS infrastructure Considerations when using SUS Students will learn how to: Install SUS and configure server settings. Synchronize an SUS server with Microsoft SUS servers. Approve SUS updates. Configure client settings for SUS. Windows Server 2003 Objectives 402. Manage software update infrastructure. Lecture Focus Questions: What is the function of Software Update Services (SUS)? From what location is the SUS available to install on your server? What are the functions of the major components of SUS? What types of files cannot be updated with SUS? 70

Video/Demo 9.2.3 Configuring SUS 6:15 9.2.4 Managing SUS Clients 2:49 Total 9:04 Number of Exam Questions 9 questions Total About 25 minutes 71

Section 10.1: Auditing This section introduces the concept of auditing as an element of administration. Details include: Audit policies in Group Policy that can be configured: o Account logon o Account management o Logon o Object access o Policy change o Privilege use o Process tracking o System events Considerations when configuring auditing Students will learn how to: Configure auditing using Group Policy. Windows Server 2003 Objectives 206. Troubleshoot user accounts. o Diagnose and resolve account lockouts. o Diagnose and resolve issues related to user account properties. 207. Troubleshoot user authentication issues. Lecture Focus Questions: What are the types of functions you can audit? What measures should be taken to protect excessive system resources from being consumed by auditing? How does auditing file access differ from auditing other items? Where do you view audit entries? 72

Video/Demo 10.1.1 Auditing 4:50 10.1.2 Configuring Auditing 3:18 10.1.7 Configuring File System Auditing 2:07 Total 10:15 Lab/Activity Configure Auditing 1 Configure Auditing 2 Configure Auditing 3 Number of Exam Questions 6 questions Total About 35 minutes 73

Section 10.2: Security Templates This section introduces the use of security templates to help enforce network security. Details include: Predefined security templates: o Setup Security.inf o DC Security.inf o Secure*.inf o Hisec*.inf o Compatws.inf Using Security Analysis and Configuration snap-in to: o Manage security templates o Analyze current settings o Create custom templates o Import an existing template Students will learn how to: Analyze security settings. Configure and apply security templates. Windows Server 2003 Objectives 406. Monitor system performance. Lecture Focus Questions: What are the advantages of security templates? What program is available to access the predefined security templates? What command allows you to analyze and apply templates? Why is it important to clear current settings before importing a new template? 74

Video/Demo 10.2.1 Security Templates 3:46 10.2.2 Analyzing Security Settings 2:28 10.2.3 Configuring and Applying Security Templates 2:48 Total 9:02 Number of Exam Questions 1 question Total About 10 minutes 75

Section 11.1: Remote Management This section introduces Terminal Services and remote management. Details include: Modes that Terminal Services can operate in: o Administration Mode (Remote Desktop) o Application Server Mode Statuses for a Terminal Server session: o Active o Idle o Disconnected o Ended Permissions to control the ability to use a Terminal Services connection: o Query Information o Set Information o Remote Control o Logon o Logoff o Message o Connect o Disconnect o Virtual Channels Connection permissions can be granted individually through Special Permissions, or they are granted by allowing the following user access levels: o Full control o User access o Guest access Methods to manage Terminal Services users and properties: o Remote Desktop Users group o User Account Settings o Terminal Services Configuration tool o Terminal Services Manager o Terminal Services Licensing o Remote Desktop client software o Group Policy Configuring settings for Terminal Services Components used with Terminal Services licensing: o Microsoft Clearinghouse o Licensing Server o Terminal Server o Terminal Server Client Configuring a licensing server 76

Roles for a licensing server: o Domain Licensing Server o Enterprise Licensing Server Managing terminal services licensing Remote Desktop Remote Assistance Students will learn how to: Install Terminal Services application mode. Manage Terminal Services connections. Enable Remote Desktop on a computer and configure Remote Desktop users. Windows Server 2003 Objectives 302. Troubleshoot Terminal Services. o Diagnose and resolve issues related to Terminal Services security. o Diagnose and resolve issues related to client access to Terminal Services. 404. Manage servers remotely. o Manage a server by using Remote Assistance. o Manage a server by using Terminal Services remote administration mode. o Manage a server by using available support tools. Lecture Focus Questions: How is Remote Desktop related to Terminal Services? What is the difference between domain and enterprise licensing servers? What are the limitations of the evaluation period for Terminal Services? What computer operating systems are required for both the novice and the expert workstations when using Remote Assistance? What conditions must be in place in order to use unsolicited remote assistance? 77

Video/Demo 11.1.1 Terminal Services 7:19 11.1.2 Installing Terminal Services 3:08 11.1.8 Remote Assistance 3:59 Total 14:26 Lab/Activity Enable Remote Desktop Number of Exam Questions 22 questions Total About 60 minutes 78

Section 11.2: Event Viewer This section introduces using the Event Viewer logs to monitor and analyze system and application errors and warnings. Students will learn how to: Configure log properties. Clear and save a log. Windows Server 2003 Objectives 401. Monitor and analyze events. Tools might include Event Viewer and System Monitor. 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor. o Monitor server hardware for bottlenecks. Lecture Focus Questions: What three default log files are available in event viewer? When are additional log files made available in event viewer? What events do the System Log and Application Log monitor? What events does the Security Log monitor? Video/Demo 11.2.1 Event Viewer 3:34 11.2.2 Using Event Viewer 7:00 11.2.3 Managing Event Logs 2:30 Total 13:04 Lab/Activity Configure Log Properties Clear the System Log Number of Exam Questions 3 questions Total About 25 minutes 79

Section 11.3: Monitoring Performance This section discusses tools for monitoring system performance. Details included: Tools to monitor system performance: o Task Manager o Performance Console System Monitor Performance Logs and Alerts o Network Monitor (Netmon) System Monitor uses: o Objects o Counters Common objects available within System Monitor: o Processor o Process o Thread o PhysicalDisk o LogicalDisk o Memory o Cache o Paging File o Network Interface o System Counters to identify potential performance problems or bottlenecks: o CPU Counters o Disk Counters o Memory Counters o Network Counters Students will learn how to: Monitor system performance using Task Manager or System Monitor. Select objects and counters in order to monitor system performance. Windows Server 2003 Objectives 406. Monitor system performance. 408. Monitor and optimize a server environment for application performance. o Monitor memory performance objects. o Monitor network performance objects. o Monitor process performance objects. 80

o Monitor disk performance objects. Lecture Focus Questions: What built-in monitor utilities are available with Windows 2003? What steps must you complete to setup Network Monitor on the network? What functions does Task Manager provide? What monitor utility could be used to troubleshoot a connectivity problem with a server? Video/Demo 11.3.1 Monitoring the System 3:55 11.3.2 Using Task Manager 3:11 11.3.3 Using System Monitor 9:09 Total 16:15 Number of Exam Questions 19 questions Total About 45 minutes 81

Practice Exams This section provides information to help prepare students to take the exam and to register for the exam. Students will also have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. For example, all questions that apply to Objective 100. Devices are grouped together and presented in practice exam 100. Devices, All Questions. Students will typically take about 30-90 minutes to complete each of the following practice exams. 100. Devices, All Questions (32 questions) 200. Users, Computers, and Groups, All Questions (66 questions) 300. Resource Access, All Questions (48 questions) 400. Server Environment, All Questions (82 questions) 500. Disaster Recovery, All Questions (48 questions) The Certification Practice Exam consists of 44 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 215 minutes -- just like the real certification exam. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam. 82

Appendix A: Approximate for the Course The total time for the LabSim for Microsoft s Managing and Maintaining a Server 2003 Environment Exam 70-290 course is approximately 28 hours and 50 minutes. The time is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes assigned per simulation) Questions (1 minute per question) The breakdown for this course is as follows: Module Sections Minute HR:MM 0.0 Introduction 0.1 Introduction 5 0.2 Active Directory Overview 30 0.3 Group Policy 20 0.4 Server Administration 15 70 1:10 1.0 Installation 1.1 Installing Windows 2003 Server 25 1.2 Automated Installs 15 40 :40 2.0 Users, Groups, and Computers 2.1 Users 60 2.2 Groups 45 2.3 Group Strategy 35 2.4 User Profiles 45 2.5 Computer Accounts 30 2.6 Account Policies 55 2.7 AD Command Prompt Tools 25 295 4:55 3.0 Hardware Devices 3.1 Installing Hardware Devices 20 3.2 Managing Devices and Drivers 45 65 1:05 4.0 Disk Storage 4.1 File Systems 20 4.2 Disks and Volumes 40 83

4.3 Performance and Fault Tolerance 50 4.4 Maintaining Disks and Volumes 45 155 2:35 5.0 Backup and Recovery 5.1 Backup and Restore 65 5.2 Volume Shadow Copy Services (VSS) 20 5.3 System Recovery 35 120 2:00 6.0 File Management 6.1 NTFS Permissions 45 6.2 Shared Folders 25 6.3 Share Access 55 6.4 Disk Quotas 35 6.5 Encryption and Compression 40 6.6 Offline Files 25 225 3:45 7.0 Internet Information Services (IIS) 7.1 Installing and Configuring a Web Site 35 7.2 Securing IIS 30 7.3 Managing IIS 30 95 1:35 8.0 Printers 81 Configuring Printing 50 8.2 Customizing Printing 25 8.3 Managing Printing 25 8.4 Troubleshooting Printing 15 8.5 Internet Printing Protocol (IPP) 15 130 2:10 9.0 Installing Software 9.1 Deploying and Updating Software 15 9.2 Software Update Services (SUS) 25 40 :40 10.0 System Security 10.1 Auditing 35 10.2 Security Templates 10 45 :45 11.0 Management and Performance 11.1 Remote Management 60 11.2 Event Viewer 25 11.3 Monitoring Performance 45 130 2:10 84

Practice Exams 100: Devices (32 questions) 32 200: Users, Computers, and Groups (66 questions) 66 300: Resource Access (48 questions) 48 400: Server Environment (82 questions) 82 500: Disaster Recovery (48 questions) 48 Certification Practice Exam (44 questions) 44 320 5:20 Total 1730 28:50 85