Exam Insights xxv
Self-Assessment liii
Chapter 1
Introduction to Active Directory
Windows 2000 Overview
The Windows 2000 Family of Operating Systems
The New Features in Windows 2000
Windows 2000 Directory Services
Windows 2000 and Active Directory
The Physical and Logical Structure of Active Directory
Logical Components
Working with Active Directory in Your Enterprise
Working with DNS
The Installation Process
New Overhead
Delegating Tasks
Active Directory Maintenance
Group Policy
Replication and Security Templates
Chapter Summary
Review Questions
Chapter 2
The Structure of Active Directory 25
Active Directory Terminology
Domains
Domain Controllers
Trust Relationships
Namespace
Dynamic DNS
Domain Trees
Domain Forests
Active Directory Components
Active Directory Objects
Active Directory Schema
Organizational Unit
Global Catalog
Operation Masters
Physical Structure of Active Directory
Sites
Site Links
Bridgehead Servers
Chapter Summary
Review Questions
Real-World Projects
Chapter 3
Planning an Active Directory Implementation
Namespace
New DNS Namespace
Integration with an Existing Namespace
Site Design
Domain Structure
Uses of Organizational Units
Designing the Infrastructure
Gather Data about the Network
Lay Out the Active Directory Sites
Place the DCs within the Sites
Establish Replication Schedules
Chapter Summary
Review Questions
Real-World Projects
Chapter 4
Domain Name System (DNS)
Understanding DNS Name Resolution
HOSTS Files and Their Function
Name Resolution Beyond HOSTS: DNS
Active Directory and DDNS
Forward Lookup Queries
Reverse Lookup Query
Understanding the Different Types of Name Servers
Primary DNS Servers
Secondary DNS Servers
Caching-Only Name Servers
Forwarding DNS Servers
Configuring and Managing DNS Zones
Windows 2000 Zones
Understanding Zone Transfers
Full Zone Transfer
Incremental Transfer
DNS Notify
Installing DNS for Active Directory
DNS Preinstallation
DNS Installation
Configuring DNS for Active Directory
Root Servers
Forward Lookup Zones
Reverse Lookup Zones
Resource Records
Dynamic DNS
Monitoring and Troubleshooting DNS for Active Directory
DNS Logging
nslookup
Chapter Summary
Review Questions
Real-World Projects
Chapter 5
Installing Active Directory
Preparing for Active Directory Installation
Preparing IP Addressing Schemes and DNS
Domain Context
Installing Active Directory
Configure Your Server
Dcpromo.exe
Creating Windows 2000 Domains
Using the Active Directory Wizards
Installing the First Domain
Promoting a Server to a Domain Controller
Demoting a Domain Controller
Understanding the Active Directory Database
ntds.dit
Database Logging
Understanding Active Directory Domain Modes
Mixed Mode
Native Mode
Chapter Summary
Review Questions
Real-World Projects
Chapter 6
Active Directory Configuration
Creating a Site
Adding Subnets to Active Directory
Site Connections
Site Link Bridges
Connection Objects
Moving Domain Controllers between Sites
Global Catalog Servers
Operations Masters
Implementing Organizational Units
Delegating Control of Part of a Domain
Group Policies and OUs
Chapter Summary
Review Questions
Real-World Projects
Chapter 7
Administering Active Directory
Querying Active Directory
Common Objects
Finding Active Directory Objects
Permissions and Active Directory Objects
Introduction to Active Directory Permissions
Active Directory Security
Object Permissions
Assigning Permissions
Permission Inheritance
Making Resources Available
Publishing Resources
Publishing Network Services
Moving Objects
Moving Objects within a Domain
Moving Objects between Domains
Moving Workstations and Member Servers
Moving Domain Controllers between Sites
Moving Objects to the LostAndFound Container
Delegating Authority
Using the Delegation Of Control Wizard
Chapter Summary
Review Questions
Real-World Projects
Chapter 8
Performance Monitoring
Introduction to Performance Monitoring
Windows 2000 System Monitor
Memory
Processor
Disk
Network
System Monitor Terminology
System Monitor Data Collection
Objects
Counters
Instances
Recommended Counters
Counters for Memory Troubleshooting
Counters for Processor Troubleshooting
Counters for Disk Troubleshooting
Counters for Network Troubleshooting
Counters for Active Directory Troubleshooting
System Monitor Logging Options
Counter Logs
Trace Logs
Alerts
Event Logs
Application Log
Security Log
System Log
Directory Service
DNS Server
File Replication Service
Event Types
Viewing Remote Event Logs
Managing Event Logs
Windows Management Instrumentation
Tools for Monitoring Active Directory
LDAP Diagnostic Tool (LDP.EXE)
Active Directory Replication Monitor (REPLMON)
REPADMIN
Chapter Summary
Review Questions
Real-World Projects
Chapter 9
Active Directory Maintenance and Recovery
Recovery and Maintenance Overview
Active Directory Data Model
Directory System Agent (DSA)
The Database Layer
Extensible Storage Engine (ESE)
How Data Is Written to the Database
The Files of Active Directory
The Database File (ntds.dit)
The Log Files (EDB.LOG, RES1.LOG, and RES2.LOG)
Checkpoint Files (EDB.CHK)
Patch Files
Active Directory Dependencies
System State Data
Types of Restore
Non-Authoritative Restore
Authoritative Restore
Strategies for Active Directory Backup
Hardware Configuration of Domain Controllers
Active Directory Maintenance
Automatic Maintenance
Manual Database Cleanup
Offline Defragmentation
Basic Backup Principles
Hardware Requirements
Media Storage
Testing Restore Operations
Backup and Restore Security
The Microsoft Backup Utility
Chapter Summary
Review Questions
Real-World Projects
Chapter 10
Implementing Group Policy
Understanding Group Policy Concepts
Windows 2000 Group Policy versus Windows NT 4 System Policies
Group Policy Objects
The Group Policy MMC Snap-in
Group Policy Namespace
Startup, Shutdown, Logon, and Logoff
Active Directory Structure and Group Policy
Group Policy Inheritance
Group Policy Processing
Group Policy Planning
Change Control Procedures
Structuring Domains and OUs for Group Policy
Segmented versus Monolithic GPOs
Cross-Domain GPO Links
Managing Network Bandwidth
Group Policy Best Practices
Group Policy Implementation
Creating a GPO
Creating a GPO Console
Specifying Group Policy Settings
Filtering Group Policy
Delegating Administrative Control of Group Policy
Linking a GPO
Chapter Summary
Review Questions
Real-World Projects
Chapter 11
Managing User Environments with Group Policy
Using Scripts to Apply Configuration Settings to Users and Computers
Overview of Scripts
Windows Scripting Host
Assigning Scripts through Group Policy
Controlling the User Environment through Administrative Templates
ADM Files
Computer Templates
User Templates
Using Folder Redirection to Move User Files to a Server
Folder Redirection Notes
Advantages of Folder Redirection
Chapter Summary
Review Questions
Real-World Projects
Chapter 12
Deploying and Managing Software by Using Group Policy
IntelliMirror Components and Change and Configuration
Management Concepts
Hard versus Soft Costs
IntelliMirror
Understanding the Phases of Software Management
Preparation Phase
Distribution Phase
Targeting Phase
Pilot Phase
Installation Phase
Creating and Configuring Windows Installer Packages
Windows Installer Technology Overview
Managing Windows Installer Settings with Group Policy
Creating Windows Installer Packages with Win INSTALL LE
Managing Software Deployment through the Software Installation Snap-in
Requirements for Software Installation
Assigned versus Published Applications
Using the Software Installation Snap-in
Patching Software Using the Windows Installer Package Editor
Patching Applications
Chapter Summary
Review Questions
Real-World Projects
Chapter 13
Deploying Windows 2000 Using Remote Installation Services
RIS Overview
How RIS Functions
RIS Requirements
Remote Installation Services
Domain Name System (DNS)
Dynamic Host Configuration Protocol (DHCP) Server
Active Directory
RIS Client and Server Components
Client Requirements of RIS
Server Components of RIS
Setting Up and Configuring RIS
RISetup
Creating RIS Images
RIPrep
Creating Images with RIPrep
Creating RIS Boot Disks
Managing RIS Security
Authorizing an RIS Server
Managing RIS Client Options with Group Policy
Managing RIS Configuration Settings
Chapter Summary
Review Questions
Real-World Projects
Chapter 14
Active Directory Replication
Introduction to Active Directory Replication
Elements of Active Directory Replication
The Replication Process Illustrated
Replication Conflicts Illustrated
Intersite and Intrasite Replication
Chapter Summary
Review Questions
Real-World Projects
Chapter 15
Security
What Is Auditing?513
Planning Your Audit Policy
Local Policies and Domain Policies
Configuring Group Policy
Auditing Files and Folders
Auditing Active Directory Objects
Auditing Printers
Tips for Auditing
Security Templates
Preconfigured Security Templates
Viewing Security Templates Configurations
Using Security Templates with GPOs
The Security Configuration and Analysis Tool
Chapter Summary
Review Questions
Real-World Projects
Chapter 16
Sample Test
Chapter 17
Answer Key
Appendix A
Answers to Review Questions
Appendix B
Objectives for Exam 70-217
Appendix C
Study Resources
Glossary
Index
鄂公网安备 42010302001612号 