MCTS 70-640 Exam Cram

Don Poulton, MCSA, MCSE, A+, Network+, Security+, has been involved with computers since the days of 80-column punch cards. After a career of more than 20 years in environmental science, Don switched careers and trained as a Windows NT 4.0 MCSE. He has been involved in consulting with a couple of small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP.   In addition, Don has worked on programming projects, both in his days as an environmental scientist, and more recently with Visual Basic to update an older statistical package used for multivariate analysis of sediment contaminants.   When not working on computers, Don is an avid amateur photographer who has had his photos displayed in international competitions and published in magazines such as Michigan Natural Resources Magazine and National Geographic Traveler. Don also enjoys traveling and keeping fit.   Don lives in Burlington, Ontario, with his wife, Terry.

Introduction

Self-Assessment

    MCTSs and MCITPs in the Real World

        The Ideal MCITP Candidate

        Put Yourself to the Test

        Testing Your Exam Readiness

        Well, Let’s Get to It

Chapter 1: Getting Started with Windows Server 2008 Active Directory

    The Building Blocks of Active Directory

        Domains

        Trees

        Forests

        Organizational Units

        Sites

        Domain Controllers

        Global Catalog

        Operations Masters

    New Features of Active Directory in Windows Server 2008

        Server Manager

        Configuring Forests and Domains

        Requirements for Installing Active Directory Domain Services

        Installing Active Directory Domain Services

        Verifying the Proper Installation of Active Directory

        Performing Unattended Installations of Active Directory

        Server Core Domain Controllers

        Active Directory Migration Tool (ADMT) v.3.1

        Alternate User Principal Name (UPN) Suffixes

        Removing Active Directory

    Upgrading from Windows Server 2003

        Interoperability with Previous Versions of Active Directory

        Upgrading a Windows Server 2003 Domain Controller

    Configuring Global Catalog Servers

        Promotion of Domain Controllers to Global Catalog Servers

        Universal Group Membership Caching (UGMC)

        Partial Attribute Sets

    Configuring Operations Masters

        Schema Master

        Domain Naming Master

        PDC Emulator

        Infrastructure Master

        RID Master

        Placement of Operations Masters

        Transferring and Seizing of Operations Master Roles

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 2: Active Directory and DNS

    Configuring DNS Zones

        DNS Zone Types

        Creating DNS Zones

        DNS Records

        Configuring DNS Zone Properties

        Dynamic, Non-Dynamic, and Secure Dynamic DNS

        Time to Live

        Zone Scavenging

    Configuring DNS Server Settings

        Forwarding

        Root Hints

        Configuring Zone Delegation

        Debug Logging

        Event Logging

        Advanced Server Options

        Monitoring DNS

        Command-Line DNS Server Administration

    Configuring Zone Transfers and Replication

        Replication Scope

        Types of Zone Transfers

        Secure Zone Transfers

        Configuring Name Servers

        Application Directory Partitions

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 3: Active Directory Sites and Replication

    The Need for Active Directory Sites

    Configuring Sites and Subnets

        Creating Sites

        Adding Domain Controllers

        Creating and Using Subnets

    Site Links, Site Link Bridges, and Bridgehead Servers

        The Need for Site Links and Site Link Bridges

        Configuring Site Links

        Site Link Bridges

        Site Link Costs

        Bridgehead Servers

        Sites Infrastructure

    Configuring Active Directory Replication

        Intersite and Intrasite Replication

        Distributed File System

        One-Way Replication

        Replication Protocols

        Replication Scheduling

        Forcing Intersite Replication

        Monitoring and Troubleshooting Replication

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 4: Configuring Additional Active Directory Roles

    New Server Roles and Features

    Active Directory Lightweight Directory Services (AD LDS)

        Installing AD LDS

        Configuring Data Within AD LDS

        Migration to AD LDS

        Configuring an Authentication Server

        Use of AD LDS on Server Core

    Active Directory Rights Management Services (AD RMS)

        Installing AD RMS

        Certificate Request and Installation

        Self-Enrollments

        Delegation

        Active Directory Metadirectory Services (AD MDS)

    Read-Only Domain Controllers

        Installing a Read-Only Domain Controller

        Unidirectional Replication

        Administrator Role Separation

        Read-Only DNS

        BitLocker

        Replication of Passwords

        syskey

    Active Directory Federation Services (AD FS)

Installing the AD FS Server Role

Trust Policies

        User and Group Claim Mapping

        Configuring Federation Trusts

        Windows Server 2008 Virtualization

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 5: Active Directory Objects and Trusts

    Creating User and Group Accounts

        Introducing User Accounts

        Introducing Group Accounts

        Creating User, Computer, and Group Accounts

        Use of Template Accounts

        Using Bulk Import to Automate Account Creation

        Configuring the UPN

        Configuring Contacts

        Creating Distribution Lists

    Managing and Maintaining Accounts

        Creating Organizational Units

        Configuring Group Membership

        AGDLP/AGUDLP

        Resetting Accounts and Passwords

        Denying Privileges

        Protected Admin

        Local Versus Domain Groups

        Deprovisioning Accounts

        Disabling or Deleting Accounts

        Delegating Administrative Control of Active

        Directory Objects

    Configuring Active Directory Trust Relationships

        Transitive Trusts

        Forest Trust Relationships

        External Trust Relationships

        Realm Trust Relationships

        Shortcut Trust Relationships

        Authentication Scope

        SID Filtering

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 6: Configuring and Troubleshooting Group Policy

    Overview of Group Policy

        Group Policy Objects

    Creating and Applying GPOs

        Managing GPOs

        Configuring GPO Hierarchy and Processing Priority

        Group Policy Filtering

        Group Policy Loopback Processing

    Configuring GPO Templates

        User Rights

        ADMX Central Store

        Administrative Templates

        Restricted Groups

        Starter GPOs

        Shell Access Policies

    Using Group Policy to Deploy Software

        Assigning and Publishing Software

        Deploying Software Using Group Policy

        Upgrading Software

        Removal of Software

    Troubleshooting the Application of Group Policy Objects

        Resultant Set of Policy

        Gpresult

        Gpupdate

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 7: Group Policy and Active Directory Security

    Use of Group Policy to Configure Security

        Configuring Account Policies

        Fine-Grained Password Policies

        Security Options

        Additional Security Configuration Tools

    Auditing of Active Directory Services

        New Features of Active Directory Auditing

        Use of GPOs to Configure Auditing

        Use of Auditpol.exe to Configure Auditing

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 8: Monitoring and Maintaining the Active Directory Environment

    Backing Up and Recovering Active Directory

        Use of Windows Server Backup

        Recovering Active Directory

        Linked Value Replication

        Backing Up and Restoring GPOs

    Offline Maintenance of Active Directory

        Restartable Active Directory

        Offline Defragmentation and Compaction

        Active Directory Database Storage Allocation

    Monitoring Active Directory

        Network Monitor

        Task Manager

        Event Viewer

        Reliability and Performance Monitor

        Windows System Resource Manager

        Server Performance Advisor

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 9: Active Directory Certificate Services

    What’s New with Certificate Services in Windows Server 2008?

    Installing Active Directory Certificate Services

        Certificate Authority Types and Hierarchies

        Installing Root CAs

        Installing Subordinate CAs

        Certificate Requests

        Certificate Practice Statements

    Managing Certificate Templates

        Certificate Template Types

        Configuring Certificate Templates

        Managing Different Certificate Template Versions

        Key Archival

        Key Recovery Agents

    Managing Certificate Enrollments

        Network Device Enrollment Services

        Certificate Autoenrollment

        Web Enrollment

        Smart Card Enrollment

        Creating Enrollment Agents

    Configuring Certificate Authority Server Settings

        Certificate Stores

        Certificate Server Permissions

        Certificate Database Backup and Restore

        Assigning Administration Roles

    Managing Certificate Revocation

        Certificate Revocation Lists

        Configuring Online Responders

        Authority Information Access

    Exam Cram Questions

        Answers to Exam Cram Questions436

Chapter 10: Practice Exam 1

    Exam Cram Questions

Chapter 11: Answer Key to Practice Exam 1

    Answers at a Glance

    Answers to Exam Cram Questions

Chapter 12: Practice Exam 2

    Exam Cram Questions

Chapter 13: Answer Key to Practice Exam 2

    Answers at a Glance

    Answers to Exam Cram Questions

Appendix A: Need to Know More?

    Chapter 1

    Chapter 2

    Chapter 3

    Chapter 4

    Chapter 5

    Chapter 6

    Chapter 7

    Chapter 8

    Chapter 9

    Appendix C

Appendix B: What’s on the CD-ROM

    Multiple Test Modes

        Study Mode

        Certification Mode

        Custom Mode

    Attention to Exam Objectives

    Installing the CD

        System Requirements

    Creating a Shortcut to the MeasureUp Practice Tests

    Technical Support

Appendix C: Installing Windows Server 2008

    Windows Server 2008 Hardware Requirements

    Manually Installing Windows Server 2008

        Installing a Complete Server

        Using Sysprep to Prepare a Virtual Server

        Installing a Windows Server Core Computer

        Useful Server Core Commands

    Upgrading a Windows Server 2003 Computer

    Automating Windows Server 2008 Installation

Glossary

Index