Kurt Hudson is an instructor, author, and consultant for computer technologies. In recent years, he has concentrated on the areas of computer networking, Active Directory,
integrating UNIX and Microsoft Windows, and computer security. Kurt regularly teaches summer programs at Northern Arizona University in Flagstaff, Arizona.
With the release of Windows 2000, Microsoft introduced an entirely new approach to networking involving directory services. IT professionals are now responsible for designing a Windows 2000 Active Directory infrastructure, implementing it, maintaining it, and using Windows 2000 support technologies. This comprehensive Bible gives you all the knowledge necessary to successfully plan, deploy, and maintain an Active Directory network.
Welcome to MCSE Self-Paced Training Kit (Exam 70-294): Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
This kit introduces you to Windows Server 2003 Active Directory and prepares you to plan, configure, and administer your Active Directory infrastructure. You will learn to use Active Directory directory service to centrally manage users, groups, shared folders, and network resources, and to administer the user environment and software with Group Policy.
This module summarizes the topics covered in the previous modules and
presents a framework for creating an Active Directory infrastructure. The
module offers strategies for forming a design team and analyzing the business
and administrative model of an organization. The module also presents
guidelines for making design choices that satisfy the business requirements of
an organization. The elements of designing an Active Directory structure are
This module provides students with the skills to implement an Active
Directory directory service infrastructure that is based on the business
requirements of a fictitious organization.
At the end of this module, students will be able to:
Describe the infrastructure of a fictitious organization.
Identify the business requirements for implementing the Active Directory
Describe how to implement Active Directory based on the infrastructure
designed by enterprise architects.
Perform the tasks necessary to implement the Active Directory
This book has been developed, in cooperation with Microsoft Corpora-
tion, to give you the critical skills and knowledge you need to prepare for one
of the core requirements of the new MCSE certification program, Imple-
menting and Administering Windows 2000 Directory Services. You will find
the information you need to acquire a solid understanding of how to setup
and manage the Active Directory, to prepare for Exam 70-217: Implement-
ing and Administering a Microsoft Windows 2000 Directory Services
Infrastructure, and to progress toward MCSE certification....
This chapter deploys an Active Directory infrastructure.
Working from the deployment plan blueprint described
in this chapter, you will be able to identify and modify
the elements of the deployment plan that will suite your
configuration. You can make changes as you need, be it a
solution for a small network or a WAN connecting multiple
domain controllers and an extensive Active Directory tree.
Welcome to MCSE Self-Paced Training Kit (Exam 70-297): Designing a Microsoft
Windows Server 2003 Active Directory and Network Infrastructure. This book teaches
you how to gather the network requirements for a business, how to analyze an existing
network, and how to design an Active Directory directory service and networking
This module provides students with the knowledge and skills to implement a
Domain Name System (DNS) infrastructure in preparation for installing
Microsoft® Windows® Active Directory directory service. Students will learn
about the roles of DNS in an Active Directory network, and about DNS and
Active Directory namespaces.
The AD database contains all information about objects in all the domains from logon
authentication to objects in the directory. A hierarchical structure made up of multiple
domains that trust each other is called a tree. A set of object definitions and their associated
attributes is called a schema. All domains in a tree will share the same schema and will have
a contiguous namespace. A namespace is a collection of domains that share a common root
name. An example of this is support.troytec.com, marketing.troytec.com, and troytec.com. ...
Welcome to Conﬁguring Windows 2000 WITHOUT Active Directory, which quite
simply aims to demonstrate how you can make the most of Windows 2000 out-
side an Active Directory environment.Microsoft spent considerable time and
money, and bet its future business, to update its already successful platforms of
Windows NT 4.0 and Windows 98 to be today’s version of Windows 2000.
This module provides students with the basic context and terminology for the
course. It starts by discussing how Microsoft® Windows® 2000 Active
Directory directory service works in an enterprise network. A framework is
presented for identifying the business needs that guide the design of the Active
Directory infrastructure. Finally, an overview of the architectural components
of Active Directory is provided.
You are the network administrator for 21certify. The network consists of a single Active Directory
domain 21certify.com. The domain contains 25 Windows server 2003 computers and 5,000 Windows
2000 Professional computers.
You install and configure Software Update Services (SUS) on a server named 21certifySrv. All client
computer accounts are in the Clients organizational unit (OU). You create a Group Policy object (GPO)
named SUSupdates and link it to the Clients OU. You configure the SUSupdates GPO so that client
computers obtain security updates from 21certifySrv.
You are the network administrator for Certkiller. The network consists of a
single Active Directory forest that contains three domains named Certkiller.com,
texas.Certkiller.com, and dakota.Certkiller.com. The functional level of the forest is
Windows Server 2003.Both texas.Certkiller.com and dakota.Certkiller.com contain
employee user accounts,
The Microsoft Windows 2000 Active Directory (AD) is the central repository in which all
objects in an enterprise and their respective attributes are stored. It is a hierarchical,
multimaster enabled database, capable of storing millions of objects. Because it is
multimaster, changes to the database can be processed at any given domain controller (DC)
in the enterprise regardless of whether the domain controller is connected or disconnected
from the network.
This module provides students with the knowledge and skills that are needed to
design a highly available network services infrastructure. As a Web
infrastructure designer, students will be required to design a highly available
Active Directory™ directory service solution that meets their business needs
while providing flexibility and easy management of the implemented design.
This course provides students with the knowledge and skills necessary to design
a Microsoft® Windows® 2000 directory services infrastructure in an enterprise
environment. After completion of this course, a student will be able to identify
the business and administrative needs of an organization that impact the design
of the Active Directory directory service. The student will be able to describe
key decision points for naming, delegation of authority, domain design, and site