Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Delivery Guide
Course Number: 2279B

Part Number: X09-62596 Released: 05/2003

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. 2003 Microsoft Corporation. All rights reserved. Microsoft, MS-DOS, Windows, Windows NT, Active Directory, Active X, MSDN, PowerPoint, Visio, Visual Basic, Visual C++, and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Course Number: 2279B Part Number: X09-62596 Released: 05/2003

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

iii

Contents

Introduction
Course Materials......................................................................................................2 Prerequisites ............................................................................................................4 Course Outline.........................................................................................................5 Setup........................................................................................................................7 Microsoft Official Curriculum.................................................................................8 Microsoft Certified Professional Program.............................................................10 Facilities ................................................................................................................13

Module 1: Introduction to Active Directory Infrastructure

Overview .................................................................................................................1 Lesson: The Architecture of Active Directory ........................................................2 Lesson: How Active Directory Works ..................................................................10 Lesson: Examining Active Directory ....................................................................19 Lesson: The Active Directory Design, Planning, and Implementation Processes.29

Module 2: Implementing an Active Directory Forest and Domain Structure

Overview .................................................................................................................1 Lesson: Creating a Forest and Domain Structure ....................................................2 Lesson: Examining Active Directory Integrated DNS ..........................................22 Lesson: Raising Forest and Domain Functional Levels ........................................36 Lesson: Creating Trust Relationships....................................................................42 Lab A: Implementing Active Directory.................................................................54

Module 3: Implementing an Organizational Unit Structure

Overview .................................................................................................................1 Lesson: Creating and Managing Organizational Units............................................2 Lesson: Delegating Administrative Control of Organizational Units....................13 Lesson 3: Planning an Organizational Unit Strategy.............................................23 Lab A: Implementing an Organizational Unit Structure .......................................35

Module 4: Implementing User, Group, and Computer Accounts

Overview .................................................................................................................1 Lesson: Introduction to Accounts............................................................................2 Lesson: Creating and Managing Multiple Accounts ...............................................8 Lesson: Implementing User Principal Name Suffixes...........................................20 Lesson: Moving Objects in Active Directory ........................................................30 Guidelines for Authenticating, Authorizing, and Administering Accounts...........46 Lab A: Implementing an Account and Audit Strategy ..........................................58

Module 5: Implementing Group Policy

Overview .................................................................................................................1 Lesson: Creating and Configuring GPOs ................................................................2 Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings......16 Lesson: Managing GPOs .......................................................................................27 Lesson: Verifying and Troubleshooting Group Policy..........................................39 Lesson: Delegating Administrative Control of Group Policy................................45 Lesson: Planning a Group Policy Strategy for the Enterprise ...............................54 Lab A: Implementing Group Policy ......................................................................61

iv

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Module 6: Deploying and Managing Software by Using Group Policy

Overview .................................................................................................................1 Lesson: Introduction to Managing Software Deployment.......................................2 Lesson: Deploying Software....................................................................................6 Lesson: Configuring Software Deployment ..........................................................18 Lesson: Maintaining Deployed Software ..............................................................26 Lesson: Troubleshooting Software Deployment ...................................................34 Lesson: Planning a Software Deployment Strategy...............................................42 Lab A: Deploying and Managing Software Using Group Policy ..........................50

Module 7: Implementing Sites to Manage Active Directory Replication

Overview .................................................................................................................1 Lesson: Introduction to Active Directory Replication.............................................2 Lesson: Creating and Configuring Sites ................................................................14 Lesson: Managing Site Topology..........................................................................27 Lesson: Troubleshooting Replication Failures ......................................................35 Lesson: Planning a Site..........................................................................................47 Lab A: Implementing Sites to Manage Active Directory Replication...................57

Module 8: Implementing the Placement of Domain Controllers

Overview .................................................................................................................1 Lesson: Implementing the Global Catalog in Active Directory ..............................2 Lesson: Determining the Placement of Domain Controllers in Active Directory .13 Lesson: Planning the Placement of Domain Controllers .......................................20 Lab A: Implementing the Placement of Domain Controllers ................................30

Module 9: Managing Operations Masters

Overview .................................................................................................................1 Lesson: Introduction to Operations Master Roles ...................................................2 Lesson: Transferring and Seizing Operations Master Roles..................................10 Lesson: Planning the Placement of Operations Masters........................................23 Lab A: Managing Operations Masters...................................................................35 Course Evaluation..................................................................................................38

Module 10: Maintaining Active Directory

Overview .................................................................................................................1 Lesson: Introduction to Maintaining Active Directory............................................2 Lesson: Moving and Defragmenting the Active Directory Database ......................6 Lesson: Backing Up Active Directory...................................................................13 Lesson: Restoring Active Directory ......................................................................19 Lesson: Planning for Monitoring Active Directory ...............................................28 Lab A: Maintaining Active Directory....................................................................36

Module 11: Planning and Implementing an Active Directory Infrastructure

Overview .................................................................................................................1 Lesson: Creating an Active Directory Implementation Plan for Tailspin Toys.......2 Lab A: Creating the Active Directory Implementation Plan for Tailspin Toys.......7 Lesson: Implementing the Active Directory Infrastructure for Tailspin Toys ......22 Lab B: Implementing the Active Directory Infrastructure for Tailspin Toys........23 Course Evaluation..................................................................................................35

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

About This Course

This section provides you with a brief description of the course, audience, suggested prerequisites, and course objectives. Description This five-day instructor-led course includes self-paced and instructor-facilitated components. It provides students with the knowledge and skills to successfully plan, implement, and troubleshoot an Active Directory directory service infrastructure in Microsoft Windows Server 2003. The course focuses on a Windows Server 2003 directory service environment, including forest and domain structure, Domain Name System (DNS), site topology and replication, organizational unit structure and delegation of administration, Group Policy, and user, group, and computer account strategies. The target audience for this course includes individuals who are either employed or seeking employment as a systems engineer in medium, large, or enterprise organizations. Students should meet one of the following criteria:
!

Audience

Career entrants: Individuals new to technology. This audience includes nontechnical people who currently work in roles outside of IT who want to obtain and validate engineering-level technical job skills for the purpose of changing professions. Career enhancers: Experienced individuals who currently work as entrylevel IT professionals and who are new to Windows server engineeringlevel functions. These individuals includes Tier 2 systems administrators or support professionals in Windows, UNIX, or Novell NetWare environments who lack the depth or breadth of knowledge and engineering skills that are required to implement and troubleshoot a network based on Windows Server 2003 Server Active Directory technology. Professionals who are preparing for Microsoft Certified Professional Exam 70-294, Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, which is a core requirement for the Microsoft Certified Systems Engineer (MCSE) certification credential.

At the completion of this course, students will possess the technical skills to perform the tasks in Active Directory as defined in this course. Note Audiences that are not targeted for Course 2279A include experienced Windows NT, Windows 2000, UNIX/Linux, or Novell NetWare systems engineers, software developers and programmers, business end-users, and home users. Student prerequisites This course requires that students complete Course 2278: Planning and Maintaining a Windows Server 2003 Network Infrastructure, or have the equivalent knowledge and skills. Note Completion of CompTIA A+ and Network + training or equivalent knowledge and skills are a prerequisite for the core Windows curriculum. A+ Certification and Network+ Certification are recommended, but not required. For A+ and Network+ Certification exam requirements, visit http://www.comptia.org.

vi

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Course objectives

After completing this course, the student will be able to:

! !

Describe the logical and physical components of Active Directory. Create and configure a forest and domain structure by using an Active Directory infrastructure design. Plan and implement an organizational unit structure. Plan and implement Active Directory user, group, and computer accounts. Plan and implement a Group Policy strategy to centrally manage users and computers in an enterprise. Deploy, manage, and troubleshoot software that is deployed by using Group Policy. Implement sites to manage and monitor Active Directory replication. Plan and implement the placement of domain controllers, global catalog servers, and DNS servers that are integrated with Active Directory. Plan and manage operations masters. Back up, restore, and maintain Active Directory. Plan and implement an Active Directory infrastructure that is based on a directory service design that an enterprise architect provides.

! ! !

! !

! ! !

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

vii

Course Timing
The following schedule is an estimate of the course timing. Your timing may vary.

Day 1
Start 9:00 9:30 10:30 10:45 11:15 12:00 1:00 2:15 2:30 3:30 End 9:30 10:30 10:45 11:15 12:00 1:00 2:15 2:30 3:30 5:00 Module Introduction Module 1: Introduction to Active Directory Infrastructure Break Module 1: Introduction to Active Directory Infrastructure (continued) Module 2: Implementing an Active Directory Forest and Domain Structure Lunch Module 2: Implementing an Active Directory Forest and Domain Structure (continued) Break Lab 2: Implementing Active Directory Module 3: Implementing an Organizational Unit Structure

Day 2
Start 9:00 9:30 10:15 10:30 12:00 1:00 1:30 2:30 2:45 End 9:30 10:15 10:30 12:00 1:00 1:30 2:30 2:45 4:45 Module Day 1 review Lab 3: Implementing an Organizational Unit Structure Break Module 4: Implementing User, Group, and Computer Accounts Lunch Module 4: Implementing User, Group, and Computer Accounts (continued) Lab 4: Implementing an Account Strategy Break Module 5: Implementing Group Policy

viii

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Day 3
Start 9:00 9:30 10:30 10:45 12:00 1:00 3:00 3:15 End 9:30 10:30 10:45 12:00 1:00 3:00 3:15 4:15 Module Day 2 review Module 5: Implementing Group Policy (continued) Break Lab: 5: Implementing Group Policy Lunch Module 6: Deploying and Managing Software Using Group Policy Break Lab 6: Deploying and Managing Software Using Group Policy

Day 4
Start 9:00 9:30 10:45 11:00 12:00 1:00 1:30 2:00 2:15 3:30 4:00 End 9:30 10:45 11:00 12:00 1:00 1:30 2:00 2:15 3:30 4:00 5:00 Module Day 3 review Module 7: Implementing Sites to Manage Active Directory Replication Break Module 7: Implementing Sites to Manage Active Directory Replication (continued) Lunch Module 7: Implementing Sites to Manage Active Directory Replication (continued) Lab 7: Implementing Sites to Manage Active Directory Replication Break Module 8: Implementing the Placement of Domain Controllers Lab 8: Implementing the Placement of Domain Controllers Module 9: Managing Operations Masters

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

ix

Day 5
Start 9:00 9:30 10:00 11:00 11:15 11:45 12:00 1:00 1:30 1:45 2:30 2:45 3:00 End 9:30 10:00 11:00 11:15 11:45 12:00 1:00 1:30 1:45 2:30 2:45 3:00 5:00 Module Day 4 review Lab 9: Managing Operations Masters Module 10: Maintaining Active Directory Break Module 10: Maintaining Active Directory (continued) Lab 10: Maintaining Active Directory Lunch Lab 10: Maintaining Active Directory (continued) Module 11: Planning and Implementing an Active Directory Infrastructure Lab 11A: Creating the Active Directory Implementation Plan for Tailspin Toys Break Module 11: Planning and Implementing an Active Directory Infrastructure for Tailspin Toys (continued) Lab 11B: Implementing the Active Directory Infrastructure for Tailspin Toys

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Trainer Materials Compact Disc Contents

The Trainer Materials compact disc contains the following files and folders:
!

Autorun.exe. When the compact disc is inserted into the compact disc drive, or when you double-click the Autorun.exe file, this file opens the compact disc and allows you to browse the Student Materials or Trainer Materials compact disc. Autorun.inf. When the compact disc is inserted into the compact disc drive, this file opens Autorun.exe. Default.htm. This file opens the Trainer Materials Web page. Readme.txt. This file explains how to install the software for viewing the Trainer Materials compact disc and its contents and how to open the Trainer Materials Web page. 2279B_ms.doc. This file is the Manual Classroom Setup Guide. It contains the steps for manually setting up the classroom computers. 2279B_sg.doc. This file is the Automated Classroom Setup Guide. It contains a description of classroom requirements, classroom configuration, instructions for using the automated classroom setup scripts, and the Classroom Setup Checklist. Errorlog. This folder may contain an error log. Pptview. This folder contains the Microsoft PowerPoint Viewer 97, which can be used to display the PowerPoint slides if PowerPoint 2002 is not available. Do not use this version in the classroom. Setup. This folder contains the files that install the course and related software on computers in a classroom setting. Student. This folder contains the Web page that provides students with links to resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and course-related Web sites. Tools. This folder contains files and utilities used to complete the setup of the instructor computer. Webfiles. This folder contains the files that are required to view the course Web page. To open the Web page, open Windows Explorer, and in the root directory of the compact disc, double-click Default.htm or Autorun.exe.

! !

! !

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

xi

Student Materials Compact Disc Contents

The Student Materials compact disc contains the following files and folders:
!

Autorun.exe. When the compact disc is inserted into the CD-ROM drive, or when you double-click the Autorun.exe file, this file opens the compact disc and allows you to browse the Student Materials compact disc. Autorun.inf. When the compact disc is inserted into the compact disc drive, this file opens Autorun.exe. Default.htm. This file opens the Student Materials Web page. It provides you with resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and courserelated Web sites. Readme.txt. This file explains how to install the software for viewing the Student Materials compact disc and its contents and how to open the Student Materials Web page. Addread. This folder contains additional reading pertaining to this course. Appendix. This folder contains appendix files for this course. Flash. This folder contains the installer for the Macromedia Flash 6.0 browser plug-in. Fonts. This folder contains fonts that may be required to view the Microsoft Word documents that are included with this course. Labfiles. This folder contains files that are used in the hands-on labs. These files may be used to prepare the student computers for the hands-on labs. Media. This folder contains files that are used in multimedia presentations for this course. Mplayer. This folder contains the setup file to install Microsoft Windows Media Player. Webfiles. This folder contains the files that are required to view the course Web page. To open the Web page, open Windows Explorer, and in the root directory of the compact disc, double-click Default.htm or Autorun.exe. Wordview. This folder contains the Word Viewer that is used to view any Word document (.doc) files that are included on the compact disc.

! ! !

xii

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Document Conventions
The following conventions are used in course materials to distinguish elements of the text.
Convention Bold Use Represents commands, command options, and syntax that must be typed exactly as shown. It also indicates commands on menus and buttons, dialog box titles and options, and icon and menu names. In syntax statements or descriptive text, indicates argument names or placeholders for variable information. Italic is also used for introducing new terms, for book titles, and for emphasis in the text. Indicate domain names, user names, computer names, directory names, and folder and file names, except when specifically referring to case-sensitive names. Unless otherwise indicated, you can use lowercase letters when you type a directory name or file name in a dialog box or at a command prompt. Indicate the names of keys, key sequences, and key combinations for example, ALT+SPACEBAR. Represents code samples or examples of screen text. In syntax statements, enclose optional items. For example, [filename] in command syntax indicates that you can choose to type a file name with the command. Type only the information within the brackets, not the brackets themselves. In syntax statements, enclose required items. Type only the information within the braces, not the braces themselves. In syntax statements, separates an either/or choice. Indicates a procedure with sequential steps. In syntax statements, specifies that the preceding item may be repeated. Represents an omitted portion of a code sample.

Italic

Title Capitals

ALL CAPITALS monospace

[]

{} |

... . . .