MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide

Transcription

1 MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide Brad Price SYBEX

2 MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide

3 This page intentionally left blank

4 MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide Brad Price San Francisco London

5 Associate Publisher: Neil Edde Acquisitions Editor: Maureen Adams Developmental Editor: Jeff Kellum Production Editor: Elizabeth Campbell Technical Editors: Larry Passo, James Kelly Copyeditor: Rebecca Rider Compositor and Graphic Illustrator: Happenstance Type-O-Rama CD Coordinator: Dan Mummert CD Technician: Kevin Ly Proofreaders: Laurie O Connell, Nancy Riddiough Indexer: Nancy Guenther Book Designers: Bill Gibson and Judy Fung Cover Designer: Archer Design Cover Photographer: Photodisc and Victor Arre Copyright 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA World rights reserved. No part of this publication may be stored in a retrieval system, transmitted, or reproduced in any way, including but not limited to photocopy, photograph, magnetic, or other record, without the prior agreement and written permission of the publisher. Library of Congress Card Number: ISBN: Screen reproductions produced with FullShot 99. FullShot Inbit Incorporated. All rights reserved. FullShot is a trademark of Inbit Incorporated. The CD interface was created using Macromedia Director, COPYRIGHT 1994, Macromedia Inc. For more information on Macromedia and Macromedia Director, visit Microsoft Internet Explorer 1996 Microsoft Corporation. All rights reserved. Microsoft, the Microsoft Internet Explorer logo, Windows, Windows NT, and the Windows logo are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. SYBEX is an independent entity from Microsoft Corporation, and not affiliated with Microsoft Corporation in any manner. This publication may be used in assisting students to prepare for a Microsoft Certified Professional Exam. Neither Microsoft Corporation, its designated review company, nor SYBEX warrants that use of this publication will ensure passing the relevant exam. Microsoft is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. TRADEMARKS: SYBEX has attempted throughout this book to distinguish proprietary trademarks from descriptive terms by following the capitalization style used by the manufacturer. The author and publisher have made their best efforts to prepare this book, and the content is based upon final release software whenever possible. Portions of the manuscript may be based upon pre-release versions supplied by software manufacturer(s). The author and the publisher make no representation or warranties of any kind with regard to the completeness or accuracy of the contents herein and accept no liability of any kind including but not limited to performance, merchantability, fitness for any particular purpose, or any losses or damages of any kind caused or alleged to be caused directly or indirectly from this book. Manufactured in the United States of America

6 To Our Valued Readers: Thank you for looking to Sybex for your Microsoft Windows 2003 certification exam prep needs. We at Sybex are proud of the reputation we ve established for providing certification candidates with the practical knowledge and skills needed to succeed in the highly competitive IT marketplace. Sybex is proud to have helped thousands of Microsoft certification candidates prepare for their exams over the years, and we are excited about the opportunity to continue to provide computer and networking professionals with the skills they ll need to succeed in the highly competitive IT industry. With its release of Windows Server 2003, and the revised MCSA and MCSE tracks, Microsoft has raised the bar for IT certifications yet again. The new programs better reflect the skill set demanded of IT administrators in today s marketplace and offers candidates a clearer structure for acquiring the skills necessary to advance their careers. The authors and editors have worked hard to ensure that the Study Guide you hold in your hand is comprehensive, in-depth, and pedagogically sound. We re confident that this book will exceed the demanding standards of the certification marketplace and help you, the Microsoft certification candidate, succeed in your endeavors. As always, your feedback is important to us. Please send comments, questions, or suggestions to support@sybex.com. At Sybex we're continually striving to meet the needs of individuals preparing for IT certification exams. Good luck in pursuit of your Microsoft certification! Neil Edde Associate Publisher Certification Sybex, Inc.

7 Software License Agreement: Terms and Conditions The media and/or any online materials accompanying this book that are available now or in the future contain programs and/or text files (the "Software") to be used in connection with the book. SYBEX hereby grants to you a license to use the Software, subject to the terms that follow. Your purchase, acceptance, or use of the Software will constitute your acceptance of such terms. The Software compilation is the property of SYBEX unless otherwise indicated and is protected by copyright to SYBEX or other copyright owner(s) as indicated in the media files (the "Owner(s)"). You are hereby granted a single-user license to use the Software for your personal, noncommercial use only. You may not reproduce, sell, distribute, publish, circulate, or commercially exploit the Software, or any portion thereof, without the written consent of SYBEX and the specific copyright owner(s) of any component software included on this media. In the event that the Software or components include specific license requirements or end-user agreements, statements of condition, disclaimers, limitations or warranties ("End-User License"), those End-User Licenses supersede the terms and conditions herein as to that particular Software component. Your purchase, acceptance, or use of the Software will constitute your acceptance of such End-User Licenses. By purchase, use or acceptance of the Software you further agree to comply with all export laws and regulations of the United States as such laws and regulations may exist from time to time. Software Support Components of the supplemental Software and any offers associated with them may be supported by the specific Owner(s) of that material, but they are not supported by SYBEX. Information regarding any available support may be obtained from the Owner(s) using the information provided in the appropriate read.me files or listed elsewhere on the media. Should the manufacturer(s) or other Owner(s) cease to offer support or decline to honor any offer, SYBEX bears no responsibility. This notice concerning support for the Software is provided for your information only. SYBEX is not the agent or principal of the Owner(s), and SYBEX is in no way responsible for providing any support for the Software, nor is it liable or responsible for any support provided, or not provided, by the Owner(s). Warranty SYBEX warrants the enclosed media to be free of physical defects for a period of ninety (90) days after purchase. The Software is not available from SYBEX in any other form or media than that enclosed herein or posted to If you discover a defect in the media during this warranty period, you may obtain a replacement of identical format at no charge by sending the defective media, postage prepaid, with proof of purchase to: SYBEX Inc. Product Support Department 1151 Marina Village Parkway Alameda, CA Web: After the 90-day period, you can obtain replacement media of identical format by sending us the defective disk, proof of purchase, and a check or money order for $10, payable to SYBEX. Disclaimer SYBEX makes no warranty or representation, either expressed or implied, with respect to the Software or its contents, quality, performance, merchantability, or fitness for a particular purpose. In no event will SYBEX, its distributors, or dealers be liable to you or any other party for direct, indirect, special, incidental, consequential, or other damages arising out of the use of or inability to use the Software or its contents even if advised of the possibility of such damage. In the event that the Software includes an online update feature, SYBEX further disclaims any obligation to provide this feature for any specific duration other than the initial posting. The exclusion of implied warranties is not permitted by some states. Therefore, the above exclusion may not apply to you. This warranty provides you with specific legal rights; there may be other rights that you may have that vary from state to state. The pricing of the book with the Software by SYBEX reflects the allocation of risk and limitations on liability contained in this agreement of Terms and Conditions. Shareware Distribution This Software may contain various programs that are distributed as shareware. Copyright laws apply to both shareware and ordinary commercial software, and the copyright Owner(s) retains all rights. If you try a shareware program and continue using it, you are expected to register it. Individual programs differ on details of trial periods, registration, and payment. Please observe the requirements stated in appropriate files. Copy Protection The Software in whole or in part may or may not be copy-protected or encrypted. However, in all cases, reselling or redistributing these files without authorization is expressly forbidden except as specifically provided for by the Owner(s) therein.

8 To my loving wife, DeAnn, and daughters, Jami and Becca, whom I adore.

9 Acknowledgments I would like to thank my family and friends for putting up with my constant excuses as to why I could not spend more time with them although, I am sure some of you are glad that I was not around to bug you! I have to start by giving all of my heart and thanks to my wife, DeAnn, and to my two daughters, Jami and Becca. DeAnn, you have been amazing as you have held everything together and taken on the role of a single parent while I have been gone so much. As soon as these projects are finished, I plan on making it up to you. Jami and Becca, you two never cease to amaze me. Your accomplishments make mine pale in comparison. I wish I could have spent more time attending your games and functions, but through it all, you never let me down and you kept your compassion and faith. To Mom and Dad, thank you for giving me the confidence to realize I could do anything I put my mind to and the work ethic with which to finish what I started. To the rest of my family, thanks for looking past my eccentricities and accepting me with open arms. A special thanks has to go to my brother, John. You are not only someone I can count on as a collaborator and someone I can bounce ideas off of, but a great friend. To everyone at Sybex, thanks for your patience and understanding as I missed a few of those deadlines. Maureen, Jeff, and Elizabeth, you were great to work with and I hope we can do it all over again (just not too soon!). Thanks to the technical editors, Larry and Jim, for catching the errors and omissions caused by trying to finish chapters at three o clock in the morning, and to the copyeditor, Rebecca, for transforming my words into things that shine. And to all of the staff that work behind the scenes to make sure the book and CD work, thanks for all of your hard work. Without you, the book would not look as impressive as it does.

10 Contents at a Glance Introduction Assessment Test xix xxxv Chapter 1 Analyzing the Administrative Structure 1 Chapter 2 Determining Business and Technical Requirements 43 Chapter 3 Designing the Active Directory Forest Structure 83 Chapter 4 Designing the Active Directory Domain Structure 113 Chapter 5 Designing an Organizational Unit Structure for Administrative Purposes 155 Chapter 6 Designing Organizational Units for Group Policy 189 Chapter 7 Designing Accounts Access and Management 227 Chapter 8 Designing the Site Topology 265 Chapter 9 Designing Remote Access 303 Chapter 10 Analyzing Name Resolution 349 Glossary 395 Index 409

11 This page intentionally left blank

12 Contents Introduction Assessment Test xix xxxv Chapter 1 Analyzing the Administrative Structure 1 Understanding the Administrative Structure: Business Models 2 Identifying the Departmental Model 3 Identifying a Project-Based Model 4 Identifying the Product/Service-Based Model 6 Identifying the Cost Center Model 6 Understanding the Administrative Structure: Administration Models 8 Identifying the Centralized Administration Model 8 Identifying the Decentralized Administration Model 11 Identifying the Hybrid Administration Model 12 Identifying the Outsourced Administration Model 13 Analyzing the Existing Administrative Structure 16 Understanding the Effect of Active Directory on the Administrative Design 18 Designing the Administrative Structure 20 Summary 23 Exam Essentials 25 Key Terms 25 Review Questions 26 Answers to Review Questions 29 Case Study 30 Background 30 Existing Environment 30 Interviews 30 Table 32 Case Study Questions 33 Answers to Case Study Questions 38 Chapter 2 Determining Business and Technical Requirements 43 Identifying the Current System Implementation 46 Determining Organizational Requirements 46 Identifying the Current Software Requirements 54 Identifying the Current Hardware Requirements 56 Network Requirements 58 Documenting Your Findings 60

13 xii Contents Examining the Current Infrastructure 63 Current Directory Service 63 Software Requirements 66 Network Requirements 68 Summary 69 Exam Essentials 69 Key Terms 70 Review Questions 71 Answers to Review Questions 73 Case Study 74 Background 74 Existing Environment 74 Interviews 74 Case Study Questions 77 Answers to Case Study Questions 80 Chapter 3 Designing the Active Directory Forest Structure 83 Identifying Design Criteria 84 Identifying Service Administrators 85 Identifying Data Administrators 85 Defining Autonomy, Collaboration, and Isolation 86 Understanding Collaborative Administration 86 Understanding Autonomous Administration 88 Understanding Isolated Administration 90 Identifying Design Priorities 91 Using Reliable Solutions 91 Using High-Availability Solutions 92 Designing the Forest Structure 93 Implementing an Organization-Based Forest 95 Implementing a Resource Forest 97 Implementing a Restricted-Access Forest 97 Schema Considerations 100 Planning and Testing 101 Who Makes the Change? 101 Plan the Roll-Out Schedule 102 Where to Make the Changes 102 Summary 102 Exam Essentials 103 Key Terms 104 Review Questions 105 Answers to Review Questions 107 Case Study 108 Background 108 Existing Environment 108

14 Contents xiii Interviews 109 Current Infrastructure 110 Case Study Questions 111 Answers to Case Study Questions 112 Chapter 4 Designing the Active Directory Domain Structure 113 Identifying the Domain Administrative Structure 115 Using a Single Domain 116 Using Multiple Domains 122 Using Multiple Trees 124 Identifying Security Concerns 126 Identifying Domain Creation Considerations 126 Identifying Domain Functional Levels 127 Identifying Trust Relationship Considerations 127 Using the Forest Trust 128 Using Trusts between Domains 129 Using SID Filtering 131 Identifying Trust Authentication Allowances 132 Interoperability and Migration Strategies 132 Understanding Upgrade Considerations 133 Understanding Restructuring Considerations 133 Migrating from Windows NT Migrating from Windows Defining Domain Names 138 Identifying the Forest Root Domain 139 Summary 141 Exam Essentials 141 Key Terms 142 Review Questions 143 Answers to Review Questions 145 Case Study 146 Background 146 Existing Environment 146 Interviews 147 Current Infrastructure 148 Case Study Questions 152 Answers to Case Study Questions 153 Chapter 5 Designing an Organizational Unit Structure for Administrative Purposes 155 The Basics of Organizational Units 156 Understanding the OU Design Options 157 Understanding OU Design Criteria 162

15 xiv Contents Options for Delegating Control 166 Understanding Delegation Methods 167 Understanding Account and Resource OUs 168 Understanding Inheritance 170 Migrating from NT Migrating Account Domains 172 Migrating Resource Domains 173 Summary 175 Exam Essentials 176 Key Terms 177 Review Questions 178 Answers to Review Questions 180 Case Study 181 Background 181 Existing Environment 181 Interviews 182 Current Network Design 183 Case Study Questions 184 Answers to Case Study Questions 186 Chapter 6 Designing Organizational Units for Group Policy 189 Group Policy Overview 190 Understanding the Company s Objectives 193 Creating a Simple Design 196 Creating the OU Structure 207 Identifying Administrative Requirements 208 Controlling Change Management 210 Summary 213 Exam Essentials 213 Key Terms 214 Review Questions 215 Answers to Review Questions 218 Case Study 219 Background 219 Interviews 219 Existing Infrastructure 221 Case Study Questions 223 Answers to Case Study Questions 225 Chapter 7 Designing Accounts Access and Management 227 Planning Account Creation 228 Identifying Current Account Structure 229 Identifying a Naming Strategy 230 Identifying an Account Authentication Policy 236

16 Contents xv Determining Group Requirements for Resource Access 240 Identifying User Access and Group Strategies 241 Identifying Group Creation Options 246 Designing a Group Creation Strategy 247 Identifying Resource Access Needs 248 Determining the Level of Access Required 248 Designing for Efficient Nesting 249 Summary 250 Exam Essentials 251 Key Terms 252 Review Questions 253 Answers to Review Questions 255 Case Study 256 Background 256 Existing Environment 256 Interviews 257 Current Infrastructure 259 Case Study Questions 262 Answers to Case Study Questions 264 Chapter 8 Designing the Site Topology 265 Determining the Site Topology 266 Understanding the Current Network Infrastructure 268 Designing Sites to Support the Active Directory Design 269 Designing Site Links and Site Link Bridges 272 Determining Domain Controller Specifications and Placement 277 Determining Domain Controller Specifications 278 Choosing Domain Controller Placement 280 Choosing Global Catalog Placement 281 Choosing Master Operations Placement 282 Determining Domain Controller Creation Options 284 Summary 286 Exam Essentials 287 Key Terms 288 Review Questions 289 Answers to Review Questions 291 Case Study 292 Background 292 Existing Environment 292 Interviews 293 Current Infrastructure 294 Case Study Questions 298 Answers to Case Study Questions 300

17 xvi Contents Chapter 9 Designing Remote Access 303 Designing Network Access 304 Identifying the Network Access Hierarchy 305 Security Considerations 309 Improving Availability 309 Considerations for Internet Access 311 Designing Remote User Connectivity 312 Identifying Remote User Access Considerations 312 Identifying Connection Options 313 Guidelines for Remote User Authentication and Accounting 315 Designing Remote Site Connectivity 316 Determining Connectivity Needs 317 Identifying Internet and Extranet Considerations 318 Identifying Extranet Options 325 Guideline for Server Placement 325 Identifying IP Addressing Options 327 Allocating IP Addresses 329 Defining Scope Options 332 Determining DHCP Server Locations 333 Summary 333 Exam Essentials 334 Key Terms 335 Review Questions 336 Answers to Review Questions 338 Case Study 339 Background 339 Existing Environment 339 Interviews 340 Current Infrastructure 341 Case Study Questions 345 Answers to Case Study Questions 347 Chapter 10 Analyzing Name Resolution 349 Examining the Current Name Resolution Infrastructure 351 Designing the DNS Namespace 353 Determining Internal and External Namespace Requirements 354 Identifying Naming Standards 357 Identifying Integration Options 359 Designing Zones 361 Designing the Name Resolution Server Infrastructure 366 Designing the DNS Infrastructure 366 Designing the WINS Infrastructure 368 Integrating Name Resolution Services 374

18 Contents xvii Securing the Name Resolution Infrastructure 375 Identifying Security Considerations 375 Securing DNS Servers 378 Securing WINS 379 Summary 380 Exam Essentials 381 Key Terms 382 Review Questions 383 Answers to Review Questions 385 Case Study 386 Background 386 Existing Environment 386 Interviews 387 Current Infrastructure 388 Case Study Questions 392 Answers to Case Study Questions 393 Glossary 395 Index 409

19 xviii Table of Design Scenarios Table of Design Scenarios Identifying Business Models Identifying the Administrative Model Analyzing Organizational Requirements Determining Administrative Needs Identifying Owners Priority Identification Choosing a Domain Design Identifying Trust Relationships Choosing the OU structure Migrating from Windows NT Defining GPOs Linking GPOs Determining the Authentication Requirements Designing Resource Access for the Forest Determining Site Topology Calculating the Database Size Controlling User Access Building the Firewall Determining WINS Population Determining WINS Replication Paths

20 Introduction Microsoft s Microsoft Certified Systems Administrator (MCSA) and Microsoft Certified Systems Engineer (MCSE) tracks for Windows Server 2003 are the premier certifications for computer industry professionals. Covering the core technologies around which Microsoft s future will be built, these programs provide powerful credentials for career advancement. This book has been developed to give you the critical skills and knowledge you need to prepare for one of the design requirements of the MCSE certification in the new Windows Server 2003 track: Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure (Exam ). The Microsoft Certified Professional Program Since the inception of its certification program, Microsoft has certified almost 1.5 million people. As the computer network industry increases in both size and complexity, this number is sure to grow and the need for proven ability will also increase. Companies rely on certifications to verify the skills of prospective employees and contractors. Microsoft has developed its Microsoft Certified Professional (MCP) program to give you credentials that verify your ability to work with Microsoft products effectively and professionally. Obtaining your MCP certification requires that you pass any one Microsoft certification exam. Several levels of certification are available based on specific suites of exams. Depending on your areas of interest or experience, you can obtain any of the following MCP credentials: Microsoft Certified Desktop Support Technician (MCDST) This is the most recent offering from Microsoft. The program targets individuals who have very little computer experience. The only prerequisite Microsoft recommends is that you have experience using applications that are included with Windows XP, including Microsoft Internet Explorer and Outlook Express. You must pass a total of two exams to obtain your MCDST. Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 The MCSA certification is the newest administrator certification track from Microsoft. This certification targets system and network administrators with roughly 6 to 12 months of desktop and network administration experience. The MCSA can be considered the entry-level networking certification. You must take and pass a total of four exams to obtain your MCSA. Or, if you are an MCSA on Windows 2000, you can take one Upgrade exam to obtain your MCSA on Windows Server In addition, Microsoft just recently announced two additional specializations: MCSA: Security on Windows Server 2003 You must take a total of six exams to get this certification. In addition to the core client and network operating system requirements, candidates must take two additional security specialization core exams, one of which can be CompTIA s Security+ exam. If you have your MCSA, you can take the Upgrade exam instead of the three core exams. However, you still need to take the two security-focused exams.

21 xx Introduction MCSA: Messaging on Windows Server 2003 You must take a total of five exams to get this certification. In addition to the core client and network operating system requirements, candidates must take one additional messaging specialization core exam. If you have your MCSA, you can take the Upgrade exam instead of the three core exams. However, you still need to take the messaging-focused exams. Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 This certification track is designed for network and system administrators, network and system analysts, and technical consultants who work with Microsoft Windows XP and Server 2003 software. You must take and pass seven exams to obtain your MCSE. Or, if you are an MCSE on Windows 2000, you can take two Upgrade exams to obtain your MCSE on Windows Server In addition, Microsoft just recently announced two additional specializations: MCSE: Security on Windows Server 2003 You must take a total of eight exams to get this certification. In addition to the one core desktop networking exam and the four networking operation system exams, candidates may take three additional security-focused exams, including one security specialization design exam. If you have your MCSE, you can take both Upgrade exams ( and ) to satisfy the four networking operating system exams. MCSE: Messaging on Windows Server 2003 You must take a total of eight exams to get this certification. In addition to the one core desktop networking exam, four networking operation system exams, and the one design exam, candidates may take two messagingfocused exams, both of which deal with using Microsoft Exchange Server If you have your MCSE, you can take both Upgrade exams ( and ) to satisfy the four networking operating system exams. Microsoft Certified Application Developer (MCAD) This track is designed for application developers and technical consultants who primarily use Microsoft development tools. Currently, you can take exams on Visual Basic.NET or Visual C#.ΝΕΤ. You must take and pass three exams to obtain your MCSD. MCSE versus MCSA In an effort to provide those just starting off in the IT world a chance to prove their skills, Microsoft introduced its Microsoft Certified Systems Administrator (MCSA) program. Targeted at those with less than a year s experience, the MCSA program focuses primarily on the administration portion of an IT professional s duties. Therefore, certain Windows exams satisfy both MCSA and MCSE requirements, namely exams , , and Of course, it should be any MCSA s goal to eventually obtain his or her MCSE. However, don t assume that, because the MCSA has to take three exams that also satisfy an MCSE requirement, the two programs are similar. An MCSE must also know how to design a network. Beyond these three exams, the remaining MCSE required exams demand that the candidate have much more hands-on experience.

22 Introduction xxi Microsoft Certified Solution Developer (MCSD) This track is designed for software engineers and developers and technical consultants who primarily use Microsoft development tools. As of this printing, you can get your MCSD in either Visual Studio 6 or Visual Studio.NET. In Visual Studio 6, you need to take and pass three exams. In Visual Studio.NET, you need to take and pass five exams to obtain your MCSD. Microsoft Certified Database Administrator (MCDBA) This track is designed for database administrators, developers, and analysts who work with Microsoft SQL Server. As of this printing, you can take exams on either SQL Server 7 or SQL Server You must take and pass four exams to achieve MCDBA status. Microsoft Certified Trainer (MCT) The MCT track is designed for any IT professional who develops and teaches Microsoft-approved courses. To become an MCT, you must first obtain your MCSE, MCSD, or MCDBA, then you must take a class at one of the Certified Technical Training Centers. You will also be required to prove your instructional ability. You can do this in various ways: by taking a skills-building or train-the-trainer class, by achieving certification as a trainer from any of several vendors, or by becoming a Certified Technical Trainer through CompTIA. Last of all, you will need to complete an MCT application. For more information on each of these certifications, visit Microsoft s website at How Do You Become Certified on Windows Server 2003? Attaining an MCSA or MCSE certification has always been a challenge. In the past, students have been able to acquire detailed exam information even most of the exam questions from online brain dumps and third-party cram books or software products. For the new exams, this is simply not the case. Microsoft has taken strong steps to protect the security and integrity of its certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with Windows XP, Server 2003, and related software products. The Windows Server 2003 certification programs are heavily weighted toward hands-on skills and experience. Microsoft has stated that nearly half of the core required exams content demands that the candidate have troubleshooting skills acquired through hands-on experience and working knowledge. Fortunately, if you are willing to dedicate the time and effort to learn Windows XP and Server 2003, you can prepare yourself well for the exams by using the proper tools. By working through this book, you can successfully meet the exam requirements to pass the Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure exam. This book is part of a complete series of MCSA and MCSE Study Guides, published by Sybex Inc., that together cover the core MCSA and MCSE operating system requirements, as well as the Design requirements needed to complete your MCSE track. Please visit the Sybex website at for complete program and product details.

23 xxii Introduction MCSE Exam Requirements Candidates for MCSE certification on Windows Server 2003 must pass seven exams, including one client operating system exam, four networking operating system exams, one design exam, and an elective. You must take one of the following client operating system exams: Installing, Configuring, and Administering Microsoft Windows 2000 Professional (70-210) Installing, Configuring, and Administering Microsoft Windows XP Professional (70-270) plus the following networking operating system exams: Managing and Maintaining a Microsoft Windows Server 2003 Environment (70-290) Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure (70-291) Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure (70-293) Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure (70-294) plus one of the following Design exams: Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure (70-297) Designing Security for a Microsoft Windows Server 2003 Network 2000 Server Technologies (70-298) plus one of a number of electives, including these: Implementing and Supporting Microsoft Systems Management Server 2.0 (70-086) Installing, Configuring, and Administering Microsoft Internet Security and Acceleration (ISA) Server 2000, Enterprise Edition (70-227) Installing, Configuring, and Administering Microsoft SQL Server 2000 Enterprise Edition (70-228) Designing and Implementing Databases with Microsoft SQL Server 2000 Enterprise Edition (70-229) Implementing and Managing Microsoft Exchange Server 2003 (70-284) Implementing and Administering Security in a Microsoft Windows Server 2003 Network (70-299) The Design exam not taken as a requirement Also, if you are an MCSE on Windows 2000, you can take two Upgrade exams: Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Windows 2000 (70-297) Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Windows 2000 (70-298) In addition, if you are an MCSE in Windows NT, you do not have to take the client requirement, but you do have to take the networking operating system, design, and an elective exam.

24 Introduction xxiii Windows 2000 and Windows 2003 Certification Microsoft recently announced that it will distinguish between Windows 2000 and Windows Server 2003 certifications. Those who have their MCSA or MCSE certification in Windows 2000 will be referred to as certified on Windows Those who obtained their MCSA or MCSE in the Windows Server 2003 will be referred to as certified on Windows Server If you are certified in Windows 2000, you can take either one Upgrade exam (for MCSA) or two Upgrade exams (for MCSE) to obtain your certification on Windows Microsoft also introduced a more clear distinction between the MCSA and MCSE certifications by more sharply focusing each certification. In the new Windows 2003 track, the objectives covered by the MCSA exams relate primarily to administrative tasks. The exams that relate specifically to the MCSE, however, deal mostly with design-level concepts. So, MCSA job tasks are considered to be more hands-on, while the MCSE job tasks involve more strategic concerns of design and planning. The Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Exam The Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure exam covers concepts and skills related to Windows Server 2003 Active Directory infrastructure deployment and support. It emphasizes the following elements: Creating the conceptual design by gathering and analyzing business and technical requirements Creating the logical design for an Active Directory infrastructure Creating the logical design for a network services infrastructure Creating the physical design for an Active Directory and network infrastructure This exam is quite specific regarding Windows Server 2003 Active Directory requirements and network services required to support Active Directory. It can be particular about how the network infrastructure is implemented to support Active Directory so you should be very familiar with the options available. Careful study of this book, along with hands-on experience, will help you prepare for this exam. Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft s sole discretion. Please visit Microsoft s Training and Certification website ( for the most current listing of exam objectives.

25 xxiv Introduction Types of Exam Questions In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its Windows XP and Server 2003 exams on real experience and handson proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says a certification candidate should have at least six months of hands-on experience. Microsoft will regularly add and remove questions from the exams. This is called item seeding. It is part of the effort to make it more difficult for individuals to merely memorize exam questions that were passed along by previous test-takers. Microsoft will accomplish its goal of protecting the exams integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, and adding new exam elements. Exam questions may be in a variety of formats: Depending on which exam you take, you ll see multiple-choice questions as well as select-and-place and prioritize-a-list questions. Simulations and Case Study based formats are included as well. Let s take a look at the types of exam questions and examine the adaptive testing technique so you ll be prepared for all of the possibilities. For more information on the various exam question types, go to Case Study Based Questions Case Study based questions first appeared in the MCSD program and are prominent in the design-focused exams, including the Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure exam. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for Case Study based questions has a number of buttons, each of which contain information about the scenario. Multiple-Choice Questions Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers, of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.

26 Introduction xxv Select-and-Place Questions Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network, as shown in the following graphic taken from the select-and-place demo downloaded from Microsoft s website. A typical diagram will show computers and other components next to boxes that contain the text Place here. The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all of the labels correctly. No credit is given for the question if you correctly label only some of the boxes. In another select-and-place problem you might be asked to put a series of steps in order by dragging items from boxes on the left to boxes on the right. One other type requires you to drag an item from the left and place it under an item in a column on the right. Simulations Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario.

27 xxvi Introduction The simulated interfaces look nearly identical to what you see in the actual product, as shown in this example. Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft: Do not change any simulation settings that don t pertain to the solution directly. When related information has not been provided, assume that the default settings are used. Make sure that your entries are spelled correctly. Close all the simulation application windows after completing the set of tasks in the simulation. The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested. Tips For Taking the Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Exam Here are some general tips for achieving success on your certification exam: Arrive early at the exam center so that you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information.

28 Introduction xxvii Exam Question Development Microsoft follows an exam-development process consisting of eight mandatory phases. The process takes an average of seven months and involves more than 150 specific steps. The MCP exam development consists of the following phases: Phase 1: Job Analysis Phase 1 is an analysis of all the tasks that make up a specific job function, based on tasks performed by people who are currently performing that job function. This phase also identifies the knowledge, skills, and abilities that relate specifically to the performance area being certified. Phase 2: Objective Domain Definition The results of the job analysis phase provide the framework used to develop objectives. Development of objectives involves translating the jobfunction tasks into a comprehensive package of specific and measurable knowledge, skills, and abilities. The resulting list of objectives the objective domain is the basis for the development of both the certification exams and the training materials. Phase 3: Blueprint Survey The final objective domain is transformed into a blueprint survey in which contributors are asked to rate each objective. These contributors may be MCP candidates, appropriately skilled exam-development volunteers, or Microsoft employees. Based on the contributors input, the objectives are prioritized and weighted. The actual exam items are written according to the prioritized objectives. Contributors are queried about how they spend their time on the job. If a contributor doesn t spend an adequate amount of time actually performing the specified job function, his or her data is eliminated from the analysis. The blueprint survey phase helps determine which objectives to measure, as well as the appropriate number and types of items to include on the exam. Phase 4: Item Development A pool of items is developed to measure the blueprinted objective domain. The number and types of items to be written are based on the results of the blueprint survey. Phase 5: Alpha Review and Item Revision During this phase, a panel of technical and jobfunction experts reviews each item for technical accuracy. The panel then answers each item and reaches a consensus on all technical issues. Once the items have been verified as being technically accurate, they are edited to ensure that they are expressed in the clearest language possible. Phase 6: Beta Exam The reviewed and edited items are collected into beta exams. Based on the responses of all beta participants, Microsoft performs a statistical analysis to verify the validity of the exam items and to determine which items will be used in the certification exam. Once the analysis has been completed, the items are distributed into multiple parallel forms, or versions, of the final certification exam.

29 xxviii Introduction Phase 7: Item Selection and Cut-Score Setting The results of the beta exams are analyzed to determine which items will be included in the certification exam. This determination is based on many factors, including item difficulty and relevance. During this phase, a panel of job-function experts determines the cut score (minimum passing score) for the exams. The cut score differs from exam to exam because it is based on an item-by-item determination of the percentage of candidates who answered the item correctly and who would be expected to answer the item correctly. Phase 8: Live Exam In the final phase, the exams are given to candidates. MCP exams are administered by Prometric and Virtual University Enterprises (VUE). You will be presented with several case studies during the design exams. Each Case Study is actually a testlet. Make sure you answer all of the questions for the Case Study you are currently working on. If you move on to the next Case Study, you will no longer be able to return to the previous Case Study or any of the questions you had not answered. Read the questions carefully. Don t be tempted to jump to an early conclusion. Make sure you know exactly what the question is asking. For questions you re not sure about, use a process of elimination to get rid of the obviously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess. Exam Registration You may take the Microsoft exams at any of more than 1,000 Authorized Prometric Testing Centers (APTCs) and VUE Testing Centers around the world. For the location of a testing center near you, call Prometric at EXAM ( ), or call VUE at Outside the United States and Canada, contact your local Prometric or VUE registration center. Find out the number of the exam you want to take, and then register with the Prometric or VUE registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $125 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time. You may also register for your exams online at or

30 Introduction xxix When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from Prometric or VUE. Microsoft requires certification candidates to accept the terms of a Non-Disclosure Agreement before taking certification exams. Is This Book for You? If you want to acquire a solid foundation in designing a Windows Server 2003 Active Directory and network infrastructure and your goal is to prepare for the exam by learning how to design a functional Active Directory and network infrastructure, this book is for you. You ll find clear explanations of the fundamental concepts you need to grasp and plenty of help to achieve the high level of professional competency you need to succeed in your chosen field. If you want to become certified as an MCSE, this book is definitely for you. However, if you just want to attempt to pass the exam without really understanding how to design a Windows Server 2003 Active Directory and network infrastructure, this Study Guide is not for you. It is written for people who want to acquire hands-on skills and in-depth knowledge of Windows Server What s in the Book? What makes a Sybex Study Guide the book of choice for over 100,000 MCPs? We took into account not only what you need to know to pass the exam, but what you need to know to take what you ve learned and apply it in the real world. Each book contains the following: Objective-by-objective coverage of the topics you need to know Each chapter lists the objectives covered in that chapter. The topics covered in this Study Guide map directly to Microsoft s official exam objectives. Each exam objective is covered completely. Assessment Test Directly following this introduction is an Assessment Test that you should take. It is designed to help you determine how much you already know about designing a Windows Server 2003 Active Directory and network infrastructure. Each question is tied to a topic discussed in the book. Using the results of the Assessment Test, you can figure out the areas where you need to focus your study. Of course, we do recommend you read the entire book. Exam Essentials To highlight what you learn, you ll find a list of Exam Essentials toward the end of each chapter. The Exam Essentials section briefly highlights the topics that need your particular attention as you prepare for the exam.