MCTS Windows Server 2008 Active Directory Configuration Study Guide E-Book

William Panek

• Herausgeber: John Wiley & Sons
• Kategorie: Wissenschaft und neue Technologien
• Sprache: Englisch

Seitenzahl: 852

Veröffentlichungsjahr: 2012

Beschreibung

With Microsoft's release of Windows Server 2008 and a newgeneration of certification exams, IT administrators have morereason than ever to certify their expertise in the world's leadingserver software. Inside, find the full coverage you need to preparefor Exam 70-640: Windows Server 2008 Active Directory, Configuring,one of three specializations in the Microsoft Certified TechnologySpecialist (MCTS) certification track. You'll find full coverage ofall exam objectives, practical exercises, real-world scenarios,challenging review questions, and more. For Instructors: Teaching supplements are available forthis title.

Leseprobe

Contents

Introduction

Assessment Test

Chapter 1: Overview of Active Directory

The Industry before Active Directory

The Benefits of Active Directory

Understanding Active Directory’s Logical Structure

Understanding Active Directory Objects

Introducing Windows Server 2008 Server Roles

Introducing Identity and Access (IDA) in Windows Server 2008

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 2: Domain Name System (DNS)

Introducing DNS

Introducing DNS Database Zones

New Functionality in Windows Server 2008 DNS

Introducing DNS Record Types

Configuring DNS

Monitoring and Troubleshooting DNS

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 3: Active Directory Planning and Installation

Verifying the Filesystem

Verifying Network Connectivity

Understanding Domain and Forest Functionality

Planning the Domain Structure

Installing Active Directory

Verifying Active Directory Installation

Creating and Configuring Application Data Partitions

Configuring DNS Integration with Active Directory

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 4: Installing and Managing Trees and Forests

Reasons for Creating Multiple Domains

Creating Domain Trees and Forests

Demoting a Domain Controller

Managing Multiple Domains

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 5: Configuring Sites and Replication

Overview of Network Planning

Overview of Active Directory Replication and Sites

Implementing Sites and Subnets

Configuring Replication

Monitoring and Troubleshooting Active Directory Replication

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 6: Configuring Active Directory Server Roles

Understanding Server Manager

Configuring Active Directory Certificate Services

Understanding Active Directory Domain Services

Active Directory Federation Services

Active Directory Lightweight Directory Services

Active Directory Rights Management Services

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 7: Administering Active Directory

An Overview of OUs

Planning the OU Structure

Creating OUs

Managing OUs

Troubleshooting OUs

Creating and Managing Active Directory Objects

Publishing Active Directory Objects

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 8: Configuring Group Policy Objects

Introducing Group Policy

Planning a Group Policy Strategy

Implementing Group Policy

Managing Group Policy

Deploying Software through a GPO

Implementing Software Deployment

Configuring Software Deployment Settings

Troubleshooting Group Policies

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 9: Planning Security for Active Directory

Active Directory Security Overview

Implementing Active Directory Security

Using Group Policy for Security

Understanding Smart Card Authentication

Understanding Security Configuration and Analysis Tools

Implementing an Audit Policy

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Chapter 10: Active Directory Optimization and Reliability

Overview of Windows Server 2008 Performance Monitoring

Using Windows Server 2008 Performance Tools

Saving and Analyzing Data with Performance Logs and Alerts

Monitoring and Troubleshooting Active Directory Components

Backup and Recovery of Active Directory

Summary

Exam Essentials

Review Questions

Answers to Review Questions

Appendix A: About the Companion CD

Glossary

Index

Acquisitions Editor: Jeff Kellum

Development Editor: Stef Jones

Technical Editor: Rodney Fournier

Production Editor: Eric Charbonneau

Copy Editor: Rebecca Rider

Production Manager: Tim Tate

Vice President and Executive Group Publisher: Richard Swadley

Vice President and Executive Publisher: Joseph B. Wikert

Vice President and Publisher: Neil Edde

Media Project Supervisor: Laura Atkinson

Media Development Specialist: Josh Frank

Media Quality Assurance: Angie Denny

Book Designer: Judy Fung

Compositor: Craig Johnson, Happenstance Type-O-Rama

Proofreaders: Steve Johnson; Jen Larsen, Word One

Indexer: Nancy Guenther

Cover Designer: Ryan Sneed

Copyright ©2008 by Wiley Publishing, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-0-470-26167-5

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, [phone], fax [phone]. Requests to the Publisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc., 10475 Crosspoint Blvd., Indianapolis, IN 46256, [phone], fax [phone], or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Website is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Website may provide or recommendations it may make. Further, readers should be aware that Internet Websites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at [phone], outside the U.S. at [phone] or fax [phone].

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.

Library of Congress Cataloging-in-Publication Data is available from the publisher.

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Windows Server is a registered trademark of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book.

Dear Reader,

Thank you for choosing MCTS: Windows Server 2008 Active Directory Configuration Study Guide (70-640). This book is part of a family of premium quality Sybex books, all written by outstanding authors who combine practical experience with a gift for teaching.

Sybex was founded in 1976. More than thirty years later, we’re still committed to producing consistently exceptional books. With each of our titles we’re working hard to set a new standard for the industry. From the paper we print on, to the authors we work with, our goal is to bring you the best books available.

I hope you see all that reflected in these pages. I’d be very interested to hear your comments and get your feedback on how we’re doing. Feel free to let me know what you think about this or any other Sybex book by sending me an email at [email protected], or if you think you’ve found a technical error in this book, please visit http://sybex.custhelp.com. Customer feedback is critical to our efforts at Sybex.

Best regards,

Neil Edde

Vice President and Publisher

Sybex, an Imprint of Wiley

This book is dedicated to my wife, Crystal, and my two daughters, Alexandria and Paige. This book would not have been possible without their love and support.

—Will Panek

Acknowledgments

First and most important I would like to thank my wife, Crystal, and my two daughters, Alexandria and Paige. This book would not have been possible without their love, support, and understanding.

Thanks to my mother and all three of my brothers, Rick, Gary, and Bob. Special thanks to my father, Richard, for who without his extra help financially and his endless motivation, I would not have made it through college many, many, many years ago.

Thanks to my extended family, Bud, Diane (who we lost recently but will be with us forever), Gene, Jen, and Denise. Your love and support has helped make me the person I am today.

Thanks to my friend and business partner Tylor Wentworth for his friendship and laughter. He is always there whenever I need a smile. Thanks to all my friends down at the FD. The best group of brothers and sisters a firefighter could have.

Thanks to my Stellacon family, Jeremy, Jim, Lisa, Mike, Julie, Jesse, and Travis. All of your support over the years has made it fun to go to work everyday.

Thanks to James Chellis for giving me the opportunity to work with him on this project. It is an honor to have my name next to his on this book.

Thanks to Jeff Kellum for helping me through this process and always being there when I needed guidance. Thanks to Stef Jones for the endless hours of editing. It was a pleasure to work with her on this project. Thanks to Rodney Fournier (another geek like me) who is one of the best Tech Editors a writer could ask for, and to Eric Charbonneau for guiding me through to the finish line. Also, I would like to thank all the other editors and staff at Wiley who helped to make this book better. I feel fortunate to have been able to work with all of you.

Finally, I would like to thank one of the funniest and most knowledgeable individuals (even though he’s a Cisco guy) that I have ever had the pleasure to work with and call a friend, Todd Lammle. Without Todd’s help and guidance, this book would not have been possible.

—Will Panek

About the Authors

William Panek (MCP®, MCP+I®, MCSA®, MCSA® W/SECURITY & MESSAGING, MCSE – NT (3.51 & 4.0)®, MCSE – 2000 & 2003®, MCSE W/SECURITY & MESSAGING, MCDBA®, MCT®, MCTS® (Windows Server 2008 Active Directory: Configuration, Windows Server 2008 Applications Infrastructure: Configuration, Windows Server 2008 Network Infrastructure: Configuration, Microsoft Windows Vista: Configuration, SQL Server 2005), MCITP®, CCNA®, CHFI®).

After many successful years in the computer industry and a degree in computer programming, William Panek decided that he could better use his talents and his personality as an instructor. He started teaching for The Associates – instructing at such schools as Boston University, Clark University, and Globalnet, just to name a few. In 1998 William started Stellacon Corporation. Stellacon has become one of New England’s leading training companies. He brings years of real world expertise to the classroom and strives to ensure that each and every student has an understanding of the course material. William has helped thousands of students get certified over his 10 years of teaching experience.

William currently resides in New Hampshire with his wife and their two daughters. In his spare time he is a commercially rated helicopter pilot and volunteer fire fighter.

James Chellis, MCSE, has co-authored more than 30 IT certification titles in print. He is currently CEO of Comcourse, Inc., an online education provider.

Table of Exercises

Exercise 2.1

Installing and Configuring the DNS Service

Exercise 2.2

Configuring a Zone for Dynamic Update

Exercise 2.3

Creating a Delegated DNS Zone

Exercise 2.4

Manually Creating DNS RRs

Exercise 2.5

Simple DNS Testing

Exercise 2.6

Using the

nslookup

Command

Exercise 3.1

Viewing Disk Configuration

Exercise 3.2

Promoting a Domain Controller

Exercise 3.3

Viewing the Active Directory Event Log

Exercise 3.4

Joining a Computer to an Active Directory Domain

Exercise 3.5

Configuring DNS Integration with Active Directory

Exercise 4.1

Creating a New Subdomain

Exercise 4.2

Creating a New Domain Tree in the Forest

Exercise 4.3

Assigning Single-Master Operations

Exercise 4.4

Managing Trust Relationships

Exercise 4.5

Adding a UPN Suffix

Exercise 4.6

Managing GC Servers

Exercise 4.7

Managing Universal Group Membership Caching

Exercise 5.1

Creating Sites

Exercise 5.2

Creating Subnets

Exercise 5.3

Configuring Sites

Exercise 5.4

Creating Site Links and Site Link Bridges

Exercise 5.5

Moving Server Objects between Sites

Exercise 6.1

Installing Active Directory Certificate Services

Exercise 6.2

Configuring Certificate Autoenrollment

Exercise 6.3

Request a Certificate Using Your Web Browser

Exercise 6.4

Revoking a Certificate

Exercise 6.5

Backing Up the Certificate Authority Server

Exercise 6.6

Installing the AD FS

Exercise 6.7

Installing the AD LDS

Exercise 6.8

Configuring an AD LDS Instance

Exercise 6.9

Installing the AD RMS

Exercise 7.1

Creating an OU Structure

Exercise 7.2

Modifying OU Structure

Exercise 7.3

Using the Delegation of Control Wizard

Exercise 7.4

Delegating Custom Tasks

Exercise 7.5

Creating Active Directory Objects

Exercise 7.6

Managing Object Properties

Exercise 7.7

Moving Active Directory Objects

Exercise 7.8

Resetting an Existing Computer Account

Exercise 7.9

Creating and Publishing a Printer

Exercise 7.10

Creating and Publishing a Shared Folder

Exercise 7.11

Finding Objects in Active Directory

Exercise 8.1

Creating a Group Policy Object Using the GPMC

Exercise 8.2

Linking Existing GPOs to Active Directory

Exercise 8.3

Filtering Group Policy Using Security Groups

Exercise 8.4

Delegating Administrative Control of Group Policy

Exercise 8.5

Configuring Automatic Certificate Enrollment in Group Policy

Exercise 8.6

Configuring Folder Redirection in Group Policy

Exercise 8.7

Creating a Software Deployment Share

Exercise 8.8

Publishing and Assigning Applications Using Group Policy

Exercise 8.9

Applying Software Updates

Exercise 9.1

Creating and Managing Users and Groups

Exercise 9.2

Creating and Using User Templates

Exercise 9.3

Delegating Control of Active Directory Objects

Exercise 9.4

Applying Security Policies by Using Group Policy

Exercise 9.5

Installing a Certificate for a Smart Card Enrollment Station

Exercise 9.6

Setting Up a Smart Card for User Logon

Exercise 9.7

Configuring Group Policy to Require Smart Card Logon

Exercise 9.8

Using the Security Configuration And Analysis Utility

Exercise 9.9

Enabling Auditing of Active Directory Objects

Exercise 9.10

Enabling Auditing for a Specific OU

Exercise 9.11

Generating and Viewing Audit Logs

Exercise 10.1

Monitoring Domain Controller and Active Directory Performance with Windows Server 2008 Performance Monitor

Exercise 10.2

Backing Up Active Directory

Exercise 10.3

Restoring the System State and Active Directory

Introduction

Microsoft has recently changed its certification program to contain three primary series: Technology, Professional, and Architect. The Technology Series of certifications are intended to allow candidates to target specific technologies and are the basis for obtaining the Professional Series and Architect Series of certifications. The certifications contained within the Technology Series consist of one to three exams, focus on a specific technology, and do not include job-role skills. By contrast, the Professional Series of certifications focus on a job role and are not necessarily focused on a single technology, but rather a comprehensive set of skills for performing the job role being tested. The Architect Series of certifications offered by Microsoft are premier certifications that consist of passing a review board consisting of previously certified architects. To apply for the Architect Series of certifications, you must have a minimum of 10 years of industry experience.

When obtaining a Technology Series certification, you are recognized as a Microsoft Certified Technology Specialist (MCTS) on the specific technology or technologies that you have been tested on. The Professional Series certifications include Microsoft Certified IT Professional (MCITP) and Microsoft Certified Professional Developer (MCPD). Passing the review board for an Architect Series certification will allow you to become a Microsoft Certified Architect (MCA).

This book has been developed to give you the critical skills and knowledge you need to prepare for the exam requirement for obtaining the MCTS: Windows Server 2008 Active Directory, Configuring (Exam 70-640).

The Microsoft Certified Professional Program

Since the inception of its certification program, Microsoft has certified more than 2 million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certifications can help companies verify the skills of prospective employees and contractors.

Microsoft has developed its Microsoft Certified Professional (MCP) program to give you credentials that verify your ability to work with Microsoft products effectively and professionally. Several levels of certification are available based on specific suites of exams. Microsoft has recently created a new generation of certification programs:

Microsoft Certified Technology Specialist (MCTS) The MCTS can be considered the entry-level certification for the new generation of Microsoft certifications. The MCTS certification program targets specific technologies instead of specific job roles. You must take and pass one to three exams.

Microsoft Certified IT Professional (MCITP) The MCITP certification is a Professional Series certification that tests network and systems administrators on job roles, rather than only on a specific technology. The MCITP generally consists of passing one to three exams, in addition to obtaining an MCTS-level certification.

Microsoft Certified Professional Developer (MCPD) The MCPD certification is a Professional Series certification for application developers. Similar to the MCITP, the MCPD is focused on a job role rather than on a single technology. The MCPD generally consists of passing one to three exams, in addition to obtaining an MCTS-level certification.

Microsoft Certified Architect (MCA) The MCA is Microsoft’s premier certification series. Obtaining the MCA requires a minimum of 10 years of experience and requires the candidate to pass a review board consisting of peer architects.

How Do You Become Certified on Windows Server 2008 Active Directory?

Attaining a Microsoft certification has always been a challenge. In the past, students have been able to acquire detailed exam information—even most of the exam questions—from online “brain dumps” and third-party “cram” books or software products. For the new generation of exams, this is simply not the case.

Microsoft has taken strong steps to protect the security and integrity of its new certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with the technology being tested.

The new generations of Microsoft certification programs are heavily weighted toward hands-on skills and experience. It is recommended that candidates have troubleshooting skills acquired through hands-on experience and working knowledge.

Fortunately, if you are willing to dedicate the time and effort to learn Windows Server 2008 Active Directory, you can prepare yourself well for the exam by using the proper tools. By working through this book, you can successfully meet the exam requirements to pass the Windows Server 2008 Active Directory exam.

This book is part of a complete series of Microsoft certification Study Guides, published by Sybex Inc., that together cover the new MCTS, MCITP, MCPD exams, as well as the core MCSA and MCSE operating system requirements. Please visit the Sybex website at www.sybex.com for complete program and product details.

MCTS Exam Requirements

Candidates for MCTS certification on Windows Server 2008 Active Directory must pass one Windows Server 2008 Active Directory exam. Other MCTS certifications may require up to three exams. For a more detailed description of the Microsoft certification programs, including a list of all the exams, visit the Microsoft Learning Web site at www.microsoft.com/learning/mcp.

The Windows Server 2008 Active Directory, Configuring Exam

The Windows Server 2008 Active Directory exam covers concepts and skills related to installing, configuring, and managing Windows Server 2008 Active Directory. It emphasizes Active Directory support and administration.

This exam is quite specific regarding Windows Server 2008 Active Directory requirements and operational settings, and it can be particular about how administrative tasks are performed within Active Directory.

- - - - - - - - - -

Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft’s sole discretion. Please visit the Microsoft Learning Web site (www.microsoft.com/learning/mcp) for the most current listing of exam objectives.

- - - - - - - - - -

Types of Exam Questions

In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its newer certification exams on real experience and hands-on proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says that certification candidates should have hands-on experience before attempting to pass any certification exams.

- - - - - - - - - -

Microsoft will accomplish its goal of protecting the exams’ integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, limiting the number of questions delivered to an individual by using adaptive testing, and adding new exam elements.

- - - - - - - - - -

Exam questions may be in a variety of formats: Depending on which exam you take, you’ll see multiple-choice questions, as well as select-and-place and prioritize-a-list questions. Simulations and case study–based formats are included as well. You may also find yourself taking what’s called an adaptive format exam. Let’s take a look at the types of exam questions and examine the adaptive testing technique, so you’ll be prepared for all of the possibilities.

- - - - - - - - - -

The Microsoft Windows Server 2008 exams provided a detailed score breakdown. This is because of the various and complex question formats. Previously, each question focused on one objective. Recent exams, such as the Windows Server 2008 Active Directory exam, however, contain questions that may be tied to one or more objectives from one or more objective sets. Therefore, grading by objective is almost impossible. Also, Microsoft no longer offers a score. Now you will only be told if you pass or fail.

- - - - - - - - - -

Multiple-Choice Questions

Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers, of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.

Select-and-Place Questions

Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network, as shown in the following graphic taken from the select-and-place demo downloaded from Microsoft’s website.

A typical diagram will show computers and other components next to boxes that contain the text “Place here.” The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all of the labels correctly. No credit is given for the question if you correctly label only some of the boxes.

In another select-and-place problem you might be asked to put a series of steps in order, by dragging items from boxes on the left to boxes on the right, and placing them in the correct order. One other type requires that you drag an item from the left and place it under an item in a column on the right.

- - - - - - - - - -

For more information on the various exam question types, go to www.microsoft.com/learning/mcpexams/policies/innovations.asp.

- - - - - - - - - -

Simulations

Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario. The simulated interfaces look nearly identical to what you see in the actual product, as shown in this example:

Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft:

Do not change any simulation settings that don’t pertain to the solution directly.

When related information has not been provided, assume that the default settings are used.

Make sure that your entries are spelled correctly.

Close all the simulation application windows after completing the set of tasks in the simulation.

The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested.

Case Study–Based Questions

Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions has a number of tabs, each of which contains information about the scenario. At present, this type of question appears only in most of the Design exams.

- - - - - - - - - -

Microsoft will regularly add and remove questions from the exams. This is called item seeding. It is part of the effort to make it more difficult for individuals to merely memorize exam questions that were passed along by previous test-takers.

- - - - - - - - - -

Tips for Taking the MCTS: Windows Server 2008 Active Directory, Configuring Exam

Here are some general tips for achieving success on your certification exam:

Arrive early at the exam center so that you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information.

Read the questions carefully. Don’t be tempted to jump to an early conclusion. Make sure you know

exactly

what the question is asking.

Answer all questions. If you are unsure about a question, then mark the question for review and come back to the question at a later time.

On simulations, do not change settings that are not directly related to the question. Also, assume default settings if the question does not specify or imply which settings are used.

For questions you’re not sure about, use a process of elimination to get rid of the obviously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess.

Exam Registration

You may take the Microsoft exams at any of more than 1,000 Authorized Prometric Testing Centers (APTCs) around the world. For the location of a testing center near you, call Prometric at 800-755-EXAM (755-3926). Outside the United States and Canada, contact your local Prometric registration center.

Find out the number of the exam you want to take, and then register with the Prometric registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $125 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.

- - - - - - - - - -

You may also register for your exams online at www.prometric.com.

- - - - - - - - - -

When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from Prometric.

Microsoft requires certification candidates to accept the terms of a Non-Disclosure Agreement before taking certification exams.

Is This Book for You?

If you want to acquire a solid foundation in Windows Server 2008 Active Directory, and your goal is to prepare for the exam by learning how to use and manage the new operating system, this book is for you. You’ll find clear explanations of the fundamental concepts you need to grasp and plenty of help to achieve the high level of professional competency you need to succeed in your chosen field.

If you want to become certified as an MCTS, this book is definitely for you. However, if you just want to attempt to pass the exam without really understanding Windows Server 2008 Active Directory, this Study Guide is not for you. It is written for people who want to acquire hands-on skills and in-depth knowledge of Windows Server 2008 Active Directory.

What’s in the Book?

What makes a Sybex Study Guide the book of choice for hundreds of thousands of MCPs? We took into account not only what you need to know to pass the exam, but what you need to know to take what you’ve learned and apply it in the real world. Each book contains the following:

Objective-by-objective coverage of the topics you need to know Each chapter lists the objectives covered in that chapter.

- - - - - - - - - -

The topics covered in this Study Guide map directly to Microsoft’s official exam objectives. Each exam objective is covered completely.

- - - - - - - - - -

Assessment Test Directly following this introduction is an Assessment Test that you should take. It is designed to help you determine how much you already know about Windows Server 2008 Active Directory. Each question is tied to a topic discussed in the book. Using the results of the Assessment Test, you can figure out the areas where you need to focus your study. Of course, we do recommend you read the entire book.

Exam Essentials To highlight what you learn, you’ll find a list of Exam Essentials at the end of each chapter. The Exam Essentials section briefly highlights the topics that need your particular attention as you prepare for the exam.

Glossary Throughout each chapter, you will be introduced to important terms and concepts that you will need to know for the exam. These terms appear in italic within the chapters, and at the end of the book, a detailed Glossary gives definitions for these terms, as well as other general terms you should know.

Review questions, complete with detailed explanations Each chapter is followed by a set of Review Questions that test what you learned in the chapter. The questions are written with the exam in mind, meaning that they are designed to have the same look and feel as what you’ll see on the exam. Question types are just like the exam, including multiple choice, exhibits, and select-and-place.

Hands-on exercises In each chapter (with the exception of Chapter 1, which is more an introduction to Active Directory) you’ll find exercises designed to give you the important hands-on experience that is critical for your exam preparation. The exercises support the topics of the chapter, and they walk you through the steps necessary to perform a particular function.

Real World Scenarios Because reading a book isn’t enough for you to learn how to apply these topics in your everyday duties, we have provided Real World Scenarios in special sidebars. These explain when and why a particular solution would make sense, in a working environment you’d actually encounter.

Interactive CD Every Sybex Study Guide comes with a CD complete with additional questions, flashcards for use with an interactive device, and the book in electronic format. Details are in the following section.

What’s on the CD?

With this new member of our best-selling Study Guide series, we are including quite an array of training resources. The CD offers bonus exams and flashcards to help you study for the exam. We have also included the complete contents of the Study Guide in electronic form. The CD’s resources are described here:

The Sybex E-book for Windows Server 2008 Active Directory Many people like the convenience of being able to carry their whole Study Guide on a CD. They also like being able to search the text via computer to find specific information quickly and easily. For these reasons, the entire contents of this Study Guide are supplied on the CD, in PDF. We’ve also included Adobe Acrobat Reader, which provides the interface for the PDF contents as well as the search capabilities.

The Sybex Test Engine This is a collection of multiple-choice questions that will help you prepare for your exam. There are four sets of questions:

Two bonus exams designed to simulate the actual live exam.

All the questions from the Study Guide, presented in a test engine for your review. You can review questions by chapter, or you can take a random test.

The Assessment Test.

Here is a sample screen from the Sybex Test Engine:

Sybex Flashcards for PCs and Handheld Devices The “flashcard” style of question offers an effective way to quickly and efficiently test your understanding of the fundamental concepts covered in the exam. The Sybex Flashcards set consists of 100 questions presented in a special engine developed specifically for this Study Guide series. Here’s what the Sybex Flashcards interface looks like:

Because of the high demand for a product that will run on handheld devices, we have also developed, in conjunction with Land-J Technologies, a version of the flashcard questions that you can take with you on your Palm OS PDA (including the PalmPilot and Handspring’s Visor).

Hardware and Software Requirements

You should verify that your computer meets the minimum requirements for installing Windows Server 2008 as listed in Chapter 2, “Domain Name System.” We suggest that your computer meets or exceeds the recommended requirements for a more enjoyable experience.

The exercises in this book assume that your computer is configured in a specific manner. Your computer should have at least a 20GB drive that is configured with the minimum space requirements and partitions. Other exercises in this book assume that your computer is configured as follows:

20GB C: partition with the NTFS filesystem

Optional D: partition with the NTFS filesystem

15GB or more of free space

Of course, you can allocate more space to your partitions if it is available.

The first exercise in the book assumes that you have installed Windows Server 2008 and that your partitions have already been created and formatted as previously specified.

Contacts and Resources

To find out more about Microsoft Education and Certification materials and programs, to register with Prometric, or to obtain other useful certification information and additional study resources, check the following resources:

Microsoft Learning Home Page

www.microsoft.com/learning

This website provides information about the MCP program and exams. You can also order the latest Microsoft Roadmap to Education and Certification.

Microsoft TechNet Technical Information Network

www.microsoft.com/technet

800-344-2121

Use this website or phone number to contact support professionals and system administrators. Outside the United States and Canada, contact your local Microsoft subsidiary for information.

Prometric

www.prometric.com

800-755-3936

Contact Prometric to register to take an exam at any of more than 800 Prometric Testing Centers around the world.

MCP Magazine Online

www.mcpmag.com

Microsoft Certified Professional Magazine is a well-respected publication that focuses on Windows certification. This site hosts chats and discussion forums and tracks news related to the MCTS and MCITP program. Some of the services cost a fee, but they are well worth it.

WindowsITPro Magazine

www.windowsITPro.com

You can subscribe to this magazine or read free articles at the website. The study resource provides general information on Windows Vista, Server, and .NET Server.

Assessment Test

1. Which of the following operations is not supported by Active Directory?

A. Assigning applications to users

B. Assigning applications to computers

C. Publishing applications to users

D. Publishing applications to computers

2. Which of the following single master operations apply to the entire forest? (Choose all that apply.)

A. Schema Master

B. Domain Naming Master

C. RID Master

D. Infrastructure Master

3. Which of the following is not a valid Active Directory object?

A. User

B. Group

C. Organizational unit

D. Computer

E. None of the above

4. Which of the following pieces of information should you have before you begin the Active Directory Installation Wizard? (Choose all that apply.)

A. Active Directory domain name

B. Administrator password for the local computer

C. NetBIOS name for the server

D. DNS configuration information

5. Which of the following is not considered a security principal?

A. Users

B. Security groups

C. Distribution groups

D. Computers

6. Which of the following is a valid role for a Windows Server 2008 computer?

A. Stand-alone server

B. Member server

C. Domain controller

D. All of the above

7. Trust relationships can be configured as which of the following? (Choose all that apply.)

A. One-way and transitive

B. Two-way and transitive

C. One-way and nontransitive

D. Two-way and nontransitive

8. Which of the following should play the least significant role in planning an OU structure?

A. Network infrastructure

B. Domain organization

C. Delegation of permissions

D. Group Policy settings

9. Which of the following file extensions is used primarily for Windows Installer setup programs?

A..msi

B..mst

C..zap

D..aas

10. How can the Windows NT 4 file and printer resources be made available from within Active Directory?