Planning, Implementing, Managing and Maintaining a MS Windows Server 2003 Environment for an MCSE on Windows 2000

Introduction
This five-day, instructor-led course provides studentswith the knowledge and new skills that they need to plan, implement, manage,and maintain a Microsoft Windows Server 2003 networked environment.
This course focuses on the changes from MicrosoftWindows® 2000 to Windows Server 2003, and is intended for systems engineers whowant to upgrade their skills from Windows 2000 to Windows Server 2003.

Audience
This course is intended for Microsoft CertifiedSystems Engineers (MCSEs) certified on Windows 2000 who have experienceplanning, implementing, and supporting a Windows 2000-based Microsoft ActiveDirectory® directory service network, and who need to learn how to leveragethose skills in a Windows Server 2003 environment.

AtCourse Completion
After completing this course, students will beable to:

Identify the systems administration and systems engineer tasks in Windows Server 2003 that are new or different from the tasks performed in Windows 2000.

Manage user, group, and computer accounts in a Windows Server 2003 Active Directory-based environment.

Manage access to shared resources.

Manage and maintain the server environment in a Windows Server 2003 environment.

Manage the application server environment in a Windows Server 2003 environment.

Manage disaster recovery in a Windows Server 2003 environment.

Use Software Update Services to maintain software in a Windows Server 2003 environment.

Plan, implement, optimize, and troubleshoot name resolution in a Windows Server 2003 environment.

Plan a public key infrastructure (PKI) and an Internet Protocol Security (IPSec) deployment in a Windows Server 2003 environment.

Plan and troubleshoot local and remote network access in a Windows Server 2003 environment.

Implement Active Directory in a Windows Server 2003 environment.

Plan the placement of domain controllers, global catalog servers, and operations masters in a Windows Server 2003 environment.

Plan, implement, manage, and troubleshoot Group Policy in a Windows Server 2003 environment.

Prerequisites
Before attending this course, students must have:

An MCSE on Windows 2000 certification, or equivalent knowledge and skills.

MicrosoftCertified Professional Exams
This course will help the student prepare for thefollowing Microsoft Certified Professional exams:

Exam 70-292 : Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Microsoft Windows 2000

Exam 70-296 : Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Microsoft Windows 2000

CourseMaterials
The student kit includes a workbook and othernecessary materials for this class, such as this software:

Evaluation copy of Windows Server 2003, Enterprise Edition (for educational use only)

CourseOutline
Module1: Managing Users, Groups, and Computers
This module describes the changes in managinguser, group, and computer accounts in a networked environment from Windows 2000to Windows Server 2003.
Lessons

The Windows Server 2003 Environment

Installing the Administrative Tools

Creating and Managing User Accounts

Creating and Managing Group Accounts

Creating and Managing Computer Accounts
LabA: Managing User and Computer Accounts
LabB: Creating and Managing Groups
Aftercompleting this module, students will be able to:

Understand the differences between the Windows Server 2003 editions.

Describe and install the Windows Server 2003 administrative tools.

Create and manage user, group, and computer accounts in a Windows Server 2003 Active Directory-based environment.

Module2: Managing Access to Resources
This module describes changes in managing accessto resources in a Windows Server 2003 environment. It describes changes in howto manage shared folder permissions and changes in NTFS (NT file system)permissions. It also explains how to secure a server by using MicrosoftBaseline Security Analyzer.
Lessons

Managing Shared Folder Permissions

Managing NTFS Permissions

Securing the Server
LabA: Managing Access to Resources
Aftercompleting this module, students will be able to:

Manage shared folder permissions.

Discuss changes to NTFS permissions.

Determine effective permissions.

Secure the server.

Module3: Managing and Maintaining a Server Environment
This module describes the server management andmaintenance features that are changed from Windows 2000 or that are new to WindowsServer 2003.
Lessons

Configuring Remote Desktop to Administer a Server

Managing Remote Desktop Connections

Using Device Driver Rollback

Preparing Disks Using the DiskPart Tool

Managing Disk Properties
Lab A:Preparing to Administer a Server
LabB: Managing Disks
Aftercompleting this module, students will be able to:

Configure Remote Desktop to administer a server.

Manage Remote Desktop connections.

Use device driver rollback.

Prepare disks using the DiskPart tool.

Manage disk properties.

Module4: Managing an Application Server Environment
This module describes the methods used to installand configure Windows application servers in Windows Server 2003. Two commonapplication servers used in a Windows Server 2003 environment are InternetInformation Services (IIS) 6.0 and Terminal Services. This module describes howto install, configure, and manage IIS 6.0. It also describes how to configureTerminal Services by using Group Policy. Finally, it describes how to plan forhigh availability and scalability of network applications and services.
Lessons

Installing and Configuring Internet Information Services 6.0

Configuring Terminal Services with Group Policy

Planning for High Availability and Scalability
LabA: Managing an Application Server Environment
Aftercompleting this module, students will be able to:

Install and configure IIS 6.0.

Configure Terminal Services by using Group Policy.

Plan for high availability and scalability.

Module5: Managing Disaster Recovery
This module describes how to use Automated SystemRecovery (ASR) to back up system data and also to recover from a serverfailure. The module also explains how to configure and use shadow copies.
Lessons

Using Automated System Recovery

Using Shadow Copies
LabA: Managing Disaster Recovery
Aftercompleting this module, students will be able to:

Use Automated System Recovery (ASR) to back up and restore system data.

Use shadow copies.

Module6: Maintaining Software by Using Software Update Services
This module describes Microsoft Software UpdateServices, a tool for managing and distributing software updates that resolve knownsecurity vulnerabilities and other stability issues in the Windows 2000,Windows XP, and Windows Server 2003 operating systems. This module alsodescribes how to install the server and client computer components of SoftwareUpdate Services, and it provides necessary information about managing theSoftware Update Services infrastructure.
Lessons

Introduction to Software Update Services

Installing and Configuring Software Update Services

Managing a Software Update Services Infrastructure
LabA: Maintaining Software by Using Software Update Services
Aftercompleting this module, students will be able to:

Describe Software Update Services.

Install Software Update Services, and configure servers and client computers to use it.

Manage the Software Update Services infrastructure.

Module7: Planning, Implementing, Optimizing, and Troubleshooting Name Resolution
This module introduces and describes the newDomain Name System (DNS) features in Windows Server 2003. It explains how toplan and implement DNS in a Windows Server 2003 environment, as well as how totroubleshoot host name resolution. This module also describes how to plan forWindows Internet Name Service (WINS) replication in a Windows Server 2003environment.
Lessons

Understanding New DNS Features

Planning a DNS Implementation

Implementing DNS

Troubleshooting Host Name Resolution

Planning a WINS Replication Strategy
Lab A:Planning a DNS Configuration
Aftercompleting this module, students will be able to:

Describe the new DNS features.

Plan a DNS implementation.

Implement DNS.

Troubleshoot host name resolution.

Plan a WINS replication strategy.

Module8: Planning a PKI and an IPSec Deployment
This module describes how to plan a public keyinfrastructure (PKI) and an Internet Protocol Security (IPSec) deployment in aWindows Server 2003 environment. The module provides factual and conceptualinformation about a PKI and IPSec, as well as guidelines for planning for theirimplementation.
Lessons

Introduction to Public Key Infrastructure

Planning a Public Key Infrastructure

Understanding Default IPSec Policy Rules

Planning an IPSec Deployment
LabA: Planning a CA Hierarchy and an IPSec Deployment
Aftercompleting this module, students will be able to:

Describe a PKI.

Plan a PKI.

Explain IPSec default policies, rules, and settings.

Plan an IPSec deployment.

Module9: Planning and Troubleshooting Network Access
This module describes how to plan and troubleshootnetwork access in a Windows Server 2003 environment. The module describes andoffers guidelines for planning the numerous components of a network accessstrategy, including connection methods, authentication methods, and a remoteaccess policy strategy. This module also describes the tools and processes usedto troubleshoot network access problems.
Lessons

Selecting Network Access Connection Methods

Selecting Network Access Authentication Methods

Planning a Remote Access Policy Strategy

Troubleshooting Network Access
Lab A:Planning Network Access
Aftercompleting this module, students will be able to:

Select network access connection methods.

Select a network access authentication method.

Select a remote access policy strategy.

Troubleshoot network access problems.

Module10: Implementing Active Directory
This module introduces and describes the newActive Directory features, including forest and domain functional levels, foresttrusts, replication enhancements, and LDAP traffic signing. The moduledescribes how to install a domain controller in a Windows Server 2003environment. The module explains how to use several additional new ActiveDirectory features to perform various administrative tasks. Finally, the moduledescribes the types of trusts in Windows Server 2003 Active Directory, and howto configure each of these types of trusts.
Lessons

New Active Directory Features in Windows Server 2003

Installing Active Directory

Administering Windows Server 2003 by Using the New Active Directory Features

Configuring Trusts
LabA: Implementing Active Directory
Aftercompleting this module, students will be able to:

Describe the new features of Active Directory.

Install Active Directory.

Administer Windows Server 2003 by using the new Active Directory features.

Configure trusts.

Module11: Planning the Placement of Domain Controllers
This module describes how to plan the placement ofdomain controllers, global catalog servers, and operations masters in a WindowsServer 2003 environment. The module also explains how to enable a globalcatalog server and how to enable universal group membership caching. Finally,the module describes how to transfer and seize operations master roles.
Lessons

Planning the Placement of Domain Controllers and Global Catalog Servers

Planning the Placement of Operations Masters
Lab A:Planning the Placement of Domain Controllers
Aftercompleting this module, students will be able to:

Plan the placement of domain controllers and global catalog servers.

Plan the placement of operations masters.

Module12: Planning, Implementing, Managing, and Troubleshooting Group Policy
This module describes the changes in using GroupPolicy in a Windows Server 2003 environment. The module describes how to plan aGroup Policy strategy, how to configure security by using Group Policy, how tomanage software by using Group Policy, and how to troubleshoot Group Policy.
Lessons

Planning a Group Policy Strategy

Configuring Security by Using Group Policy

Managing Software by Using Group Policy

Troubleshooting Group Policy
LabA: Planning, Implementing, Managing, and Troubleshooting Group Policy
Aftercompleting this module, students will be able to:

Plan a Group Policy strategy.

Configure security by using Group Policy.

Manage software by using Group Policy.

Troubleshoot Group Policy.