Updating Systems Administrator and Systems Engineer Skills from Microsoft Windows 2000 to Windows Server 2003

Target Audience
This workshop is intended for expert Windows 2000 systems engineers who plan, implement, and support Windows 2000-based networks running Microsoft Active Directory directory service, and who need to quickly leverage their skills in a Windows Server 2003 environment. The workshop assumes extensive, day-to-day practical, hands-on experience using Windows 2000 and a preference for learning by doing and discovering in a non-prescriptive lab environment. For a more traditional learning experience, see Course 2297: Planning, Implementing, Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE on Windows 2000

Pre-Requisites
Before attending this workshop, students must have:An MCSE on Windows 2000 certification, or equivalent knowledge and skills.Day-to-day experience planning, implementing, managing and maintaining Windows 2000-based networks.

Purpose
This workshop provides students with the knowledge and new skills that they need to plan, implement, manage, and maintain a Microsoft Windows Server 2003 networked environment.This discovery-based workshop consists primarily of labs that provide hands-on experience focused exclusively on the skills and objectives that align with Exam 70-292: Managing and Maintaining a Microsoft Windows Server 2003 Environment for an MCSA Certified on Windows 2000, and Exam 70-296: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Windows 2000.

Course outline

1. Introduction to Systems Administration in Windows Server 2003
2. Managing Users, Computers, and Groups
3. Using the GPMC to Manage Group Policy
4. Managing Resources and Security
5. Managing DNS
6. Managing Servers
7. Managing Terminal Services
8. Managing IIS 6.0 Web Services
9. Maintaining Software by Using Software Update Services
10. Managing Disaster Recovery
11. Planning a DNS Namespace Design
12. Planning Active Directory Deployment
13. Implementing DNS with Active Directory
14. Troubleshooting TCP/IP, Name Resolution, and Group Policy
15. Planning and Implementing Multiple Forests in Active Directory
16. Using Group Policy in Windows Server 2003 to Deploy and Restrict Software
17. Using Group Policy in Windows Server 2003 to Set Advanced Security Settings
18. Planning and Implementing Secure Routing and Remote Access

Module 1:Introduction to Systems Administration in Windows Server 2003

• Perform systems administration tasks in a Windows Server 2003 environment
• Introduction to the scenarios and tools that will be used throughout the workshop.

• Identify the products in the Windows Server 2003 family.
  
• Describe the tools and resources available to perform tasks throughout the workshop.
  

Module 2:Managing Users, Computers, and Groups

• Manage users, computers, and groups in an Active Directory directory service environment.

• Create user accounts by using CSVDE.
  
• Create user accounts by using the dsadd command.
  
• Modify the properties of multiple accounts.
  
• Create computer accounts by using the dsadd command.
  
• Create groups by using the dsadd command.
  
• Add members to a group by using the dsmod command.
  
• Copy the properties from an existing account when creating a new account.
  
• Find Active Directory objects.
  
• Move an Active Directory object by using the drag and drop technique of management in Active Directory Users and Computers.
  
• Reset computer accounts.
  
• Describe the effect of resetting passwords in Windows Server 2003.
  
• Determine the effective permissions on an Active Directory object.
  

Module 3:Using the GPMC to Manage Group Policy

• Orientation of Windows Server 2003
• Use the Group Policy Management Console (GPMC) to manage Group Policy

• Implement Group Policy by using the GPMC.
  
• Manage Group Policy Objects (GPO) by using the GPMC.
  
• Use Group Policy Results to troubleshoot Group Policy-related issues.
  
• Use Group Policy Modeling to experiment with possible Group Policy configurations .
  

Module 4:Managing Resources and Security

• Manage resources and security by using Windows Explorer
• Group Policy management tools
• Security Configuration and Analysis tool

• Determine the effective NTFS permissions for files and folders.
  
• Change the owner for an existing file or folder.
  
• Create custom security templates.
  
• Apply security templates by using Group Policy.
  
• Configure NTFS permissions by using security templates.
  
• Audit security settings by using Security Configuration and Analysis.
  

Module 5:Managing DNS

• False

• Install DNS by using the Manage Your Server tool.
  
• Create forward lookup zones.
  
• Create reverse lookup zones.
  
• Configure DNS conditional forwarding.
  
• Configure DNS zone options, zones for secure dynamic update and Active Directory integrated zones
  
• Create DNS stub zones.
  

Module 6:Managing Servers

• False

• Create desktop shortcuts that run the Run as command.
  
• Connect to a remote server by using MMC snap-in tools.
  
• Connect to a remote server by using the Remote Desktop Connection utility.
  
• Determine the best tool to use for remote administration in specific situation.
  
• Configure client connection speed for the Remote Desktop Connection utility.
  
• Configure auto reconnect for the Remote Desktop Connection utility.
  

Module 7:Managing Terminal Services

• False

• Install Terminal Services.
  
• Install a Terminal Services Licensing server.
  
• Configure Terminal Services
  
• Manage user sessions by using Terminal Services Manager.
  
• Diagnose and resolve issues related to Terminal Services security.
  

Module 8:Managing IIS 6.0 Web Services

• Manage and maintain the IIS service on Windows Server 2003.
• Configure the IIS service

• Install IIS 6.0.
  
• Configure authentication.
  
• Install ASP.NET.
  
• Allow ASP.NET in Web service extensions.
  
• Manage ASP.NET configuration files.
  
• Implement Web applications.
  
• Implement application pooling.
  
• Manage the IIS 6.0 metabase.
  
• Manage an IIS server in a remote location.
  
• Monitor and optimize IIS 6.0.
  

Module 9:Maintaining Software by Using Software Update Services

• False

• Install and configure SUS on a server.
  
• Configure automatic updates.
  
• Use Group Policy to configure SUS clients.
  
• Manage a software update infrastructure.
  
• Back up and restore an SUS configuration.
  
• Test an SUS implementation.
  

Module 10:Managing Disaster Recovery

• Practice troubleshooting and repairing a system
• Automatic System Recovery (ASR)

• Use ASR to back up and restore a server.
  
• Restore data from shadow copies.
  
• Roll back to a previous version of a device driver.
  
• Configure security for backup operations.
  
• Troubleshoot problems associated with restoring data.
  

Module 11:Planning a DNS Namespace Design

• Improving fault tolerance in DNS
• Planning for _MSDCS zone availability and security to DNS servers in a forest
• Creating DNS zones

• Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.
  
• Determine when to use stub zones versus conditional forwarding.
  
• Ensure availability of the _MSDCS zone.
  
• Plan Active Directory partitions to replicate zone data when needed.
  
• Evaluate DNS zone security.
  

Module 12:Planning Active Directory Deployment

• New features of Active Directory in Windows Server 2003

• Evaluate the placement of global catalog servers.
  
• Plan optimal replication by exploiting replication enhancements
  
• Inter-Site Topology Generator (ISTG) improvements.
  
• Evaluate forest and domain functionality (versioning) levels.
  

Module 13:Implementing DNS with Active Directory

• False

• Install Active Directory by using Active Directory Installation Wizard.
  
• Install and configure DNS.
  
• Create stub zones.
  
• Ensure high availability on the _MSDCS subdomain.
  
• Create a DNS forward lookup zone.
  
• Raise domain and forest functionality.
  
• Create a new application directory partition.
  
• Set the replication scope of a new application directory partition.
  

Module 14:Troubleshooting TCP/IP, Name Resolution, and Group Policy

• Use the new features of Windows Server 2003 to troubleshoot TCP/IP, name resolution, and Group Policy.

• Diagnose and resolve issues related to DNS services.
  
• Troubleshoot Group Policy.
  
• Diagnose and resolve issues related to client computer configuration.
  
• Troubleshoot network connectivity issues.
  

Module 15:Planning and Implementing Multiple Forests in Active Directory

• Plan and implement multiple forests in Active Directory
• Implement cross-forest trust
• Manage user authentication
• Identify possible security concerns
• Resolve naming conflicts between two forests

• Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.
  
• Establish forest trusts.
  

Module 16:Using Group Policy in Windows Server 2003 to Deploy and Restrict Software

• Use the new features of Windows Server 2003 to deploy and restrict software

• Control a computer user's environment.
  
• Create a software restriction policy.
  
• Use Windows Management Instrumentation (WMI) filters to restrict the application of Group Policy objects (GPOs).
  

Module 17:Using Group Policy in Windows Server 2003 to Set Advanced Security Settings

• Use the new features of Windows Server 2003 to implement advanced security settings

• Configure wireless network settings.
  
• Configure a user environment.
  
• Apply Encrypting File System (EFS) enhancements.
  

Module 18:Planning and Implementing Secure Routing and Remote Access

• Use the new features of Windows Server 2003 to implement Routing and Remote Access

• Plan, implement, and maintain Routing and Remote Access.
  
• Create and implement an Internet Protocol (IP) Security (IPSec) policy.
  
• Configure IPSec by using Netsh.
  
• Set up IPSec policy monitoring.