Updating Systems Engineer Skills from Microsoft Windows 2000 to Windows Server 2003

Target Audience
This workshop provides students with the knowledge and new skills that they need to plan, implement, and maintain a Microsoft Windows Server 2003 networked environment. It is intended for expert Windows 2000 systems engineers who plan, implement, and support Windows 2000-based Microsoft Active Directory directory service networks.

Pre-Requisites
Before attending this workshop, students must have the following pre-requisites:A Microsoft Certified Systems Engineer (MCSE) on Windows 2000 certification, or equivalent knowledge and skills.A Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 certification, or equivalent knowledge and skills.Students can gain the prerequisite knowledge and skills by completing the following Microsoft Official Workshop:2209: Updating Systems Administrator Skills from Microsoft Windows 2000 to Windows Server 2003.

Purpose
After completing this workshop, students will be able to plan a Domain Name System (DNS) strategy for an enterprise organization; plan for an implementation of Active Directory and for Active Directory replication; implement Active Directory and DNS; troubleshoot Transmission Control Protocol/Internet Protocol (TCP/IP), name resolution, and Group Policy; plan and implement cross-forest trusts and new security options; use Group Policy in Windows Server 2003 to deploy and restrict software; use Group Policy in Windows Server 2003 to set advanced security settings; plan and implement secure Routing and Remote Access.

Course outline

1. Introduction to Performing Systems Engineer in Windows Server 2003
2. Planning a DNS Namespace Design
3. Planning Active Directory Deployment
4. Implementing DNS with Active Directory
5. Troubleshooting TCP/IP, Name Resolution, and Group Policy
6. Planning and Implementing Multiple Forests in Active Directory
7. Using Group Policy in Windows Server 2003 to Deploy and Restrict Software
8. Using Group Policy in Windows Server 2003 to Set Advanced Security Settings
9. Planning and Implementing Secure Routing and Remote Access

Module 1:Introduction to Performing Systems Engineer in Windows Server 2003

• This unit explains the systems engineer tasks that are new or different from those performed in Windows 2000 and introduces the scenarios and tools that will be used throughout the workshop.

• Describe, at a high level, the new features in Windows Server 2003 that pertain to the systems engineer job role.
  
• Use the lab environment and locate key resources that are used to complete the labs.
  

Module 2:Planning a DNS Namespace Design

• This unit shows students the new features of DNS in Windows Server 2003, focusing on planning issues regarding improving fault tolerance in DNS, ensuring DNS resolution across forests, planning for _MSDCS zone availability and security to DNS servers in a forest, and creating DNS zones securely and with the least administrative effort.

• Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.
  
• Determine when to use stub zones versus conditional forwarding.
  
• Ensure availability of the _MSDCS zone.
  
• Plan Active Directory partitions to replicate zone data when needed.
  
• Evaluate DNS zone security.
  

Module 3:Planning Active Directory Deployment

• This unit shows students new features of Active Directory in Windows Server 2003, focusing on planning issues.

• Evaluate the placement of global catalog servers.
  
• Plan optimal replication by exploiting the following replication enhancements:
  
• Linked value replication (LVR)
  
• Partial attribute set (PAS) replication
  
• Inter-Site Topology Generator (ISTG) improvements
  
• Evaluate forest and domain functionality (versioning) levels.
  

Module 4:Implementing DNS with Active Directory

• This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to implement Active Directory and DNS.

• Install Active Directory by using the advanced features of the Active Directory Installation Wizard.
  
• Install and configure DNS.
  
• Implement a conditional forwarder.
  
• Create stub zones.
  
• Ensure high availability on the _MSDCS subdomain.
  
• Create a DNS forward lookup zone.
  
• Raise domain and forest functionality.
  
• Create a new application directory partition.
  
• Set the replication scope of a new application directory partition.
  

Module 5:Troubleshooting TCP/IP, Name Resolution, and Group Policy

• This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to troubleshoot TCP/IP, name resolution, and Group Policy.

• Diagnose and resolve issues related to DNS services.
  
• Troubleshoot Group Policy.
  
• Diagnose and resolve issues related to client computer configuration.
  
• Troubleshoot network connectivity issues.
  

Module 6:Planning and Implementing Multiple Forests in Active Directory

• This unit asks students to plan and implement multiple forests in Active Directory by using the model of adding a new organization to an existing company. Students will implement cross-forest trust, manage user authentication, identify possible security concerns, and come to understand how to resolve naming conflicts between two forests.

• Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.
  
• Establish forest trusts.
  

Module 7:Using Group Policy in Windows Server 2003 to Deploy and Restrict Software

• This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 pertaining to Group Policy and to learn how they can use it to deploy and restrict software.

• List reasons for controlling a computer user's environment.
  
• Create a software restriction policy. Deploy software so that an application is completely installed at user logon.
  
• Use Windows Management Instrumentation (WMI) filters to restrict the application of Group Policy objects (GPOs).
  

Module 8:Using Group Policy in Windows Server 2003 to Set Advanced Security Settings

• This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use Group Policy to implement advanced security settings.

• Configure wireless network settings.
  
• Configure a user environment.
  
• Apply Encrypting File System (EFS) enhancements.
  

Module 9:Planning and Implementing Secure Routing and Remote Access

• This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use them in implementing Routing and Remote Access.

• Plan, implement, and maintain Routing and Remote Access.
  
• Create and implement an Internet Protocol Security (IPSec) policy.
  
• Configure IPSec by using Netsh.
  
• Set up IPSec policy monitoring.