Updating Systems Engineer Skills from Microsoft Windows 2000 to Windows Server 2003

Introduction
This three-day, instructor-led workshop provides studentswith the knowledge and new skills that they need to plan, implement, andmaintain a Microsoft Windows Server 2003 networked environment.
This discovery-based workshop consists primarilyof labs that provide hands-on experience focused exclusively on the skills andobjectives that align with Exam 70-296 :Planning, Implementing, and Maintaining a Microsoft Windows Server 2003Environment for an MCSE Certified on Microsoft Windows® 2000.

Audience
This workshop is intended for expert Windows 2000systems engineers who plan, implement, and support Windows 2000-based MicrosoftActive Directory® directory service networks. The workshop assumes extensive,day-to-day, practical, hands-on experience using Windows 2000 and a preferencefor learning by doing and discovering in a non-prescriptive lab environment.For a more traditional learning experience, see Course 2297 :Planning, Implementing, Managing and Maintaining a Microsoft Windows Server2003 Environment for an MCSE on Windows 2000.

At Workshop Completion
After completing this workshop, students will beable to:

Plan a Domain Name System (DNS) strategy for an enterprise organization.

Plan for an implementation of Active Directory and for Active Directory replication.

Implement Active Directory and DNS.

Troubleshoot Transmission Control Protocol/Internet Protocol (TCP/IP), name resolution, and Group Policy.

Plan and implement cross-forest trusts and new security options.

Use Group Policy in Windows Server 2003 to deploy and restrict software.

Use Group Policy in Windows Server 2003 to set advanced security settings.

Plan and implement secure Routing and Remote Access.

Prerequisites
Before attending this workshop, students musthave:

A Microsoft Certified Systems Engineer (MCSE) on Windows 2000 certification, or equivalent knowledge and skills.

A Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 certification, or equivalent knowledge and skills.
Students can gain the prerequisite knowledge andskills by completing the following Microsoft Official Workshop:

Workshop 2209 : Updating Systems Administrator Skills from Microsoft Windows 2000 to Windows Server 2003

Microsoft Certified Professional Exams
This workshop will help the student prepare forthe following Microsoft Certified Professional exam:

Exam 70-296 : Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Microsoft Windows 2000

Workshop Materials
The student kit includes a workbook and othernecessary materials for this class. This software is provided in the studentkit:

Evaluation copy of Windows Server 2003, Enterprise Edition (for educational use only)

Workshop Outline
Unit1: Introduction to Performing Systems Engineer Skills in Windows Server 2003
This unit explains the systems engineer tasks thatare new or different from those performed in Windows 2000 and introduces thescenarios and tools that will be used throughout the workshop.
UnitObjectives
After completing this unit, students will be ableto:

Describe, at a high level, the new features in Windows Server 2003 that pertain to the systems engineer job role.

Use the lab environment and locate key resources that are used to complete the labs.

Unit2: Planning a DNS Namespace Design
This unit shows students the new features of DNSin Windows Server 2003, focusing on planning issues regarding improving faulttolerance in DNS, ensuring DNS resolution across forests, planning for _MSDCSzone availability and security to DNS servers in a forest, and creating DNSzones securely and with the least administrative effort.
UnitObjectives
After completing this unit, students will be ableto:

Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.

Determine when to use stub zones versus conditional forwarding.

Ensure availability of the _MSDCS zone.

Plan Active Directory partitions to replicate zone data when needed.

Evaluate DNS zone security.

Unit3: Planning Active Directory Deployment
This unit shows students new features of Active Directoryin Windows Server 2003, focusing on planning issues.
UnitObjectives
After completing this unit, students will be ableto:

Evaluate the placement of global catalog servers.

Plan optimal replication by exploiting the following replication enhancements:

Linked value replication (LVR)

Partial attribute set (PAS) replication

Inter-Site Topology Generator (ISTG) improvements

Evaluate forest and domain functionality (versioning) levels.

Unit4: Implementing DNS with Active Directory
This unit gives students a hands-on opportunity toexperience new features of Windows Server 2003 and learn how to use them toimplement Active Directory and DNS.
UnitObjectives
After completing this unit, students will be ableto:

Install Active Directory by using the advanced features of the Active Directory Installation Wizard.

Install and configure DNS.

Implement a conditional forwarder.

Create stub zones.

Ensure high availability on the _MSDCS subdomain.

Create a DNS forward lookup zone.

Raise domain and forest functionality.

Create a new application directory partition.

Set the replication scope of a new application directory partition.

Unit5: Troubleshooting TCP/IP, Name Resolution, and Group Policy
This unit gives students a hands-on opportunity toexperience new features of Windows Server 2003 and learn how to use them totroubleshoot TCP/IP, name resolution, and Group Policy.
UnitObjectives
After completing this unit, students will be ableto:

Diagnose and resolve issues related to DNS services.

Troubleshoot Group Policy.

Diagnose and resolve issues related to client computer configuration.

Troubleshoot network connectivity issues.

Unit6: Planning and Implementing Multiple Forests in Active Directory
This unit asks students to plan and implementmultiple forests in Active Directory by using the model of adding a neworganization to an existing company. Students will implement cross-foresttrust, manage user authentication, identify possible security concerns, andcome to understand how to resolve naming conflicts between two forests.
UnitObjectives
After completing this unit, students will be ableto:

Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.

Establish forest trusts.

Unit7: Using Group Policy in Windows Server 2003 to Deploy and Restrict Software
This unit gives students a hands-on opportunity toexperience new features of Windows Server 2003 pertaining to Group Policy andto learn how they can use it to deploy and restrict software.
UnitObjectives
After completing this unit, students will be ableto:

List reasons for controlling a computer user's environment.

Create a software restriction policy.

Deploy software so that an application is completely installed at user logon.

Use Windows Management Instrumentation (WMI) filters to restrict the application of Group Policy objects (GPOs).

Unit8: Using Group Policy in Windows Server 2003 to Set Advanced Security Settings
This unit gives students a hands-on opportunity toexperience new features of Windows Server 2003 and to learn how to use GroupPolicy to implement advanced security settings.
UnitObjectives
After completing this unit, students will be ableto:

Configure wireless network settings.

Configure a user environment.

Apply Encrypting File System (EFS) enhancements.

Unit9: Planning and Implementing Secure Routing and Remote Access
This unit gives students a hands-on opportunity toexperience new features of Windows Server 2003 and to learn how to use them inimplementing Routing and Remote Access.
UnitObjectives
After completing this unit, students will be ableto:

Plan, implement, and maintain Routing and Remote Access.

Create and implement an Internet Protocol Security (IPSec) policy.

Configure IPSec by using Netsh.

Set up IPSec policy monitoring.