Learn, prepare, and practice for exam success Master every topic on Microsoft’s new MCTS 70-640 exam. Assess your knowledge and focus your learning. Get the practical workplace knowledge you need! CD Includes Complete Sample Exam Start-to-finish MCTS 70-640 preparation from top Microsoft technology consultant, trainer, and author Don Poulton! Master every MCTS 70-640 topic! DNS and domain installation, including zones AD Domain Services installation Upgrading older domains Server settings and replication Global catalogs and operations masters Site management and data replication AD LDS, AD FS, and AD RMS roles Read-Only Domain Controller deployment User/group account management Trust relationships, including troubleshooting Group Policy Object configuration, usage, and hierarchies Software deployment via group policies Account and audit policy management Monitoring and maintenance Certificate Services installation, configuration, and management Test your knowledge, build your confidence, and succeed! Packed with visuals to help you learn fast Dozens of troubleshooting scenarios Real-world MCTS 70-640 prep advice from experts Easy-to-use exam preparation task lists From Don Poulton, professional Microsoft technology consultant, IT training expert, and best-selling exam guide author Don Poulton (A+, Network+, Security+, MCSA, MCSE) is an independent consultant who has been involved with computers since the days of 80-column punch cards. He has consulted extensively with training providers, preparing training and exam prep materials for Windows technologies. He has written or contributed to several Que titles, including MCTS 70-680 Cert Guide: Microsoft® Windows 7, Configuring; Security+ Lab Manual; and MCSA/MCSE 70-299 Exam Cram 2. CD Includes Complete Sample Exam Detailed explanations of correct and incorrect answers Multiple test modes Random questions and order of answers Shelving Category: Certification/Microsoft
Author(s): Don Poulton
Edition: 1
Publisher: Que
Year: 2011
Language: English
Pages: 894
Table of Contents......Page 5
Goals and Methods......Page 24
How This Book Is Organized......Page 25
Learning Styles......Page 28
Study Tips......Page 29
Exam Prep Tips......Page 31
Microsoft 70-640 Exam Topics......Page 33
X.500......Page 38
LDAP......Page 39
Naming Standards of X.500 and LDAP......Page 40
Namespaces......Page 43
Objects......Page 44
Global Catalogs......Page 45
Partitions......Page 46
Domains......Page 47
Forests......Page 48
Organizational Units......Page 50
Sites......Page 51
Global Catalog Servers......Page 52
Operations Masters......Page 53
New Features of Active Directory in Windows Server 2008......Page 54
Server Manager......Page 56
Windows Server 2008 R2......Page 58
Summary......Page 61
“Do I Know This Already?” Quiz......Page 64
The Hierarchical Nature of DNS......Page 69
Installing DNS on Windows Server 2008 R2......Page 70
Configuring DNS Zones......Page 72
DNS Zone Types......Page 73
DNS Name Server Roles......Page 76
Creating DNS Zones......Page 78
DNS Resource Records......Page 82
Configuring DNS Zone Properties......Page 83
Command-Line DNS Server Administration......Page 90
Definitions of Key Terms......Page 92
“Do I Know This Already?” Quiz......Page 94
Subdividing the Active Directory Namespace......Page 98
Administrative or Geographical Organization of Domains......Page 99
Requirements for Installing Active Directory Domain Services......Page 102
Installing Active Directory Domain Services......Page 103
Performing Unattended Installations of Active Directory......Page 111
Removing Active Directory......Page 113
Interoperability with Previous Versions of Active Directory......Page 114
Forest and Domain Functional Levels......Page 115
The Adprep Utility......Page 117
Upgrading a Windows Server 2003 Domain Controller......Page 118
Verifying the Proper Installation of Active Directory......Page 119
Active Directory Migration Tool v.3.1......Page 121
Alternative User Principal Name Suffixes......Page 122
Complete the Tables and Lists from Memory......Page 124
Definitions of Key Terms......Page 125
“Do I Know This Already?” Quiz......Page 128
Forwarding......Page 133
Root Hints......Page 137
Configuring Zone Delegation......Page 138
Debug Logging......Page 140
DNS Security Extensions......Page 142
Advanced Server Options......Page 144
Monitoring DNS......Page 148
Replication Scope......Page 149
Types of Zone Transfers......Page 151
Secure Zone Transfers......Page 155
Configuring Name Servers......Page 157
Application Directory Partitions......Page 159
Definitions of Key Terms......Page 161
“Do I Know This Already?” Quiz......Page 164
Planning the Placement of Global Catalog Servers......Page 169
Promoting Domain Controllers to Global Catalog Servers......Page 171
Using Universal Group Membership Caching......Page 172
Using Partial Attribute Sets......Page 173
Schema Master......Page 174
PDC Emulator......Page 181
RID Master......Page 183
Placement of Operations Masters......Page 184
Transferring and Seizing of Operations Master Roles......Page 185
Complete the Tables and Lists from Memory......Page 190
Definitions of Key Terms......Page 191
“Do I Know This Already?” Quiz......Page 194
The Need for Active Directory Sites......Page 199
Configuring Sites and Subnets......Page 200
Creating Sites......Page 201
Adding Domain Controllers......Page 202
Creating and Using Subnets......Page 203
The Need for Site Links and Site Link Bridges......Page 205
Site Link Bridges......Page 206
Site Link Costs......Page 207
Configuring Active Directory Replication......Page 210
Concepts of Active Directory Replication......Page 211
Replication Scheduling......Page 217
Review All the Key Topics......Page 222
Definitions of Key Terms......Page 223
“Do I Know This Already?” Quiz......Page 226
New Server Roles and Features......Page 231
Active Directory Lightweight Directory Services......Page 232
Installing AD LDS......Page 234
Configuring Data Within AD LDS......Page 238
Migrating to AD LDS......Page 242
Configuring an Authentication Server......Page 243
Using AD LDS on Server Core......Page 245
Active Directory Rights Management Services......Page 246
Installing AD RMS......Page 247
Certificate Request and Installation......Page 249
Delegation......Page 251
Active Directory Federation Services......Page 252
Installing the AD FS Server Role......Page 254
Configuring Trust Policies......Page 257
User and Group Claim Mapping......Page 258
Configuring Federation Trusts......Page 259
Windows Server 2008 R2 Virtualization......Page 265
Complete the Tables and Lists from Memory......Page 268
Definitions of Key Terms......Page 269
“Do I Know This Already?” Quiz......Page 272
Planning the Use of RODCs......Page 275
Installing RODCs......Page 277
Prestaging an RODC......Page 278
Managing a Read-Only Domain Controller......Page 280
Unidirectional Replication......Page 281
Administrator Role Separation......Page 282
Read-Only DNS......Page 283
BitLocker......Page 284
Replication of Passwords......Page 291
Definitions of Key Terms......Page 299
“Do I Know This Already?” Quiz......Page 302
Introducing User Accounts......Page 307
Introducing Group Accounts......Page 308
Creating User, Computer, and Group Accounts......Page 309
Use of Template Accounts......Page 311
Using Bulk Import to Automate Account Creation......Page 312
Configuring the UPN......Page 317
Configuring Contacts......Page 319
Creating Distribution Lists......Page 320
Managing and Maintaining Accounts......Page 321
Creating Organizational Units......Page 322
Configuring Group Membership......Page 325
AGDLP/AGUDLP......Page 327
Deny Domain Local Group......Page 329
Protected Admin......Page 330
Local Versus Domain Groups......Page 331
Deprovisioning Accounts......Page 333
Delegating Administrative Control of Active Directory Objects......Page 334
Review All the Key Topics......Page 338
Definitions of Key Terms......Page 339
“Do I Know This Already?” Quiz......Page 342
Transitive Trusts......Page 346
External Trusts and Realm Trusts......Page 347
Shortcut Trusts......Page 348
Creating and Configuring Trust Relationships......Page 349
Creating a Forest Trust Relationship......Page 350
Creating External Trust Relationships......Page 356
Creating Realm Trust Relationships......Page 357
Creating Shortcut Trust Relationships......Page 358
Authentication Scope......Page 359
SID Filtering......Page 361
Removing a Cross-forest Trust Relationship......Page 362
Definitions of Key Terms......Page 364
“Do I Know This Already?” Quiz......Page 366
Components of Group Policy......Page 372
New Features of Group Policy in Windows Server 2008 and Windows Server 2008 R2......Page 375
Creating and Applying GPOs......Page 376
Managing GPOs......Page 380
Configuring GPO Hierarchy and Processing Priority......Page 386
Group Policy Filtering......Page 392
Configuring GPO Templates......Page 397
Group Policy Loopback Processing......Page 398
User Rights......Page 399
ADMX Central Store......Page 400
Administrative Templates......Page 401
Restricted Groups......Page 405
Starter GPOs......Page 406
Shell Access Policies......Page 408
Complete the Tables and Lists from Memory......Page 410
Definitions of Key Terms......Page 411
“Do I Know This Already?” Quiz......Page 414
Types of Software Deployment......Page 419
Assigning and Publishing Software......Page 420
Deploying Software Using Group Policy......Page 421
ZAP Files......Page 423
Software Installation Properties......Page 424
Software Package Properties......Page 426
Upgrading Software......Page 428
Use of Transform Files to Modify Software Packages......Page 430
Redeployment of Upgraded Software......Page 432
Removal of Software......Page 434
Definitions of Key Terms......Page 435
“Do I Know This Already?” Quiz......Page 438
Configuring Account Policies......Page 443
Fine-Grained Password Policies......Page 449
Security Options......Page 457
Using Additional Security Configuration Tools......Page 460
New Features of Active Directory Auditing......Page 462
Using GPOs to Configure Auditing......Page 463
Using Auditpol.exe to Configure Auditing......Page 468
Review All the Key Topics......Page 470
Definitions of Key Terms......Page 471
“Do I Know This Already?” Quiz......Page 474
Network Monitor......Page 480
Task Manager......Page 484
Event Viewer......Page 487
Reliability and Performance Monitor......Page 492
Windows System Resource Manager......Page 505
Server Performance Advisor......Page 507
Monitoring and Troubleshooting Active Directory Replication......Page 508
Resultant Set of Policy......Page 517
Review All the Key Topics......Page 533
Definitions of Key Terms......Page 534
“Do I Know This Already?” Quiz......Page 536
Backing Up and Recovering Active Directory......Page 541
Use of Windows Server Backup......Page 542
Recovering Active Directory......Page 549
The Active Directory Recycle Bin......Page 561
Backing Up and Restoring GPOs......Page 566
Restartable Active Directory......Page 570
Offline Defragmentation and Compaction......Page 571
Active Directory Database Storage Allocation......Page 574
Review All the Key Topics......Page 576
Definitions of Key Terms......Page 577
“Do I Know This Already?” Quiz......Page 580
What’s New with Certificate Services in Windows Server 2008?......Page 584
New Features of Active Directory Certificate Services in Windows Server 2008 R2......Page 585
Configuring Certificate Authority Types and Hierarchies......Page 586
Installing Root CAs......Page 588
Understanding Certificate Requests......Page 592
Using Certificate Practice Statements......Page 593
Installing the Certificates Snap-in......Page 594
Working with Certificate Stores......Page 596
Backing Up and Restoring Certificate Databases......Page 601
Assigning Administration Roles......Page 602
Review All the Key Topics......Page 604
Definitions of Key Terms......Page 605
“Do I Know This Already?” Quiz......Page 608
Understanding Certificate Template Types......Page 613
Configuring Certificate Templates......Page 614
Managing Different Certificate Template Versions......Page 618
Configuring Key Recovery Agents......Page 620
Understanding Network Device Enrollment Services......Page 623
Enabling Certificate Autoenrollment......Page 626
Configuring Web Enrollment......Page 627
Configuring Smart Card Enrollment......Page 630
Creating Enrollment Agents......Page 631
Managing Certificate Revocation......Page 637
Configuring Certificate Revocation Lists......Page 638
Configuring Online Responders......Page 642
Configuring Authority Information Access......Page 645
Review All the Key Topics......Page 646
Definitions of Key Terms......Page 647
Practice Exam......Page 650
Answers to Practice Exam......Page 712
Appendix A: Answers to the “Do I Know This Already?” Quizzes......Page 750
Appendix B: Installing Windows Server 2008 R2......Page 784
A......Page 794
C......Page 797
D......Page 799
F......Page 801
G......Page 803
I......Page 804
N......Page 805
O......Page 806
P......Page 807
R......Page 808
S......Page 811
T......Page 813
U......Page 814
W......Page 815
Z......Page 816
A......Page 818
C......Page 826
D......Page 830
E......Page 834
F......Page 835
G......Page 836
H......Page 838
I-J......Page 839
L......Page 840
M......Page 841
N......Page 842
O......Page 843
P......Page 844
R......Page 846
S......Page 849
T......Page 854
U......Page 855
W......Page 857
X-Z......Page 859
APPENDIX C: Memory Tables......Page 866
APPENDIX D: Memory Tables Answer Key......Page 881
