Contents Introduction Course Materials Additional Reading from Microsoft Press Prerequisites Course Outline Case Studies Setup Initial Logon Procedure Microsoft Official Curriculum Microsoft Certified Professional Program Multimedia: Job Roles in Todays Information Systems Environment Facilities 1 2 3 4 5 7 9 10 11 13 16 17
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. 2003 Microsoft Corporation. All rights reserved. Microsoft, MS-DOS, Windows, Windows NT, Windows Server, Active Directory, BackOffice, Microsoft Press, MSDN, PowerPoint, Visio, and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Introduction
iii
Instructor Notes
Presentation: 30 minutes Required materials The Introduction module provides students with an overview of the course content, materials, and logistics for Course 2282A, Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure. To teach this course, you need the following materials:
! !
Microsoft PowerPoint file 2282A_00.ppt Multimedia presentation Job Roles in Todays Information Systems Environment
Important It is recommended that you use PowerPoint 2002 or later to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, all features of the slides may not be displayed correctly. Preparation tasks To prepare for this course, you must complete the Course Preparation Checklist that is included with the trainer course materials. To prepare for this module:
! ! !
Read all the materials for this module. Observe the multimedia presentation. Review prerequisite courses and modules.
iv
Introduction
Course materials
Initial logon procedure Microsoft Official Curriculum Microsoft Certified Professional Program
Introduction
Introduction
Introduction
Course Materials
*****************************ILLEGAL FOR NON-TRAINER USE****************************** The following materials are included with your kit:
! !
Name card. Write your name on both sides of the name card. Student workbook. The student workbook contains the course material discussed in class in addition to the hands-on lab exercises. Student Materials compact disc. The Student Materials compact disc contains the Web page that provides you with links to resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and course-related Web sites. Note To open the Web page, insert the Student Materials compact disc into the CD-ROM drive, and then in the root directory of the compact disc, double-click Autorun.exe or Default.htm.
Assessments. There are assessments for each lesson located on the Student Materials compact disc. You can use them as preliminary assessments to identify areas of difficulty, or you can use them as post-course assessments to validate learning. Course evaluation. To provide feedback on the course, training facility, and instructor, you will have the opportunity to complete an online evaluation near the end of the course. To provide additional comments or feedback on the course, send e-mail to support@mscourseware.com. To inquire about the Microsoft Certified Professional program, send e-mail to mcphelp@microsoft.com.
Evaluation software: An evaluation copy of Microsoft Windows Server 2003 is provided for your personal use only.
Introduction
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Microsoft Press books about Microsoft Windows Server 2003 can help you do your job, from the planning and evaluation stages through deployment and ongoing support, by providing solid technical information to help you get the most out of the Windows Server 2003 key features and enhancements. The following titles supplement the skills that are taught in this course.
Title Microsoft Windows Server 2003 Deployment Kit Microsoft Windows Server 2003 Security Administrator's Companion Deploying Virtual Private Networks with Microsoft Windows Server 2003 Technical Reference Microsoft Windows Server 2003 Admin Pocket Consultant Understanding IPv6 Microsoft Windows Server 2003 TCP/IP Protocols and Services Technical Reference Microsoft Windows Server 2003 Administrators Companion ISBN 0-7356-1486-5 0-7356-1574-8
0-7356-1576-4
0-7356-1367-2
Introduction
Prerequisites
*****************************ILLEGAL FOR NON-TRAINER USE****************************** This course requires that you have completed course 2278, Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, and course 2279, Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, or have equivalent knowledge and skills.
Introduction
Course Outline
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Module 1, Introduction to Designing an Active Directory and Network Infrastructure, introduces the components of the Active Directory directory service, its role in an organization, and the phases in an Active Directory life cycle. Module 2, Designing a Forest and Domain Infrastructure, discusses conceptual forest and domain design, Domain Name System (DNS) namespace strategies, trust strategies, migration paths, and schema management policy design. Module 3, Designing a Site Infrastructure, prepares students to create a site design, modify it for replication, and place domain controllers, global catalog servers, and single operations masters in the design. Module 4, Designing the Administrative Structure, discusses how to design a network administration model, an organizational unit structure, and an account strategy. Module 5, Designing for Group Policy, describes how to design a Group Policy structure, create an organizational unit structure to support Group Policy, and create a management design. Module 6, Designing the Physical Network, focuses on designing the physical network infrastructure that supports Microsoft Active Directory.
Introduction
Module 7, Designing for Network Connectivity, describes how to create an IP addressing design, an intranet design, an extranet design, and a DHCP infrastructure design. Module 8, Designing a Name Resolution Strategy, discusses design strategies for interoperability with Active Directory, Berkeley Internet Name Domain (BIND), Windows Internet Name Service (WINS), and Dynamic Host Configuration Protocol (DHCP); design strategies for WINS replication; and how to design a name resolution strategy for clients.
Module 9, Designing the Network Access Infrastructure, discusses how to design network access security, a remote access infrastructure, and a wireless access infrastructure.
Introduction
Case Studies
*****************************ILLEGAL FOR NON-TRAINER USE****************************** This course includes two case studies. The first case study provides information about a fictitious company named Northwind Traders. The second case study provides information about a fictitious company named Tailspin Toys. Northwind Traders The practices use the Northwind Traders case study throughout the course. The first practice in each module contains a master scenario, which describes the next phase of the organizations Active Directory directory service and network infrastructure design project. Subsequent practices within the same module contain information specific to the design tasks for that lesson. The labs throughout this course are based on the Tailspin Toys case study. This case study uses an interactive, Web-based application to convey scenario-based information for each lab in this course. You will serve as a consultant to help create Active Directory and network infrastructure designs for both Northwind Traders and Tailspin Toys.
Tailspin Toys
Students role
Introduction
*****************************ILLEGAL FOR NON-TRAINER USE****************************** To access the interactive lab Lab elements To begin a lab, on the desktop, click Internet Explorer. This opens a Web page that contains links to each lab. There is a link for each of the nine labs in this course. Click the appropriate link to begin a lab. Each lab contains the following elements:
!
Interviews. Company officials describe the scenario and Active Directory and/or network infrastructure design issues facing Tailspin Toys. E-mails. Messages contain detailed information for each lab scenario. The e-mails that you receive contain pointers to other documents that contain essential information. The e-mails also contain the specific questions you should answer in this lab. Intranet. This site contains background information about the company, such as the organizational chart and the company history. Network files. This is a file server that contains folders with relevant documents that you may need to complete a lab. Help. This feature contains instructions about how to use the interactive lab.
To complete a lab
! To complete a lab
1. Watch the video presentations for the lab. 2. Read the e-mails for the lab to determine the questions and goals for that lab. 3. Formulate answers to the questions contained in the e-mails for the lab. 4. Discuss your answers as a class.
Introduction
Setup
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Course files The files that are associated with the labs in this course are located in the folder C:\moc\2282\labfiles on the student computers. The Windows Server 2003 distribution files are located in the shared folder \\London\OS. The classroom is configured as a single forest as shown in the illustration. On each student computer in the classroom, Windows Server 2003 is installed as a member server of the nwtraders.msft domain. Each student computer has one of the following TCP/IP addresses: 192.168.x.1 through 192.168.x.24, where x is the classroom network number, in order from left to right in the illustration. The primary instructor computer, London, is a domain controller for the forest root domain, nwtraders.msft. Its TCP/IP address is 192.168.x.200. It runs WINS, DHCP, and DNS services for the classroom environment. It also contains the Microsoft PowerPoint slides and shared folders for the lab files. The secondary instructor computer, Glasgow, is a domain controller for the child domain corp.nwtraders.msft. Its TCP/IP address is 192.168.x.201. Its main purpose is to support instructor demonstrations and labs.
Classroom setup
10
Introduction
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Complex passwords To meet the complexity requirements for the password that you will use in this course, you must include characters in your password from at least three of the following four categories:
! ! ! !
To create the password that you will use in this course, you must log on as ComputernameUser, where Computername is the city name assigned to your computer. Tasks
Introduction
11
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Microsoft Training and Certification develops Microsoft Official Curriculum (MOC), including MSDN Training, for computer professionals who design, develop, support, implement, or manage solutions by using Microsoft products and technologies. These courses provide comprehensive skills-based training in instructor-led and online formats. Each course relates in some way to another course. A related course may be a prerequisite, a follow-up course in a recommended series, or a course that offers additional training. It is recommended that you take the following courses in this order:
! ! !
Course 2274, Managing a Microsoft Windows Server 2003 Environment Course 2275, Maintaining a Microsoft Windows Server 2003 Environment Course 2276, Implementing a Microsoft Windows Server 2003 Network Infrastructure: Network Hosts Course 2277, Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure: Network Services
12
Introduction
Course 2278, Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Course 2279, Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure Course 2282, Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure
Other related courses may become available in the future. Visit the Microsoft Training and Certification Web site for up-to-date information about recommended courses. Microsoft Training and Certification information For more information, visit the Microsoft Training and Certification Web site at http://www.microsoft.com/traincert/.
Introduction
13
*****************************ILLEGAL FOR NON-TRAINER USE****************************** Introduction Microsoft Training and Certification offers a variety of certification credentials for developers and IT professionals. The Microsoft Certified Professional program is the leading certification program for validating your experience and skills, keeping you competitive in todays changing business environment. This course helps students prepare for Exam 70-297: Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure. This exam is a core design exam for the Microsoft Certified Systems Engineer (MCSE) certification. The Microsoft Certified Professional program includes the following certifications.
!
MCP certifications
MCSA on Microsoft Windows Server 2003 The Microsoft Certified Systems Administrator (MCSA) certification is designed for professionals who implement, manage, and troubleshoot existing network and system environments based on Microsoft Windows 2000 platforms, including the Windows Server 2003 family. Implementation responsibilities include installing and configuring parts of the systems. Management responsibilities include administering and supporting the systems.
MCSE on Microsoft Windows Server 2003 The MCSE credential is the premier certification for professionals who analyze the business requirements and design and implement the infrastructure for business solutions based on the Microsoft Windows 2000 platform and Microsoft server software, including the Windows Server 2003 server family. Implementation responsibilities include installing, configuring, and troubleshooting network systems.
14
Introduction
!
MCAD The Microsoft Certified Application Developer (MCAD) for Microsoft .NET credential is appropriate for professionals who use Microsoft technologies to develop and maintain department-level applications, components, Web or desktop clients, or back-end data services, or who work in teams developing enterprise applications. The credential covers job tasks ranging from developing to deploying and maintaining these solutions.
MCSD The Microsoft Certified Solution Developer (MCSD) credential is the premier certification for professionals who design and develop leading-edge business solutions with Microsoft development tools, technologies, platforms, and the Microsoft Windows DNA architecture. The types of applications that MCSDs can develop include desktop applications and multi-user, Web-based, N-tier, and transaction-based applications. The credential covers job tasks ranging from analyzing business requirements to maintaining solutions.
MCDBA on Microsoft SQL Server 2000 The Microsoft Certified Database Administrator (MCDBA) credential is the premier certification for professionals who implement and administer Microsoft SQL Server databases. The certification is appropriate for individuals who derive physical database designs, develop logical data models, create physical databases, create data services by using TransactSQL, manage and maintain databases, configure and manage security, monitor and optimize databases, and install and configure SQL Server.
MCP The Microsoft Certified Professional (MCP) credential is for individuals who have the skills to successfully implement a Microsoft product or technology as part of a business solution in an organization. Hands-on experience with the product is necessary to successfully achieve certification.
MCT Microsoft Certified Trainers (MCTs) demonstrate the instructional and technical skills that qualify them to deliver Microsoft Official Curriculum through Microsoft Certified Technical Education Centers (Microsoft CTECs).
Introduction
15
Certification requirements
The certification requirements differ for each certification category and are specific to the products and job functions addressed by the certification. To become a Microsoft Certified Professional, you must pass rigorous certification exams that provide a valid and reliable measure of technical proficiency and expertise. For more information See the Microsoft Training and Certification Web site at http://www.microsoft.com/traincert/. You can also send e-mail to mcphelp@microsoft.com if you have specific certification questions.
MOC and MSDN Training can help you develop the skills that you need to do your job. They also complement the experience that you gain while working with Microsoft products and technologies. However, no one-to-one correlation exists between MOC and MSDN Training courses and MCP exams. Microsoft does not expect or intend for the courses to be the sole preparation method for passing MCP exams. Practical product knowledge and experience is also necessary to pass the MCP exams. To help prepare for the MCP exams, use the preparation guides that are available for each exam. Each Exam Preparation Guide contains exam-specific information, such as a list of the topics on which you will be tested. These guides are available on the Microsoft Training and Certification Web site at http://www.microsoft.com/traincert/.
16
Introduction
*****************************ILLEGAL FOR NON-TRAINER USE****************************** File location To view the Job Roles in Todays Information Systems Environment presentation, open the Web page on the Student Materials compact disc, click Multimedia, and then click the title of the presentation. The objective of this presentation is to examine the relationship among the technology life cycle, systems administrators, and systems engineers.
Objective
Introduction
17
Facilities