2210B Expert Track: Updating Systems Engineer Skills from Microsoft Windows 2000 to Windows Server 2003
Workshop Outline
Unit 1: Introduction to Performing Systems Engineer Skills in Windows Server 2003
This unit explains the systems engineer tasks that are new or different from those performed in Windows 2000 and introduces the scenarios and tools that will be used throughout the workshop.
Unit Objectives
After completing this unit, students will be able to:
• Describe, at a high level, the new features in Windows Server 2003 that pertain to the systems engineer job role.
• Use the lab environment and locate key resources that are used to complete the labs.
Unit 2: Planning a DNS Namespace Design
This unit shows students the new features of DNS in Windows Server 2003, focusing on planning issues regarding improving fault tolerance in DNS, ensuring DNS resolution across forests, planning for _MSDCS zone availability and security to DNS servers in a forest, and creating DNS zones securely and with the least administrative effort.
Unit Objectives
After completing this unit, students will be able to:
• Evaluate existing DNS infrastructure and determine where new Windows Server 2003 features can improve name resolution.
• Determine when to use stub zones versus conditional forwarding.
• Ensure availability of the _MSDCS zone.
• Plan Active Directory partitions to replicate zone data when needed.
• Evaluate DNS zone security.
Unit 3: Planning Active Directory Deployment
This unit shows students new features of Active Directory in Windows Server 2003, focusing on planning issues.
Unit Objectives
After completing this unit, students will be able to:
• Evaluate the placement of global catalog servers.
• Plan optimal replication by exploiting the following replication enhancements:• Linked value replication (LVR)
• Partial attribute set (PAS) replication
• Inter-Site Topology Generator (ISTG) improvements
• Evaluate forest and domain functionality (versioning) levels.
Unit 4: Implementing DNS with Active Directory
This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to implement Active Directory and DNS.
Unit Objectives
After completing this unit, students will be able to:
• Install Active Directory by using the advanced features of the Active Directory Installation Wizard.
• Install and configure DNS.
• Implement a conditional forwarder.
• Create stub zones.
• Ensure high availability on the _MSDCS subdomain.
• Create a DNS forward lookup zone.
• Raise domain and forest functionality.
• Create a new application directory partition.
• Set the replication scope of a new application directory partition.
Unit 5: Troubleshooting TCP/IP, Name Resolution, and Group Policy
This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and learn how to use them to troubleshoot TCP/IP, name resolution, and Group Policy.
Unit Objectives
After completing this unit, students will be able to:
• Diagnose and resolve issues related to DNS services.
• Troubleshoot Group Policy.
• Diagnose and resolve issues related to client computer configuration.
• Troubleshoot network connectivity issues.
Unit 6: Planning and Implementing Multiple Forests in Active Directory
This unit asks students to plan and implement multiple forests in Active Directory by using the model of adding a new organization to an existing company. Students will implement cross-forest trust, manage user authentication, identify possible security concerns, and come to understand how to resolve naming conflicts between two forests.
Unit Objectives
After completing this unit, students will be able to:
• Evaluate the need for security identifier (SID) filtering, selective authentication, resolving naming conflicts, and routing name suffixes in a multi-forest environment.
• Establish forest trusts.
Unit 7: Using Group Policy in Windows Server 2003 to Deploy and Restrict Software
This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 pertaining to Group Policy and to learn how they can use it to deploy and restrict software.
Unit Objectives
After completing this unit, students will be able to:
• List reasons for controlling a computer user’s environment.
• Create a software restriction policy.
• Deploy software so that an application is completely installed at user logon.
• Use Windows Management Instrumentation (WMI) filters to restrict the application of Group Policy objects (GPOs).
Unit 8: Using Group Policy in Windows Server 2003 to Set Advanced Security Settings
This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use Group Policy to implement advanced security settings.
Unit Objectives
After completing this unit, students will be able to:
• Configure wireless network settings.
• Configure a user environment.
• Apply Encrypting File System (EFS) enhancements.
Unit 9: Planning and Implementing Secure Routing and Remote Access
This unit gives students a hands-on opportunity to experience new features of Windows Server 2003 and to learn how to use them in implementing Routing and Remote Access.
Unit Objectives
After completing this unit, students will be able to:
• Plan, implement, and maintain Routing and Remote Access.
• Create and implement an Internet Protocol Security (IPSec) policy.
• Configure IPSec by using Netsh.
• Set up IPSec policy monitoring.