Planning, Implementing,

and Maintaining a
Microsoft Windows ® ®

Server 2003 Active

Directory Infrastructure ®

Workbook
Course Number: 2279B

Part Number: X09-62588

Released: 05/2003
Information in this document, including URL and other Internet Web site references, is subject to
change without notice. Unless otherwise noted, the example companies, organizations, products,
domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious,
and no association with any real company, organization, product, domain name, e-mail address,
logo, person, place or event is intended or should be inferred. Complying with all applicable
copyright laws is the responsibility of the user. Without limiting the rights under copyright, no
part of this document may be reproduced, stored in or introduced into a retrieval system, or
transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or
otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any
written license agreement from Microsoft, the furnishing of this document does not give you any
license to these patents, trademarks, copyrights, or other intellectual property.

 2003 Microsoft Corporation. All rights reserved.

Microsoft, MS-DOS, Windows, Windows NT, Active Directory, Active X, MSDN, PowerPoint,
Visio, Visual Basic, Visual C++, and Windows Media are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.

The names of actual companies and products mentioned herein may be the trademarks of their
respective owners.

Course Number: 2279B

Part Number: X09-62588
Released: 05/2003
Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure iii

Contents
Introduction
Course Materials......................................................................................................2
Prerequisites ............................................................................................................4
Course Outline.........................................................................................................5
Setup........................................................................................................................7
Microsoft Official Curriculum.................................................................................8
Microsoft Certified Professional Program.............................................................10
Facilities ................................................................................................................13
Module 1: Introduction to Active Directory Infrastructure
Overview .................................................................................................................1
Lesson: The Architecture of Active Directory ........................................................2
Lesson: How Active Directory Works ..................................................................10
Lesson: Examining Active Directory ....................................................................19
Lesson: The Active Directory Design, Planning, and Implementation Processes.29
Module 2: Implementing an Active Directory Forest and Domain
Structure
Overview .................................................................................................................1
Lesson: Creating a Forest and Domain Structure ....................................................2
Lesson: Examining Active Directory Integrated DNS ..........................................22
Lesson: Raising Forest and Domain Functional Levels ........................................36
Lesson: Creating Trust Relationships....................................................................42
Lab A: Implementing Active Directory.................................................................54
Module 3: Implementing an Organizational Unit Structure
Overview .................................................................................................................1
Lesson: Creating and Managing Organizational Units............................................2
Lesson: Delegating Administrative Control of Organizational Units....................13
Lesson 3: Planning an Organizational Unit Strategy.............................................23
Lab A: Implementing an Organizational Unit Structure .......................................35
Module 4: Implementing User, Group, and Computer Accounts
Overview .................................................................................................................1
Lesson: Introduction to Accounts............................................................................2
Lesson: Creating and Managing Multiple Accounts ...............................................8
Lesson: Implementing User Principal Name Suffixes...........................................20
Lesson: Moving Objects in Active Directory ........................................................30
Guidelines for Authenticating, Authorizing, and Administering Accounts...........46
Lab A: Implementing an Account and Audit Strategy ..........................................58
Module 5: Implementing Group Policy
Overview .................................................................................................................1
Lesson: Creating and Configuring GPOs ................................................................2
Lesson: Configuring Group Policy Refresh Rates and Group Policy Settings......16
Lesson: Managing GPOs .......................................................................................27
Lesson: Verifying and Troubleshooting Group Policy..........................................39
Lesson: Delegating Administrative Control of Group Policy................................45
Lesson: Planning a Group Policy Strategy for the Enterprise ...............................54
Lab A: Implementing Group Policy ......................................................................61
iv Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure

Module 6: Deploying and Managing Software by Using Group Policy

Overview .................................................................................................................1
Lesson: Introduction to Managing Software Deployment.......................................2
Lesson: Deploying Software....................................................................................6
Lesson: Configuring Software Deployment ..........................................................18
Lesson: Maintaining Deployed Software ..............................................................26
Lesson: Troubleshooting Software Deployment ...................................................34
Lesson: Planning a Software Deployment Strategy...............................................42
Lab A: Deploying and Managing Software Using Group Policy ..........................50
Module 7: Implementing Sites to Manage Active Directory Replication
Overview .................................................................................................................1
Lesson: Introduction to Active Directory Replication.............................................2
Lesson: Creating and Configuring Sites ................................................................14
Lesson: Managing Site Topology..........................................................................27
Lesson: Troubleshooting Replication Failures ......................................................35
Lesson: Planning a Site..........................................................................................47
Lab A: Implementing Sites to Manage Active Directory Replication...................57
Module 8: Implementing the Placement of Domain Controllers
Overview .................................................................................................................1
Lesson: Implementing the Global Catalog in Active Directory ..............................2
Lesson: Determining the Placement of Domain Controllers in Active Directory .13
Lesson: Planning the Placement of Domain Controllers .......................................20
Lab A: Implementing the Placement of Domain Controllers ................................30
Module 9: Managing Operations Masters
Overview .................................................................................................................1
Lesson: Introduction to Operations Master Roles ...................................................2
Lesson: Transferring and Seizing Operations Master Roles..................................10
Lesson: Planning the Placement of Operations Masters........................................23
Lab A: Managing Operations Masters...................................................................35
Course Evaluation..................................................................................................38
Module 10: Maintaining Active Directory
Overview .................................................................................................................1
Lesson: Introduction to Maintaining Active Directory............................................2
Lesson: Moving and Defragmenting the Active Directory Database ......................6
Lesson: Backing Up Active Directory...................................................................13
Lesson: Restoring Active Directory ......................................................................19
Lesson: Planning for Monitoring Active Directory ...............................................28
Lab A: Maintaining Active Directory....................................................................36
Module 11: Planning and Implementing an Active Directory
Infrastructure
Overview .................................................................................................................1
Lesson: Creating an Active Directory Implementation Plan for Tailspin Toys.......2
Lab A: Creating the Active Directory Implementation Plan for Tailspin Toys.......7
Lesson: Implementing the Active Directory Infrastructure for Tailspin Toys ......22
Lab B: Implementing the Active Directory Infrastructure for Tailspin Toys........23
Course Evaluation..................................................................................................35
 Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure v

About This Course

This section provides you with a brief description of the course, audience,
suggested prerequisites, and course objectives.
Description This five-day instructor-led course includes self-paced and instructor-facilitated
components. It provides students with the knowledge and skills to successfully
plan, implement, and troubleshoot an Active Directory® directory service
infrastructure in Microsoft® Windows® Server 2003. The course focuses on a
Windows Server 2003 directory service environment, including forest and
domain structure, Domain Name System (DNS), site topology and replication,
organizational unit structure and delegation of administration, Group Policy,
and user, group, and computer account strategies.
Audience The target audience for this course includes individuals who are either
employed or seeking employment as a systems engineer in medium, large, or
enterprise organizations.
Students should meet one of the following criteria:
! Career entrants: Individuals new to technology. This audience includes
nontechnical people who currently work in roles outside of IT who want to
obtain and validate engineering-level technical job skills for the purpose of
changing professions.
! Career enhancers: Experienced individuals who currently work as entry-
level IT professionals and who are new to Windows server engineering-
level functions. These individuals includes Tier 2 systems administrators or
support professionals in Windows, UNIX, or Novell NetWare environments
who lack the depth or breadth of knowledge and engineering skills that are
required to implement and troubleshoot a network based on
Windows Server 2003 Server Active Directory technology.
! Professionals who are preparing for Microsoft Certified Professional Exam
70-294, Planning, Implementing, and Maintaining a Microsoft Windows
Server 2003 Active Directory Infrastructure, which is a core requirement for
the Microsoft Certified Systems Engineer (MCSE) certification credential.

At the completion of this course, students will possess the technical skills to
perform the tasks in Active Directory as defined in this course.

Note Audiences that are not targeted for Course 2279A include
experienced Windows NT®, Windows 2000, UNIX/Linux, or Novell NetWare
systems engineers, software developers and programmers, business end-users,
and home users.

Student prerequisites This course requires that students complete Course 2278: Planning and
Maintaining a Windows Server 2003 Network Infrastructure, or have the
equivalent knowledge and skills.

Note Completion of CompTIA A+ and Network + training or equivalent

knowledge and skills are a prerequisite for the core Windows curriculum. A+
Certification and Network+ Certification are recommended, but not required.
For A+ and Network+ Certification exam requirements, visit
http://www.comptia.org.
vi Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure

Course objectives After completing this course, the student will be able to:
! Describe the logical and physical components of Active Directory.
! Create and configure a forest and domain structure by using an Active
Directory infrastructure design.
! Plan and implement an organizational unit structure.
! Plan and implement Active Directory user, group, and computer accounts.
! Plan and implement a Group Policy strategy to centrally manage users and
computers in an enterprise.
! Deploy, manage, and troubleshoot software that is deployed by using Group
Policy.
! Implement sites to manage and monitor Active Directory replication.
! Plan and implement the placement of domain controllers, global catalog
servers, and DNS servers that are integrated with Active Directory.
! Plan and manage operations masters.
! Back up, restore, and maintain Active Directory.
! Plan and implement an Active Directory infrastructure that is based on a
directory service design that an enterprise architect provides.
Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure vii

Student Materials Compact Disc Contents

The Student Materials compact disc contains the following files and folders:
! Autorun.exe. When the compact disc is inserted into the CD-ROM drive, or
when you double-click the Autorun.exe file, this file opens the compact
disc and allows you to browse the Student Materials compact disc.
! Autorun.inf. When the compact disc is inserted into the compact disc drive,
this file opens Autorun.exe.
! Default.htm. This file opens the Student Materials Web page. It provides
you with resources pertaining to this course, including additional reading,
review and lab answers, lab files, multimedia presentations, and course-
related Web sites.
! Readme.txt. This file explains how to install the software for viewing the
Student Materials compact disc and its contents and how to open the
Student Materials Web page.
! Addread. This folder contains additional reading pertaining to this course.
! Appendix. This folder contains appendix files for this course.
! Flash. This folder contains the installer for the Macromedia Flash 6.0
browser plug-in.
! Fonts. This folder contains fonts that may be required to view the Microsoft
Word documents that are included with this course.
! Labfiles. This folder contains files that are used in the hands-on labs. These
files may be used to prepare the student computers for the hands-on labs.
! Media. This folder contains files that are used in multimedia presentations
for this course.
! Mplayer. This folder contains the setup file to install Microsoft Windows
Media® Player.
! Webfiles. This folder contains the files that are required to view the course
Web page. To open the Web page, open Windows Explorer, and in the root
directory of the compact disc, double-click Default.htm or Autorun.exe.
! Wordview. This folder contains the Word Viewer that is used to view any
Word document (.doc) files that are included on the compact disc.
viii Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory® Infrastructure

Document Conventions
The following conventions are used in course materials to distinguish elements
of the text.
Convention Use

Bold Represents commands, command options, and syntax that must

be typed exactly as shown. It also indicates commands on menus
and buttons, dialog box titles and options, and icon and menu
names.
Italic In syntax statements or descriptive text, indicates argument
names or placeholders for variable information. Italic is also
used for introducing new terms, for book titles, and for emphasis
in the text.
Title Capitals Indicate domain names, user names, computer names, directory
names, and folder and file names, except when specifically
referring to case-sensitive names. Unless otherwise indicated,
you can use lowercase letters when you type a directory name or
file name in a dialog box or at a command prompt.
ALL CAPITALS Indicate the names of keys, key sequences, and key
combinations — for example, ALT+SPACEBAR.
monospace Represents code samples or examples of screen text.
[] In syntax statements, enclose optional items. For example,
[filename] in command syntax indicates that you can choose to
type a file name with the command. Type only the information
within the brackets, not the brackets themselves.
{} In syntax statements, enclose required items. Type only the
information within the braces, not the braces themselves.
| In syntax statements, separates an either/or choice.
! Indicates a procedure with sequential steps.
... In syntax statements, specifies that the preceding item may be
repeated.
. Represents an omitted portion of a code sample.
.
.