MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide (70-297)
S
sales department, 3
schema, 100 “102
for forest, 99
integrated, for multiple trees, 124
planning and testing, 101
responsibility for, 101
roll-out schedule, 102
Schema Admins group , 86, 101, 139
Schema Master, 102, 139
and domain controller placement, 283
schema modification policy, 100
school systems, real world scenario, 24
scope options, for DHCP server, 332
searches within Active Directory, hiding folders from, 167
secondary paths, 310
secondary zones in DNS, 357, 362
security
breaches, 115
as corporate objective, 193 “194
for DNS servers, 378 “379
for domain controllers, 280
for domains, 126
internal namespaces and, 140
for name resolution infrastructure, 374 “380
in network access, 309
for outsourcing, 14, 121
Windows Internet Name Service (WINS), 379 “380
security boundary, 86
security groups, 233, 234, 240 “241
Windows 2000 Native Mode for nesting, 243
servers
address translation, 307
bridgehead, globally unique ID (GUID) for, 267
Exchange Server
additions to Active Directory, 100
and Global Catalog server, 281
Global Catalog, 272
drive space for, 278 “279
placement, 281 “282
naming strategy, 232 “233
proxy, 312
reserving IP address on DHCP, 330
Routing and Remote Access Server (RRAS), 315, 317
server placement, 325, 326
Systems Management Server, 195
for software inventory, 54
Windows Server 2003
DNS service migration options, 364 “365
and Group Policy settings, 199
interoperation with DNS, 359 “360
Network Monitor, 58
promoting to domain controller, 286
service accounts, naming strategy, 231
service administrators, 85
service autonomy, domains for, 89
service identity plan, 231
service isolation, multiple forests for, 94
Service Level Agreement (SLA), 198 “199
and software rollout, 195
service locator (SRV) record, 271
shared folders, hiding, 167
shortcut trusts, 129 “130 , 130 , 280
SID filtering, 131 “132 , 322
SIDHistory attribute, 131 “132
Simple Mail Transfer Protocol (SMTP), for replication, 273 “274
site level, linking GPO at, 205, 210
site link bridges, 272, 275 “276 , 276
site links, 272 “275
site topology, 266 “277
current network infrastructure, 268
design scenario, 277
domain controllers
creation options, 284 “286
Global Catalog placement, 281 “282
Master Operations placement, 282 “286
specifications and placement, 277 “286
exam essentials, 287 “288
site design to support Active Directory, 269 “272
site link bridges, 272, 275 “276 , 276
site links, 272 “275
sites
connector for domain controller replication, 267
naming strategy for, 269
smart card, for authentication, 240
SMTP (Simple Mail Transfer Protocol), for replication, 273 “274
software
identifying current requirements, 54 “56
packaged vs. home-grown, 55
protocol requirements, 55 “56
installation, GPOs for, 194 “195
SRV (service locator) record, 271
stakeholders, 17
information from, 49 “50
for software inventory, 55
and service administrator selection, 85
trade-off decisions, 92
Start menu, restricting user changes, 196
start of authority record, in stub zone, 362
static IP addressing, 330
static routes, 317
strong passwords, 193 “194
enforcement, 237
user education on, 236
stub zones in DNS, 362
vs. delegation record, 365
Subnet Allocation form, 62
system implementation, documenting current, 45, 46 “63
current directory service
Windows 2000 Active Directory, 66
for Windows NT 4, 63 “65
current hardware requirements, 56 “57
current software requirements, 54 “56
exam essentials, 69 “70
format, 60 “63
Administrative Control table sample, 52
Administrative delegation, 65
Connection Type form, 61
Subnet Allocation form, 62
Windows 2000 Active Directory administration, 67
network requirements, 58 “60 , 68 “69
organizational requirements, 46 “54
administrative control, 51 “52
reasons for Active Directory implementation, 47 “48
special requirements, 48 “51
software requirements, 66 , 68
System Policy Editor, 201
system state backup, 286
Systems Management Server, 195
for software inventory, 54
Sysvol Group Policy Template, backup, 212