• Intoduction
• Prerequisites
• At Course Completion
• Microsoft Certified Professional Exams
• Course Outline

This course is designed to provide students with the knowledge and skills necessary to install, configure, and administer Microsoft Windows® 2000 Active Directory™ directory services. The course also focuses on implementing Group Policy and performing the Group Policy–related tasks that are required to centrally manage users and computers.

• Course 2151, Microsoft Windows 2000 Network and Operating System Essentials, or equivalent skills and knowledge.
• Course 2152, Implementing Microsoft Windows 2000 Professional and Server, or equivalent knowledge and skills. These include:
  • Installing Windows 2000
  • Using administrative tools in Windows 2000
  • Configuring hard disks and partitions
  • Creating users
  • Creating and using security groups to manage access to resources
  • Creating and administering printers
  • Setting up and administering permissions for files and folders
• Course 2153, Implementing a Microsoft Windows 2000 Network Infrastructure, or equivalent knowledge and skills. This includes installing and configuring Transmission Control Protocol/Internet Protocol (TCP/IP), DNS, and Certificate Services.
• A thorough understanding of DNS, including hands-on experience configuring DNS, and setting up forward and reverse lookup zones.

The course materials, lectures, and lab exercises are in English. To benefit fully from the instruction, students need an understanding of the English language and completion of the prerequisites.

At the end of the course, students will be able to:

• Identify the concepts of the Active Directory directory service and its logical and physical structures.
• Implement a Domain Name System (DNS) infrastructure in preparation for installing Active Directory.
• Install Active Directory on a computer running Windows 2000 Server, and perform post-installation tasks.
• Set up and administer domain user accounts and groups.
• Publish resources, including printers and shared folders, in Active Directory.
• Delegate administrative control of Active Directory objects in Windows 2000.
• Implement Group Policy.
• Manage user environments by using Group Policy.
• Use Group Policy to deploy software.
• Create and manage trees and forests in a Windows 2000 network, and administer forest-wide resources.
• Manage Active Directory replication within a site and between sites.
• Manage operations masters.
• Manage and restore the Active Directory database.
• Implement an Active Directory infrastructure that is based on the business requirements of a fictitious organization.

This course will help the student prepare for the following Microsoft Certified Professional exam:

• Exam 70-217, Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure

Topics
Introduction to Active Directory
Active Directory Logical Structure
Active Directory Physical Structure
Methods for Administering a Windows 2000 Network

Module 2: Implementing DNS to Support Active Directory

Topics
Introduction to the Role of DNS in Active Directory
DNS and Active Directory
DNS Name Resolution in Active Directory
Active Directory Integrated Zones
Installing and Configuring DNS to Support Active Directory
Labs
Installing and Configuring DNS to Support Active Directory

Module 3: Creating a Windows 2000 Domain

Topics
Introduction to Creating a Windows 2000 Domain
Installing Active Directory
The Active Directory Installation Process
Examining the Default Structure of Active Directory
Performing Post Active Directory Installation Tasks
Troubleshooting the Installation of Active Directory
Removing Active Directory
Labs
Creating a Windows 2000 Domain
Performing Post Active Directory Installation Tasks

Module 4: Setting Up and Administering Users and Groups

Topics
Introduction to User Accounts and Groups
User Logon Names
Creating Multiple User Accounts
Administering User Accounts
Using Groups in Active Directory
Strategies for Using Groups in a Domain
Troubleshooting Domain User Accounts and Groups
Labs
Setting Up and Administering Domain User Accounts
Setting Up and Administering Groups in a Single Domain

Module 5: Publishing Resources in Active Directory

Topics
Introduction to Publishing Resources
Setting Up and Administering Published Printers
Implementing Printer Locations
Setting Up and Administering Published Shared Folders
Comparing Published Objects and Shared Resources
Troubleshooting Published Resources
Labs
Publishing Resources in Active Directory

Module 6: Delegating Administrative Control

Topics
Object Security in Active Directory
Controlling Access to Active Directory Objects
Delegating Administrative Control of Active Directory Objects
Customizing MMC Consoles
Setting Up Taskpads
Labs
Delegating Administrative Control
Creating Custom Administrative Tools

Module 7: Implementing Group Policy

Topics
Introduction to Group Policy
Group Policy Structure
Working with Group Policy Objects
How Group Policy Settings Are Applied in Active Directory
Modifying Group Policy Inheritance
Delegating Administrative Control of Group Policy
Monitoring and Troubleshooting Group Policy
Labs
Implementing Group Policy
Delegating Group Policy Administration

Module 8: Using Group Policy to Manage User Environments

Topics
Introduction to Managing User Environments
Introduction to Administrative Templates
Using Administrative Templates in Group Policy
Assigning Scripts in Group Policy
Using Group Policy to Redirect User Folders
Using Group Policy to Secure the User Environment
Troubleshooting User Environment Management
Labs
Using Administrative Templates to Assign Registry-Based Group Policy
Using Group Policy to Assign Scripts to Users and Computers
Implementing Folder Redirection Policy
Implementing Security Settings by Using Group Policy

Module 9: Using Group Policy to Manage Software

Topics
Introduction to Managing Software Deployment
Windows Installer Technology
Deploying Software
Configuring Software Deployment
Maintaining Deployed Software
Removing Deployed Software
Troubleshooting Software Deployment
Labs
Assigning and Publishing Software
Upgrading and Removing Software

Module 10: Creating and Managing Trees and Forests

Topics
Introduction to Trees and Forests
Creating Trees and Forests
Trust Relationships in Trees and Forests
The Global Catalog
Strategies for Using Groups in Trees and Forests
Troubleshooting Creating and Managing Trees and Forests
Labs
Creating Domain Trees and Establishing Trusts
Using Groups in a Forest

Module 11: Managing Active Directory Replication

Topics
Introduction to Active Directory Replication
Replication Components and Processes
Replication Topology
Using Sites to Optimize Active Directory Replication
Implementing Sites to Manage Active Directory Replication
Monitoring Replication Traffic
Adjusting Replication
Troubleshooting Active Directory Replication
Labs
Tracking Active Directory Replication
Using Sites to Manage Active Directory Replication
Monitoring Replication

Module 12: Managing Operations Masters

Topics
Introduction to Operations Masters
Operations Master Roles
Managing Operations Master Roles
Managing Operations Master Failures
Labs
Managing Operations Masters

Module 13: Maintaining the Active Directory Database

Topics
Introduction to Maintaining the Active Directory Database
The Process of Modifying Data in Active Directory
The Garbage Collection Process
Backing Up Active Directory
Restoring Active Directory
Moving the Active Directory Database
Defragmenting the Active Directory Database
Labs
Backing Up and Restoring Active Directory
Maintaining the Active Directory Database

Module 14: Implementing an Active Directory Infrastructure

Topics
Business Scenario
Requirements for the Active Directory Infrastructure
Class Discussion: How to Implement the Active Directory Infrastructure
Labs
Implementing the Active Directory Infrastructure