MCSE Core Required Exams in a Nutshell By William R Stanek Publisher: O'Reilly Pub Date: May 2006 Print ISBN-10: 0-596-10228-3 Print ISBN-13: 978-0-59-610228-9 Pages: 736 Table of Contents | Index Written by the premier author in Windows administration, William Stanek, and addressing the needs of Windows 2003 administrators preparing for the Microsoft Certified Systems Engineer (MCSE) exams, MCSE Core Required Exams in a Nutshell is invaluable With the recent revisions of the MCSE exams including simulations, success is even more difficult Not only does this book provide the resources administrators need to succeed on the exams, but to succeed in the real world as well They can think of this book as the notes they would have highlighted and then recorded for every essential nugget of information related to the skills measured in Exams 70-290, 70-291, 70-293, and 70-294 (and by association Exams 70-292 and 70-296) To begin with, MCSE Core Required Exams in a Nutshell allows readers to see all of the topics expected for mastery in each of the exams Then, each exam is covered in three parts: Exam Overview, Study Guide, and Test Your Knowledge sections This makes for easy reference and a great study aid The Exams covered include: EXAM 70-290: Managing and Maintaining a Microsoft Windows Server 2003 Environment EXAM 70-291: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure EXAM 70-293: Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure EXAM 70-294: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure Once they have completed the exams successfully, administrators will find the book to be a valuable reference to core Windows administration skills MCSE Core Required Exams in a Nutshell By William R Stanek Publisher: O'Reilly Pub Date: May 2006 Print ISBN-10: 0-596-10228-3 Print ISBN-13: 978-0-59-610228-9 Pages: 736 Table of Contents | Index Copyright Preface Part PART I: Exam 70-290 Chapter 1 Exam 70-290 Overview Section 1.1 Areas of Study for Exam 70-290 Chapter 2 Exam 70-290 Study Guide Section 2.1 Essential Administration Tools Section 2.2 Managing and Maintaining Physical and Logical Devices Section 2.3 Managing Users, Computers, and Groups Section 2.4 Managing and Maintaining Access to Network Resources Section 2.5 Managing and Maintaining a Server Environment Section 2.6 Managing and Implementing Disaster Recovery Chapter 3 Exam 70-290 Prep and Practice Section 3.1 Preparing for Exam 70-290 Section 3.2 Exam 70-290 Suggested Exercises Section 3.3 Exam 70-290 Highlighters Index Section 3.4 Exam 70-290 Practice Questions Part PART II: Exam 70-291 Chapter 4 Exam 70-291 Overview Section 4.1 Areas of Study for Exam 70-291 Chapter 5 Exam 70-291 Study Guide Section 5.1 Implementing, Managing, and Maintaining IP Addressing Section 5.2 Installing, Configuring, and Managing DHCP Section 5.3 Implementing, Managing, and Maintaining Name Resolution Section 5.4 Implementing, Managing, and Maintaining Network Security Section 5.5 Implementing, Managing, and Maintaining Routing and Remote Access Section 5.6 Maintaining a Network Infrastructure Chapter 6 Exam 70-291 Prep and Practice Section 6.1 Preparing for Exam 70-291 Section 6.2 Exam 70-291 Suggested Exercises Section 6.3 Exam 70-291 Highlighters Index Section 6.4 Exam 70-291 Practice Questions Part PART III: Exam 70-293 Chapter 7 Exam 70-293 Overview Section 7.1 Areas of Study for Exam 70-293 Chapter 8 Exam 70-293 Study Guide Section 8.1 Planning and Implementing Server Roles and Server Security Section 8.2 Planning, Implementing, and Maintaining a Network Infrastructure Section 8.3 Planning, Implementing, and Maintaining Routing and Remote Access Section 8.4 Planning, Implementing, and Maintaining Server Availability Section 8.5 Planning, Implementing, and Maintaining Network Security and Infrastructure Chapter 9 Exam 70-293 Prep and Practice Section 9.1 Preparing for Exam 70-293 Section 9.2 Exam 70-293 Suggested Exercises Section 9.3 Exam 70-293 Highlighters Index Section 9.4 Exam 70-293 Practice Questions Part PART IV: Exam 70-294 Chapter 10 Exam 70-294 Overview Section 10.1 Areas of Study for Exam 70-294 Chapter 11 Exam 70-294 Study Guide Section 11.1 Planning an Active Directory Forest and Domain Structure Section 11.2 Planning and Implementing a Strategy for Placing Global Catalog Servers Section 11.3 Planning Flexible Operations Master Role Placement Section 11.4 Planning and Implementing Organizational Unit Structure Section 11.5 Planning and Implementing an Administrative Delegation Strategy Section 11.6 Planning and Managing Active Directory Sites Section 11.7 Maintaining Active Directory Infrastructure Section 11.8 Planning and Implementing Computer, User, and Group Strategies Section 11.9 Planning, Implementing, and Maintaining Group Policy Chapter 12 Exam 70-294 Prep and Practice Section 12.1 Preparing for Exam 70-294 Section 12.2 Exam 70-294 Suggested Exercises Section 12.3 Exam 70-294 Highlighters Index Section 12.4 Exam 70-294 Practice Questions About the Author Colophon Index MCSE Core Required Exams in a Nutshell, Third Edition by William R Stanek Copyright © 2006, 2000, 1998 O'Reilly Media, Inc All rights reserved Printed in the United States of America Published by O'Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472 O'Reilly books may be purchased for educational, business, or sales promotional use Online editions are also available for most titles (safari.oreilly.com) For more information, contact our corporate/institutional sales department: (800) 998-9938 or corporate@oreilly.com Editor: Jeff Pepper Production Editor: Mary Brady Copyeditor: Mary Brady Proofreaders: Laurel Ruma and Adam Witwer Indexer: Ellen Troutman-Zaig Cover Designer: Ellie Volckhausen Interior Designer: David Futato Illustrators: Robert Romano and Jessamyn Read Printing History: June 1998: First Edition (Originally published as MCSE: The Core Exams in a Nutshell.) March 2000: Second Edition (Originally published as MCSE: The Core Exams in a Nutshell.) May 2006: Third Edition Nutshell Handbook, the Nutshell Handbook logo, and the O'Reilly logo are registered trademarks of O'Reilly Media, Inc The In a Nutshell series designations, MCSE Core Required Exams, the image of an elephant, and related trade dress are trademarks of O'Reilly Media, Inc Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks Where those designations appear in this book, and O'Reilly Media, Inc was aware of a trademark claim, the designations have been printed in caps or initial caps While every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein ISBN: 0-596-10228-3 [M] Preface Welcome to MCSE Core Required Exams in a Nutshell As the author, I designed this book for IT professionals looking to complete their Microsoft Certification Microsoft offers multiple certification tracks and as an administrator or engineer, the tracks you'll be most interested in are: Microsoft Certified Professional (MCP) Entry-level certification track To become an MCP, you need to pass only one current Microsoft certification exam Microsoft Certified Systems Administrator (MCSA) Intermediate certification track for experienced administrators To become an MCSA, you must pass three core exams and one elective exam Microsoft Certified Systems Engineer (MCSE) Advanced certification track for experienced administrators with strong engineering backgrounds To become an MCSE, you must pass six core exams and one elective exam Taken appropriately, the certification tracks can measure the progress of your IT career from beginner to pro Or, for those already experienced, the certification tracks can be a measure of your progress through the process of getting your professional credentials Regardless of your certification plans, the exam I recommend studying for and taking first is Exam 70-290: Managing and Maintaining a Microsoft Windows Server 2003 Environment When you pass this exam, you will get your MCP credentials The next exam I recommend studying for and taking is Exam 70-291: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure When you pass this exam, you will have completed the two required networking systems exams for MCSA certification To complete MCSA certification, you will need to complete a client operating system exam and an elective exam Exams 70-290 and 70-291 are also two of the four required networking system exams for MCSE certification The other two required networking system exams are Exam 70-293: Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure and Exam 70-294: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure Exams 70-290, 70-291, 70-293, and 70-294 are covered in this book This book also covers Exam 70-292: Managing and Maintaining a Microsoft Server 2003 Environment for an MCSA Certified on Windows 2000 and Exam 70-296: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Windows 2000 If you are a current MCSA on Windows 2000, you need to pass Exam 70-292 to upgrade your certification to Windows Server 2003 If you are a current MCSE on Windows 2000, you need to pass Exam 70-292 and Exam 70-296 to upgrade your certification to Windows Server 2003 These exams are designed to cover the delta (changes) between Windows 2000 and Windows Server 2003 As such, Exam 70-292 covers a subset of the objectives on Exam 70-290 and Exam 70-291 Exam 70-296 covers a subset of the objectives on Exam 70-293 and Exam 70-294 The focus of this book is on providing the core knowledge to prepare you for the current certification exams, which include performance-based testing through simulation This book is meant to be used as part of your final preparationand not as your only preparationfor the exams Think of this book as the notes you'd have written down if you were to highlight and then record every essential nugget of information related to the skills being measured in Exams 70-290, 70-291, 70-293, and 70-294 (and by association, Exams 70-292 and 70-296) Basically, what I've done is boil down the required knowledge to its finest core So, rather than having 500700 pages covering each exam, there's approximately 150 pages for each With this in mind, the best way to use this book is as part of your final review So, after you've built sufficient hands-on expertise and studied all the relevant texts, grab this book and study it cover to cover as part of your final exam cram Tip: Unless you have access to a very complete test environment, I recommend employing some type of virtual machine technology as part of your exam preparation Microsoft offers Virtual PC and Virtual Server Virtual PC lets you configure desktops and servers and run them in a virtual network environment Virtual Server builds on Virtual PC and offers better resource use and extended APIs for automated deployment and management Because Virtual Server 2005 supports two-node clustering between virtual machines on the same Virtual Server host computer and uses a virtual shared SCSI bus to implement the quorum device, you can implement and test software failover between clustered virtual machines Clustering is a skill measured in Exam 70-293 Conventions Used in This Book diagnosing WAN Internet connectivity problems transform (.mst) files transit areas transitivity site links trust relationships transport layer protocols, TCP and UDP transport mode (IPSec) transport protocols for site links tree-root trusts 2nd troubleshooting acces to files and folders computer accounts hardware devices, Windows Server 2003 Terminal Services Windows Server 2003 environment trust trees trusts 2nd configuring trust relationships domains in a forest establishing establishing explicit trust relationships 2nd considerations NTLM, password changes troubleshooting 2nd re-validating or resetting trusts two-way transitivity trust relationships understanding trust relationships 2nd types of trusts viewing current trust relationships 2nd tunnel mode (IPSec) Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] UDP (User Datagram Protocol) 2nd ports unauthenticated remote access to the network Unencrypted Password (PAP) 2nd 3rd unicast IP addresses unicast IP classes unicasts Unicode characters, used by Windows 2003 DNS servers universal groups 2nd caching membership 2nd modifications based on domain functional level scope, changing unlocking an account unregistered IP addresses 2nd unsigned drivers 2nd upgrading previously deployed applications UPN (User Principal Name) suffixes 2nd user accounts administrators using for routine tasks creating 2nd diagnosing and resolving problems 2nd 3rd exporting importing and exporting managing in Active Directory environment access and authentication creating accounts importing and exporting accounts maintaining accounts user profiles resolving account disabled and locked out accounts user assignment, deploying software User Cannot Change Password (Account tab, user properties) User Configuration policies User Configuration settings 2nd User Datagram Protocol (UDP) 2nd ports user environment, configuring 2nd enrolling user certificates using Group Policy redirecting folders user logon or logoff scripts User mode (consoles) User Must Change Password At Next Logon (Account tab, user properties) user policies 2nd user profiles 2nd configuring local creating preconfigured settings tracked mandatory roaming viewing contents user publishing, deploying software user rights assignment policy users access to Terminal Services default permissions, Active Directory device installation disk space usage managing 2nd naming 2nd Task Manager summary of sessions USNs (Update Sequence Numbers) 2nd UTP (unshielded twisted pair) cabling 2nd category ratings installing network resources Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] Virtual PC and Virtual Server volume licensing volumes configuring using Disk Management dynamic disks 2nd fault tolerant mirrored volume non-fault tolerant simple volume spanned volume striped volume striped with parity volume summary of types 2nd examining server volumes extending formatting 2nd mounting Shadow Copy, restoring data from 2nd special VPN connections VPNs (Virtual Private Networks) 2nd 3rd IPSec with L2TP, using to enhance security 2nd 3rd 4th network interface for connections 2nd planning security remote client access, configuring with RRAS router-to-router VPN connections 2nd 3rd routing options, RRAS troubleshooting remote access client connections 2nd 3rd WAN connections over the Internet Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] WANs (wide area networks) common configurations connecting configurations for multiple connections with routers connection to an ISP problems related to Internet connectivity site boundaries terminator for connections warning events 2nd web application account (IWAM_ComputerName) web servers, managing configuring IIS IIS management tools IIS security installing IIS web shares configuring WEP (Wireless Equivalency Protection) Wi-Fi Protected Access (WPA) enterprise mode home/small office mode Windows 2000 mixed mode Windows 2000 mode Windows 2000 native mode Windows Authentication 2nd 3rd Windows Explorer creating web shares file and folder attributes, examining mapping a network drive sharing folders Windows Firewall Windows Firewall/Internet Connection Sharing service, disabling for RRAS servers Windows Installer Packages (.msi) Windows Messenger, remote assistance requests Windows operating systems Automatic Updates choosing client version Windows NT, domains and domain controllers Windows XP Professional duplicate IP addressing dynamic IP addressing security Windows XP, Remote Assistance workstation and server versions Windows Server 2003 administration experience Administration Tools (AdminPak) administration tools built with MMC framework built-in groups, permissions DHCP database DHCP Server service DNS Server service DNS servers compliance with RFCs for DNS protocol forwarding zone transfers duplicate IP addressing, problems with dynamic IP addressing editions comparison of event logs hardware device drivers IP routing protocols, most common logical volumes, representation of multimaster replication model operating system editions Recovery Console Remote Assistance roles Routing And Remote Access Service (RRAS) security security templates server roles shares, hidden and administrative standard security templates Support Tools tools for monitoring system performance troubleshooting hardware devices Windows Server 2003 interim mode Windows Server 2003 mode Windows settings Windows Support Tools Dcdiag monitoring and troubleshooting replication issues Netdiag Repadmin Windows Update WINS (Windows Internet Naming Service) 2nd DNS zone options invalid configuration planning replication strategy name resolution methods preventing Internet connectivity resolution of NetBIOS names Servers page, configuring NetBIOS name resolution for DHCP Wireless Equivalency Protection (WEP) wireless networks 2nd distances and transmission speeds security 2nd restricting connections to infrastructure networks security for wireless device operating modes workgroups 2nd DHCP servers, using workstations deploying security configurations for dynamic IP addressing resetting computer account password Windows operting system Workstations OU World Wide Web Server (IIS) WPA (Wi-Fi Protected Access) enterprise mode home/small office mode WSUS (Windows Server Update Services) 2nd 3rd 4th configuring installing Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] X64-based computers, partition style 2nd x86-based computers, partition style 2nd Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] ZAW Down-level Application Packages (.zap) files zone files changes in, automatic notification of servers setting filename types of Zone Properties dialog boxes zone transfers 2nd 3rd 4th 5th complete and incremental limiting to enhance security 2nd zones 2nd 3rd configuring DNS resource records configuring DNS zone options 2nd creating new zones forward lookup zones 2nd practice exercises reverse lookup zones 2nd creating DNS resource records delegated 2nd DNS namespace and dynamic updates, options information stored in zone files managing options configuring name servers 2nd 3rd configuring transfers 2nd 3rd scavenging SOA (Start of Authority) 2nd 3rd zone type, dynamic updating, and scavenging options replication requirements Active-Directory integrated zones stub zone type, dynamic updating, and scavenging options ... Implementing, Managing, and Maintaining Network Security Section 5.5 Implementing, Managing, and Maintaining Routing and Remote Access Section 5.6 Maintaining a Network Infrastructure Chapter 6 Exam 70- 291 Prep and Practice... Planning, Implementing, and Maintaining a Network Infrastructure Section 8.3 Planning, Implementing, and Maintaining Routing and Remote Access Section 8.4 Planning, Implementing, and Maintaining Server Availability... Part PART I: Exam 70- 290 Chapter1: Exam 70- 290 Overview Chapter2: Exam 70- 290 Study Guide Chapter3: Exam 70- 290 Prep and Practice Chapter 1 Exam 70- 290 Overview Exam 70- 290: Managing and Maintaining a Microsoft Windows