Tài liệu Managing a Microsoft® Windows® 2000 Network Environment doc

Part Number: xxx-xxxxx Course Number: 2126A Released: 11/2001 Delivery Guide Managing a Microsoft ® Windows ® 2000 Network Environment Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, places or events is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2001 Microsoft Corporation. All rights reserved. Microsoft, MS-DOS, Windows, Windows NT, <plus other appropriate product names or titles. The publications specialist replaces this example list with the list of trademarks provided by the copy editor. Microsoft, MS-DOS, Windows, and Windows NT are listed first, followed by all other Microsoft trademarks listed in alphabetical order. > are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. <The publications specialist inserts mention of specific, contractually obligated to, third-party trademarks, provided by the copy editor> The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Course Number: 2126A Part Number: xxx-xxxxx Released: 11/2001 Managing a Microsoft® Windows® 2000 Network Environment iii Contents Introduction Course Materials 2 Prerequisites .3 Course Outline .4 Setup 6 Microsoft Official Curriculum .8 Microsoft Certified Professional Program .9 Facilities .11 Module 1: Introduction to Managing a Windows 2000 Network Overview 1 Overview of Active Directory 2 Active Directory Logical Structure 11 Active Directory Physical Structure 17 Managing a Windows 2000 Network 21 Review .27 Module 2: Managing Shared Network Resources Overview 1 Introduction to Publishing Resources 2 Setting Up and Managing Published Printers 5 Implementing Printer Locations .11 Maintaining Printer Resources .18 Setting Up and Managing Published Shared Folders .22 Lab A: Publishing and Maintaining Printers in Active Directory .24 Monitoring Access to Shared Folders 30 Troubleshooting User Access to Network File Resources .39 Troubleshooting Published Resources .42 Best Practices .43 Lab B: Publishing Shared Folders in Active Directory 44 Review .50 Module 3: Managing Web Services Overview 1 Overview of Internet Information Services 2 Configuring Web Server Properties .9 Creating Web Sites and Virtual Directories .14 Lab A: Creating and Configuring Additional Web and FTP Sites 20 Managing Web Site Content 32 Configuring User Authentication .38 Configuring User Access to Web Pages 44 Configuring Web Browsers .51 Maintaining a Web Server .55 Lab B: Securing Web Resources by Using Permissions and Authentication 61 Review .71 iv Managing a Microsoft® Windows® 2000 Network Environment Module 4: Implementing and Managing DHCP Overview . 1 Overview of DHCP . 2 Installing the DHCP Service . 12 Authorizing the DHCP Service . 13 Lab A: Configuring the DHCP Service 15 Creating and Configuring a Scope 17 Configuring DHCP in a Routed Network . 29 Supporting DHCP . 33 Review 40 Module 5: Implementing Name Resolution Overview . 1 Introduction to Name Resolution 2 NetBIOS Name Resolution . 4 Host Name Resolution 11 Configuring Name Resolution for Client Computers . 16 Troubleshooting Name Resolution . 22 Lab A: Configuring a Client Computer for Name Resolution 29 Review 39 Module 6: Managing DNS Overview . 1 Multimedia: Basics of the Domain Name System (DNS) . 2 Overview of the DNS Query Process 3 Creating Zones 5 Configuring Zones 11 Configuring DNS Updates 23 DNS Name Resolution in Active Directory 29 Maintaining and Troubleshooting DNS Servers . 38 Lab A: Installing and Configuring the DNS Service 48 Lab B: Managing DNS . 59 Review 66 Module 7: Configuring Remote Access Overview . 1 Overview of Remote Access in Windows 2000 2 Configuring the Remote Access Server 9 Configuring Authentication Protocols 16 Configuring Encryption Protocols 21 Configuring Routing and Remote Access for DHCP Integration . 23 Configuring the Remote Access Client . 27 Lab A: Configuring RAS 32 Review 37 Managing a Microsoft® Windows® 2000 Network Environment v Module 8: Supporting Remote Access Policy Overview 1 Examining Remote Access Policies .2 Examining Remote Access Policy Evaluation .4 Creating a Remote Access Policy 9 Lab A: Configuring a RAS Policy .13 Troubleshooting Remote Access .20 Review .28 Module 9: Resolving Active Directory Replication Conflicts Overview 1 Introduction to Active Directory Replication 2 Replication Components and Processes .3 Using Sites to Optimize Active Directory Replication 13 Identifying Replication Problems by Using Event Viewer 18 Review .19 Module 10: Delegating Administrative Control Overview 1 Introduction to Delegating Administrative Control .2 Controlling Access to Active Directory Objects 3 Delegating Administrative Control of Active Directory Objects .9 Lab A: Delegating Administrative Control 15 Managing Computer Accounts 23 Customizing MMC Consoles .28 Setting Up Taskpads 33 Lab B: Creating Custom Administrative Tools .38 Review .43 Module 11: Implementing Group Policy Overview 1 Group Policy Structure 2 Working with Group Policy Objects 12 How Group Policy Settings Are Applied in Active Directory .19 Modifying Group Policy Inheritance .28 Lab 11A: Implementing Group Policy .33 Troubleshooting Group Policy .44 Review .46 vi Managing a Microsoft® Windows® 2000 Network Environment Module 12: Using Group Policy to Manage the Desktop Environment Overview . 1 Introduction to Managing User Environments 3 Using Administrative Templates in Group Policy 5 Assigning Scripts by Using Group Policy 15 Using Group Policy to Redirect Folders . 20 Lab 12A: Using Group Policy to Manage the User Environment 25 Troubleshooting User Environment Management 40 Introduction to Managing Software Deployment 42 Deploying Software 47 Managing Software . 53 Identifying Solutions to Software Deployment Problems . 60 Lab 12B: Using Group Policy to Deploy Software . 61 Review 74 Module 13: Managing Network Security Overview . 1 Using Group Policy to Secure the User Environment . 2 Using Group Policy to Configure Account Policies . 3 Lab A: Using Group Policy to Secure the Desktop 9 Analyzing Security Log Files to Detect Security Breaches 14 Securing the Logon Process 19 Examining Service Packs, Hotfixes, and Antivirus Software . 24 Lab B: Monitoring Security 26 Review 31 Appendix A: Detecting Slow Network Connections Managing a Microsoft® Windows® 2000 Network Environment vii About This Course This section provides you with a brief description of the course, audience, suggested prerequisites, and course objectives. Description Managing a Microsoft Windows Network Environment, a five-day instructor- led course, provides the knowledge required by Microsoft ® Certified System Administrators (MCSAs). While Microsoft Certified System Engineers (MCSEs) are qualified to design and plan, deploy, manage, and troubleshoot complex Windows system and network environments in medium to large organizations, Network Administrators and Technical Support specialists perform more limited duties on a smaller scale, such as on the department level. Audience The network administrator is the primary audience for Course 2126A. The network administrator focuses on installation and configuration tasks, as well as network and operating system management tasks. The technical support specialist is the secondary audience for Course 2126A. The technical support specialist focuses on troubleshooting tasks, hardware and software installations, configurations, upgrades, and some network and system operations tasks. Student Prerequisites This course requires that students meet the following prerequisites: ! Completed Course 2151, Microsoft Windows 2000 Network and Operating System Essentials ! Completed Course 2152, Implementing Microsoft Windows 2000 Professional and Server Course Objectives After completing this course, the student will be able to: ! Publish and maintain printers and shared folders. ! Implement and manage Web-based services in an intranet. ! Implement and manage the DHCP service. ! Implement name resolution for client computers by using Domain Name System (DNS) and Windows Internet Name Service (WINS). ! Install and configure the DNS service. viii Managing a Microsoft® Windows® 2000 Network Environment ! Implement the Remote Access Service (RAS). ! Manage remote access by using remote access policies. ! Identify Active Directory ™ directory service replication latency issues and resolve conflicts resulting from replication. ! Delegate administrative control of an organizational unit. ! Implement Group Policy to centrally manage users and computers. ! Manage users’ desktops and software by using Group Policy. ! Implement security settings and account policies by using Group Policy. ! Troubleshoot client computer startup and user logon problems. Managing a Microsoft® Windows® 2000 Network Environment ix Course Timing The following schedule is an estimate of the course timing. Your timing may vary. Day 1 Start End Module 9:00 9:30 Introduction 9:30 10:30 Module 1: Introduction to Managing a Windows 2000 Network 10:30 10:45 Break 10:45 11:20 Module 2: Managing Shared Network Resources 11:20 11:50 Lab A: Publishing and Maintaining Printers in Active Directory 11:50 12:50 Lunch 12:50 1:25 Module 2 (continued) 1:25 1:55 Lab B: Publishing Shared Folders in Active Directory 1:55 2:35 Module 3: Managing Web Services 2:35 2:50 Break 2:50 3:50 Lab A: Creating and Configuring Additional Web and FTP Sites 3:50 4:50 Module 3 (continued) Day 2 Start End Module 9:00 9:30 Day 1 review 9:30 10:30 Module 3 (continued) 10:30 10:45 Break 10:45 11:30 Lab B: Securing Web Resources Using Permissions and Authentication 11:30 12:30 Lunch 12:30 1:50 Module 4: Implementing and Managing DHCP 1:50 2:20 Lab A: Configuring the DHCP Service 2:20 2:35 Break 2:35 3:35 Module 5: Implementing Name Resolution 3:35 4:20 Lab A: Configuring a Client Computer for Name Resolution x Managing a Microsoft® Windows® 2000 Network Environment Day 3 Start End Module 9:00 9:30 Day 2 review 9:30 10:15 Module 6: Managing DNS 10:15 10:30 Break 10:30 11:15 Lab A: Installing and Configuring the DNS Service 11:15 12:00 Module 6 (continued) 12:00 1:00 Lunch 1:00 1:30 Lab B: Exploring SRV Resource Records 1:30 2:30 Module 7: Configuring Remote Access 2:30 2:45 Break 2:45 3:00 Module 7 (continued) 3:00 3:15 Lab A: Configuring RAS 3:15 4:00 Module 8: Supporting Remote Access Policy 4:00 4:15 Lab A: Configuring a RAS Policy 4:15 4:55 Module 9: Resolving Active Directory Replication Conflicts Day 4 Start End Module 9:00 9:30 Day 3 review 9:30 9:45 Lab A: Tracking Active Directory Replication 9:40 10:20 Module 10: Delegating Administrative Control 10:20 10:35 Break 10:35 11:05 Lab A: Delegating Administrative Control 11:05 11:20 Module 10 (continued) 11:20 11:50 Lab B: Creating Custom Administrative Tools 11:50 12:50 Lunch 12:50 2:05 Module 11: Implementing Group Policy 2:05 2:20 Break 2:20 3:05 Lab A: Implementing Group Policy 3:05 3:50 Module 12: Using Group Policy to Manage the Desktop Environment 3:50 4:50 Lab A: Using Group Policy to Manage the User Environment [...]... Trainer Materials Web page ! Readme.txt This file explains how to install the software for viewing the Trainer Materials compact disc and its contents and how to open the Trainer Materials Web page ! 212 6A_ ms .doc This file is the Manual Classroom Setup Guide It contains the steps for manually installing the classroom computers ! 212 6A_ sg .doc This file is the Automated Classroom Setup Guide It contains... multimedia presentations, and courserelated Web sites ! Readme.txt This file explains how to install the software for viewing the Student Materials compact disc and its contents and how to open the Trainer Materials Web page ! Addread This folder contains additional reading pertaining to this course If there are no additional reading files, this folder does not appear ! Answers This folder contains answers... these materials before teaching this course Managing a Microsoft® Windows® 2000 Network Environment xiii Student Materials Compact Disc Contents The Student Materials compact disc contains the following files and folders: ! Default.htm This file opens the Student Materials Web page It provides you with resources pertaining to this course, including additional reading, review and lab answers, lab files,... typed exactly as shown It also indicates commands on menus and buttons, dialog box titles and options, and icon and menu names italic In syntax statements or descriptive text, indicates argument names or placeholders for variable information Italic is also used for introducing new terms, for book titles, and for emphasis in the text Title Capitals Indicate domain names, user names, computer names, directory... names, directory names, and folder and file names, except when specifically referring to case-sensitive names Unless otherwise indicated, you can use lowercase letters when you type a directory name or file name in a dialog box or at a command prompt ALL CAPITALS Indicate the names of keys, key sequences, and key combinations — for example, ALT+SPACEBAR monospace Represents code samples or examples of screen... Client Computer Startup and Logon Problems 2:15 2:30 Break 2:30 3:15 Lab A: Identifying Client Computer Startup Options 3:15 3:55 Module 14 (continued) 3:55 4:25 Lab B: Using the Netdiag Utility to Validate Logon xii Managing a Microsoft® Windows® 2000 Network Environment Trainer Materials Compact Disc Contents The Trainer Materials compact disc contains the following files and folders: ! Default.htm This... Managing a Microsoft® Windows® 2000 Network Environment Document Conventions The following conventions are used in course materials to distinguish elements of the text Convention Use " Indicates an introductory page This symbol appears next to a topic heading when additional information on the topic is covered on the page or pages that follow it bold Represents commands, command options, and syntax that... answers to any questions in the modules ! Flash This folder contains the installer for the Macromedia Flash 5.0 browser plug-in If there are no Flash animations in the course, this folder does not appear ! Fonts This folder contains fonts that are required to view the Microsoft PowerPoint® presentation and Web-based materials ! Labfiles This folder contains files that are used in the hands-on labs These... files may be used to prepare the student computers for the hands-on labs ! Media This folder contains files that are used in multimedia presentations for this course If this course does not include any multimedia presentations, this folder does not appear ! Wordview This folder contains the Word Viewer that is used to view any Word document ( .doc) files that are included on the compact disc xiv Managing. .. text [] In syntax statements, enclose optional items For example, [filename] in command syntax indicates that you can choose to type a file name with the command Type only the information within the brackets, not the brackets themselves {} In syntax statements, enclose required items Type only the information within the braces, not the braces themselves | In syntax statements, separates an either/or . administrator is the primary audience for Course 212 6A. The network administrator focuses on installation and configuration tasks, as well as network and. for Name Resolution x Managing a Microsoft® Windows® 2000 Network Environment Day 3 Start End Module 9:00 9:30 Day 2 review 9:30 10:15 Module 6: Managing