... of a single ActiveDirectory domain anda single site All servers run Windows Server2003. All file and print servers and application servers are located in an organizational unit (OU) named Servers ... configuration Setting Domain Screensaver Hide Screen Saver tab Disabled Sales OU Display and Wallpaper Hide Screen Saver tab Enabled Sales OU Display and Wallpaper Set Active Desktop Wallpaper to Enabled ... the global catalog data will always be up to date If the infrastructure master finds data that is out of date, it requests the updated data from a global catalog The infrastructure master then...
... site, domain, or organizational unit ■ Directory- enabled applications andinfrastructure Features within ActiveDirectory make it easier for you to configure and manage applications and other directory- enabled ... easy access to the information from any loca tion A single distributed data store requires less administration and duplication and improves the availability and organization of data ■ Scalability ... Self-Paced Training Kit (Exam 70- 294) : PlanningandMaintaininga Microsoft Windows Server2003ActiveDirectory Infrastructure, Editor One Microsoft Way Redmond, WA 98052-6399 For additional support...
... servers located in two cities Server1 and Server2 are in Boston, and Server3 and Server4 are in Dallas You install Server2 and Server4 as domain controllers, and Server1 and Server3 as DNS servers ... AD always uses the lowest cost path available You can designate a domain controller as a bridgehead server to act as a replication gateway It accepts all replication data from other sites via ... objects and security groups Manages DNS Manages security policy for domains ActiveDirectory Installing ActiveDirectory Servers install as member servers (standalone) by default Active Directory...
... 10:19 AM Page iii Exam 70- 294: Planning, Implementing, andMaintaininga Windows Server2003ActiveDirectoryInfrastructure Michael Cross Jeffery A Martin Todd A Walls Martin Grasdal Technical ... PlanningandImplementing an ActiveDirectoryInfrastructure Plan a strategy for placing global catalog servers Evaluate network traffic considerations when placing global catalog servers Evaluate ... andMaintaining an ActiveDirectoryInfrastructure Manage an ActiveDirectory forest and domain structure Manage trust relationships Manage schema modifications Add or remove a UPN suffix Manage...
... the WHOAMI /ALL Command ImplementingActiveDirectory Security and Access Control EXAM 70- 294 OBJECTIVE Security is an important part of Windows Server2003andActive Directory. Two primary methods ... digital certificates and public key cryptography Certificate Authorities (CAs) are an integral part of a PKI and are used to create and manage the digital certificates and public keys that are throughout ... Masters, and two RID Masters, PDC Emulators, andInfrastructure Masters D There will be two Schema Masters and Domain Naming Masters, and five RID Masters, PDC Emulators, andInfrastructure Masters...
... object are, which are used by replication to ensure that all DCs have an updated copy of object information EXAM WARNING USNs are an important part of replication, and are used to indicate that changes ... console is accessed from Start | Administrative Tools | ActiveDirectory Domains and Trusts As we saw in Chapter 1, it can also be started through MMC, by adding the ActiveDirectory Domains and Trusts ... Windows Start menu, select Administrative Tools | ActiveDirectory Domains and Trusts When the ActiveDirectory Domains and Trusts console appears, select ActiveDirectory Domains and Trusts...
... ActiveDirectory Understanding Forest and Domain Functionality A Windows Server2003 domain is group of networked computers that share a common ActiveDirectory database, anda common namespace.You ... second can be created.There are several situations in which classes and attributes cannot be deactivated, and it is an operation that should always be performed with great care andplanning Domain ... DNS.The ActiveDirectory Installation Wizard will look for an authoritative DNS server that accepts dynamic updates for the domain If a DNS server that can accept dynamic updates is not available,...
... remote Server menu in DNS server to DNS Manager Manager DNS andActiveDirectory Namespaces ActiveDirectory uses the DNS standard for naming objects Like DNS, ActiveDirectory is a hierarchical arrangement ... dynamic directory for an ActiveDirectory domain, you might have application partitions for the TAPI application data There is normally one TAPI-specific application directory partition for each domain ... command Updating Domain Controller Certificates Any authentication mechanism based on certificates, such as replication and smart cards, requires an update to the DC certificates If template-based autoenrollment...
... domain can communicate Relationship of Sites and Domains A site can contain one or more domains, anda domain can be part of one or more sites Sites and domains not have to maintain the same namespace ... of a network by economic and rapid transmission of data.The other roles of sites are replication and authentication.The ActiveDirectory physical structure manages when and how the authentication ... the data In a network, the directory data must live in one or more places on the network to be equally available to all users.The ActiveDirectorydirectory service manages a replica of directory...
... with Global Catalog Servers and Schema • Chapter Open the Schema snap-in Expand ActiveDirectory Schema, right-click Attributes, and select Create Attribute Click Continue at the warning dialog box ... schema database, but is unavailable for use Exam Objectives Fast Track Working with the Global Catalog and GC Servers GC servers hold Universal Membership data Universal Membership information can ... schema You are a network administrator and you want to modify an attribute that is associated with one of your user accounts How you this? A Open ActiveDirectory Users and Computers and change...
... essentially a relational database containing a number of tables that holds information about the application The package can be configured to handle upgrades as well as new installations I The application ... ensure that you have a clean Registry and standard configuration of the operating system Using a workstation that has had software installed and removed and other changes made to it can cause problems ... package that is an upgrade and other packages.This is part of the database information that makes up a package.The package will know what previous versions it can upgrade and how to handle issues...
... semantic database analysis command is the only native ActiveDirectory command and thus provides the most thorough examination of ActiveDirectory database integrity.We examined some of the available ... two Schema Masters and Domain Naming Masters, and five RID Masters, PDC Emulators, andInfrastructure Masters D The Schema Master and Domain Naming Master are forestwide master roles, and are unique ... commands to mark ActiveDirectory or a portion of it as authoritative I Type restore database to mark the domain and configuration containers of the database as authoritative.The schema container...
... correct Answers C and D are also correct.The ActiveDirectory database and related components such as SYSVOL are backed up as part of the system state data on a Windows Server2003 DC Answer A is ... object A. You can deactivate the object and then rename it, allowing you to create a new class with the appropriate name and configuration Answers B and C are incorrect because classes and attributes ... domains, creating OUs for each location C Create three domains: Sacramento with LA, Portland, and Seattle as OUs; Fiji as a subdomain, and New York as another subdomain D Create two domains: Sacramento...
... are a network administrator for Fabrikam, Inc The Fabrikam, Inc., network consists of a forest that contains a single ActiveDirectory domain named fabrikam.com Fabrikam, Inc., was recently acquired ... named NAT1 NAT1 is a Windows 2003Server that has Routing and Remote Access installed NAT1 has the NAT/Basic Firewall routing protocol enabled The network interfaces on NAT1 are configured as shown ... domain contains a member server named 21certify1, which is located in an organizational unit (OU) named Servers 21certify1 is managed by an application administrator named King His domain user account...
... 26 You are the network administrator for TestKing The network consists of two ActiveDirectory domains One domain is named testking.com A subsidiary company named Acme has a domain named acme.com ... show all command Leading the way in IT testing and certification tools, www.testking.com -5- 70 - 291 D From a command prompt, run the netsh ipsec dynamic show all command Answer: B Explanation: ... successes, audit failures, or not audit the event type at all Success audits generate an audit entry when a user successfully accesses an object that has an appropriate SACL specified Failure audits...
... that helps local area networks (LANs) and wide area networks (WANs) achieve interoperability and connectivity and that can link LANs that have different network topologies (such as Ethernet and ... office and each branch office a new class B private IP address range Assign the main office and each branch office a subnet from a new class B private IP address range Assign the main office and each ... coaxial cable, fiber-optic cable, and twisted-pair wiring, and different data rates, such as 10 megabits per second (Mbps) ports available Telnet security features are not standard across terminal...
... option C From a command prompt, run the netsh ipsec static show all command D From a command prompt, run the netsh ipsec dynamic show all command Answer: Q You are the network administrator for 21certify ... correct answer presents part of the solution Choose three) A Create a standard primary zone named marketresearch.21certify.com B Create an Active Directory- integrated zone named marketresearch.21certify.com ... Windows Server2003 The DNS service is installed on three Windows Server2003 computers that are configured as domain controllers Company network management standards state that a DNS domain must...
... WINS server address If you want a computer to obtain an address auto matically and also want to specify a default gateway, DNS server, or WINS server when no DHCP server is available, you can ... domains and their member computers are normally assigned names that match DNS names In this way, the ActiveDirectory namespace and the DNS namespace overlap Figure 1-6 illustrates the overlapping Active ... provide a valid and reliable measure of techni cal proficiency and expertise ■ Microsoft Certified Database Administrators (MCDBAs) are required to pass three core exams and one elective exam that...