MCSE Windows 2000 Directory Services考前辅导（英文影印版）

Exam Insights xxv

Self-Assessment liii

Chapter 1

Introduction to Active Directory

Windows 2000 Overview

The Windows 2000 Family of Operating Systems

The New Features in Windows 2000

Windows 2000 Directory Services

Windows 2000 and Active Directory

The Physical and Logical Structure of Active Directory

Logical Components

Working with Active Directory in Your Enterprise

Working with DNS

The Installation Process

New Overhead

Delegating Tasks

Active Directory Maintenance

Group Policy

Replication and Security Templates

Chapter Summary

Review Questions

Chapter 2

The Structure of Active Directory 25

Active Directory Terminology

Domains

Domain Controllers

Trust Relationships

Namespace

Dynamic DNS

Domain Trees

Domain Forests

Active Directory Components

Active Directory Objects

Active Directory Schema

Organizational Unit

Global Catalog

Operation Masters

Physical Structure of Active Directory

Sites

Site Links

Bridgehead Servers

Chapter Summary

Review Questions

Real-World Projects

Chapter 3

Planning an Active Directory Implementation

Namespace

New DNS Namespace

Integration with an Existing Namespace

Site Design

Domain Structure

Uses of Organizational Units

Designing the Infrastructure

Gather Data about the Network

Lay Out the Active Directory Sites

Place the DCs within the Sites

Establish Replication Schedules

Chapter Summary

Review Questions

Real-World Projects

Chapter 4

Domain Name System (DNS)

Understanding DNS Name Resolution

HOSTS Files and Their Function

Name Resolution Beyond HOSTS: DNS

Active Directory and DDNS

Forward Lookup Queries

Reverse Lookup Query

Understanding the Different Types of Name Servers

Primary DNS Servers

Secondary DNS Servers

Caching-Only Name Servers

Forwarding DNS Servers

Configuring and Managing DNS Zones

Windows 2000 Zones

Understanding Zone Transfers

Full Zone Transfer

Incremental Transfer

DNS Notify

Installing DNS for Active Directory

DNS Preinstallation

DNS Installation

Configuring DNS for Active Directory

Root Servers

Forward Lookup Zones

Reverse Lookup Zones

Resource Records

Dynamic DNS

Monitoring and Troubleshooting DNS for Active Directory

DNS Logging

nslookup

Chapter Summary

Review Questions

Real-World Projects

Chapter 5

Installing Active Directory

Preparing for Active Directory Installation

Preparing IP Addressing Schemes and DNS

Domain Context

Installing Active Directory

Configure Your Server

Dcpromo.exe

Creating Windows 2000 Domains

Using the Active Directory Wizards

Installing the First Domain

Promoting a Server to a Domain Controller

Demoting a Domain Controller

Understanding the Active Directory Database

ntds.dit

Database Logging

Understanding Active Directory Domain Modes

Mixed Mode

Native Mode

Chapter Summary

Review Questions

Real-World Projects

Chapter 6

Active Directory Configuration

Creating a Site

Adding Subnets to Active Directory

Site Connections

Site Link Bridges

Connection Objects

Moving Domain Controllers between Sites

Global Catalog Servers

Operations Masters

Implementing Organizational Units

Delegating Control of Part of a Domain

Group Policies and OUs

Chapter Summary

Review Questions

Real-World Projects

Chapter 7

Administering Active Directory

Querying Active Directory

Common Objects

Finding Active Directory Objects

Permissions and Active Directory Objects

Introduction to Active Directory Permissions

Active Directory Security

Object Permissions

Assigning Permissions

Permission Inheritance

Making Resources Available

Publishing Resources

Publishing Network Services

Moving Objects

Moving Objects within a Domain

Moving Objects between Domains

Moving Workstations and Member Servers

Moving Domain Controllers between Sites

Moving Objects to the LostAndFound Container

Delegating Authority

Using the Delegation Of Control Wizard

Chapter Summary

Review Questions

Real-World Projects

Chapter 8

Performance Monitoring

Introduction to Performance Monitoring

Windows 2000 System Monitor

Memory

Processor

Disk

Network

System Monitor Terminology

System Monitor Data Collection

Objects

Counters

Instances

Recommended Counters

Counters for Memory Troubleshooting

Counters for Processor Troubleshooting

Counters for Disk Troubleshooting

Counters for Network Troubleshooting

Counters for Active Directory Troubleshooting

System Monitor Logging Options

Counter Logs

Trace Logs

Alerts

Event Logs

Application Log

Security Log

System Log

Directory Service

DNS Server

File Replication Service

Event Types

Viewing Remote Event Logs

Managing Event Logs

Windows Management Instrumentation

Tools for Monitoring Active Directory

LDAP Diagnostic Tool (LDP.EXE)

Active Directory Replication Monitor (REPLMON)

REPADMIN

Chapter Summary

Review Questions

Real-World Projects

Chapter 9

Active Directory Maintenance and Recovery

Recovery and Maintenance Overview

Active Directory Data Model

Directory System Agent (DSA)

The Database Layer

Extensible Storage Engine (ESE)

How Data Is Written to the Database

The Files of Active Directory

The Database File (ntds.dit)

The Log Files (EDB.LOG, RES1.LOG, and RES2.LOG)

Checkpoint Files (EDB.CHK)

Patch Files

Active Directory Dependencies

System State Data

Types of Restore

Non-Authoritative Restore

Authoritative Restore

Strategies for Active Directory Backup

Hardware Configuration of Domain Controllers

Active Directory Maintenance

Automatic Maintenance

Manual Database Cleanup

Offline Defragmentation

Basic Backup Principles

Hardware Requirements

Media Storage

Testing Restore Operations

Backup and Restore Security

The Microsoft Backup Utility

Chapter Summary

Review Questions

Real-World Projects

Chapter 10

Implementing Group Policy

Understanding Group Policy Concepts

Windows 2000 Group Policy versus Windows NT 4 System Policies

Group Policy Objects

The Group Policy MMC Snap-in

Group Policy Namespace

Startup, Shutdown, Logon, and Logoff

Active Directory Structure and Group Policy

Group Policy Inheritance

Group Policy Processing

Group Policy Planning

Change Control Procedures

Structuring Domains and OUs for Group Policy

Segmented versus Monolithic GPOs

Cross-Domain GPO Links

Managing Network Bandwidth

Group Policy Best Practices

Group Policy Implementation

Creating a GPO

Creating a GPO Console

Specifying Group Policy Settings

Filtering Group Policy

Delegating Administrative Control of Group Policy

Linking a GPO

Chapter Summary

Review Questions

Real-World Projects

Chapter 11

Managing User Environments with Group Policy

Using Scripts to Apply Configuration Settings to Users and Computers

Overview of Scripts

Windows Scripting Host

Assigning Scripts through Group Policy

Controlling the User Environment through Administrative Templates

ADM Files

Computer Templates

User Templates

Using Folder Redirection to Move User Files to a Server

Folder Redirection Notes

Advantages of Folder Redirection

Chapter Summary

Review Questions

Real-World Projects

Chapter 12

Deploying and Managing Software by Using Group Policy

IntelliMirror Components and Change and Configuration

Management Concepts

Hard versus Soft Costs

IntelliMirror

Understanding the Phases of Software Management

Preparation Phase

Distribution Phase

Targeting Phase

Pilot Phase

Installation Phase

Creating and Configuring Windows Installer Packages

Windows Installer Technology Overview

Managing Windows Installer Settings with Group Policy

Creating Windows Installer Packages with Win INSTALL LE

Managing Software Deployment through the Software Installation Snap-in

Requirements for Software Installation

Assigned versus Published Applications

Using the Software Installation Snap-in

Patching Software Using the Windows Installer Package Editor

Patching Applications

Chapter Summary

Review Questions

Real-World Projects

Chapter 13

Deploying Windows 2000 Using Remote Installation Services

RIS Overview

How RIS Functions

RIS Requirements

Remote Installation Services

Domain Name System (DNS)

Dynamic Host Configuration Protocol (DHCP) Server

Active Directory

RIS Client and Server Components

Client Requirements of RIS

Server Components of RIS

Setting Up and Configuring RIS

RISetup

Creating RIS Images

RIPrep

Creating Images with RIPrep

Creating RIS Boot Disks

Managing RIS Security

Authorizing an RIS Server

Managing RIS Client Options with Group Policy

Managing RIS Configuration Settings

Chapter Summary

Review Questions

Real-World Projects

Chapter 14

Active Directory Replication

Introduction to Active Directory Replication

Elements of Active Directory Replication

The Replication Process Illustrated

Replication Conflicts Illustrated

Intersite and Intrasite Replication

Chapter Summary

Review Questions

Real-World Projects

Chapter 15

Security

What Is Auditing?513

Planning Your Audit Policy

Local Policies and Domain Policies

Configuring Group Policy

Auditing Files and Folders

Auditing Active Directory Objects

Auditing Printers

Tips for Auditing

Security Templates

Preconfigured Security Templates

Viewing Security Templates Configurations

Using Security Templates with GPOs

The Security Configuration and Analysis Tool

Chapter Summary

Review Questions

Real-World Projects

Chapter 16

Sample Test

Chapter 17

Answer Key

Appendix A

Answers to Review Questions

Appendix B

Objectives for Exam 70-217

Appendix C

Study Resources

Glossary

Index