Table Of ContentMicrosoft Certification Exam Objectives
Exam #70-640: Windows Server 2008
Active Directory, Configuring
Objective Chapter
Configuring Domain Name System (DNS) for Active Directory
Configure zones 9
Configure DNS server settings 9
Configure zone transfers and replication 9
Configuring the Active Directory Infrastructure
Configure a forest or a domain 4, 10
Configure trusts 4, 10
Configure sites 4, 10
Configure Active Directory replication 4, 10
Configure the global catalog 4, 10
Configure operations masters 4, 10
Configuring Additional Active Directory Server Roles
Configure Active Directory Lightweight Directory Services (AD LDS) 12
Configure Active Directory Rights Management Service (AD RMS) 12
Configure the read-only domain controller (RODC) 12
Configure Active Directory Federation Services (AD FS) 12
Creating and Maintaining Active Directory Objects
Automate creation of Active Directory accounts 3, 5
Maintain Active Directory accounts 4, 5
Create and apply Group Policy objects (GPOs) 3, 7
Configure GPO templates 7
Configure software deployment GPOs 7
Configure account policies 3, 7
Configure audit policy by using GPOs 7
Maintaining the Active Directory Environment
Configure backup and recovery 13
Perform offline maintenance 13
Monitor Active Directory 13
Configuring Active Directory Certificate Services
Install Active Directory Certificate Services 11
Configure CA server settings 11
Manage certificate templates 11
Manage enrollments 11
Manage certificate revocations 11
This book is intended to be sold with a CD-ROM. If this book does not contain a CD-ROM,
you are not getting the full value of your purchase.
This CD-ROM contains CertBlaster® software from DTI Publishing. The unlock code for the
CertBlaster questions is: c_640 (case sensitive).
If the disks/CDs in this book are missing or if the package containing them has been opened,
this book is not returnable. By opening and breaking the seal on this package, you are agreeing
to be bound by the following agreement:
The software included with this product may be copyrighted, in which case all rights are
reserved by the respective copyright holder. You are licensed to use software copyrighted by
the Publisher and its licenser on a single computer. You may copy and/or modify the software
as needed to facilitate your use of it on a single computer. Making copies of the software for
any other purpose is a violation of the United States copyright laws.
This software is sold as is without warranty of any kind, either expressed or implied, including
but not limited to the implied warranties of merchantability and fitness for a particular pur-
pose. Neither the publisher nor its dealers or distributors assume any liability for any alleged
or actual damages arising from the use of this program. (Some states do not allow for the
excusing of implied warranties, so the exclusion may not apply to you.)
MCTS Guide to
Microsoft Windows Server
2008 Active Directory
Configuration
This page intentionally left blank
MCTS Guide to
Microsoft Windows Server
2008 Active Directory
Configuration
Greg Tomsho
Australia • Brazil • Japan • Korea • Mexico • Singapore • Spain • United Kingdom • United States
MCTS Guide to Microsoft Windows Server 2008 © 2010 Course Technology, Cengage Learning
Active Directory Configuration
ALL RIGHTS RESERVED. No part of this work covered by the copyright herein may be
Greg Tomsho reproduced, transmitted, stored or used in any form or by any means graphic, electronic,
or mechanical, including but not limited to photocopying, recording, scanning, digitizing,
Vice President, Career and Professional Editorial:
taping, Web distribution, information networks, or information storage and retrieval sys-
Dave Garza
tems, except as permitted under Section 107 or 108 of the 1976 United States Copyright
Executive Editor: Stephen Helba
Act, without the prior written permission of the publisher.
Managing Editor: Marah Bellegarde
Acquisitions Editor: Nick Lombardi For product information and technology assistance, contact us at
Senior Product Manager: Michelle Ruelos Cannistraci Cengage Learning Customer & Sales Support, 1-800-354-9706
For permission to use material from this text or product,
Developmental Editor: Lisa M. Lord
submit all requests online at www.cengage.com/permissions
Editorial Assistant: Sarah Pickering Further permissions questions can be emailed
Vice President, Career and Professional Marketing: to [email protected]
Jennifer McAvey
Marketing Director: Deborah S. Yarnell Example: Microsoft®is a registered trademark of the Microsoft Corporation.
Senior Marketing Manager: Erin Coffin
Library of Congress Control Number: 2008943783
Marketing Coordinator: Shanna Gibbs
ISBN-13: 978-1-423-90235-5
Production Director: Carolyn Miller
ISBN-10: 1-423-90235-1
Production Manager: Andrew Crouth
Content Project Manager: Jessica McNavich Course Technology
20 Channel Center
Design Assistant: Hannah Wellman
Boston, MA 02210
Cover Designer: Robert Pehlke
USA
Manufacturing Coordinator: Denise Powers
Copyeditor: Kathy Orrino Cengage Learning is a leading provider of customized learning solutions with office loca-
tions around the globe, including Singapore, the United Kingdom, Australia, Mexico,
Proofreader: John Bosco
Brazil, and Japan. Locate your local office at: www.international.cengage.com/region
Compositor: International Typesetting
and Composition
Cengage Learning products are represented in Canada by Nelson Education, Ltd.
For your lifelong learning solutions, visit www.course.cengage.com
Visit our corporate website at www.cengage.com
Some of the product names and company names used in this book have been used for
identification purposes only and may be trademarks or registered trademarks of their
respective manufacturers and sellers.
Microsoft and the Office logo are either registered trademarks or trademarks of
Microsoft Corporation in the United States and/or other countries. Course Technology, a
part of Cengage Learning, is an independent entity from the Microsoft Corporation, and
not affiliated with Microsoft in any manner.
Any fictional data related to persons or companies or URLs used throughout this book is
intended for instructional purposes only. At the time this book was printed, any such
data was fictional and not belonging to any real persons or companies.
Course Technology and the Course Technology logo are registered trademarks used
under license.
Course Technology, a part of Cengage Learning, reserves the right to revise this publica-
tion and make changes from time to time in its content without notice.
The programs in this book are for instructional purposes only. They have been tested
with care, but are not guaranteed for any particular intent beyond educational purposes.
The author and the publisher do not offer any warranties or representations, nor do they
accept any liabilities with respect to the programs.
Printed in the United States of America
1 2 3 4 5 6 7 12 11 10 09
Brief Contents
INTRODUCTION xv
CHAPTER 1
Introducing Windows Server 2008 1
CHAPTER 2
Installing Windows Server 2008 37
CHAPTER 3
Introducing Active Directory 75
CHAPTER 4
Active Directory Design and Security Concepts 111
CHAPTER 5
Account Management 151
CHAPTER 6
Windows File and Print Services 201
CHAPTER 7
Configuring Group Policy 253
CHAPTER 8
Introduction to Windows Networking 319
CHAPTER 9
Configuring DNS for Active Directory 353
CHAPTER 10
Configuring and Maintaining the Active Directory Infrastructure 397
CHAPTER 11
Active Directory Certificate Services 449
CHAPTER 12
Additional Active Directory Server Roles 485
CHAPTER 13
Server Management and Monitoring 515
APPENDIX A
MCTS 70-640 Exam Objectives 553
APPENDIX B
Windows Server 2008 Active Directory Configuration Resources 557
APPENDIX C
Virtual Machine Instructions for Selected Activities 561
APPENDIX D
A Step-by-Step Guide to Using Server Virtualization Software 571
GLOSSARY 607
INDEX 613
This page intentionally left blank
Contents
INTRODUCTION xv
CHAPTER 1
Introducing Windows Server 2008 1
The Role of a Server Operating System 2
Server: Hardware or Software? 2
Server Operating System Versus Desktop Operating System 2
Windows Server 2008 Editions 3
Standard Edition 4
Enterprise Edition 4
Datacenter Edition 4
Windows Web Server 2008 5
Comparing Editions 5
Windows Server 2008 Core Technologies 6
NTFS 6
Active Directory 8
Microsoft Management Console 8
Disk Management 10
File and Printer Sharing 12
Windows Networking Concepts 13
Windows Networking Components 14
Internet Information Services 17
Windows Server 2008 Roles 19
Active Directory Certificate Services 19
Active Directory Domain Services 19
Other Active Directory Related Roles 20
Application Server 20
DHCP Server 20
DNS Server 20
Fax Server 20
File Services 20
Hyper-V 21
Network Policy and Access Services 21
Print Services 21
Terminal Services 22
UDDI Services 22
Web Server (IIS) 22
Windows Deployment Services 22
New Features in Windows Server 2008 22
Server Manager 23
Server Core 24
Hyper-V 25
Storage Management Enhancements 27
Networking Enhancements 28
Network Access Protection 28
Windows Deployment Services 29
New Active Directory Roles 29
Terminal Services Enhancements 29
Chapter Summary 31
Key Terms 31
Review Questions 32
Case Projects 36
CHAPTER 2
Installing Windows Server 2008 37
Planning a Windows Server 2008 Installation 38
Installing the First Server in a New Network 38
Expanding Your Network 51
Upgrading to Windows Server 2008 53
