Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Environment for an MCSE Certified on Windows 2000
| Planning and Implementing Server Roles
and Server Security |
| Configure security for servers that
are assigned specific roles. |
Plan security for servers that are
assigned specific roles. Roles might include domain controllers, Web servers,
database servers, and mail servers.
- Deploy the security configuration for servers that are assigned
specific roles.
- Create custom security templates based on server roles.
|
| Planning, Implementing, and Maintaining
a Network Infrastructure |
Plan a host name resolution strategy.
- Plan a DNS namespace design.
- Plan zone replication requirements.
- Plan a forwarding configuration.
- Plan for DNS security.
- Examine the interoperability of DNS with third-party DNS
solutions.
|
| Planning, Implementing, and Maintaining
Server Availability |
Plan services for high availability.
- Plan a high availability solution that uses clustering
services.
- Plan a high availability solution that uses Network Load
Balancing.
|
Plan a backup and recovery strategy.
- Identify appropriate backup types. Methods include full,
incremental, and differential.
- Plan a backup strategy that uses volume shadow copy.
- Plan system recovery that uses Automated System Recovery (ASR).
|
| Planning and Maintaining Network
Security |
Plan secure network administration
methods.
- Create a plan to offer Remote Assistance to client
computers.
- Plan for remote administration by using Terminal Services.
|
| Plan security for wireless
networks. |
Plan security for data transmission.
- Secure data transmission between client computers to meet
security requirements.
- Secure data transmission by using IPSec.
|
| Planning, Implementing, and Maintaining
Security Infrastructure |
| Configure Active Directory directory
service for certificate publication. |
Plan a public key infrastructure (PKI)
that uses Certificate Services.
- Identify the appropriate type of certificate authority to
support certificate issuance requirements.
- Plan the enrollment and distribution of certificates.
- Plan for the use of smart cards for authentication.
|
Plan a framework for planning and
implementing security.
- Plan for security monitoring.
- Plan a change and configuration management framework for
security.
|
| Plan a security update infrastructure.
Tools might include Microsoft Baseline Security Analyzer and Microsoft Software
Update Services. |
| Planning and Implementing an Active
Directory Infrastructure |
Plan a strategy for placing global
catalog servers.
- Evaluate network traffic considerations when placing global
catalog servers.
- Evaluate the need to enable universal group caching.
|
Implement an Active Directory
directory service forest and domain structure.
- Create the forest root domain.
- Create a child domain.
- Create and configure Application Data Partitions.
- Install and configure an Active Directory domain
controller.
- Set an Active Directory forest and domain functional level
based on requirements.
- Establish trust relationships. Types of trust relationships
might include external trusts, shortcut trusts, and cross-forest trusts.
|
| Managing and Maintaining an Active
Directory Infrastructure |
Manage an Active Directory forest and
domain structure.
- Manage trust relationships.
- Manage schema modifications.
- Add or remove a UPN suffix.
|
Restore Active Directory directory
services.
- Perform an authoritative restore operation.
- Perform a nonauthoritative restore operation.
|
| Planning and Implementing User,
Computer, and Group Strategies |
Plan a user authentication strategy.
- Plan a smart card authentication strategy.
- Create a password policy for domain users.
|
| Planning and Implementing Group Policy
|
Plan Group Policy strategy.
- Plan a Group Policy strategy by using Resultant Set of Policy
(RSoP) Planning mode.
- Plan a strategy for configuring the user environment by using
Group Policy.
- Plan a strategy for configuring the computer environment by
using Group Policy.
|
Configure the user environment by
using Group Policy.
- Distribute software by using Group Policy.
- Automatically enroll user certificates by using Group
Policy.
- Redirect folders by using Group Policy.
- Configure user security settings by using Group Policy.
|
| Managing and Maintaining Group Policy
|
| Troubleshoot issues related to Group
Policy application deployment. Tools might include RSoP and the gpresult
command. |
| Troubleshoot the application of Group
Policy security settings. Tools might include RSoP and the gpresult
command. |
