Windows Server 2003 Active Directory

You Will Learn How To

Organize and maintain a Windows Server 2003 Active Directory (AD) enterprise
Build a precise and purpose-oriented Organizational Unit (OU) structure
Construct an efficient replication topology for your network and site layout
Delegate administration and optimize group policy deployment
Deploy an appropriate DNS architecture and namespace
Restructure domains and forests without interrupting your business operation

Course Benefits

The Active Directory has become a corporate standard in providing a unified architecture for single sign-on, identity management and desktop configuration. In this comprehensive hands-on course, you learn the essential skills needed to design, implement and support an Active Directory enterprise. You also gain the skills to configure the DNS architecture and build site replication topology.

Who Should Attend

Anyone who needs to organize and maintain a Windows Server 2003 infrastructure as an enterprise business solution. Course 595, "Windows Server 2003 Comprehensive Introduction," or equivalent knowledge is assumed.

Hands-On Training

Throughout this course, you gain practical experience in building, organizing and managing the Active Directory. Extensive hands-on exercises, models and case studies include:

Restructuring and merging domains and forests
Building the AD-integrated DNS namespace
Creating site links for optimal replication
Setting up an infrastructure for delegation
Backing up the AD and restoring authoritatively
Deploying applications automatically
Optimizing inter/intra site multimaster replication
Preparing the AD for Microsoft Exchange
Migrating users, groups and security between forests

Course 596 Content

Windows Server 2003 Overview

Benefits of the Active Directory
Analyzing interoperability requirements

Defining the Active Directory

Designing the infrastructure

Defining an optimal naming strategy for forests, domains, OUs and sites
Building the forest root domain
Exploiting Kerberos trust relationships
Integrating the branch offices with the AD

Analyzing Directory Service components

Active Directory Application Mode (ADAM)
Identity Integration Feature Pack (IIFP)
Active Directory Federation Services (ADFS)

Maintaining the Infrastructure

Determining directory partitions

Identifying forest schema implications
Configuring application data partitions
Establishing Global Catalog fault-tolerance

Configuring domain controllers

Enabling universal group caching
Raising domain and forest functional levels
Dispatching Flexible Single Master Operations (FSMO) roles effectively
Renaming domain controllers and domains
Backing up and restoring the AD

Constructing the Replication Topology

Investigating Multimaster replication

Evaluating Update Sequence Numbers
Configuring sites, subnets, connection objects and bridgehead servers
Linking and bridging sites efficiently
Solving attribute collision issues

Replication topology maximization

Eliminating the single point of failure
Taming and predicting the Knowledge Consistency Checker (KCC)
Defining optimal logical site masks
Determining site-link costs and periodicities
Comparing the inter/intra site transport protocols

Automating the Administration

Securing AD objects

Leveraging multilevel inheritance
Adjusting object visibility

Creating administrative roles

Distributing administrative power
Developing the delegation hierarchy

Configuring workstations and servers with Group Policies

Fine tuning with filtering, loopback control, overriding and blocking inheritance
Defining documentation templates

Installing and maintaining applications/OS

Implementing application deployment
Ensuring application compatibility
Comparing system installation techniques

Building an Efficient DNS Structure

Selecting the appropriate architecture

Merging DNS into your existing namespace
Constructing AD-integrated DNS
Choosing DNS replication scopes
Identifying NetBIOS requirements

Configuring and maintaining DNS servers

Connecting DNS to the Internet
Integrating DNS and DHCP
Conditional forwarding and stub zones

Restructuring the Active Directory

Preparing for the new architecture

Intra vs. inter forest migrations
Pruning and grafting domains
Designing a solid recovery plan
Adapting accounts with SID-History

Performing the migration

Leveraging the Active Directory Migration Tool (ADMT)
Installing a Password Export Server (PES)
Translating security during migration
Troubleshooting failed migrations

Integrating with other platforms

Extending the schema for Exchange
Implementing Microsoft Identity Management for UNIX

<< Back to Windows Systems Course List

Related Courses

Active Directory and Windows Server are registered trademarks of Microsoft Corporation.

Windows Training

Windows Server 2003 Active Directory: Hands-On