MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory (Exam #70-640)
Format: PDF / Kindle (mobi) / ePub
MCTS Guide to MicrosoftWindows Server 2008 Active Directory Configuration prepares students to develop the skills needed to manage a Windows Server 2008 system and to prepare to pass the MCTS 70-640 certification exam. While the focus of topics is on the configuration of Active Directory and related services, coverage of Windows foundational topics such as the file system and networking are also included. Extensive coverage begins with an introduction to Windows Server 2008 and goes on to active directory design, account management, group policy management and configuration, certificate services, AD LDS, AD RMS, AD FS, server core, Windows Hyper-V virtualization, and server management.
old OS settings are migrated to Windows Server 2008. ■ Windows Server Core is a new installation option in Standard, Enterprise, and Datacenter editions. The traditional Windows GUI isn’t available in Server Core. Initial configuration tasks, such as changing the server name and setting IP address information, must be done from the command line. 2 70 Chapter 2 Installing Windows Server 2008 ■ The Hyper-V server role can be installed on 64-bit versions of Windows Server 2008. Your
These policies are applied to a computer when the computer starts. • User Configuration—Used to set policies that apply to all users within the GPO’s scope. User policies are applied when a user logs on to any computer in the domain. Each node contains a Policies folder and a Preferences folder. Settings configured in the Policies folder are applied to users or computers and can’t be overridden by users. Settings in the Preferences folder are applied to users or computers but are just that:
object names in one domain are updated in references to these objects in other domains. For example, if a user account in Domain A is a member of a group in Domain B and the user account name is changed, the infrastructure master in Domain A is responsible for replicating the change to Domain B. By default, the first domain controller in each domain is the infrastructure master for that domain. • Domain naming master —This domain controller manages adding, removing, and renaming domains in the
conglomerates with diverse business units might want to operate as separate forests. With this structure, domains in different forests can still share information through trust relationships, but changes to the schema—perhaps from installing an Active Directory–integrated application, such as Microsoft Exchange—don’t affect the schema of domains in a different forest. • Forestwide administrative accounts—Each forest has two groups defined with unique rights to perform operations that can affect
less often than a larger branch office that requires more timely updates. • Application efficiency—Some distributed applications, such as Exchange Server (an e-mail and collaboration application) and Distributed File System (DFS), use sites to improve efficiency. These applications ensure that client computers always try to access data in the same site before attempting to use the WAN link. Sites are created by using Active Directory Sites and Services. A site is linked to an IP subnet that