Directory Services Design Exam Cram Book

	Introduction	xvii
	Self-Assessment	xxix
Chapter 1	Microsoft Certification Exams	1
	Assessing Exam-Readiness	2
	The Exam Situation	3
	Exam Layout and Design: New Case Study Format	4
	Multiple-Choice Question Format	5
	Build-List-and-Reorder Question Format	6
	Create-a-Tree Question Format	7
	Drag-and-Connect Question Format	11
	Select-and-Place Question Format	12
	Microsoft's Testing Formats	13
	Strategies for Different Testing Formats	15
	The Case Study Exam Strategy	15
	The Fixed-Length and Short-Form Exam Strategy	16
	The Adaptive Exam Strategy	17
	Question-Handling Strategies	18
	Mastering the Inner Game	19
	Additional Resources	20
Chapter 2	Overview of Active Directory Design Elements	23
	Major Design Elements of Active Directory	25
	Forests	25
	Trees	30
	Domains	31
	Organizational Units	32
	Sites	33
	DNS and DNS Namespace Planning	35
	Contiguous and Disjoint Namespaces	36
	Practice Questions	38
	Need to Know More?	46
Chapter 3	Gathering Information and Analyzing Requirements	47
	Gathering and Analyzing Business Requirements	48
	Determining Scope	48
	Assessing Organizational Models	49
	Assessing Business Processes	51
	Identifying Business Priorities	52
	Determining Client Computing Requirements	52
	Gathering and Analyzing Technical Requirements	52
	Determining the Technical Environment	53
	Assessing Security Requirements	56
	Determining Performance Requirements	57
	Assessing the Impact of Active Directory	58
	Existing Systems and Applications	58
	Technical Support Requirements	59
	Scheduled and Planned Upgrades and Rollouts	59
	Chapter Summary	60
	Practice Questions	62
	Need to Know More?	69
Chapter 4	Designing a DNS Implementation Strategy	71
	Overview of DNS and Windows 2000	72
	Identifying Business Needs	74
	DNS and Active Directory	74
	Domain Names	74
	Registered Domain Names	75
	Differences between DNS and Active Directory Domain Names	76
	DNS Infrastructure Design	76
	Integrating Windows 2000 DNS with BIND	77
	Ensuring Availability	79
	DNS Naming Strategies	82
	Use the Same DNS Domain Name Internally as Externally	82
	Use Existing DNS Servers and Delegate Active Directory Zones	83
	Create a Subdomain of the External Internet Domain for Use Internally	83
	Create an Internal Network Name that's Different from the External One	84
	Common Goals of DNS Namespace Design Options	84
	DNS Integration Options	85
	Use BIND Version 8.2.2 or Higher	85
	Segregate DNS Implementations at the Firewall	85
	Create a Separate Active Directory DNS Domain for Windows 2000	86
	Delegate only Active Directory Zones to Windows 2000 DNS Servers	86
	Deciding on a DNS Integration Strategy	87
	Practice Questions	88
	Need to Know More?	98
Chapter 5	Designing Active Directory for Delegation	99
	Identifying Business Needs	100
	Determining the Administrative Model	100
	Identifying Responsibilities for Administering Resources	101
	Determining the Type of IT Organization	102
	Centralized Vs. Decentralized Management	102
	Developing a Model for Administration	104
	Geographical (Location)	104
	Organizational (Business Unit or Department)	105
	Functional (Role)	106
	Hybrids	107
	Developing a Strategy for Delegation	109
	The Delegation of Control Wizard	110
	Inheritance and Inheritance Modification	115
	Designing an Organizational Unit Hierarchy for Delegation	116
	Design Guidelines	118
	Practice Questions	119
	Need to Know More?	127
Chapter 6	Designing Active Directory for Group Policy	129
	Business Needs for Group Policy	130
	What Does Group Policy Do?	131
	Applying Group Policy	134
	Where Can Group Policies Be Applied?	134
	Group Policy Planning Issues	138
	Filtering Using Security	138
	Inheritance Modification	139
	Optimizing Group Policy Performance	141
	Designing Group Policy	143
	Testing Group Policy	144
	Practice Questions	145
	Need to Know More?	155
Chapter 7	Designing a Domain	157
	Determining Business Needs	158
	Administrative and Security Requirements	158
	Creating the First Domain in Active Directory	160
	Planning Security Groups	161
	Types of Security Groups	161
	Nesting Security Groups	164
	Mixed Mode Vs. Native Mode	166
	Planning Organizational Unit Design	166
	Starting with Administrative Requirements	167
	Tailoring for Group Policy	168
	Practice Questions	170
	Need to Know More?	181
Chapter 8	Designing a Domain Tree	183
	Determining Business Needs	184
	Requirements for Multiple Domains	184
	Planning Domain Trees	186
	Accessing Resources between Domains	186
	Authentication across Domains	186
	Types of Trust Relationships	188
	Creating an Empty Root Domain	190
	Domain Design Issues	191
	Security	191
	WAN or LAN Constraints	192
	Legal Issues	192
	Domain-Wide Policies	193
	Multiple-Tree Forests	193
	Business Requirements	193
	Trusts between Trees	195
	Multiple Forests	195
	Business Reasons	195
	Trust Relationships	196
	Schema Issues	197
	Practice Questions	198
	Need to Know More?	206
Chapter 9	Designing a Physical Active Directory Topology	207
	Assessing Network Topology	208
	WAN Links and Available Bandwidth	208
	Replication Basics	210
	Sites	210
	Site Links	211
	Replication Schedules and Compression	212
	Planning Site Boundaries	213
	Managing Replication	214
	Planning Site Links	214
	Link Costs	215
	Link Schedules	215
	Determining the Need for Site Link Bridges	216
	Selecting Bridgehead Servers	217
	Locating Domain Controllers	220
	Global Catalog Servers	221
	Operations Masters	222
	DNS Servers	224
	Selecting an Intersite Transport	224
	RPC	224
	SMTP	225
	Comparing the Protocols	226
	Practice Questions	227
	Need to Know More?	237
Chapter 10	Sample Test	239
Chapter 11	Answer Key	273
	Glossary	293
	Index	299