MCSA self-paced training kit Book

A
Access Control Entries (ACLs), 26
access concentrator, 593-594
accessing
    Add/Remove Hardware Wizard, 702
    ATM, 461
    backups, 722
    Device Manager snap-in, 703
    files/folders, 687-688
    GPOs, 377
    group accounts, 358
    hardware profiles, 707
    IIS, 828
    metabases, 844
    printers, 428-429, 688
    Recovery Console, 745
    RRAS server, 574, 584-586
    security, 674
    Terminal Services, 884
    User mode, 313
    VPNs, 600
    Web sites, 854-856
    WebDAV, 869
accounts. See group accounts; user accounts
ACLs (Access Control Entries), 26
Action menu (MMC), 308
activating license servers, 890-891
Active Desktop, enabling, 892
Active Directory, 3, 4. See also directory services
    administration, 300-301
    auditing, 683, 686, 688
    APIs, 248
    data model, 247
    database layer, 254
    Delegation of Control wizard, 299-300
    directory database, 272
    distinguished names (DN), 244
    DNS, 24
    domains, 23, 26-27, 31, 294-295, 681
    DSA, 252-254
    Extensible Storage Engine (EXE), 254-255
    Find drop-down menu, 292
    forests, 28-29
    global catalogs, 28, 242
    globally unique identifier (GUID), 245
    GPOs, 677
    IIS, 844
    In drop-down menu, 292
    inheritance, 298
    Installation Wizard, 269-271
    Kerberos protocol, 663
    LDAP, 24, 239, 250, 252
    logon traffic, 268
    Manager, 276
    multimaster replication, 253
    name formats, 24-25
    namespaces
        contiguous/disjointed, 243
        external/internal, 257-260
        first layer, 261-262
        root domain, 261
        second layer, 261-262
    objects, 25-26, 287-288, 688
        administration, 247, 298-299
        creating, 288-290
        deleting, 293
        identification, 253
        locating, 290-292
        moving, 294-296
    organizational units (OU), 26, 265, 285-286
    orphan pruners, 445
    permissions, 296-298
    printing, 442-443
    protocols, 248
    publishing applications, 379
    referrals, 254
    relative distinguished name, 245
    replication, 253, 268
    results, 293
    scalability, 23
    schemas, 28, 241, 247
    security model, 247
    services, 240
    sites, 32
    stand-alone servers, 274
    transaction processing, 253
    trees, 27-28
    trust relationships, 29-31
    user principal name (UPN), 246
    Users and Computers snap-in, 325
    virtual containers, 250
Active Server Pages (ASP), 843-844, 850, 870
adding. See also installation
    aliases, 611
    applications, 893-894
    components, 69
    disks, 159
    domain controllers, 270
    FTP sites, 866
    GPOs, 386
    hardware, 701-702
    memberships, 355, 362, 365, 371-373
    objects, 285-287
    resource records, 527
    Server02, 277-278
    sites, 387
    snap-ins, 385-386
    Web sites, 866
addresses
    allocation, 573
    editing, 333-334
    network address translation (NAT), 556
    private, 472-473
    remote access, 573
    static, 469-471, 576
    VPNs, 599
administration, 247
    Administrator account, 320-321
    built-in accounts, 366, 368
    certificates, 636-638
    delegation, 829
    Dfs, 215
    domains, 23
    group accounts, 360-361
    IIS, 827
    integrated tools, 5
    objects, 298-299
    passwords, 68
    remote, 884
    Web sites, 864-865
Administration tools
    installation, 279-280
    Telnet Service, 882-883
    Terminal Services, 886, 892, 900-901
ADSL (Asymmetric Digital Subscriber Line), 568
advanced certificate configuration, 636
agents, 787
alerts, 802-803
algorithms, 622
alias files, 609, 611
allocation, addresses,573
Alpha-based operating systems, 12
analog connections
    domains, 22
analysis, security, 674-676
anonymous authentication, 871
answer files, 99-105, 112, 139-140
anti-replay datagrams, 622
API (application programming interface), 248, 570, 863
AppleTalk, 463, 552, 558
Application layer (TCP/IP), 469
Application Server mode (Terminal Services), 884-885, 901-904
applications
    adding, 893-894
    answer files, 139-140
    deployment, 894-895
    distribution, 378
    installation, 141
    log files, 689
    publishing, 379, 393-394
    Readme.doc files, 41
    remote sessions, 895
    RRAS, 560
    Task Manager, 815
architecture
    authentication, 645
    Certificate Services, 629-632
    drivers, 14-18
    environment subsystems, 9
    Executive, 10, 11
    GDI, 12
    GPOs, 382
    HAL, 12, 13
    I/O Manager, 11
    integral subsystems, 10
    Interprocess Communication Manager, 11
    kernal mode, 7, 8
    Object Manager, 12
    Plug and Play Manager, 12
    Power Manager, 12
    Process Manager, 12
    Security reference monitor, 11
    VMM, 11
    user mode, 7, 8
archives, log files, 691
arp utility, 468, 473
ASP (Active Server Pages), 870
assigning
    computer names, 76
    folders, 350-352
    profiles, 337, 341-342, 348-350
    static IP addresses, 576
Asymmetric Digital Subscriber Line (ADSL), 568
Asychronous NetBEUI, 569
Asynchronous Transfer Mode (ATM) protocol, 458-459, 568
    accessing, 461
    ATM over xDSL, 460-461
attributes
    certificates, 627
    NTFS, 186
    objects, 25
auditing, 685
    Active Directory, 683, 686, 688
    configuration, 684-686
    domain controllers, 685
    files, 683, 687-688
    folders, 683, 687-688
    group accounts, 683
    log files, 690
    logon events, 686
    policies, 682-683, 687
    printers, 688
    security, 839
    servers, 685
    shutdown, 683
    tracking, 684
    user accounts, 683, 685-686
authentication
    anonymous, 838
    architecture, 645
    basic, 837
    clients, 635, 666, 871
    computers, 621
    digest, 837, 870-871
    GPOs, 389
    IAS, 573
    IIS, 838
    integrated, 837
    installation, 57
    Kerberos protocol, 663, 665, 667-668
    mutual, 570, 666
    NTLM, 881
    PPTP, 595
    private keys, 625
    public keys, 625
    RADIUS, 552-553, 559, 581
    RRAS, 552-553, 612
    servers (AS), 635, 666
    Telnet Service, 876
    user accounts, 319, 569
    VPNs, 600-601
    Windows, 580-581
Authenticode, 647, 648
Author mode (MMC), 313
authorization, RRAS, 491, 552-553
auto-enrollment, 398
Automatic Private IP Addressing (APIPA), 472-473, 478-479
automating
    backups, 711
    installation, 138-139
    tasks, 379
    tunnels, 594
availability
    operating systems, 693

B
backup domain controllers. See BDCs; domains controllers
backups. See also Windows Backup
    access rights, 722
    automating, 711
    built-in accounts, 369
    catalogs, 750
    combining, 717, 718
    compression, 721
    configuration, 717
    copy, 716, 718
    creating, 724
    daily, 712, 716
    data, 710
    default settings, 714, 715
    differential, 716, 718
    DHCP, 499
    domain controllers, 368
    encryption, 649
    files/folders, 712
        closing, 718
        before installation, 41
        selecting, 719, 720
    full/normal, 715, 718
    IIS, 831-832
    incremental, 716, 718
    Iomega Zip drives, 712
    local, 713
    log files, 714, 721, 726
    media, 722
    monthly, 712
    multiple, 717
    naming, 722
    networks, 713
    permissions, 711
    planning, 712
    removable media devices, 719
    scheduling, 722-723, 727-730
    sets, 750
    starting, 720-721
    storing, 720-721, 725
    tape, 712
    user notification, 718
    verification, 725
    viewing, 729-730
    weekly, 712
bandwidth, throttling, 825-826, 862
basic authentication, 871
basic input/output system (BIOS), 46
basic storage 150
batch files, 141-142, 396
BDCs (backup domain controllers), 22, 85
blocking inheritance, 391
BIOS (basic input/output system), 46
boot sectors, 48
    NTFS, 185
    repairing, 748
    viruses, 42
bootable CD-ROM, 74, 120, 136-137
browsers, printers, 435-437, 449-450
built-in user accounts
    Administrator, 320-321
    domains, 367-368
    global, 366
    system, 370
business function-based organizational units, 265

C
cache
    I/O Manager, 11
    name servers, 522
callback feature, 571, 576
caller ID, 571, 576
CALs (Client Access Licenses), 50-51
canceling print jobs, 434
capture filters, 808
    displaying, 810-812
    protocols, 809
.cat files, 705
catalogs, 242, 750
CD-ROM
    booting, 74, 120
    CDFS, 147
    drives, 92
    installation, 53, 55-56
centralized administration of domains, 23
Certificate Services
    architecture, 629-632
    backups, 723
    Component Object Model (COM), 632
    databases, 631
    exit modules, 631
    extension handlers, 631
    installation, 58, 635-636, 638-640
    intermediary, 630, 631
    log files, 631
    policies, 628, 629, 631
    private keys, 629
    queues, 631
    server engines, 630
    standards, 629
certificates
    administration, 636, 637, 638
    attributes, 627
    Certificate Authority (CA), 626-627, 634, 636
    configuration, 636, 638-640
    CTLs, 842
    distribution, 635
    drivers, 703-705
    enrolling, 633
    hierarchy, 628
    IIS, 838
    installation, 635
    license servers, 890
    requests, 632, 633
    revocation lists (CRLs), 628, 631
    running, 641, 642, 643
    trusted, 398
    user accounts, 334
    Web sites, 638
    X.507 standard, 627
Certutil.exe utility, 637
Challenge Handshake Authentication Protocol (CHAP), 569
Change Journal, NTFS, 181-182
Check Disk tool, 763-764
checking upgrades, 66
child objects
    permissions, 388
    policy containers, 391
    windows, 308
cipher command-line utility, 653, 654
CISC (Complex Instruction Set Computing), 7
classes
    drivers, 17
    objects, 26
    stores, 381
Client Creator (Terminal Services), 886
clients
    authentication, 666, 871
    certificates, 635
    Client Access Licenses (CALs), 50-51
    DHCP, 486
    dial-in, 584-586
    DNS, 533-534
    installation, 69
    licensing, 885, 888
    memory, 891
    monitoring, 337
    printers, 448
    remote access, 563
    reservations, 490-491
    scopes, 489
    Terminal Services, 884
    tunnels, 591, 593
    user accounts, 336
    WebDAV, 869
    WINS, 505
closing files before backups, 718
clusters, 170, 172, 739
Cmdlines.txt file, 138-140
COM (Component Object Model), 632
combining backups, 717, 718
commands
    prompts, 653
    Net Shell utility, 610-611
communication
    IPSec, 660
    networks, 5
communities, SNMP, 785
Compact.exe utility, 767
Compaq drive array, 55
comparing
    file systems, 49
    mirrored volumes and striped volumes with parity, 738-739
compatibility
    hardware installation, 43
    IPSec, 658
    NTFS, 189
Complex Instruction Set Computing (CISC), 7
Component Object Model (COM), 632
components
    adding, 69
    COM+, 843
    deleting, 69
compression
    backups, 721
    files/folders, 767-769
    HTTP, 833-834
    NTFS, 47, 769-770
compulsory tunnels, 593-594
computers
    authentication, 621
    disasters, 731
    GPOs, 385
    names, 68, 76
    physical address, 493
    portable, 706
confidentiality of data, 622
configuration
    audit policies, 683-687, 690
    backups, 717
    certificates, 636, 638-640
    display settings, 79
    domains, 654-656
    GPOs, 384
    installation, 68
    printers, 415-418
    restore settings, 751-752
    roaming user profiles (RUP), 340-341
    RRAS, 544-545
    security, 674, 680-681
    Security Template snap-in, 678-679
    service packs, 708-709
    software, 68
    UPS, 732
    Web sites, 852-854
    Windows 2000 Server, 77
conflicts
    child/parent policy containers, 391
    GPOs, 378
connections
    accepted, 578-579, 604
    hardware, 695, 697
    Internet, 590
    Intranet, 590-591
    licensing, 875
    printers, 447
    rejected, 602-604
    TCP/IP, 474-477
    Telnet Client, 880-882
    Terminal Services, 901-904
consoles
    Author mode, 313
    customizing, 310, 314-318
    folders, 316
    MMC, 386
    saving, 307
    snap-ins, 311-312
    User mode, 313
    windows, 308
consolidation, domains, 89, 90
containers
    GPOs, 380-381, 392
    objects, 26
    parents, 390
    virtual, 250
contiguous namespaces, 243
conversion, FAT to NTFS, 187-188
copy backups, 716, 718
copying files/folders, 63, 66, 208, 769
counter log files, 797, 802-803
creating
    answer files, 99-105
    backups, 724
    batch files, 141-142
    consoles, 314-318, 386
    Dfs, 281-282
    directories, 870
    domain controllers, 270-271
    Emergency Repair Disk, 747
    floppy disks, 886
    folders, 344-345
    FTP sites, 859-860
    GPOs, 400-401
    group accounts, 361, 364
    local accounts, 332
    organizational units, 263-265, 288-290
    roaming user profiles, 347
    scripts, 611
    scopes, 487-491
    security databases, 677-679
    Setup disks, 54, 70, 71, 72
    tunnels, 592
    user accounts, 320, 324-325
    virtual directories, 837-848
    volumes, 738-739
    Web sites, 845-846, 859-860
CRLs (certificate revocation lists), 631
cryptography, see decryption; encryption, 622
CSPs (cryptographic service providers), 647
customizing MMC consoles, 309-310, 314-318

D
DACLs (directory access control lists), 869, 872
daily backups, 712, 716
data
    backups, 710
    captured, 810-813
    confidentiality, 622
    configuration, 751-752
    deleting, 752-755
    encryption, 570, 623, 651
    integrity, 621
    mirrored volumes (RAID 1), 755-756
    models, 247
    protection, 649
    recording, 40
    recovering, 649, 651
    restoring, 749-750
    striped volumes with parity (RAID 5), 757
    tunnels, 591-592
databases
    directory, 272
    layers, 254
    security, 679
    servers, 631
datagrams, anti-replay, 622
date and time
    GUI mode, 76
    installation, 69
DDF (Data Decryption Field), 651
DDNS (Dynamic DNS), 528-529, 531-532
debugging log files, 65, 535
decryption
    command prompts, 653
    EFS, 648, 651-652
    folders, 653
dedicated lines, VPNs, 590
Default Domain Policy, 392
default gateway, 471
default settings
    backups, 714-715
    hardware profiles, 705
    Mixed mode, 370
    RRAS, 547-551
    Safe mode, 742
defragmenting, disks, 764-766
delegation
    administration, 829
    Kerberos protocol, 667, 669-670
deleting
    aliases, 611
    components, 69
    data, 752-755
    Default Domain Policy, 392
    Dfs root, 280
    GPOs, 386
    group accounts, 363-364
    mirrored volumes (RAID 1), 735
    objects, 293-294
    spanned volumes, 158
    user accounts, 343
Delegation of Control wizard, 299
delimiters, 851
demand-dial routing, 543, 558
department-based organizational units, 265
deployment, applications, 894-895
details pane (MMC), 309
detection, Plug and Play hardware, 78
device drivers
    I/O Manager, 11
    installation, 695
    Plug and Play, 698
Device Manager snap-in (MMC), 702
    access rights, 703
    read-only mode, 703
devices. See also non-Plug and Play devices
    enabling/disabling, 700, 706
    installation, 699, 700
    removable media, 719
    uninstallation, 700
Dfs (domain file system), 233-234, 280-283
    administration, 215
    directories/shares, 222-223
    limitation, 216
    links, 220-221, 225
    replication, 226-227
    root, 218, 220-221
    stand-alone, 217, 219, 224-225
DHCP (Dynamic Host Configuration Protocol), 59
    authorization, 491
    backups, 499
    installation, 57, 485-486, 492
    leases, 481-485
    Relay Agen