Part Number: X05-39393
Course Number: 1561B Released: 2/00

Delivery Guide
Designing a Microsoft
®

Windows
®
2000 Directory
Services Infrastructure

Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any


Graphic Artist:
Kirsten Larson (S&T OnSite)
Editing Manager:
Lynette Skinner
Editor:
Jeffrey Gilbert (Wasser)
Copy Editor:
Patti Neff (S&T Consulting)
Online Program Manager:
Debbi Conger
Online Publications Manager:
Arlo Emerson (Aditi)
Online Support:
Eric Brandt (S&T Consulting)
Multimedia Development:
Kelly Renner (Entex)
Testing Leads:
Sid Benavente, Keith Cotton
Testing Developer:
Greg Stemp (S&T OnSite)
Compact Disc and Lab Testing:
Testing Testing 123
Production Support:
Ed Casper (S&T Consulting)
Manufacturing Manager:
Rick Terek (S&T OnSite)
Manufacturing Support:
Laura King (S&T OnSite)
Lead Product Manager, Development Services:


Overview..................................................................................................................1

Role of Active Directory in an Enterprise................................................................2

Conducting an Organizational Analysis ..................................................................3

Architectural Elements of Active Directory ............................................................7

Review...................................................................................................................15

0RGXOH#5=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#1DPLQJ#6WUDWHJ\

Overview..................................................................................................................1

Identifying Business Needs......................................................................................2

DNS and Active Directory.......................................................................................3

Planning Active Directory Domain Names .............................................................7

Designing a DNS Naming Strategy for Active Directory......................................11

Lab A: Designing an Active Directory Naming Strategy ......................................22

Review...................................................................................................................31

0RGXOH#6=#'HVLJQLQJ#$FWLYH#'LUHFWRU\#WR#'HOHJDWH#$GPLQLVWUDWLYH#
$XWKRULW\


LY##'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH#0RGXOH#8=#'HVLJQLQJ#$FWLYH#'LUHFWRU\#WR#6XSSRUW#*URXS#3ROLF\

Overview................................................................................................................. 1

Identifying Business Needs..................................................................................... 2

Applying Group Policy in Active Directory........................................................... 4

Planning for Group Policy .................................................................................... 10

Lab A: Designing Group Policy and a Supporting Active Directory Structure.... 21

Review .................................................................................................................. 32

0RGXOH#9=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#'RPDLQ

Overview................................................................................................................. 1

Identifying Business Needs..................................................................................... 2

Designing the Initial Active Directory Domain...................................................... 3

Planning for Security Groups.................................................................................. 4

Discussion: Designing Security Groups.................................................................. 9

Planning for OUs .................................................................................................. 11


Using Site Links in a Network................................................................................ 9

Planning the Inter-Site Replication Topology....................................................... 14

Planning for Server Placement in Sites................................................................. 19

Demonstration: Active Directory Sizer................................................................. 23

Lab A: Planning Sites to Control Active Directory Replication........................... 24

Review .................................................................................................................. 35

0RGXOH#<=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#,QIUDVWUXFWXUH

Overview................................................................................................................. 1

Conducting an Organizational Analysis.................................................................. 2

Designing an Active Directory Structure.............................................................. 11

Creating a Functional Specification...................................................................... 20

Lab A: Designing an Active Directory Infrastructure........................................... 21

Review .................................................................................................................. 31

# 'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH##Y#
OR
•
Course 2154, Implementing and Administering Microsoft Windows 2000
Directory Services, or equivalent knowledge and skills.

&RXUVH#2EMHFWLYHV#
At the end of this course, the student will be able to:
„#
Describe guidelines for gathering business and administrative information
from an organization and explain how an architect uses that information to
design an Active Directory for an enterprise.
„#
Design an Active Directory naming strategy that accommodates the
organizational structure of a business.
„#
Develop a plan to secure and delegate administrative authority over Active
Directory objects based on the administrative model of an organization.
„#
Identify business needs and scenarios that may require modification of the
Active Directory schema, and plan a policy to govern schema modification.
„#
Create an Active Directory design based on administrative Group Policy
requirements defined by business needs.
YL##'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH#„#
Design an Active Directory domain and the organizational unit hierarchy
within the domain.
„#

3:15 3:45 Lab A: Designing Delegated Administration (continued)

'D\#5#
Start End Module
9:00 9:15 Day 1 review
9:15 10:15 Module 4: Designing a Schema Policy
10:15 10:30 Break
10:30 11:00 Lab A: Modifying the Schema
11:00 11:45 Module 5: Designing Active Directory to Support Group Policy
11:45 12:45 Lunch
12:45 2:30 Lab A: Designing Group Policy and a Supporting Active
Directory Structure
2:30 2:45 Break
2:45 3:30 Module 6: Designing an Active Directory Domain
3:30 4:45 Lab A: Designing a Group and Organizational Unit Strategy

YLLL##'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH#'D\#6#
Start End Module
9:00 9:15 Day 2 review
9:15 10:00 Module 7: Designing a Multiple-Domain Structure
10:00 10:30 Lab A: Designing a Multiple-Domain Structure
10:30 10:45 Break
10:45 11:45 Module 8: Designing an Active Directory Site Topology
11:45 12:30 Lab A: Planning Sites to Control Active Directory Replication
12:30 1:30 Lunch
1:30 2:00 Module 9: Designing an Active Directory Infrastructure
2:00 3:30 Lab A: Designing an Active Directory Infrastructure

Pptview. This folder contains the PowerPoint Viewer, which is used to
display the PowerPoint slides.
„#
Studntcd. This folder contains the Web page that provides students with
links to resources pertaining to this course, including additional reading,
review and lab answers, lab files, multimedia presentations, and course-
related Web sites.
„#
Tprep. This folder contains the Trainer Preparation Presentation, a narrated
slide show that explains the instructional strategy for the course and
presentation tips and caveats. To open the presentation, on the Trainer
Materials Web page, click
Trainer Preparation Presentation
.

[##'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH#6WXGHQW#0DWHULDOV#&RPSDFW#'LVF#&RQWHQWV#
The Student Materials compact disc contains the following files and folders:
„#
Default.htm. This file opens the Student Materials Web page. It provides
students with resources pertaining to this course, including additional
reading, review and lab answers, lab files, multimedia presentations, and
course-related Web sites.
„#
Readme.txt. This file contains a description of the compact disc contents and
setup instructions in ASCII format (non-Microsoft Word document).
„#
AddRead. This folder contains additional reading pertaining to this course.

„#
Wordview. This folder contains the Word Viewer that is used to view any
Word document (.doc) files that are included on the compact disc. If no
Word documents are included, this folder does not appear.

# 'HVLJQLQJ#D#0LFURVRIWŠ#:LQGRZVŠ#5333#'LUHFWRU\#6HUYLFHV#,QIUDVWUXFWXUH##[L#'RFXPHQW#&RQYHQWLRQV#
The following conventions are used in course materials to distinguish elements
of the text.
Convention Use

‹‹

Indicates an introductory page. This symbol appears next
to a slide title when additional information on the topic is
covered on the page or pages that follow it.
bold
Represents commands, command options, and portions of
syntax that must be typed exactly as shown. It also
indicates commands on menus and buttons, icons, dialog
box titles and options, and icon and menu names.
italic In syntax statements, indicates placeholders for variable
information. Italic is also used for introducing new terms,
for book titles, and for emphasis in the text.
Title Capitals Indicate domain names, user names, computer names,
directory names, folders, and file names, except when
specifically referring to case-sensitive names. Unless
otherwise indicated, you can use lowercase letters when &RQWHQWV##
,QWURGXFWLRQ#4
#
&RXUVH#0DWHULDOV#5
#
3UHUHTXLVLWHV#6
#
&RXUVH#2XWOLQH#7
#
0LFURVRIW#2IILFLDO#&XUULFXOXP#9
#
0LFURVRIW#&HUWLILHG#3URIHVVLRQDO#3URJUDP#:
#
)DFLOLWLHV#<
#
#
#
Introduction

# ,QWURGXFWLRQ##LLL#,QVWUXFWRU#1RWHV#
The Introduction module provides students with an overview of the course
content, materials, and logistics for course 1561B
, Designing a Microsoft

section for each module.
„#
Practice using the Microsoft product(s) and tools used in this course.
„#
Practice presenting each module and demonstration.
„#
Review the Classroom Setup Guide.
„#
Practice each lab. Anticipate the questions that students may have.
„#
Identify the key points for each topic, demonstration, and lab.
„#
Identify how each demonstration and lab supports the module topics and
reinforces the module objectives.
„#
Identify examples, analogies, demonstrations, and additional delivery
strategies that will help to clarify module topics for students.
„#
Identify the information that students need to complete each lab
successfully.
3UHVHQWDWLRQ=##
63#0LQXWHV#
LY##,QWURGXFWLRQ#„#
Note any problems that you may encounter during a demonstration or lab
and determine a course of action for resolving them in the classroom.
„#
Identify additional preparation that is required to ensure the success of each

experience, and expectations of the course.
Record student expectations on a white board or flip chart that you can
reference later in class.
„#
Course Materials
Explain the purpose of all materials used in this course.
Tell students that they will have an opportunity at the end of class to
provide feedback on the course and facilities by using the Microsoft Online
Evaluation System.
„#
Prerequisites
Provide the students with the list of prerequisites that they should have met
before taking this course. This is an opportunity for you to identify students
who may not have the appropriate background or experience to attend this
course.
„#
Course Outline
Provide an overview of each module and what students will learn.
Explain how this course will meet students’ expectations by relating the
information covered in individual modules to their expectations.
„#
Microsoft Certified Professional Program
Inform students about the Microsoft Certified Professional (MCP) program
and the various certification options.
„#
Facilities
Explain the facility information for the training site.

# ,QWURGXFWLRQ##4#


0\#QDPH#LV111#
,QWURGXFH#\RXUVHOI1#
#
3URYLGH#D#EULHI#RYHUYLHZ#RI#
\RXU#EDFNJURXQG#WR#
HVWDEOLVK#FUHGLELOLW\#DV#D#
:LQGRZV#5333#LQVWUXFWRU1#
#
$VN#VWXGHQWV#WR#LQWURGXFH#
WKHPVHOYHV/#DGGUHVVLQJ#WKH#
EXOOHWHG#LWHPV#RQ#WKH#VOLGH1#
'HOLYHU\#7LS#
$V#VWXGHQWV#LQWURGXFH#
WKHPVHOYHV/#XVH#D#ZKLWH#
ERDUG#RU#IOLS#FKDUW#WR#UHFRUG#
WKHLU#H[SHFWDWLRQV#RI#WKH#
FRXUVH1#
5# # ,QWURGXFWLRQ#&RXUVH#0DWHULDOV#
„
1DPH#&DUG
„
6WXGHQW#:RUNERRN
„
6WXGHQW#0DWHULDOV#&RPSDFW#'LVF
„
&RXUVH#(YDOXDWLRQ


Professional program, send e-mail to [email protected]
.6OLGH#2EMHFWLYH#
7R#LGHQWLI\#DQG#GHVFULEH#WKH#
FRXUVH#PDWHULDOV1#
/HDG0LQ#
:H#KDYH#SURYLGHG#
HYHU\WKLQJ#\RX#QHHG#IRU#WKLV#
FRXUVH1#<RX#ZLOO#ILQG#WKH#
IROORZLQJ#PDWHULDOV#DW#\RXU#
GHVN111#
'HVFULEH#WKH#FRQWHQWV#RI#WKH#
VWXGHQW#ZRUNERRN#DQG#WKH#
6WXGHQW#0DWHULDOV#FRPSDFW#
GLVF1#
#
+DYH#VWXGHQWV#ZULWH#WKHLU#
QDPHV#RQ#ERWK#VLGHV#RI#WKH#
QDPH#FDUG1#
#
7HOO#VWXGHQWV#WKDW#D#FRXUVH#
HYDOXDWLRQ#PXVW#EH#
FRPSOHWHG#DW#WKH#HQG#RI#WKH#
FRXUVH1#
#
7HOO#VWXGHQWV#ZKHUH#WKH\#
FDQ#VHQG#FRPPHQWV1#
'HOLYHU\#7LS#

Microsoft Windows NT 4.0 to Microsoft Windows 2000
, or equivalent
knowledge.
or
„#
Successful completion of Course 2154,
Implementing and Administering
Microsoft Windows 2000 Directory Services
, or equivalent knowledge.

6OLGH#2EMHFWLYH#
7R#SUHVHQW#DQG#GHVFULEH#WKH#
SUHUHTXLVLWHV#IRU#WKLV#FRXUVH1#
/HDG0LQ#
7KH#IROORZLQJ#SUHUHTXLVLWH#
NQRZOHGJH#LV#QHHGHG#IRU#WKLV#
FRXUVH1#
7# # ,QWURGXFWLRQ#&RXUVH#2XWOLQH#
„
0RGXOH#4=#,QWURGXFWLRQ#WR#'HVLJQLQJ#D#'LUHFWRU\#
6HUYLFHV#,QIUDVWUXFWXUH
„
0RGXOH#5=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#1DPLQJ#
6WUDWHJ\
„
0RGXOH#6=#'HVLJQLQJ#$FWLYH#'LUHFWRU\#WR#'HOHJDWH#
$GPLQLVWUDWLYH#$XWKRULW\

Policy. At the end of this module, you will be able to create an Active Directory
design based on administrative Group Policy requirements defined by business
needs.
6OLGH#2EMHFWLYH#
7R#SURYLGH#DQ#RYHUYLHZ#RI#
HDFK#PRGXOH#DQG#ZKDW#
VWXGHQWV#ZLOO#OHDUQ1#
/HDG0LQ#
,Q#WKLV#FRXUVH/#ZH#ZLOO#
FRYHU111#
%ULHIO\#GHVFULEH#HDFK#
PRGXOH1#
#
$V#\RX#GHVFULEH#HDFK#
PRGXOH/#DFNQRZOHGJH#DQ\#
LQIRUPDWLRQ#WKDW#ZLOO#PHHW#
WKH#VWXGHQW#H[SHFWDWLRQV#
WKDW#\RX#UHFRUGHG#HDUOLHU1#
# ,QWURGXFWLRQ##8#&RXUVH#2XWOLQH#+FRQWLQXHG,#
„
0RGXOH#9=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#'RPDLQ
„
0RGXOH#:=#'HVLJQLQJ#D#0XOWLSOH#'RPDLQ#6WUXFWXUH
„
0RGXOH#;=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#6LWH#7RSRORJ\#
„
0RGXOH#<=#'HVLJQLQJ#DQ#$FWLYH#'LUHFWRU\#,QIUDVWUXFWXUH

0LFURVRIW#2IILFH#5333
„
0LFURVRIW#%DFN2IILFH#
6PDOO#%XVLQHVV#6HUYHU
„
0LFURVRIW#64/#6HUYHU
„
0LFURVRIW#([FKDQJH#5333
„
0LFURVRIW#%DFN2IILFH#6HUYHU#
,QIUDVWUXFWXUH#DQG#6ROXWLRQV
„
0LFURVRIW#)URQW3DJH
„
0LFURVRIW#6\VWHPV#
0DQDJHPHQW#6HUYHU
„
.QRZOHGJH#0DQDJHPHQW#
6ROXWLRQVMicrosoft Official Curriculum (MOC) is hands-on instructor-led, Web-based,
or self-paced technical training. Microsoft develops MOC courses to educate
computer professionals who develop, support, and implement solutions by
using Microsoft products, solutions, and technologies. MOC courses are
available or in development for the following products and solutions:
„#
Microsoft Windows 2000
„#
Microsoft Office 2000

7R#H[SODLQ#WKH#0LFURVRIW#
2IILFLDO#&XUULFXOXP#SURJUDP#
DQG#SURYLGH#LQIRUPDWLRQ#
DERXW#FXUULFXOXP#SDWKV1#
/HDG0LQ#
/HW¶V#EULHIO\#WDON#DERXW#WKH#
0LFURVRIW#2IILFLDO#&XUULFXOXP#
SURJUDP1#
# ,QWURGXFWLRQ##:#0LFURVRIW#&HUWLILHG#3URIHVVLRQDO#3URJUDP#
„
0LFURVRIW#&HUWLILHG#6\VWHPV#(QJLQHHU#+0&6(,
„
0LFURVRIW#&HUWLILHG#'DWDEDVH#$GPLQLVWUDWRU#+0&'%$,
„
0LFURVRIW#&HUWLILHG#6ROXWLRQ#'HYHORSHU#+0&6',
„
0LFURVRIW#&HUWLILHG#3URIHVVLRQDO#.#6LWH#%XLOGLQJ
+0&3#.#6LWH#%XLOGLQJ,
„
0LFURVRIW#&HUWLILHG#3URIHVVLRQDO#+0&3,
„
0LFURVRIW#&HUWLILHG#7UDLQHU#+0&7,The Microsoft Certified Professional program provides the best method to
prove your command of current Microsoft products and technologies. The
following table describes each certification in more detail.

MCSDs are qualified to build Web-based, distributed, and commerce
applications by using Microsoft products, such as Microsoft SQL Server,
Microsoft Visual Studio
®
, and Component Services.

Microsoft Certified
Professional + Site Building
(MCP + Site Building)
MCPs with a specialty in site building are qualified to plan, build, maintain, and
manage Web sites by using Microsoft technologies and products.
Microsoft Certified
Professional (MCP)
MCPs demonstrate in-depth knowledge of at least one product by passing any
one exam (except Networking Essentials).
Microsoft Certified Trainer
(MCT)
MCTs demonstrate the instructional and technical skills that qualify them to
deliver Microsoft Official Curriculum through Microsoft Certified Technical
Education Centers (Microsoft CTEC).

6OLGH#2EMHFWLYH#
7R#SURYLGH#VWXGHQWV#ZLWK#
LQIRUPDWLRQ#DERXW#WKH#
0LFURVRIW#&HUWLILHG#
3URIHVVLRQDO#SURJUDP1#
/HDG0LQ#
7KH#0LFURVRIW#&HUWLILHG#
3URIHVVLRQDO#SURJUDP#
LQFOXGHV#WKHVH#

,PSRUWDQW#
# ,QWURGXFWLRQ##<#)DFLOLWLHV#
Building Hours
Parking
Rest Rooms
Meals
Phones
Messages
Smoking
Recycling
Class Hours
6OLGH#2EMHFWLYH#
7R#LQIRUP#VWXGHQWV#RI#FODVV#
ORJLVWLFV#DQG#UXOHV#IRU#WKH#
WUDLQLQJ#VLWH1#
/HDG0LQ#
%HIRUH#ZH#VWDUW/#OHW¶V#JR#RYHU#
WKH#FODVV#ORJLVWLFV1#
([SODLQ#WKH#FODVV#KRXUV/#
H[WHQGHG#EXLOGLQJ#KRXUV#IRU#
ODEV/#SDUNLQJ/#UHVW#URRP#