Part Number: X05-49547
Released: 4/2000
Delivery Guide
Implementing and
Administering Microsoft
®
Windows
®
2000 Directory
Services
Course Number: 2154A Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
Online Program Manager: Debbi Conger
Online Publications Manager: Arlo Emerson (Aditi)
Online Support: David Myka (S&T Consulting)
Multimedia Development: Kelly Renner (Entex)
Courseware Testing: Data Dimensions, Inc.
Production Support: Irene Barnett (S&T Consulting)
Manufacturing Manager: Rick Terek
Manufacturing Support: Laura King (S&T OnSite)
Lead Product Manager, Development Services: Bo Galford
Lead Product Managers: Gerry Lang, Julie Truax
Group Product Manager: Robert Stewart Course Number: 2154A
Part Number: X05-49547
Released: 4/2000
Implementing and Administering Microsoft® Windows® 2000 Directory Services iii Contents
Introduction
Course Materials ......................................................................................................2
Prerequisites.............................................................................................................4
Course Outline .........................................................................................................5
Microsoft Certified Professional Program ...............................................................9
Installing and Configuring DNS to Support Active Directory...............................17
Lab A: Installing and Configuring DNS to Support Active Directory...................22
Best Practices.........................................................................................................29
Review ...................................................................................................................30
Module 3: Creating a Windows 2000 Domain
Overview..................................................................................................................1
Introduction to Creating a Windows 2000 Domain .................................................2
Installing Active Directory ......................................................................................3
Lab A: Creating a Windows 2000 Domain............................................................12
The Active Directory Installation Process .............................................................16
Examining the Default Structure of Active Directory ...........................................27
Performing Post Active Directory Installation Tasks ............................................29
Lab B: Performing Post Active Directory Installation Tasks ................................38
Troubleshooting the Installation of Active Directory ............................................44
Removing Active Directory...................................................................................46
Best Practices.........................................................................................................48
Module 5: Publishing Resources in Active Directory
Overview................................................................................................................. 1
Introduction to Publishing Resources ..................................................................... 2
Setting Up and Administering Published Printers................................................... 3
Implementing Printer Locations............................................................................ 10
Setting Up and Administering Published Shared Folders..................................... 17
Comparing Published Objects with Shared Resources ......................................... 19
Lab A: Publishing Resources in Active Directory................................................ 20
Troubleshooting Published Resources .................................................................. 26
Best Practices........................................................................................................ 27
Review .................................................................................................................. 28
Module 6: Delegating Administrative Control
Overview................................................................................................................. 1
Object Security in Active Directory........................................................................ 2
Controlling Access to Active Directory Objects................................................... 13
Delegating Administrative Control of Active Directory Objects.......................... 21
Lab B: Delegating Group Policy Administration.................................................. 47
Monitoring and Troubleshooting Group Policy.................................................... 52
Best Practices........................................................................................................ 59
Review .................................................................................................................. 60
Module 8: Using Group Policy to Manage User Environments
Overview................................................................................................................. 1
Introduction to Managing User Environments........................................................ 2
Introduction to Administrative Templates .............................................................. 4
Using Administrative Templates in Group Policy .................................................. 8
Implementing and Administering Microsoft® Windows® 2000 Directory Services v Lab A: Using Administrative Templates to Assign Registry-Based
Group Policy..........................................................................................................19
Assigning Scripts with Group Policy.....................................................................25
Lab B: Using Group Policy to Assign Scripts to Users and Computers ................30
Using Group Policy to Redirect Folders ................................................................35
Lab C: Implementing Folder Redirection Policy...................................................40
Best Practices.........................................................................................................36
Review ...................................................................................................................37
Module 10: Creating and Managing Trees and Forests
Overview..................................................................................................................1
Introduction to Trees and Forests.............................................................................3
Creating Trees and Forests.......................................................................................8
Trust Relationships in Trees and Forests ...............................................................13
Lab A: Creating Domain Trees and Establishing Trusts........................................24
The Global Catalog................................................................................................34
Strategies for Using Groups in Trees and Forests..................................................38
Lab B: Using Groups in a Forest ...........................................................................43
Troubleshooting Creating and Managing Trees and Forests .................................50
Best Practices.........................................................................................................51
Review ...................................................................................................................52
Module 11: Managing Active Directory Replication
Overview..................................................................................................................1