Getting Started | MCSE Training Kit (Exam 70-220): Designing Microsoft Windows 2000 Network Security: Designing Microsoft(r) Windows(r) 2000 Network Security (IT-Training Kits)

This self-paced training course contains activities and labs to help you learn how to design Windows 2000 network security. To improve your understanding of Windows 2000 security, it's recommended to deploy security using Windows 2000 Advanced Server; however, the software isn't needed to perform any of the activities or labs in this course.

Hardware Requirements

To successfully run the evaluation edition of Windows 2000 Advanced Server, all hardware should be on the Microsoft Windows 2000 Hardware Compatibility List (HCL). You can download the latest version of the HCL from the Hardware Compatibility List Web page at www.microsoft.com/hwtest/hcl/. Each computer must have the following minimum configuration:

32-bit 166 MHz Pentium processor
64 MB memory for networking with one to five client computers; 128 MB minimum is recommended for most network environments
2 GB free hard drive space
12X or faster CD-ROM drive
SVGA monitor capable of 800 X 600 resolution (1024 X 768 recommended)
High-density 3.5-inch disk drive, unless your CD-ROM is bootable and supports starting the setup program from a CD-ROM
Microsoft Mouse or compatible pointing device

Software Requirements

A copy of the 120-day evaluation edition of Windows 2000 Advanced Server isn't required to do the activities and labs in this course.

CAUTION
The 120-day Evaluation Edition of Windows 2000 Advanced Server provided with this training kit is not the full retail product and is provided only for training purposes. Microsoft Technical Support doesn't support this evaluation edition. For additional support information regarding this book and the CD-ROMs (including answers to commonly asked questions about installation and use), visit the Microsoft Press Technical Support Web site at mspress.microsoft.com/support/. You can also e-mail TKINPUT@MICROSOFT.COM, or send a letter to Microsoft Press, Attn: Microsoft Press Technical Support, One Microsoft Way, Redmond, WA 98502-6399.

Setup Instructions

The following information is a checklist of the tasks that you need to perform to prepare your computer to install the evaluation software. If you don't have experience installing Windows 2000 or another network operating system, you may need help from an experienced network administrator. As you complete a task, mark it off in the check box. Step-by-step instructions for each task follow.

Create Windows 2000 Advanced Server setup disks
Run the Windows 2000 Advanced Server Pre–Copy and Text Mode Setup Routine
Run the GUI mode and gathering information phase of Windows 2000 Advanced Server Setup
Complete the Installing Windows Networking Components phase of Windows 2000 Advanced Server Setup
Complete the hardware installation phase of Windows 2000 Advanced Server Setup

NOTE
The installation information provided will help you prepare a computer to install the evaluation software. It's not intended to teach you installation.

Installing Windows 2000 Advanced Server

You should install Windows 2000 Advanced Server on a computer with no formatted partitions. During installation, you can use the Windows 2000 Advanced Server Setup program to create a partition on your hard drive, on which you install Windows 2000 Advanced Server as a stand-alone server in a workgroup.

To create Windows 2000 Advanced Server Setup disks

Complete this procedure on a computer running MS-DOS or any version of Windows with access to the Bootdisk directory on the Windows 2000 Advanced Server installation CD-ROM. If your computer is configured with a bootable CD-ROM drive, you can install Windows 2000 without using the Setup disks. To complete this procedure as outlined, bootable CD-ROM support must be disabled in the basic input/output system (BIOS).

IMPORTANT
This procedure requires four formatted 1.44-MB disks. If you use disks that contain data, the data will be overwritten without warning.

Label the four blank, formatted 1.44-MB disks as follows:
- Windows 2000 Advanced Server Setup Disk #1
- Windows 2000 Advanced Server Setup Disk #2
- Windows 2000 Advanced Server Setup Disk #3
- Windows 2000 Advanced Server Setup Disk #4
Insert the Microsoft Windows 2000 Advanced Server CD-ROM into the CD-ROM drive.
If the Windows 2000 CD-ROM dialog box appears prompting you to install or upgrade to Windows 2000, click No.
Open a command prompt.
At the command prompt, change to your CD-ROM drive. For example, if your CD-ROM drive name is E, type e: and press Enter.
At the command prompt, change to the Bootdisk directory by typing cd bootdisk and pressing Enter.
If you are creating the setup boot disks from a computer running MS-DOS or a Windows 16-bit operating system, type makeboot a: (where A is the name of your floppy disk drive) and press Enter. If you are creating the setup boot disks from a computer running Windows NT or Windows 2000, type makebt32 a: (where A is the name of your floppy disk drive), then press Enter. Windows 2000 displays a message indicating that this program creates the four setup disks for installing Windows 2000. It also indicates that four blank, formatted, high-density floppy disks are required.
Press any key to continue. Windows 2000 displays a message prompting you to insert the disk that will become the Windows 2000 Setup Boot Disk.
Insert the blank formatted disk labeled Windows 2000 Advanced Server Setup Disk #1 into the floppy disk drive and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the disk labeled Windows 2000 Setup Disk #2.
Remove Disk #1, insert the blank formatted disk labeled Windows 2000 Advanced Server Setup Disk #2 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the disk labeled Windows 2000 Setup Disk #3.
Remove Disk #2, insert the blank formatted disk labeled Windows 2000 Advanced Server Setup Disk #3 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the disk labeled Windows 2000 Setup Disk #4.
Remove Disk #3, insert the blank formatted disk labeled Windows 2000 Advanced Server Setup Disk #4 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message indicating that the imaging process is done.
At the command prompt, type exit and then press Enter.
Remove the disk from the floppy disk drive and the CD-ROM from the CD-ROM drive.

Running the Windows 2000 Advanced Server Pre–copy and text mode setup routine

It's assumed for this procedure that your computer has no operating system installed, the disk is not partitioned, and bootable CD-ROM support, if available, is disabled.

Insert the disk labeled Windows 2000 Advanced Server Setup Disk #1 into the floppy disk drive, insert the Windows 2000 Advanced Server CD-ROM into the CD-ROM drive, and restart your computer.
After the computer starts, Windows 2000 Setup displays a brief message that your system configuration is being checked, and then the Windows 2000 Setup screen appears. Notice that the gray bar at the bottom of the screen indicates that the computer is being inspected and that the Windows 2000 Executive is loading, which is a minimal version of the Windows 2000 kernel.
When prompted, insert Setup Disk #2 into the floppy disk drive and press Enter.
Notice that Setup indicates that it is loading the hardware abstraction layer (HAL), fonts, local specific data, bus drivers, and other software components to support your computer's motherboard, bus, and other hardware. Setup also loads the Windows 2000 Setup program files.
When prompted, insert Setup Disk #3 into the floppy disk drive and press Enter.
Notice that Setup indicates that it is loading disk drive controller drivers. After the drive controllers load, the setup program initializes drivers appropriate to support access to your disk drives. Setup might pause several times during this process.
When prompted, insert Setup Disk #4 into the floppy disk drive and press Enter.
Setup loads peripheral support drivers, like the floppy disk driver and file systems, and then it initializes the Windows 2000 Executive and loads the rest of the Windows 2000 Setup program. If you're installing the evaluation version of Windows 2000, a Setup notification screen appears, informing you that you are about to install an evaluation version of Windows 2000.
Read the Setup Notification message and press Enter to continue.
Setup displays the Welcome To Setup screen. Notice that, in addition to the initial installation of Windows 2000, you can use Windows 2000 Setup to repair or recover a damaged Windows 2000 installation.
Read the Welcome To Setup message and press Enter to begin the installation phase of Windows 2000 Setup. Setup displays the License Agreement screen.
Read the license agreement, pressing Page Down to scroll down to the bottom of the screen.
Select I Accept The Agreement by pressing F8.
Setup displays the Windows 2000 Server Setup screen, prompting you to select an area of free space or an existing partition on which to install Windows 2000. This stage of setup provides a way for you to create and delete partitions on your hard drive.

If your computer does not contain any disk partitions (as required for this exercise), you will notice that the hard drive listed on the screen contains an existing unformatted partition.
Make sure that the Unpartitioned space partition is highlighted and then type c. Setup displays the Windows 2000 Setup screen, confirming that you've chosen to create a new partition in the unpartitioned space and informing you of the minimum and maximum sizes of the partition you might create.
Specify the size of the partition you want to create (at least 2048 MB) and press Enter to continue. Setup displays the Windows 2000 Setup screen, showing the new partition as C: New (Unformatted).
NOTE
Although you can create additional partitions from the remaining unpartitioned space during setup, it's recommended that you perform additional partitioning tasks after you install Windows 2000. To partition hard drives after installation, use the Disk Management console.
Make sure the new partition is highlighted and press Enter. You are prompted to select a file system for the partition.
Use the arrow keys to select Format The Partition Using The NTFS File System and press Enter.
The Setup program formats the partition with NTFS. After it formats the partition, Setup examines the hard drive for physical errors that might cause Setup to fail and then copies files to the hard drive. This process takes several minutes.

Eventually, Setup displays the Windows 2000 Advanced Server Setup screen. A red status bar counts down for 15 seconds before Setup restarts the computer.
Remove the Setup disk from the floppy disk drive.
IMPORTANT
If your computer supports booting from the CD-ROM drive and this feature wasn't disabled in the BIOS, the computer could boot from the Windows 2000 Advanced Server installation CD-ROM after Windows 2000 Setup restarts. This will cause Setup to start again from the beginning. If this happens, remove the CD-ROM and then restart the computer.
Setup copies additional files and then restarts your machine and loads the Windows 2000 Setup Wizard.

Running the GUI Mode and Gathering Information phase of Windows 2000 Advanced Server Setup

This procedure begins the graphical portion of Setup on your computer.

On the Welcome To The Windows 2000 Setup Wizard page, click Next to begin gathering information about your computer.
Setup configures NTFS folder and file permissions for the operating system files, detects the hardware devices in the computer, and then installs and configures device drivers to support the detected hardware. This process takes several minutes.
On the Regional Settings page, make sure that the system locale, user locale, and keyboard layout are correct for your language and location, and then click Next.
NOTE
You can modify regional settings after you install Windows 2000 by using Regional Options in Control Panel.

Setup displays the Personalize Your Software page, prompting you for your name and organization name. Setup uses your organization name to generate the default computer name. Many applications that you install later will use this information for product registration and document identification.
In the Name field, type your name; in the Organization field, type the name of an organization; then click Next.
NOTE
If the Your Product Key screen appears, enter the product key, which is located on the sticker attached to the Windows 2000 Advanced Server, Evaluation Edition, CD sleeve bound into the back of this book.

Setup displays the Licensing Modes page, prompting you to select a licensing mode. By default, the Per Server licensing mode is selected. Setup prompts you to enter the number of licenses you've purchased for this server.
Select the Per Server Number of concurrent connections button, type 5 for the number of concurrent connections, then click Next.
IMPORTANT
Per Server Number of concurrent connections and five concurrent connections are suggested values to use to complete your self-study. You should use a legal number of concurrent connections based on the actual licenses that you own. You can also choose to use Per Seat instead of Per Server.

Setup displays the Computer Name And Administrator Password page. Notice that Setup uses your organization name to generate a suggested name for the computer.
In the Computer Name field, type server1. Windows 2000 displays the computer name in all capital letters regardless of how it's entered.
CAUTION
If your computer is on a network, check with the network administrator before assigning a name to your computer.
In the Administrator Password field and the Confirm Password field, type password (all lowercase) and click Next. Passwords are case-sensitive, so make sure you type password in all lowercase letters.
For the labs in this self-paced training kit, you will use "password" for the Administrator account. In a production environment you should always use a complex password for the Administrator account (one that others cannot easily guess). Microsoft recommends mixing uppercase and lowercase letters, numbers, and symbols (for example, Lp6*g9).

Setup displays the Windows 2000 Components page, indicating which Windows 2000 system components Setup will install.
On the Windows 2000 Components page, click Next.
You can install additional components after you install Windows 2000 by using Add/Remove Programs in Control Panel. Make sure to install only the components selected by default during setup. Later in your training, you will be installing additional components.

If a modem is detected in the computer during setup, Setup displays the Modem Dialing Information page.
If the Modem Dialing Information page appears, enter the correct area code and click Next. The Date And Time Settings page appears.
IMPORTANT
Windows 2000 services perform many tasks whose successful completion depends on the computer's time and date settings. Be sure to select the correct time zone for your location to avoid problems in later labs.
Enter the correct Date And Time and Time Zone settings, then click Next. The Network Settings page appears and Setup installs networking components.

Completing the Installing Windows Networking Components phase of Windows 2000 Advanced Server Setup

Networking is an integral part of Windows 2000 Advanced Server. Many selections and configurations are available. In this procedure you configure basic networking. In a later exercise you will install additional network components.

On the Networking Settings page, make sure that Typical Settings is selected, then click Next to begin installing Windows networking components.
This setting installs networking components that are used to gain access to and share resources on a network and configures Transmission Control Protocol/Internet Protocol (TCP/IP) to automatically obtain an IP address from a DHCP server on the network. Setup displays the Workgroup or Computer Domain page, prompting you to join either a workgroup or a domain.
On the Workgroup or Computer Domain page, make sure that the button No, This Computer Is Not On A Network or This Computer Is On A Network Without A Domain is selected, and that the workgroup name is WORKGROUP, and then click Next.
Setup displays the Installing Components page, displaying the status as Setup installs and configures the remaining operating system components according to the options you specified. This will take several minutes.

Setup then displays the Performing Final Tasks page, which shows the status as Setup finishes copying files, making and saving configuration changes, and deleting temporary files. Computers that don't exceed the minimum hardware requirements might take 30 minutes or more to complete this phase of installation. Setup then displays the Completing The Windows 2000 Setup Wizard page.
Remove the Windows 2000 Advanced Server CD-ROM from the CD-ROM drive, and then click Finish. Windows 2000 restarts and runs the newly installed version of Windows 2000 Advanced Server.

Completing the Hardware Installation phase of Windows 2000 Advanced Server Setup

During this final phase of installation, any Plug and Play hardware not detected in the previous phases of Setup will be detected.

At the completion of the startup phase, log on by pressing Ctrl+Alt+Delete.
In the Enter Password dialog box, type administrator in the User Name field and type password in the Password field.
Click OK. If Windows 2000 detects hardware that wasn't detected during Setup, the Found New Hardware Wizard screen appears, indicating that Windows 2000 is installing the appropriate drivers.
If the Found New Hardware Wizard screen appears, verify that the Restart The Computer When I Click Finish check box is cleared and click Finish to complete the Found New Hardware Wizard.
Windows 2000 displays the Windows 2000 Configure Your Server dialog box. From this dialog box, you can configure a variety of advanced options and services.
Select I Will Configure This Server Later, and then click Next.
From the next screen that appears, clear the Show This Screen At Startup check box.
Close the Configure Your Server screen.

You have now completed the Windows 2000 Advanced Server installation and are logged on as Administrator.

NOTE
To properly shut down Windows 2000 Advanced Server, click Start, choose Shut Down, then follow the directions that appear.

CAUTION
If your computers are part of a larger network, you must verify with your network administrator that the computer names, domain name, and other information used in setting up Windows 2000 Advanced Server as described in this section don't conflict with network operations. If they do conflict, ask your network administrator to provide alternative values.

About The Online Book

The CD-ROM also includes an online version of the book that you can view onscreen using Microsoft Internet Explorer 4.01 or later. As mentioned above, the online version of the book contains the glossary.

To use the online version of this book

Insert the Supplemental Course Materials CD-ROM into your CD-ROM drive.
Select Run from the Start menu on your desktop, and type D:\Ebook\Setup.exe (where D is the name of your CD-ROM disk drive). This will install an icon to for the online book to your Start menu.
Click OK to exit the Installation Wizard.

NOTE
You must have the Supplemental Course Materials CD-ROM inserted in your CD-ROM drive to run the online book.

Sample Readiness Review Questions

With this Training Kit, Microsoft provides 180 days of unlimited access to 25 practice test questions for the exam 70-220. The exam preparation questions are a subset of practice test questions offered in the MCSE Readiness Review—Designing Microsoft Windows 2000 Network Security; Exam 70-220 (ISBN 0-7356-1365-6) book developed by Microsoft and MeasureUp, a Microsoft Certified Practice Test Provider.

To use these questions, create a free user account at mspress.measureup.com/ and register with the key provided on the sticker attached to the Supplemental Course Materials CD-ROM sleeve near the back of this book. If you encounter any problems accessing the questions, please call MeasureUp's customer service at (678) 356-5050.