About This Book | MCSE Designing a Microsoft Windows 2000 Directory Services Infrastructure Readiness Review; Exam 70-219 (Pro-Certification)

Welcome to the MCSE Training Kit—Designing a Microsoft Windows 2000 Directory Services Infrastructure. This kit prepares you to analyze an organization's business and technical requirements and design a Windows 2000 directory services infrastructure.

You will learn and practice the four-stage Active Directory infrastructure design process, which includes creating a forest plan, a domain plan, an organizational unit (OU) plan, and a site topology plan. You will also learn how to create an Active Directory implementation plan, which includes planning a migration from Windows NT 4 directory services to Active Directory and planning directory service synchronization with Active Directory.

This course supports the Microsoft Certified Systems Engineer program.

NOTE
For more information on becoming a Microsoft Certified Systems Engineer, see the section titled "The Microsoft Certified Professional Program" later in this chapter.

Each chapter in this book is divided into lessons, activities, labs, and reviews. Lessons include discussions of the key design objectives and then provide evaluations of possible decisions to be made within each design objective, and each lesson ends with a lesson summary. The activities and labs are designed to allow you to practice or demonstrate your understanding of the design objectives discussed within a chapter. Each chapter ends with a set of review questions to test your knowledge of the chapter material.

The "Getting Started" section of this introduction provides important setup instructions that describe the hardware and software requirements to use the evaluation software included in this kit.

Intended Audience

The target reader for this book is the information technology (IT) professional involved in network design (network architect, senior support professional, or consultant) who has a minimum of one year of experience implementing, administering, and configuring network operating systems, including Novell NetWare, UNIX, or Macintosh networks. The network designer has gained his or her experience in environments that have the following characteristics:

The number of supported users ranges from 200 to more than 25,000.
The number of physical locations ranges from 5 to more than 150.
Typical network services and applications include file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and Web hosting.
Connectivity needs include connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet.

This book was developed for information technology (IT) professionals who need to design, plan, implement, and support Microsoft Windows 2000 Active Directory or who plan to take the related Microsoft Certified Professional exam 70-219, Designing a Microsoft Windows 2000 Directory Services Infrastructure.

Prerequisites

This course requires that students meet the following prerequisites:

A working knowledge of current networking technology
A minimum of one year of experience implementing, administering, and configuring network operating systems
Successful completion of the Microsoft Windows 2000 MCSE Exam 70-217: Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure
Successful completion of the following core exams for the Microsoft Windows 2000 MCSE track is recommended: Exam 70-210: Installing, Configuring, and Administering Microsoft Windows 2000 Professional; Exam 70-215: Installing, Configuring, and Administering Microsoft Windows 2000 Server; Exam 70-216: Implementing and Administering a Microsoft Windows 2000 Network Infrastructure

Reference Materials

You might find the following reference materials useful:

Microsoft Corporation. Microsoft Windows 2000 Server Resource Kit. Redmond, Washington: Microsoft Press, 2000.
Microsoft Corporation. MCSE Training Kit—Microsoft Windows 2000 Active Directory Services. Redmond, Washington: Microsoft Press, 2000.
Iseminger, David. Active Directory Services for Microsoft Windows 2000 Technical Reference. Redmond, Washington: Microsoft Press, 2000.
Microsoft Corporation. Building Enterprise Active Directory Services, Notes from the Field. Redmond, Washington: Microsoft Press, 2000.
Cone, Eric, Planning for Windows 2000. Indianapolis, Indiana: New Riders Publishing, 1999.
Lowe-Norris, Alistair G. Windows 2000 Active Directory Services. Sebastopol, California: O'Reilly & Associates, 2000.
Windows 2000 white papers and case studies, available online at http://www.microsoft.com/windows/server/

About the Supplemental Course Materials CD-ROM

The Supplemental Course Materials compact disc contains a variety of informational aids that may be used throughout this book. The files on the CD include interviews with Microsoft Consulting Services consultants and program managers, Windows 2000 white papers, blank copies of worksheets used for analyzing an organization's business and technical environment, online seminars, and an online version of this book. These files can be used directly from the CD-ROM or copied onto your hard disk. For more information regarding the contents of this CD-ROM, see the section titled "Getting Started" later in this introduction.

The materials on the CD supplement some of the key concepts covered in the book. You should view these materials when suggested, and then use them as a review tool while you work through the training. An online version of this book is also included on the CD with a variety of viewing options available. For information about using the online book, see the section "The Online Book" later in this introduction. (The other CD-ROM contains an evaluation edition of Windows 2000 Advanced Server.)

Features of This Book

Each chapter opens with a "Before You Begin" section, which prepares you for completing the chapter.

The chapters are then divided into lessons. Most of the chapters contain activities and labs that give you an opportunity to use and explore the design skills presented.

The "Review" section at the end of the chapter allows you to test what you have learned in the chapter's lessons.

Appendix A, "Questions and Answers," contains all of the book's questions and corresponding answers.

Notes

Several types of Notes appear throughout the lessons.

Notes marked Tip contain explanations of possible results or alternative methods.
Notes marked Important contain information that is essential to completing a task.
Notes marked Note contain supplemental information.
Notes marked Caution contain warnings about possible loss of data.
Notes marked More Info contain cross-references to other critical reference material.
Notes marked Real World contain references to documentation from MCS consultants, program managers, or other subject matter experts.

Conventions

The following conventions are used throughout this book.

Notational Conventions

Characters or commands that you type appear in bold lowercase type.
Italic in syntax statements indicates placeholders for variable information. Italic is also used for book titles.
Names of files and folders appear in Title Caps, except when you are to type them directly. Unless otherwise indicated, you can use all lowercase letters when you type a filename in a dialog box or at a command prompt.
Filename extensions appear in all lowercase.
Acronyms appear in all uppercase.
Monospace type represents code samples, examples of screen text, or entries that you might type at a command prompt or in initialization files.
Square brackets [ ] are used in syntax statements to enclose optional items. For example, [filename] in command syntax indicates that you can choose to type a filename with the command. Type only the information within the brackets, not the brackets themselves.
Braces { } are used in syntax statements to enclose required items. Type only the information within the braces, not the braces themselves.
Icons represent specific sections in the book as follows:

Icon	Represents
	Supplemental course material. This material includes interviews with Microsoft Consulting Services consultants and program managers, Windows 2000 white papers, blank copies of worksheets used for analyzing an organization's business and technical environment, and online seminars. You will find these files on the book's Supplemental Course Materials CD-ROM.
	An activity or lab. You should perform the activity or lab to give yourself an opportunity to use the design skills presented in the lesson.
	Chapter review questions. These questions at the end of each chapter allow you to test what you have learned in the lessons. You will find the answers to the review questions in Appendix A, "Questions and Answers."

Icon

Represents

Supplemental course material. This material includes interviews with Microsoft Consulting Services consultants and program managers, Windows 2000 white papers, blank copies of worksheets used for analyzing an organization's business and technical environment, and online seminars. You will find these files on the book's Supplemental Course Materials CD-ROM.

An activity or lab. You should perform the activity or lab to give yourself an opportunity to use the design skills presented in the lesson.

Chapter review questions. These questions at the end of each chapter allow you to test what you have learned in the lessons. You will find the answers to the review questions in Appendix A, "Questions and Answers."

Fictitious Name Conventions

The content of this training kit requires the use of fictitious company and domain names in fictitious scenarios. Every effort has been made to avoid using domain names that represent live Web sites. To accomplish this, domain names for fictitious companies are represented by the first letter of the company name appended by "-100times." For example, for the fictitious company Parnell Aerospace, the main domain name will be "p-100times.com." In reality, domain names should indicate an organization's identity.

Chapter and Appendix Overview

This self-paced training course combines notes, hands-on activities and labs, professional interviews and worksheets, and review questions to teach you how to design a Windows 2000 directory services infrastructure. It is designed to be completed from beginning to end, but you can choose a customized track and complete only the sections that interest you. (See the next section, "Finding the Best Starting Point for You," for more information.) If you choose the customized track option, see the "Before You Begin" section in each chapter. Complete any preliminary work required before you begin the chapter.

The book is divided into the following chapters:

The "About This Book" section contains a self-paced training overview and introduces the components of the training. Read this section thoroughly to get the greatest educational value from this self-paced training and to plan which lessons you will complete.
Chapter 1, "Introduction to Active Directory," introduces you to Active Directory components, including objects, schema, domains, organizational units (OUs), trees, forests, sites, domain controllers, and the global catalog. It also introduces you to Active Directory concepts, including replication, trust relationships, group policy, DNS namespaces, and naming conventions.
Chapter 2, "Introduction to Designing a Directory Services Infrastructure," introduces you to the tasks you need to complete before attempting to design your Active Directory infrastructure. These tasks include assembling a design team, conducting an analysis of your business environment, conducting an analysis of your technical environment, and setting up a test environment. This chapter also introduces the Active Directory infrastructure design process, which consists of creating a forest plan, creating a domain plan, creating an organizational unit (OU) plan, and creating a site topology plan.
Chapter 3, "Creating a Forest Plan," covers how to create a forest plan, which includes designing a forest model and designing a schema modification plan. You learn how to assess an organization's forest needs and determine the number of forests it requires. You also learn how to create a schema modification policy, assess an organization's schema needs, and determine whether to modify the schema.
Chapter 4, "Creating a Domain Plan," shows you how to create a domain plan by defining domains, defining the forest root domain, defining a domain hierarchy, naming domains, and planning DNS server deployment.
Chapter 5, "Creating an Organizational Unit Plan," describes how to create an OU plan by defining an OU structure and then planning user accounts and groups.
Chapter 6, "Creating a Site Topology Plan," shows you how to create a site topology plan by defining sites, placing domain controllers, defining a replication strategy, and placing global catalog servers and operations masters within a forest.
Chapter 7, "Creating an Active Directory Implementation Plan," discusses the directory service migration and synchronization issues involved in moving from an organization's current directory service to Active Directory.
Appendix A, "Questions and Answers," lists all of the review questions from the book showing the page number where the question appears and the suggested answer.
Appendix B, "Base Schema Class Objects," contains a list of the basic set of schema class objects shipped with Windows 2000 Server, which can be used to determine whether you need to change the base schema and whom the changes will impact.
Appendix C, "Base Schema Attribute Objects," contains a list of the basic set of schema attribute objects shipped with Windows 2000 Server, which can be used to determine whether you need to change the base schema and whom the changes will impact.
The Glossary lists and defines the terms associated with your study of Windows 2000 directory services infrastructure design.

Finding the Best Starting Point for You

Because this book is self-paced, you can skip some lessons and revisit them later. Use the following table to find the best starting point for you:

If you	Follow this learning path
Are preparing to take the Microsoft Certified Professional exam 70-219, Designing a Microsoft Windows 2000 Directory Services Infrastructure	Read the "Getting Started" section. Then work through Chapters 1 through 7, in order.
Want to review information about specific topics from the exam	Use the "Where to Find Specific Skills in This Book" section that follows this table.

Where to Find Specific Skills in This Book

The following tables provide a list of the skills measured on certification exam 70-219, Designing a Microsoft Windows 2000 Directory Services Infrastructure. The tables provide the skill and where in this book you will find the lesson relating to that skill.

NOTE
Exam skills are subject to change without prior notice and at the sole discretion of Microsoft.

Analyzing Business Requirements

Skill being measured	Location in book
Analyze the existing and planned business models
Analyze the company model and geographical scope	Chapter 2, Lesson 2
Analyze company processes	Chapter 2, Lesson 2
Analyze the existing and planned organizational structures
Analyze the management model	Chapter 2, Lesson 2
Analyze the company organization	Chapter 2, Lesson 2
Analyze the vendor, partner, and customer relationships	Chapter 2, Lesson 2
Analyze the acquisition plans	Chapter 2, Lesson 2
Analyze the factors that influence company strategies
Identify company priorities	Chapter 2, Lesson 2
Identify the projected growth and growth strategy	Chapter 2, Lesson 2
Identify relevant laws and regulations	Chapter 2, Lesson 2
Identify the company's tolerance for risk	Chapter 2, Lesson 2
Identify the total cost of operations	Chapter 2, Lesson 2
Analyze the structure of IT management
Analyze the type of administration, such as centralized or decentralized	Chapter 2, Lesson 2
Analyze the funding model	Chapter 2, Lesson 2
Analyze the use of outsourcing	Chapter 2, Lesson 2
Analyze the decision-making process	Chapter 2, Lesson 2
Analyze the change management process	Chapter 2, Lesson 2

Analyzing Technical Requirements

Skill being measured	Location in book
Evaluate the company's existing and planned technical environment
Analyze company size and user and resource distribution	Chapter 2, Lesson 3
Assess the available connectivity between geographically remote sites	Chapter 2, Lesson 3
Assess the net available bandwidth	Chapter 2, Lesson 3
Analyze performance requirements	Chapter 2, Lesson 3
Analyze data and system access patterns	Chapter 2, Lesson 3
Analyze network roles and responsibilities	Chapter 2, Lesson 3
Analyze security considerations	Chapter 2, Lesson 3
Analyze the impact of Active Directory on the existing and planned technical environment
Assess existing systems and applications	Chapter 2, Lesson 3
Identify existing and planned upgrades and rollouts	Chapter 2, Lesson 3
Analyze technical support structure	Chapter 2, Lesson 3
Analyze existing and planned network and systems management	Chapter 2, Lesson 3
Analyze the business requirements for client computer desktop management
Analyze end-user work needs	Chapter 2, Lesson 3
Identify technical support needs for end-users	Chapter 2, Lesson 3
Establish the required client computer environment	Chapter 2, Lesson 3

Designing a Directory Service Architecture

Skill being measured	Location in book
Design an Active Directory forest and domain structure
Design a forest and schema structure	Chapter 3, Lessons 1 and 2
Design a domain structure	Chapter 4, Lessons 1, 2, and 3
Analyze and optimize trust relationships	Chapter 4, Lesson 3
Design an Active Directory naming strategy
Establish the scope of Active Directory	Chapter 4, Lesson 4
Design the namespace	Chapter 4, Lesson 4
Plan DNS strategy	Chapter 4, Lesson 5
Design and plan the structure of organizational units (OUs)
Develop an OU delegation plan	Chapter 5, Lesson 1
Plan group policy object management	Chapter 5, Lesson 1
Plan policy management for client computers	Chapter 5, Lessons 1 and 2
Plan for the coexistence of Active Directory and other directory services
Plan directory service synchronization with Active Directory	Chapter 7, Lesson 2
Design an Active Directory site topology
Design a replication strategy	Chapter 6, Lesson 3
Define site boundaries	Chapter 6, Lesson 1
Design a schema modification policy
Create a schema modification policy that outlines who has control of the schema and how modifications are administered.	Chapter 3, Lesson 2
Design an Active Directory implementation plan
Create an implementation plan that considers the directory service migration and synchronization issues involved in moving from the current directory service to Active Directory.	Chapter 7, Lessons 1 and 2

Designing Service Locations

Skill being measured	Location in book
Design the placement of operations masters
Place operations masters, taking into account performance, fault tolerance, functionality, and manageability	Chapter 6, Lesson 4
Design the placement of global catalog servers
Place global catalog servers, taking into account performance, fault tolerance, functionality, and manageability	Chapter 6, Lesson 4
Design the placement of domain controllers
Place domain controllers, taking into account performance, fault tolerance, functionality, and manageability	Chapter 6, Lesson 2
Design the placement of DNS servers
Place DNS servers, taking into account performance, fault tolerance, functionality, and manageability	Chapter 4, Lesson 5
Plan for the interoperability with the existing DNS	Chapter 4, Lesson 5

Getting Started

This self-paced training course contains activities and labs to help you learn how to design a Windows 2000 directory services infrastructure. To complete all of the activities and labs, you must have one computer running Windows 2000 Advanced Server.

It is recommended that you set up the server on its own network specifically for this self-paced training because, in the event of an inadvertent change to the server, you can avoid the possibility of undesirable results if you are connected to a larger network.

Hardware Requirements

To successfully run the evaluation edition of Windows 2000 Advanced Server, all hardware should be on the Microsoft Windows 2000 Hardware Compatibility List (HCL). The latest version of the HCL can be downloaded from the Hardware Compatibility List Web page at http://www.microsoft.com/hwtest/hcl/. Each computer must have the following minimum configuration:

32-bit 166MHz Pentium processor
64-MB memory for networking with one to five client computers; 128 MB minimum is recommended for most network environments
2 GB free hard disk space
12X or faster CD-ROM drive
SVGA monitor capable of 800 x 600 resolution (1024 x 768 recommended)
High-density 3.5-inch disk drive, unless your CD-ROM is bootable and supports starting the Setup program from a CD-ROM
Microsoft Mouse or compatible pointing device

Software Requirements

A copy of the 120-day Evaluation Edition of Windows 2000 Advanced Server is required to complete all of the activities and labs in this course.

CAUTION
The 120-day Evaluation Edition of Windows 2000 Advanced Server provided with this training is not the full retail product and is provided only for training purposes. Microsoft Technical Support does not support evaluation editions. For additional support information regarding this book and the CD-ROMs (including answers to commonly asked questions about installation and use), visit the Microsoft Press Technical Support Web site at http://mspress.microsoft.com/support/. You can also email TKINPUT@MICROSOFT.COM, or send a letter to Microsoft Press, Attn: Microsoft Press Technical Support, One Microsoft Way, Redmond, WA 98502-6399.

Setup Instructions

The following information is a checklist of the tasks that you need to perform to prepare your computer for the lessons in this book. If you do not have experience installing Windows 2000 or another network operating system, you may need help from an experienced network administrator. As you complete a task, mark it off in the check box. Step-by-step instructions for each task follow.

Create Windows 2000 Advanced Server Setup diskettes.
Run the Windows 2000 Advanced Server Pre-Copy and Text Mode Setup Routine.
Run the GUI mode and gathering information phase of Windows 2000 Advanced Server Setup.
Complete the Installing Windows Networking Components phase of Windows 2000 Advanced Server Setup.
Complete the hardware installation phase of Windows 2000 Advanced Server Setup.

NOTE
The installation information provided will help you prepare a computer for use with this book. It is not intended to teach you installation.

Installing Windows 2000 Advanced Server

To complete the exercises in this course, you should install Windows 2000 Advanced Server on a computer with no formatted partitions. During installation, you can use the Windows 2000 Advanced Server Setup program to create a partition on your hard disk, on which you install Windows 2000 Advanced Server as a stand-alone server in a workgroup.

To create Windows 2000 Advanced Server Setup Diskettes

Complete this procedure on a computer running MS-DOS or any version of Windows with access to the Bootdisk directory on the Windows 2000 Advanced Server installation CD-ROM. If your computer is configured with a bootable CD-ROM drive, you can install Windows 2000 without using the Setup disks. To complete this procedure as outlined, bootable CD-ROM support must be disabled in the BIOS.

IMPORTANT
This procedure requires four formatted 1.44-MB disks. If you use diskettes that contain data, the data will be overwritten without warning.

Label the four blank, formatted 1.44-MB diskettes as follows:
- Windows 2000 Advanced Server Setup Disk #1
- Windows 2000 Advanced Server Setup Disk #2
- Windows 2000 Advanced Server Setup Disk #3
- Windows 2000 Advanced Server Setup Disk #4
Insert the Microsoft Windows 2000 Advanced Server CD-ROM into the CD-ROM drive.
If a Windows 2000 CD-ROM dialog box appears to prompt you to install or upgrade to Windows 2000, click No.
Open a command prompt.
At the command prompt, change to your CD-ROM drive. For example, if your CD-ROM drive name is E, type e: and press Enter.
At the command prompt, change to the Bootdisk directory by typing cd bootdisk and pressing Enter.
If you are creating the Setup boot diskettes from a computer running MS-DOS or a Windows 16-bit operating system, type makeboot a: (where A: is the name of your floppy disk drive) and press Enter. If you are creating the Setup boot diskettes from a computer running Windows NT or Windows 2000, type makebt32 a: (where A is the name of your floppy disk drive) and then press Enter. Windows 2000 displays a message indicating that this program creates the four Setup disks for installing Windows 2000. It also indicates that four blank, formatted, high-density floppy disks are required.
Press any key to continue. Windows 2000 displays a message prompting you to insert the disk that will become the Windows 2000 Setup Boot Disk.
Insert the blank formatted diskette labeled Windows 2000 Advanced Server Setup Disk #1 into the floppy disk drive and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the diskette labeled Windows 2000 Setup Disk #2.
Remove Disk #1, insert the blank formatted diskette labeled Windows 2000 Advanced Server Setup Disk #2 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the diskette labeled Windows 2000 Setup Disk #3.
Remove Disk #2, insert the blank formatted diskette labeled Windows 2000 Advanced Server Setup Disk #3 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message prompting you to insert the diskette labeled Windows 2000 Setup Disk #4.
Remove Disk #3, insert the blank formatted diskette labeled Windows 2000 Advanced Server Setup Disk #4 into the floppy disk drive, and press any key to continue. After Windows 2000 creates the disk image, it displays a message indicating that the imaging process is done.
At the command prompt, type exit and then press Enter.
Remove the disk from the floppy disk drive and the CD-ROM from the CD-ROM drive.

Running the Windows 2000 Advanced Server Pre-Copy and Text Mode Setup Routine

It is assumed for this procedure that your computer has no operating system installed, the disk is not partitioned, and bootable CD-ROM support, if available, is disabled.

Insert the disk labeled Windows 2000 Advanced Server Setup Disk #1 into the floppy disk drive, insert the Windows 2000 Advanced Server CD-ROM into the CD-ROM drive, and restart your computer.
After the computer starts, Windows 2000 Setup displays a brief message that your system configuration is being checked, and then the Windows 2000 Setup screen appears.

Notice that the gray bar at the bottom of the screen indicates that the computer is being inspected and that the Windows 2000 Executive is loading, which is a minimal version of the Windows 2000 kernel.
When prompted, insert Setup Disk #2 into the floppy disk drive and press Enter.
Notice that Setup indicates that it is loading the HAL, fonts, local specific data, bus drivers, and other software components to support your computer's motherboard, bus, and other hardware. Setup also loads the Windows 2000 Setup program files.
When prompted, insert Setup Disk #3 into the floppy disk drive and press Enter.
Notice that Setup indicates that it is loading disk drive controller drivers. After the drive controllers load, the Setup program initializes drivers appropriate to support access to your disk drives. Setup might pause several times during this process.
When prompted, insert Setup Disk #4 into the floppy disk drive and press Enter.
Setup loads peripheral support drivers, like the floppy disk driver and file systems, and then it initializes the Windows 2000 Executive and loads the rest of the Windows 2000 Setup program.

If you are installing the Evaluation Edition of Windows 2000, a Setup notification screen appears, informing you that you are about to install an evaluation version of Windows 2000.
Read the Setup Notification message and press Enter to continue.
Setup displays the Welcome To Setup screen. Notice that, in addition to the initial installation of Windows 2000, you can use Windows 2000 Setup to repair or recover a damaged Windows 2000 installation.
Read the Welcome To Setup message and press Enter to begin the installation phase of Windows 2000 Setup. Setup displays the License Agreement screen.
Read the license agreement, pressing Page Down to scroll down to the bottom of the screen.
Select I Accept the Agreement by pressing F8.
Setup displays the Windows 2000 Server Setup screen, prompting you to select an area of free space or an existing partition on which to install Windows 2000. This stage of Setup provides a way for you to create and delete partitions on your hard disk.

If your computer does not contain any disk partitions (as required for this exercise), you will notice that the hard disk listed on the screen contains an existing unformatted partition.
Make sure that the Unpartitioned space partition is highlighted and then type c.
Setup displays the Windows 2000 Setup screen, confirming that you've chosen to create a new partition in the unpartitioned space and informing you of the minimum and maximum sizes of the partition you might create.
Specify the size of the partition you want to create (at least 2 GB) and press Enter to continue.
Setup displays the Windows 2000 Setup screen, showing the new partition as C: New (Unformatted).

NOTE
Although you can create additional partitions from the remaining unpartitioned space during Setup, it is recommended that you perform additional partitioning tasks after you install Windows 2000. To partition hard disks after installation, use the Disk Management console.
Make sure the new partition is highlighted and press Enter.
You are prompted to select a file system for the partition.
Use the arrow keys to select Format The Partition Using The NTFS File System and press Enter.
The Setup program formats the partition with NTFS. After it formats the partition, Setup examines the hard disk for physical errors that might cause Setup to fail and then copies files to the hard disk. This process will take several minutes.

Eventually, Setup displays the Windows 2000 Advanced Server Setup screen. A red status bar counts down for 15 seconds before Setup restarts the computer.
Remove the Setup disk from the floppy disk drive.
IMPORTANT
If your computer supports booting from the CD-ROM drive and this feature was not disabled in the BIOS, the computer will boot from the Windows 2000 Advanced Server installation CD-ROM after Windows 2000 Setup restarts. This will cause Setup to start again from the beginning. If this happens, remove the CD-ROM and then restart the computer.
Setup copies additional files and then restarts your machine and loads the Windows 2000 Setup Wizard.

Running the GUI mode and gathering information phase of Windows 2000 Advanced Server Setup

This procedure begins the graphical portion of Setup on your computer.

On the Welcome To The Windows 2000 Setup Wizard page, click Next to begin gathering information about your computer.
Setup configures NTFS folder and file permissions for the operating system files, detects the hardware devices in the computer, and then installs and configures device drivers to support the detected hardware. This process takes several minutes.
On the Regional Settings page, make sure that the system locale, user locale, and keyboard layout are correct for your language and location and then click Next.
NOTE
You can modify regional settings after you install Windows 2000 by using Regional Options in Control Panel.

Setup displays the Personalize Your Software page, prompting you for your name and organization name. Setup uses your organization name to generate the default computer name. Many applications that you install later will use this information for product registration and document identification.
In the Name field, type your name; in the Organization field, type the name of an organization; and then click Next.
NOTE
If the Your Product Key screen appears, enter the product key, located on the sticker attached to the Windows 2000 Advanced Server, Evaluation Edition, CD sleeve bound into the back of this book.

Setup displays the Licensing Modes page, prompting you to select a licensing mode. By default, the Per Server licensing mode is selected. Setup prompts you to enter the number of licenses you have purchased for this server.
Select the Per Server Number of concurrent connections button, type 5 for the number of concurrent connections, and then click Next.
IMPORTANT
Per Server Number of concurrent connections and 5 concurrent connections are suggested values to be used to complete your self-study. You should use a legal number of concurrent connections based on the actual licenses that you own. You can also choose to use Per Seat instead of Per Server.

Setup displays the Computer Name And Administrator Password page.

Notice that Setup uses your organization name to generate a suggested name for the computer.
In the Computer Name field, type server1.
Windows 2000 displays the computer name in all capital letters regardless of how it is entered.

WARNING
If your computer is on a network, check with the network administrator before assigning a name to your computer.
In the Administrator Password field and the Confirm Password field, type password (all lowercase) and click Next. Passwords are case sensitive, so make sure you type password in all lowercase letters.
For the labs in this self-paced training kit, you will use a password for the Administrator account. In a production environment, you should always use a complex password for the Administrator account (one that others cannot easily guess). Microsoft recommends mixing uppercase and lowercase letters, numbers, and symbols (for example, Lp6*g9).

Setup displays the Windows 2000 Components page, indicating which Windows 2000 system components Setup will install.
On the Windows 2000 Components page, click Next.
You can install additional components after you install Windows 2000 by using Add/Remove Programs in Control Panel. Make sure to install only the components selected by default during Setup. Later in your training, you will be installing additional components.

If a modem is detected in the computer during Setup, Setup displays the Modem Dialing Information page.
If the Modem Dialing Information page appears, enter an area code or city code and click Next.
The Date And Time Settings page appears.

IMPORTANT
Windows 2000 services perform many tasks whose successful completion depends on the computer's time and date settings. Be sure to select the correct time zone for your location to avoid problems in later labs.
Enter the correct Date and Time and Time Zone settings, and then click Next.
The Network Settings page appears, and Setup installs networking components.

Completing the Installing Windows Networking Components phase of Windows 2000 Advanced Server Setup

Networking is an integral part of Windows 2000 Advanced Server. Many selections and configurations are available. In this procedure, basic networking is configured. In a later exercise, you will install additional network components.

On the Networking Settings page, make sure that Typical Settings is selected, and then click Next to begin installing Windows networking components.
This setting installs networking components that are used to gain access to and share resources on a network and configures Transmission Control Protocol/Internet Protocol (TCP/IP) to automatically obtain an IP address from a DHCP server on the network.

Setup displays the Workgroup Or Computer Domain page, prompting you to join either a workgroup or a domain.
On the Workgroup Or Computer Domain page, make sure that the button No, This Computer Is Not On A Network Or Is On A Network Without A Domain is selected, and that the workgroup name is WORKGROUP, and then click Next.
Setup displays the Installing Components page, which updates to keep you informed of the installation progress as Setup installs and configures the remaining operating system components according to the options you specified. This procedure will take several minutes.

Setup then displays the Performing Final Tasks page, which shows the process's status as Setup finishes copying files, making and saving configuration changes, and deleting temporary files. Computers that do not exceed the minimum hardware requirements might take 30 minutes or more to complete this phase of installation.

Setup then displays the Completing The Windows 2000 Setup Wizard page.
Remove the Windows 2000 Advanced Server CD-ROM from the CD-ROM drive, and then click Finish.
IMPORTANT
If your computer supports booting from the CD-ROM drive and this feature was not disabled in the BIOS, the computer will boot from the Windows 2000 Advanced Server installation CD-ROM after Windows 2000 Setup restarts. This will cause Setup to start again from the beginning. If this happens, remove the CD-ROM and then restart the computer.

Windows 2000 restarts and runs the newly installed version of Windows 2000 Advanced Server.

Completing the hardware installation phase of Windows 2000 Advanced Server Setup

During this final phase of installation, any Plug and Play hardware not detected in the previous phases of Setup will be detected.

At the completion of the startup phase, log on by pressing Ctrl+Alt+Delete.
In the Enter Password dialog box, type administrator in the User Name field and type password in the Password field.
Click OK.
If Windows 2000 detects hardware that was not detected during Setup, the Found New Hardware Wizard screen displays, indicating that Windows 2000 is installing the appropriate drivers.
If the Found New Hardware Wizard screen appears, verify that the Restart The Computer When I Click Finish check box is cleared and click Finish to complete the Found New Hardware Wizard.
Windows 2000 displays the Microsoft Windows 2000 Configure Your Server dialog box. From this dialog box, you can configure a variety of advanced options and services.
Select I Will Configure This Server Later, and then click Next.
On the next screen that appears, clear the Show This Screen At Startup check box.
Close the Configure Your Server screen.
You have now completed the Windows 2000 Advanced Server installation and are logged on as Administrator.

NOTE
To properly shut down Windows 2000 Advanced Server, click Start, choose Shut Down, and then follow the directions that appear.

CAUTION
If your computers are part of a larger network, you must verify with your network administrator that the computer names, domain name, and other information used in setting up Windows 2000 Advanced Server as described in this section do not conflict with network operations. If they do conflict, ask your network administrator to provide alternative values and use those values throughout all of the exercise in this book.

The Online Seminars

The Supplemental Course Materials CD-ROM contains online seminars that you can view by running the file from the CD-ROM. You will find a prompt within the book indicating when the demonstration should be run. You must have installed Media Player and an Internet browser on your computer to view this file. (Internet Explorer and Media Player are included on this CD for this purpose. To install either of these software products, see the installation instructions in the Readme.txt files on the CD.)

To view the online seminars

Insert the Supplemental Course Materials CD-ROM into your CD-ROM drive.

Open the appropriate filename as indicated in the table below:

To view the online seminar	Click the file
Designing the Active Directory Structure	\chapt06\OnlineSeminars\Designing\Portal_ActiveDirectory Structure
Comparative Active Directory Designs	\chapt06\OnlineSeminars\Comparative\Portal_ActiveDirectory Designs
How to Migrate Your Windows NT 4 Directory Services to Windows 2000 Active Directory	\chapt06\Migration\Portal_Migration

This will run the selected online seminar in your Internet browser.

The Online Book

The CD-ROM also includes an online version of the book that you can view on the screen using Microsoft Internet Explorer 4.01 or later.

To use the online version of this book

Insert the Supplemental Course Materials CD-ROM into your CD-ROM drive.
Select Run from the Start menu on your desktop, and type D:\Ebook\Setup.exe (where D is the name of your CD-ROM disk drive).
This will install an icon for the online book on your Start menu.
Click OK to exit the installation wizard.

NOTE
You must have the Supplemental Course Materials CD-ROM inserted in your CD-ROM drive to run the online book.

Sample Readiness Review Questions

With this training kit we provide 180 days of unlimited access to 25 practice test questions for the exam 70-219. The exam preparation questions are a subset of practice test questions offered in the MCSE Readiness Review—Exam 70-219: Designing a Microsoft Windows 2000 Directory Services Infrastructure (ISBN 0-7356-1364-8) book developed by Microsoft and MeasureUp, a Microsoft Certified Practice Test Provider.

To use these questions, create a free user account at http://mspress.measureup.com and register the key provided on the sticker attached to the Supplemental Course Materials CD-ROM sleeve in the back of this book. If you encounter any problems accessing the questions, please call MeasureUp's customer service at (678) 356-5050.

The Microsoft Certified Professional Program

The Microsoft Certified Professional (MCP) program provides the best method to prove your command of current Microsoft products and technologies. Microsoft, an industry leader in certification, is on the forefront of testing methodology. Our exams and corresponding certifications are developed to validate your mastery of critical competencies as you design and develop, or implement and support, solutions with Microsoft products and technologies. Computer professionals who become Microsoft certified are recognized as experts and are sought after industry-wide.

The Microsoft Certified Professional program offers eight certifications, based on specific areas of technical expertise:

Microsoft Certified Professional (MCP). Demonstrated in-depth knowledge of at least one Microsoft operating system. Candidates may pass additional Microsoft certification exams to further qualify their skills with Microsoft BackOffice products, development tools, or desktop programs.
Microsoft Certified Professional + Internet. MCPs with a specialty in the Internet are qualified to plan security, install and configure server products, manage server resources, extend servers to run scripts, monitor and analyze performance, and troubleshoot problems.
Microsoft Certified Professional + Site Building. Demonstrated what it takes to plan, build, maintain, and manage Web sites using Microsoft technologies and products.
Microsoft Certified Systems Engineer (MCSE). Qualified to effectively plan, implement, maintain, and support information systems in a wide range of computing environments with Microsoft Windows NT Server and the Microsoft BackOffice integrated family of server software.
Microsoft Certified Systems Engineer + Internet. MCSEs with an advanced qualification to enhance, deploy, and manage sophisticated intranet and Internet solutions that include a browser, proxy server, host servers, database, and messaging and commerce components. In addition, an MCSE+Internet-certified professional is able to manage and analyze Web sites.
Microsoft Certified Database Administrator (MCDBA). Individuals who derive physical database designs, develop logical data models, create physical databases, create data services by using Transact-SQL, manage and maintain databases, configure and manage security, monitor and optimize databases, and install and configure Microsoft SQL Server.
Microsoft Certified Solution Developer (MCSD). Qualified to design and develop custom business solutions with Microsoft development tools, technologies, and platforms, including Microsoft Office and Microsoft BackOffice.
Microsoft Certified Trainer (MCT). Instructionally and technically qualified to deliver Microsoft Official Curriculum through a Microsoft Certified Technical Education Center (CTEC).

Microsoft Certification Benefits

Microsoft certification, one of the most comprehensive certification programs available for assessing and maintaining software-related skills, is a valuable measure of an individual's knowledge and expertise. Microsoft certification is awarded to individuals who have successfully demonstrated their ability to perform specific tasks and implement solutions with Microsoft products. Not only does this provide an objective measure for employers to consider, it also provides guidance for what an individual should know to be proficient. And as with any skills-assessment measure or benchmark, certification brings a variety of benefits: to the individual, and to employers and organizations.

Microsoft Certification Benefits for Individuals

As a Microsoft Certified Professional, you receive many benefits:

Industry recognition of your knowledge and proficiency with Microsoft products and technologies.
Access to technical and product information directly from Microsoft through a secured area of the MCP Web Site.
MSDN Online Certified Membership that helps you tap into the best technical resources, connect to the MCP community, and gain access to valuable resources and services. (Some MSDN Online benefits may be available in English only or may not be available in all countries.) See the MSDN Web site for a growing list of certified member benefits.
Logos to enable you to identify your Microsoft Certified Professional status to colleagues or clients.
Invitations to Microsoft conferences, technical training sessions, and special events.
A Microsoft Certified Professional certificate.
Subscription to Microsoft Certified Professional magazine (North America only), a career and professional development magazine.

Additional benefits, depending on your certification and geography, include:

A complimentary one-year subscription to the Microsoft TechNet Technical Plus, providing valuable information on monthly CD-ROMs.
A one-year subscription to the Microsoft Beta Evaluation program. This benefit provides you with up to 12 free monthly CD-ROMs containing beta software (English only) for many of Microsoft's newest software products.

Microsoft Certification Benefits for Employers and Organizations

Through certification, computer professionals can maximize the return on investment in Microsoft technology. Research shows that Microsoft certification provides organizations with the following:

Excellent return on training and certification investments by providing a standard method of determining training needs and measuring results.
Increased customer satisfaction and decreased support costs through improved service, increased productivity, and greater technical self-sufficiency.
Reliable benchmark for hiring, promoting, and career planning.
Recognition and rewards for productive employees by validating their expertise.
Retraining options for existing employees so they can work effectively with new technologies.
Assurance of quality when outsourcing computer services.

To learn more about how certification can help your company, see the backgrounders, white papers, and case studies available at http://www.microsoft.com/mcp/mktg/bus_bene.htm:

Financial Benefits to Supporters of Microsoft Professional Certification, IDC white paper (1998wpidc.doc 1,608K)
Prudential Case Study (prudentl.exe 70K self-extracting file)
The Microsoft Certified Professional Program Corporate Backgrounder (mcpback.exe 50K)
A white paper (mcsdwp.doc 158K) that evaluates the Microsoft Certified Solution Developer certification
A white paper (mcsestud.doc 161K) that evaluates the Microsoft Certified Systems Engineer certification
Jackson Hole High School Case Study (jhhs.doc 180K)
Lyondel Case Study (lyondel.doc 21K)
Stellcom Case Study (stellcom.doc 132K)

Requirements for Becoming a Microsoft Certified Professional

The certification requirements differ for each certification and are specific to the products and job functions addressed by the certification.

To become a Microsoft Certified Professional, you must pass rigorous certification exams that provide a valid and reliable measure of technical proficiency and expertise. These exams are designed to test your expertise and ability to perform a role or task with a product, and are developed with the input of professionals in the industry. Questions in the exams reflect how Microsoft products are used in actual organizations, giving them "real-world" relevance.

Microsoft Certified Product Specialists are required to pass one operating system exam. Candidate may pass additional Microsoft certification exams to further qualify their skills with Microsoft BackOffice products, development tools, or desktop applications.

Microsoft Certified Professional + Internet specialists are required to pass the prescribed Microsoft Windows NT Server 4, TCP/IP, and Microsoft Internet Information System exam series.

Microsoft Certified Professionals with a specialty in site building are required to pass two exams covering Microsoft FrontPage, Microsoft Site Server, and Microsoft Visual InterDev technologies to provide a valid and reliable measure of technical proficiency and expertise.

Microsoft Certified Systems Engineers are required to pass a series of core Microsoft Windows operating system and networking exams and BackOffice technology elective exams.

Microsoft Certified Systems Engineers + Internet specialists are required to pass seven operating system exams and two elective exams that provide a valid and reliable measure of technical proficiency and expertise.

Microsoft Certified Database Administrators are required to pass three core exams and one elective exam that provide a valid and reliable measure of technical proficiency and expertise.

Microsoft Certified Solution Developers are required to pass two core Microsoft Windows operating system technology exams and two BackOffice technology elective exams.

Microsoft Certified Trainers are required to meet instructional and technical requirements specific to each Microsoft Official Curriculum course they are certified to deliver. In the United States and Canada, call Microsoft at (800) 636-7544 for more information on becoming a Microsoft Certified Trainer or visit http://www.microsoft.com/train_cert/mct/. Outside the United States and Canada, contact your local Microsoft subsidiary.

Technical Training for Computer Professionals

Technical training is available in a variety of ways, with instructor-led classes, online instruction, or self-paced training available at thousands of locations worldwide.

Self-Paced Training

For motivated learners who are ready for the challenge, self-paced instruction is the most flexible, cost-effective way to increase your knowledge and skills.

A full line of self-paced print and computer-based training materials is available direct from the source—Microsoft Press. Microsoft Official Curriculum courseware kits from Microsoft Press, designed for advanced computer system professionals, are available from Microsoft Press and the Microsoft Developer Division. Self-paced training kits from Microsoft Press feature print-based instructional materials, along with CD-ROM–based product software, multimedia presentations, lab exercises, and practice files. The Mastering Series provides in-depth, interactive training on CD-ROM for experienced developers. They're both great ways to prepare for Microsoft Certified Professional (MCP) exams.

Online Training

For a more flexible alternative to instructor-led classes, turn to online instruction. It's as near as the Internet, and it's ready whenever you are. Learn at your own pace and on your own schedule in a virtual classroom, often with easy access to an online instructor. Without ever leaving your desk, you can gain the expertise you need. Online instruction covers a variety of Microsoft products and technologies. It includes options ranging from Microsoft Official Curriculum to choices available nowhere else. It's training on demand, with access to learning resources 24 hours a day. Online training is available through Microsoft Certified Technical Education Centers.

Microsoft Certified Technical Education Centers

Microsoft Certified Technical Education Centers (CTECs) are the best source for instructor-led training that can help you prepare to become a Microsoft Certified Professional. The Microsoft CTEC program is a worldwide network of qualified technical training organizations that provide authorized delivery of Microsoft Official Curriculum courses by Microsoft Certified Trainers to computer professionals.

For a listing of CTEC locations in the United States and Canada, visit http://www.microsoft.com/CTEC/default.htm.

Technical Support

Every effort has been made to ensure the accuracy of this book and the contents of the companion disc. If you have comments, questions, or ideas regarding this book or the companion disc, please send them to Microsoft Press using either of the following methods:

E-Mail:

TKINPUT@MICROSOFT.COM

Postal Mail:

Microsoft Press

Attn: MCSE Training Kit—Designing a Microsoft Windows 2000 Directory

Services Infrastructure Editor

One Microsoft Way

Redmond, WA 98052-6399

Microsoft Press provides corrections for books through the World Wide Web at the following address:

http://mspress.microsoft.com/support/

Please note that product support is not offered through the above mail addresses. For further information regarding Microsoft software support options, please connect to http://www.microsoft.com/support/ or call Microsoft Support Network Sales at (800) 936-3500.

Evaluation Edition Software Support

The Evaluation Edition of Microsoft Windows 2000 Advanced Server included with this book is unsupported by both Microsoft and Microsoft Press and should not be used on a primary work computer. For online support information relating to the full version of Microsoft Windows 2000 Advanced Server that might also apply to the Evaluation Edition, you can connect to

http://support.microsoft.com/

For information about ordering the full version of any Microsoft software, please call Microsoft Sales at (800) 426-9400 or visit www.microsoft.com. Information about any issues relating to the use of the Evaluation Edition with this training kit is posted to the Support section of the Microsoft Press Web site (http://mspress.microsoft.com/support/).