Index_D

D

data administrators, 85 “86

in collaborative administration, 87

data autonomy, 89

multiple domains for, 123

data isolation, multiple forests for, 94

data modification DNS attack, 375

database, size calculation, 279

dcgpofix.exe utility, 197, 205

DCHP (Dynamic Host Configuration Protocol), 330 “331

dcpromo /adv switch, 286

decentralized administration models, 11 , 12

with Active Directory, 19, 19

for autonomy, 95, 96

single domain for, 118 , 118 “119

dedicated forest root domain, 140

Default Domain Controller Policy, utility to re-create, 205

Default Domain Policy, 196, 205

and corporate standards, 197

lockout settings, 238

password policy options, 236 “237, 237

Default Group Policy Restore command, 197

DEFAULTIPSITELINK, 273

Delegation of Control Wizard, 168, 246

delegation record, 365

demilitarized zone, 320

denial-of-service attacks, 375

departmental business model, 3 “4 , 4

organization-based forest for, 95

Description field for accounts, 229

design, 47. See also schema

autonomy, collaboration and isolation, 86 “90

autonomous administration, 88 “90 , 89

collaborative administration, 86 “88 , 87

isolated administration, 90 , 90

criteria identification, 84 “86

data administrators, 85 “86

service administrators, 85

exam essentials, 103

forest structure, 93 “99

organization-basedforest, 95 , 96

resource forest, 97 , 97

restricted-access forest, 97 “99 , 98

owner identification, design scenario, 91

priorities, 91 “92

design scenario, 93

Desktop, restrictions on user , 196

DHCP (Dynamic Host Configuration Protocol), 58, 330 “331

integrating DNS with, 374

scope options, 332

server placement, 333

Digital Subscriber Line (DSL), 59

directory service infrastructure, 47

examining current, 63 “66

for Windows 2000 Active Directory, 66

for Windows NT 4, 63 “65 , 64

software requirements, 66 , 68

disk imaging utility, 195

distance vector routing, 317

distribution groups, 233, 240 “241

distribution tier in network access hierarchy, 306 “307, 307

DNS namespace, and Active Directory namespace, 138

documenting

domain design, real world scenario, 128

nested groups, 230

workstations, naming strategy, 233

documenting current system implementation, 45, 46 “63

current directory service

Windows 2000 Active Directory, 66

for Windows NT 4, 63 “65

current hardware requirements, 56 “57

current software requirements, 54 “56

exam essentials, 69 “70

format, 60 “63

Administrative Control table sample, 52

Administrative delegation, 65

Connection Type form, 61

Subnet Allocation form, 62

Windows 2000 Active Directory administration, 67

network requirements, 58 “60 , 68 “69

organizational requirements, 46 “54

administrative control, 51 “52

reasons for Active Directory implementation, 47 “48

special requirements, 48 “51

software requirements, 66 , 68

domain accounts, password policy for, 236

Domain Admins group, 86

for changing Schema Admins group, 101

group creation by, 246

rights and permissions, 85

domain controllers

configuration for RPC ports, 325

creation options, 284 “286

documenting current system implementation, 64

Global Catalog placement, 281 “282

how to build, real world scenario, 285

Master Operations placement, 282 “286

network infrastructure requirements, 278

reliable systems for, 92

replication, 266, 267

specifications and placement, 277 “286

domain level, linking group policies at, 205

Domain Local group, 248

account group/discretionary access control list (AG/DACL) strategies using, 242

Domain Name System (DNS), 56, 351

delegation options, 365 “366

exam essentials, 381 “382

infrastructure design, 366 “367

integration options, 359 “361

with DHCP, 374

with WINS, 374 “375

migration options, 364 “365

name selection, 47

namespace design, 353 “366

internal and external requirements, 354 “357

naming standards, 357 “359

root domain requirements, 356 “357

server security, 378 “379

static IP addressing for server, 330

zones, 361 “366

delegation options, 365 “366

migration options, 364 “365

propagation methods , 362 “364

types, 361 “362

Domain Naming Master, 139, 283

domain owners , and administrative control, 115

domains, 84. See also forest root domain

account policies settings, 210

Active Directory implementation for restructuring, 47

administrative structure with multiple domains, 122 “124

administrative structure with multiple trees, 124 , 125

administrative structure with single domain, 115 “127 , 116 “121

for centralized administration, 117 , 117 “118

for decentralized administration, 118 , 118 “119

hybrid administration, 119 “120, 120

outsourced administration,121, 121

creation considerations, 126 “127

design selection, design scenario, 125

exam essentials, 141 “142

functional levels, 127

name selection, 138 “139

real world scenario, 140

security concerns, 126

trust relationships, 127 “132

authentication, 132

design scenario, 131

external and realm trusts, 130 “131

with forest trust, 128 “129

with SID filtering, 131 “132

with trusts between domains, 129 “131

in Windows NT 4, 63

drive space, for domain controllers, 278

DSL (Digital Subscriber Line), 59

duration of account lockout, 239

Dynamic Host Configuration Protocol (DHCP), 58, 330 “331

integrating DNS with, 374

scope options, 332

server placement, 333

dynamic routes, 317