Lesson Plans LabSim for Microsoft s Managing and Maintaining a Microsoft Windows Server 2003 Environment

86 

Loading....

Loading....

Loading....

Loading....

Loading....

Full text

(1)

Lesson Plans

LabSim for Microsoft’s Managing and

Maintaining a Microsoft Windows

Server 2003 Environment

(2)

Table of Contents

Course Overview ... 3

Section 0.1: Introduction ... 5

Section 0.2: Active Directory Overview ... 6

Section 0.3: Group Policy ... 8

Section 0.4: Server Administration ... 9

Section 1.1: Installing Windows 2003 Server ... 10

Section 1.2: Automated Installs ... 12

Section 2.1: Users ... 13

Section 2.2: Groups ... 15

Section 2.3: Group Strategy ... 17

Section 2.4: User Profiles ... 19

Section 2.5: Computer Accounts... 21

Section 2.6: Account Policies ... 23

Section 2.7: AD Command Prompt Tools ... 25

Section 3.1: Installing Hardware Devices ... 27

Section 3.2: Managing Devices and Drivers ... 28

Section 4.1: File Systems ... 30

Section 4.2: Disks and Volumes ... 32

Section 4.3: Performance and Fault Tolerance ... 34

Section 4.4: Maintaining Disks and Volumes ... 36

Section 5.1: Backup and Restore... 38

Section 5.2: Volume Shadow Copy Services (VSS) ... 40

Section 5.3: System Recovery ... 41

Section 6.1: NTFS Permissions ... 43

Section 6.2: Shared Folders ... 45

Section 6.3: Share Access ... 46

Section 6.4: Disk Quotas ... 48

Section 6.5: Encryption and Compression ... 50

Section 6.6: Offline Files ... 52

Section 7.1: Installing and Configuring a Web Site ... 54

Section 7.2: Securing IIS ... 56

Section 7.3: Managing IIS ... 58

Section 8.1: Configuring Printing... 60

Section 8.2: Customizing Printing ... 62

Section 8.3: Managing Printing ... 64

Section 8.4: Troubleshooting Printing ... 66

Section 8.5: Internet Printing Protocol (IPP) ... 67

Section 9.1: Deploying and Updating Software ... 68

Section 9.2: Software Update Services (SUS) ... 70

Section 10.1: Auditing ... 72

Section 10.2: Security Templates ... 74

Section 11.1: Remote Management... 76

(3)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

2 Section 11.3: Monitoring Performance ... 80 Practice Exams ... 82 Appendix A: Approximate Time for the Course ... 83

(4)

Course Overview

0.0 Introduction

This module introduces Windows Server 2003, Active Directory, and basic server administration.

1.0 Installation

This module explains installation procedures, including automated and remote installations.

2.0 Users, Groups, and Computers

This module discusses resource management with user accounts, profiles, and groups.

3.0 Hardware Devices

This module covers hardware installation, configuration, and troubleshooting. You should have various pieces of hardware you can work with for this module. 4.0 Disk Storage

This module covers volumes, performance, and fault tolerance. It also covers basic principles of disk maintenance, including defragmenting and disk recovery. 5.0 Backup and Recovery

This module explains methods for ensuring the availability of data on your network. This includes setting up backups and recovering data in the event of a computer failure.

6.0 File Management

This module covers file systems, permissions, rights, shared folders, share permissions, disk quotas, encryption, compression, and offline files for remote access.

7.0 Internet Information Services (IIS)

This module covers installing and configuring a Web site, IIIS security, and IIS management.

8.0 Printers

This module covers printer configuration, customization, management, and troubleshooting. If possible, get a printer you can work with.

9.0 Installing Software

(5)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

4 10.0 System Security

This module introduces the concepts related to securing a network environment. 11.0 Management and Performance

This module explains methods for monitoring and optimizing your system. Practice Exams

In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam.

(6)

Section 0.1: Introduction

Summary

Students should have the following skills before studying for the Managing and Maintaining a Microsoft® Windows® Server 2003 Environment exam:

 Basic computer fundamentals including installing hardware and software and system troubleshooting.

 Computer networking experience.

 Experience with managing a desktop computer in a workgroup environment.

Video/Demo Time

0.1.1 Windows 2003 Introduction 2:34 Total Time

(7)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

6

Section 0.2: Active Directory Overview

Summary

This section provides an overview of the role of the Active Directory. Details include:

 Active Directory components:

o Domain

o Organizational Unit (OU)

o Generic Containers

o Objects

o Domain Controller

o Trees and Forests

o Sites and Subnets  Domain Functional Levels

o 2000 Mixed

o 2000 Native

o 2003 Interim

o 2003

 Common Windows XP/2003 default groups:

o Administrators

o Backup Operators

o Power Users

o Users

o Guests

 Some of the default domain groups that are created in the Builtin folder:

o Administrators

o Server Operators

o Backup Operators

o Guests

o Network Configuration Operators

o Print Operators

o Users

 Domain groups created in the Users folder in Active Directory:

o Domain Admins

o Domain Computers

o Domain Controllers

o Domain Guests

o Domain Users

o Enterprise Admins  Methods to control access:

o Permissions

(8)

Lecture Focus Questions:

 What are the primary container and objects used in Active Directory?  What is the hierarchy in a forest?

 What is a trust relationship?

 What are the functions of domain controllers?

 What are the advantages of using organizational units?

Video/Demo Time

0.2.1 Active Directory Overview 13:41 0.2.4 Users and Groups 7:06

Total 20:47

Total Time About 30 minutes

(9)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

8

Section 0.3: Group Policy

Summary

This section introduces information about group policy. Details include:  Group Policy categories:

o Computer configuration

o User configuration

 Intervals that Windows refreshes the effective Group Policy settings  Manually refreshing group policy settings

Lecture Focus Questions:

 What is the difference between Computer and User settings in a GPO?  To which objects can group policy objects be linked?

 What principles are used to control the application of group policies?  What are the rules to keep in mind when determining the effective

permissions of multiple GPOs created at different locations on the domain?

Video/Demo Time

0.3.1 Group Policy Objects 5:30 0.3.2 Creating and Linking a GPO 1:51 0.3.3 Configuring GPO Settings 1:26 0.3.4 Controlling GPO Application 4:51 0.3.5 Configuring GPO Application 1:21 0.3.6 Effective GPO Settings 3:16

Total 18:15

Total Time About 20 minutes

(10)

Section 0.4: Server Administration

Summary

This discusses tools to administer a network:  Microsoft Management Console (MMC)  Computer Management

 Administrative Tools  Run as…

 Remote Desktop  Terminal Services  Remote Assistance Students will learn how to:

 Use preset and custom MMCs. Windows Server 2003 Objectives

 404. Manage servers remotely.

o Manage a server by using available support tools. Lecture Focus Questions:

 On which systems can you install the server administration tools?  How can you protect administrator user accounts using the Run as...

feature?

 What is the difference between using an MMC to manage a remote computer and using Remote Desktop to complete those same tasks?

Video/Demo Time

0.4.2 Microsoft Management Console (MMC) 4:18 Number of Exam Questions

5 questions Total Time About 15 minutes

(11)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

10

Section 1.1: Installing Windows 2003 Server

Summary

This section introduces Windows 2003 installation. Details include:  Starting the Windows 2003 installation:

o From a DOS environment

o From within a 32-bit environment

 Common switches to use with the installation programs  Troubleshooting installation:

o Using the /debuglevel:logfile switch to create an installation debug log

o Using System File Checker (Sfc.exe) to verify the integrity of protected system files

o Using Spuninst.exe to uninstall a service pack or hotfix from the command line

 Licensing

o Modes for client access licensing:

 Per Device or Per User

 Per Server

o Tools for managing licenses:

 Licensing Control Panel Applet

 Licensing Administrative Tool

o Scenarios for using a license group:

 More users than computers

 A user has multiple devices that need simultaneous access

o Considerations when you run out of licenses Windows Server 2003 Objectives

 403. Manage software site licensing. Lecture Focus Questions:

 Why would you select one method over another to install Microsoft Windows 2003 operating system?

 How do you determine when to use Winnt.exe or Winnt32.exe?  What factors would you consider when choosing per seat vs. per server

(12)

Video/Demo Time 1.1.1 Winnt and Winnt32 3:58

1.1.4 Licensing 3:44

Total 7:42

Number of Exam Questions 8 questions

Total Time About 25 minutes

(13)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

12

Section 1.2: Automated Installs

Summary

Be familiar with the different types of remote installations and their requirements. Details include:

 Using an unattended installation to automate the operating system installation

 Using disk imaging to install Windows to a large number of computers with the same hardware configurations

 Using Remote Installation Services (RIS) to automate installing Windows  Installing Windows by copying the installation files to a network share

Students will learn how to:

 Create an Unattend.txt file Lecture Focus Questions:

 What are the methods used to perform unattended installations of Windows 2003?

 What is the process of installing RIS for Remote Installation Services?  What operating systems are supported for Remote Installation Services?  What are the components that must be installed on a RIS server for

Remote Installation Services?

Video/Demo Time

1.2.1 Unattended Installation 4:10 1.2.2 Creating an Unattend.txt File 4:41 1.2.5 Remote Installation Services (RIS) 2:13

Total 11:04

Total Time About 15 minutes

(14)

Section 2.1: Users

Summary

This section introduces user accounts. Familiarize yourself with the creation of user accounts and user properties prior to discussing these concepts in the lecture.

Students will learn how to:

 Create domain user accounts.

 Modify user account properties, including changing logon and password settings in the user account.

 Reset the password.

 Enable and disable an account. Windows Server 2003 Objectives

 204. Create and manage user accounts.

o Create and modify user accounts by using the Active Directory Users and Computers MMC snap-in.

 206. Troubleshoot user accounts.

o Diagnose and resolve account lockouts.

o Diagnose and resolve issues related to user account properties. Lecture Focus Questions:

 What is the difference between a disabled, locked out, or expired user account?

 What is the best way to handle a user’s account when an employee quits the company and will be replaced by a new employee in the near future?  What are the recommendations for using a template user account?  What properties of a user account do not get duplicated when you copy

(15)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

14

Video/Demo Time

2.1.1 Creating User Accounts 1:17 2.1.4 User Account Management 2:44 2.1.5 Managing User Accounts 5:34

Total 9:35

Lab/Activity

 Create a Domain User Account  Modify User Account Properties  Change the Logon Name

 Modify Password Settings  Set Account Expiration  Enable an Account  Modify Multiple Users  Create a Template User Number of Exam Questions 9 questions

Total Time About 60 minutes

(16)

Section 2.2: Groups

Summary

This section introduces groups on the local computer and in the domain environment. Details include:

 Active Directory defines three group scopes:

o Global groups

o Domain local groups

o Universal groups  Types of groups:

o Security group

o Distribution group

 Best practices for user and group security

 Some of the Active Directory default groups that are automatically created in the Builtin folder:

o Administrators

o Server Operators

o Backup Operators

o Account Operators

o Guests

o Network Configuration Operators

o Print Operators

o Users

 Some of the additional domain groups are also created in the Users folder in Active Directory:

o Domain Admins

o Domain Computers

o Domain Controllers

o Domain Guests

o Domain Users

o Enterprise Admins Students will learn how to:

 Create each type of security group and add members.  Create a distribution group and add members.

 Change the group scope. Windows Server 2003 Objectives

 203. Create and manage groups.

o Identify and modify the scope of a group.

(17)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

16

o Create and modify groups by using the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in.

Lecture Focus Questions:

 What are the advantages of using groups when setting permissions?  What is the difference between a security group and a distribution group?  What is the purpose of each group scope?

 What are the built-in capabilities of the Power Users group? The Backup Operators group?

Video/Demo Time

2.2.1 Group Scopes 4:09

2.2.2 Domain Local Scopes 3:26 2.2.4 Creating Groups 1:00 2.2.10 Built-in Groups 1:51

Total 10:26

Lab/Activity

 Create a Global Group

 Create a Domain Local Group  Create a Universal Group  Create a Distribution Group  Change the Group Scope Number of Exam Questions 4 questions

Total Time About 45 minutes

(18)

Section 2.3: Group Strategy

Summary

This section introduces the different strategies to use groups to manage access to system resources.

o ALP

o AGDLP

o AGUDLP

Students will learn how to:

 Implement a group strategy following Microsoft's recommendations for group membership and nesting.

Windows Server 2003 Objectives  203. Create and manage groups. Lecture Focus Questions:

 What are the circumstances that warrant using a universal group over a global group?

 When you add a user to a group, when will the permissions be granted that apply to that group?

 How is the technique of nesting used when assigning permissions to groups?

Video/Demo Time

2.3.1 Group Strategy 5:06 2.3.2 Implementing a Group Strategy 9:09

Total 14:15

Lab/Activity

 Implement a Group Strategy 1  Implement a Group Strategy 2

(19)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

18 Number of Exam Questions

6 questions Total Time About 35 minutes

(20)

Section 2.4: User Profiles

Summary

Familiarize yourself with the different types of profiles and their uses. Create mandatory and roaming profiles to show the students. Be prepared to discuss the best practices for using profiles. Details included in this section include:

 Common profile manage tasks:

o Create a new profile

o Edit an existing profile

o Create Start Menu or Desktop shortcuts

o Copy a profile

o Copy a profile from one system to another

o Make a mandatory user profile

o Make a roaming user profile

o Assign a specific profile

o Delete a profile

 Permissions needed to manage and use profiles  Roaming user profiles

 Group Policy settings that control roaming profiles Students will learn how to:

 Create a mandatory user profile.  Create a roaming user profile. Windows Server 2003 Objectives

 201. Manage local, roaming, and mandatory user profiles. Lecture Focus Questions:

 What is the name of the default user profile created when a user is created and where is it stored?

 What parameters does the user profile allow the user to modify?  How do you alter the default user profile to create a mandatory user

profile?

 Since both mandatory and personal user profiles can be modified, what are the differences between the two types of profiles?

(21)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

20

Video/Demo Time

2.4.1 Mandatory Profile 3:04 2.4.2 Roaming Profile 4:35 2.4.3 Managing User Profiles 2:15

Total 9:54

Lab/Activity

 Create a Mandatory Profile  Create a Roaming Profile  Delete User Profiles

 Add Mandatory Roaming Profiles Number of Exam Questions

9 questions Total Time About 45 minutes

(22)

Section 2.5: Computer Accounts

Summary

This section discusses how computer accounts are Active Directory objects that identify network computers.

Students will learn how to:

 Create computer accounts and manage computer account properties.  Disable and reset a computer account.

Windows Server 2003 Objectives

 202. Create and manage computer accounts in an Active Directory environment.

 205. Troubleshoot computer accounts.

o Diagnose and resolve issues related to computer accounts by using the Active Directory Users and Computers MMC snap-in.

o Reset computer accounts.

 207. Troubleshoot user authentication issues. Lecture Focus Questions:

 What are the steps required to join a domain manually?

 What can the administrator do to allow a user to join a computer to a domain during installation?

 What are the things to consider if a computer account has been created on a domain but doesn’t seem to be able to join the domain?

 What must you do after resetting a computer account?

Video/Demo Time

2.5.1 Computer Accounts 3:44 2.5.2 Joining a Domain 1:10 2.5.3 Managing Computer Accounts 1:49

Total 6:43

Lab/Activity

 Create Computer Accounts  Disable a Computer Account  Reset a Computer Account

(23)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

22 Number of Exam Questions

6 questions Total Time About 30 minutes

(24)

Section 2.6: Account Policies

Summary

The section discusses using account policies to control passwords and login properties. Details include:

 Password settings

o Enforce password history

o Maximum password age

o Minimum password age

o Minimum password length

o Password complexity

o Reversible encryption  Account lockout settings:

o Account lockout duration

o Account lockout threshold

o Reset account lockout counter after  Consideration when managing account security

 Conditions to consider when troubleshooting logon problems:

o Disabled account

o Locked account

o Expired account

o Logon not permitted

o Workstation restrictions

o Expired password

o No domain controller available

o Computer account problems

o Using Dsmod

o The role of cached credentials Students will learn how to:

 Configure account settings.  Configure password settings. Windows Server 2003 Objectives

 206. Troubleshoot user accounts.

o Diagnose and resolve account lockouts.

o Diagnose and resolve issues related to user account properties.  207. Troubleshoot user authentication issues.

(25)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

24 Lecture Focus Questions:

 How does an overly restrictive password requirement compromise the network?

 What password settings are available to tighten up network security?  How do account lockout settings protect the network?

 Where must account and password policies be configured in Group Policy?

Video/Demo Time

2.6.1 Password Policies 3:30 2.6.2 Setting Account and Password Policies 1:12

Total 4:42

Lab/Activity

 Configure Account Settings 1  Configure Account Settings 2  Configure Password Settings 1  Configure Password Settings 2  Reset the Password

Number of Exam Questions 20 questions

Total Time About 55 minutes

(26)

Section 2.7: AD Command Prompt Tools

Summary

Many of the Active Directory administrative tasks can be accomplished from a command line. This facilitates the remote management of server systems. Learn the command prompt tools and their functions.

 Dsadd  Dsquery  Dsget  Dsmod  Dsmove  Dsrm  Movetree  Netdom  Ldifde  Csvde

Students will learn how to:

 Use the following tools to manage Active Directory: Dsadd, Dsquery, Dsget, Dsmod, Dsmove, Dsrm, Movetree, Ldifde, and Csvde.

Windows Server 2003 Objectives  203. Create and manage groups.

o Find domain groups in which a user is a member.

o Create and modify groups by using automation.  204. Create and manage user accounts.

o Create and modify user accounts by using automation.

o Import user accounts. Lecture Focus Questions:

 What objects can be imported and exported in Active Directory?  How do you move objects from one Active Directory to another Active

Directory?

(27)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

26

Video/Demo Time

2.7.1 Importing and Exporting 3:20 2.7.2 AD Management Commands 4:09 2.7.3 Using Command Prompt Tools 7:07

Total 14:36

Number of Exam Questions 8 questions

Total Time About 25 minutes

(28)

Section 3.1: Installing Hardware Devices

Summary

This section introduces device installation. If possible have a variety of devices available to attach to the printer (try to have one that requires manual installation of the drivers for demonstration purposes), especially a printer. Concepts

covered include:

 Installing devices

 Reasons an installation may fail

 Icons used in Device Manager to identify problem devices  Considerations when troubleshooting device installation Students will learn how to:

 Install hardware devices. Windows Server 2003 Objectives

 104. Install and configure server hardware devices.

o Configure resource settings for a device.

o Configure device properties and settings. Lecture Focus Questions:

 How do Plug and Play devices simplify installation?  What key steps are necessary to install legacy devices?  What user rights are required to install devices?

Video/Demo Time

3.1.1 Device Installation 1:39 3.1.2 Installing Devices 3:20

Total 4:59

Lab/Activity

 Autodetect a Plug and Play Device  Install a Legacy Device

Total Time About 20 minutes

(29)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

28

Section 3.2: Managing Devices and Drivers

Summary

This section discusses the concept of drivers and driver signing. If possible, have a device available to install. Update the driver using the device’s Properties dialog box. If not, be familiar enough to show the students the device’s properties. Details include:

 Tools to manage devices:

o Device Manager

o Control panel Applets

o Add Hardware Wizard

o Hardware Troubleshooting Wizard  Updating drivers

 Settings to control how unsigned drivers are installed on the system:

o Block

o Warn

o Ignore

o Make this action the system default  Protecting against unsigned drivers

Students will learn how to:

 Enable, disable, and remove devices.  Upgrade or roll back a driver.

 Configure driver signing. Windows Server 2003 Objectives

 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items.  104. Install and configure server hardware devices.

o Configure driver signing options.

o Configure resource settings for a device.

o Configure device properties and settings. Lecture Focus Questions:

 How does driver signing ensure driver integrity?

 What options are available when setting up driver signing options?  How do you ensure that the driver signing options you have selected will

be imposed upon all users that log on to the system?

 What file verification tools are available to verify driver signatures and file integrity?

(30)

Video/Demo Time 3.2.1 Managing Devices and Drivers 2:44 3.2.6 Driver Signing 2:05 3.2.7 Configuring Driver Signing 3:12 3.2.11 Hardware Control Panel Applets 3:22

Total 11:23

Lab/Activity

 Enable and Disable Devices  Remove a Device

 Upgrade a Driver

 Configure Driver Signing Number of Exam Questions 12 questions

Total Time About 45 minutes

(31)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

30

Section 4.1: File Systems

Summary

Familiarize yourself with the different file systems. If possible, create three partitions on a volume. Format each with a different file system. Examine the differences in Computer Management or in Disk Management. Show the

compression, quota, and permissions settings in the Local Disk Properties dialog box of the NTFS volume. This section discusses the following:

 Types of file systems:

o FAT

o FAT32

o NTFS

 A comparison of the file system types supported by each operating system  Using the Convert.exe utility to modify the file system without reformatting

and losing data. Students will learn how to:

 Format a drive.

 Convert a drive to NTFS. Windows Server 2003 Objectives

303. Configure file system permissions. Lecture Focus Questions:

 Which file systems does Windows 2003 support?  How do you convert a FAT file system to NTFS?

 What additional capabilities are added to a FAT32 file system when it is converted to NTFS?

Video/Demo Time

4.1.1 File Systems 5:16

4.1.2 Convert to NTFS 2:10

(32)

Lab/Activity

 Format a Drive  Convert a Drive

Number of Exam Questions 1 question

Total Time About 20 minutes

(33)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

32

Section 4.2: Disks and Volumes

Summary

This section discusses disks and volumes. Details include:  Considerations when using basic disks

 Considerations when using dynamic disk

 Factors to consider when choosing to implement basic or dynamic disks  Types of volumes:

o Simple volume

o Extended volume

o Spanned volume  Managing volumes Students will learn how to:

 Upgrade a disk to a dynamic disk or revert a disk to a basic disk.

 Create a simple volume, extend an existing volume, and create a spanned volume.

Windows Server 2003 Objectives

 101. Manage basic disks and dynamic disks. Lecture Focus Questions:

 What are the differences between basic and dynamic disks?

 What new feature is allowed on Server 2003 with dynamic disks not available previously?

 What are the advantages and disadvantages of spanned volumes?

Video/Demo Time

4.2.1 Disk Types 6:50

4.2.3 Creating a Simple Volume 1:05 4.2.7 Spanned Volumes 4:22 4.2.8 Creating Spanned Volumes 1:08

(34)

Lab/Activity

 Upgrade a Disk

 Revert a Disk to Basic  Create a Volume

 Span an Existing Volume  Create a Spanned Volume Number of Exam Questions 2 questions

Total Time About 40 minutes

(35)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

34

Section 4.3: Performance and Fault Tolerance

Summary

This section discusses the different methods for fault tolerance and redundancy. Details include:

 RAID levels:

o RAOD0

o RAID1

o RAID5  Volume Types

o Mirrored volume

o Striped volume

o RAID5 Volume Students will learn how to:

 Create a striped volume.

 Create a mirrored volume and mirror an existing volume.  Create a RAID-5 volume.

Windows Server 2003 Objectives

 101. Manage basic disks and dynamic disks.  103. Optimize server disk performance.

o Implement a RAID solution.

o Defragment volumes and partitions.

Video/Demo Time

4.3.1 RAID Levels 0:55

4.3.2 Striping 3:21

4.3.4 Mirroring 2:46

4.3.5 Creating Mirrored Volumes 1:47

4.3.9 RAID-5 5:53

4.3.10 Creating RAID Volumes 1:42

(36)

Lab/Activity

 Create a Striped Volume  Create a Mirrored Volume  Mirror an Existing Drive  Mirror the System Partition  Create a RAID Volume Number of Exam Questions 6 questions

Total Time About 50 minutes

(37)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

36

Section 4.4: Maintaining Disks and Volumes

Summary

This section discusses the methods for defragmenting and recovering disks. Details include:

 Tools to manage disks:

o DiskPart

o Defrag

o Cscript

o Disk Defragmenter

o Disk Management  Recovering failed disks:

o In a spanned volume or striped set

o In a mirror configuration

o In a RAID5 configuration

o In a failed operating system  Volume mount points

 The role of the Boot.ini file

 The ARC path locates the system file and contains the following elements:

o MULTI(x) or SCSI(x)

o DISK(x)

o RDISK(x)

o PARTITION(y) Students will learn how to:

 Break a mirrored volume

 Recover from a failed mirrored volume  Repair a RAID volume

Windows Server 2003 Objectives

 102. Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items.  503. Recover from server hardware failure.

Lecture Focus Questions:

 What volume types lose all data in the absence of parity and data backup?  What are the steps to recovering from a drive failure?

(38)

Video/Demo Time 4.4.1 Defragmenting a Hard Disk 1:01

4.4.2 Disk Recovery 1:36

4.4.3 Recovering from a Failed Disk 2:48

4.4.8 Boot.ini File 15:52

Total 21:17

Lab/Activity

 Break a Mirrored Volume

 Recover a Failed Mirrored Volume  Repair a RAID Volume

Number of Exam Questions 9 questions

Total Time About 45 minutes

(39)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

38

Section 5.1: Backup and Restore

Summary

This section covers backup and restore. Concepts covered include:  Backup methods:

o Full (Normal)

o Incremental

o Differential

o Copy

o Daily

 Backup strategies:

o Full Backup

o Full + Incremental

o Full + Differential

o Periodic Copy Backup  Data types:

o System state

o User data

o Application data  Managing backups  Scheduled backups  Restoring files Students will learn how to:

 Manage backup media and devices.  Back up and restore data.

Windows Server 2003 Objectives

 501. Perform system recovery for a server.

o Configure security for backup operations.  502. Manage backup procedures.

o Verify the successful completion of backup jobs.

o Manage backup storage media.  503. Recover from server hardware failure.

o Restore backup data.

(40)

Lecture Focus Questions:

 If you are using mirrored or RAID disks, do you need to back up your system?

 What file components make up the system state data for Windows 2003 Server?

 What are the advantages of the different backup types?

 Which backup strategy would you choose if fast restore times were important? Which strategy would you choose to minimize the number of tapes used?

Video/Demo Time

5.1.1 Windows Backup 12:20 5.1.2 System State Data 6:02 5.1.3 Choosing a Backup Strategy 5:49 5.1.4 Backing up Data 4:48 5.1.5 Restoring Data 2:27

Total 31:26

Number of Exam Questions 27 questions

Total Time About 65 minutes

(41)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

40

Section 5.2: Volume Shadow Copy Services (VSS)

Summary

This section discusses the operating system feature Volume Shadow Copy Services (VSS). Details covered include:

 The role of VSS

 Considerations when enabling and disabling VSS  Restoring files

 Recommendations when working with shadow copies Students will learn how to:

 Enable shadow copies on a volume.

 View and restore previous versions of files. Windows Server 2003 Objectives

 501. Perform system recovery for a server.

o Restore data from shadow copy volumes. Lecture Focus Questions:

 How is VSS used in a system backup?

 What happens when the system runs out of room for storing previous versions?

 What are the client requirements for accessing and restoring previous versions of files?

 What should you do if a user cannot see the Previous Versions tab for a folder or a file?

Video/Demo Time

5.2.2 Using Volume Shadow Copy 3:13 Lab/Activity

 Enable Shadow Copies Number of Exam Questions 8 questions

Total Time About 20 minutes

(42)

Section 5.3: System Recovery

Summary

This section introduces the methods available for recovering from system failures. Details include:

 Methods to recover from system problems:

o Driver Rollback

o Last Known Good Configuration

o Safe Mode

o Recovery Console

o Automated System Recovery

o Windows Backup (Ntbackup)  Types of Active Directory restores:

o Normal (non-authoritative)

o Authoritative

o Primary

 How to restore Active Directory information Students will learn how to:

 Set up and use ASR.

Windows Server 2003 Objectives

 501. Perform system recovery for a server.

o Implement Automated System Recovery (ASR).

o Restore data from shadow copy volumes.

o Back up files and System State data to media.

o Configure security for backup operations. Lecture Focus Questions:

 What are the key differences between Driver Rollback and Automatic System Recovery (ASR)?

 When troubleshooting the network, in what circumstances would you use Safe Mode over Last Known Good?

(43)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

42

Video/Demo Time

5.3.1 Driver Rollback and ASR 3:58 5.3.2 Setting up and Using ASR 1:57 5.3.3 Troubleshooting System Startup 5:16 5.3.5 Backing Up and Restoring Active Directory 6:53

Total 18:04

Number of Exam Questions 8 questions

Total Time About 35 minutes

(44)

Section 6.1: NTFS Permissions

Summary

This section discusses how NTFS permissions are used to control the actions that can be performed on the file or folder. Details include:

 Permissions for folders and files:

o Read

o Write

o List Folder Contents

o Read & Execute

o Modify

o Full Control

 How file ownership affects access and assigning permissions  Copying or moving files with NTFS permissions

 Effective permissions are the sum of all permissions from the following sources:

o Explicit Assignment

o Group membership

o Inheritance

 Determining effective permissions  Planning NTFS permissions Students will learn how to:

 Configure NTFS permissions.

 From a scenario, select the correct permissions to allow the necessary actions.

 Copy, remove, and modify inherited permissions.

 Identify the effective permissions a user has to a file or folder. Windows Server 2003 Objectives

 303. Configure file system permissions.

o Verify effective permissions when granting permissions.

o Change ownership of files and folders. Lecture Focus Questions:

 When do NTFS permissions apply?

 What are the differences between the NTFS Full Control permission and the Modify permission?

 Which permission assignment overrides all other permission assignments?

(45)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

44

Video/Demo Time

6.1.1 NTFS Permissions 6:34 6.1.2 Setting NTFS Permissions 3:50 6.1.7 Viewing Effective Permissions 2:46

Total 13:10

Lab/Activity

 Configure NTFS Permissions

 Copy and Modify Inherited Permissions  Remove Inherited Permissions

Number of Exam Questions 6 questions

Total Time About 45 minutes

(46)

Section 6.2: Shared Folders

Summary

This section introduces shared folders. Details include:  The role of shared folders

 Managing shared folders  Accessing a shared folder  Hiding a share

Students will learn how to:

 Share and unshare a folder.  Configure shared properties. Windows Server 2003 Objectives

 301. Configure access to shared folders. Lecture Focus Questions:

 What tools can you use to share folders?  What is the process for hiding a share?  How are administrative shares accessed?

 What limitations are there on sharing folders on desktop operating systems (such as Windows XP Professional)?

Video/Demo Time

6.2.1 Share a Folder 3:13 Lab/Activity

 Share a Folder with a Second Name  Unshare a Folder

 Remove a Shared Folder Number of Exam Questions 6 questions

Total Time About 25 minutes

(47)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

46

Section 6.3: Share Access

Summary

This section covers the methods for managing access to shared resources. Details include:

 Share permissions:

o Read

o Change

o Full Control

 Share permissions work together with NTFS permissions to control access  Considerations when managing share access

Students will learn how to:

 Restrict share access through share permissions and user limits.  Configure combined NTFS and share permissions.

Windows Server 2003 Objectives

 301. Configure access to shared folders.

o Manage shared folder permissions. Lecture Focus Questions:

 What are the differences and similarities between NTFS permissions and share permissions?

 What is the difference between modify and change permissions?  How does the access funnel theory help to explain the effective

permission when combining NTFS permissions and share permissions?  What strategy can be used to secure network resources by combining

(48)

Video/Demo Time 6.3.1 Share Permissions 5:12 6.3.2 Controlling Share Access 1:39

Total 6:51

Lab/Activity

 Configure Share Permissions

 Create a Share and Set Permissions  Configure Share Limits

 Configure NTFS and Share Permissions 1  Configure NTFS and Share Permissions 2 Number of Exam Questions

14 questions Total Time About 55 minutes

(49)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

48

Section 6.4: Disk Quotas

Summary

This section discusses how disk quotas are set on NTFS volumes. Details include:

 Considerations when settings disk quotas  Quota settings to manage quotas:

o Disabled

o Tracked

o Enforced

 Actions to take when a user exceeds the quota limit

 Compressing files will not provide more space when quotas have been set Students will learn how to:

 Enable disk quota restrictions.

 Create and modify quota entries for individual users. Windows Server 2003 Objectives

 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.

o Monitor disk quotas. Lecture Focus Questions:

 Are disk quotas configured on disks, volumes, folders, or files?  What effect does compressing files have on the disk quota limit?  What actions can be taken when a user exceeds the disk quota limit?  How can you have a disk quota configured, but still allow users to exceed

the quota limits?

 What conditions must be met before you can delete a disk quota entry?  Which user is exempt from disk quotas?

(50)

Video/Demo Time

6.4.1 Disk Quotas 5:14

6.4.2 Enabling Quota Management 2:25

6.4.4 Quota Entries 3:17

6.4.5 Configuring Quota Entries 2:32

Total 13:28

Lab/Activity

 Enable Quota Restrictions  Create a Quota Entry  Modify Quota Limits  Delete a Quota Limit Number of Exam Questions 2 questions

Total Time About 35 minutes

(51)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

50

Section 6.5: Encryption and Compression

Summary

This section covers the encryption and compression features of the NTFS file system. Details include:

 Considerations when working with EFS

 Rules to determine the final state of an encrypted file that has been copied or moved.

 Saving encrypted files on a remote computer  Methods for compressing files and folders:

o File compression

o Zipped folders

 Considerations when working with folder and file compression  Using Compact.exe to set and manage compression

Students will learn how to:

 Encrypt and decrypt a file or folder.  Compress a drive, folder, or file. Windows Server 2003 Objectives

 301. Configure access to shared folders. Lecture Focus Questions:

 What are different methods for encrypting a file?

 Under what circumstances can an encrypted file under EFS lose its encryption?

 Who can open an encrypted file?

 What files are not allowed to be encrypted?

(52)

Video/Demo Time 6.5.1 File Encryption 6:47 6.5.2 Encrypting Files 3:31

6.5.6 Compression 1:21

6.5.7 Compressing Files 1:24

Total 13:03

Lab/Activity

 Encrypt a Folder  Decrypt a File  Compress a Drive  Compress a Folder Total Time

(53)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

52

Section 6.6: Offline Files

Summary

This section covers information relevant to mobile computers and offline files. Details include:

 The role of offline files  Configuring offline files

 Considerations when working with offline files Students will learn how to:

 On the server, enable, disable, or optimize offline file cache settings.  Configure a client computer to use offline files.

Windows Server 2003 Objectives

 301. Configure access to shared folders. Lecture Focus Questions:

 What are the different settings available for offline file caching?  How does offline file support provide access to shared files?

Video/Demo Time

6.6.1 Configuring Offline Files on the Server 1:26 6.6.2 Configuring Offline Files on the Client 2:46

Total 4:12

Lab/Activity

 Optimize Program Caching  Enable Automatic Caching  Disable Share Caching

(54)

Number of Exam Questions 1 question

Total Time About 25 minutes

(55)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

54

Section 7.1: Installing and Configuring a Web Site

Summary

This section introduces the Internet Information Server (IIS). While IIS was installed by default in Windows 2000 Server, it is not in Windows Server 2003. Install IIS through the Add/Remove Programs Control Panel applet. Details include:

 The role of IIS

 Making Web content available using the following in IIS:

o Home directory

o Default home pages

o Virtual directories  URLS to access the Web site Students will learn how to:

 Install IIS and selected components.

 Change the default home page and home directory path.  Create a virtual directory.

Windows Server 2003 Objectives  409. Manage a Web server.

o Manage Internet Information Services (IIS). Lecture Focus Questions:

 What is IIS?

 What is the default home page path?  What is a virtual directory?

Video/Demo Time

7.1.2 Installing and Administering IIS 2:47 7.1.6 Creating a Virtual Directory 2:22

(56)

Lab/Activity  Install IIS

 Change the Default Home Page  Change the Home Directory Path  Create a Virtual Directory

 Set the Virtual Directory Home Page Number of Exam Questions

3 questions Total Time About 35 minutes

(57)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

56

Section 7.2: Securing IIS

Summary

This section covers the methods for securing IIS. Details include:  Authentication methods:

o Anonymous Authentication

o Basic Authentication

o Digest Authentication

o Advanced Digest Authentication

o Integrated Windows Authentication

o Certificate Authentication

o .NET Passport Authentication  Authentication methods can be applied to:

o Server

o Web site

o FTP site

o Virtual Directory

o File

 Facts about securing IIS

 IIS permissions that can be set for Web sites or Web folders:

o Read

o Write

o Script Source Access

o Directory Browsing

o Execute Permissions

 Using NTFS permissions for Web content Students will learn how to:

 Configure Web site authentication.

 Configure virtual directory authentication and permissions. Windows Server 2003 Objectives

 409. Manage a Web server.

o Manage Internet Information Services (IIS).

o Manage security for IIS. Lecture Focus Questions:

 What are the features of the Basic Authentication?

 What is the disadvantage of Integrated Windows Authentication?  What effects would the different Web permissions allow?

(58)

 What happens when Web site, directory, and NTFS permissions are all set on Web content?

Video/Demo Time

7.2.1 IIS Security 2:55

7.2.2 Managing IIS Authentication 1:46 7.2.6 Managing IIS Permissions 3:37

Total 8:18

Lab/Activity

 Configure Web Site Authentication

 Configure Virtual Directory Authentication  Configure Virtual Directory Permissions Number of Exam Questions

2 questions Total Time About 30 minutes

(59)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

58

Section 7.3: Managing IIS

Summary

This section introduces the different management tasks associated with IIS. Details include:

 Identifying a Web site  Managing IIS

Students will learn how to:  Create a new Web site.  Start and stop a Web site.

 Configure alternate port numbers and host headers for a Web site.  Add restrictions for Web site access.

Windows Server 2003 Objectives  409. Manage a Web server.

o Manage Internet Information Services (IIS).

o Manage security for IIS. Lecture Focus Questions:

 Where is a default Web site assigned when using IIS Manager?  What are the steps to creating a virtual directory?

 How can you get a Web site to respond to different Web site names?

Video/Demo Time

7.3.1 Creating a Web Site 2:19 7.3.3 Configuring Web Site Identification 2:32

Total 4:51

Lab/Activity

 Create a New Web Site  Limit Web Site Access  Stop the Web Site

(60)

Number of Exam Questions 7 questions

Total Time About 30 minutes

(61)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

60

Section 8.1: Configuring Printing

Summary

This section introduces printing concepts and tasks. Details include:  Key printing terms:

o Print Server

o Printer

o Print Device

o Print Driver

o Print Queue

o Printer Port

 Configuration choices to configure each type of printer  Permissions that can be assigned to printers:

o Print

o Manage Documents

o Manage Printer

 Tasks available to the Printer Operator group  Managing print drivers on shared printers Students will learn how to:

 Install and share a printer.  Configure printer permissions. Windows Server 2003 Objectives

 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.

o Monitor print queues. Lecture Focus Questions:

 How can printer terminology be confusing in a Windows 2003 environment?

 What are the advantages of network printing?

 For which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer?

(62)

Video/Demo Time 8.1.1 Printing Concepts 10:21 8.1.3 Installing a Local Printer 2:54 8.1.5 Sharing a Printer 2:49

Total 16:04

Lab/Activity

 Install a Local Printer  Share a Printer

 Create and Share a Printer

 Unpublish a Printer in Active Directory  Add Printer Drivers

 Configure Printer Permissions Number of Exam Questions 2 questions

Total Time About 50 minutes

(63)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

62

Section 8.2: Customizing Printing

Summary

This section looks at some advanced printer configurations to customize printing.  Configuration techniques include:

o Printer pooling

o Multiple printer objects Students will learn how to:

 Configure printer pooling.

 Customize printing by using priorities, permissions, availability, and multiple printer objects.

Windows Server 2003 Objectives  405. Troubleshoot print queues.

 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.

o Monitor print queues. Lecture Focus Questions:

 Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device?

 What are the advantages of print pooling?

 How can you ensure important print jobs will automatically be printed before any other print jobs?

Video/Demo Time

8.2.2 Configuring Printer Pooling 2:25 8.2.4 Configuring Multiple Printer Objects 5:04

Total 7:29

Lab/Activity

 Configure Printer Pooling  Restrict Printing Times  Configure Printer Priority

(64)

Number of Exam Questions 2 questions

Total Time About 25 minutes

(65)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

64

Section 8.3: Managing Printing

Summary

This section introduces the various management tasks administrators may have to deal with.

Students will learn how to:

 Add printer drivers for previous Windows version clients.  Manage print jobs in the print queue.

 Edit print server properties to change the spool location and modify print job notification.

Windows Server 2003 Objectives  405. Troubleshoot print queues.

 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.

o Monitor print queues. Lecture Focus Questions:

 Where would you go to perform the following tasks?

o View the port used by each printer.

o Change the driver used by a printer.

o Add drivers for download by clients.

o Move, pause, or delete print jobs.

o Configure notification for print jobs.

 How do clients obtain the correct driver for shared printers?  Where are documents saved prior to printing?

Video/Demo Time

8.3.1 Managing Printers 2:08 8.3.2 Managing the Print Queue 1:36 8.3.4 Managing the Print Server 2:22

(66)

Lab/Activity

 Delete a Print Job

 Disable Printer Notification

 Disable Printer Notification (Non-2000 clients)  Change the Spool Location

Total Time About 25 minutes

(67)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

66

Section 8.4: Troubleshooting Printing

Summary

This section introduces print troubleshooting techniques. Students will learn how to:

 Redirect print jobs to other printers. Windows Server 2003 Objectives

 405. Troubleshoot print queues. Lecture Focus Questions:

 How does a print job get from the sending computer to the printer?  How do you recover print jobs when a print device needs to be taken off

line?

 Where is a print job stored once a user has sent it to the printer?

Video/Demo Time

8.4.1 Recovering from Printer Failure 4:13 Lab/Activity

 Redirect Print Jobs  Redirect Print Jobs 2 Number of Exam Questions 3 questions

Total Time About 15 minutes

(68)

Section 8.5: Internet Printing Protocol (IPP)

Summary

This section introduces the Internet Printing Protocol. Students will learn how to:

 Install the IPP component of IIS.

 From a client computer, connect to and send a print job to an Internet printer.

Windows Server 2003 Objectives

 407. Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.

 409. Manage a Web server.

o Manage Internet Information Services (IIS). Lecture Focus Questions:

 What is the functionality of IPP?

 What are the system requirements for Internet printing?  How do users access printers across the Internet?  How do you provide intranet printing on client machines?

Video/Demo Time

8.5.1 IPP 3:17

8.5.2 Configuring IPP 7:13

Total 10:30

Number of Exam Questions 2 questions

Total Time About 15 minutes

(69)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

68

Section 9.1: Deploying and Updating Software

Summary

This section introduces the concepts of software distribution. Details include:  File extensions that are used with installer packages:

o .msi

o .msp

o .mst

o .zap

 Using Group Policy to add an installer package to a software installation policy in a GPO:

o Assign

o Publish Students will learn how to:

 Create a software distribution package.

 Customize software distribution to simplify management and control distribution.

Windows Server 2003 Objectives

 402. Manage software update infrastructure. Lecture Focus Questions:

 What options are available to deploy applications and programs to client machines?

 What are the differences between assigning or publishing an application when using group policy?

 What is the process to troubleshoot software deployment?  How are patches and service packs handled differently?

(70)

Video/Demo Time 9.1.1 Deploying Applications 4:53 9.1.2 Creating a Software Distribution 2:14 9.1.3 Troubleshooting Software Deployment 2:55 9.1.4 Service Packs and Patches 1:56

Total 11:58

Number of Exam Questions 2 questions

Total Time About 15 minutes

(71)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

70

Section 9.2: Software Update Services (SUS)

Summary

This section covers the Software Update Services component of Windows Server 2003. Details include:

 Major SUS components:

o SUS on an Internet Information Services (IIS) server

o SUS Web site

o Automatic Updates

o Group Policy settings

o Client and Server support  Advantages of SUS

 How SUS works

 Installing and configuring the SUS server  Installing and configuring the SUS client  Designing the SUS infrastructure

 Considerations when using SUS Students will learn how to:

 Install SUS and configure server settings.

 Synchronize an SUS server with Microsoft SUS servers.  Approve SUS updates.

 Configure client settings for SUS. Windows Server 2003 Objectives

402. Manage software update infrastructure. Lecture Focus Questions:

 What is the function of Software Update Services (SUS)?

 From what location is the SUS available to install on your server?  What are the functions of the major components of SUS?

(72)

Video/Demo Time 9.2.3 Configuring SUS 6:15 9.2.4 Managing SUS Clients 2:49

Total 9:04

Number of Exam Questions 9 questions

Total Time About 25 minutes

(73)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

72

Section 10.1: Auditing

Summary

This section introduces the concept of auditing as an element of administration. Details include:

 Audit policies in Group Policy that can be configured:

o Account logon

o Account management

o Logon

o Object access

o Policy change

o Privilege use

o Process tracking

o System events

 Considerations when configuring auditing Students will learn how to:

 Configure auditing using Group Policy. Windows Server 2003 Objectives

 206. Troubleshoot user accounts.

o Diagnose and resolve account lockouts.

o Diagnose and resolve issues related to user account properties.  207. Troubleshoot user authentication issues.

Lecture Focus Questions:

 What are the types of functions you can audit?

 What measures should be taken to protect excessive system resources from being consumed by auditing?

 How does auditing file access differ from auditing other items?  Where do you view audit entries?

(74)

Video/Demo Time

10.1.1 Auditing 4:50

10.1.2 Configuring Auditing 3:18 10.1.7 Configuring File System Auditing 2:07

Total 10:15

Lab/Activity

 Configure Auditing 1  Configure Auditing 2  Configure Auditing 3 Number of Exam Questions 6 questions

Total Time About 35 minutes

(75)

©2002 TestOut Corporation (Rev 04/12)

Microsoft Windows Server 2003 (70-290) Lesson Plan

74

Section 10.2: Security Templates

Summary

This section introduces the use of security templates to help enforce network security. Details include:

 Predefined security templates:

o Setup Security.inf

o DC Security.inf

o Secure*.inf

o Hisec*.inf

o Compatws.inf

 Using Security Analysis and Configuration snap-in to:

o Manage security templates

o Analyze current settings

o Create custom templates

o Import an existing template Students will learn how to:

 Analyze security settings.

 Configure and apply security templates. Windows Server 2003 Objectives

 406. Monitor system performance. Lecture Focus Questions:

 What are the advantages of security templates?

 What program is available to access the predefined security templates?  What command allows you to analyze and apply templates?

 Why is it important to clear current settings before importing a new template?

(76)

Video/Demo Time 10.2.1 Security Templates 3:46 10.2.2 Analyzing Security Settings 2:28 10.2.3 Configuring and Applying Security Templates 2:48

Total 9:02

Number of Exam Questions 1 question

Total Time About 10 minutes

Figure

Updating...

References

Updating...