Part Number: X05-39393 Course Number: 1561B Released: 2/00 Delivery Guide Designing a Microsoft ® Windows ® 2000 Directory Services Infrastructure Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2000 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows NT, Active Directory, BackOffice, PowerPoint, Visual Basic, and Visual Studio are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Other product and company names mentioned herein may be the trademarks of their respective owners. Project Lead: Andy Sweet (S&T OnSite) Instructional Designers: Andy Sweet (S&T OnSite), Ravi Acharya (NIIT), Sid Benavente, Richard Rose, Kathleen Norton Instructional Design Consultants: Paul Howard, Susan Greenberg Program Managers: Lorrin Smith-Bates (Volt), Megan Camp (Independent Contractor) Technical Contributors: Angie Fultz, Lyle Curry, Brian Komar (3947018 Manitoba, Inc.), Jim Clark (Infotec Commercial Systems), Bill Wade (Excell Data Corporation), David Stern, Steve Tate, Greg Bulette (Independent Contractor), Kathleen Cole (S&T OnSite) Graphic Artist: Kirsten Larson (S&T OnSite) Editing Manager: Lynette Skinner Editor: Jeffrey Gilbert (Wasser) Copy Editor: Patti Neff (S&T Consulting) Online Program Manager: Debbi Conger Online Publications Manager: Arlo Emerson (Aditi) Online Support: Eric Brandt (S&T Consulting) Multimedia Development: Kelly Renner (Entex) Testing Leads: Sid Benavente, Keith Cotton Testing Developer: Greg Stemp (S&T OnSite) Compact Disc and Lab Testing: Testing Testing 123 Production Support: Ed Casper (S&T Consulting) Manufacturing Manager: Rick Terek (S&T OnSite) Manufacturing Support: Laura King (S&T OnSite) Lead Product Manager, Development Services: Bo Galford Lead Product Managers: Dean Murray, Ken Rosen Group Product Manager: Robert Stewart Course Number: 1561B Part Number: X05-39393 Released: 2/00 Designing a Microsoft® Windows® 2000 Directory Services Infrastructure iii Contents Introduction Course Materials 2 Prerequisites 3 Course Outline 4 Microsoft Official Curriculum 6 Microsoft Certified Professional Program 7 Facilities 9 Module 1: Introduction to Designing a Directory Services Infrastructure Overview 1 Role of Active Directory in an Enterprise 2 Conducting an Organizational Analysis 3 Architectural Elements of Active Directory 7 Review 15 Module 2: Designing an Active Directory Naming Strategy Overview 1 Identifying Business Needs 2 DNS and Active Directory 3 Planning Active Directory Domain Names 7 Designing a DNS Naming Strategy for Active Directory 11 Lab A: Designing an Active Directory Naming Strategy 22 Review 31 Module 3: Designing Active Directory to Delegate Administrative Authority Overview 1 Identifying Business Needs 2 Characterizing the IT Organization 4 Developing a Strategy for Administrative Design 5 Developing a Strategy for Delegation 15 Lab A: Designing Delegated Administration 24 Review 35 Module 4: Designing a Schema Policy Overview 1 Identifying Business Needs 2 Schema Fundamentals 3 Implications of Modifying the Schema 9 Planning for Schema Modification 11 Lab A: Modifying the Schema 20 Review 27 iv Designing a Microsoft® Windows® 2000 Directory Services Infrastructure Module 5: Designing Active Directory to Support Group Policy Overview 1 Identifying Business Needs 2 Applying Group Policy in Active Directory 4 Planning for Group Policy 10 Lab A: Designing Group Policy and a Supporting Active Directory Structure 21 Review 32 Module 6: Designing an Active Directory Domain Overview 1 Identifying Business Needs 2 Designing the Initial Active Directory Domain 3 Planning for Security Groups 4 Discussion: Designing Security Groups 9 Planning for OUs 11 Lab A: Designing a Group and Organizational Unit Strategy 15 Review 22 Module 7: Designing a Multiple-Domain Structure Overview 1 Identifying Business Needs 2 Accessing Resources Between Domains 5 Planning for Multiple-Domain Trees 9 Planning for Multiple-Tree Forests 13 Planning for Multiple Forests 16 Lab A: Designing a Multiple-Domain Structure 19 Review 23 Module 8: Designing an Active Directory Site Topology Overview 1 Using Sites in Active Directory 2 Assessing the Need for Active Directory Sites 5 Using Site Links in a Network 9 Planning the Inter-Site Replication Topology 14 Planning for Server Placement in Sites 19 Demonstration: Active Directory Sizer 23 Lab A: Planning Sites to Control Active Directory Replication 24 Review 35 Module 9: Designing an Active Directory Infrastructure Overview 1 Conducting an Organizational Analysis 2 Designing an Active Directory Structure 11 Creating a Functional Specification 20 Lab A: Designing an Active Directory Infrastructure 21 Review 31 Designing a Microsoft® Windows® 2000 Directory Services Infrastructure v About This Course This section provides you with a brief description of the course, audience, suggested prerequisites, and course objectives. Description This course provides students with the knowledge and skills necessary to design a Microsoft ® Windows ® 2000 directory services infrastructure in an enterprise environment. After completion of this course, a student will be able to identify the business and administrative needs of an organization that impact the design of the Active Directory ™ directory service. The student will be able to describe key decision points for naming, delegation of authority, domain design, and site topology design. The student will then be able to translate the business needs of an organization into an Active Directory design that meets those needs. Audience This course is intended for senior support professionals, architects, and consultants responsible for developing an Active Directory design based on the business needs of an organization. This course is also appropriate for those who are on the Microsoft Certified Systems Engineer Windows 2000 track and wish to acquire the skills necessary to design an Active Directory services infrastructure. Student Prerequisites This course requires that students meet the following prerequisites: • Course 1560, Updating Support Skills from Microsoft Windows NT 4.0 to Microsoft Windows 2000, or equivalent knowledge and skills. OR • Course 2154, Implementing and Administering Microsoft Windows 2000 Directory Services, or equivalent knowledge and skills. Course Objectives At the end of this course, the student will be able to: ! Describe guidelines for gathering business and administrative information from an organization and explain how an architect uses that information to design an Active Directory for an enterprise. ! Design an Active Directory naming strategy that accommodates the organizational structure of a business. ! Develop a plan to secure and delegate administrative authority over Active Directory objects based on the administrative model of an organization. ! Identify business needs and scenarios that may require modification of the Active Directory schema, and plan a policy to govern schema modification. ! Create an Active Directory design based on administrative Group Policy requirements defined by business needs. vi Designing a Microsoft® Windows® 2000 Directory Services Infrastructure ! Design an Active Directory domain and the organizational unit hierarchy within the domain. ! Identify situations where a multiple-domain Active Directory structure may be necessary to meet the administrative and security needs of an organization, and then design a structure that meets those needs. ! Design a site topology for managing Active Directory replication that fulfills the administrative needs of an organization and that optimizes the available bandwidth of the physical network. ! Design an Active Directory structure that combines administrative, replication, and naming requirements. Designing a Microsoft® Windows® 2000 Directory Services Infrastructure vii Course Timing The following schedule is an estimate of the course timing. Your timing may vary. Day 1 Start End Module 9:00 9:30 Introduction 9:30 10:00 Module 1: Introduction to Designing a Directory Services Infrastructure 10:00 10:15 Break 10:15 11:15 Module 2: Designing an Active Directory Naming Strategy 11:15 12:15 Lab A: Designing an Active Directory Naming Strategy 12:15 1:15 Lunch 1:15 2:30 Module 3: Designing Active Directory to Delegate Administrative Authority 2:30 3:00 Lab A: Designing Delegated Administration 3:00 3:15 Break 3:15 3:45 Lab A: Designing Delegated Administration (continued) Day 2 Start End Module 9:00 9:15 Day 1 review 9:15 10:15 Module 4: Designing a Schema Policy 10:15 10:30 Break 10:30 11:00 Lab A: Modifying the Schema 11:00 11:45 Module 5: Designing Active Directory to Support Group Policy 11:45 12:45 Lunch 12:45 2:30 Lab A: Designing Group Policy and a Supporting Active Directory Structure 2:30 2:45 Break 2:45 3:30 Module 6: Designing an Active Directory Domain 3:30 4:45 Lab A: Designing a Group and Organizational Unit Strategy viii Designing a Microsoft® Windows® 2000 Directory Services Infrastructure Day 3 Start End Module 9:00 9:15 Day 2 review 9:15 10:00 Module 7: Designing a Multiple-Domain Structure 10:00 10:30 Lab A: Designing a Multiple-Domain Structure 10:30 10:45 Break 10:45 11:45 Module 8: Designing an Active Directory Site Topology 11:45 12:30 Lab A: Planning Sites to Control Active Directory Replication 12:30 1:30 Lunch 1:30 2:00 Module 9: Designing an Active Directory Infrastructure 2:00 3:30 Lab A: Designing an Active Directory Infrastructure Designing a Microsoft® Windows® 2000 Directory Services Infrastructure ix Trainer Materials Compact Disc Contents The Trainer Materials compact disc contains the following files and folders: ! Default.htm. This file opens the Trainer Materials Web page. ! Readme.txt. This file contains a description of the compact disc contents and setup instructions in ASCII format (non-Microsoft Word document). ! 1561b_sg.doc. This file is the Classroom Setup Guide. It contains a description of classroom requirements, classroom configuration, and classroom setup instructions. ! Errorlog. This folder contains a template that is used to record any errors and corrections that you find in the course. ! Fonts. This folder contains fonts that are required to view the Microsoft PowerPoint ® presentation and Web-based materials. ! Mplayer. This folder contains files that are required to install Microsoft Windows Media Player. ! Powerpnt. This folder contains the PowerPoint slides that are used in this course. ! Pptview. This folder contains the PowerPoint Viewer, which is used to display the PowerPoint slides. ! Studntcd. This folder contains the Web page that provides students with links to resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and course- related Web sites. ! Tprep. This folder contains the Trainer Preparation Presentation, a narrated slide show that explains the instructional strategy for the course and presentation tips and caveats. To open the presentation, on the Trainer Materials Web page, click Trainer Preparation Presentation. x Designing a Microsoft® Windows® 2000 Directory Services Infrastructure Student Materials Compact Disc Contents The Student Materials compact disc contains the following files and folders: ! Default.htm. This file opens the Student Materials Web page. It provides students with resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and course-related Web sites. ! Readme.txt. This file contains a description of the compact disc contents and setup instructions in ASCII format (non-Microsoft Word document). ! AddRead. This folder contains additional reading pertaining to this course. If there are no additional reading files, this folder does not appear. ! Answers. This folder contains answers to the module review questions and hands-on labs. ! Appendix. This folder contains appendix files for this course. If there are no appendix files, this folder does not appear. ! Fonts. This folder contains fonts that are required to view the PowerPoint presentation and Web-based materials. ! Labfiles. This folder contains files that are used in the hands-on labs. These files may be used to prepare the student computers for the hands-on labs. ! Media. This folder contains files that are used in multimedia presentations for this course. If this course does not include any multimedia presentations, this folder does not appear. ! Mplayer. This folder contains files that are required to install Microsoft Windows Media Player. ! Pptview. This folder contains the PowerPoint Viewer, which is used to display the PowerPoint presentations that accompany the additional reading. If there are no PowerPoint presentations, this folder does not appear. ! Webfiles. This folder contains the files that are required to view the course Web page. To open the Web page, open Windows Explorer, and in the root directory of the compact disc, double-click Default.htm. ! Wordview. This folder contains the Word Viewer that is used to view any Word document (.doc) files that are included on the compact disc. If no Word documents are included, this folder does not appear. [...]... and portions of syntax that must be typed exactly as shown It also indicates commands on menus and buttons, icons, dialog box titles and options, and icon and menu names italic In syntax statements, indicates placeholders for variable information Italic is also used for introducing new terms, for book titles, and for emphasis in the text Title Capitals Indicate domain names, user names, computer names,... computer names, directory names, folders, and file names, except when specifically referring to case-sensitive names Unless otherwise indicated, you can use lowercase letters when you type a directory name or file name in a dialog box or at a command prompt ALL CAPITALS Indicate the names of keys, key sequences, and key combinations — for example, ALT+SPACEBAR monospace Represents code samples, examples of... entries that you type at a command prompt or in initialization files [] In syntax statements, enclose optional items For example, [filename] in command syntax indicates that you can choose to type a file name with the command Type only the information within the brackets, not the brackets themselves {} In syntax statements, enclose required items Type only the information within the braces, not the braces.. .Designing a Microsoft® Windows® 2000 Directory Services Infrastructure xi Document Conventions The following conventions are used in course materials to distinguish elements of the text Convention Use # Indicates an introductory page This symbol appears next to a slide title when additional information on the topic is covered on the page or pages that follow it bold Represents commands, command... Type only the information within the braces, not the braces themselves | In syntax statements, separates an either/or choice ! Indicates a procedure with sequential steps In syntax statements, specifies that the preceding item may be repeated Represents an omitted portion of a code sample THIS PAGE INTENTIONALLY LEFT BLANK . and Active Directory 3 Planning Active Directory Domain Names 7 Designing a DNS Naming Strategy for Active Directory 11 Lab A: Designing an Active Directory. Conducting an Organizational Analysis 2 Designing an Active Directory Structure 11 Creating a Functional Specification 20 Lab A: Designing an Active Directory