ITPROADD-04 90 Minute Version

8/7/2019 ITPROADD-04 90 Minute Version

1/61

New Features of Microsoft

WindowsServer 2003 ActiveDirectory- Feature Based


2/61

What Will We Cover?

Windows Server 2003 features

Active Directory improvements

Group Policy

Service Pack 1


3/61

Helpful Experience

Level 200

Familiarity with Windows NT 4.0 domains

Familiarity with Active Directory


4/61

Agenda

Deployment and Interoperability

Administration Features

Replication Features

Group Policy

SP1 Improvements


5/61

Domain & Forest Functional Levels

Choosing a functional level

Forest and domain levels

Raising functional levels


6/61

Domain Functional Levels

Domain FunctionalLevel

Domain ControllersSupported

Windows 2000 Mixed

(default)

Windows NT 4.0,

2000, 2003

Windows 2000 Native Windows 2000, 2003

Windows Server 2003 Windows Server 2003

Additional features are available ineach higher level.


7/61

Forest Functional Levels

Improved replication Forest-to-forest trusts Improved schema functionality



Windows 2000 (default)Windows NT 4.0, 2000,

2003



8/61

Forest Functional Levels - Notes

Improved replication Forest-to-forest trusts Improved schema functionality



Windows 2000 (default)Windows NT 4.0, 2000,

2003



9/61

Demo

Raising Functional Levels

demonstration


10/61

Contoso.com

Contoso

Domain Renaming and Restructuring

Fabrikam.com

Sales Engineering

Move an existing

domain to another tree

Create anew tree

Also see Microsoft Windows 2000 Namespace Design

msdn.microsoft.com/archive/default.asp?url=/archive/

en-us/dnaractdir/html/Namespace_Design.asp

Northwindtraders.com

Contoso


11/61

New Domain Controller from Replica

Back up system state from a DC Restore to prospective new DC Decreases initial replication load

> NTBackup SystemState


12/61

New Domain Controller (Notes)

Back up system state from a DC Restore to prospective new DC Decreases initial replication load

> NTBackup SystemState


13/61

Demo

Creating a Domain Controller

from Backup Media

demonstration


14/61

Session Recap

Domain and Forest Functional Levels

Renaming Domains

New Domain Controller from Replica


15/61

Active Directory Migration Tool v2

Domain migration

New Reporting Wizard

Reports as Web pages

Other new features

NT Domain

ADMT

Active Directory


16/61

Active Directory Migration (Notes)

Domain migration

New Reporting Wizard

Reports as Web pages

Other new features

NT Domain

ADMT

Active Directory


17/61

Agenda




Group Policy

SP1 Improvements


18/61

New Interface Features

Drag-and-drop administration

Saved Queries

Sales

Management

120 days since

last logon


19/61

New Interface Features (Notes)

Drag-and-drop administration

Saved Queries

Sales

Management

120 days since

last logon


20/61

Command-Line Tools

Tool Used For

DSAddAdds objects, such as users, group,

OU, and so on

DSGet Displays attributes of an AD object

DSMod Modifies an existing AD object

DSMove Moves or renames an AD object

DSQuery Queries and lists AD objects

DSRM Deletes AD objects


21/61

Command-Line Tools (Notes)

Tool Used For

DSAddAdds objects such as users, group,

OU, and so on

DSGet Displays attributes of an AD object

DSMod Modifies an existing AD object

DSMove Moves or renames an AD object

DSQuery Queries and lists AD objects

DSRM Deletes AD objects


22/61

Demo

Active Directory AdministrationUsing New Command Line ToolsDrag and Drop Management

Using Saved Queries

demonstration


23/61

Agenda




Group Policy

SP1 Improvements


24/61

Windows Server 2003 Active Directory

Global Catalog Replication

us.contoso.comeurope.contoso.com

Windows 2000 Active Directory


25/61

Windows Server 2003 Active Directory

Global Catalog Replication (Notes)

us.contoso.comeurope.contoso.com

Windows 2000 Active Directory


26/61

Replication Improvements

Group membership replication

Better Intra-Site Topology Generator

Site-to-site compression governable

Lingering Object Removal

WMI providers


27/61

Replication Improvements (Notes)

Group membership replication

Better Intra-Site Topology Generator

Site-to-site compression governable

Lingering Object Removal

WMI providers


28/61

Group Membership Caching

Logon is faster because

group memberships are

cached locally

GCGC

DC (No Global Catalog)DC (No Global Catalog)


29/61

Demo

Using Replication Features

Universal Group Membership Caching

demonstration


30/61

Agenda




Group Policy

SP1 Improvements


31/61

What Is Group Policy?

Manage user and computer environments

Enforce IT policies

Simplify administrative tasks

Implement security settings


32/61

What Is Group Policy? (Notes)

Manage user and computer environments

Enforce IT policies

Simplify administrative tasks

Implement security settings


33/61

Group Policy Management Console

MMC snap-in

Includes Group Policy Object Editor

Reporting and modeling

Supports cross-forest trusts


34/61

Group Policy Modeling and Results

Group Policy Modeling

Simulates GPOs on user or computer

Group Policy Results

Reports actual policy settings


35/61

Group Policy Modeling (Notes)

Group Policy Modeling

Simulates GPOs on user or computer

Group Policy Results

Reports actual policy settings


36/61

Backing Up and Restoring GPOs


37/61

Backing Up and Restoring (Notes)


38/61

Windows 2000 Windows XP

Windows XP

WMI Filtering

Domain

Controller

WMI Filter

XP Professional only


39/61

Demo

Using Group Policy Management

Using Group Policy Management

Using Group Policy Modeling

demonstration


40/61

Software RestrictionPolicies

Software Restriction Policies

Application

started

Hash Rule

Certificate Rule

Path Rule

Internet Zone Rule


41/61

Software RestrictionPolicies

Software Restriction Policies

Application

started

Hash Rule

Certificate Rule

Path Rule

Internet Zone Rule


42/61

Demo

Using Software Restriction

PoliciesCreating Software Restriction Policies

Creating a Path Rule

demonstration


43/61

Managing Desktops

Local Folder

Shared Network

Folder

Elevatedprivileges


44/61

Managing Desktops (Notes)

Local Folder

Shared Network

Folder

Elevatedprivileges


45/61

Demo

Using Group Policy Restrictions

and Reporting Implementing Desktop Group Policy

Using GPMC Reporting

demonstration


46/61

Agenda




Group Policy

SP1 Improvements


47/61

Data Execution Prevention

Prevents Malicious Code Execution

Hardware:

Execute Disable Bit

Software DEP

Windows XP and Server 2003


48/61

Data Execution Prevention (Notes)

Prevents Malicious Code Execution

Hardware:

Execute Disable Bit

Software DEP

Windows XP and Server 2003


49/61

Security Configuration Wizard

Security

Configuration

Wizard

download.microsoft.com/download/f/7/1/f71adf6e-dbab-48a2-9a29-

9e481110fd55/SCWQuickStartDoc.doc

Administrator


50/61

Demo

Using the Security Configuration

WizardRunning the Security Configuration

Wizard

demonstration


51/61

Network Access Quarantine


52/61

Session Summary

Many new and useful features inWindows Server 2003

Manage your environment with Group

Policy

Install SP1 for security and latest features


53/61

For More Information

www.microsoft.com/technet/add-04

Visit TechNet at

www.microsoft.com/technet

Visit the following URL for additional information


54/61

Microsoft Press Publications

For the latest titles, visit

www.microsoft.com/learning/books/itpro/


55/61

These books can be purchased at all major

bookstores and online retailers. .

Non-Microsoft Publications


56/61

Course ID Title

MS-2270 Updating Support Skills from

Windows NT 4.0 to the Windows

Server 2003 Family

For training information and availabilitywww.microsoft.com/learning

Training Resources


57/61

Readiness with Skills Assessment

Self-study learning tool free to anyone

Determines skills gaps

Provides learning plans

Post your score; see how you stack up

Visitwww.microsoft.com/assessment

f C f f


58/61

Become a Microsoft Certified Professional

What are MCP certifications?

Validation in performing critical IT functions

Why certify?

Worldwide recognition of skills gained through

experienceMore effective deployments with reduced costs for

your organizations

What certifications are there for IT Pros?

MCP, MCSE, MCSA, MCDST, MCDBA

www.microsoft.com/learning/mcp


59/61

www.microsoft.com/technet/subscriptions

Heard the News about TechNet?

Software without time limits

Complimentary technical support

The most current resources on hand


60/61

Find all these support options at www.microsoft.com/technet/supportMicrosoft offers a progressive series of support options starting with no-charge online support and developing

through subscription, incident, and contract support.

1. No-Charge Online

Support

Knowledge BaseSearch a vast database of articles to

pinpoint the information you need.

NewsgroupsAccess over 20,000 active newsgroupson scores of topics.

Product Support CentersGet answers to frequently asked

questions, plus how-to articles and step-by-step instructions organized

by product.

DLLHelp DatabaseSearch here to identify the software used

to install a specific DLL version.

Events and Errors MessageCenterResolve event and error messages fast

with explanations, recommendations, andlinks to support and resources.

Support WebcastsTune in to live technical presentations by

Microsoft experts and take part in real-time Q&A.

ChatsChat online with Microsoft specialists

or search the transcript archives.

User Group ProgramAccess information and support for IT

and other interest-specific user groups.

TechNet Security Resource

CenterGet ahead of security risks with

resources that keep you current,

including security newsletters and

the Microsoft notification service.

2. Subscription-Based

Support

TechNet SubscriptionSubscribe to TechNet for a personal

library of articles, service packs, how-tos,

resource kits, tools, utilities, and more. Your

subscription includes monthly updatesdelivered on CD or DVD, so you always

have the latest information,

straight from the source.

Upgrade to a TechNet Plus subscription and

add all this:

1. Full-version evaluation software,including Microsoft Office

System and W indows Server

System products, without

time restrictions.2. Free support two complimentary

incidents, plus a discount on other

support calls.

3. Unlimited, next-business-day

access to reliable answers from

the IT community and MicrosoftSupport Professionals through

Managed Newsgroups (English only).

3. Assisted Incident

Support

E-mail SupportGet online incident help via e-mail from a

Microsoft Support Professional.

Phone SupportGet incident help over the phone from aMicrosoft Support Professional.

Phone Support ContractSave with a discounted 5-Pack Phone

Support contract.

Advisory ServicesAdd remotely delivered consultation options

from Microsoft Advisory Services for

proactive support that goes far beyond

routine product maintenance.

4. Contract-Based

Support

Premier SupportGet the flexibility to m atch support

options to your organization and

enjoy direct access to Microsoft

technical experts at any time, dayor night. Premier Support delivers

customized options for businesses

with complex needs, including

dedicated technical professionals to overseeyour support, 24x7 problem resolution, and

training and workshops that keep your IT

staff up to date.

Essential SupportEssential Support offers prepackaged

options specifically designed to meet

the fundamental support requirementsof any business, large or small. Includesaccount management, problem

resolution, and information services.


61/61

Free chats and webcasts List of newsgroups

Microsoft community sites

Community events and columns

Where Else Can I Get Help?

www.microsoft.com/technet/community

ITPROADD-04 90 Minute Version

Documents

Transcript of ITPROADD-04 90 Minute Version