Tài liệu Advanced Administration for Microsoft® Windows® 2000 ppt

Part Number: X04-97023
Course Number: 1558A


Released: 7/99
Delivery Guide
Advanced Administration for
Microsoft® Windows® 2000


Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any
written license agreement from Microsoft, the furnishing of this document does not give you any
license to these patents, trademarks, copyrights, or other intellectual property.

??1999 Microsoft Corporation. All rights reserved.

Microsoft, Active Directory, PowerPoint, Windows, and Windows NT are either registered
trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries.

The names of companies, products, people, characters, and/or data mentioned herein are fictitious
and are in no way intended to represent any real individual, company, product, or event, unless
otherwise noted.

Other product and company names mentioned herein may be the trademarks of their respective
owners.

Project Lead and Instructional Designer: Mark Johnson
Instructional Designers : Aneetinder Chowdhry (NIIT Inc.), Kathryn Yusi
(Independent Contractor)
Lead Program Manager: Ryan Calafato
Program Manager: Joern Wettern (Wettern Network Solutions)
Graphic Artist: Julie Stone (Independent Contractor)
Editing Manager: Tina Tsiakalis
Substantive Editor: Kelly Baker (Write Stuff)
Copy Editor: Wendy Cleary (S&T OnSite)
Online Program Manager: Nikki McCormick
Online Support: Arlo Emerson (MacTemps)
Compact Disc Testing: Data Dimensions, Inc.
Production Support: Arlene Rubin (S&T OnSite)
Manufacturing Manager: Bo Galford
Manufacturing Support: Mimi Dukes (S&T OnSite)
Lead Product Manager, Development Services: Elaine Nuerenberg
Lead Product Manager: Sandy Alto
Group Product Manager: Robert Stewart

Course Number: 1558A
Part Number: X04-97023
Released: 7/99
Advanced Administration for Microsoft Windows 2000 iii


Contents
Introduction
Introduction ................................................................................................1
Course Materials..........................................................................................2
Prerequisites................................................................................................4
Course Outline ............................................................................................5
Course Outline ............................................................................................6
Course Outline ............................................................................................7
Microsoft Certified Professional Program .......................................................8
Facilities...................................................................................................10
Module 1: Introduction to Advanced Administration of a
Windows 2000 Network
Overview....................................................................................................1
Administering a Windows 2000 Network........................................................2
Centralized Management ..............................................................................3
Delegating Administrative Control.................................................................8
Controlling Access to Active Directory Objects and Windows 2000 Resources....9
Demonstration: Examining Access Tokens....................................................18
Review.....................................................................................................19
Module 2: Strategies for Administering a Windows 2000 Network
Overview....................................................................................................1
Windows 2000 Administrative Strategies........................................................2
Customizing MMC Consoles.........................................................................4

Installing Windows 2000 Snap-Ins.................................................................9
Setting Up Taskpads ..................................................................................10
Lab A: Customizing MMC Consoles............................................................14
Using Secondary Logon for Administration...................................................28
Using Terminal Services for Administration..................................................32
Lab B: Administering a Windows 2000 Network...........................................36
Best Practices............................................................................................47
Review.....................................................................................................48
Module 3: Administering Active Directory
Overview....................................................................................................1
Introduction to Administering Active Directory...............................................2
Managing Active Directory Objects...............................................................3
Publishing Resources in Active Directory.......................................................7
Locating Objects in Active Directory............................................................11
Lab A: Managing, Publishing, and Locating Objects in Active Directory..........18
Controlling Access to Objects......................................................................29
Delegating Administrative Control...............................................................34
Lab B: Delegating Administrative Control in Active Directory........................39
Best Practices............................................................................................47
Review.....................................................................................................48
iv Advanced Administration for Microsoft Windows 2000


Module 4: Implementing Group Policy
Overview....................................................................................................1
Introduction to Group Policy.........................................................................2
Group Policy Structure.................................................................................3
How Group Policy Settings Are Applied in Active Directory...........................10
Modifying Group Policy Inheritance............................................................17
Lab A: Implementing Group Policy..............................................................22

Delegating Administrative Control of a Group Policy Object...........................35
Lab B: Delegating Group Policy Administration ............................................36
Best Practices............................................................................................42
Review.....................................................................................................43
Module 5: Using Group Policy to Manage User Environments
Overview....................................................................................................1
Introduction to Managing User Environments..................................................2
Using Administrative Templates ....................................................................4
Lab A: Using Administrative Templates to Assign Registry-Based Policies.......14
Using Scripts.............................................................................................23
Lab B: Assigning Script Policies to Users and Computers...............................28
Best Practices............................................................................................34
Review.....................................................................................................35
Module 6: Using Group Policy to Manage Software
Overview....................................................................................................1
Introduction to Managing Software Deployment..............................................2
Windows Installer Technology ......................................................................3
Deploying Software.....................................................................................4
Configuring Software Deployment...............................................................11
Lab A: Using Group Policy to Deploy Software.............................................15
Maintaining Deployed Software...................................................................27
Removing Deployed Software.....................................................................30
Deploying non-Windows Installer Packages..................................................31
Lab B: Using Group Policy to Upgrade Software...........................................35
Lab C: Creating and Deploying a non-Windows Installer Package File .............42
Troubleshooting Software Deployment.........................................................46
Best Practices............................................................................................47
Review.....................................................................................................48
Module 7: Advanced Administration of User Accounts and Groups
Overview....................................................................................................1

Introduction to Administering User Accounts and Groups.................................2
Windows 2000 Logon Names........................................................................3
Using Group Policy to Configure Account Policies ..........................................5
Creating Multiple User Accounts.................................................................10
Using Group Policy to Redirect User Data to a Network Server.......................15
Lab A: Advanced Administration of User Accounts .......................................19
Using Universal Groups..............................................................................30
Setting Up Computers for Mobile Users........................................................34
Lab B: Setting Up Windows 2000 for Mobile Users.......................................38
Best Practices............................................................................................42
Review.....................................................................................................43
Advanced Administration for Microsoft Windows 2000 v


Module 8: Implementing Security in a Windows 2000 Network
Overview....................................................................................................1
Introduction to Securing a Windows 2000 Network..........................................2
Windows 2000 Security Policies....................................................................3
Implementing Security Policies .....................................................................5
Implementing an Audit Policy.....................................................................13
Recovering Encrypted Files.........................................................................21
Lab A: Implementing Security in a Windows 2000 Network...........................25
Best Practices............................................................................................46
Review.....................................................................................................47
Module 9: Using Dfs to Share File Resources
Overview....................................................................................................1
Introduction to Dfs.......................................................................................2
Setting Up a Fault-Tolerant Dfs Root.............................................................7
Configuring Child Nodes for a Fault-Tolerant Dfs Root..................................10
Guidelines for Configuring Dfs for a Multisite Environment............................15

Administering Dfs .....................................................................................16
Lab A: Implementing Dfs ...........................................................................19
Best Practices............................................................................................27
Review.....................................................................................................28
Module 10: Implementing Disaster Recovery
Overview....................................................................................................1
Recovering from Disasters in a Windows 2000 Network...................................2
Repairing a Network Server..........................................................................3
Restoring Active Directory..........................................................................10
Restoring Active Directory Objects..............................................................12
Rebuilding a Network Server ......................................................................15
Lab A: Implementing Disaster Recovery for Active Directory and
Windows 2000..........................................................................................16
Best Practices............................................................................................24
Review.....................................................................................................25