TestKing Microsoft MCTS Preparation
Thousands try and fail their exams every month using the mass media Microsoft
Thousands try and fail their exams every month using the mass media Microsoft
In this practice, you configure DNS server settings on Server2 so that you can install
Exercise 1: Fixing a DNS Configuration
In this exercise, you’ll incorrectly configure your DNS server settings for Server2. Then, you’ll attempt to install Active Directory on Server2. Finally, you’ll correct the DNS server settings so you can properly install Active Directory on Server2.
To fix a DNS configuration and install Active Directory
1.Log on to Server2 as Administrator.
2.Click Start, point to Control Panel, point to Network Connections, and then click Local Area Connection.
3.n the Local Area Connection Status dialog box, click Properties.
4.n the Local Area Connection Properties dialog box, select Internet Protocol (TCP/IP), and then click Properties.
5.Ensure DNS is not installed by clicking Start, pointing to Administrative Tools, and then checking for DNS in the tree.
6.n the Internet Protocol (TCP/IP) Properties dialog box, set Preferred
7.Clear all IP Addresses in the Alternative DNS server setting box, and then click OK.
8.Log off Administrator.
9.Log on using the local administrator’s user name and password. In the Log On To Windows dialog box, ensure that you have the Log On To box set to SERVER2
(this computer). You may need to click Options in order to see the Log On To box.Click OK.
10. Click Start, and then click Run. Type dcpromo in the Open dialog box. Click OK.
11.When the Active Directory Installation Wizard starts, click Next to begin installing Active Directory.
12.Read the Operating System Compatibility page, and then click Next.
13.On the Domain Controller Type page, select Additional Domain Controller For An Existing Domain, and then click Next.
14.On the Network Credentials page, type the user name and password of the domain administrator account. Type contoso.com as the domain, and then click
Next.
15.You should see an Active Directory Installation Wizard message box indicating an error. The message box tells you that the domain controller for Contoso.com cannot be located. This is because your Preferred DNS server is incorrectly config?ured. Click Details to read more about this error, and then click OK.
16.On the Network Credentials screen, click Cancel to cancel the Active Directory installation, and then click Yes to confirm the cancellation.
17.To correct your DNS configuration, click Start, point to Control Panel, point to Network Connections, and then click Local Area Connection.
18.In the Local Area Connection Properties dialog box, select Internet Protocol (TCP/IP) and click Properties.
19.In the Internet Protocol (TCP/IP) Properties dialog box, set the Preferred DNS Server setting to the IP Address of Serverl. Click OK.
20.Click OK to close the Local Area Connection Properties dialog box.Install Active Directory on
Read more on Fixing a DNS Configuration and Installing Active Directory…
The
Reasons to create more than one child domain under the forest root include the following
To meet required security policy settings that are linked to domains
To meet special administrative requirements, such as legal or privacy concerns
To optimize replication traffic
To retain Windows NT domains
To establish a distinct namespace
Make sure you know why using a dedicated root domain is important. Also, make sure you know the reasons for creating more than one child domain.
In the example, Contoso Pharmaceuticals requires stricter password requirements at the Chicago office, and there is a need to control replication traffic on the highly utilized Chicago-Kansas City network connection. In addition, the company plans to add a new office in Winnipeg, Canada within two years and anticipates having to address requirements of the government of Canada. Therefore, the Active Directory infrastructure designers have planned to implement a dedicated forest root domain and a domain for each of the company’s present locations; a total of five domains, as shown in
In addition to your assessment of the organization’s physical environment, you should also consider other infrastructures currently employed in the organization. For example, if your organization has already invested in a DNS structure, you should probably retain this structure. Similarly, if your organization is using a large Microsoft Exchange operation, you might want to base your domain structure on the same model. Before you change existing infrastructures, you must weigh the cost of the change against the potential benefits.
After analyzing your organization’s requirements, to create an OU plan you must define an OU structure. There are three reasons for defining an OU:
To delegate administration
To hide objects
To administer Group Policy
The primary reason for defining an OU is to delegate administration. Delegating administration is the assignment of IT management responsibility for a portion of the namespace, such as an OU, to an administrator, a user, or a group of administrators or users.
After you’ve determined the
To configure and use administrative templates, open a
Consider the following security options, event log settings, restricted groups, services settings, and object permission settings in your security template design:
Consider limiting the number of logon credentials that are cached locally. These credentials are used when a domain controller is not available. Setting cached logon credentials to 0 prevents logon if no domain controller is available. This setting might be appropriate for highly sensitive client
computers, but it is not acceptable for laptop computers, as they will frequently be used where domain controllers are not available for logon. Consider setting sensitive laptops to 1. However, remember that the last logon is the one that will be
Consider enabling the security option Do Not Allow Storage Of Credentials Or .NET Passports For Network Authentication. If you enable this option, users will not be able to store Passport credentials and credentials used to log on to remote servers and workstations on their client computers, and therefore they will have to type them in each time they want to use them. Not storing cre?
dentials makes the access to applications, Web sites, databases, and so on safer.
However, when users have multiple passwords to remember, they are more likely to write them down, use a weak password, or both. You will have to evaluate which approach poses the most risk
Read more on How to Configure and Use Administrative Templates…