Planning and Implementing Server Roles and Server Security
 

Configure security for servers that are assigned specific roles.

Plan security for servers that are assigned specific roles. Roles might include domain controllers, Web servers, database servers, and mail servers.

• Deploy the security configuration for servers that are assigned specific roles.
• Create custom security templates based on server roles.

Planning, Implementing, and Maintaining a Network Infrastructure

Plan a host name resolution strategy.

• Plan a DNS namespace design.
• Plan zone replication requirements.
• Plan a forwarding configuration.
• Plan for DNS security.
• Examine the interoperability of DNS with third-party DNS solutions.

Planning, Implementing, and Maintaining Server Availability

Plan services for high availability.

• Plan a high availability solution that uses clustering services.
• Plan a high availability solution that uses Network Load Balancing.

Plan a backup and recovery strategy.

• Identify appropriate backup types. Methods include full, incremental, and differential.
• Plan a backup strategy that uses volume shadow copy.
• Plan system recovery that uses Automated System Recovery (ASR).

Planning and Maintaining Network Security

Plan secure network administration methods.

• Create a plan to offer Remote Assistance to client computers.
• Plan for remote administration by using Terminal Services.

Plan security for wireless networks.

Plan security for data transmission.

• Secure data transmission between client computers to meet security requirements.
• Secure data transmission by using IPSec.

Planning, Implementing, and Maintaining Security Infrastructure

Configure Active Directory directory service for certificate publication.

Plan a public key infrastructure (PKI) that uses Certificate Services.

• Identify the appropriate type of certificate authority to support certificate issuance requirements.
• Plan the enrollment and distribution of certificates.
• Plan for the use of smart cards for authentication.

Plan a framework for planning and implementing security.

• Plan for security monitoring.
• Plan a change and configuration management framework for security.

Plan a security update infrastructure. Tools might include Microsoft Baseline Security Analyzer and Microsoft Software Update Services.

Planning and Implementing an Active Directory Infrastructure

Plan a strategy for placing global catalog servers.

• Evaluate network traffic considerations when placing global catalog servers.
• Evaluate the need to enable universal group caching.

Implement an Active Directory directory service forest and domain structure.

• Create the forest root domain.
• Create a child domain.
• Create and configure Application Data Partitions.
• Install and configure an Active Directory domain controller.
• Set an Active Directory forest and domain functional level based on requirements.
• Establish trust relationships. Types of trust relationships might include external trusts, shortcut trusts, and cross-forest trusts.

Managing and Maintaining an Active Directory Infrastructure

Manage an Active Directory forest and domain structure.

• Manage trust relationships.
• Manage schema modifications.
• Add or remove a UPN suffix.

Restore Active Directory directory services.

• Perform an authoritative restore operation.
• Perform a nonauthoritative restore operation.

Planning and Implementing User, Computer, and Group Strategies

Plan a user authentication strategy.

• Plan a smart card authentication strategy.
• Create a password policy for domain users.

Planning and Implementing Group Policy

Plan Group Policy strategy.

• Plan a Group Policy strategy by using Resultant Set of Policy (RSoP) Planning mode.
• Plan a strategy for configuring the user environment by using Group Policy.
• Plan a strategy for configuring the computer environment by using Group Policy.

Configure the user environment by using Group Policy.

• Distribute software by using Group Policy.
• Automatically enroll user certificates by using Group Policy.
• Redirect folders by using Group Policy.
• Configure user security settings by using Group Policy.

Managing and Maintaining Group Policy

Troubleshoot issues related to Group Policy application deployment. Tools might include RSoP and the gpresult command.

Troubleshoot the application of Group Policy security settings. Tools might include RSoP and the gpresult command.