(70-640) TS: Windows Server 2008 Active Directory 課程內容 :

Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS) & Secure Dynamic DNS (SDDNS)
Time to Live (TTL), GlobalNames, Primary, Secondary
Active Directory Integrated, Stub, SOA, zone scavenging
Forward lookup, reverse lookup

Forwarding, root hints, configure zone delegation
Round robin, disable recursion, debug logging, server scavenging

Configure replication scope (forestDNSzone, domainDNSzone)
Incremental zone transfers, DNS Notify, secure zone transfers
Configure name servers, application directory partitions

Remove a domain, perform an unattended installation
Active Directory Migration Tool (ADMT) v3 (pruning and grafting)
Interoperability with previous versions of Active Directory

Distributed File System, one-way replication
Bridgehead server, replication scheduling
Configure replication protocols, force intersite replication

Migration to AD LDS, configure data within AD LDS
Configure an authentication server, server core, Windows Server 2008 R2 Hyper-V

Certificate request and installation, self-enrollments, delegation
Active Directory Metadirectory Services (AD MDS)
Windows Server virtualization

Unidirectional replication, Administrator role separation
Read-only DNS, BitLocker
Credential caching, password replication, syskey

Install AD FS server role
Exchange certificate with AD FS agents
Configure trust policies
Configure user and group claim mapping

Bulk import, configure the UPN
Create computer, user, and group accounts (scripts, import, migration)
Create template accounts, contacts, distribution lists

Enforce, OU hierarchy, block inheritance
Enabling user objects, group policy processing priority, WMI
Group policy filtering, group policy loopback

Using Windows Server Backup
Back up files and system state data to media
Back up and restore by using removable media
Perform an authoritative or non-authoritative Active Directory restore

Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin
Windows System Resource Manager, Reliability and Performance Monitor
Server Performance Advisor, RSOP

Key archival, certificate database backup and restore
Assigning administration roles
Certificate template types, securing template permissions
Managing different certificate template versions, key recovery agent
 

---

Static routing, persistent routing
Routing Internet Protocol (RIP)
Open Shortest Path First (OSPF)

Conditional forwarding, external forwarders,
Root hints, cache-only, server core
WINS and DNS integration, Windows Server virtualization

DNS Refresh no-refresh, intervals
DNS listserv address (NSLOOKUP)
Primary/secondary zones
Dynamic Domain Name System (DDNS)
GlobalNames

Dial-up, Remote Access Policy
Network Address Translation (NAT)
Internet Connection Sharing (ICS)
VPN (Virtual Private Network)

Network layer protection, DHCP enforcement, VPN enforcement
Configure NAP health policies, IPsec enforcement
802.1x enforcement, flexible host isolation

LAN authentication by using NTLMv2 and Kerberos
WLAN authentication by using 802.1x
RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP

Set Service Identifier (SSID)
Wired Equivalent Privacy (WEP)
Wi-Fi Protected Access (WPA)
Wi-Fi Protected Access 2 (WPA2)
ad hoc versus infrastructure mode, group policy for wireless

Incoming and outgoing traffic filtering
Active Directory account integration, identify ports and protocols
Microsoft Windows Firewall versus Windows Firewall with Advanced Security
Configure firewall by using group policy, isolation policy

DFS namespace, DFS configuration and application
Creating and configuring targets, DFS replication

Printer share, publish printers to Active Directory
Printer permissions, deploy printer connections
Install printer drivers
Export and import print queues and printer settings
Add counters to Reliability and Performance Monitor to monitor print servers
Print pooling, print priority

Update type selection, client settings, Group Policy object (GPO)
Client targeting, software updates, test and approval, disconnected networks
 

---

(70-643) TS: Windows Server 2008 Applications Infrastructure Configuration 課程內容 :

Install from media (IFM)
Configure Windows Deployment Services
Capture Windows Deployment Services images
Deploy Windows Deployment Services images, server core

Virtual networking, virtualization hardware requirements
Virtual Hard Disks, migrate from physical to virtual
VM additions, backup, optimization, server core

RAID types, Virtual Disk Specification (VDS) API
Network Attached Storage, iSCSI and Fibre Channel storage area networks

Configuring Terminal Services Web Access
Configuring Terminal Services Remote Desktop Web Connection

Certificate configuration, Terminal Services Gateway Manager
Specifying resources that users can access through TS Gateway
Resource authorization policy (TS RAP)
Terminal Services connection authorization policy (TS CAP)
Terminal Services group policy

Connecting local devices and resources to a session
Terminal Services profiles, Terminal Services home folders
Remote Desktop Connection (RDC), single sign-on
Remote Desktop Snap-In, MSTSC.exe

Migrate sites and Web applications, publish IIS Web sites
Configure virtual directories

Configure for extranet users, configure permissions

Setting up smart hosts, configuring size limitations
Setting up security and authentication to the delivering server
Creating proper service accounts, authentication, SMTP relay

Web site content backup and restore
IIS configuration backup, monitor IIS
Configure logging, delegation of administrative rights

Configure certificates, requesting SSL certificate
Renewing SSL certificate, exporting and importing certificates

Encryption, sharing business rules, configuring license delivery
Configuring policy templates

Site permissions, backup, antivirus
Configuring Windows SharePoint Services service accounts
 

---

(70-646) Windows Server 2008 Server Administrator 課程內容 :

Windows Server 2008 R2 edition selection, rollback planning
Bitlocker implementation requirements

Standard server image, automation and scheduling of server deployments

Address assignment, name resolution
Network access control, directory services
Application services, certificate services

Virtualization server planning, availability, resilience, and accessibility

Access permissions, storage quotas
Replication, indexing, file storage policy, availability, printer publishing

Remote administration, remote desktop
Server management technologies
Server Manager and ServerManagerCMDa
Delegation policies and procedures

Delegate authority
Delegate Active Directory objects
Application management

GPO management, GPO backup and recovery
Group policy troubleshooting, group policy planning

Operating system patch level maintenance
Windows Server Update Services (WSUS)
Application patch level maintenance

Server and service monitoring, optimization
Event management, trending and baseline analysis

Remote access, monitor and maintain NPAS, network access
Server security, firewall rules and policies, authentication & authorization

Presentation virtualization, terminal server infrastructure

Shared resources, offline data access

Storage solutions, storage management

Service redundancy, service availability

Data recovery strategy, server recovery strategy
Directory service recovery strategy
 

---

(70-647) Windows Server 2008 Enterprise Administrator 課程內容 :

Internal and external naming strategy
Naming resolution support for legacy clients
Naming resolution for directory services
IP addressing scheme, TCP/IP version coexistence

Network access policies, remote access strategy
Perimeter networks, server and domain isolation

Application virtualization
Presentation virtualization
Locally installed software, Web-based applications

Terminal Services licensing, Terminal Services infrastructure
Design Active Directory forests and domains
Forest structure, forest and domain functional levels
Intra-organizational authorization and authentication, schema modifications

Placement of servers, site and replication topology, printer location policies

Delegation, group strategy, compliance auditing
Group administration, organizational structure

Group policy hierarchy and scope filtering
Control device installation, authentication and authorization

Cross-forest authentication, backward compatibility, object migration
Migration planning, implementation planning, environment preparation

Authentication strategy, server security

Certificate services, PKI operations and maintenance
Certificate life cycle management

Patch management and patch management compliance
Microsoft Update and Windows Update, security baselines, system health models

Server consolidation, application compatibility
Virtualization management, placement of servers