MCSA学习指南:Managing a Windows 2000 Network Environment(Exam 70-218):英文版

PartⅠ Configuring, Administering, and Troubleshooting the Network Infrastructure 1

1 Configuring and Troubleshooting TCP/IP 3
* Configure TCP/IP on Servers and Clients 4
·Hardware Addresses 4
·IP Address 5
·Exercise 1-1：Configuring TCP/IP on Servers 12
·Converting Between Binary and Decimal 15
* Determine Valid IP Addresses 17
·Subnetting 17
·Finding Valid IP Addresses 18
·Broadcasting 22
* Configure Routing 23
·Building a Windows 2000 Router 27
·How Routing Works 30
·Viewing the Routing Table 30
·Exercise 1-2：Viewing a Computer's Routing Table 34
·Configuring Routing Tables 34
·How Routing Conflicts Are Handled 37
·Managing the Routing Table 38
* Troubleshoot TCP/IP and Routing 39
·Troubleshooting with IPCONFIG 39
·Exercise 1-3：Checking an IP Configuration 42
·Troubleshooting with PING 42
·Troubleshooting with ARP 45
·Troubleshooting with Tracert 45
·Exercise 1-4：Tracing a Route 46
·Troubleshooting with PATHPING 48
√Two-Minute Drill 51
* Q&A Self Test 55
·Lab Question 58
·Self Test Answers 59
·Lab Answer 61

2 Implementing and Troubleshooting Name Resolution 63
* Understand Name Resolution 64
·Name Resolution Resources 65
·Exercise 2-1：Check Out Your Computer Name 68
* Configure NetBIOS Name Resolution 70
·NetBIOS Names 71
·NetBIOS Service Identifiers 72
·NetBIOS Name Resolution Sequences 74
·Creating an LMHOSTS File 74
·Exercise 2-2：Peek at Some NetBIOS Names 76
* Configure and Implement WINS 78
·Installing a WINS Server 79
·Configuring WINS Clients 80
·Managing a WINS Database 82
·Exercise 2-3：Viewing Records in a WINS Database 83
·Supporting Non-WINS Clients 90
·Setting Up Multiple WINS Servers 93
* Troubleshoot NetBIOS Name Resolution 100
·Troubleshooting WINS Servers 102
·Exercise 2-4：Viewing WINS Server Statistics 102
·Troubleshooting WINS Clients 102
√Two-Minute Drill 105
* Q&A Self Test 108
·Lab Question 112
·Self Test Answers 113
·Lab Answer 115

3 Configuring, Managing, and Troubleshooting DNS 117
* Create and Configure DNS Zones 118
·How DNS Works 120
·DNS Zones of Authority 122
·Types of Zones 122
·Exercise 3-1：Installing AD-Integrated DNS 125
·Creating a Forward Lookup Zone 129
·Creating a Reveres Lookup Zone 130
* Manage DNS Database Records 132
·Start of Authority (SOA) Record 133
·Name Server (NS) Records 133
·Exercise 3-2：Viewing Resource Records 134
·Host (A) Records 135
·Pointer (PTR) Records 136
·Other Resource Records 136
* Configure DNS Server Properties 138
·Configuring DDNS 140
·Exercise 3-3：Configuring Dynamic DNS 141
·Supporting Downlevel Clients 143
·Subdomains and Delegation of Authority 145
·Multihomed DNS Name Servers 146
·Alternative DNS Server Roles 147
* Configure Client Computer Name Resolution Properties 153
·Exercise 3-4：Configuring a DNS Client 154
·Troubleshoot DNS Name Resolution 159
·Using the NSLOOKUP Command 160
·Exercise 3-5：Testing Forward and Reverse Lookups with NSLOOKUP 161
·Troubleshooting DNS with IPCONFIG 161
·Testing the Name Server 163
·Troubleshooting Zone Transfers 164
√Two-Minute Drill 166
* Q&A Self Test 169
·Lab Question 174
·Self Test Answers 175
·Lab Answer 178

4 Configuring and Troubleshooting DHCP 179
* Install and Authorize DHCP Servers 180
·DHCP Leases 181
·Installing DHCP 182
·Authorizing a DHCP Server 183
·Exercise 4-1：Installing and Authorizing the DHCP Service 184
* Configure DHCP Servers and Scopes 186
·Exclusions 187
·Exercise 4-2：Defining a Scope 187
·DHCP Client Reservations 191
·Server Options vs. Scope Options 193
·DHCP Load Balancing and Redundancy 194
·DHCP-DDNS Integration 199
·Exercise 4-3：Configuring DHCP-DDNS Integration 201
* Configure DHCP Clients 202
·Exercise 4-4：Configuring a Client to Use DHCP 203
·Commands for Managing Clients 205
·A Note on APIPA 207
* Troubleshoot DHCP 207
·Detecting Rogue Servers 210
·Exercise 4-5：Checking for Rogue DHCP Servers 211
√Two-Minute Drill 214
* Q&A Self Test 216
·Lab Question 221
·Self Test Answers 223
·Lab Answer 225

PartⅡ Active Directory and Group Policy 227

5 Configuring and Implementing Active Directory 229
* Understand Active Directory Concepts 231
·AD Physical Layout 231
·AD Logical Structure 232
·Organizational Units 237
·The Global Catalog 240
·Exercise 5-1：Enabling Global Catalog 241
* Manage Active Directory Groups 243
·Security Group Scopes 244
·Exercise 5-2：Switching to Native Mode 245
·Predefined Groups 247
·Builtin Groups 248
·Nesting Groups 249
·Creating a Security Group 251
* Administer AD Computers and Users 253
·Exercise 5-3：Adding a Computer Account 254
·Active Directory User Accounts 257
·Exercise 5-4：Create Two User Accounts 258
·Joining a Computer to the Domain 260
* Create and Manage Organizational Units 261
·Creating Organizational Units 262
·Exercise 5-5：Creating Some Organizational Units 262
·Creating Objects in an OU 264
·Exercise 5-6：Create a User Account in the Accounting OU 264
·Moving Objects to an OU 264
·Creating Contacts 266
·Finding Existing Objects 266
* Delegate Control 268
·Exercise 5-7：Delegating Control to a User 270
·Managing AD Permissions 271
√Two-Minute Drill 279
* Q&A Self Test 283
·Lab Question 287
·Self Test Answers 288
·Lab Answer 290

6 Creating and Implementing Group Policies 291
* Implement Group Policies 292
·Group Policy Concepts 293
·Viewing/Modifying an Existing GPO 296
·Managing Multiple Policy Links 301
·Exercise 6-1：Changing to Whom a Policy Applies (Filtering) 302
* Create Group Policy Objects 304
·Software Settings 305
·Windows Settings 305
·Exercise 6-2：Allowing OU Admins to Log on Locally 312
·Administrative Templates 320
·Creating Stand-alone GPOs 322
·Exercise 6-3：Create a Stand-alone GPO 327
* Link Group Policies to AD Objects 329
·Exercise 6-4：Linking the Start Menu Icons GPO to an OU 331
* Filter Group Policies 333
·Exercise 6-5：Filter the Start Menu Icons GPO 336
* Delegate Control of Group Policies 337
·Delegating Authority to Manage GPO Links 338
·Delegating Authority to Create GPOs 338
·Exercise 6-6：Delegate Control of the Start Menu Icons GPO 340
·Delegating Authority to Edit GPOs 342
√Two-Minute Drill 344
* Q&A Self Test 346
·Lab Question 349
·Self Test Answers 350
·Lab Answer 352

7 Sharing and Publishing Folders and Printers 353
* Sharing Folders and Files 355
·Exercise 7-1：Create and Share a Folder 356
·Shared Folder Permissions 357
·Combining Permissions 361
·File and Folder Inheritance 363
·Taking Ownership 364
·Hidden Shares 365
·Offline Files 367
* Sharing and Configuring Printers 371
·Exercise 7-2：Sharing a Printer 372
·Setting Shared Printer Permissions 373
·Configuring Printers 373
·Finding Shared Printer in AD User and Computers 376
* Publishing Shared Resources in Active Directory 377
·Publishing Shared Folders 377
·Exercise 7-3：Publishing a Shared Folder 378
·Publishing Shared Printers 379
·Searching for AD Objects 379
√Two-Minute Drill 381
* Q&A Self Test 383
·Lab Question 387
·Self Test Answers 388
·Lab Answer 390

8 Managing Software with Group Policy 391
* Deploying Applications with Group Policy 392
·Setting Up a Software Distribution Point 393
·Exercise 8-1：Creating a Distribution Point 393
·Creating the GPO 395
·Adding a Package to a Group Policy 398
·Testing the Deployment 402
* Managing Software with Group Policy 402
·Upgrading Software 403
·Exercise 8-2：Creating and Filtering a GPO 405
·Redeploying Software 407
·Removing Software 407
* Deploying Service Packs with Group Policy 409
·Installing Service Packs on New Computers 409
·Exercise 8-3：Testing Software Deployment 410
·A Note on Deploying Hotfixes 411
√Two-Minute Drill 414
* Q&A Self Test 416
·Lab Question 420
·Self Test Answers 421
·Lab Answer 423

9 Managing and Troubleshooting Active Directory 425
* Managing Active Directory Objects 426
·Exercise 9-1：Moving a Computer Object 428
·Moving Objects Across Domains 428
* Configuring Active Directory Replication 431
* Implementing Intersite Active Directory Replication 433
·Create Site Links 434
·Bridging Site Links 436
·Defining Bridgehead Servers 437
* Troubleshooting Active Directory Replication 438
·Replication Between Sites Fails 439
·Replication Has Slowed Down 439
·Minimizing Replication Overhead 440
·Checking Replication Topology 440
·Exercise 9-2：Checking Replication Topology 441
√Two-Minute Drill 443
* Q&A Self Test 445
·Lab Question 448
·Self Test Answers 450
·Lab Answer 451

Part Ⅲ Creating, Configuring, Managing, Securing, and Troubleshooting File, Print, and Web Resources 453

10 Managing Data Storage 455
* Configuring Disks and Volumes 456
·Exercise 10-1：Converting a Basic Disk to a Dynamic Disk 457
·NTFS and FAT File Systems 458
·Mount Points 458
* Configuring and Enforcing Disk Quotas 459
·Exercise 10-2：Enabling Disk Quotas 460
·Enforcing Quotas Limits Through Group Policy 461
* Using the Encrypting File System (EFS) 463
·Exercise 10-3：Encrypting a Folder 463
* Implementing and Managing a Distributed File System (Dfs) 465
·Exercise 10-4：Creating a Domain Dfs Root 467
√Two-Minute Drill 471
* Q&A Self Test 473
·Lab Question 477
·Self Test Answers 478
·Lab Answer 480

11 Configuring Internet Information Services (IIS) 481
* Creating Web Sites 482
·Defining Virtual Directories (Web Sharing) 483
·Exercise 11-1：Creating a Virtual Directory 484
·Accessing Local Sites 486
·Managing Printers Remotely 487
·Creating Virtual Web Servers 487
·Tuning Web Site Performance 489
* Creating FTP Sites 490
·Exercise 11-2：Creating an FTP Site 490
* Securing Web and FTP Sites 493
·Authentication Methods 493
·Controlling Site Access Through Permissions 496
·Exercise 11-3：Enabling ISAPI Applications 497
·Using Certificate Services and SSL 498
* Maintaining and Troubleshooting IIS 499
·Back Up and Restore IIS 499
·Exercise 11-4：Backing Up Your IIS Configuration Settings 500
·Troubleshooting TCP/IP Filtering Problems 500
·Troubleshooting Problems with Proxy Servers 501
√Two-Minute Drill 503
* Q&A Self Test 505
·Lab Question 510
·Self Test Answers 511
·Lab Answer 513

12 Implementing and Analyzing Security 515
* Configuring and Auditing Security 516
·Auditing Security 518
·Exercise 12-1：Set Up Auditing on Domain Controllers 520
·Configuring Event Viewer 523
·Reviewing the Security Log 525
* Administering Security Templates 525
·Using the Security Templates Snap-in 527
·Exercise 12-2：Opening the Security Templates Snap-in 528
·Creating a New Template 528
* Analyzing Security Settings 530
·Analyzing the Current Configuration 530
·Exercise 12-3：Create a Security Database 533
·Command-line Analysis and Configuration 534
√Two-Minute Drill 537
* Q&A Self Test 539
·Lab Question 543
·Self Test Answers 544
·Lab Answer 546

Part Ⅳ Configuring, Securing, and Troubleshooting Remote Access 547

13 Configuring Remote Access and VPN Connections 549
* Configuring Client Computer Remote Access Properties 550
·Remote Access Protocols 550
·Dial-up Connections 552
·Exercise 13-1：Configuring Dial-up Connections on a Remote Access Client 553
·Exercise 13-2：Configuring a Direct Connection to Another Computer 557
·Virtual Private Network Connections 558
·Exercise 13-3：Creating a VPN Connection 559
·Exercise 13-4：Configuring the VPN Client Settings 563
* Configuring Remote Access Name Resolution and IP Address Allocation 571
·Configuring IP Address Allocation in Windows 2000 571
·Exercise 13-5：configuring RRAS as a VPN Server 571
·Configuring Remote Access Name Resolution 576
·Exercise 13-6：Configuring the DHCP Relay Agent 577
* Configuring and Troubleshooting Client-to-Server PPTP and L2TP Connections 579
·Verifying VPN Connectivity Options 579
·No-Answer Errors 581
·Not Enough Available Ports 583
·Authentication Protocol Problems 583
·L2TP Connectivity Errors 586
* Managing Existing Server-to-Server PPTP and L2TP Connections 588
·Configuring PPTP and L2TP Filtering 588
·Exercise 13-7：Configuring PPTP and L2TP Packet Filters 589
* Configuring and Verifying the Security of a VPN Connection 594
·Available Authentication Methods 594
·Exercise 13-8：Configuring Authentication Protocols on RRAS 596
√Two-Minute Drill 600
* Q&A Self Test 604
·Lab Question 608
·Self Test Answers 610
·Lab Answer 612

14 Troubleshooting Remote Access 615
* Create and Configure Remote Access Policies and Profiles 616
·Examining the RRAS Authentication Process 616
·Creating a Remote Access Policy 626
·Exercise 14-1：Creating a RAS Policy 627
·Exercise 14-2：Configure RAS Policies 630
* Select Appropriate Encryption and Authentication Protocols 637
·Exercise 14-3：Configuring Reversible Encryption 640
* Diagnose RAS Policy Problems Caused by Nested Groups 642
·Troubleshooting RAS Problems Related to Nested Groups 642
·RAS Policy Storage 643
·Identifying Troubleshooting Clues in the Event Viewer 643
·Exercise 14-4：Identifying RRAS Errors in the System Event Log 643
* Diagnose Problems with Remote Access Policy Priority 644
·Exercise 14-5：Configuring the Order of RAS Policies 645
√Two-Minute Drill 647
* Q&A Self Test 650
·Lab Question 654
·Self Test Answers 656

15 Implementing Terminal Services for Remote Access 661
* Configure Terminal Services for Remote Administration or Application Server Mode 663
·Installing Terminal Services 663
·Exercise 15-1：Installing Terminal Services 664
·Exercise 15-2：Installing TSAC 666
·Exercise 15-3：Switching Between Terminal Service Modes Using Add/Remote Programs 670
·Client Installation Options and Requirements 671
·Exercise 15-4：Creating the Client Installation Disks 673
·Exercise 15-5：Installing the Terminal Services Client over the Network 674
·Licensing 675
·Establishing a Connection to the Terminal Server 677
·Exercise 15-6：Creating a Terminal Server Session 677
* Configure Terminal Services for Local Resource Mapping 678
·Clipboard Mapping 679
·Exercise 15-7：Copying Text from an Application in a Terminal Services Session to an Application on the Terminal Services Client Computer 679
·Printer Redirection 680
·Exercise 15-8：Configuring Terminal Services Settings on a Per-Connection Basis 682
* Configure Terminal Services User Properties 690
√Two-Minute Drill 696
* Q&A Self Test 698
·Lab Question 702
·Self Test Answers 703

16 Configuring Network Address Translation and Internet Connection Sharing 707
* Configuring Internet Connection Sharing 708
·ICS and IP Address Configuration 711
·Installing ICS 711
·Exercise 16-1：Configuring ICS 711
·Service Publishing 713
·Application Publishing 716
* Troubleshooting Internet Connection Sharing Problems by Using the Ipconfig and Ping Commands 718
·Troubleshooting with Ipconfig 719
·Exercise 16-2：Determining a Computer's IP Configuration Using Ipconfig 721
·Troubleshooting Using PING 721
* Configuring Routing and Remote Access to Perform NAT 724
·Exercise 16-3：Installing NAT 726
·Configuring NAT Properties 729
·Exercise 16-4：Configuring NAT Interfaces 732
√Two-Minute Drill 737
* Q&A Self Test 740
·Lab Question 745
·Self Test Answers 746
·Lab Answer 749

PartⅤ Managing, Securing, and Troubleshooting Servers and Client Computers 751

17 Installing and Configuring Server and Client Computers 751
* Verifying Hardware Compatibility by Using the Qualifier Tools 755
·The Windows 2000 Readiness Analyzer 755
·Device Manager 756
·Exercise 17-1：Opening a Device's Properties Dialog Box in Device Manager 757
·Exercise 17-2：Creating a System Information File 761
* Configuring Driver Signing Options 761
·Exercise 17-3：Configuring Driver Signing Options 764
·Exercise 17-4：Configuring Driver Signing Options Through Local Security Policy 765
* Verifying Digital Signatures on Existing Driver Files 767
·Exercise 17-5：Using Sigverif.exe 768
·Exercise 17-6：Using SFC to Scan and Repair Protected System Files 770
* Configuring Operating System Support for Legacy Hardware Devices 771
·Exercise 17-7：Installing a Legacy Device Through the System Properties Dialog Box 772
√Two-Minute Drill 779
* Q&A Self Test 781
·Lab Question 787
·Self Test Answers 788
·Lab Answer 791

18 Troubleshooting Startup Problems 793
·The Hardware Startup Phase 794
·The software Startup Phase 795
* Interpreting the Startup Log File 798
·Exercise 18-1：Booting a Computer Running Windows Using the Startup Log File Option 799
* Repairing an Operating System by Using Various Startup Options 801
·Safe Mode 801
·Exercise 18-2：Starting your Computer in Safe Mode 803
·The Last Known Good Configuration 803
·Directory Services Restore Mode 804
* Repairing an Operating System by Using the Recovery Console 807
·Exercise 18-3：Installing the Recovery Console 807
·Exercise 18-4：Accessing the Recovery Console from the Windows 2000 CD 809
·Recovery Console Commands 810
·Removing the Recovery Console 813
·Exercise 18-5：Removing the Recovery Console 813
* Recovering Data from a Hard Disk in the Event that the Operating System Will Not Start 815
·The Windows 2000 Boot Disk 816
·Exercise 18-6：Creating a Windows 2000 Boot Disk 817
·The Emergency Repair Disk 818
·Exercise 18-7：Creating an ERD 819
* Restoring an Operating System and Data from Backup 821
·Exercise 18-8：Backing Up Your Computer 822
·Backup Types 823
·Exercise 18-9：Performing a Restore 825
√Two-Minute Drill 827
* Q&A Self Test 830
·Lab Question 834
·Self Test Answers 836
·Lab Answer 838

19 Monitoring and Troubleshooting Server Health and Performance 841
* Monitoring and Interpreting Real-Time Performance by Using System Monitor and Task Manager 842
·Windows Task Manager 842
·System Monitor 846
·Exercise 19-1：Using System Monitor to View Real-Time System Information 847
·Enabling Network Segment Monitors 850
* Configuring System Monitor Alerts and Logging 851
·Counter Logs 851
·Exercise 19-2：Creating a Counter Log 852
·Exercise 19-3：Opening a Log with System Monitor 855
·Trace Logs 857
·Exercise 19-4：Creating a Trace Log 858
·Configuring Alerts 860
·Exercise 19-5：Configuring Alerts 861
* Diagnosing Server Health Problems with Event Viewer 868
·Exercise 19-6：Examining Event Viewer Events 869
* Identifying and Disabling Unnecessary Services 872
·Exercise 19-7：Disabling Services 876
√Two-Minute Drill 877
* Q&A Self Test 879
·Lab Question 883
·Self Test Answers 884
·Lab Answer 886

Appendix 889
·System Requirements 890
* Learnkey Online Training 890
* Installing and Running MasterExam and MasterSim 890
·MasterExam 891
·MasterSim 891
* Electronic Book 891
* CertCam 891
* Help 892
* Removing Installation(s) 892
* Technical Support 892
* LearnKey Technical Support 892

Index 893