ITPROADD-04 60 Minute Version

8/3/2019 ITPROADD-04 60 Minute Version

1/48

New Features of Microsoft

Windows

Server

2003 ActiveDirectory - Feature Based


2/48

What Will We Cover?

Windows Server 2003 features

Active Directory improvements

Group Policy

Service Pack 1


3/48

Helpful Experience

Level 200

Familiarity with Windows NT 4.0 domains

Familiarity with Active Directory


4/48

Agenda

Deployment and Interoperability

Administration Features

Replication Features

Group Policy

SP1 Improvements


5/48

Domain & Forest Functional Levels

Choosing a functional level Forest and domain levels

Raising functional levels


6/48

Domain Functional Levels

Domain FunctionalLevel Domain ControllersSupported

Windows 2000 Mixed(default)

Windows NT 4.0,2000, 2003

Windows 2000 Native Windows 2000, 2003

Windows Server 2003 Windows Server 2003

Additional features are available ineach higher level.

Additional features are available ineach higher level.


7/48

Forest Functional Levels

Improved replication Forest-to-forest trusts Improved schema functionality



Windows 2000 (default) Windows NT 4.0, 2000,2003



8/48

Forest Functional Levels - Notes




Windows 2000 (default) Windows NT 4.0, 2000,2003



9/48

Contoso.com

Contoso

Domain Renaming and Restructuring

Fabrikam.com

Sales Engineering

Move an existing

domain to another tree

Create a

new tree

Also see Microsoft Windows 2000 Namespace Design

msdn.microsoft.com/archive/default.asp?url=/archive/

en-us/dnaractdir/html/Namespace_Design.asp

Northwindtraders.com

Contoso


10/48

New Domain Controller from Replica

Back up system state from a DC Restore to prospective new DC Decreases initial replication load


> NTBackup SystemState


11/48

New Domain Controller (Notes)



> NTBackup SystemState


12/48

Demo

Creating a Domain Controller

from Backup Media

demonstration


13/48

Session Recap

Domain and Forest Functional Levels

Renaming Domains

New Domain Controller from Replica


14/48

Active Directory Migration Tool v2

Domain migration

New Reporting Wizard

Reports as Web pages

Other new features

NT Domain

ADMT

Active Directory


15/48

Active Directory Migration (Notes)

Domain migration

New Reporting Wizard

Reports as Web pages

Other new features

NT Domain

ADMT

Active Directory


16/48

Agenda




Group Policy

SP1 Improvements


17/48

New Interface Features

Drag-and-drop administration

Saved Queries

Sales

Management

120 days since

last logon


18/48

New Interface Features (Notes)

Drag-and-drop administration

Saved Queries

Sales

Management

120 days since

last logon


19/48

Demo

Active Directory Administration

Using New Command Line ToolsDrag and Drop ManagementUsing Saved Queries

demonstration


20/48

Agenda




Group Policy

SP1 Improvements


21/48

Windows Server 2003 Active Directory

Global Catalog Replication

us.contoso.comeurope.contoso.com

Windows 2000 Active Directory


22/48

Windows Server 2003 Active Directory

Global Catalog Replication (Notes)

us.contoso.comeurope.contoso.com

Windows 2000 Active Directory


23/48

Group Membership Caching

Logon is faster because

group memberships are

cached locally

GCGC

DC (No Global Catalog)DC (No Global Catalog)

Que

ry


24/48

Demo

Using Replication Features

Universal Group Membership Caching

demonstration


25/48

Agenda




Group Policy

SP1 Improvements


26/48

Group Policy Management Console

MMC snap-in

Includes Group Policy Object Editor

Reporting and modeling

Supports cross-forest trusts


27/48

Group Policy Modeling and Results

Group Policy Modeling

Simulates GPOs on user or computer

Group Policy Results

Reports actual policy settings


28/48

Group Policy Modeling (Notes)

Group Policy Modeling

Simulates GPOs on user or computer

Group Policy Results

Reports actual policy settings


29/48

Backing Up and Restoring GPOs


30/48

Backing Up and Restoring (Notes)


31/48

Demo

Using Group Policy Management

Using Group Policy ManagementUsing Group Policy Modeling

demonstration


32/48

Software RestrictionPolicies

Software Restriction Policies

Application

started

Hash Rule

Certificate Rule

Path Rule

Internet Zone Rule


33/48

Software RestrictionPolicies

Software Restriction Policies

Application

started

Hash Rule

Certificate Rule

Path Rule

Internet Zone Rule


34/48

Demo

Using Software Restriction

Policies

Creating Software Restriction Policies

Creating a Path Rule

demonstration


35/48

Managing Desktops

Local Folder

Shared Network

Folder

Elevatedprivileges


36/48

Managing Desktops (Notes)

Local Folder

Shared Network

FolderElevated

privileges


37/48

Demo

Using Group Policy Restrictions

and Reporting Implementing Desktop Group Policy Using GPMC Reporting

demonstration

A d


38/48

Agenda




Group Policy

SP1 Improvements


39/48

Data Execution Prevention

Prevents Malicious Code Execution

Hardware:

Execute Disable Bit

Software DEP

Windows XP and Server 2003


40/48

Data Execution Prevention (Notes)

Prevents Malicious Code Execution

Hardware:

Execute Disable Bit

Software DEP

Windows XP and Server 2003


41/48

Security Configuration Wizard

Security

Configuration

Wizard

download.microsoft.com/download/f/7/1/f71adf6e-dbab-48a2-9a29-

9e481110fd55/SCWQuickStartDoc.doc

Administrator


42/48

Demo

Using the Security Configuration

WizardRunning the Security Configuration

Wizard

demonstration


43/48

Network Access Quarantine


44/48

Session Summary

Many new and useful features in WindowsServer 2003

Manage your environment with Group

Policy

Install SP1 for security and latest features


45/48

For More Information

www.microsoft.com/technet/add-04

Visit TechNet atwww.microsoft.com/technet

Visit the following URL for additional information


46/48

www.microsoft.com/technet/subscriptions

Heard the News about TechNet?

Software without time limits

Complimentary technical support

The most current resources on hand

Find all these support options at www microsoft com/technet/support


47/48

Find all these support options at www.microsoft.com/technet/supportMicrosoft offers a progressive series of support options starting with no-charge online support and developing

through subscription, incident, and contract support.

1. No-Charge Online

Support

Knowledge BaseSearch a vast database of articles to

pinpoint the information you need.

NewsgroupsAccess over 20,000 active newsgroupson scores of topics.

Product Support CentersGet answers to frequently askedquestions, plus how-to articles and step-

by-step instructions organizedby product.

DLL Help DatabaseSearch here to identify the software used

to install a specific DLL version.

Events and Errors Message

CenterResolve event and error messages fast

with explanations, recommendations, andlinks to support and resources.

Support WebcastsTune in to live technical presentations byMicrosoft experts and take part in real-

time Q&A.

ChatsChat online with Microsoft specialistsor search the transcript archives.

User Group ProgramAccess information and support for IT

and other interest-specific user groups.

TechNet Security Resource

CenterGet ahead of security risks with

resources that keep you current,including security newsletters andthe Microsoft notification service.

2. Subscription-Based

Support

TechNet SubscriptionSubscribe to TechNet for a personal

library of articles, service packs, how-tos,resource kits, tools, utilities, and more. Yoursubscription includes monthly updates

delivered on CD or DVD, so you always havethe latest information,

straight from the source.

Upgrade to a TechNet Plus subscription and

add all this:

1. Full-version evaluation software,

including Microsoft Office

System and Windows ServerSystem products, without

time restrictions.

2. Free support two complimentaryincidents, plus a discount on other

support calls.

3. Unlimited, next-business-dayaccess to reliable answers from

the IT community and Microsoft

Support Professionals throughManaged Newsgroups (English only).

3. Assisted Incident

Support

E-mail SupportGet online incident help via e-mail from aMicrosoft Support Professional.

Phone SupportGet incident help over the phone from a

Microsoft Support Professional.

Phone Support ContractSave with a discounted 5-Pack PhoneSupport contract.

Advisory ServicesAdd remotely delivered consultation optionsfrom Microsoft Advisory Services for

proactive support that goes far beyond

routine product maintenance.

4. Contract-Based

Support

Premier SupportGet the flexibility to match support

options to your organization andenjoy direct access to Microsofttechnical experts at any time, day

or night. Premier Support deliverscustomized options for businesses

with complex needs, including

dedicated technical professionals to overseyour support, 24x7 problem resolution, and

training and workshops that keep your IT

staff up to date.

Essential SupportEssential Support offers prepackaged

options specifically designed to meet

the fundamental support requirements

of any business, large or small. Includesaccount management, problem

resolution, and information services.


48/48

Free chats and webcasts List of newsgroups

Microsoft community sites

Community events and columns

Where Else Can I Get Help?

www.microsoft.com/technet/community

ITPROADD-04 60 Minute Version

Documents

Transcript of ITPROADD-04 60 Minute Version