Microsoft

Windows 2003Network Network

InfrastructureInfrastructure

MCSEStudy Guide for

Exam 70-291

What the book coversWhat the book covers

Chapter1Chapter1– Understanding Windows Server 2003 NetworksUnderstanding Windows Server 2003 Networks

Chapter2Chapter2– Understanding TCP/IPUnderstanding TCP/IP

Chapter3Chapter3– Monitoring and Troubleshooting TCP/IP ConnectionsMonitoring and Troubleshooting TCP/IP Connections

Chapter4Chapter4– Configuring DNS Servers and ClientsConfiguring DNS Servers and Clients

Chapter5Chapter5– Implementing a DNS InfrastructureImplementing a DNS Infrastructure

Chapter6Chapter6– Monitoring and Troubleshooting DNSMonitoring and Troubleshooting DNS

What the Book Covers cont.What the Book Covers cont.

Chapter 7Chapter 7– Configuring DHCP Servers and ClientsConfiguring DHCP Servers and Clients

Chapter 8Chapter 8– Monitoring and Troubleshooting DHCPMonitoring and Troubleshooting DHCP

Chapter 9Chapter 9– Routing with Windows Server 2003Routing with Windows Server 2003

Chapter 10Chapter 10– Configuring and Managing Remote AccessConfiguring and Managing Remote Access

Chapter 11Chapter 11– Managing Network SecurityManaging Network Security

Chapter 12Chapter 12– Maintaining a Network InfrastructureMaintaining a Network Infrastructure

Understanding Windows Understanding Windows Server 2003 NetworksServer 2003 Networks

Chapter 1Chapter 1

Objectives for this ChapterObjectives for this Chapter

Diagnose and resolve issues related to Diagnose and resolve issues related to Automatic Private IP Addressing (APIPA) Automatic Private IP Addressing (APIPA) Practice:Practice:

In This ChapterIn This Chapter

Understanding Network Infrastructures Understanding Network Infrastructures

Networking with Default Components in Networking with Default Components in Windows Server 2003 Windows Server 2003

Extending a Windows Server 2003 Extending a Windows Server 2003 Network Infrastructure Network Infrastructure

To Complete the Exercises:To Complete the Exercises:

Physically networked Physically networked two computerstwo computers. .

Performed a Windows Server 2003 installation Performed a Windows Server 2003 installation with with default settings on both computersdefault settings on both computers..

The computers should be named Computer1 and The computers should be named Computer1 and Computer2.Computer2.

Assigned the local Administrator account on both Assigned the local Administrator account on both computers a strong password of your choosing. computers a strong password of your choosing.

Created a private user accountCreated a private user account, with your , with your name, that name, that has nothas not been granted Administrator been granted Administrator privileges. privileges.

Understanding Network Understanding Network InfrastructuresInfrastructures

A A network infrastructure network infrastructure is a set of is a set of physical and logical components that physical and logical components that provide the basis for connectivity, security, provide the basis for connectivity, security, routing, management, access, and other routing, management, access, and other integral features on a network.integral features on a network.

Physical InfrastructurePhysical Infrastructure

A network’s A network’s physical infrastructure physical infrastructure is its is its topologytopology—the physical design of the —the physical design of the network—along with hardware network—along with hardware components such as cabling, routers, components such as cabling, routers, switches, bridges, hubs, servers, and switches, bridges, hubs, servers, and hosts. hosts.

Logical InfrastructureLogical Infrastructure

the logical infrastructure include network the logical infrastructure include network components such as Domain Name components such as Domain Name System (DNS), network protocols such as System (DNS), network protocols such as TCP/IP, network client software such as TCP/IP, network client software such as Client Service For NetWare, and network Client Service For NetWare, and network services such as the Quality of Service services such as the Quality of Service (QoS) Packet Scheduler.(QoS) Packet Scheduler.

Small Organization Need to Small Organization Need to Know:Know:

How to install and configure network protocols How to install and configure network protocols required for various network needs; required for various network needs;

How to configure manual and automatic How to configure manual and automatic addressing methods appropriate to network addressing methods appropriate to network needs; needs;

How to configure name resolution methods; and How to configure name resolution methods; and

How to troubleshoot network problems related to How to troubleshoot network problems related to connectivity, addressing, access, security, and connectivity, addressing, access, security, and name resolution.name resolution.

Medium And Large Networks Medium And Large Networks

Configuring remote access through dial-up Configuring remote access through dial-up connections and virtual private networks (VPNs); connections and virtual private networks (VPNs);

Creating, modifying, and troubleshooting routing Creating, modifying, and troubleshooting routing interfaces and routing tables; interfaces and routing tables;

Creating, supporting, and troubleshooting Creating, supporting, and troubleshooting security based on public key cryptography; and security based on public key cryptography; and

Making maintenance decisions for Making maintenance decisions for heterogeneous networks that include operating heterogeneous networks that include operating systems such as Microsoft Windows, UNIX, and systems such as Microsoft Windows, UNIX, and Novell NetWare Novell NetWare

Analyzing Windows Server Analyzing Windows Server 2003 Networks 2003 Networks

Network ConnectionsNetwork Connections– Network connections Network connections are logical interfaces between are logical interfaces between

software (such as protocols) and hardware (such as software (such as protocols) and hardware (such as modems or network adapters). modems or network adapters).

Network ProtocolsNetwork Protocols

– Network protocols Network protocols are are network languages network languages used for computer-to-used for computer-to-computer computer communication. communication.

Note Note

TCP/IPTCP/IP is actually a group of protocols is actually a group of protocols referred to as a referred to as a stackstack or or suitesuite. This . This protocolprotocolstack includes Address Resolution stack includes Address Resolution Protocol (Protocol (ARPARP), Internet Protocol (), Internet Protocol (IPIP), ), Transmission Control Protocol (Transmission Control Protocol (TCPTCP), ), User Datagram Protocol (User Datagram Protocol (UDPUDP), Domain ), Domain Name System (Name System (DNSDNS), Hypertext Transfer ), Hypertext Transfer Protocol (Protocol (HTTPHTTP), and many others.), and many others.

Network Services Network Services

Network services Network services are are programs that provide programs that provide features, such as features, such as quality of service, to quality of service, to hosts or protocols on hosts or protocols on a network. a network.

Network Clients In Windows,Network Clients In Windows,

Network clients Network clients are are programs that allow a programs that allow a computer to connect computer to connect to a network to a network operating system. operating system.

AddressingAddressing

Addressing Addressing is the practice of maintaining a is the practice of maintaining a coherent system of addresses within your coherent system of addresses within your network so that all computers can network so that all computers can communicate.communicate.

Name ResolutionName Resolution

Name resolution Name resolution is the process of is the process of translating a computer name into an translating a computer name into an address, and vice versa.address, and vice versa.

Windows can use two different naming Windows can use two different naming systems, systems, NetBIOSNetBIOS and and DNSDNS, ,

Network Computer GroupsNetwork Computer Groups

A A workgroupworkgroup is a simple grouping of resources is a simple grouping of resources intended to help users find such resources as intended to help users find such resources as printers and shared folders. By default, computers printers and shared folders. By default, computers in Windows workgroups use the NetBIOS naming in Windows workgroups use the NetBIOS naming system to name computers and resolve those system to name computers and resolve those names. names. A A domaindomain is a collection of computers, defined by is a collection of computers, defined by a network administrator, that share a common a network administrator, that share a common directory, security policies, and relationships with directory, security policies, and relationships with other domains. Security and directory information other domains. Security and directory information are stored in domain controllers within each are stored in domain controllers within each domain.domain.

Active DirectoryActive Directory

Active Directory Active Directory is a distributed database is a distributed database and directory service that is replicated and directory service that is replicated among all domain controllers on the among all domain controllers on the network. The Active Directory database network. The Active Directory database stores information about network objects stores information about network objects including domains, computers, users, and including domains, computers, users, and other objects. other objects.

Remote AccessRemote Access

Remote access Remote access connections must be connections must be configured for users who connect to a configured for users who connect to a Windows network from a non-local site.Windows network from a non-local site.

The two basic methods for remote access The two basic methods for remote access include include direct dial-updirect dial-up to a network to a network computer and computer and virtual private networksvirtual private networks. .

Network Address TranslationNetwork Address Translation

Network Address Translation Network Address Translation (NAT) is a (NAT) is a method of allowing computers internal to method of allowing computers internal to your network that have been given your network that have been given nonpublic addresses to communicate with nonpublic addresses to communicate with computers on the Internet. computers on the Internet.

Certificate InfrastructureCertificate Infrastructure

Certificates Certificates are used for public key are used for public key cryptography, which is an important security cryptography, which is an important security element in Windows Server 2003 networks. element in Windows Server 2003 networks. Certificates and public key cryptography are Certificates and public key cryptography are used in many Windows features, such as;used in many Windows features, such as;– The Secure Sockets Layer (SSL), The Secure Sockets Layer (SSL), – The Internet ProtocolThe Internet Protocol– Security (IPSec) protocol (which encrypts IP Security (IPSec) protocol (which encrypts IP

communications), communications), – Smart cards, and Smart cards, and – The Encrypting File System (EFS, which secures files The Encrypting File System (EFS, which secures files

on a network). on a network).

Networking with Default Networking with Default Components in Server 2003Components in Server 2003

In a Windows network, a In a Windows network, a connectionconnection is a is a logically configured interface between a logically configured interface between a physical network and a network adapter or physical network and a network adapter or modem. modem.

Windows Server 2003 automatically Windows Server 2003 automatically detects and configures connections detects and configures connections associated with network adapters installed associated with network adapters installed on the local computer.on the local computer.

Viewing Default Components of Viewing Default Components of Network ConnectionsNetwork Connections

The network clients, The network clients, services, and services, and protocols associated protocols associated with (or bound to) the with (or bound to) the connection provide connection provide connectivity through connectivity through any particular any particular connection. connection.

There are Three tabs: There are Three tabs: General Tab:General Tab:

Viewing Default Components of Viewing Default Components of Network ConnectionsNetwork Connections

There is the There is the Authentications Authentications Tab:Tab:

Viewing Default Components of Viewing Default Components of Network ConnectionsNetwork Connections

There is theThere is theAdvanced Tab:Advanced Tab:

Viewing Advanced Viewing Advanced Connection SettingsConnection Settings

You can also adjust You can also adjust the binding order of the binding order of the services used forthe services used foreach connection.each connection.

Provider Order tabProvider Order tab

The Provider Order The Provider Order tab of the Advanced tab of the Advanced Settings dialog box, Settings dialog box, displays the order in displays the order in which various network which various network providers, such as a providers, such as a NetWare Network, NetWare Network, Microsoft Windows Microsoft Windows Network, or Microsoft Network, or Microsoft Terminal Services, Terminal Services, will be attempted will be attempted

Default TCP/IP SettingsDefault TCP/IP Settings

Set to obtain an IP Set to obtain an IP address Automaticallyaddress Automatically

Automatic Private IP AddressingAutomatic Private IP Addressing

An IP address in the range of An IP address in the range of 169.254.0.1–169.254.255.254 is APIPA. 169.254.0.1–169.254.255.254 is APIPA.

APIPA APIPA is an addressing feature for simple is an addressing feature for simple networks that consist of a single network networks that consist of a single network segment. segment.

And when no DHCP server or alternate And when no DHCP server or alternate configuration is available.configuration is available.

APIPAAPIPA

Disabling APIPADisabling APIPA 1.1. Use the Registry Editor Regedit.exe to Use the Registry Editor Regedit.exe to addadd the Registry entry the Registry entry

IPAutoconfigurationEnabled IPAutoconfigurationEnabled with a value of with a value of 0 0 (REG_DWORD data type) in the following subkey: (REG_DWORD data type) in the following subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\Services\Tcpip\Parameters\Interfaces\interfaceinterface

2.2. Restart the computer.Restart the computer.

Disable APIPA on multiple adapters:Disable APIPA on multiple adapters:1.1. Set the value of the IPAutoconfigurationEnabled entry to Set the value of the IPAutoconfigurationEnabled entry to 0 0

(REG_DWORD data type) in the following Registry subkey: (REG_DWORD data type) in the following Registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ParametersServices\Tcpip\Parameters

2.2. Restart the computer.Restart the computer.

Exam Tip Exam Tip

Be sure to memorize the APIPA-related Be sure to memorize the APIPA-related Registry keys for the exam. Registry keys for the exam.

TroubleshootingTroubleshooting

IPCONFIGIPCONFIG– /ALL/ALL– /RELEASE/RELEASE– /RENEW/RENEW– /FLUSHDNS/FLUSHDNS

– /REGISTERDNS/REGISTERDNS– /DISPLAYDNS/DISPLAYDNS– /SHOWCLASSID/SHOWCLASSID– /SETCLASSID/SETCLASSID

Setting an Alternate Setting an Alternate ConfigurationConfiguration

This will replace This will replace APIPA when the APIPA when the DHCP is not DHCP is not available.available.

Default Networking and Default Networking and WorkgroupsWorkgroups

Default in a single workgroup named Default in a single workgroup named WORKGROUP.WORKGROUP.

Computer names are NetBIOS names, Computer names are NetBIOS names, resolved using NetBT broadcasts to the resolved using NetBT broadcasts to the local network segment. local network segment.

Routing and Windows Server Routing and Windows Server 2003 Network Infrastructure 2003 Network Infrastructure

This will be covered laterThis will be covered later

Windows Server 2003 does install the Windows Server 2003 does install the Routing And Remote Access service in a Routing And Remote Access service in a disabled state. disabled state.

Extending a Windows Server Extending a Windows Server 2003 Network Infrastructure2003 Network Infrastructure

Adding Components Adding Components to a Connectionto a Connection– Installing Client Installing Client

Service For NetWareService For NetWare

Frame Types and the NWLink Frame Types and the NWLink (IPX) Protocol(IPX) Protocol

When installed, you When installed, you may manually may manually configure with:configure with:– Internal Network Internal Network

NumberNumber– Frame TypeFrame Type

NWLinkNWLink

Choosing a frame Choosing a frame type may be:type may be:– Ethernet 802.2Ethernet 802.2– Ethernet 802.3Ethernet 802.3– Ethernet IIEthernet II– Ethernet SNAPEthernet SNAP

Installing Windows Networking Installing Windows Networking ComponentsComponents

By using the Add Or By using the Add Or Remove Programs Remove Programs tool tool

Add /Remove Add /Remove Windows Windows ComponentsComponents

Four Subcomponents related to Four Subcomponents related to the Network Infrastructure: the Network Infrastructure:

Management And Monitoring Tools Management And Monitoring Tools

Networking Services ComponentNetworking Services Component

Other Network File And Print Services Other Network File And Print Services ComponentComponent

Certificate Services ComponentCertificate Services Component

Exam TipExam Tip

Be sure to know the functions of the Be sure to know the functions of the Network File And Print Services Network File And Print Services subcomponents for the exam subcomponents for the exam

Adding Active Directory to a Adding Active Directory to a Windows Infrastructure Windows Infrastructure

Adding Active Directory dramatically Adding Active Directory dramatically changes the logical infrastructure of a changes the logical infrastructure of a Windows network. Windows network.

Active Directory Add a Global Catalog.Active Directory Add a Global Catalog.– A global catalog that contains information A global catalog that contains information

about every object in the directoryabout every object in the directory

And a replication service that distributes And a replication service that distributes directory data across the network. directory data across the network.

SummarySummary

Case Scenario ExerciseCase Scenario Exercise– Page 1-30Page 1-30

Exam HighlightsExam Highlights– Key PointsKey Points– Key TermsKey Terms

Page 1-31Page 1-31