Home > Articles > Microsoft > MCTS

MCTS 70-640 Cert Guide: Installing Active Directory Domain Services

  • Print
  • + Share This
To help you prepare for the MCTS 70-640 exam, this chapter covers planning the Active Directory namespace, creating forests and domains, interoperability with previous versions of Active Directory, and additional forest and domain configuration tasks.
This chapter is from the book

This chapter covers the following subjects:

  • Planning the Active Directory Namespace: This section provides a basic introduction to best practices you should follow in planning and designing an Active Directory namespace that will serve your company properly both now and in the years to come.
  • Creating Forests and Domains: In this section, you learn how to create your first domain controller in a new Active Directory forest. You then learn how to add additional domain controllers to your forest and create child domains.
  • Interoperability with Previous Versions of Active Directory: Many organizations are using Active Directory domains based on Windows 2000 and Windows Server 2003. This section takes you through the preparatory tasks you must perform before you can add a Windows Server 2008 R2 domain controller as well as the actual upgrading of older domain controllers. In addition, it introduces you to the concept of forest and domain functional levels, as well as the benefits of the newest Windows Server 2008 R2 functional levels.
  • Additional Forest and Domain Configuration Tasks: After you have installed and configured your first domain, you should perform several additional tasks. This section discusses verifying your Active Directory installation, using the Active Directory Migration tool (ADMT), and creating alternative user principal name (UPN) suffixes.

In Chapter 1, "Getting Started with Active Directory," you were introduced to the basic building blocks of the logical Active Directory structure: forests, trees, domain, and organizational units (OUs). You were also introduced to the concept of sites for distinguishing portions of the network separated physically by slow WAN links. Now you begin to create an actual Active Directory forest and domain structure.

The act of installing Active Directory on a server is conceptually very simple. You need only run the Active Directory Domain Services (AD DS) Installation Wizard from the Add Roles Wizard of Server Manager and provide answers to the questions the wizard asks. The actual act of installing AD DS, however, can be thought of as the tip of the iceberg. Before you install AD DS, you need to plan how Active Directory will fit into your company's corporate and geographical structure as well as your expectations for future growth and the potential for acquiring other companies. This chapter serves only as a basic introduction to the topic of planning.

"Do I Know This Already?" Quiz

The "Do I Know This Already?" quiz enables you to assess whether you should read this entire chapter or simply jump to the "Exam Preparation Tasks" section for review. If you are in doubt, read the entire chapter. Table 3-1 outlines the major headings in this chapter and the corresponding "Do I Know This Already?" quiz questions. You can find the answers in Appendix A, "Answers to the 'Do I Know This Already?' Quizzes."

Table 3-1. "Do I Know This Already?" Foundation Topics Section-to-Question Mapping

Foundations Topics Section

Questions Covered in This Section

Planning the Active Directory Namespace


Creating Forests and Domains


Interoperability with Previous Versions of Active Directory


Additional Forest and Domain Configuration Tasks


  1. Which of the following are best practices that you should follow when planning an AD DS domain structure? (Choose all that apply.)

    1. Employ a test lab
    2. Prepare thorough documentation
    3. Keep everyone, including top managers, informed
    4. Understand thoroughly the network's TCP/IP infrastructure
    5. Develop and adhere to an adequate security policy
    6. Know the capabilities of your WAN links
  2. On which of the following editions of Windows Server 2008 R2 can you install the AD DS role? (Choose all that apply.)

    1. Web
    2. Foundation
    3. Standard
    4. Enterprise
    5. Datacenter
  3. Which of the following tools can you use to install AD DS on a server running Windows Server 2008 R2? (Choose two.)

    1. The dcpromo.exe command
    2. The Manage Your Server tool
    3. The Configure Your Server tool
    4. The Add Roles Wizard
    5. The Add Features Wizard
  4. Which of the following conditions would represent a problem when you are attempting to install the first domain controller in your domain?

    1. A DHCP server is not present.
    2. A DNS server is not present.
    3. The server's hard disk is formatted with the FAT32 file system.
    4. The server's hard disk has only 10 GB free space available.
  5. Which of the following is a new AD DS administrative tool included with Windows Server 2008 R2 and was not present in older versions of Windows Server?

    1. Active Directory Users and Computers
    2. Active Directory Administrative Center
    3. Active Directory Sites and Services
    4. Active Directory Domains and Trusts
    5. User Manager for Domains
  6. Your computer is running the Server Core edition of Windows Server 2008 R2. You want to promote this server to domain controller. What should you do?

    1. Use Server Manager to run the Add Roles Wizard.
    2. Use the Initial Configuration Tasks window to run the Add Roles Wizard.
    3. Use dcpromo.exe and specify the required parameters when prompted.
    4. Use dcpromo.exe together with an answer file that provides the required parameters.
    5. You cannot promote this server to domain controller without reinstalling Windows Server 2008 as a full edition server.
  7. You are the administrator of DC1, which is a Windows Server 2008 R2 domain controller in your company's domain. You are experiencing problems with DC1 and decide to run the Active Directory Installation Wizard again on this machine. What happens?

    1. A new copy of the AD DS software is installed.
    2. Two copies of the AD DS software will exist side-by-side.
    3. The domain controller is demoted to a member server.
    4. You receive an error message informing you that the wizard cannot be run again.
  8. Which of the following is not a valid domain or forest functional level for a domain controller running Windows Server 2008 R2?

    1. Windows 2000 mixed
    2. Windows 2000 native
    3. Windows Server 2003 native
    4. Windows Server 2008 native
    5. Windows Server 2008 R2 native
  9. You have installed Windows Server 2008 R2 on a brand-new server and want to promote this server to domain controller in your domain, which has domain controllers running Windows Server 2003 and operates at the Windows Server 2003 native domain functional level. What should you do first?

    1. Run adprep /forestprep and then run adprep /domainprep.
    2. Run adprep /domainprep and then run adprep /forestprep.
    3. Raise the domain functional level to Windows Server 2008 R2.
    4. Raise the forest functional level to Windows Server 2008 R2.
  10. Your company has acquired another company, and both companies operate an AD DS forest with a single domain. The CIO has decided that all users of the acquired company are to be moved into your company's domain so that the other company's forest and domain can be decommissioned. What tool should you use to assist you in this action?

    1. Active Directory Users and Computers
    2. Active Directory Administrative Center
    3. Active Directory Migration Tool (ADMT)
    4. User State Migration Tool (USMT)
  11. You are the administrator for the sales.que.com domain. You are configuring an implicit user principal name (UPN) suffix user named Sharon. Which of the following is a valid implicit UPN?

    1. Sharon@sales.que.com
    2. Sharon@sales
    3. Sales.que.com\Sharon
    4. Sales\Sharon
  • + Share This
  • 🔖 Save To Your Account