Home > Store

MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring

Register your product to gain access to bonus material or receive a coupon.

MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring


  • Sorry, this book is no longer in print.
Not for Sale


  • Copyright 2009
  • Edition: 1st
  • Book
  • ISBN-10: 0-7897-3791-4
  • ISBN-13: 978-0-7897-3791-5

MCTS Exam Cram

Windows Server 2008 Active Directory, Configuring

Exam 70-640

Don Poulton

Covers the critical information you’ll need to know to score higher on Exam 70-640!

Utilize new features of Windows Server 2008 related to Active Directory

Install and configure Active Directory forests and domains

Plan and implement an Organizational Unit structure

Plan and manage Active Directory infrastructure components, such as operations masters, global catalogs, read-only domain controllers, and sites

Plan, implement, and manage Active Directory using Group Policy

Plan and manage Active Directory roles, including Active Directory Lightweight Directory Services, Active Directory Rights Management Services, and Active Directory Federation Services

Deploy software in Active Directory using Group Policy

Utilize Active Directory features to manage users and groups

Back up and restore Active Directory, and rebuild an Active Directory domain controller from backup

Deploy and manage a public key infrastructure using Active Directory Certificate Services

CD Features MeasureUp Practice Questions!

Detailed explanations of correct and incorrect answers

Multiple test modes

Random questions and order of answers

Coverage of each 70-640 exam objective


Don Poulton, MCSA, MCSE, A+, Network+, Security+, has been involved in consulting with small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. More recently, he has written or co-authored several certification volumes on Security+, Windows XP, Windows Server 2003, and Windows Vista, published by Que Publishing.


ISBN-13: 978-0-7897-3791-5

ISBN-10: 0-7897-3791-4

Sample Content

Online Sample Chapter

MCTS 70-640 Exam Cram: Group Policy and Active Directory Security

Sample Pages

Download the sample pages

Table of Contents



    MCTSs and MCITPs in the Real World

        The Ideal MCITP Candidate

        Put Yourself to the Test

        Testing Your Exam Readiness

        Well, Let’s Get to It

Chapter 1: Getting Started with Windows Server 2008 Active Directory

    The Building Blocks of Active Directory




        Organizational Units


        Domain Controllers

        Global Catalog

        Operations Masters

    New Features of Active Directory in Windows Server 2008

        Server Manager

        Configuring Forests and Domains

        Requirements for Installing Active Directory Domain Services

        Installing Active Directory Domain Services

        Verifying the Proper Installation of Active Directory

        Performing Unattended Installations of Active Directory

        Server Core Domain Controllers

        Active Directory Migration Tool (ADMT) v.3.1

        Alternate User Principal Name (UPN) Suffixes

        Removing Active Directory

    Upgrading from Windows Server 2003

        Interoperability with Previous Versions of Active Directory

        Upgrading a Windows Server 2003 Domain Controller

    Configuring Global Catalog Servers

        Promotion of Domain Controllers to Global Catalog Servers

        Universal Group Membership Caching (UGMC)

        Partial Attribute Sets

    Configuring Operations Masters

        Schema Master

        Domain Naming Master

        PDC Emulator

        Infrastructure Master

        RID Master

        Placement of Operations Masters

        Transferring and Seizing of Operations Master Roles

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 2: Active Directory and DNS

    Configuring DNS Zones

        DNS Zone Types

        Creating DNS Zones

        DNS Records

        Configuring DNS Zone Properties

        Dynamic, Non-Dynamic, and Secure Dynamic DNS

        Time to Live

        Zone Scavenging

    Configuring DNS Server Settings


        Root Hints

        Configuring Zone Delegation

        Debug Logging

        Event Logging

        Advanced Server Options

        Monitoring DNS

        Command-Line DNS Server Administration

    Configuring Zone Transfers and Replication

        Replication Scope

        Types of Zone Transfers

        Secure Zone Transfers

        Configuring Name Servers

        Application Directory Partitions

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 3: Active Directory Sites and Replication

    The Need for Active Directory Sites

    Configuring Sites and Subnets

        Creating Sites

        Adding Domain Controllers

        Creating and Using Subnets

    Site Links, Site Link Bridges, and Bridgehead Servers

        The Need for Site Links and Site Link Bridges

        Configuring Site Links

        Site Link Bridges

        Site Link Costs

        Bridgehead Servers

        Sites Infrastructure

    Configuring Active Directory Replication

        Intersite and Intrasite Replication

        Distributed File System

        One-Way Replication

        Replication Protocols

        Replication Scheduling

        Forcing Intersite Replication

        Monitoring and Troubleshooting Replication

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 4: Configuring Additional Active Directory Roles

    New Server Roles and Features

    Active Directory Lightweight Directory Services (AD LDS)

        Installing AD LDS

        Configuring Data Within AD LDS

        Migration to AD LDS

        Configuring an Authentication Server

        Use of AD LDS on Server Core

    Active Directory Rights Management Services (AD RMS)

        Installing AD RMS

        Certificate Request and Installation



        Active Directory Metadirectory Services (AD MDS)

    Read-Only Domain Controllers

        Installing a Read-Only Domain Controller

        Unidirectional Replication

        Administrator Role Separation

        Read-Only DNS


        Replication of Passwords


    Active Directory Federation Services (AD FS)

Installing the AD FS Server Role

Trust Policies

        User and Group Claim Mapping

        Configuring Federation Trusts

        Windows Server 2008 Virtualization

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 5: Active Directory Objects and Trusts

    Creating User and Group Accounts

        Introducing User Accounts

        Introducing Group Accounts

        Creating User, Computer, and Group Accounts

        Use of Template Accounts

        Using Bulk Import to Automate Account Creation

        Configuring the UPN

        Configuring Contacts

        Creating Distribution Lists

    Managing and Maintaining Accounts

        Creating Organizational Units

        Configuring Group Membership


        Resetting Accounts and Passwords

        Denying Privileges

        Protected Admin

        Local Versus Domain Groups

        Deprovisioning Accounts

        Disabling or Deleting Accounts

        Delegating Administrative Control of Active

        Directory Objects

    Configuring Active Directory Trust Relationships

        Transitive Trusts

        Forest Trust Relationships

        External Trust Relationships

        Realm Trust Relationships

        Shortcut Trust Relationships

        Authentication Scope

        SID Filtering

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 6: Configuring and Troubleshooting Group Policy

    Overview of Group Policy

        Group Policy Objects

    Creating and Applying GPOs

        Managing GPOs

        Configuring GPO Hierarchy and Processing Priority

        Group Policy Filtering

        Group Policy Loopback Processing

    Configuring GPO Templates

        User Rights

        ADMX Central Store

        Administrative Templates

        Restricted Groups

        Starter GPOs

        Shell Access Policies

    Using Group Policy to Deploy Software

        Assigning and Publishing Software

        Deploying Software Using Group Policy

        Upgrading Software

        Removal of Software

    Troubleshooting the Application of Group Policy Objects

        Resultant Set of Policy



    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 7: Group Policy and Active Directory Security

    Use of Group Policy to Configure Security

        Configuring Account Policies

        Fine-Grained Password Policies

        Security Options

        Additional Security Configuration Tools

    Auditing of Active Directory Services

        New Features of Active Directory Auditing

        Use of GPOs to Configure Auditing

        Use of Auditpol.exe to Configure Auditing

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 8: Monitoring and Maintaining the Active Directory Environment

    Backing Up and Recovering Active Directory

        Use of Windows Server Backup

        Recovering Active Directory

        Linked Value Replication

        Backing Up and Restoring GPOs

    Offline Maintenance of Active Directory

        Restartable Active Directory

        Offline Defragmentation and Compaction

        Active Directory Database Storage Allocation

    Monitoring Active Directory

        Network Monitor

        Task Manager

        Event Viewer

        Reliability and Performance Monitor

        Windows System Resource Manager

        Server Performance Advisor

    Exam Cram Questions

        Answers to Exam Cram Questions

Chapter 9: Active Directory Certificate Services

    What’s New with Certificate Services in Windows Server 2008?

    Installing Active Directory Certificate Services

        Certificate Authority Types and Hierarchies

        Installing Root CAs

        Installing Subordinate CAs

        Certificate Requests

        Certificate Practice Statements

    Managing Certificate Templates

        Certificate Template Types

        Configuring Certificate Templates

        Managing Different Certificate Template Versions

        Key Archival

        Key Recovery Agents

    Managing Certificate Enrollments

        Network Device Enrollment Services

        Certificate Autoenrollment

        Web Enrollment

        Smart Card Enrollment

        Creating Enrollment Agents

    Configuring Certificate Authority Server Settings

        Certificate Stores

        Certificate Server Permissions

        Certificate Database Backup and Restore

        Assigning Administration Roles

    Managing Certificate Revocation

        Certificate Revocation Lists

        Configuring Online Responders

        Authority Information Access

    Exam Cram Questions

        Answers to Exam Cram Questions436

Chapter 10: Practice Exam 1

    Exam Cram Questions

Chapter 11: Answer Key to Practice Exam 1

    Answers at a Glance

    Answers to Exam Cram Questions

Chapter 12: Practice Exam 2

    Exam Cram Questions

Chapter 13: Answer Key to Practice Exam 2

    Answers at a Glance

    Answers to Exam Cram Questions

Appendix A: Need to Know More?

    Chapter 1

    Chapter 2

    Chapter 3

    Chapter 4

    Chapter 5

    Chapter 6

    Chapter 7

    Chapter 8

    Chapter 9

    Appendix C

Appendix B: What’s on the CD-ROM

    Multiple Test Modes

        Study Mode

        Certification Mode

        Custom Mode

    Attention to Exam Objectives

    Installing the CD

        System Requirements

    Creating a Shortcut to the MeasureUp Practice Tests

    Technical Support

Appendix C: Installing Windows Server 2008

    Windows Server 2008 Hardware Requirements

    Manually Installing Windows Server 2008

        Installing a Complete Server

        Using Sysprep to Prepare a Virtual Server

        Installing a Windows Server Core Computer

        Useful Server Core Commands

    Upgrading a Windows Server 2003 Computer

    Automating Windows Server 2008 Installation




Submit Errata

More Information

Unlimited one-month access with your purchase
Free Safari Membership