MCITP Training

Training Outline of MCITP Training

MCITP included SIX subjects (Duration : 66 hours):

1. 70-680: Windows 7, Configuring
2. 70-640 TS: Windows Server 2008 Active Directory
3. 70-642 TS: Windows Server 2008 Network Infrastructure Configuration
4. 70-643 TS: Windows Server 2008 Applications Infrastructure Configuration
5. 70-646 Windows Server 2008 Server Administrator
6. 70-647 Windows Server 2008 Enterprise Administrator

70-680: Windows 7, Configuring 課程內容 :

Installing, Upgrading, and Migrating to Windows 7

• Perform a clean installation.
• Upgrade to Windows 7 from previous versions of Windows.
• Migrate user profiles.

Deploying Windows 7

• Capture a system image.
• Prepare a system image for deployment.
• Deploy a system image.
• Configure a VHD.

Configuring Hardware and Applications

• Configure devices.
• Configure application compatibility.
• Configure application restrictions.
• Configure Internet Explorer.

Configuring Network Connectivity

• Configure IPv4 network settings.
• Configure IPv6 network settings.
• Configure networking settings.
• Configure Windows Firewall.
• Configure remote management.

Configuring Access to Resources

• Configure shared resources.
• Configure file and folder access.
• Configure user account control (UAC).
• Configure authentication and authorization.
• Configure BranchCache.

Configuring Mobile Computing

• Configure BitLocker and BitLocker To Go.
• Configure DirectAccess.
• Configure mobility options.
• Configure remote connections.

Monitoring and Maintaining Systems that Run Windows 7

• Configure updates to Windows 7.
• Manage disks.
• Monitor systems.
• Configure performance settings.

Configuring Backup and Recovery Options

• Configure backup.
• Configure system recovery options.
• Configure file recovery options.

(70-640) TS: Windows Server 2008 Active Directory 課程內容 :

Configure DNS zones

• Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS) & Secure Dynamic DNS (SDDNS)
• Time to Live (TTL), GlobalNames, Primary, Secondary
• Active Directory Integrated, Stub, SOA, zone scavenging
• Forward lookup, reverse lookup

Configure DNS server settings

• Forwarding, root hints, configure zone delegation
• Round robin, disable recursion, debug logging, server scavenging

Configure zone transfers and replication

• Configure replication scope (forestDNSzone, domainDNSzone)
• Incremental zone transfers, DNS Notify, secure zone transfers
• Configure name servers, application directory partitions

Configure a forest or a domain

• Remove a domain, perform an unattended installation
• Active Directory Migration Tool (ADMT) v3 (pruning and grafting)
• Interoperability with previous versions of Active Directory

Configure Active Directory replication

• Distributed File System, one-way replication
• Bridgehead server, replication scheduling
• Configure replication protocols, force intersite replication

Configure Active Directory Lightweight Directory Service (AD LDS)

• Migration to AD LDS, configure data within AD LDS
• Configure an authentication server, server core, Windows Server 2008 R2 Hyper-V

Configure Active Directory Rights Management Service (AD RMS)

• Certificate request and installation, self-enrollments, delegation
• Active Directory Metadirectory Services (AD MDS)
• Windows Server virtualization

Configure the read-only domain controller (RODC)

• Unidirectional replication, Administrator role separation
• Read-only DNS, BitLocker
• Credential caching, password replication, syskey

Configure Active Directory Federation Services (AD FS)

• Install AD FS server role
• Exchange certificate with AD FS agents
• Configure trust policies
• Configure user and group claim mapping

Automate creation of Active Directory accounts

• Bulk import, configure the UPN
• Create computer, user, and group accounts (scripts, import, migration)
• Create template accounts, contacts, distribution lists

Create and apply Group Policy objects (GPOs)

• Enforce, OU hierarchy, block inheritance
• Enabling user objects, group policy processing priority, WMI
• Group policy filtering, group policy loopback

Configure backup and recovery

• Using Windows Server Backup
• Back up files and system state data to media
• Back up and restore by using removable media
• Perform an authoritative or non-authoritative Active Directory restore

Monitor Active Directory

• Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin
• Windows System Resource Manager, Reliability and Performance Monitor
• Server Performance Advisor, RSOP

Configure CA server settings

• Key archival, certificate database backup and restore
• Assigning administration roles
• Certificate template types, securing template permissions
• Managing different certificate template versions, key recovery agent

(70-642) TS: Windows Server 2008 Network Infrastructure Configuration 課程內容 :

Configure IPv4 and IPv6 addressing

• Configure IP options, subnetting, supernetting, alternative configuration

Configure Dynamic Host Configuration Protocol (DHCP)

• DHCP options, creating new options, PXE boot, default user profiles
• Windows Server Hyper-V

Configure routing

• Static routing, persistent routing
• Routing Internet Protocol (RIP)
• Open Shortest Path First (OSPF)

Configure a Domain Name System (DNS) server

• Conditional forwarding, external forwarders,
• Root hints, cache-only, server core
• WINS and DNS integration, Windows Server virtualization

Configure DNS zones

• DNS Refresh no-refresh, intervals
• DNS listserv address (NSLOOKUP)
• Primary/secondary zones
• Dynamic Domain Name System (DDNS)
• GlobalNames

Configure remote access

• Dial-up, Remote Access Policy
• Network Address Translation (NAT)
• Internet Connection Sharing (ICS)
• VPN (Virtual Private Network)

Configure Network Access Protection (NAP)

• Network layer protection, DHCP enforcement, VPN enforcement
• Configure NAP health policies, IPsec enforcement
• 802.1x enforcement, flexible host isolation

Configure network authentication

• LAN authentication by using NTLMv2 and Kerberos
• WLAN authentication by using 802.1x
• RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP

Configure wireless access

• Set Service Identifier (SSID)
• Wired Equivalent Privacy (WEP)
• Wi-Fi Protected Access (WPA)
• Wi-Fi Protected Access 2 (WPA2)
• ad hoc versus infrastructure mode, group policy for wireless

Configure firewall settings

• Incoming and outgoing traffic filtering
• Active Directory account integration, identify ports and protocols
• Microsoft Windows Firewall versus Windows Firewall with Advanced Security
• Configure firewall by using group policy, isolation policy

Configure Distributed File System (DFS)

• DFS namespace, DFS configuration and application
• Creating and configuring targets, DFS replication

Configure and monitor print services

• Printer share, publish printers to Active Directory
• Printer permissions, deploy printer connections
• Install printer drivers
• Export and import print queues and printer settings
• Add counters to Reliability and Performance Monitor to monitor print servers
• Print pooling, print priority

Configure Windows Server Update Services (WSUS) server settings

• Update type selection, client settings, Group Policy object (GPO)
• Client targeting, software updates, test and approval, disconnected networks

(70-643) TS: Windows Server 2008 Applications Infrastructure Configuration 課程內容 :

Deploy images by using Windows Deployment Services

• Install from media (IFM)
• Configure Windows Deployment Services
• Capture Windows Deployment Services images
• Deploy Windows Deployment Services images, server core

Configure Windows Server Hyper-V and virtual machines

• Virtual networking, virtualization hardware requirements
• Virtual Hard Disks, migrate from physical to virtual
• VM additions, backup, optimization, server core

Configure storage

• RAID types, Virtual Disk Specification (VDS) API
• Network Attached Storage, iSCSI and Fibre Channel storage area networks

Configure Windows Server 2008 R2 Terminal Services RemoteApp

• Configuring Terminal Services Web Access
• Configuring Terminal Services Remote Desktop Web Connection

Configure Terminal Services Gateway

• Certificate configuration, Terminal Services Gateway Manager
• Specifying resources that users can access through TS Gateway
• Resource authorization policy (TS RAP)
• Terminal Services connection authorization policy (TS CAP)
• Terminal Services group policy

Configure Terminal Services client connections

• Connecting local devices and resources to a session
• Terminal Services profiles, Terminal Services home folders
• Remote Desktop Connection (RDC), single sign-on
• Remote Desktop Snap-In, MSTSC.exe

Manage Web sites

• Migrate sites and Web applications, publish IIS Web sites
• Configure virtual directories

Configure a File Transfer Protocol (FTP) server

• Configure for extranet users, configure permissions

Configure Simple Mail Transfer Protocol (SMTP)

• Setting up smart hosts, configuring size limitations
• Setting up security and authentication to the delivering server
• Creating proper service accounts, authentication, SMTP relay

Manage Internet Information Services (IIS)

• Web site content backup and restore
• IIS configuration backup, monitor IIS
• Configure logging, delegation of administrative rights

Configure SSL security

• Configure certificates, requesting SSL certificate
• Renewing SSL certificate, exporting and importing certificates

Configure Digital Rights Management (DRM)

• Encryption, sharing business rules, configuring license delivery
• Configuring policy templates

Configure Microsoft Windows SharePoint Services server options

• Site permissions, backup, antivirus
• Configuring Windows SharePoint Services service accounts

(70-646) Windows Server 2008 Server Administrator 課程內容 :

Plan server installations and upgrades

• Windows Server 2008 R2 edition selection, rollback planning
• Bitlocker implementation requirements

Plan for automated server deployment

• Standard server image, automation and scheduling of server deployments

Plan infrastructure services server roles

• Address assignment, name resolution
• Network access control, directory services
• Application services, certificate services

Plan application servers and services

• Virtualization server planning, availability, resilience, and accessibility

Plan file and print server roles

• Access permissions, storage quotas
• Replication, indexing, file storage policy, availability, printer publishing

Plan server management strategies

• Remote administration, remote desktop
• Server management technologies
• Server Manager and ServerManagerCMDa
• Delegation policies and procedures

Plan for delegated administration

• Delegate authority
• Delegate Active Directory objects
• Application management

Plan and implement group policy strategy

• GPO management, GPO backup and recovery
• Group policy troubleshooting, group policy planning

Implement patch management strategy

• Operating system patch level maintenance
• Windows Server Update Services (WSUS)
• Application patch level maintenance

Monitor servers for performance evaluation and optimization

• Server and service monitoring, optimization
• Event management, trending and baseline analysis

Monitor and maintain security and policies

• Remote access, monitor and maintain NPAS, network access
• Server security, firewall rules and policies, authentication & authorization

Provision applications

• Presentation virtualization, terminal server infrastructure

Provision data

• Shared resources, offline data access

Plan storage

• Storage solutions, storage management

Plan high availability

• Service redundancy, service availability

Plan for backup and recovery

• Data recovery strategy, server recovery strategy
• Directory service recovery strategy

(70-647) Windows Server 2008 Enterprise Administrator 課程內容 :
Plan for name resolution and IP addressing

• Internal and external naming strategy
• Naming resolution support for legacy clients
• Naming resolution for directory services
• IP addressing scheme, TCP/IP version coexistence

Design for network access

• Network access policies, remote access strategy
• Perimeter networks, server and domain isolation

Plan for application delivery

• Application virtualization
• Presentation virtualization
• Locally installed software, Web-based applications

Plan for Terminal Services

• Terminal Services licensing, Terminal Services infrastructure
• Design Active Directory forests and domains
• Forest structure, forest and domain functional levels
• Intra-organizational authorization and authentication, schema modifications

Design the Active Directory physical topology

• Placement of servers, site and replication topology, printer location policies

Design the Active Directory administrative model

• Delegation, group strategy, compliance auditing
• Group administration, organizational structure

Design the enterprise-level group policy strategy

• Group policy hierarchy and scope filtering
• Control device installation, authentication and authorization

Plan for domain or forest migration, upgrade, and restructuring

• Cross-forest authentication, backward compatibility, object migration
• Migration planning, implementation planning, environment preparation

Design the branch office deployment

• Authentication strategy, server security

Design and implement public key infrastructure

• Certificate services, PKI operations and maintenance
• Certificate life cycle management

Design for software updates and compliance management

• Patch management and patch management compliance
• Microsoft Update and Windows Update, security baselines, system health models

Design the operating system virtualization strategy

• Server consolidation, application compatibility
• Virtualization management, placement of servers