MCITP Training
Training Outline of MCITP Training
MCITP included SIX subjects (Duration : 66 hours):
- 70-680: Windows 7, Configuring
- 70-640 TS: Windows Server 2008 Active Directory
- 70-642 TS: Windows Server 2008 Network Infrastructure Configuration
- 70-643 TS: Windows Server 2008 Applications Infrastructure Configuration
- 70-646 Windows Server 2008 Server Administrator
- 70-647 Windows Server 2008 Enterprise Administrator
70-680: Windows 7, Configuring 課程內容 :
Installing, Upgrading, and Migrating to Windows 7
- Perform a clean installation.
- Upgrade to Windows 7 from previous versions of Windows.
- Migrate user profiles.
Deploying Windows 7
- Capture a system image.
- Prepare a system image for deployment.
- Deploy a system image.
- Configure a VHD.
Configuring Hardware and Applications
- Configure devices.
- Configure application compatibility.
- Configure application restrictions.
- Configure Internet Explorer.
Configuring Network Connectivity
- Configure IPv4 network settings.
- Configure IPv6 network settings.
- Configure networking settings.
- Configure Windows Firewall.
- Configure remote management.
Configuring Access to Resources
- Configure shared resources.
- Configure file and folder access.
- Configure user account control (UAC).
- Configure authentication and authorization.
- Configure BranchCache.
Configuring Mobile Computing
- Configure BitLocker and BitLocker To Go.
- Configure DirectAccess.
- Configure mobility options.
- Configure remote connections.
Monitoring and Maintaining Systems that Run Windows 7
- Configure updates to Windows 7.
- Manage disks.
- Monitor systems.
- Configure performance settings.
Configuring Backup and Recovery Options
- Configure backup.
- Configure system recovery options.
- Configure file recovery options.
(70-640) TS: Windows Server 2008 Active Directory 課程內容 :
Configure DNS zones
- Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS) & Secure Dynamic DNS (SDDNS)
- Time to Live (TTL), GlobalNames, Primary, Secondary
- Active Directory Integrated, Stub, SOA, zone scavenging
- Forward lookup, reverse lookup
Configure DNS server settings
- Forwarding, root hints, configure zone delegation
- Round robin, disable recursion, debug logging, server scavenging
Configure zone transfers and replication
- Configure replication scope (forestDNSzone, domainDNSzone)
- Incremental zone transfers, DNS Notify, secure zone transfers
- Configure name servers, application directory partitions
Configure a forest or a domain
- Remove a domain, perform an unattended installation
- Active Directory Migration Tool (ADMT) v3 (pruning and grafting)
- Interoperability with previous versions of Active Directory
Configure Active Directory replication
- Distributed File System, one-way replication
- Bridgehead server, replication scheduling
- Configure replication protocols, force intersite replication
Configure Active Directory Lightweight Directory Service (AD LDS)
- Migration to AD LDS, configure data within AD LDS
- Configure an authentication server, server core, Windows Server 2008 R2 Hyper-V
Configure Active Directory Rights Management Service (AD RMS)
- Certificate request and installation, self-enrollments, delegation
- Active Directory Metadirectory Services (AD MDS)
- Windows Server virtualization
Configure the read-only domain controller (RODC)
- Unidirectional replication, Administrator role separation
- Read-only DNS, BitLocker
- Credential caching, password replication, syskey
Configure Active Directory Federation Services (AD FS)
- Install AD FS server role
- Exchange certificate with AD FS agents
- Configure trust policies
- Configure user and group claim mapping
Automate creation of Active Directory accounts
- Bulk import, configure the UPN
- Create computer, user, and group accounts (scripts, import, migration)
- Create template accounts, contacts, distribution lists
Create and apply Group Policy objects (GPOs)
- Enforce, OU hierarchy, block inheritance
- Enabling user objects, group policy processing priority, WMI
- Group policy filtering, group policy loopback
Configure backup and recovery
- Using Windows Server Backup
- Back up files and system state data to media
- Back up and restore by using removable media
- Perform an authoritative or non-authoritative Active Directory restore
Monitor Active Directory
- Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin
- Windows System Resource Manager, Reliability and Performance Monitor
- Server Performance Advisor, RSOP
Configure CA server settings
- Key archival, certificate database backup and restore
- Assigning administration roles
- Certificate template types, securing template permissions
- Managing different certificate template versions, key recovery agent
(70-642) TS: Windows Server 2008 Network Infrastructure Configuration 課程內容 :
Configure IPv4 and IPv6 addressing
- Configure IP options, subnetting, supernetting, alternative configuration
Configure Dynamic Host Configuration Protocol (DHCP)
- DHCP options, creating new options, PXE boot, default user profiles
- Windows Server Hyper-V
Configure routing
- Static routing, persistent routing
- Routing Internet Protocol (RIP)
- Open Shortest Path First (OSPF)
Configure a Domain Name System (DNS) server
- Conditional forwarding, external forwarders,
- Root hints, cache-only, server core
- WINS and DNS integration, Windows Server virtualization
Configure DNS zones
- DNS Refresh no-refresh, intervals
- DNS listserv address (NSLOOKUP)
- Primary/secondary zones
- Dynamic Domain Name System (DDNS)
- GlobalNames
Configure remote access
- Dial-up, Remote Access Policy
- Network Address Translation (NAT)
- Internet Connection Sharing (ICS)
- VPN (Virtual Private Network)
Configure Network Access Protection (NAP)
- Network layer protection, DHCP enforcement, VPN enforcement
- Configure NAP health policies, IPsec enforcement
- 802.1x enforcement, flexible host isolation
Configure network authentication
- LAN authentication by using NTLMv2 and Kerberos
- WLAN authentication by using 802.1x
- RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP
Configure wireless access
- Set Service Identifier (SSID)
- Wired Equivalent Privacy (WEP)
- Wi-Fi Protected Access (WPA)
- Wi-Fi Protected Access 2 (WPA2)
- ad hoc versus infrastructure mode, group policy for wireless
Configure firewall settings
- Incoming and outgoing traffic filtering
- Active Directory account integration, identify ports and protocols
- Microsoft Windows Firewall versus Windows Firewall with Advanced Security
- Configure firewall by using group policy, isolation policy
Configure Distributed File System (DFS)
- DFS namespace, DFS configuration and application
- Creating and configuring targets, DFS replication
Configure and monitor print services
- Printer share, publish printers to Active Directory
- Printer permissions, deploy printer connections
- Install printer drivers
- Export and import print queues and printer settings
- Add counters to Reliability and Performance Monitor to monitor print servers
- Print pooling, print priority
Configure Windows Server Update Services (WSUS) server settings
- Update type selection, client settings, Group Policy object (GPO)
- Client targeting, software updates, test and approval, disconnected networks
(70-643) TS: Windows Server 2008 Applications Infrastructure Configuration 課程內容 :
Deploy images by using Windows Deployment Services
- Install from media (IFM)
- Configure Windows Deployment Services
- Capture Windows Deployment Services images
- Deploy Windows Deployment Services images, server core
Configure Windows Server Hyper-V and virtual machines
- Virtual networking, virtualization hardware requirements
- Virtual Hard Disks, migrate from physical to virtual
- VM additions, backup, optimization, server core
Configure storage
- RAID types, Virtual Disk Specification (VDS) API
- Network Attached Storage, iSCSI and Fibre Channel storage area networks
Configure Windows Server 2008 R2 Terminal Services RemoteApp
- Configuring Terminal Services Web Access
- Configuring Terminal Services Remote Desktop Web Connection
Configure Terminal Services Gateway
- Certificate configuration, Terminal Services Gateway Manager
- Specifying resources that users can access through TS Gateway
- Resource authorization policy (TS RAP)
- Terminal Services connection authorization policy (TS CAP)
- Terminal Services group policy
Configure Terminal Services client connections
- Connecting local devices and resources to a session
- Terminal Services profiles, Terminal Services home folders
- Remote Desktop Connection (RDC), single sign-on
- Remote Desktop Snap-In, MSTSC.exe
Manage Web sites
- Migrate sites and Web applications, publish IIS Web sites
- Configure virtual directories
Configure a File Transfer Protocol (FTP) server
- Configure for extranet users, configure permissions
Configure Simple Mail Transfer Protocol (SMTP)
- Setting up smart hosts, configuring size limitations
- Setting up security and authentication to the delivering server
- Creating proper service accounts, authentication, SMTP relay
Manage Internet Information Services (IIS)
- Web site content backup and restore
- IIS configuration backup, monitor IIS
- Configure logging, delegation of administrative rights
Configure SSL security
- Configure certificates, requesting SSL certificate
- Renewing SSL certificate, exporting and importing certificates
Configure Digital Rights Management (DRM)
- Encryption, sharing business rules, configuring license delivery
- Configuring policy templates
Configure Microsoft Windows SharePoint Services server options
- Site permissions, backup, antivirus
- Configuring Windows SharePoint Services service accounts
(70-646) Windows Server 2008 Server Administrator 課程內容 :
Plan server installations and upgrades
- Windows Server 2008 R2 edition selection, rollback planning
- Bitlocker implementation requirements
Plan for automated server deployment
- Standard server image, automation and scheduling of server deployments
Plan infrastructure services server roles
- Address assignment, name resolution
- Network access control, directory services
- Application services, certificate services
Plan application servers and services
- Virtualization server planning, availability, resilience, and accessibility
Plan file and print server roles
- Access permissions, storage quotas
- Replication, indexing, file storage policy, availability, printer publishing
Plan server management strategies
- Remote administration, remote desktop
- Server management technologies
- Server Manager and ServerManagerCMDa
- Delegation policies and procedures
Plan for delegated administration
- Delegate authority
- Delegate Active Directory objects
- Application management
Plan and implement group policy strategy
- GPO management, GPO backup and recovery
- Group policy troubleshooting, group policy planning
Implement patch management strategy
- Operating system patch level maintenance
- Windows Server Update Services (WSUS)
- Application patch level maintenance
Monitor servers for performance evaluation and optimization
- Server and service monitoring, optimization
- Event management, trending and baseline analysis
Monitor and maintain security and policies
- Remote access, monitor and maintain NPAS, network access
- Server security, firewall rules and policies, authentication & authorization
Provision applications
- Presentation virtualization, terminal server infrastructure
Provision data
- Shared resources, offline data access
Plan storage
- Storage solutions, storage management
Plan high availability
- Service redundancy, service availability
Plan for backup and recovery
- Data recovery strategy, server recovery strategy
- Directory service recovery strategy
(70-647) Windows Server 2008 Enterprise Administrator 課程內容 :
Plan for name resolution and IP addressing
- Internal and external naming strategy
- Naming resolution support for legacy clients
- Naming resolution for directory services
- IP addressing scheme, TCP/IP version coexistence
Design for network access
- Network access policies, remote access strategy
- Perimeter networks, server and domain isolation
Plan for application delivery
- Application virtualization
- Presentation virtualization
- Locally installed software, Web-based applications
Plan for Terminal Services
- Terminal Services licensing, Terminal Services infrastructure
- Design Active Directory forests and domains
- Forest structure, forest and domain functional levels
- Intra-organizational authorization and authentication, schema modifications
Design the Active Directory physical topology
- Placement of servers, site and replication topology, printer location policies
Design the Active Directory administrative model
- Delegation, group strategy, compliance auditing
- Group administration, organizational structure
Design the enterprise-level group policy strategy
- Group policy hierarchy and scope filtering
- Control device installation, authentication and authorization
Plan for domain or forest migration, upgrade, and restructuring
- Cross-forest authentication, backward compatibility, object migration
- Migration planning, implementation planning, environment preparation
Design the branch office deployment
- Authentication strategy, server security
Design and implement public key infrastructure
- Certificate services, PKI operations and maintenance
- Certificate life cycle management
Design for software updates and compliance management
- Patch management and patch management compliance
- Microsoft Update and Windows Update, security baselines, system health models
Design the operating system virtualization strategy
- Server consolidation, application compatibility
- Virtualization management, placement of servers