Table of Contents Introduction xxiii Self-Assessment xxxv Chapter 1 Windows 2000 Architecture 1 Windows 2000 Family Windows 2000 Professional Windows 2000 Server Windows 2000 Advanced Server Windows 2000 Datacenter Server Windows 2000 Architecture and Design User and Kernel Modes Kernel Mode User Mode Memory Architecture Processes and Priorities Comparing Windows 2000 Server and Windows NT Server Review Questions Chapter 2 Installing Windows 2000 35 Windows 2000 Installation Overview Hardware Compliance Upgrading vs. Installing Multiple Operating Systems Planning Methods of Installations WINNT and WINNT32 Step-by-Step Installation of Windows 2000 Applying Service Packs Troubleshooting the Installation Review Questions Chapter 3 Automated Installation 63 Automated Installation Options Unattended Installation Duplicating an Installation with SYSDIFF Automating Installation on Computers with Different Hardware Automating Installation on Computers with Similar Hardware Distribution Files Directory Structure Command Lines Remote Installation RIS Overview Installation of RIS Using RIS to Install a Client RIS System Configuration Custom RIS Installation Images Review Questions Chapter 4 Working with Devices and Drivers 91 WDM Overview Driver Signing Windows File Protection Plug and Play Tips for Drivers Installing Hardware Working with Disk Devices Monitoring Disk Devices Working with and Managing Removable Media Display Devices Installing and Configuring Display Adapters Multimonitor Support in Windows 98 and Windows 2000 Mobile Computers PC Cards Power Management Troubleshooting Mobile Computers Network Interface Devices Other Devices IrDA (Infrared Data Association) Devices Wireless Devices USB Devices Working with Multiple CPUs Troubleshooting Multiprocessing Problems Review Questions Chapter 5 Managing Windows 2000 Local Resources: File Systems and Storage Devices 125 Basic Storage vs. Dynamic Storage Drive Configurations File Systems FAT and FAT32 NTFS Disk Management Upgrading Basic Drives to Dynamic Storage Creating Dynamic Storage Volumes Storage Object Properties Accessing Volumes: Drive Letters and Mount Points Storage Tools: Disk Cleanup System Tools: ScanDisk System Tools: Defragmentation Object Properties File Object Properties on a FAT/FAT32 Volume Folder Object Properties on a FAT/FAT32 Volume File Object Properties on an NTFS Volume Folder Object Properties on an NTFS Volume Mounted Volume Object Properties Managing Permissions Basics of Permissions Copying and Moving Objects Drive Quotas Sharing Resources Troubleshooting Permissions Problems Review Questions Chapter 6 Managing System Performance and Reliability 165 Monitoring System Resources Task Manager System Monitor Event Viewer Optimizing the Use of System Resources Detecting Bottlenecks Common Bottlenecks General Performance Improvements Task Scheduler Hardware Profiles Offline Files System Reliability and Recovery Issues Advanced Boot Options BOOT.INI Startup and Recovery Options Windows 2000 Backup Recovery Console Emergency Repair Process Recovering from Drive Failures Review Questions Chapter 7 Configuring and Troubleshooting the Desktop Environment 199 Configuring and Managing User Profiles Administrative Tools Control Panel Tools Accessibility Options Add/Remove Hardware Add/Remove Programs Administrative Tools Date/Time Display Fax Folder Options Fonts Game Controllers Internet Options Keyboard and Mouse Network and Dial-up Connections Phone and Modem Options Power Options Printers Regional Options Scanners and Cameras Scheduled Tasks Sounds and Multimedia System Environmental Variables Users and Passwords Administrative Tools in Detail Computer Management Licensing Services Faxing on Windows 2000 Application Support Troubleshooting Desktop Settings Review Questions Chapter 8 Managing Windows 2000 Network Resources 225 File and Folder Access Distributed File System Printing Installing Printers Printer Configuration Separator Page Print Job Management Network Printing Print Server Management Print Troubleshooting Web Printing Internet Resources Review Questions Chapter 9 Network Connections, Protocols, and Services 249 Windows 2000 Networking Protocols TCP/IP NWLink NetBEUI AppleTalk Data Link Control Windows 2000 Network Components and Concepts Windows 2000 Networking Additional Network Components The Network and Dial-up Connections Utility Binding Management TCP/IP: An Overview Internet Protocol Transmission Control Protocol Other TCP/IP Suite Components TCP/IP Configuration TCP/IP Options: IP Security TCP/IP Options: Filtering Terminal Services Review Questions Chapter 10 Managing Windows 2000 Security 287 Windows 2000 Security Overview Logon Authentication Authentication Services User Accounts Local User Accounts Domain User Accounts Default User Accounts Default User Groups Windows 2000 Security Policy Account Policies Local Policies Event Log Restricted Groups System Services Registry File System Public Key Policies IP Security Policies Other Group Policy Elements Encryption File System (EFS) General Security Troubleshooting Security Configuration Tool Set Review Questions Chapter 11 Working with Active Directory 317 Overview of Active Directory Domain Structure Global Catalog Domain Controllers and Replication Master Roles Installing and Maintaining AD Installing AD Creating Sites Creating Subnets Creating Site Links Creating Site Link Bridges Creating Connection Objects Creating Global Catalog Servers Moving Server Objects between Sites Transferring Operations Master Roles Implementing Organizational Unit Structure Backing up and Restoring AD Backing up AD Restoring AD Review Questions Chapter 12 Working with DNS 357 History and Overview of DNS Domains Primary and Secondary Master Name Servers Zone Transfers DNS Queries Records How DNS Works Caching Servers Internet Standards DNS on Windows 2000 Installing, Configuring, and Troubleshooting DNS Installing the Windows 2000 DNS Server Service Configuring a Root Name Server Configuring DNS Zones Configuring a Windows 2000 DNS Caching Server Configuring DNS Clients Configuring Zones for Dynamic Updates Testing the DNS Server Service Creating DNS Resource Records Manually Installing and Configuring DNS for Active Directory Integrating an AD DNS with a Non-AD DNS Configuring Dynamic Updates in AD Zones Review Questions Chapter 13 The Dynamic Host Configuration Protocol (DHCP) 391 Overview and History of DHCP BOOTP DHCP DHCP in Windows 2000 Integrating DHCP with DNS Rogue DHCP Server Detection Expanded Scope Support Option Classes Automatic Private IP Addressing Monitoring and Reporting Installing and Maintaining DHCP Installing the DHCP Server Service Working with DHCP Scopes, Superscopes, and Multicast Scopes Managing and Monitoring DHCP Review Questions Chapter 14 Working with Remote Access 423 Remote Access Overview Key Features RAS vs. Remote Control Remote Access Configuration The Dial-up to Private Network Connection Object The Dial-up to the Internet Connection Object The Connect to a Private Network through the Internet Connection Object The Accept Incoming Connections Connection Object The Connect Directly to Another Computer Connection Object Internet Connection Sharing Phone and Modem Options Internet Access via Windows 2000 IIS and PWS Internet Explorer 5.0 Outlook Express FTP Client Telnet Client Routing and Remote Access Troubleshooting Remote Access Review Questions Chapter 15 Working with WINS 455 History of WINS NetBIOS and NetBEUI NetBIOS Name Resolution LMHOSTS Overview of WINS New Features in WINS for Windows 2000 WINS Node Types WINS Name Registration WINS Name Resolution WINS Server Sizing and Placement WINS Installation and Configuration Configuring WINS Replication Configuring NetBIOS Name Resolution Monitoring and Managing WINS Compacting the WINS Database Backing up the WINS Database Review Questions Chapter 16 IP Routing with Windows 2000 487 IP Routing Protocols RIP OSPF Other IP Routing Protocols and Related Protocols Static Routes and Routing Tables Demand-Dial Routing IP Routing, Border Routing, and Internal Routing PING ROUTE TRACERT PATHPING.EXE ROUTEMON Going Forward Review Questions Chapter 17 Working with Network Address Translation (NAT) 509 Network Address Translation Overview NAT and Internet Connection Sharing NAT and Routing and Remote Access Troubleshooting NAT Review Questions Chapter 18 Working with Certificate Services 527 History and Overview of Certificate Services Certificate Services Overview The Process Digital Certificates Private and Public Keys Encryption Public Key Infrastructure (PKI) Internet Services: A Real-World Example Installing Certificate Services Configuring Certificate Services Managing Certificate Services Creating Certificates Issuing Certificates Revoking Certificates Recovery Keys Troubleshooting Certificate Services Review Questions Chapter 19 Working with Change and Configuration Management 551 Group Policy Overview Creating Group Policy Objects How GPOs Are Applied Delegation of GPO Management Monitoring Group Policy Troubleshooting GPOs Best Uses for GPOs Using Group Policy to Control User Environments Control through Administrative Templates Group Policy Scripting Using Group Policy to Control Software Review Questions Chapter 20 Tuning and Optimizing AD Components 575 AD Object Management Creating and Managing Accounts Moving AD Objects Resource Publishing in AD Using Scripting to Manage AD Objects Finding Objects in AD AD Objects and Access Control Delegating Administrative Control of AD Objects Monitoring and Troubleshooting Windows 2000 Performance Event Viewer Performance Console Monitoring and Troubleshooting AD Components Monitoring and Troubleshooting AD Replication Best Practices Review Questions Chapter 21 Managing Active Directory Security Solutions 615 Security Configuration in Active Directory Applying and Configuring Security Policies Account Policies Event Log Policies File System Policies IP Security Policies on Active Directory Local Policies Public Key Policies Registry Policies Restricted Groups Policies Systems Services Policies Security Template Using the Security Configuration and Analysis Tool Implementing an Audit Policy Examining Security Events Review Questions Appendix A Answers to Review Questions 651 Appendix B Windows 2000 Certification Program Overview 677 Index 691