70-294 Resources

royal

Hope these links help people easily find the information they need to gain a better understanding of the material presented on the 70-294 exam. Good luck to everyone planning to take this exam in the future!

Group Policy
http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx (Processing)
http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx (Processing
http://www.microsoft.com/events/series/grouppolicy.mspx (Webcasts)
http://technet2.microsoft.com/WindowsServer/en/library/eb0042e3-699b-4c49-abcc-e3526dbecc0e1033.mspx (How Core Group Policy Works)
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/gpfeat.mspx (Understanding the Group Policy Feature Set)
http://www.microsoft.com/technet/security/prodtech/windowsserver2003/w2003hg/s3sgch03.mspx (Understand Default Domain Policy)
http://technet2.microsoft.com/WindowsServer/en/library/dfe7b84d-8727-4561-9767-ccb47a5bf9ba1033.mspx (Troubleshooting)
http://technet2.microsoft.com/windowsserver/en/library/b7c2efc1-207e-4089-8490-0d002daf8b6c1033.mspx?mfr=true (Software Installation)

Active Directory
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/admng.mspx (Basic Guide to Manage AD)
http://technet2.microsoft.com/windowsserver/en/technologies/featured/ad/default.mspx (Home Page for AD)
http://technet2.microsoft.com/WindowsServer/en/library/4a589ca2-b572-48cd-94d2-7d5b0c817f411033.mspx (Functional Levels)
http://technet2.microsoft.com/WindowsServer/en/library/20c3f33b-896f-41b0-81ad-e00854c26fa31033.mspx (Functional Levels Technical Reference)
http://technet2.microsoft.com/WindowsServer/en/library/83c063fb-998b-47ee-bf7c-d2ad2ae70a541033.mspx (Deploying Forest Root Domain)
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/adsrv.mspx (Sites and Services)
http://technet2.microsoft.com/WindowsServer/en/Library/aad1169a-f0d2-47d5-b0ea-989081ce62be1033.mspx (Rename a DC)
http://www.microsoft.com/technet/downloads/winsrvr/domainrename.mspx (Rename Domain)
http://support.microsoft.com/kb/247811 (How DCs are located)
http://technet2.microsoft.com/WindowsServer/en/library/9a353810-8e3a-4023-a557-db1a686d8ec81033.mspx (FSMO Roles)
http://technet2.microsoft.com/WindowsServer/en/library/99f53498-ce25-4ab4-b476-7aa6e1997d641033.mspx (Transfer FSMO Roles using GUI and CMD)
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part1/adogd03.mspx (Authoritative/Non-Authoritative Restore)
http://support.microsoft.com/kb/255504 (Transferring/Siezing FSMO Roles)
http://technet2.microsoft.com/WindowsServer/en/library/108124dd-31b1-4c2c-9421-6adbc1ebceca1033.mspx (Domains and Trusts Tools)
http://technet2.microsoft.com/WindowsServer/en/library/f5c70774-25cd-4481-8b7a-3d65c86e69b11033.mspx (Domain and Forest Trusts)
http://computerperformance.co.uk/w2k3/utilities/windows_dcdiag.htm (DCDiag)
http://technet.microsoft.com/en-us/library/cc755804.aspx (Service Principle Names)
http://technet.microsoft.com/en-us/library/cc772815.aspx (Kerberos)

Active Directory Replication
http://technet2.microsoft.com/WindowsServer/en/library/c238f32b-4400-4a0c-b4fb-7b0febecfc731033.mspx (How Active Directory Replication Topology Works)
http://technet2.microsoft.com/windowsserver/en/library/1465d773-b763-45ec-b971-c23cdc27400e1033.mspx?mfr=true (How the Active Directory Replication Model Works)
http://technet2.microsoft.com/WindowsServer/en/library/08eb226b-0192-4c05-b919-c9311bafae351033.mspx (Information on upgrading from 2000 to 2003 (The intrasite replication section clarifies how exactly 2000 vs 2003 timing works which is good to know)
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx#EWC (Active Directory Replication over Firewalls)

Schema
http://technet2.microsoft.com/WindowsServer/en/library/8c76ff67-9e9d-4fc7-bfac-ffedee8a04d41033.mspx (Install Schema MMC - Note that there is an error in the doc. It's regsvr32 schmmgmt.dll, not regsvr32schmmgmt.dll)
http://technet2.microsoft.com/WindowsServer/en/library/97cae647-d996-48ff-b478-c96193abeadb1033.mspx (Schema Technical Reference)

Global Catalogs/Universal Group Membership Caching
http://technet2.microsoft.com/windowsserver/en/library/0d34c3b9-499b-41d3-a55f-527ce61e78581033.mspx?mfr=true (GC Technical Reference)
http://technet2.microsoft.com/WindowsServer/en/library/0e74916d-28d7-4cdd-8dce-89c824622fcd1033.mspx (GCs and Sites)
http://technet2.microsoft.com/WindowsServer/en/library/0e4d2466-68e8-40d8-8c72-099f8bc259ff1033.mspx (Planning GC Placement)
http://technet2.microsoft.com/WindowsServer/en/library/8ac658b0-199c-47df-ac2b-ef9cb56fa7f01033.mspx (GC Replication)
http://technet2.microsoft.com/WindowsServer/en/library/24311c41-d2a1-4e72-a54f-150483fa885a1033.mspx (What is the GC?)

Miscellaneous
http://support.microsoft.com/kb/216498/en-us (Cleaning up an unsuccessful DC demotion)
http://support.microsoft.com/default.aspx/kb/832017/en-us (Service/Port Requirements)
http://technet2.microsoft.com/WindowsServer/en/library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx (Group Scopes)

dimama

Great stuff!

Thanks a thousands times!!!!!!!!!!!!!1

hanakuin

Once again icroyal excellent resources!!

geekie

Nice post Icroyal! Maybe it should be stickied..?

royal

I added a white paper to the original post entitled, "How the Active Directory Replication Model Works." It's a very good white paper which discusses timings, notifications, pulling information, Active Directory Partitions, replicating linked/multi-linked variables, and much more.

LukeQuake

Thanks for this royal, the links have been extremely helpful

Regards,

Luke

dstock7337

Thanks Royal!

Myrdyn98

Any links for info on software deployment with GPO (hopefully covering "Assign on Demand" which I've never seen before)?

royal

Myrdyn98 wrote:

Any links for info on software deployment with GPO (hopefully covering "Assign on Demand" which I've never seen before)?

Added the following link:
http://technet2.microsoft.com/windowsserver/en/library/b7c2efc1-207e-4089-8490-0d002daf8b6c1033.mspx?mfr=true

Chippykiller

Amazing links to the resources thanks a million!

royal

Added two new links:
http://technet.microsoft.com/en-us/library/cc755804.aspx (Service Principle Names)
http://technet.microsoft.com/en-us/library/cc772815.aspx (Kerberos)

The Service Principle Name article isn't that long of an article and talks about SPNs. I've been working with Kerberos Constrained Delegation with ISA at my current client so I've been re-reading Kerberos/SPN material.

To summarize my takeaway from the SPN article:

The jist of it is that the SPN has to be set on the account object that is used to start the service. For local system accounts, the SPN is registered on the computer account in AD. If it uses a Domain Account or a service account in AD, the SPN is registered on that domain account. SPNs can only be registered by local system accounts or domain admin accounts. So if you set something like SQL to use a domain user account in AD, you have to manually register the SPN.

And when a client tries to connect to a server, such as Outlook trying to connect to Exchange, the client will compose an SPN for that service and present it to a DC/KDC which will search the directory for that SPN and then the KDC proceeds to start the whole ticket granting process for Kerberos.