NE-6421B

Configuring and Troubleshooting a Windows Server 2008 Network

Infrastructure
Summary
Duration
5 Days

Vendor
Microsoft

Audience
IT Professionals

Published
24 June 2011

Level
200

Technology
Windows Server 2008

Delivery Method
Instructor-led (Classroom)

Software Assurance Training Voucher

Yes

Introduction

This five-day instructor-led course provides students with the knowledge and skills to configure and troubleshoot Windows
Server 2008 and Windows Server 2008 R2 Sp1 Network Infrastructures. It will cover networking technologies most commonly
used with Windows Server 2008 and Windows Server 2008 R2 Sp1 such as DNS, DHCP, IPv4 and IPv6 network addressing,
Network Policy server and Network Access Protection and configuring secure network access. It also covers fault tolerant storage
technologies, Network Storage and routing and remote access, monitoring and compliance updates as well as other relevant
technologies.

Prerequisites
Before attending this course, students must have working knowledge of:

You must have an intermediate understanding of Windows Server operating systems such as Windows Server 2003,
Windows Server 2008 or Windows Server 2008 R2 Sp1 and Windows client operating systems such as Windows Vista
or Windows 7. Client operating system knowledge equivalent to the below certifications would be of benefit.

You should understand how TCP/IP functions and have a basic understanding of addressing, name resolution
(Domain Name System [DNS]/Windows Internet Name Service [WINS]), connection methods (wired, wireless,
virtual private network [VPN]).

You should have an awareness of security best practices such as understanding file system permissions,
authentication methods, workstation, and server hardening methods, and so forth.

Basic knowledge of Active Directory would also be of benefit.

Students who attend this training can meet the prerequisites by attending the following courses, or obtaining equivalent
knowledge and skills:

Course 6420B: Fundamentals of Windows Server 2008

At Course Completion
After completing this course, students will be able to:

Plan and configure an IPv4 network infrastructure.

Implement DHCP within their organization.
Configure and troubleshoot DNS.
Configure, transition to, and troubleshoot IPv6.
Configure and troubleshoot Routing and Remote Access.
Install, configure, and troubleshoot the Network Policy Server Role service.
Implement Network Access Protection.
Implement security features within Windows Server 2008 and Windows Server 2008 R2.
Implement security features within Windows Server 2008 and Windows Server 2008 R2 that help to secure network
communications.
Configure and troubleshot file and print services.
Enable and configure services to optimize branch office data access.
Control and monitor network storage.
Recover data on Windows Server 2008 and Windows Server 2008 R2 servers.
Monitor Windows Server 2008 and Windows Server R2 network infrastructure services.

Course Content

Module 1: Planning and Configuring

implement an IPv4 addressing scheme,

IPv4

determine which name services to deploy,

Implementing an IPv4

This module explains how to deploy and

and troubleshoot network-related

configure networking services in your

problems.

Resolution Services in an

organization. This module explains how to

Lessons

IPv4 Network Infrastructure

Network Infrastructure

Overview of Name

Configuring and

Configure DHCP scopes.

rapid growth of new network-aware

Troubleshooting IPv4

Configure DHCP options.

devices.

Manage a DHCP database.

Lessons

Monitor and troubleshoot the

Overview of IPv6

DHCP Server Role.

IPv6 Addressing

Configure security the DHCP

Coexistence with IPv6

Server Role.

IPv6 Transition Technologies

Transitioning from IPv4 to

Lab : Planning and Configuring IPv4

Selecting an IPv4 Addressing

scheme for branch offices

Implementing and Verifying

IPv4 in the branch office

After completing this module, students

Module 3: Configuring and

will be able to:

Troubleshooting DNS

IPv6

Plan an IPv4 addressing

This module introduces you to Domain

scheme.

Name System (DNS), which is the

Determine which name

foundation name service in Windows

services you must deploy.

Server 2008 R2. It is vital that you

Configure and troubleshoot

understand how to deploy, configure,

Router to Enable

an IPv4 network.

manage, and troubleshoot this critical

Communication Between an

Module 2: Configuring and

service.

IPv4 Network and an IPv6

Troubleshooting DHCP

Lessons

This module introduces you to Dynamic

Host Configuration Protocol (DHCP), which

plays an important role in the Windows

Server 2008 R2 infrastructure. It is the

Lab : Configuring an ISATAP Router

Configuring a New IPv6

Network and Client

Configuring an ISATAP

Network
Installing the DNS Server

Lab : Converting the Network to Native

Role

IPv6

Configuring the DNS Server

Role

Transitioning to a Native
IPv6 Network

primary means of distributing important

Configuring DNS Zones

After completing this module, students

network configuration information to

Configuring DNS Zone

will be able to:

network clients, and it provides

Transfers

configuration information to other

network-enabled services, including

Troubleshooting DNS

Windows Deployment Services (WDS) and

Lab : Configuring and Troubleshooting

Network Access Protection (NAP). To

DNS

support and troubleshoot a Windows

Lessons

benefits of IPv6.

Implement IPv6 addressing.

Implement an IPv6

Selecting a DNS

Configuration

deploy, configure, and troubleshoot the

DHCP Server Role.

Describe and select a

suitable IPv6 transition

Deploying and Configuring

solution.

DNS

Transition from IPv4 to IPv6.

Troubleshooting DNS

Troubleshoot an IPv6-based

After completing this module, students

Overview of the DHCP

Describe the features and

coexistence strategy.

Server-based network infrastructure, it is

important that you understand how to

Managing and

will be able to:

network.
Module 5: Configuring and

Server Role

Install the DNS server role.

Troubleshooting Routing and Remote

Configuring DHCP Scopes

Configure the DNS server

Access

Configuring DHCP Options

role.

To support your organizations distributed

Managing a DHCP Database

Create and configure DNS

workforce, you must become familiar with

Monitoring and

zones.

technologies that enable remote users to

Troubleshooting DHCP

Configure zone transfers.

connect to your organizations network

Configuring DHCP Security

Manage and troubleshoot

infrastructure. These technologies include

DNS.

virtual private networks (VPNs) and

Lab : Configuring and Troubleshooting the

DHCP Server Role

Module 4: Configuring and

DirectAccess. It is important that you

Selecting a Suitable DHCP

Troubleshooting IPv6 TCP/IP

understand how to configure and secure

Configuration

This module introduces you to IPv6, a

your remote access clients by using

Implementing DHCP

technology that will help ensure that the

network policies. This module explores

Reconfiguring DHCP in the

Internet can support a growing user base

these remote access technologies.

Head Office

and the increasingly large number of IP-

Lessons

Testing the Configuration

enabled devices. The current Internet

Configuring Network Access

Troubleshooting DHCP

Protocol Version 4 (IPv4) has served as

Configuring VPN Access

Issues

the underlying Internet protocol for

Overview of Network Policies

After completing this module, students

almost thirty years. Its robustness,

Overview of the Connection

will be able to:

scalability, and limited feature set is now

Describe the function of the

challenged by the growing need for new

DHCP Server Role.

IP addresses, due in large part to the

Manager Administration Kit

Troubleshooting Routing and

Remote Access

Configuring DirectAccess

Monitoring and

Lab : Configuring and Managing Network

Troubleshooting a Network

Access

Policy Server

Lab : Configuring and Managing Network

Windows Servers

Policy Server

Security is an essential consideration for

Installing and Configuring

networking with Windows Server 2008. In

Configuring a Custom

the Network Policy Server

this module, you will learn how to

Network Policy

Role Service

implement various methods to increase

Create and distribute a

Configuring a RADIUS Client

security. Windows Firewall with Advanced

CMAK Profile

Configuring Certificate Auto-

Security is one of the features in Windows

Enrollment

Server 2008 that is used to increase

Configuring and Testing the

security. You can also use Windows

VPN

Server Update Services to ensure that

DirectAccess

Configure the AD DS Domain

Controller and DNS

After completing this module, students

approved security updates are applied to

Configure the PKI

will be able to:

servers in a timely way.

Environment

Install and configure NPS.

Configure the DirectAccess

Configure RADIUS clients

Windows Security Overview

and servers.

Configuring Windows

Clients and Test Intranet

Access

Configure the DirectAccess

Server

NAP.
Module 8: Increasing Security for

Remote Access as a VPN

Lab : Configuring and Managing

Monitor and troubleshoot

Configuring Routing and

Remote Access Solution

Describe NPS authentication

Firewall with Advanced

methods.

Verify DirectAccess
Functionality

Lessons

Monitor and troubleshoot

Security

NPS.

Deploying Updates with

Windows Server Update

Module 7: Implementing Network

Services

After completing this module, students

Access Protection

Lab : Increasing Security for Windows

will be able to:

In this module, you will learn about

Servers

Configure network access.

Network Access Protection (NAP). NAP

Create and configure a VPN

enables you to create customized health-

solution.

requirement policies to validate computer

Describe the role of network

health before allowing access or

After completing this module, students

policies.

communication. NAP also automatically

will be able to:

Use the Connection Manager

updates compliant computers to ensure

Administration Kit to create

on-going compliance and can limit the

and configure client

access of noncompliant computers to a

connection profiles.

restricted network until they become

Troubleshoot routing and

compliant.

remote access.

Lessons

Implement DirectAccess.

Module 6: Installing, Configuring, and

Deploying a Windows
Firewall Rule

Implementing WSUS

Describe a process for

increasing the security of
Windows Server 2008.

Configure Windows Firewall

with Advanced Security.

Overview of Network Access

Describe Windows Server

Update Services and how to

Protection

use it.

Troubleshooting the Network Policy

How NAP Works

Module 9: Increasing Security for

Server Role Service

Configuring NAP

Network Communication

NPS provides support for the Remote

Monitoring and

Internet Protocol security (IPsec) is a

Troubleshooting NAP

framework of open standards for

Authentication Dial-In User Service

(RADIUS) protocol, and can be configured

Lab : Implementing NAP into a VPN

protecting communications over IP

as a RADIUS server or proxy. Additionally,

Remote Access Solution

networks through cryptographic security

NPS provides functionality that is essential

for the implementation of Network Access

Protection (NAP). This module explains

how to install, configure, and troubleshoot

Configuring NAP

services. IPsec supports network-level

Components

peer authentication, data-origin

Configuring Client Settings

authentication, data integrity, data

to Support NAP

confidentiality (encryption), and replay

NPS.

After completing this module, students

protection. The Microsoft IPsec

Lessons

will be able to:

implementation is based on standards

Installing and Configuring a

Network Policy Server

Configuring RADIUS Clients

and Servers

NPS Authentication Methods

Describe how NAP can help

that the Internet Engineering Task Force

protect your network.

(IETF) IPsec working group developed. In

Describe the various NAP

this module, you will learn how to

enforcement processes.

implement, configure, and troubleshoot

Configure NAP.

IPsec.
Lessons

Overview of IPsec

Configuring Connection

Configuring NAP with IPsec

will be able to:

DFS replication.

Discuss how to configure

BranchCache.

Module 12: Controlling and

share security.

Monitoring Network Storage

Explain how to encrypt

Network storage for users is a finite

network files with EFS.

resource that must be managed

Describe how to encrypt

appropriately to ensure that it remains

partitions with BitLocker.

available for all users. If network storage

Discuss how to configure and

is not monitored and managed, it can

Configuring IPsec to

troubleshoot network

become filled with irrelevant data, such as

Authenticate Computers

printing.

personal music or movies. Irrelevant data

Monitoring and

Communication

Selecting a Network Security

Configuration

Explain how to configure

Describe how to manage file

Lab : Increasing Security for Network

Printer Pool
After completing this module, students

Troubleshooting IPsec

Creating and Configuring a

Security Rules
Enforcement

Module 11: Optimizing Data Access

increases network storage costs and in

After completing this module, students

for Branch Offices

some cases can prevent useful data from

will be able to:

Many organizations maintain a large

placement on the network storage. In this

Describe when and how to

number of file resources that need to be

module, you will learn how to monitor and

use IPsec.

organized and made highly available to

manage network storage.

Configure Connection

users. These file resources are often

Lessons

Security rules.

stored on servers and provided to users

Monitoring Network Storage

Configure IPsec with NAP

who are distributed geographically in

Controlling Network Storage

Enforcement.

widespread locations. In this module, you

Describe how to monitor and

will learn how to provide efficient access

troubleshoot IPsec.

to network resources with minimal traffic

Testing IPsec Authentication

Utilization

Managing File Types on

Network Storage

Module 10: Configuring and

over a WAN link.

Lab : Controlling and Monitoring Network

Troubleshooting Network File and

Lessons

Storage

Print Services

Branch Office Data Access

Configuring FSRM Quotas

File and print services are some of the

DFS Overview

Configuring File Screening

most commonly implemented network

Overview of DFS

Configuring File Classification

services for end users. Unlike

infrastructure services like DNS, file and
print services are highly visible to the end
users. In this module, you will learn how
to configure and troubleshoot file and

Namespaces
Configuring DFS Replication

After completing this module, students

Configuring BranchCache

will be able to:

Lab : Implementing DFS

print services to provide high quality

service to end users. In addition, you will

are located in file shares.

Lessons

quotas by using FSRM.

Describe how to implement

file screening, classification
management, and file

Configuring and

Configuration Tasks for

management tasks by using

Troubleshooting File Shares

BranchCache

Encrypting Network Files

Encrypting Partitions with

Configuring and

FSRM.

Configuring BranchCache

Module 13: Recovering Network Data

Clients

and Servers

Configuring BranchCache on

This module explains how to recover

the Branch Server

network data and servers. There are a

Monitoring BranchCache

variety of scenarios where a network data

Troubleshooting Network

After completing this module, students

or a server that provides networks

Printing

will be able to:

services can be lost. Volume shadow

Describe the challenges

copies can be used to restore previous

experienced when providing

versions of files when a file is accidentally

Creating and Configuring a

data access to branch

deleted or modified on a computer that is

File Share

offices.

running Windows Server 2008. Windows

Identify the basic

Server Backup can be used to back up

components of DFS.

and restore data files or an entire server.

Describe DFS namespaces.

Lessons

Network File and Print Services

Configuring DFS Replication

Explain how to manage

Performing Initial

Lab : Configuring and Troubleshooting

FSRM.

Lab : Implementing BranchCache

BitLocker

Configuring the Required

Describe how to monitor

network storage by using

Namespace

with EFS

Installing the DFS Role

Service

see how both EFS and BitLocker can be

used to increase the security of files that

and File Management

Encrypting and Recovering

Files

Recovering Network Data

Module 14: Monitoring Windows

with Volume Shadow Copies

Server 2008 Network Infrastructure

Monitoring Tools

Recovering Network Data

Servers

Using Performance Monitor

and Servers with Windows

When a system failure or an event that

Monitoring Event Logs

Server Backup

affects system performance occurs, you

Lab : Monitoring Windows Server 2008

Lab : Recovering Network Data and

need to be able to repair the problem or

Network Infrastructure Servers

Servers

resolve the issue quickly and efficiently.

Configuring Shadow Copies

With so many variables and possibilities in

Configuring a Scheduled

the modern network environment, the

Backup

ability to determine the root cause quickly

Lessons

Establishing a Performance
Baseline

Identifying the Source of a

Performance Problem

After completing this module, students

often depends on having an effective

will be able to:

performance monitoring methodology and

After completing this module, students

Describe how to configure

toolset. In this module, you will learn to

will be able to:

and use volume shadow

use performance-monitoring tools to

copies.

identify components that require

Describe how to configure

additional tuning and troubleshooting. By

and use Windows Server

identifying components that require

Backup.

additional tuning, you can improve the

efficiency of your servers.

Centralizing Events Logs

Describe monitoring tools for

Windows Server 2008 R2.

Describe how to use

performance monitor.

Describe how to monitor

event logs.

Associated Certifications & Exam

This course prepares students to write Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring, the only
course requirement to achieve the MCTS: Windows Server 2008 Network Infrastructure, Configuring certification.
On successful completion of this course students will receive a Torque IT attendance certificate.