Microsoft Windows 2000 – Active Directory Design: Directory Services Infrastructure

This course is included in our On-demand training solution.


To provide an overview of the Active Directory design process and describe the main design considerations when planning network services and security

Target Audience

Students preparing for Microsoft exam 70-219; personnel in medium to very large computing environments that use the Windows 2000 network operating system


Experience in designing network infrastructures in environments that support 200-26,000+ users and 5-150+ physical locations using typical network services and applications including file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and web hosting

Expected Duration

240 min.

Course Objectives

Microsoft Windows 2000 – Active Directory Design: Directory Services Infrastructure

  • identify the components and structure of the Active Directory.
  • recognize how to assemble a planning team as part of the Active Directory design cycle, define the functions assigned to team members, and identify the project risks that can occur during the design process.
  • define a functional specification, state the design components necessary for planning the Active Directory infrastructure including effective delegation of administrative control, the development of an effective Group Policy strategy, and the number of domains required.
  • identify steps in the Active Directory design process, and identify the design decisions appropriate to specific networks.
  • state how to effectively organize domains, and recognize how databases are distributed over the network to make up the Active Directory infrastructure.
  • determine when to plan a single or multiple domain structure and identify the characteristics of each structure, recognize the function of the root domain and dedicated domain, and identify how resources are accessed in multiple domains.
  • recognize the components and characteristics of a domain tree hierarchy, forests, and multiple-forest structures.
  • identify the most suitable domain structure for various scenarios.
  • define the function of organizational units (OUs) and administration models, recognize how to delegate administration and assign group permissions, and identify best practices for creating an OU structure.
  • define the two principal types of groups, determine the type of security group, nesting of groups, and group scope needed for your OU design, and distinguish between global and domain local groups.
  • plan an OU structure for a domain identifying container objects and building the hierarchy.
  • define the steps involved in the planning process for upgrading a network, recognize the purpose of developing a recovery strategy, state the guidelines needed to avoid upgrade problems, and identify the different components of a network that need to be upgraded.
  • recognize how to assign DNS and root domain names, and identify changes that can impact design of the Active Directory.
  • identify guidelines to follow when designing a DNS naming strategy, recognize the functions of firewalls and proxy servers for assigning multiple domain names for internal and external networks, and state how to integrate the Active Directory and DNS naming strategies.
  • define the characteristics of the DNS and Active Directory namespace, identify the authoritative DNS server for DNS zones, and recognize how to integrate the DNS service with the DHCP and WINS services.
  • plan a DNS strategy by placing servers on the network and labeling the domains that servers control.