WIN700 - Windows Active Directory Services

Outline info
Last revision date 2018-07-20 12:02:24.322
Last review date 2018-07-20 12:03:06.939

Subject Title
Windows Active Directory Services

Subject Description
This subject provides students with the knowledge and skills necessary to install, configure, and administer Windows server 2008 Active Directory. Topics such as Implementing DNS to support Active Directory, Creating a Windows 2008 Domain, Publishing Resources in Active Directory, Creating and managing Trees and Forests will be covered through lecture and hands-on exercises. The subject also focuses on the tasks required to implement Group Policy to centrally manage large numbers of users and computers.

Credit Status
1 Credit is the CTY Program.

Learning Outcomes
Upon successful completion of this subject the student will be able to:

1. Configure and manage users' desktop environments by using Group Policy

2. Implement Group Policy to centrally manage users and computers in a Windows Server network

3. Publish network resources in Active Directory to allow users to locate the resources and to allow centralized management of those resources

4. Delegate administrative control of Active Directory objects to decentralize administrative tasks in a Windows Server 2008 network

5. Set up and administer domain user accounts and groups to enable users to gain access to resources in a Windows Server 2008 network

6. Configure the Domain Name System (DNS) Server service on a computer running Windows Server 2008 to support Active Directory

7. Implement an Active Directory infrastructure that is based on a directory services design provided by an enterprise architect

8. Manage and troubleshoot Active Directory replication within a site and between sites

9. Deploy and manage software by using Group Policy

10. Manage operations masters

11. Manage and restore the Active Directory database

12. Describe the logical and physical components of Windows Server 2008 Active Directory

13. Create and manage trees and forests in a Windows Server 2008 network, and administer forest-wide resources

14. Create a Windows Server 2008 domain by installing and configuring Active Directory, and implement an organizational unit (OU) structure

Cheating and Plagiarism
Each student should be aware of the College's policy regarding Cheating and Plagiarism. Seneca's Academic Policy will be strictly enforced.

To support academic honesty at Seneca College, all work submitted by students may be reviewed for authenticity and originality, utilizing software tools and third party services. Please visit the Academic Honesty site on for further information regarding cheating and plagiarism policies and procedures.

All students and employees have the right to study and work in an environment that is free from discrimination and/or harassment. Language or activities that defeat this objective violate the College Policy on Discrimination/Harassment and shall not be tolerated. Information and assistance are available from the Student Conduct Office at

Accommodation for Students with Disabilities
The College will provide reasonable accommodation to students with disabilities in order to promote academic success. If you require accommodation, contact the Counselling and Disabilities Services Office at ext. 22900 to initiate the process for documenting, assessing and implementing your individual accommodation needs.


Topic Outline

Introduction to Active Directory in Windows Server 2008 10%

  • Concepts of Active Directory in Windows Server 2008
  • Active Directory Logical and Physical Structure
  • Active Directory Schema
  • Understand DNS in an Active Directory environment
  • Understand and Assess Domain and Forest functional levels according to
    the needs of an organization
  • Review the trust models used by Active Directory
Installation 5%
  • Exploring Active Directory Domain Membership
  • Installing Active Directory
Implementing Active Directory 10%
  • Introduction to the Role of DNS in Active Directory
  • Requirements for installing Active Directory
  • Create a Forest and Domain Structure
  • Create and Configure an Application Data Partition
  • Modify the Active Directory Schema
  • Raise Domain and Forest functional levels
  • Establish and Manage trust relationships
  • Create or Delete a User Principal Name (UPN)
Working with Active Directory Sites 5%
  • Define and Manage sites and links
  • Use Active Directory Sites and Services to configure replication
  • Differences between Intersite and Intrasite replication
  • Optimize replication by configuring bridgehead servers
  • Monitor replication using Replmon, Dcdiag, and Repadmin
Global Catalog and Flexible Single Master Operations (FSMO) roles 5%
  • Understand the global catalog and its role in Active Directory Placing, adding,
    and removing global catalog servers
  • Understand and configure universal group caching
  • Describe forest and domain FSMO roles
  • Transfer and seize FSMO role assignments
Active Directory Administration 10%
  • Describe local, domain, and built in user accounts
  • Understand security and distribution groups and their use in Active Directory
  • Plan and implement local, global, domain local, and universal groups
  • Plan and implement group nesting
  • Use scripting tools such as Dsadd, CSVDE, LDIFDE, and VBScript to modify,
    create, and delete multiple users and groups
Security Planning and Administrative Delegation 5%
  • Object Security in Active Directory
  • Delegating Administrative Control of Active Directory Objects
  • Use the Run As program to perform administrative tasks
  • Plan an OU strategy
  • Create ou's, delegate control of an OU, and move objects between OU's
Introduction to Group Policy 10%
  • Explain Group Policy
  • Describe Group Policy benefits and Group Policy Objects (GPO's)
  • Describe local and nonlocal group policies
  • Examine the Default Domain Policy and the Default Domain Controllers Policy
  • Use Group Policy Object Editor
  • Explain Group Policy processing at startup, user logon, and default behavior
  • Control inheritance of group policies
  • Computer Loopback setting
  • Analyze a set policies to determine the effective policies that apply to an object
Configuring the User and Computer Environment using Group Policy 5%
  • Understand and apply security settings to users and computers using group policy
  • Benefits of folder redirection and offline files
  • Understand and implement Disk Quotas using Group Policy
  • Policy refresh process and using Gpupdate to force the refresh of a policy
Using Group Policy to Manage Software 5%
  • Windows Installer
  • Deploying Software
  • Configuring Software Deployment
  • Understand the differences between assigning and publishing software applications
  • Create software categories
  • Define and configure software restriction policies
Planning a Group Policy Management and Implementation Strategy 10%
  • Filter the scope of a GPO using permissions and Windows Management Instrumentation (WMI) filters
  • Describe the Group Policy Management Console, its features and benefits
  • Using RSoP and GPResult to determine and troubleshoot policy settings
  • Simulate Group Policy results
  • Delegate control of a GPO
Active Directory Maintenance, Troubleshooting, and Disaster Recovery 10%
  • Define the procedures used for Active Directory backup and restore
  • Explain the primary, normal, and authoritative restore process
  • Explain the offline and online defragmentation process
  • Implement guidelines and procedures for monitoring AD
  • Use Event Viewer and System Monitor to monitor AD File
  • Replication services, and configure alerts
Upgrading and Migrating to Windows Server 2008 5%
  • Explain the difference between a migration and an upgrade
  • Define available upgrade and migration paths
Appendix A: A DNS overview 5%

Mode of Instruction
Classroom lectures and discussions are supplemented by lab sessions with the instructor, reinforced
by assigned readings and assignments between classes.

It is the student's responsibility to save documents, articles and notes that the instructor has provided on BlackBoard or in class. Students will not be able to access BlackBoard as of the last day of the student’s class.

Prescribed Texts
MCTS Guide to Configuring Microsoft® Windows Server® 2008 Active Directory (Exam #70-640) , 1st Edition
Author: Greg Tomsho
Publisher; Course Technology
ISBN: 9781423902355

Promotion Policy

Grading Policy
A+ 90%  to  100%
A 80%  to  89%
B+ 75%  to  79%
B 70%  to  74%
C+ 65%  to  69%
C 60%  to  64%
D+ 55%  to  59%
D 50%  to  54%
F 0%    to  49% (Not a Pass)
EXC Excellent
SAT Satisfactory
UNSAT Unsatisfactory

For further information, see a copy of the Academic Policy, available online ( or at Seneca's Registrar's Offices.

Modes of Evaluation
Since this is a professional credit subject, marking standards reinforce professional practice by demanding legible, tidy work. Written materials should be well organized and grammatically correct, with proper spelling and punctuation.


  • Students must retain a duplicate of all assignments.
  • Computer assignments should be documented to the instructor's standards.
  • Assignments must be handed in on the scheduled due date. Late assignments are penalized.
  • For particulars, please obtain standards, dates, etc. from your instructor.

Absenteeism and Tests
  • Students should be aware that absenteeism will impact on their ability to achieve satisfactory grades.
  • If you miss a test, you must provide the reason in writing to the instructor prior to the next scheduled class. If your reason is accepted, you will be permitted to write a make-up test. Otherwise, you will be given a zero for the test. You must submit an original doctor’s certificate identifying the date, length of time of expected absence and the specific reason for your absence, or other appropriate documentation.

Term Work and Final Exam
  • Students must attain a combined grade of at least 50% on term work and the final exam. Students must pass the final exam in order to pass the subject
  • For further information on evaluation and academic standing, see a copy of the Academic Policy available at Seneca registration offices.

Grading is based on the following marking scheme:

Written Tests (at least 2)
Lab Work
Written Final Exam

Approved by: Denis Gravelle