windows server 2008 active directory, configuring exam
TRANSCRIPT
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 1/52
MCTS GUIDE TO CONFIGURINGMICROSOFT WINDOWS SERVER 2008
ACTIVE DIRECTORY
Chapter 10: Configuring and Maintaining th
Active Directory Infrastructure
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 2/52
Objectives
Describe and configure Active Directory functional levels
Add and remove domains from a forest
Configure Active Directory trusts
Configure intrasite replication
Work with sites
Manage operations master roles
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 3/52
Examining Active Directory Functional Levels
Functional levels allow for Administrators to maintain backwards compatibil
the addition of new features
Functional levels should be set at the highest version domain controllers onnetwork support
Member servers / workstations are independent of functional levels
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 4/52
Forest Functional Levels
Forest functional level determines the features of Active Directory that have
implications
A Server 2008 domain controller supports the following functional levels:
Windows 2000
Lacks the ability to use forest trusts and to rename a domain
Windows 2003
Supports all the features present in Windows 2000, plus the following features: forest trusts, KnoConsistency Checker (KCC) improvements, linked-value replication, rename a domain , read oncontroller deployment
Windows 2008
All the features of 2003, but no additional features (yet)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 5/52
Domain Functional Levels
A domain controller can’t be configured to run at a lower functional le
the functional level of the forest.
Like forest functional levels, domain functional levels can be raised blowered
Features:
Windows 2000 Native: Universal groups, group nesting, group conversion, Secidentifier (SID) history
Windows Server 2003: All features of Windows 2000 native, domain controller logon timestamp replication, selective authentication, Users and Computers coredirection
Windows Server 2008: All features of Windows 2003, Distributed File System rfine-grained password policies, interactive logon information, Advanced EncrypStandard (AES) support
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 6/52
Raising the Domain Functional Level
All domain controllers must be running a Windows OS compatible with the
functional level Functional level can be raised in Active Directory Domains and Trusts
Only one domain controller needs to be raised to the new functional level, treflect the change automatically
Once the functional level is raised, it cannot be reversed
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 7/52
Raising the Domain Functional Level (cont.)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 8/52
Raising the Forest Functional Level
You must be a member of the Domain Admins or Enterprise Admins group
forest functional level If raising both domain and forest functional levels, domain functional must b
first
Domain functional levels must be equal or greater than forest functional lev
Once functional level is raised, it cannot be lowered
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 9/52
Raising the Forest Functional Level (cont.)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 10/52
Preparing a Forest and Domain for Windows Se2008 with Adprep
The Adprep command-line program prepares an existing forest or domain f
addition of a Windows Server 2008 domain controller To prepare the forest, run the adprep /forestprep command on a Windows S
or Windows 2000 domain controller acting as the schema master
Then run adprep /domainprep in each domain where you plan to add a WinServer 2008 DC. Windows 2000 requires adprep /domainprep /gpprep
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 11/52
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 12/52
Removing a Domain Controller
Be aware of some potential issues
If the DC performs any operations master roles, you must first transfer the role to anothe
If the DC is a global catalog server, make sure at least one other DC is a global catalog s
If it’s the only DC in the domain, you’ll also remove the domain
Dcpromo is used to remove domain services
If the server wasn’t the last DC, it will remain a member of the domain
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.c
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 13/52
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 14/52
Using the Active Directory Migration Tool
The Active Directory Migration Tool (ADMT) allows moving objects a
restructuring Active Directory without users losing access to networkresources, and has three main types of migration:
Intraforest migration
Interforest migration
Migration of an NT 4.0 domain to an Active Directory domain
Before attempting migration, you should review the Active Directory guide
Terms used for migration planning and implementation:
SID History
Security Translation
Password Export Server (PES)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 15/52
Configuring Active Directory Trusts
Recall that all domains in a forest trust one another automatically through twtransitive trusts, which you can’t remove
Types of trusts you can configure:
Shortcut trust
Forest trust
External trust
Realm trust
DNS must be configured so that FQDNs of DCs in all participating domainsresolved
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 16/52
Configuring Shortcut Trusts
A shortcut trust is a one-way or two-way transitive trust between two domaisame forest or two domains in trusting forests
Helps to reduce authorization delays between domains
Shortcut trusts between domains in different forests require a forest trust toconfigured
Trusts between forests and external trusts might require additional DNS co
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 17/52
Configuring Forest Trusts
DNS must be configured correctly in both forest root domains
You must initiate the forest trust in Active Directory Domains and Trusts fromroot domain
When creating a forest trust, you must specify the type of authentication youse:
Forest-wide authentication is a property of a forest trust in which all users in a trusted forauthenticated to the trusting forest
Selective authentication enables administrators to specify users who can authenticate to
resources in the trusting forest
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 18/52
Configuring External and Realm Trusts
An external trust is created between domains in different forests or betweenin a Windows Server 2003/2008 forest and a Windows 2000 server forest oNT domain
An external trust is not transitive, and is nearly identical to creating a forest
When creating a realm trust, main consideration should be whether or not ittransitive
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 19/52
Configuring Trust Properties
The Properties dialog box of a forest trust contains three tabs:
The General Tab – Provides options:
The other domain supports Kerberos AES Encryption
Direction of trust
Transitivity of trust
Validate
Save As
The Name Suffix Routing Tab – Allows you to control which name suffixes used by the truare routed for authentication
Authentication Tab – Same options as the Outgoing Trust Authentication Level window
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 20/52
SID Filtering
SIDHistory attribute can be used for nefarious purposes to gain administratprivileges in a trusting forest
To counter the security risk, Windows provides a feature called SID filtering
SID Filtering causes the trusting domain to ignore any SIDs that aren’t fromdomain
SID filtering is enabled by default on external trusts but is disabled on fores
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 21/52
Configuring Intrasite Replication
Intrasite and intersite replication use the same basic processes to replicateDirectory data
Intersite replication is optimized to take slower WAN links into account
Intrasite replication can be initiated in one of two ways:
Notification
Periodic replication
Intrasite replication involves two main components: Knowledge Consistenc
(KCC) and connection objects
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 22/52
Knowledge Consistency Checker (KCC)
KCC is a process that runs on every DC and, for intrasite replication, buildsreplication topology among DCs in a site and establishes replication partne
The KCC on each domain controller uses data stored in the forest-wide condirectory partition to create the replication topology
The replication topology can be recalculated manually in Active Directory SServices
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 23/52
Connection Objects
Connection objects define the connection parameters between two rpartners
Changes to intrasite connection objects is usually unnecessary, but can be made in Active Directory Sites and Services
General tab in the Properties dialog box is the only one of interest foconnection objects, and contains the following fields:
Change Schedule
Replicate from Server
Replicate from Site
Replicated Naming Context(s)
Partially Replicated Naming Context(s)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 24/52
Creating Connection Objects
You can create connection objects for intrasite replication if you want to altereplication topology manually
By default, the schedule for a new connection object is set to every 15 minuthis value can be changed
Changing the schedule for connection objects can be useful for troubleshooreplication problems
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 25/52
Checking Replication Status
Active Directory Sites and Services can be used to force the KCC to check replication topology
Repadmin.exe is a tool that will show detailed information about connectionreplication status
To use, type repadmin /showrepl
Repadmin can also be used to show the partitions being replicated by eachobject, force replication to occur, force the KCC to recalculate the topology,
actions
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 26/52
Global Catalog Replication
Global Catalog contains a partial replica of all objects in the forest, maintaingroup memberships, provides cross-domain logon support, and is used to l
objects throughout the forest
Global catalog servers keep inbound connections with a DC in each domaicatalog is built from
Connections between global catalog servers always include replication of thcatalog partition
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 27/52
Global Catalog Replication (cont.)
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 28/52
Special Replication Situations
Most Active Directory database changes follow the regular replication rules
Certain changes require special processing: Urgent replication events (trigger change notifications immediately):
Account lockouts
Changes to the account lockout policy
Changes to the domain password policy
Changes to non-security principal passwords
Password change to a DC computer account
Changes to the RID master DC
User Account password changes
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 29/52
RODC Replication
An RODC is treated like any other domain controller when considering repltopology
Limitations to keep in mind:
Connection between an RODC and a writeable DC is a one-way connection
Two RODCs can replicate with one another, as long as one has an incoming connection writeable DC
The domain directory partition can be replicated only to an RODC from a Windows ServeWindows Server 2003 DCs can replicate other partitions to an RODC
When upgrading a domain from Windows Server 2003, the first Windows Server 2008 D
writeable
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 30/52
Creating Sites
A site is an AD object containing domain controllers and replication settingsusually associated with IP subnets and site links
Sites are usually geographically dispersed and connected by WAN links
When you create a site, you’re asked to select a site link
DEFAULTIPSITELINK is the only choice unless you’ve created other site lin
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 31/52
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 32/52
The Significance of Subnets
After creating a site, you must associate one or more subnets with it
AD uses this information in two important ways: Placing new domain controllers in the appropriate site
Determining which site a client computer belongs to
If a client’s IP address doesn’t match a subnet in any of the defined sites,communication efficiency could degrade because the client might request sfrom servers in remote sites instead of locally
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 33/52
Configuring Site Links
Any new sites you create use the default site link, DEFAULTIPSITELINK, foconnection with other sites
Additional site links can help adjust the replication schedule according to a link characteristics
Descriptive names should be used for site links
A site can exist in more than one site link
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 34/52
Bridgehead Servers
Intersite Topology Generator is responsible for assigning a bridgehead servdirectory partition in the site
Bridgehead servers are responsible for all intersite replication
Bridgehead servers can be designated manually
Repadmin /bridgeheads command can list which DCs in a site are acting abridgehead servers to other sites
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 35/52
Intersite Transport Protocols
Two protocols can be used to replicate between sites:
IP
SMTP
IP is used by default in the DEFAULTIPSITELINK site link and is recommenmost cases
Simple Mail Transport Protocol is used primarily for e-mail and works well foless reliable, or intermittent connections
DC can send multiple replication requests simultaneously without waiting fo
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 36/52
Site Link Bridges
By default, site link bridging is enabled, which makes site links transitive
You can change the transitive behavior of site links by turning off site link brcreating site link bridges manually
Automatic site bridging can lead to over-utilization of a slower WAN link
Other reasons to create site link bridges manually:
Control traffic through firewalls
Accommodate partially routed network
Reduce confusion of the KCC
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
The Global Catalog and Universal Group Membe
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 37/52
g pCaching
Global catalog servers increase replication traffic
Windows Server 2008 includes universal group membership caching, whicuniversal group membership information to be retrieved from a global cataloa different site, then cached locally on every DC in the site and updated eve
Microsoft recommends placing a global catalog server in the site when the accounts exceeds 500 and the number of DCs exceeds two
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 38/52
Operations Master Best Practices
If you build a new forest, the first DC installed performs all five FSMO roles
This is acceptable for small environments, but larger environments may peif these roles are transferred to separate servers
Common rules for operations masters:
Unless your domain is small, transfer operations master roles to other DCs
Place the servers performing these roles where network availability is high
Designate an alternate DC for all roles
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 39/52
Domain Naming Master
The domain naming master is needed when a domain or domain controllerremoved from the forest
Attempting to add or remove a domain while the DC performing this role is advisable
When possible, the domain naming master should be a direct replication paanother DC that’s also a global catalog server in the same site
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 40/52
Schema Master
The schema master is needed when the Active Directory schema is change
Generally, the schema master role should be transferred to another server you’re certain the original server will be down permanently
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 41/52
PDC Emulator
Processes password changes for older Windows clients (Windows 9x and N
Should be placed where there is a high concentration of users
Shouldn’t be placed on a DC that is also a global catalog server
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 42/52
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 43/52
Infrastructure Master
Role is most needed when many objects have been moved or renamed
Shouldn’t be performed by a DC that’s also a global catalog server, but sholeast in the same site as a global catalog server
If the Master fails, the role can be moved to another DC if necessary
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 44/52
T f i O i M R l ( )
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 45/52
Transferring Operations Master Roles (cont.)
MCTS Windows Server 2008 Active Directoryhttp://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 46/52
Seizing Operations Master Roles
An operations master role is seized when the current role holder is no longebecause of some type of failure
Seizing should never be done when the current role holder is accessible
Seizing is done with the ntdsutil command
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 47/52
Ch t S ( t )
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 48/52
Chapter Summary (cont.)
Before you can install a Windows Server 2008 server as a DC in an existingServer 2003 or Windows 2000 server domain, existing domain controllers m
prepared
Before you can install RODC in an existing domain, the forest functional levat least Windows Server 2003 or higher
To remove a domain controller, you use dcpromo or ntdsutil
Use the Active Directory Migration Tool to migrate accounts from one domato another
MCTS Windows Server 2008 Active Directoryhttp://www.examcollectionvce.com/v
Ch t S ( t )
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 49/52
Chapter Summary (cont.)
Before creating a trust of any type, DNS must be configured so that FQDNscontrollers in all participating domains can be resolved
Some trust properties you can configure include the trust direction and tranname suffix routing, and authentication
Both intrasite and intersite replication use the same basic processes to repDirectory data; the main goal is to balance data replication timeliness and e
MCTS Windows Server 2008 Active Directoryhttp://www.examcollectionvce.com/v
Ch t S ( t )
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 50/52
MCTS Windows Server 2008 Active Directory
Chapter Summary (cont.)
A site is an Active Directory object containing domain controllers andsettings for replication within the site and is usually associated with o
more IP subnets and site links
Connection objects provide the connection and replication parametebetween two servers
Bridgehead servers are responsible for all intersite replication
Universal group membership caching resolves the potential conflict
faster logons and additional replication traffic
Deciding where to place the FSMO role holder is part of your overall Directory design strategy
http://www.examcollectionvce.com/v
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 51/52
MCTS Windows Server 2008 Active Directory http://www.examcollectionvce.c
examcollectionvce Exam Features:
8/11/2019 Windows Server 2008 Active Directory, Configuring Exam
http://slidepdf.com/reader/full/windows-server-2008-active-directory-configuring-exam 52/52
50000+ Customer feedbacks involved in Product. Average 100% Success Rate. Over 170 Global Certification Vendors Covered. Services of Professional & Certified Experts available via support. Free 90 days updates to match real exam scenarios. Instant Download Access No Setup required. Exam History and Progress reports. Verified answers researched by industry experts. Study Material updated on regular basis.
Questions / Answers are downloadable in PDF format. Practice / Exam are downloadable in Practice Test Software forma Customize your exam based on your objectives. Self-Assessment features. -Guaranteed Success.
Fast, helpfu