MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring

MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring

5.0 1
by Don Poulton

View All Available Formats & Editions

MCTS Exam Cram

Windows Server 2008 Active Directory, Configuring


Exam 70-640


Don Poulton


Covers the critical information you’ll need to know to score higher on Exam 70-640!


Utilize new features of Windows Server 2008 related to Active Directory

Install and

…  See more details below


MCTS Exam Cram

Windows Server 2008 Active Directory, Configuring


Exam 70-640


Don Poulton


Covers the critical information you’ll need to know to score higher on Exam 70-640!


Utilize new features of Windows Server 2008 related to Active Directory

Install and configure Active Directory forests and domains

Plan and implement an Organizational Unit structure

Plan and manage Active Directory infrastructure components, such as operations masters, global catalogs, read-only domain controllers, and sites

Plan, implement, and manage Active Directory using Group Policy

Plan and manage Active Directory roles, including Active Directory Lightweight Directory Services, Active Directory Rights Management Services, and Active Directory Federation Services

Deploy software in Active Directory using Group Policy

Utilize Active Directory features to manage users and groups

Back up and restore Active Directory, and rebuild an Active Directory domain controller from backup

Deploy and manage a public key infrastructure using Active Directory Certificate Services




Don Poulton, MCSA, MCSE, A+, Network+, Security+, has been involved in consulting with small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. More recently, he has written or co-authored several certification volumes on Security+, Windows XP, Windows Server 2003, and Windows Vista, published by Que Publishing.

Read More

Product Details

Pearson Education
Publication date:
Exam Cram
Sold by:
Barnes & Noble
Sales rank:
File size:
8 MB

Read an Excerpt


Welcome to MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring. This book aims to help you get ready to take—and pass—Microsoft Certification Exam 70-640: TS: Windows Server 2008 Active Directory, Configuring. This book contains information to help ensure your success as you pursue this Microsoft exam and the Technology Specialist or IT Professional certification.

This Introduction explains the new generation of Microsoft certifications centering on Windows Server 2008 and how the Exam Cram series can help you prepare for Exam 70-640. This chapter discusses the basics of the MCTS and MCITP certifications, including a discussion of test-taking strategies. Chapters 1 through 9 are designed to remind you of everything you need to know to take and pass the exam. The two sample tests at the end of this book should give you a reasonably accurate assessment of your knowledge and, yes, I've provided the answers and their explanations to the tests. Along with the explanations are some particularly useful links to more information on each topic. Each answer also includes a reference to the chapter in the book that covers the topic.

Read this book and understand the material, and you'll stand a very good chance of passing the test. Use the additional links to the other materials and points of reference, and along with actual product use, you will be in excellent shape to do well on the exam.

Exam Cram books help you understand and appreciate the subjects and materials you need to pass Microsoft certification exams. These books are aimed strictly at test preparation and review. They do not teach you everything you need to know about a topic. Instead, they present and dissect the questions and problems that you're likely to encounter on a test. These books work to bring together as much information as possible about Microsoft certification exams.

The MCTS (Microsoft Certified Technology Specialist) certification requires you to have a strong knowledge of the features of Active Directory in Windows Server 2008, in particular the newer features. To move on to the next level, you have to drill down into each feature significantly. The MCITP (Microsoft Certified IT Professional) Windows Server 2008 Administrator and Windows Server 2008 Enterprise Administrator certifications require considerable in-depth information about the particulars of each of the Windows Server 2008 features.

Every Microsoft Windows Server 2008–related certification starts off with Exam 70-640, which this book prepares you for, as well as Exam 70-642, TS: Windows Server 2008 Network Infrastructure, Configuring. From there, if you continue along any of the tracks, each of the IT Pro certifications mandates that you pass one or two other Windows Server 2008–specific exams. Exam 70-646, PRO: Windows Server 2008, Server Administrator, completes the requirements for the MCITP: Windows Server 2008 Administrator certification. The MCITP: Windows Server 2008 Enterprise Administrator certification requires that you pass two additional exams, 70-643, TS: Windows Server 2008 Applications Infrastructure, Configuring, and 70-647, PRO: Windows Server 2008, Enterprise Administrator. Furthermore, the Windows Server 2008 Enterprise Administrator certification requires that you pass one client exam related to Windows Vista, either 70-620, TS: Microsoft Windows Vista, Configuring, or 70-624, TS: Deploying and Maintaining Windows Vista Client and 2007 Microsoft Office System Desktops.

Content included in this book is also covered in the upgrade exams provided by Microsoft for individuals holding the Microsoft Certified Systems Administrator (MCSA) or Microsoft Certified Systems Engineer (MCSE) titles on Windows Server 2003. More specifically, this includes Exam 70-648, TS: Upgrading Your MCSA on Windows Server 2003 to Windows Server 2008, Technology Specialist, and 70-649, TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist. Individuals wishing to pass either of these exams will find the content in this book helpful for learning the Active Directory portions of these exams.

The Microsoft Certified Professional (MCP) Program

The MCP Program includes a new generation series of professional certifications as well as a series of traditional program tracks. Each program track boasts its own special acronym. (As a certification candidate, you need to have a high tolerance for alphabet soup of all kinds.)

New Generation Microsoft Certifications

Microsoft has revamped its certification tracks to target individuals' efforts toward the level of detail representing their existing or anticipated employment needs and capabilities. These tracks are simpler and more specifically targeted than the older certification tracks. In many cases, they can be achieved by passing fewer exams than was the case with the older tracks.

  • MCTS (Microsoft Certified Technology Specialist)— Typically consisting of one to three exams, these certifications enable you to target your learning program to specific Microsoft technologies. MCTS certifications are available in a broad range of Microsoft technologies, and more will be added as newer technologies become online.

  • MCITP (Microsoft Certified Information Technology Professional)—By taking one to three additional exams beyond the MCTS level, you can achieve a comprehensive set of IT skills enabling you to be successful at a range of specialized jobs such as design, project management, operations management, and planning. Currently, MCITP certifications are available in the fields of Business Intelligence Developer, Customer Support Technician, Database Administrator, Database Developer, Enterprise Messaging Administrator, Enterprise Project Management with Microsoft Office Project Server 2007, Enterprise Support Technician, Exchange Messaging Administrator, Windows Server 2008 Administrator, and Windows Server 2008 Enterprise Administrator.

  • MCPD (Microsoft Certified Professional Developer)—Similar to the MCITP certification, this enables you to achieve a comprehensive set of developer-related job skills. Current MCPD certifications are based on .NET Framework 2.0 applications that use Microsoft Visual Studio 2005 and include Web Developer, Windows Developer, and Enterprise Applications Developer. Additional certifications will be released as newer technologies emerge.

  • MCA (Microsoft Certified Architect)—Enables you to prove a top level of IT business and design skills. Individuals aspiring to this certification must have at least 10 years of advanced IT experience including at least three years of experience as an IT architect. They must also have strong technical and managerial proficiency and follow a rigorous mentoring program that culminates in an oral examination by a panel of certified architects. You can specialize in Messaging or Database or pursue a more general Infrastructure or Solutions program.

Traditional MCP Program Tracks

The traditional program tracks that Microsoft has followed for a number of years certify individuals on technologies up to and including Windows Server 2003:

  • MCSE (Microsoft Certified Systems Engineer)— Anyone who has a current MCSE is warranted to possess a high level of networking expertise with Microsoft operating systems and products. This credential is designed to prepare individuals to plan, implement, maintain, and support information systems, network, and internetworks built around Microsoft Windows 2000 or Windows Server 2003 and its BackOffice Server family of products.

  • The Windows Server 2003 MCSE is the last certification that Microsoft plans to award on this program. Obtaining this credential requires an individual to pass six core exams and one elective exam. The core exams include four networking system exams, one operating system exam, and one design exam. Beginning with Windows Server 2008, the MCSE has been replaced by the MCITP credential already mentioned.

  • MCSA (Microsoft Certified Systems Administrator)— This certification program is designed for individuals who are systems administrators but have no need for network design skills in their current career path. An MCSA on Windows Server 2003 candidate must pass three core exams plus one elective exam. Beginning with Windows Server 2008, the MCSA has been replaced by the MCTS and MCITP credentials already mentioned.

  • MCP (Microsoft Certified Professional)—This is the least prestigious of all the certification tracks from Microsoft. Passing one of the major Microsoft exams qualifies an individual for the MCP credential. Individuals can demonstrate proficiency with additional Microsoft products by passing additional certification exams.

  • MCSD (Microsoft Certified Solution Developer)—The MCSD credential reflects the skills required to create multitier, distributed, and COM-based solutions, in addition to desktop and Internet applications, using new technologies. An MCSD must pass three core exams and one elective exam. The last iteration of the MCSD program validated competency in the 6.0 level of Microsoft Visual C++, Microsoft Visual FoxPro, or Microsoft Visual Basic. Beyond this level, this certification has been replaced with the MCPD already mentioned.

  • MCDBA (Microsoft Certified Database Administrator)—The MCDBA credential reflects the skills required to implement and administer Microsoft SQL Server databases. To become an MCDBA, you must pass a total of three core exams and one elective exam. The core exams involve SQL Server administration, SQL Server design, and networking systems. Beginning with SQL Server 2005, this certification has been replaced with the MCITP: Database Developer and the MCITP: Database Administrator certifications.

  • MCT (Microsoft Certified Trainer)—Microsoft Certified Trainers are deemed able to deliver elements of the official Microsoft curriculum, based on technical knowledge and instructional ability. Therefore, it is necessary for an individual seeking MCT credentials (which are granted on a course-by-course basis) to pass the related certification exam for a course and complete the official Microsoft training in the subject area, as well as to demonstrate an ability to teach.

  • This teaching skill criterion may be satisfied by proving that you have already attained training certification from Novell, Banyan, Lotus, the Santa Cruz Operation, or Cisco, or by taking a Microsoft-sanctioned workshop on instruction. Microsoft makes it clear that MCTs are important cogs in the Microsoft training channels. Instructors must be MCTs before Microsoft allows them to teach in any of its official training channels, including the Certified Technology Education Centers (CTEC) and its online training partner network.

After a Microsoft product becomes obsolete, MCPs typically have to recertify on current versions. (If individuals do not recertify, their certifications become invalid; a current exception to this rule is the MCSE on Windows NT 4.0.) Because technology keeps changing and new products continually supplant old ones, this recertification requirement should come as no surprise.

The best place to keep tabs on the various certification programs is on the Web. The URL for these programs is But the Microsoft website changes often, so if this URL doesn't work, try using the Search tool on the Microsoft site with "MCP," "MCTS," or the quoted phrases "Microsoft Certified Professional" or "Microsoft Certified Technology Specialist" as a search string. This can help you find the latest and most accurate information about Microsoft's certification programs.

About the Exam and Content Areas

Exam 70-640: Windows Server 2008 Active Directory, Configuring, includes a variety of content. For specifics on the exam, check the exam guide on the Microsoft website at

The broad topic areas covered by the exam include the following:

  • Configuring Domain Name System (DNS) for Active Directory—You should be able to configure DNS zones, DNS server settings, zone transfers, and replication.

  • Configuring the Active Directory Infrastructure—You are expected to be able to configure Active Directory forests, domains, trusts, sites, replication, global catalog, and operations masters.

  • Configuring Additional Active Directory Server Roles—You are expected to be able to configure Windows Server 2008 as a Server Core domain controller and a read-only domain controller, and to use the new Server Manager console to configure services related to Active Directory in Windows Server 2008.

  • Creating and Maintaining Active Directory Objects—You should be able to configure and maintain Active Directory accounts, including automatic creation of user and group accounts. You should also be able to configure Group Policy objects (GPO), including creating and applying GPOs and configuring GPO templates, software deployment GPOs, account policies, and audit policies.

  • Maintaining the Active Directory Environment—You should be familiar with how to monitor and maintain Active Directory and be able to recover from various types of failures.

  • Configuring Active Directory Certificate Services—You must be able to install Certificate Services and configure server settings, certificate templates, and certificate enrollments and revocations in Active Directory.

Each of the task areas represents important components of Active Directory management that an individual responsible for the task must be familiar with. You will be able to plan and implement an Active Directory installation and perform the essential day-to-day management and troubleshooting tasks.

How to Prepare for the Exam

Preparing for any Windows Server 2008–related exam requires that you obtain and study materials designed to provide comprehensive information about the product and its capabilities that will appear on the specific exam for which you are preparing. The following list of materials will help you study and prepare:

  • The Windows Server 2008 product DVD-ROM, which includes comprehensive online documentation and related materials; it should be a primary resource when you are preparing for the test.

  • The exam preparation materials, practice tests, and self-assessment exams on the Microsoft Certified Professional and Office Specialist Exams page at; the Testing Innovations page ( offers examples of the new question types found on the Windows Server 2008 MCTS and MCITP exams. Find the material, download it, and use it!

  • The exam-preparation advice, practice tests, questions of the day, and discussion groups on the e-learning and certification destination website (

In addition, you'll probably find any or all of the following materials useful in your quest for Active Directory configuration expertise:

  • Microsoft training kits—Microsoft Press offers a training kit that specifically targets Exam 70-640. For more information, visit This training kit contains information useful in preparing for the test.

  • Microsoft TechNet Subscriptions—This Microsoft resource delivers comprehensive resources that assist IT professionals in resolving problems and issues, implementing technologies, and enhancing their skills. Included are product facts, technical notes, tools and utilities, and access to training materials for all aspects of Windows Server 2008, Windows Vista, and other Microsoft products. Beta software and evaluation versions of released software packages are also included. A subscription to TechNet costs anywhere from $349 to $999 per year, but it is well worth the price. Visit and check out the information under the TechNet Plus Subscriptions menu entry for more details.

  • Study guides—Several publishers, including Que, offer Windows Server 2008 titles. Que Certification includes the following:

    • The Exam Cram series—These books provide information about the material you need to know to pass the tests.

    • The Exam Prep series—For some Microsoft exams, Que also offers Exam Prep books, which provide a greater level of detail than the Exam Cram books and are designed to teach you everything you need to know from an exam perspective. Each book comes with a CD-ROM that contains interactive practice exams in a variety of testing formats.

  • Multimedia—The MeasureUp Practice Tests CD-ROM that comes with each Exam Cram and Exam Prep title features a powerful, state-of-the-art test engine that prepares you for the actual exam. MeasureUp Practice Tests are developed by certified IT professionals and are trusted by certification students around the world. For more information, visit

  • Classroom training—CTECs and third-party training companies (such as Learning Tree International, Global Knowledge, New Horizons, triOS College, and others) offer classroom training on Windows Server 2008. Although such training runs upward of $350 per day in class, most of the individuals lucky enough to partake find it to be quite worthwhile.

  • Other publications—There's no shortage of materials available about Active Directory configuration. The resource sections in Appendix A, "Need to Know More?" should give you an idea of where you should look for further discussion.

You cannot adequately prepare for this exam or other Microsoft certification exams by simply rote-memorizing terms and definitions. You need to be able to analyze a scenario and answer by combining various knowledge points from various topic areas. Successfully completing this exam requires a great deal of thought and analysis to properly choose the "best" solution from several "viable" solutions in many cases.

As stated and restated, this exam is best prepared for by doing. You must work with Active Directory and all of its features to be comfortable with the material being addressed by the exam.

Taking a Certification Exam

After you've prepared for your exam, you need to register with a testing center. Each computer-based MCP exam costs $125, and if you don't pass, you may retest for an additional $125 for each try. In the United States and Canada, all tests after January 1, 2008, are administered by Prometric. You can sign up for an exam through the company's website at, or you can register by phone at 800-755-3926 (within the United States and Canada) or at 410-843-8000 (outside the United States and Canada).

To sign up for a test, you must possess a valid credit card, or you can contact Prometric for mailing instructions to send in a check (in the United States). Only when payment is verified or your check has cleared can you actually register for a test.

To schedule an exam, call the number or visit the web page at least one day in advance. To cancel or reschedule an exam, you must call before 7 p.m. Pacific Standard Time the day before the scheduled test time (or you may be charged, even if you don't appear to take the test). When you want to schedule a test, have the following information ready:

  • Your name, organization, and mailing address.

  • Your Microsoft Test ID. (Inside the United States, this means your Social Security Number and in Canada, it means your Social Insurance Number. Citizens of other nations should call ahead to find out what type of identification number is required to register for a test.)

  • The name and number of the exam you want to take.

  • A method of payment. Besides the methods already mentioned, you might be able to purchase a voucher online before registering.

After you sign up for a test, you are informed as to when and where the test is scheduled. Try to arrive at least 15 minutes early. You must supply two forms of identification—one of which must be a photo ID—to be admitted into the testing room.

All exams are completely closed book. In fact, you are not permitted to take anything into the test area, but you are furnished with a blank sheet of paper and a pen, or in some cases, an erasable plastic sheet and an erasable pen. Immediately write down on that sheet of paper all the information you've memorized for the test. In Exam Cram books, this information appears on a tearcard inside the front cover of each book. You are allowed some time to compose yourself, record this information, and take a sample orientation exam before you begin the real thing. It's best to take the orientation test before taking your first exam, but because they're all more or less identical in layout, behavior, and controls, you probably don't need to do this more than once.

When you complete a Microsoft certification exam, the software tells you whether you've passed or failed. If you need to retake an exam, you have to schedule a new test with Prometric and pay another $125.

Note - The first time you fail a test, you can retake it the next day. However, if you fail a second time, you must wait 14 days before retaking that test. The 14-day waiting period remains in effect for all retakes after the second failure.

What This Book Will Do

This book is designed to be read as a pointer to the areas of knowledge you will be tested on. In other words, you might want to read this book one time just to get insight into how comprehensive your knowledge of this topic is. The book is also designed to be read shortly before you go for the actual test. You can use this book to get a sense of the underlying context of any topic in the chapters or to skim-read for Exam Alerts, bulleted points, summaries, and topic headings.

This book draws on material from Microsoft's own listing of knowledge requirements, from other preparation guides, and from the exams. It also draws from a battery of technical websites, as well as from my own experience with Microsoft servers and the exam. The goal is to walk you through the knowledge you will need. By reading this book, you will gain from the experience of real-world professional development.

What This Book Will Not Do

This book will not teach you everything you need to know about Active Directory in Windows Server 2008. The scope of the book is exam preparation. It is intended to ramp you up and give you confidence heading into the exam. This book is not intended as an introduction to Active Directory configuration. It reviews what you need to know before you take the test, with its fundamental purpose dedicated to reviewing the information needed on the Microsoft certification exam.

This book uses a variety of teaching and memorization techniques to analyze the exam-related topics and to provide you with everything you need to know to pass the test.

About This Book

Read this book from front to back. You won't be wasting your time because nothing written here is a guess about an unknown exam. I have had to explain certain underlying information on such a regular basis that I have included those explanations here.

After you have read this book, you can brush up on a certain area by using the index or the table of contents to go straight to the topics and questions you want to re-examine. I have tried to use the headings and subheadings to provide outline information about each given topic. After you have been certified, you will find this book useful as a tightly focused reference and an essential foundation of Active Directory configuration and management.

Each Exam Cram chapter follows a regular structure and offers graphical cues about especially important or useful material. The structure of a typical chapter is as follows:

  • Opening hotlists—Each chapter begins with lists of the terms you need to understand and the concepts you need to master before you can be fully conversant in the chapter's subject matter. The hotlists are followed with a few introductory paragraphs, setting the stage for the rest of the chapter.

  • Topical coverage—After the opening hotlists, each chapter covers the topics related to the chapter's subject.

  • Exam Alerts—Throughout the text, the material that is most likely to appear on the exam is highlighted by using a special Exam Alert that looks like this:

    Warning - This is what an Exam Alert looks like. An Exam Alert stresses concepts, terms, or best practices that will most likely appear in at least one certification exam question. For that reason, any information presented in an Exam Alert is worthy of unusual attentiveness on your part.

    Even if material is not flagged as an Exam Alert, all the content in this book is associated in some way with test-related material. What appears in the chapter content is critical knowledge.

  • Notes—This book is an overall examination of Active Directory configuration, management, and troubleshooting. As such, it delves into many aspects of computer networks. Where a body of knowledge is deeper than the scope of the book, this book uses Notes to indicate areas of concern.

    Note - Cramming for an exam will get you through a test, but it will not make you a competent Active Directory professional. Although you can memorize just the facts you need to become certified, your daily work in the field will rapidly put you in water over your head if you do not know the underlying principles.

  • Tips—This book provides Tips that will help you build a better foundation of knowledge or to focus your attention on an important concept that reappears later in the book. Tips provide a helpful way to remind you of the context surrounding a particular area of a topic under discussion.

    Tip - This is how Tips are formatted. Keep your eyes open for them, and you'll become an Active Directory configuration guru in no time!

  • Practice questions—These present a short list of test questions related to the specific chapter topic. Following each question is an explanation of both correct and incorrect answers. The practice questions highlight the areas that are the most important on the exam.

The bulk of this book follows this chapter structure, but I would like to point out a few other elements:

  • Details and resources—Appendix A at the end of this book is titled "Need to Know More?" This appendix provides direct pointers to Microsoft and third-party resources offering more details on each chapter's subject. If you find a resource you like in this collection, use it, but don't feel compelled to use all the resources. On the other hand, I recommend only resources that I use regularly, so none of my recommendations will be a waste of your time or money (but purchasing them all at once probably represents an expense that many network administrators and would-be MCTSs and MCITPs might find hard to justify).

  • Glossary—This book has an extensive glossary of important terms used throughout the book.

  • The Cram Sheet—This appears as a tearcard inside the front cover of this Exam Cram book. It is a valuable tool that represents a collection of the most difficult-to-remember facts and numbers you should memorize before taking the test. Remember, you can dump this information out of your head onto a piece of paper as soon as you enter the testing room. This tearcard has facts that require brute-force memorization. You need to remember this information only long enough to write it down when you walk into the test room. Be advised that you will be asked to surrender all personal belongings other than pencils before you enter the exam room.

    You might want to look at the Cram Sheet in your car or in the lobby of the testing center just before you walk into the testing center. It is divided into exam objective headings, so you can review the appropriate parts just before each test.

© Copyright Pearson Education. All rights reserved.

Read More

Customer Reviews

Average Review:

Write a Review

and post it to your social network


Most Helpful Customer Reviews

See all customer reviews >

MCTS 70-640 Exam Cram: Windows Server 2008 Active Directory, Configuring 5 out of 5 based on 0 ratings. 1 reviews.
Anonymous More than 1 year ago
Olay frst result ask fo brandi