Exam 70-649:

TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist

Published:October 29, 2007
Language(s):English, German, Japanese
Audience(s):IT Professionals
Technology:Windows Server 2008
Type:Proctored Exam

How To Get It: Schedule your exam through the following exam provider:

Take exam

Preparing for an Exam
The Microsoft Certification website and this preparation guide contain a variety of resources to help you prepare for an exam. Preparing for and Taking an Exam — FAQ provides answers to frequently asked questions about exam registration ,preparation ,scoring ,and policies , including:
  • The most effective way to prepare to take an exam.
  • The relationship between Microsoft training materials and exam content.
  • Microsoft policy concerning the incorporation of service pack and revision updates into exam content.
  • Exam question types and formats.
  • Exam time limits and number of questions asked.
We recommend that you review this preparation guide in its entirety and familiarize yourself with the FAQs and resources on the Microsoft Certification website before you schedule your exam.
Exam Topics CoveredExam 70-649 is an upgrade exam that is a composite of three stand-alone exams: Exams 70-640, 70-642, and 70-643. Exam 70-649 validates skills that relate to the core technology features and functionality of Windows Server 2008 R2 and builds upon the knowledge base of a Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003.
Audience Profile
Exam 70-649 is intended for IT professionals who currently hold an MCSE on Windows Server 2003 certification and work in the complex computing environment of medium to large companies. The MCSE on Windows Server 2003 is a prerequisite for this exam. Without it, your transcript will show that you passed the exam but will not show credit for the resulting certifications.
You should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics:
  • 250 to 5,000 or more users
  • Three or more physical locations
  • Three or more domain controllers
  • Network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management
  • Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet
Credit Toward CertificationWhen you pass Exam 70-649: TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist, you complete the requirements for the following certification(s):Exam 70-649: TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist: counts as credit toward the following certification(s):
Note This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format.
Skills Being MeasuredThis exam measures your ability to accomplish the technical tasks listed below.The percentages indicate the relative weight of each major topic area on the exam.The higher the percentage, the more questions you are likely to see on that content area on the exam.

The information after “This objective may include but is not limited to” is intended to further define or scope the objective by describing the types of skills and topics that may be tested for the objective. However, it is not an exhaustive list of skills and topics that could be included on the exam for a given skill area. You may be tested on other skills and topics related to the objective that are not explicitly listed here.
Configuring Additional Active Directory Server Roles
  • Configure Active Directory Lightweight Directory Service (AD LDS)

    May include but is not limited to: migration to AD LDS, configuring data within AD LDS, configuring an authentication server, server core, Windows Server 2008 Hyper-V
  • Configure Active Directory Rights Management Service (AD RMS)

    May include but is not limited to: certificate request and installation, self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS), Windows Server virtualization
  • Configure the read-only domain controller (RODC)

    May include but is not limited to: unidirectional replication, Administrator role separation, read-only DNS, BitLocker, credential caching, password replication, syskey, Windows Server virtualization
  • Configure Active Directory Federation Services (ADFS)

    May include but is not limited to: installing AD FS server role, exchange certificate with AD FS agents, configuring trust policies, configuring user and group claim mapping, Windows Server virtualization
Configuring Network Access
  • Configure remote access.
    • May include but is not limited to: dial-up; Remote Access Policy; Network Address Translation (NAT); VPN protocols, such as Secure Socket Tunneling Protocol (SSTP) and IKEv2; Routing and Remote Access Services (RRAS); packet filters; Connection Manager; VPN reconnect; RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP
  • Configure Network Access Protection (NAP).
    • May include but is not limited to: network layer protection; DHCP enforcement; VPN enforcement; RDS enforcement; configure NAP health policies; IPsec enforcement; 802.1x enforcement; flexible host isolation; multi-configuration System Health Validator (SHV)
  • Configure DirectAccess.
    • May include but is not limited to: IPv6; IPsec; server requirements; client requirements; perimeter network; name resolution policy table
  • Configure Network Policy Server (NPS).
    • May include but is not limited to: IEEE 802.11 wireless; IEEE 802.3 wired; group policy for wireless; RADIUS accounting; Connection Request policies; RADIUS proxy; NPS templates
Monitoring and Managing a Network Infrastructure
  • Configure Windows Software Update Services (WSUS) server settings

    May include but is not limited to: updating type selection, client settings, Group Policy object (GPO), client targeting, software updates, test and approval, disconnected networks
  • Capture performance data

    May include but is not limited to: Data Collector Sets, Performance Monitor, Reliability Monitor, monitoring System Stability Index
  • Monitor event logs

    May include but is not limited to: custom views, application and services logs, subscriptions, DNS log
  • Gather network data

    May include but is not limited to: Simple Network Management Protocol (SNMP), Baseline Security Analyzer, Network Monitor
Deploying Servers
  • Deploy images by using Windows Deployment Services

    May include but is not limited to: installing from media (IFM), configuring Windows Deployment Services, capturing Windows Deployment Services images, deploying Windows Deployment Services images, server core
  • Configure Microsoft Windows activation

    May include but is not limited to: installing a KMS server, creating a DNS SRV record, replicating volume license data
  • Configure Windows Server Hyper-V and virtual machines

    May include but is not limited to: virtual networking, virtualization hardware requirements, Virtual Hard Disks, migrating from physical to virtual, VM additions, backup, optimization, server core
  • Configure high availability

    May include but is not limited to: failover clustering, Network Load Balancing, hardware redundancy
  • Configure storage

    May include but is not limited to: RAID types, Virtual Disk Specification (VDS) API, Network Attached Storage, iSCSI and Fibre Channel storage area networks, mount points
Configuring Remote Desktop Services
  • Configure RemoteApp and Remote Desktop Web Access.

    May include but is not limited to: providing access to remote resources; per-user filtering; forms-based authentication; single sign-on
  • Configure Remote Desktop Gateway (RD Gateway).

    May include but is not limited to: certificate configuration; Remote Desktop resource authorization policy (RD RAP); Remote Desktop connection authorization policy (RD CAP); Remote Desktop group policy
  • Configure Remote Desktop Connection Broker.

    May include but is not limited to: redirection modes; DNS registration; set by using group policy
  • Configure and monitor Remote Desktop resources.

    May include but is not limited to: allocate resources by using Windows Server Resource Manager; configure application logging; fair share CPU scheduling; viewing processes
  • Configure Remote Desktop licensing.

    May include but is not limited to: deploy licensing server; connectivity between Remote Desktop Session Hosts (RD Session Hosts) and Remote Desktop Licensing (RD Licensing); recovering Remote Desktop Licensing server; managing Remote Desktop Services client access licenses (RDS CALs); revoking licensing
  • Configure Remote Desktop Session Host.

    May include but is not limited to: session options; session permissions; display data prioritization; profiles and home folders; IP Virtualization; RemoteFX
Configuring a Web Services Infrastructure
  • Configure Web applications

    May include but is not limited to: directory-dependent, publishing, URL-specified configuration, Microsoft .NET components, for example, .NET and .aspx, configuring application pools
  • Manage Web sites

    May include but is not limited to: migrating sites and Web applications, publishing IIS Web sites, configuring virtual directories
  • Configure a File Transfer Protocol (FTP) server

    May include but is not limited to: configuring for extranet users, configuring permissions
  • Configure Simple Mail Transfer Protocol Services (SMTP)

    May include but is not limited to: setting up smart hosts, configuring size limitations, setting up security and authentication to the delivering server, creating proper service accounts, authentication, SMTP relay
  • Manage Internet Information Services (IIS)

    May include but is not limited to: Web site content backup and restore, IIS configuration backup, monitoring IIS, configuring logging, delegation of administrative rights
  • Configure SSL security

    May include but is not limited to: configuring certificates, requesting SSL certificate, renewing SSL certificate, exporting and importing certificates
  • Configure Web site authentication and permissions

    May include but is not limited to: configuring site permissions and authentication, configuring application permissions, client certificate mappings
Preparation Tools and ResourcesTo help you prepare for this exam, Microsoft Learning recommends that you have hands-on experience with the product and that you use the following training resources. These training resources do not necessarily cover all of the topics listed in the "Skills Measured" tab.
Learning Plans and Classroom Training
Microsoft E-Learning
Microsoft Press Books There are no Microsoft Press books currently available.
Practice Tests
Microsoft Online Resources
  • Learning Plan: Get started by creating a step-by-step study guide that is based on recommended resources for this exam.
  • Windows Server 2008 – Learning Portal: Find special offers and information on training and certification.
  • Product information: Visit the Windows Server 2008 Web site for detailed product information.
  • Microsoft Learning Community: Join newsgroups and visit community forums to connect with your peers for suggestions on training resources and advice on your certification path and studies.
  • TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical resources, newsgroups, and chats.
  • MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features code samples, technical articles, downloads, newsgroups, and chats.
Have Questions? For advice about training and certification, connect with peers: For questions about a specific certification, chat with a Microsoft Certified Professional (MCP): To find out about recommended blogs, Web sites, and upcoming Live Meetings on popular topics, visit our community site: