Preparation Guide for Exam 70-217

Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure

Updated: May 13, 2008
On This Page
Exam newsExam news
Audience profileAudience profile
Credit toward certificationCredit toward certification
Preparation tools and resourcesPreparation tools and resources
Skills measuredSkills measured

Exam news

Exam 70-217 became available on June 29, 2000.


Top of pageTop of page

Audience profile

Candidates for this exam operate in medium-sized to very large computing environments that use the Windows 2000 Server network operating system. They have a minimum of one year of experience implementing and administering network operating systems in environments that have the following characteristics:

Supported users range from 200 to more than 26,000.

Physical locations range from 5 to more than 150.

Typical network services and applications include file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and Web hosting.

Connectivity needs include connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet.

Top of pageTop of page

Credit toward certification

When you pass the Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure exam, you achieve Microsoft Certified Professional status. You also earn credit toward the following certifications:

Core credit toward Microsoft Certified Systems Engineer on Microsoft Windows 2000 certification

Top of pageTop of page

Preparation tools and resources

In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.

Classroom training for this exam

Course 2153: Implementing a Microsoft Windows 2000 Network Infrastructure

Course 2154: Implementing and Administering Microsoft Windows 2000 Directory Services

Microsoft Press self-paced training products

MCSE Self-Paced Training Kit: Microsoft Windows 2000 Core Requirements, Second Edition, Exams 70-210, 70-215, 70-216, 70-217

MCSE Self-Paced Training Kit: Microsoft Windows 2000 Active Directory Services, Exam 70-217, Second Edition

Microsoft certified practice tests

MeasureUp: Visit the MeasureUp Web site to take a practice test.

Self Test Software: Visit the Self Test Software Web site to take a practice test.

Microsoft online resources

TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.

MSDN: The Microsoft Developer Network (MSDN) is a reference for developers. It features code samples, technical articles, newsgroups, chats, and more.

Training and certification newsgroups: There is a newsgroup for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.

Top of pageTop of page

Skills measured

This exam measures your ability to install, configure, and troubleshoot the Windows 2000 Active Directory components, DNS for Active Directory, and Active Directory security solutions. In addition, this test measures the skills required to manage, monitor, and optimize the desktop environment by using Group Policy. Before taking the exam, you should be proficient in the job skills listed in the following matrix. The matrix shows which Official Microsoft Learning Products may help you reach competency in the skills being tested in the exam.

KEY:The course provides a general introductory overview of this task. You will need to supplement the course with additional work. = The course provides a general introductory overview of this task. You will need to supplement the course with additional work.    The course includes some material to prepare you for this task. You will need to supplement the course with additional work. = The course includes some material to prepare you for this task. You will need to supplement the course with additional work.    The course includes material to prepare you for this task. = The course includes material to prepare you for this task.
Skills measured by Exam 70-217Course 2153Course 2154
Installing and Configuring Active Directory  

Install forests, trees, and domains.

Automate domain controller installation.


The course includes material to prepare you for this task.

Create sites, subnets, site links, and connection objects.


The course includes material to prepare you for this task.

Configure server objects. Considerations include site membership and global catalog designation.


The course includes material to prepare you for this task.

Transfer operations master roles.


The course includes material to prepare you for this task.

Verify and troubleshoot Active Directory installation.


The course includes material to prepare you for this task.

Implement an organizational unit (OU) structure.


The course includes material to prepare you for this task.

Installing, Configuring, Managing, Monitoring, and Troubleshooting DNS for Active Directory  

Install and configure DNS for Active Directory.

Integrate Active Directory DNS zones with existing DNS infrastructure.

Configure zones for dynamic updates and security-enhanced dynamic updates.

Create and configure DNS records.


The course includes material to prepare you for this task.

Manage, monitor, and troubleshoot DNS.

The course includes material to prepare you for this task.

The course includes some material to prepare you for this task. You will need to supplement the course with additional work.

Configuring, Managing, Monitoring, Optimizing, and Troubleshooting Change and Configuration Management  

Implement and troubleshoot Group Policy.

Create and modify a Group Policy object (GPO).

Link to an existing GPO.

Delegate administrative control of Group Policy.

Configure Group Policy options.

Filter Group Policy settings by using security groups.

Modify Group Policy prioritization.


The course includes material to prepare you for this task.

Manage and troubleshoot user environments by using Group Policy.


The course includes material to prepare you for this task.

Install, configure, manage, and troubleshoot software by using Group Policy.


The course includes material to prepare you for this task.

Manage network configuration by using Group Policy.


The course includes material to prepare you for this task.

Configure Active Directory to support Remote Installation Services (RIS).

Configure RIS options to support remote installations.

Configure RIS security.

The course provides a general introductory overview of this task. You will need to supplement the course with additional work.


Managing, Monitoring, and Optimizing the Components of Active Directory  

Manage Active Directory objects.

Move Active Directory objects.

Publish resources in Active Directory.

Locate objects in Active Directory.

Create and manage objects manually or by using scripting.

Control access to Active Directory objects.

Delegate administrative control of objects in Active Directory.


The course includes material to prepare you for this task.

Monitor, optimize, and troubleshoot Active Directory performance and replication.


The course includes material to prepare you for this task.

Back up and restore Active Directory.

Perform an authoritative and a nonauthoritative restore of Active Directory.

Recover from a system failure.

Seize operations master roles.


The course includes material to prepare you for this task.

Configuring, Managing, Monitoring, and Troubleshooting Security in a Directory Services Infrastructure  

Apply security policies by using Group Policy.


The course provides a general introductory overview of this task. You will need to supplement the course with additional work.

Create, analyze, and modify security configurations by using the Security Configuration and Analysis snap-in and the Security Templates snap-in.

The course includes some material to prepare you for this task. You will need to supplement the course with additional work.

The course provides a general introductory overview of this task. You will need to supplement the course with additional work.

Implement an audit policy.


The course provides a general introductory overview of this task. You will need to supplement the course with additional work.

Monitor and analyze security events.


The course provides a general introductory overview of this task. You will need to supplement the course with additional work.

Note This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format.


Top of pageTop of page