• Published:
    October 29, 2007
  • Languages:
  • Audiences:
    IT professionals
  • Technology:
    Windows Server 2008
  • Credit toward certification:

TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist

This exam has been retired

For currently available options, please see the Microsoft Certification exam list.

Skills measured

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

Configure additional Active Directory server roles
  • Configure Active Directory Lightweight Directory Service (AD LDS)
    • Migration to AD LDS, configure data within AD LDS, configure an authentication server, server core, Windows Server 2008 Hyper-V
  • Configure Active Directory Rights Management Service (AD RMS)
    • Certificate request and installation, self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS), Windows Server virtualization
  • Configure the read-only domain controller (RODC)
    • Unidirectional replication, Administrator role separation, read-only DNS, BitLocker, credential caching, password replication, syskey, Windows Server virtualization
  • Configure Active Directory Federation Services (ADFS)
    • Installing AD FS server role, exchange certificate with AD FS agents, configure trust policies, configure user and group claim mapping, Windows Server virtualization

Preparation resources

Configure network access
  • Configure remote access
    • Dial-up; Remote Access Policy; Network Address Translation (NAT); VPN protocols, such as Secure Socket Tunneling Protocol (SSTP) and IKEv2; Routing and Remote Access Services (RRAS); packet filters; Connection Manager; VPN reconnect; RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP
  • Configure Network Access Protection (NAP)
    • Network layer protection, Dynamic Host Configuration Protocol (DHCP) enforcement, VPN enforcement, Remote Desktop Services (RDS) enforcement, configure NAP health policies, IPsec enforcement, 802.1x enforcement, flexible host isolation, multi-configuration System Health Validator (SHV
  • Configure DirectAccess
    • IPv6; IPsec, server requirements, client requirements, perimeter network, name resolution policy table
  • Configure Network Policy Server (NPS)
    • IEEE 802.11 wireless, IEEE 802.3 wired, group policy for wireless, RADIUS accounting, Connection Request policies, RADIUS proxy, NPS templates

Preparation resources

Monitor and manage a network infrastructure
  • Configure Windows Software Update Services (WSUS) server settings
    • Update type selection, client settings, Group Policy object (GPO), client targeting, software updates, test and approval, disconnected networks
  • Capture performance data
    • Data Collector Sets, Performance Monitor, Reliability Monitor, monitoring System Stability Index
  • Monitor event logs
    • Custom views, application and services logs, subscriptions, DNS log
  • Gather network data
    • Simple Network Management Protocol (SNMP), Baseline Security Analyzer, Network Monitor

Preparation resources

Deploy servers
  • Deploy images by using Windows Deployment Services
    • Install from media (IFM), configure Windows Deployment Services, capture Windows Deployment Services images, deploy Windows Deployment Services images, server core
  • Configure Windows activation
    • Install a KMS server, create a DNS SRV record, replicate volume license data
  • Configure Windows Server Hyper-V and virtual machines (VMs)
    • Virtual networking, virtualization hardware requirements, Virtual Hard Disks, migrate from physical to virtual, VM additions, backup, optimization, server core
  • Configure high availability
    • Failover clustering, Network Load Balancing, hardware redundancy
  • Configure storage
    • RAID types, Virtual Disk Specification (VDS) API, Network Attached Storage, iSCSI and Fibre Channel storage area networks, mount points

Preparation resources

Configure Remote Desktop Services
  • Configure RemoteApp and Remote Desktop Web Access
    • Providing access to remote resources, per-user filtering, forms-based authentication, single sign-on
  • Configure Remote Desktop Gateway (RD Gateway)
    • Certificate configuration, Remote Desktop resource authorization policy (RD RAP), Remote Desktop connection authorization policy (RD CAP), Remote Desktop Group Policy
  • Configure Remote Desktop Connection Broker
    • Redirection modes, DNS registration, set by using Group Policy
  • Configure and monitor Remote Desktop resources
    • Allocate resources by using Windows Server Resource Manager, configure application logging, fair share CPU scheduling, viewing processes
  • Configure Remote Desktop licensing
    • Deploy licensing server, connectivity between Remote Desktop Session Hosts (RD Session Hosts) and Remote Desktop Licensing (RD Licensing), recover Remote Desktop Licensing server, manage Remote Desktop Services client access licenses (RDS CALs), revoke licensing
  • Configure Remote Desktop Session Host
    • Session options, session permissions, display data prioritization, profiles and home folders, IP virtualization, RemoteFX

Preparation resources

Configure a web services infrastructure
  • Configure web applications
    • May include but is not limited to: directory-dependent, publishing, URL-specified configuration, Microsoft .NET components (for example, .NET and .aspx), configure application pools
  • Manage websites
    • May include but is not limited to: migrate sites and web applications, publish Internet Information Services (IIS) websites, configure virtual directories
  • Configure a File Transfer Protocol (FTP) server
    • May include but is not limited to: configure for extranet users, configure permissions
  • Configure Simple Mail Transfer Protocol Services (SMTP)
    • May include but is not limited to: set up smart hosts, configure size limitations, set up security and authentication to the delivering server, create proper service accounts, authentication, SMTP relay
  • Manage Internet Information Services
    • May include but is not limited to: website content backup and restore, IIS configuration backup, monitor IIS, configure logging, delegation of administrative rights
  • Configure SSL security
    • May include but is not limited to: configure certificates, request SSL certificate, renew SSL certificate, export and import certificates
  • Configure website authentication and permissions
    • May include but is not limited to: configure site permissions and authentication, configure application permissions, client certificate mappings

Preparation resources

Who should take this exam?

Exam 70-649 is intended for IT professionals who currently hold an MCSE on Windows Server 2003 certification and who work in the complex computing environment of medium-to-large companies. The MCSE on Windows Server 2003 is a prerequisite for this exam. Without it, your transcript will show that you passed the exam but will not show credit for the resulting certifications.

You should have at least one year of experience implementing and administering a network operating system in an environment with 250 to 5,000 or more users, three or more physical locations, and three or more domain controllers.

More information about exams

Preparing for an exam

We recommend that you review this exam preparation guide in its entirety and familiarize yourself with the resources on this website before you schedule your exam. See the Microsoft Certification exam overview for information about registration, videos of typical exam question formats, and other preparation resources. For information on exam policies and scoring, see the Microsoft Certification exam policies and FAQs.


This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. To help you prepare for this exam, Microsoft recommends that you have hands-on experience with the product and that you use the specified training resources. These training resources do not necessarily cover all topics listed in the "Skills measured" section.