After completing Windows 2000 Security Design MCSE 70-220: Establishing a Security Baseline, the user should be able to:

	Describe the role of security templates and domain security policies in establishing a security baseline
	Create and modify security templates to implement a standard level of security
	Identify the level of security that standard security templates provide for domain controllers and operations masters
	Identify the level of security that standard security templates provide for servers, desktop computers, portable computers, and kiosks

Active Directory

	Active Directory trust relationships
	Security and access control in Active Directory
	Security templates
	Template sections

Domain Controllers

	Default role of domain controllers
	DC security templates
	Using DC security templates
	Operations masters

Servers, Desktop Computers, and Kiosks

	Desktop computers
	Servers
	Kiosks

Policies and Templates

	Applying templates
	Creating or modifying templates
	Applying enhanced security at installation
	Using Secedit

This course has the following features:

	Exercises that allow users to practice in Windows 2000
	A file containing the text of the exercises
	Simulations that allow users to practice course skills, even if they don't have access to Windows 2000
	A glossary
	A Skill Assessment

	All courses in the series Windows 2000 Professional, a passing score on MCSE exam 70-210, or equivalent experience
	All courses in the series Windows 2000 Server MCSE 70-215, a passing score on MCSE exam 70-215, or equivalent experience
	All courses in the series Windows 2000 Network Administration MCSE 70-216, a passing score on MCSE exam 70-216, or equivalent experience
	All courses in the series Windows 2000 Active Directory MCSE 70-217, a passing score on MCSE exam 70-217, or equivalent experience
	Windows 2000 Security Design MCSE 70-220: Analyzing Business Requirements (W22001)
	Windows 2000 Security Design MCSE 70-220: Analyzing Technical Requirements (W22002)

	Windows 2000 Security Design MCSE 70-220: Planning Security for System Resources (W22004)
	Windows 2000 Security Design MCSE 70-220: Designing a Security Group Strategy (W22005)
	Windows 2000 Security Design MCSE 70-220: Designing Security Policy Inheritance (W22006)
	Windows 2000 Security Design MCSE 70-220: Protecting Resources with Auditing and Encryption (W22007)
	Windows 2000 Security Design MCSE 70-220: Using Native Windows 2000 Authentication (W22008)
	Windows 2000 Security Design MCSE 70-220: Using Alternate Authentication Strategies (W22009)
	Windows 2000 Security Design MCSE 70-220: Designing a Public Key Infrastructure (W22010)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Network Services (W22011)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Access between Networks (W22012)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Communications Channels (W22013)

Microsoft® is a registered trademark of Microsoft Corporation.
Windows 2000® is a trademark of Microsoft Corporation.