After completing Windows 2000 Security Design MCSE 70-220: Designing a Security Group Strategy, the user should be able to:

	Identify the types and scopes of groups in Windows 2000
	Identify default groups and user accounts
	Design a security group strategy
	Design a delegation of authority strategy

Understanding Groups in Windows 2000

	Group type and scope
	Group strategy

Default Groups and Users

	Built-in users
	Security vs distribution groups
	Default explicit security groups
	Predefined global and domain local groups
	Default implicit security groups

Managing Security Groups

	Administration and nested groups
	Granular modification of user rights

Delegation of Authority

	Creating a delegation of authority strategy
	Delegating control to OU objects

This course has the following features:

	Exercises that allow users to practice in Windows 2000
	A file containing the text of the exercises
	Simulations that allow users to practice course skills, even if they don't have access to Windows 2000
	A glossary
	A Skill Assessment

	All courses in the series Windows 2000 Professional, a passing score on MCSE exam 70-210, or equivalent experience
	All courses in the series Windows 2000 Server MCSE 70-215, a passing score on MCSE exam 70-215, or equivalent experience
	All courses in the series Windows 2000 Network Administration MCSE 70-216, a passing score on MCSE exam 70-216, or equivalent experience
	All courses in the series Windows 2000 Active Directory MCSE 70-217, a passing score on MCSE exam 70-217, or equivalent experience
	Windows 2000 Security Design MCSE 70-220: Analyzing Business Requirements (W22001)
	Windows 2000 Security Design MCSE 70-220: Analyzing Technical Requirements (W22002)
	Windows 2000 Security Design MCSE 70-220: Establishing a Security Baseline (W22003)
	Windows 2000 Security Design MCSE 70-220: Planning Security for System Resources (W22004)

	Windows 2000 Security Design MCSE 70-220: Designing Security Policy Inheritance (W22006)
	Windows 2000 Security Design MCSE 70-220: Protecting Resources with Auditing and Encryption (W22007)
	Windows 2000 Security Design MCSE 70-220: Using Native Windows 2000 Authentication (W22008)
	Windows 2000 Security Design MCSE 70-220: Using Alternate Authentication Strategies (W22009)
	Windows 2000 Security Design MCSE 70-220: Designing a Public Key Infrastructure (W22010)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Network Services (W22011)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Access between Networks (W22012)
	Windows 2000 Security Design MCSE 70-220: Designing Security for Communications Channels (W22013)

Microsoft® is a registered trademark of Microsoft Corporation.
Windows 2000® is a trademark of Microsoft Corporation.