Here’s a great article from the AskPFE Blog regarding Active Directory Indexing. The article includes lots of screenshots so you can follow along in your lab.
Here’s a great article from the AskPFE Blog regarding Active Directory Indexing. The article includes lots of screenshots so you can follow along in your lab.
The AskDS Blog has a great list of Active Directory information links.
Anyway, what with the hiring we’re doing now, a month ago I promised you some further reading around how you can amp up your Active Directory skills. Rather than burying it in another mail sack, I figured I’d lay it all out here in one spot. If you feel like you need to fill in the cracks on your directory service knowledge, here’s what we force feed our new hires
Core Technology Reading
If you read nothing else, read these core pieces. While they are Win2003/XP specific, that’s still at least 75% of the business install base and highly relevant. For the most part things don’t change that much architecturally between versions either (ignoring GP and User Profiles). They give you the fundamentals to build on later.
Active Directory Collection
Active Directory Replication Model
Active Directory Replication Topology
DNS Technical Reference
Kerberos Authentication Technical Reference
Public Key Infrastructure (PKI)
TCP/IP Technical Reference
Post Graduate Technology Reading
Then we get to the more advanced subjects, the specific features added in later models, and the things that will take you into rarefied air. Much of this is Windows Server 2008 and later too, so if you haven’t started rolling out our later OS this will get you ready. If you can get through these, you’re ready to run AD in the environments with 100,000+ computers. And as I always tell people, if you know how something works, you can troubleshoot any kind of problem – even if the issue has never seen seen before.
Active Directory Domain Services in the Perimeter Network
Active Directory and Active Directory Domain Services Port Requirements
Active Directory Schema
ADMT Guide: Migrating and Restructuring Active Directory Domains
AD DS Design Guide
Core Group Policy Technical Reference
Designing a Group Policy Infrastructure
DFS Replication: Frequently Asked Questions (FAQ)
Distributed File System (DFS)
DNS Support for Active Directory
Domain and Forest Trusts Technical Reference
File Replication Service FRS
Global Catalog Technical Reference
Group Policy Components
Group Policy Management Console
Group Policy Object Editor
Logon and Authentication Technologies
Managed Service Accounts
Managing Roaming User Data Deployment Guide
Operations Masters Technical Reference
Read-Only Domain Controller Planning and Deployment Guide
Running Domain Controllers in Hyper-V
Security Compliance Manager
Security Identifiers Technical Reference
Security Descriptors and Access Control Lists Technical Reference
Security Principals Technical Reference
Staging Group Policy Deployments
SYSVOL Replication Migration Guide: FRS to DFS Replication
User Account Control Technical Reference
What’s New in Active Directory Domain Services in Win2008
What’s New in Active Directory Domain Services in Win2008 R2
Windows Smart Card Technical Reference
Windows Time Service Technical Reference
WINS Technical Reference
Get the information here.
The article has some deep technical information on the core Active Directory details such as :
The post is really great work and extremely helpful in understanding these key details.
NOTE: I do not work for Microsoft, nor have I ever worked for Microsoft. The information in this post is my thoughts and not those of Metcorp Consulting, LLC, Microsoft, or any other company. Unless said company read my mind and placed some thoughts there… I should buy a Dell…
The content in this post belongs to Sean Metcalf and may not be used for any purpose without express written consent by him.
Also, NOTHING in these posts will get you to pass and become a Microsoft Certified Master (MCM). Only your knowledge & experience and internal motivation to be the best will do that. Sure, you can gleam some ideas that will help you prepare, but the MCM Program doesn’t teach to the test. You are tested on potentially anything and EVERYTHING that is Active Directory related (check the pre-reading list for topic coverage). The tests are extremely difficult. You are expected to be at the top of your game to pass.
I use both “Active Directory” and “Directory Services” interchangeably. The official certification is Microsoft Certified Master Directory Services (Windows Server 2008 R2).
This is Part 2, continued from Part 1: My Journey to Become a Microsoft Certified Master (MCM) Part 1: The Journey Begins
I arrived safely and checked into the motel of a hotel which is small, but serviceable. At least it is about 1 block away from the building I need to walk to every day (and 7-Eleven is 1 block the other way). I found that Safeway, an office supply store, a Thai restaurant, Red Robin restaurant, Arby’s, 5 Guys, Subway, and many other stores were about a 15 minute walk from the hotel.
NOTE: If you need a decent, cheap hotel to stay in during the MCM Program, the Homestead is OK. If I had to do it again, I would seriously consider the Residence Inn which is only a few minutes more walk to the Microsoft building we were in. Homestead now has free WiFi & wired Internet, but still only provides servicing the room once a week. There’s a small, small kitchen area with a sink, microwave, stove top, and regular Refrigerator. It was suitable for my needs while there.
Sunday night I spent eating delivered pizza watching Super Bowl XLVI (46). I relaxed and didn’t read anymore figuring my brain needed a night off before the pain started. Enjoyed the game and found myself wondering if Madonna was 50 or 60 (she’s 54)…
The hotel room:
Day One: Monday (2/6/2012)
One month ago today, I started the first day at 7am to get badged, signed NDA documents, and at about 7:30am arrived in the classroom – my home for the next 2 weeks.
There were 24 people attending this “14th Rotation” of the Directory Services Master program, 5 people from overseas (not Microsoft), 3 people from the US (not Microsoft), and 15 Microsoft PFEs from around the world (Asia, Australia, Canada, Russia, Romania, etc) . Everyone seems to have about 7-10 years AD experience (one person joked they had 15 years of AD experience since they worked with Exchange). The PFEs are, as expected, knowledgeable and… chatty. In a good way. They are relaxed and ready for the next 14 days. 60% of the people in the room is Microsoft employed & trained personnel from all over the world and are considered at the top of their game – this leads to some interesting customer stories (single DC for a single domain forest became corrupt… what to do…).
At around 8am MCM DS PM Ryan Conrad told us what to expect: this is the largest MCM DS class yet and based on statistics, only about 8 people will attain MCM status this rotation. Yup, 8 out of 23. Sobering words. 11 ended up passing this MCM rotation, but I’m jumping ahead. We learn that class this week is Monday – Saturday (though only 4 hours on Saturday) and we have Sunday off. I don’t quite view Sunday as a day off considering our first test is on Monday which makes Sunday a study day for me.
Some other items Ryan pointed out (and my observations):
We also learned that the nearby Microsoft Cafeteria was closed for renovations, though there were several New York style Food Trucks outside every weekday at lunch time.
Cafeteria Radiation Sign
Temporary Cafeteria Tent
You gotta love “Happy Grillmore!”
Caribbean Jerk Station… mmmmm….
After introductions (most people in the room have been working with AD in some capacity since Windows 2000) and some logistics, the first presenter, Matt Reynolds, launches into Core AD topics (the AD DB, Schema, LDAP,etc) at about 9:30am. We break 1 hr for lunch (12pm – 1pm) and finish for the day at just after 6pm. Not a bad first day. I left the building for my hotel room at around 9pm (working on labs and ensuring my notes were complete).
The “Core DS” topics with Matt Reynolds covered the AD Jet database which fascinates me. Ever wonder why AD uses Jet database technology instead of SQL? Ever wonder how the change “remove a user from a group is handled and replicated?” or the difference between a Foreign Principal and Domain A user in Domain B group is stored in the database? This is the session that covers a lot of these interesting topics. Using a tool and LDP.exe (separately), we dumped the AD database and examined the structure identifying objects by their PDNT, impacts & effect of indexing attributes and much, much more.
Day 1 of 15 was done and surprisingly, I didn’t feel crushed. I was completely expecting to be overwhelmed with new content, but thankfully, I felt well prepared for a Master-level coverage of AD. I learned some minor things along the way, but I knew most of the discussed topics. Certainly there were some nuances I didn’t completely understand that were clarified on this day and there were a couple of things I paid careful attention to since I had never had to perform the operations before. However, as I looked through the 21 pages of notes I took on Day 1, I didn’t see much I hadn’t already read & studied (and thankfully retained pretty well).
After day 1, I wrote “God willing, this will be the tone through the rest of the course and I will be able to stay on top of the content.” That is the key. This is a 300 – 400 level course and if you are learning this stuff for the first time or are hazy on it, there’s no time to slow down to comprehend it. That has to be done at night and at that point you are missing out on practice lab time and reviewing the material covered that day. Ryan noted at the beginning of Day 1, that if you put the time and effort into it, you can pass. That’s really what it boils down to. I spent a lot of time front-loading my studying by reviewing all the pre-reading list material until I knew it cold. I realized then that I wouldn’t have time to process and gain comprehension of more difficult topics.
With that said (written?), I have been doing some hardcore prep for this for about a year, diving deep into the esoteric topics of AD database change committal & AD structure. I have also done a ton of work using Powershell to extract data & stats from all sorts of AD elements. Don’t underestimate the MCM Program. Your best bet is to plan to be crushed with deep technical information and prepare for that. This helps tremendously. Trust me.
More Core DS fun on the menu for Day 2.
Day 2 was much the same as Day 1 for me. Not crushing. Same as Day 3. Day 4 was AD Replication which delved into an area with which I don’t have as much experience as many of the others in the program specifically involving USN tracking, Up-to-Dateness Vector & High WaterMark. That was the first time (and last) during the MCM Program that I felt out of my depth (and maybe LDS – aka AD-lite). The week finished as it began. I felt like I knew most of the material covered with some added depth and minor areas I didn’t know about. I certainly felt much smarter about AD and realized I had a lot of studying to do before the first computer-based knowledge test on Monday morning at 8am.
The first weekend started with a half-day of AD LDS which I have never used or worked with. I did learn something really cool I didn’t know before and that is one can export a production AD schema and import it into an LDS test environment and use that for testing schema updates (http://technet.microsoft.com/en-us/library/testing-for-active-directory-schema-extension-conflicts%28v=ws.10%29.aspx). Especially with 3rd party schema updates.
After learning some interesting and some not so interesting details regarding LDS, Ryan gave us some additional information about our first knowledge test on Monday. He showed us a question that had been removed for a reason I don’t think I am allowed to mention, but it doesn’t really matter why. The question gave me great insight into how to prepare for the test. Sorry, no more details on that.
It would be really cool to have Surface as a coffee table in my house. Ironically, I saw 4 people playing with a deck of physical playing cards on top of the Surface computer…
The First Knowledge Test
I took the first knowledge (Prometric-based) test Monday morning of Week 2 @8am. Usually when I take a Microsoft test, I skip any questions that will take me more than 1 minute to answer. I also mark any question I am not 100% certain I have answered correctly. This provides me plenty of time to complete the test and not feel rushed. When I get through all the questions and arrive at the summary page at the end, I review all the marked questions (skipped questions first) taking as much time as I need. As I go through each of the marked questions, the once I feel pretty sure are correct, I un-mark. After going through this familiar process, I still had about 18 questions marked! Down from 35! I reviewed them all again, then clicked on End Test. When I was prompted “Are you sure you want to end the test?” I clicked No.
I admit, I was sweating at this point. Here I was a year later after all the studying, note-taking, note-re-writing, and I was about to complete 1 of 3 tests that could get me the MCM certification. If I failed one, I was done for 45 – 90 days until I could attempt a retake and lose momentum. I don’t think I have experienced test stress like that ever before. I reviewed my Marked questions again and failed in feeling any more confident with my answers. I clicked End Test a second time, and quickly clicked through every screen until I got to the results screen.
Now, the MCM test results screen is unlike the MCP test results screen which shows a huge PASS in the middle of the screen with little other distracting information around it (other than score). The MCM result screen shows your name, address, some other stuff and then a small pass about 2/3 the way down with test immediately above it (if you passed). I mention elsewhere the tests are Pass/Fail which isn’t entirely true. They are Pass/No Pass. If you meet the pass score (which we don’t know), you Passed! If not, you wait a couple of days until you get your score. This is so that if there is a question that no-one gets right, the passing score can be adjusted. Ryan stated that this has NEVER happened, but is an option. This is why I note the tests as Pass/Fail.
At first glance, the questions didn’t seem that tough. Until you read the questions a few times. The test questions were often structured so that 1 word changes the answer from A to D or there are several elements in the question and each element alters the answer. Depending on how well you read the question (and understand the material), you will select A, B, C, or D. I had several questions where I changed my answer 3 times due to me re-reading the question 3 times. I had missed a critical element each time. I have to emphasize how critically important understanding AD, how it works, how different OS versions have AD differences really is. In life and in Microsoft certification testing.
So, in retrospect, seeing a sample question on Saturday may have lulled me into a false confidence.
I Passed! Out of the 23 people in the program, only about 60 – 70% passed the first test (by my reckoning). I am one of a few non-Microsoft people ( out of 8 ) who passed this test. Several Microsoft employees didn’t pass. These tests are no joke.
Day 1 of Week 2 (Day 7 of instruction) started with the 2.5 hour knowledge test at 8am. Several people disappeared after they finished the test until later that after (likely didn’t pass the first test). After a lunch break until 1pm, we dove into 5 hours of PKI + 2 hours of PKI labs. Which is about where we picked up on in Day 2, 300 level PKI information for about 9+ hours.
The rest of week 2 involved getting more in depth instruction on FRS (did you know there’s a 3 second delay from the time a file change is written in the NTFS Change log to when NTFRS starts work to replicate the change?), DFS-N (emphasis on differences between domain & computer namespaces), DFS-R (Yes, the migration from FRS SYSVOL to DFS-R SYSVOL is straightforward and you can skip to stage 3 -You Shouldn’t-, but what REALLY happens during this process?), Group Policy (yes, Group Policy is stored in 2 different places, but how and why?), disaster planning, and new AD features starting with Windows Server 2008 & 2008 R2.
This is an incredible learning experience. It is obvious why there are only a handful of people pass each rotation. There is so much deep technical information compressed in a short amount of time. This is mainly because as Masters, we were all expected to know most of the information. The program is meant to refresh and enhance existing knowledge as well as to ensure deeper comprehension of relevant technology areas. In week 1, we jumped from updating the schema, to indexing attributes, to updating AD using LDP.exe (LDAP tool), to searching AD using LDP, to triggering tasks on FSMOs and DC/GCs using a LDAP modify request, to tracking authentication using NetMon, to … Lots of really great stuff. Did I know much of the information? Sure. Did I know all of it? No way. Certainly not the way it was packaged and presented. The Master class alone is well worth the price of admission.
Here was my schedule for Week 1 (aka time at Building 40):
Daily sessions ran from 08:00 until around 17:00 – 18:00.
After the daily sessions there were several optional practice labs that didn’t walk you through how to do things. The lab would have some items with an objective and maybe some hints.
Sunday, I studied from 11:00am – 5pm and then joined 8 of my fellow candidates in a 4 hour review of the material from the past week from 6pm – 10pm.
NOTE: These practice labs are not the cert lab. Doing all these labs guarantees nothing except better comprehension of the material covered in the slides and by the instructor.
My study area in the hotel room:
During Week 1, we covered the following in depth topics:
Daily sessions ran from 08:00 until around 17:00 – 18:00.
During Week 2, we covered the following in depth topics:
The Knowledge Tests:
My time was filled with 10+ hour days of classroom instruction (at 300 & 400 level) and computer lab work which I followed with hours of studying. Every day, I copied down the information from the slides into my 5 subject college notebook as well as key insights from the instructors. I have found in the past that writing notes and especially re-writing my notes greatly improves my comprehension as well as material retention. During week 2, I typed my hand-written notes into OneNote hoping to have some useful information to help me pass the Certification Lab and improve knowledge retention.
There were 2 computer-based knowledge tests (~ 50 questions, 2.5 hours each) which involved extremely difficult multiple-choice questions (several elements in the question combined in certain ways could change the correct answer from A to C or B to D – sometimes it was a single word that changed the answer).
My strategy while at the MCM Program was to focus on 1 test at a time. I wanted as much positive momentum as possible, gaining confident as I progressed. I figured that retaining as much knowledge as possible would be beneficial during the Cert Lab.
The first knowledge test, on Monday, 2/13, had ~ 70% pass rate in our “rotation” of 23 people, 15 of which were Senior Microsoft Premier Field Engineers and 8 were “external” (non-Microsoft).
The second knowledge test was just days later on Saturday, Feb 18th. The pass rate for that one seemed to improve slightly although some who passed the first test failed the second one. The questions were similar to the first one, but like Manny, our instructor from the last day said, “The test is easier, but more difficult.” The test material wasn’t as deep, but was tougher since week 1 is more core AD topics, while week 2 covers the more peripheral topics.
After a short lunch break, it was time to study for the Certification Lab Test.
Certification Lab Prep:
I questioned Ryan as much as I could to get information about the dreaded cert lab.
He had the following advice:
Based on this I formulated my plan for the cert lab:
Sunday, Feburary 19 – The Cert Lab
There was a lot of work to be done in 9 hours and was likely possible, but several items required additional steps to fix them. We were each handed an envelope containing a 6-page detailed scenario involving a list of tasks that need to be done in the 8 hours (+ 1 hour for “lunch” and breaks I never took). Each task took at least 5 steps, though most were 20+ steps to complete normally. In this environment, there were at least 10 additional steps required, and frequently more like 20+, to even get to where you could start on what you wanted to do. Each task included a clear objective and I could usually identify the necessary steps involved in completing the objective as well as about how long it would normally take (the additional work came out of nowhere).
Was it tough?
I don’t feel that it was as technically challenging (though NOT even close to easy) as it was overwhelming (certainly after the extremely difficult & tricky knowledge tests). Sure, there was a LOT of different things you had to know in order to start at step 1, but after passing both knowledge tests, that wasn’t as difficult. You got one thing done to see another item that needed fixing. Or, just when you thought you were done, something else popped up.
One guy turned in his test scenario and walked out after 3 hours effectively giving up. At noon.
It was not easy.
I followed my game plan of relaxing and taking it all in stride. I had a full night’s sleep and was well rested when I arrived.
I planned the first hour to put together my plan of attack and only used about 30 minutes for plan & prep before starting. I identified the most valuable tasks and planned to work on them first, leaving the low value targets for about the halfway mark. At first, the entire list of tasks seemed impossible to do in the time given and just when I was starting to feel overwhelmed, I dove in headfirst, not coming back up for air, or a break, for several hours. We were given an idea of how each component was weighted, so we could focus on the areas that were valued more highly.. I grabbed a stack of paper before we started and dedicated a sheet to each task I worked on. At one point, I had 4 sheets in front of me tracking progress on each.
I started with some of the tougher components (with higher value) and worked through them over the next 4 hours. The, I knocked out a couple of the easier items to build confidence (and feel like I was making progress). After that, I balanced between tougher and easier. I didn’t leave my desk until about 11:30am (bathroom break) and jumped right back in. At about 1pm, I noticed there was food on my way back from my 2nd bathroom break and grabbed a turkey sub and sat back down to continue fixing the broken item of the moment. I took one more bathroom break a couple hours later and before I knew it, time was up. So, maybe 7 minutes total break-time. I was extremely focused and pumped the whole time. Only at around 5pm did my back start to ache and I starting feeling fatigued.
I made sure I did something in every area of the scenario. In fact with most of the items, I didn’t even get to check if they were configured correctly since I ran out of time. One of the first items I worked on, I went through everything I believe I needed to do and FORGOT about it. A few of them I did a few steps and realized I needed an hour+ for each (I did what I could). I ran into a bunch of environmental issues that made even some of the simplest tasks take 5 times longer than they should have. The good thing was, I was expecting this. The bad thing was, I wasn’t expecting a simple task to take sooo much extra time. That is why after it was over, I was certain I had failed. I didn’t do as well as I would have liked and didn’t feel very successful.
There were several people who finished or were very close to finishing most of the tasks (and tested them successfully & even took screenshots as proof). Others finished about 50-75% of the tasks (to the best of their knowledge).
I did my best and feel that other than going back in time a bit, there isn’t anything else I could have done.
It was an incredible experience that few even attempt (Ryan said less than 200 people have gone through the MCM DS program) and I am humbled by the knowledge and experience of my fellow MCM candidates.
Ryan took us all out to Magianno’s for dinner. My mind was still spinning from the Cert Lab experience as I’m sure many others were feeling similarly.
I flew home first thing Monday morning and couldn’t help but go over the Cert Lab in my head. I passed both of the knowledge tests which was a tremendous accomplishment. I couldn’t possibly have passed the Cert Lab the first time, right?
Ryan sent an email out late Monday night stating that he finished scoring the Cert Lab (which took him all day) and that we would receive our Knowledge Test #2 scores and the Cert Lab results.
Tuesday I stayed home and tried to guestimate how I did on the Cert Lab. As the day progressed, I started to feel more positively and pretty good about my chances.
Tuesday, February 21st at 9pm, I received an email stating:
“Congratulations! You have earned the Microsoft Certified Master | Windows Server 2008 R2 Directory certification!”
I was stunned, only about 25% of all people who attend the program pass all 3 tests during the 2 weeks and the vast majority of MCMs have only achieved the certification after multiple retakes.
Random Photos from the trip:
Using a Porsche to transport furniture?
NOTE: All the information in this post was accurate as of February 2012. The MCM Program is updated and adjusted regularly.
Just a quick note before I start. I do not work for Microsoft, nor have I ever worked for Microsoft. The information in this post is my thoughts and not those of Metcorp Consulting, LLC, Microsoft, or any other company. Unless said company read my mind and placed some thoughts there… I should buy a Dell…
The content in this post belongs to Sean Metcalf and may not be used for any purpose without express written consent by him.
Also, NOTHING in these posts will get you to pass and become a Microsoft Certified Master (MCM). Only your knowledge & experience and internal motivation to be the best will do that. Sure, you can glean some ideas that will help you prepare, but the MCM Program doesn’t teach to the test. You are tested on potentially anything and EVERYTHING that is Active Directory related (check the pre-reading list for topic coverage). The tests are extremely difficult. You are expected to be at the top of your game to pass.
Also, I use both “Active Directory” and “Directory Services” interchangeably. The official certification is Microsoft Certified Master Directory Services (Windows Server 2008 R2).
The Journey Begins:
Years ago I heard about the Microsoft Ranger program which started with an internal Microsoft group of Exchange experts (Yes, I think I will name drop here: I worked closely with Ross Smith for a while many years ago). This program grew into what is now the Microsoft Certified Master (MCM) & Microsoft Certified Architect (MCA) programs. I did consider the MCM a few years ago when it was 3 weeks long, but I couldn’t get over a few psychological barriers: Have I worked on large enough environments? Did I know enough? Am I good enough? Three weeks is a really long time…
In early 2011, my close friend, D, challenged me with an email stating simply:
I see your future… And the future looks bright… So what’s stopping you?
Yeah.. so anyway. What can I do to help you begin preparing for the MCM? Or what can I do to help ENCOURAGE you to prepare for your MCITP Enterprise Administrator? whichever…
In the email was a link to the MCM Program. I looked it over and remember saying to myself (because occasionally I say stuff to me & vice versa), “yes in good time”. At that point, I still hadn’t become an MCITP, which meant I was a tad behind.
<SmallAmountOfBoasting> I mean when I picked up MCSE in 1997, I took and passed all of the required 6 tests in 6 weeks. I was a bit lazier on the Windows 2000 MCSE and spent a few months on that taking all the necessary tests to pick up the new MCSE title without the upgrade tests. The Windows 2003 MCSE seemed to take up the better part of a year due to my certification lack of focus and stubborn resistance to taking upgrade exams. Maybe that’s part of the challenge for me – doing the whole thing from scratch, forcing myself to understand the nuances from OS to OS… I digress. </SmallAmountOfBoasting>
So, in March of 2011, I committed to myself & my good friend D. that I would pass all the necessary tests to become a MCITP:EA by the end of May. Oh, one other thing I forgot to mention, I had 1 year old triplets in the house at that time, so doing anything like going off in a corner to read & study was a challenge. Apparently, that’s what I needed. A good challenge. I passed the requisite 5 tests in 4 weeks (I took 2 on the first Saturday) and had achieved my goal of MCITP ahead of time as well as busting my previous personal Microsoft test-taking record.
About a month after the MCM email from my buddy D, I replied back with the link to the MCM program.
So, I think it is about time for me to step up to the big league.
At that point, I embarked on a journey towards an industry advanced certification (Microsoft Certified Master, aka MCM) that about 600 people in the world have attained. I took this journey seriously and approached it like it was a black belt in martial arts. Or becoming a Jedi Master. I’ll go with the latter.
With the MCITP:EA behind me, I looked forward to TechEd in May 2011 joined by my faithful sidekick— er, I mean best buddy, ol’ pal D. While perusing the schedule of wall to wall sessions I couldn’t possibly attend unless I somehow figured out how to clone myself (and that didn’t work out so well for Micheal Keaton), although I do like pizza and the number 7…
Where was I…. Oh yeah. I discovered a small side-session off in the corner set up as a group discussion about the MCM program. They had me at MCM…
I ventured into the small session room along with about 20-30 other people interested in getting more information about the, at that time, effectively secret society known as the Microsoft Certified Masters.
This session was hosted by none other than David Burjam-Burr, Program Manager of the Exchange Masters program, I sat up front notebook ready. I learned some fascinating tidbits which also sounded a little frightening.
Here they are (all Exchange MCM related):
At least that’s what I found when reading through my chicken-scratch. It may be different by now, or not.
Needless to say, not much regarding the AD (Directory Services) stuff which I as most interested in. I think there was 1 maybe 2 other people in the room interested in the AD MCM. Oh, here’s another note to make on feel more confident about the MCM path, (yes, sarcasm): there was one MCM in the room and he didn’t pass until the 3rd test (2 retakes)! Talk about a confidence booster!
After the session I scoured the Microsoft Q&A areas attempting to seek out an MCM to ask all the MCM DS questions I had preventing me from thinking about anything else. I found one & D. and I cornered him, though we were shortly humbled by his MCM-level knowledge.
Reminds me a little of a story about a couple of DJs that used to broadcast in the DC Area (Don & Mike) and a former Super Bowl winning Quarterback & Hall of Famer named Joe Theisman. They were out playing golf one day and Don & Mike were giving Joe a hard time about his golf game (as I understood it, Joe was/is the consummate competitor and was having an off day). Joe spun around at the 12th hole and got in their faces and said “Tell you what, when you have one of these you can talk sh$# until then shut the F#$$ up and play some golf”. This was said quite forcefully as he held up the oversized, diamond encrusted Super Bowl XVII ring in their faces. As I understand it, the rest of the game was rather quiet until D&M bought all the rounds at the 19th hole. Or nothing like that may have ever happened… but it makes a good story. In other words, when you have reached a level in your career, you have no need to say anything. The “Master” was gracious enough to entertain our questions and I learned the following tidbit:
Each test question takes about 2-3 hours to develop and are tested by special “test psychologists” (Psychomatricians https://en.wikipedia.org/wiki/Psychometrics). These test specialists ensure that someone who is expert at taking tests can’t pass without knowing the answer. Tough tests indeed.
I walked out of the Atlanta Convention Center that day with a new challenge. A new purpose. I told my lovely wife that I was going to go to the MCM Directory Services program less than a year later, April 2012 (it was later moved to February). The gracious person that she is, simply said “sure, we’ll talk about it later.” Later involved me reasoning why I could go in October, mere months away. My determination kept my excitement level up as well as my ambition to become a Master.
I spent May & June preparing an application package for the program (many apply, not all are accepted).
The pre-requisites for the application are:
And sample applicant docs: https://dynamicevents.emeetingsonline.com/emeetings/websitev2.asp?mmnno=290&pagename=SITE123800
In late June I paid the $135 application fee, they verified my MCSE/MCITP credentials and I received a link and credentials for a Microsoft SharePoint site where I could submit my resume, a design doc I authored (sanitized for my customer’s protection), a current project summary doc, and two previous project summary docs all of which needs to show breadth & depth of AD knowledge & experience.
Sometime in the middle of July, I submitted my application docs after fully reworking my resume and writing several pages for each project summary documents (I figured they could always ask me for an abbreviated version – I don’t do anything half-way). I also selected a recent design document I wrote for a customer after performing intensive sanitization.
I was accepted after Microsoft reviewed my application & I received an email from Ryan Conrad, Program Manager for the MCM DS program and a MCM DS himself. We coordinated a date/time for a phone interview to go over my application package and to discuss the program.
The phone interview took place in early August. While Ryan didn’t ask any questions about my application package (I guess I overwhelmed him with information), he did talk about MCM Program expectations. I learned that AD RMS & AD RS had been removed from the program due to time constraints. I gathered from this phone conversation that this would be extremely tough and that I would have to be at the top of my game to pass. Great time to get this information as I was on vacation camping when I spoke to Ryan. A day or two after speaking with Ryan, I received an email stating that I had been accepted into the MCM Program and could schedule (and pay for) attending a session.
At around this time, D. told me he would buy me a Jedi Robe with something to the effect of “Microsoft Jedi Master” on it. The incentives were stacking up!
NOTE: Due to family issues, I had to push back the MCM Program I could attend to February 2012.
The Hard Work
I found the MCM Pre-reading reference list: http://www.dynamicevents.com/MCM/MCM_Windows2008-Directory_Pre-reading_v5.pdf
I printed it out and used it as a reference to ensure I read all the topics I needed to know before attending the MCM Program.
Since August I read, studied, and built & rebuilt a computer lab environment to text my skills & knowledge. I primarily read through the MCM AD Pre-reading reference list.
Interestingly enough I bought an Android tablet (Asus eePad Transformer) over the Summer to read through all the documents on the list. I used a standard computer to visit each of the websites on the list and downloaded the document (if available for download) or perform a mass copy of the entire webpage and pasted into a new Word document on my computer. After some minor formatting fixes, I saved the file with the appropriate name. I did the same with many of the most interesting and relevant articles on the AskDS Blog by clicking on a tag (Kerberos, for example) and skimming through the available content, reading the shorter articles and saving the longer ones in Word docs. I created a new folder in my DropBox called “MCM” and within this folder I created 2 sub-folders “All MCM Docs” & “Pending Reading List”. Into each of these folders I copied all the MCM pre-reading material I gathered, mostly Word docs with a couple of PDFs, and copied all of it into both of the folders. As I finished reading each document on the tablet, I deleted the file out of the “Pending Reading List” folder in DropBox providing me obvious status of where I was in my reading. I could, of course, always go back to a document to re-read something later on by opening the doc from the “All MCM Docs”.
Starting in November through the end of December, I averaged about 2 hours a day studying in addition to working FT, spending time with family, and running a business.
Each weekday involved getting to work early enough (by 7am) so I could leave work by 3pm, get home, help my wife with the girls and get them to bed on time (around 6pm). After they were in their cribs, I grabbed the tablet and went down to my “man cave” where I entered the Active Directory Zone. I read for about 2 hours and then went back upstairs to spend some QT with my wife.
The weekends afforded me additional time during the day for reading, and I took advantage. While the girls napped (or were supposed to be napping), I read. At night I read. When my wife went to events at friends’ houses and took a break from taking care of triplets, I read. I read for hours on end focuisng on comprehension – If I didn’t fully understand a concept, I re-read it and even white-boarded it until I got it.
My studying included reading through all the docs first. Then after I got through the primary ones, I read more quickly through the peripheral ones. I was able to get through the pre-reading list by the end of December.
At this point, I paid for the MCM DS rotation in Feburary 2012 (2/6 – 2/19), all $14,000 of it. I booked a non-stop flight to Seattle, WA the day before the program started (which ended up being Super Bowl Sunday). I discovered the Homestead Suites Hotel (Bellevue, WA) was very close to the Microsoft building that would be my home for 2 weeks while in Redmond, so I booked a room there from Super Bowl Sunday to Persident’s Day. The rate was reasonable enough – $75/night + any additional fees.
Starting in January, I focused 100% on lab work. This meant standing up new lab forests at different Domain Functional & Forest Functional levels, messing around with the new features of each, creating and breaking trusts and secure channel relationships, running some DCs on Server Core, some on the full install of Win2k8 R2, and several RODCs scattered here and there.
The real fun was when I fired up WireShark and captured traffic as it went across my lab. I captured user logons, opening Outlook, computer first boot-up, DCPromo up a new DC, RODC replicate single object, replication between 2 DCs, mass user creations, mass user deletions, etc.
1 Month to Crunch-Time:
As the weeks counted down towards February 6th, I focused more on core knowledge areas and dove into more technical detail with each passing day. This involved going back to what I saw as the core AD documents:
I read through each one focusing on the details and when I went into customer sites, explained every little detail to whoever would listen.
I did whiteboard sessions on:
I found that talking about the technology, especially the details helped firm up in my head how things really worked at every level.
The week before I was scheduled to fly to Seattle, WA, I slowed down. I focused on spending time with family, wrapped up projects at work, and only read about an hour each day.
February 5th: Departure Day
On Super Bowl Sunday, I kissed my girls goodbye for 2 weeks while I attended the elite Microsoft Certified Master (MCM) Directory Services Program at Microsoft headquarters in Redmond, WA.