6425: Configuring Windows Server 2008 Active Directory Domain Services

This five-day training provides in-depth training on configuring Active Directory Domain Services (AD DS) in a distributed environment, implementing Group Policies, performing backup and restore, and monitoring and troubleshooting Active Directory related issues.

Doelgroep

This training is intended for Active Directory Technology Specialists, Server Administrators, and Enterprise Administrators who want to learn how to implement Active Directory in a distributed environment, secure domains by using Group Policies, back up, restore, monitor, and troubleshoot Active Directory configuration to ensure trouble-free operation.

Voorkennis

• Basic understanding of networking.
• Intermediate understanding of network operating systems.
• An awareness of security best practices.
• Basic knowledge of server hardware.
• Some experience creating objects in Active Directory.
• Basic concepts of backup and recovery in a Windows Server Environment.

Inhoud

Module 1: Introducing Active Directory Domain ServicesThis module explains how to install and configure Active Directory Domain Services and install and configure a read-only domain controller.

Lessons:

• Overview of Active Directory, Identity, and Access
• Active Directory Components and Concepts
• Install Active Directory Domain Services
Module 2: Administering Active Directory Securely and EfficientlyThis module explains how to work securely and efficiently in Active Directory.

Lessons:

• Work with Active Directory Administration Tools
• Custom Consoles and Least Privilege
• Find Objects in Active Directory
• Use Windows PowerShell to Administer Active Directory
Module 3: Managing Users and Service Accounts This module explains how to manage and support user accounts in Active Directory.

Lessons:

• Create and Administer User Accounts
• Configure User Object Attributes
• Automate User Account Creation
• Create and Configure Managed Service Accounts
Module 4: Managing Groups This module explains how to create, modify, delete, and support group objects in Active Directory.

Lessons:

• Overview of Groups
• Administer Groups
• Best Practices for Group Management
Module 5: Managing Computer Accounts This module explains how to create and configure computer accounts.

Lessons:

• Create Computers and Join the Domain
• Administer Computer Objects and Accounts
• Perform an Offline Domain Join
Module 6: Implementing a Group Policy Infrastructure This module explains what Group Policy is, how it works, and how best to implement Group Policy in your organization.

Lessons:

• Understand Group Policy
• Implement GPOs
• Deeper Look at Settings and GPOs
• Group Policy Preferences
• Manage Group Policy Scope
• Group Policy Processing
• Troubleshoot Policy Application
Module 7: Managing Enterprise Security and Configuration with Group Policy Settings This module explains how to manage security and software installation and how to audit files and folders.

Lessons:

• Delegate the Support of Computers
• Manage Security Settings
• Manage Software with GPSI
• Auditing
• Software Restriction Policy and AppLocker
Module 8: Securing Administration This module explains how to administer Active Directory Domain Services Securely.

Lessons:

• Delegate Administrative Permissions
• Audit Active Directory Administration
Module 9: Improving the Security of Authentication in an AD DS Domain This module explains the domain-side components of authentication, including the policies that specify password requirements and the auditing of authentication-related activities.

Lessons:

• Configure Password and Lockout Policies
• Audit Authentication
• Configure Read-Only Domain Controllers
Module 10: Configuring Domain Name System This module explains how to implement DNS to support name resolution both within your AD DS domain and outside your domain and your intranet.

Lessons:

• Review of DNS Concepts, Components, and Processes
• Install and Configure DNS in an AD DS Domain
• Integration of AD DS, DNS, and Windows
• Advanced DNS Configuration and Administration
Module 11: Administering AD DS Domain Controllers This module explains how to add Windows Server 2008 domain controllers to a forest or domain, how to prepare a Microsoft Windows Server 2003 forest or domain for its first Windows Server 2008 DC, how to manage the roles performed by DCs, and how to migrate the replication of SYSVOL from the File Replication Service (FRS) used in previous versions of Windows to the Distributed File System Replication (DFS-R) mechanism that provides more robust and manageable replication.

Lessons:

• Domain Controller Installation Options
• Install a Server Core DC
• Manage Operations Masters
• Configure DFS-R Replication of SYSVOL
Module 12: Managing Sites and Active Directory This module explains how to create a distributed directory service that supports domain controllers in portions of your network that are separated by expensive, slow, or unreliable links.

Lessons:

• Configure Sites and Subnets
• Configure the Global Catalog and Application Partitions
• Configure Replication
Module 13: Directory Service Continuity This module explains about the technologies and tools that are available to help ensure the health and longevity of the directory service. You will explore tools that help you monitor performance in real time, and you will learn to log performance over time so that you can keep an eye on performance trends in order to spot potential problems.

Lessons:

• Monitor Active Directory
• Manage the Active Directory Database
• Active Directory Recycle Bin
• Back Up and Restore AD DS and Domain Controllers
Module 14: Managing Multiple Domains and Forests
This module explains how to raise the domain and forest functionality levels within your environment, how to design the optimal AD DS infrastructure for your enterprise, how to migrate objects between domains and forests, and how to enable authentication and resources access across multiple domains and forests.

Lessons:

• Configure Domain and Forest Functional Levels
• Manage Multiple Domains and Trust Relationships
• Move Objects between Domains and Forests