In this comprehensive course you will not only discuss the crucial concepts and best practices of Active Directory, but you will also discover through hands-on exercises the Active Directory roles available in Windows Server 2008. You will gain the knowledge and skills to configure Active Directory Domain Services (AD DS) in a distributed environment, and you will create and configure Group Policies, perform backup and restore, and monitor and troubleshoot Active Directory-related issues.
This course incorporates materials from the Official Microsoft Learning Product 6425: Configuring Windows Server 2008 Active Directory Domain Services.
What You'll Learn
•Implement and configure Active Directory domain services in your enterprise environment
•Administer a Group Policy infrastructure
•Back up, restore, monitor, and troubleshoot AD configuration
•Ensure trouble-free AD operation
Course Outline
1. Introduction to Active Directory Domain Services (AD DS)
•Active Directory, Identity, and Access
•Active Directory Components and Concepts
•Install AD DS
•Extend IDA with Active Directory Services
2. Secure and Efficient Administration of Active Directory
•Work with Active Directory Snap-Ins
•Custom Consoles and Least Privilege
•Find Objects in Active Directory
•Use DS Commands to Administer Active Directory
3. Manage Users
•Create and Administer User Accounts
•Configure User Object Attributes
•Automate User Account Creation
4. Manage Groups
•Manage an Enterprise with Groups
•Administer Groups
•Best Practices for Group Management
5. Support Computer Accounts
•Create Computers and Join the Domain
•Administer Computer Objects and Accounts
6. Implement a Group Policy Infrastructure
•Understand Group Policy
•Implement a Group Policy
•Explore Group Policy Settings and Features
•Manage Group Policy Scope
•Group Policy Processing
•Troubleshoot Policy Application
7. Manage Enterprise Security and Configuration with Group Policy Settings
•Delegate the Support of Computers
•Manage Security Settings
•Manage Software with GPSI
•Auditing
8. Secure Administration
•Delegate Administrative Permissions
•Audit Active Directory Changes
9. Improve the Security of Authentication in an AD DS Domain
•Configure Password and Lockout Policies
•Audit Authentication
•Configure Read-Only Domain Controllers
10. Configure Domain Name System (DNS)
•Review DNS Concepts, Components, and Processes
•Install and Configure DNS Server in an AD DS Domain
•AD DS, DNS, and Windows
•Advanced DNS Configuration and Administration
11. Administer AD DS Domain Controllers
•Domain Controller Installation Options
•Install a Server Core DC
•Manage Operations Masters
•Configure DFS Replication of SYSVOL
12. Manage Sites and Active Directory Replication
•Configure Sites and Subnets
•Configure the Global Catalog and Application Partitions
•Configure Replication
13. Directory Service Continuity
•Monitor Active Directory
•Manage the Active Directory Database
•Back Up and Restore AD DS and Domain Controllers
14. Manage Multiple Domains and Forests
•Configure Domain and Forest Functional Levels
•Manage Multiple Domains and Trust Relationships
Labs
Lab 1: Install an AD DS DC to Create a Single Domain Forest
•Perform Post-Installation Configuration Tasks
•Install a New Windows Server 2008 Forest with the Windows Interface
Lab 2A: Create and Run a Custom Administrative Console
•Perform Basic Administrative Tasks Using the Active Directory Users and Computers Snap-In
•Create a Custom Active Directory Administrative Console
•Perform Administrative Tasks with Least Privilege, Run as Administrator, and User Account Control
Lab 2B: Find Objects in Active Directory
•Using Saved Queries
Lab 2C: Use DS Commands to Administer Active Directory
Lab 3A: Create and Administer User Accounts
•Create User Accounts
•Administer User Accounts
Lab 3B: Configure User Object Attributes
•Examine User Object Attributes
•Manage User Object Attributes
•Create Users from a Template
Lab 3C: Automate User Account Creation
•Export and Import Users with CSVDE
•Import Users with
Lab 4A: Administer Groups
•Implement Role-Based Management Using Groups
•Manage Group Membership from the Command Line
Lab 4B: Best Practices for Group Management
•Implement Best Practices for Group Management
Lab 5A: Create Computers and Join the Domain
•Join a Computer to the Domain with the Windows Interface
•Securing Computer Joins
•Managing Computer Account Creation with Best Practices
Lab 5B: Administer Computer Objects and Accounts
•Administer Computer Objects Throughout Their Lifecycle
•Administer and Troubleshoot Computer Accounts
Lab 6A: Implement Group Policy
•Create, Edit, and Link GPOs
Lab 6B: Explore Group Policy Settings and Features
•Use Filtering and Commenting
•Mange Administrative Templates
Lab 6C: Manage Group Policy Scope
•Configure GPO Scope with Links
•Configure GPO Scope with Filtering
•Configure Loopback Processing
Lab 6D: Troubleshoot Policy Application
•Perform RSoP Analysis
•Using the Group Policy Results Wizard
•View Policy Events
Lab 7A: Delegate the Support of Computers
•Configure the Membership of Administrators Using Restricted Groups Policies
Lab 7B: Manage Security Settings
•Manage Local Security Settings
•Create a Security Template
•Use Security Configuration and Analysis
•Use the Security Configuration Wizard
Lab 7C: Manage Software with GPSI
•Deploy Software with GPSI
•Upgrade Applications with GPSI
Lab 7D: Audit File System Access
•Configure Permissions and Audit Settings
•Configure Audit Policy
•Examine Audit Events
Lab 8A: Delegate Administration
•Delegate Permission to Create and Support User Accounts
•View Delegated Permissions
•Remove and Reset Permissions
Lab 8B: Audit Active Directory Changes
•Audit Changes to Active Directory using Default Audit Policy
•Audit Changes to Active Directory using Directory Service Changes Auditing
Lab 9A: Configure Password and Account Lockout Policies
•Configure the Domain's Password and Lockout Policies
•Configure Fine-Grained Password Policy
Lab 9B: Audit Authentication
Lab 9C: Configure Read-Only Domain Controllers (RODCs)
•Install RODC
•Configure Password Replication Policy
•Manage Credential Caching
Lab 10A: Installing the DNS Service
•Add the DNS Server Role
•Configure Forward Lookup Zones and Resource Records
Lab 10B: Advanced Configuration of DNS
•Enable Scavenging of DNS Zones
•Create Reverse Lookup Zones
•Explore Domain Controller Location
•Configure Name Resolution for External Domains
Lab 11A: Install Domain Controllers
•Create an Additional DC with the AD DS Installation Wizard
•Add a Domain Controller from the Command Line
•Remove a Domain Controller
•Create a Domain Controller from Installation Media
Lab 11B: Install a Server Core DC
•Perform Post-Installation Configuration on Server Core
•Create a Domain Controller with Server Core
Lab 11C: Transfer Operations Master Roles
•Identify Operations Masters
•Transfer Roles
Lab 11D: Configure DFS-R Replication of SYSVOL
•Observe the Replication of SYSVOL
•Prepare to Migrate to DFS-R
•Migrate SYSVOL Replication to DFS-R
•Verify DFS-R Replication of SYSVOL
Lab 12A: Configure Sites and Subnets
•Configure the Default Site
•Create Additional Sites
Lab 12B: Configure the Global Catalog and Application Partitions
•Configure a Global Catalog
•Configure Universal Group Membership
•Examine DNS and Application Directory Partitions
Lab 12C: Configure Replication
•Create a Connection Object
•Create Site Links
•Move Domain Controllers into Sites
•Designate a Preferred Bridgehead Server
•Configure Intersite Replication
Lab 13A: Monitor Active Directory
•Monitor Real-Time Performance Using Task Manager and Resource Monitor
•Use Reliability Monitor and Event Viewer to Identify Performance-Related Events
•Monitor Events on Remote Computers with Event Subscriptions
•Attach Tasks to Event Logs and Events
•Monitor AD DS with Performance Monitor
•Work with Data Collector Sets
Lab 13B: Manage the Active Directory Database
•Perform Database Maintenance
•Work with Snapshots and Recovering a Deleted User
Lab 13C: Back Up and Restore Active Directory
•Back up Active Directory
•Restore Active Directory and a Deleted OU
Lab 14A: Raise Domain and Forest Functional Levels
•Raise the Domain Functional Level to Windows Server 2003
•Raise the Forest Functional Level to Windows Server 2003
•Raise the Domain Functional Level to Windows Server 2008
Lab 14B: Administer a Trust Relationship
•Configure DNS
•Create a Trust Relationship
•Validate a Trust Relationship
•Assign Permission to Trusted Identities
•Implement Selective Authentication
