MOC On-Demand: 10969-Active Directory Services with Windows Server - On-Demand Course

 : The Active Directory Services with Windows Server class is designed for students to practice administering Active Directory technologies in Windows Server 2012 and Windows Server 2012 R2. The course is intended for experienced IT professionals who support medium to large enterprises and have fundamental knowledge and experience administering Active Directory.

Upon completion of the course, students will be able to:

• Manage and protect data access and information
• Simplify deployment and management of your identity infrastructure
• Provide more secure access to data
• Configure the key features in Active Directory
• Integrate your environment with Cloud based technologies
• Demand management in BI Center
• Reporting in BI environment

Prerequisites include:

• Experience working with AD DS
• Experience working in a Windows Server infrastructure enterprise environment.
• Experience working with and troubleshooting core networking infrastructure technologies such as name resolution, IP Addressing, Domain Name System (DNS) and Dynamic Host Configuration Protocol (DHCP).
• Experience with Hyper-V and Server Virtualization concepts.
• An awareness and understanding of general security best practices.
• Experience working hands on with Windows Client operating systems such as Windows Vista, Windows 7 or Windows 8

Section 1: Overview of Access and Information Protection
This section covers Access and Information Protection (AIP) solutions from the business perspective and maps business problems to technical solutions.
Topics
Introduction to Access and Information Protection Solutions in Business
Overview of AIP Solutions in Windows Server 2012
Overview of Forefront Identity Manager 2010 R2
Lab1 : Choosing an Appropriate Access and Information Protection Management Solution
Analyze the Lab Scenario and Identify Business Requirements
Propose a Solution

Section 2: Advanced Deployment and Administration of AD DS
This section covers how to deploy AD DS remotely and describes the virtualization safeguards, cloning abilities and extending AD DS to the cloud.
Topics
Deploying AD DS
Deploying and Cloning Virtual Domain Controllers
Deploying Domain Controllers in Windows Azure
Administering AD DS
Lab1 : Deploying and Administering AD DS
Deploying AD DS
Deploying Domain Controller by Performing Domain Controller Cloning
Administering AD DS

Section 3: Securing Active Directory Domain Services
This section describes the threats to domain controllers and what methods can be used to secure the AD DS and its domain controllers.
Topics
Securing Domain Controllers
Implementing Password and Lockout Policies
Audit Authentication
Lab1 : Securing Active Directory Domain Services
Implementing Security Policies for Accounts and Passwords and Administrative Groups
Deploying and Configuring a RODC

Section 4: Monitoring, Managing, and Recovering AD DS
This section covers how to use tools that help monitor performance in real time, and how to record performance over time to spot potential problems by observing performance trends. This section also covers how to optimize and protect your directory service and related identity and access solutions so that if a service does fail, you can restart it as quickly as possible.
Topics
Monitoring AD DS
Managing the AD DS Database
AD DS Backup and Recovery Options for AD°DS and Other Identity and Access Solutions
Lab1 : Monitoring AD DS
Monitoring AD DS with Performance Monitor
Lab2 : Recovering Objects in AD DS
Backing up and Restoring AD DS
Recovering Objects in AD DS

Section 5: Implementing and Administering AD DS Sites and Replication
This section covers how AD DS replicates information between domain controllers within a single site and throughout multiple sites. This section also covers how to create multiple sites and how to monitor replication to help optimize AD DS replication and authentication traffic.
Topics
Overview of AD DS Replication
Configuring AD DS Sites
Configuring and Monitoring AD DS Replication
Lab1 : Implementing AD DS Sites and Replication
Creating Subnets and Sites
Deploying an Additional Domain Controller
Configuring AD DS Replication
Troubleshooting AD DS Replication

Section 6: Implementing Group Policy
This section describes Group Policy, how it works, and how best to implement it in your organization.
Topics
Introducing Group Policy
Implementing and Administering GPOs
Group Policy Scope and Group Policy Processing
Troubleshooting the Application of GPOs
Lab1 : Implementing and Troubleshooting a Group Policy Infrastructure
Creating and Configuring GPOs
Managing GPO Scope
Verifying GPO Application
Managing GPOs
Troubleshooting GPOs

Section 7: Managing User Settings with Group Policy
This section describes how to how to use GPO Administrative Templates, Folder Redirection, and Group Policy features to configure users’ computer settings.
Topics
Implementing Administrative Templates
Configuring Folder Redirection and Scripts
Configuring Group Policy Preferences
Lab1 : Managing User Desktops with Group Policy
Implementing Settings by Using Group Policy Preferences
Configuring Folder Redirection

Section 8: Implementing Secure Shared File Access
This section covers how to use Dynamic Access Control (DAC) and Work Folders and how to plan and implement these technologies.
Topics
Overview of DAC
Implementing DAC Components
Implementing DAC for Access Control
Implementing Access Denied Assistance
Implementing and Managing Work Folders
Implementing Workplace Join
Lab1 : Implementing Secure File Access
Preparing for DAC Deployment
Implementing DAC
Validating and Remediating DAC
Implementing Work Folders

Section 9: Deploying and Managing Active Directory Certificate Services
This section explain how to deploy and manage CAs.
Topics
Deploying CAs
Administering CAs
Troubleshooting, Maintaining, and Monitoring CAs
Lab1 : Deploying and Configuring a Two-Tier CA Hierarchy
Deploying an Offline Root CA
Deploying an Enterprise Subordinate CA

Section 10: Deploying and Managing Certificates
This section covers how to deploy and manage certificates, configure certificate templates and manage enrollment process. Also, this section describes certificate usage in business environments and about deployment and management of smart cards.
Topics
Deploying and Managing Certificate Templates
Managing Certificates Deployment, Revocation and Recovery
Using Certificates in a Business Environment
Implementing and Managing Smart Cards
Lab1 : Deploying and Using Certificates
Configuring Certificate Templates
Enrolling and Using Certificates
Configuring and Implementing Key Recovery

Section 11: Implementing and Administering Active Directory Rights Management Services
This section introduces Active Directory Rights Management Services (AD RMS). It also describes how to deploy AD RMS, how to configure content protection, and how to make AD RMS–protected documents available to external users.
Topics
Overview of AD RMS
Deploying and Managing an AD RMS Infrastructure
Configuring AD RMS Content Protection
Configuring External Access to AD RMS
Lab1 : Implementing AD RMS Infrastructure
Installing and Configure AD RMS
Configuring AD RMS Templates
Using ADRMS on Clients
Configuring AD RMS Monitoring and Reporting

Section 12: Implementing and Administering AD FS
This section covers AD FS, and then provides details on how to configure AD FS in both a single organization scenario and in a partner organization scenario. This section also describes the Web Application Proxy feature in Windows Server 2012 R2 that functions as an AD FS proxy and reverse proxy for web-based applications.
Topics
Overview of AD FS
Deploying AD FS
Implementing AD FS for a Single Organization
Deploying AD FS in a Business to Business Federation Scenario
Extending AD FS to External Clients
Lab1 : Implementing AD FS
Installing and Configuring AD FS
Configuring an Internal Application for AD FS
Configuring AD FS for a Federated Business Partner
Configuring a Web Application Proxy

Section 13: Implementing Windows Azure Active Directory
This section covers how to implement Windows Azure Active Directory.
Topics
Overview of Windows Azure Active Directory
Administering Windows Azure Active Directory
Lab1 : Implementing Azure AD
Planning to Implement Azure AD
Administering Azure AD

Section 14: Implementing and Administering AD LDS
This section covers how to deploy and configure AD LDS.
Topics
Overview of AD LDS
Deploying AD LDS
Configuring AD LDS Instances and Partitions
Configuring AD LDS Replication
Lab1 : Implementing and Administering AD LDS
Configuring AD LDS Instances and Partitions
Configuring AD LDS Replication