Windows Server 2008 Active Directory, Group Policy and Security Design

Duration: 5 Days | Price: $2495 | Class Dates:

Students Will Learn:

Installing and Configuring DNS
Optimizing Replication in Active Directory
Network Security with IPSec
Creating a Group Policy
Filtering Group Policy with WMI

Upgrading and Installing Active Directory
Installing Additional Active Directory Roles
Using AD Certificate Services
Restricting Users and Computers with GPO
Deploying Software with GPO

Course Description: Active Directory provides a single administration point for sign-on, policies and authentication control. This hands on course provides experience configuring Active Directory and essential network security components such as AD Certificate Services, IPSec and virtual private networking (VPN). Students will install Active Directory Domain Services (AD DS), integrate DNS for Active Directory and Internet name resolution , implement AD security for DNS, and configure logical AD components, such as forests, trees, domains and organizational units (OUs). Upgrading and migrating the AD DS structure within or between forests, troubleshooting, backup and restore methods and additional maintenance tools will be explored. Attendees will investigate additional Active Directory roles, such as integrating applications with Lightweight Directory Services (AD LDS), controlling access with Rights Management Services (AD RMS) and enabling single sign-on across multiple forests with Federation Services (ADFS). With AD DS installed, we will monitor and maintain sites and replication to assure up-to-date information.

An administrator needs to control the user environment, so students will look at the architecture, scope, inheritance, replication and troubleshooting in group policy before learning to restrict and enable users with login scripts, rights, desktop policies and software deployment and control. We'll also look at further controlling computers through security policies, loopback processing, and templates. Attendees will delegate administration of the configuration policies, control application and inheritance and explore tools to refine the user experience. Comprehensive labs and exercises give the students real experience installing and configuring Active Directory while securing the network.

Course Prerequisites: Completion of Windows Server 2008 Administration course or equivalent knowledge.

Windows Server 2008 Active Directory, Group Policy and Security Design Course Overview:

Domain Name Service (DNS) DNS Server Role Introduction DNS Architecture Creating and Managing DNS Zones DNS Zone Transfers Dynamic DNS Integration with Active Directory		Active Directory Domain Services Active Directory DNS Naming Strategy DNS AD-Integrated Zones Active Directory Architecture Scripting AD Object Configuration AD Trust Relationships Read-Only Domain Controller (RODC) Configuration
Upgrading Active Directory DS Legacy and Alternate Directory Structures Consolidating Forests, Trees and Domains Migrating Users, Computers and Resources Active Directory Migration Tool (ADMT) Preparing the Directory with ADPREP		AD DS Sites and Replication Creating and Managing AD Sites Site Topology DFS Replication Overview SYSVOL Replication Replication Monitoring and Troubleshooting Knowledge Consistency Checker (KCC)
AD DS Maintenance and Monitoring Server 2008 Monitoring Tools Flexible Single Master of Operations (FSMO) Roles Backing Up the AD Database Restore Methods Troubleshooting AD and Group Policy Cleaning Up AD with NTDSUTIL Global Catalog Servers		Active Directory Schema Defining the Active Directory Schema Administering the Active Directory Schema Schema Modification Object Classes and Attributes Deactivating Schema Objects
Active Directory in the Enterprise AD Lightweight Directory Services (AD LDS) Integrating AD LDS with Applications AD Rights Management Services (AD RMS) AD Federation Services (ADFS) Inter-site Authentication with ADFS		Group Policy Objects (GPO) Group Policy Overview Centralized Configuration Domain and Local Policies Policy Scope Policy Inheritance Security Configuration Wizard (SCW) GPO Replication Converting Legacy Policies Troubleshooting Conflicts and Inheritance
GPO User Configuration Login Scripts Folder Redirection User Rights Desktop Restrictions Application Limitations Deploying User Software with .msi Files		GPO Computer Configuration Assigning Applications to the Desktop Security Settings Policy Refresh Interval Loopback Processing
GPO Security Reducing Attack Surface through GPO Creating Security Policies Using Custom Templates Fine-Grained Password Policies Software Restrictions		GPO Administration Refreshing the Policy Manually Delegating GPO Administration Group Policy Management Console (GPMC) Combining Policies Disabling GPOs No Override Block Inheritance
Group Policy Management Console Analyzing Resultant Set of Policy (RSoP) Group Policy Modeling Importing Policies Backup and Restore GPOs		Windows Management Interface (WMI) Filters Filtering the Application of GPOs Introduction to Writing Filters WMI Query Language (WQL)
Group Policy Software Deployment Assigning Software to Users or Computers Publishing Applications to Users Upgrading and Removing Applications Customizing Distributed Software		Active Directory Certificate Services Public Key Infrastructure (PKI) Installing Active Directory Certificate Services Web-based Certificate Request Granting and Revoking Certificates Publishing the Certificate Revocation List Exporting Keys PKI Applications and Uses Certificate Authorities Certificate Templates
Remote Access Virtual Private Network (VPN) Configuration VPN and Authentication Protocols Remote Access Policies Network Policy Server (NPS) Introduction Configuring a RADIUS Server Troubleshooting		IPSec Securing Communication IPSec Protocols Planning Policies Configuring Authentication and Encryption Connection Rules Troubleshooting IPSec Implementations

Student Testimonials

"Great course. Fast paced learning covered exactly what I needed."
– T.W., United States Navy

"Labs were very effective in demonstrating objectives."
– S.M., COX Target Media

Multiple Training Locations - Convenience and Cost Control

Regularly Scheduled Courses in more than 75 Cities Across North America and the United Kingdom

Northeast/New England	Southeast	Midwest	West/Southwest	Canada	United Kingdom
CT - Hartford CT - New Haven CT - Stamford DC - Washington MA - Boston MA - Chelmsford MA - Quincy MA - Springfield MA - Waltham MA - Woburn MA - Worcester MD - Baltimore MD - Columbia NH - Manchester NH - Nashua NJ - Jersey City NJ - Newark NJ - Princeton NY - Albany NY - Binghamton NY - Buffalo NY - Ithaca NY - Manhattan NY - Rochester NY - Syracuse PA - Harrisburg PA - Philadelphia PA - Pittsburgh RI - Providence	AL - Huntsville FL - Fort Lauderdale FL - Jacksonville FL - Miami FL - Orlando FL - Pensacola FL - Sarasota FL - Tampa FL - West Palm Beach GA - Atlanta GA - Savannah LA - Shreveport NC - Charlotte NC - Raleigh-Durham NC - Winston-Salem SC - Charleston VA - Alexandria VA - Fairfax VA - Norfolk VA - Richmond VA - Williamsburg	AR - Little Rock IA - Cedar Rapids IA - Des Moines IL - Chicago IL - Schaumburg IL - Springfield IN - Indianapolis KY - Louisville MI - Detroit MI - Lansing MN - Minneapolis MO - Kansas City MO - St. Charles MO - Springfield NE - Omaha OH - Cincinnati OH - Cleveland OH - Columbus OH - Dayton OK - Oklahoma City OK - Tulsa TN - Memphis TN - Nashville WI - Milwaukee	AZ - Phoenix AZ - Tucson CA - Bakersfield CA - Fresno CA - Irvine CA - Los Angeles CA - Modesto CA - Oakland CA - Riverside CA - Sacramento CA - San Diego CA - San Francisco CA - San Jose CA - Santa Clarita CA - Santa Monica CA - Temecula CO - Denver ID - Boise NM - Albuquerque NM - Las Cruces NV - Las Vegas OR - Portland TX - Austin TX - Corpus Christi TX - Dallas TX - El Paso TX - Fort Worth TX - Houston TX - San Antonio UT - Salt Lake City WA - Seattle WA - Spokane	AB - Calgary AB - Edmonton BC - Vancouver MB - Winnipeg QC - Montreal QC - Quebec City ON - Kingston ON - Mississauga ON - Ottawa ON - Toronto SK - Regina	Birmingham Bristol Chelmsford Edinburgh Glasgow Leeds Liverpool London Manchester

Hands On Technology Transfer, Inc.
1 Village Square, Suite 8
14 Fletcher Street
Chelmsford, MA 01824
1-800-413-0939 | 1-978-250-4299