Intrudoction

Get Hands on instruction and practice administering Active Directory technologies in Windows Server 2012 and Windows Server 2012 R2 in this 5-day Microsoft Official Course. You will learn the skills you need to better manage and protect data access and information, simplify deployment and management of your identity infrastructure, and provide more secure access to data. You will learn how to configure some of the key features in Active Directory such as Active Directory Domain Services (AD DS), Group Policy, Dynamic Access Control (DAC), Work Folders, Work Place Join, Certificate Services, Rights Management Services (RMS), Federation Services, as well as integrating you’re on premise environment with cloud based technologies such as Windows Azure Active Directory. As part of the learning experience, you will perform hands-on exercises in a virtual lab environment.

Target Audience

This course is intended for Information Technology (IT) Professionals who have Active Directory Domain Services (AD DS) experience and are looking to for a single course that will further develop knowledge and skills using Access and Information Protection technologies in Windows Server 2012 and Windows Server 2012 R2. This would typically include:

• AD DS Administrators who are looking to further develop skills in the latest Access and Information Protection technologies with Windows Server 2012 and Windows Server 2012 R2.

• System or Infrastructure administrators with general AD DS experience and knowledge who are looking to build upon that core knowledge and cross-train into advanced Active Directory technologies in Windows Server 2012 and Windows Server 2012 R2.

• IT Professionals who have taken the 10967A: Fundamentals of a Windows Server Infrastructure course and are looking to build upon that Active directory knowledge.

Course objectives

• Understand available solutions for identity management and be able to address scenarios with appropriate solutions.

• Deploy and administer AD DS in Windows Server 2012.

• Secure AD DS deployment.

• Implement AD DS sites, configure and manage replication

• Implement and manage Group Policy

• Manage user settings with Group Policy

• Implement certification authority (CA) hierarchy with AD CS and how to manage CAs.

• Implement, deploy and manage certificates.

• Implement and manage AD RMS.

• Implement and administer AD FS.

• Secure and provision data access using technologies such as Dynamic Access Control, Work Folders and Workplace Join

• Monitor, troubleshoot and establish business continuity for AD DS services.

• Implement Windows Azure Active Directory.

• Implement and administer Active Directory Lightweight Directory Services (AD LDS).

Course outline

Day 1: Identity Protection & AD DS Deployment

• Overview of Access and Information Protection
• Introduction to Access and Information Protection solutions in business
• Overview of AIP solutions in Windows Server 2012
• Overview of FIM 2010 R2
• Lab: Choosing an appropriate Access and Information Protection solution
• Deploying AD DS
• Deploying and cloning virtual domain controllers
• Deploying domain controllers in Windows Azure
• Administering AD DS
• Lab: Deploying and administering AD DS

Day 2: AD DS Security, Sites & Group Policy

• Securing domain controllers
• Implementing account security
• Implementing audit authentication
• Lab: Securing AD DS
• Overview of AD DS replication
• Configuring AD DS sites
• Configuring and monitoring AD DS replication
• Lab: Implementing AD DS sites and replication
• Introducing Group Policy
• Implementing and administering GPOs
• Group Policy scope and processing
• Troubleshooting GPO application
• Lab: Group Policy infrastructure implementation and troubleshooting

Day 3: User Settings, AD CS & Certificates

• Administrative templates in Group Policy
• Folder redirection and scripts
• Group Policy Preferences
• Lab: Managing user desktops with Group Policy
• Deploying Certificate Authorities (CAs)
• Administering CAs
• Monitoring and troubleshooting CAs
• Lab: Two-tier CA hierarchy deployment
• Using certificates in business environments
• Certificate templates management
• Certificate deployment, revocation, and recovery
• Smart card implementation
• Lab: Deploying and using certificates

Day 4: AD RMS & AD FS

• Overview of AD RMS
• Deploying and managing AD RMS infrastructure
• Configuring content protection
• External access configuration
• Lab: Implementing AD RMS
• Overview of AD FS
• Deploying AD FS
• Single organization federation
• Business-to-business federation scenario
• External client access extension
• Lab: Implementing AD FS

Day 5: Secure Access, Recovery & Directory Services

• Dynamic Access Control overview and components
• Secure file access implementation
• Work Folders and Workplace Join
• Access Denied Assistance
• Lab: Secure file access implementation
• Monitoring AD DS
• AD DS database management
• Backup and recovery
• Lab: Monitoring and recovering AD DS objects
• Windows Azure Active Directory overview
• Managing Azure AD accounts
• Lab: Implementing Azure AD
• Overview of AD LDS
• Deployment and configuration of AD LDS
• Replication and integration with AD DS
• Lab: Implementing AD LDS