Course Content
Introducing Active Directory Domain Services
- Overview of Active Directory, Identity, and Access
- Active Directory Components and Concepts
- Install Active Directory Domain Services
- Lab : Install an AD DS DC to Create a Single Domain Forest
- Perform Post-Installation Configuration Tasks
- Install a New Windows Server 2008 Forest with the Windows Interface
- Raise Domain and Forest Functional Levels
Administering Active Directory Securely and Efficiently
- Work with Active Directory Administration Tools
- Custom Consoles and Least Privilege
- Find Objects in Active Directory
- Use Windows PowerShell to Administer Active Directory
- Lab : Administer Active Directory Using Administrative Tools
- Perform Administrative Tasks by Using Administrative Tools
- Create a Custom Active Directory Administrative Console
- Perform Administrative Tasks with Least Privilege, Run As Administrator, and User Account Control
- Lab : Find Objects in Active Directory
- Find Objects in Active Directory
- Use Saved Queries
- Lab : Use Windows PowerShell to Administer Active Directory
- Use PowerShell Commands to Administer Active Directory
Managing Users and Service Accounts
- Create and Administer User Accounts
- Configure User Object Attributes
- Automate User Account Creation
- Create and Configure Managed Service Accounts
- Lab : Create and Administer User Accounts
- Create User Accounts
- Administer User Accounts
- Lab : Configure User Object Attributes
- Examine User Object Attributes
- Manage User Object Attributes
- Create Users from a Template
- Lab : Automate User Account Creation
- Export and Import Users with CSVDE
- Import Users with LDIFDE
- Import Users by Using Windows PowerShell
- Lab : Create and Administer Managed Service Accounts
- Create and Associate a Managed Service Account
Managing Groups
- Overview of Groups
- Administer Groups
- Best Practices for Group Management
- Lab : Administer Groups
- Implement Role-Based Management by Using Groups
- (Advanced Optional) Explore Group Membership Reporting Tools
- (Advanced Optional) Understand "Account Unknown" Permissions
- Lab : Best Practices for Group Management
- Implement Best Practices for Group Management
Managing Computer Accounts
- Create Computers and Join the Domain
- Administer Computer Objects and Accounts
- Perform an Offline Domain Join
- Lab : Create Computers and Join the Domain
- Join a computer to the Domain with the Windows Interface
- Secure Computer Joins
- Manage Computer Account Creation
- Lab : Administer Computer Objects and Accounts
- Administer Computer Objects Through Their Life Cycle
- Administer and Troubleshoot Computer Accounts
- Lab : Perform an Offline Domain Join
- Perform an Offline Domain Join
Implementing a Group Policy Infrastructure
- Understand Group Policy
- Implement GPOs
- Manage Group Policy Scope
- Group Policy Processing
- Troubleshoot Policy Application
- Lab : Implement Group Policy
- Create, Edit, and Link GPOs
- Use Filtering and Commenting
- Lab : Manage Group Policy Scope
- Configure GPO Scope with Links
- Configure GPO Scope with Filtering
- Configure Loopback Processing
- Lab : Troubleshoot Policy Application
- Perform RSoP Analysis
- Use the Group Policy Modeling Wizard
- View Policy Events
Managing User Desktop with Group Policy
- Implement Administrative Templates
- Configure Group Policy Preferences
- Manage Software with GPSI
- Lab : Manage Administrative Templates and Central Store
- Manage Administrative Templates
- Lab : Manage Group Policy Preferences
- Configure Group Policy Preferences
- Verify Group Policy Preferences Application
- Lab : Manage Software with GPSI
- Deploy Software with GPSI
- Upgrade Applications with GPSI
Managing Enterprise Security and Configuration with Group Policy Settings
- Manage Group Membership by Using Group Policy Settings
- Manage Security Settings
- Auditing
- Software Restriction Policy and Applocker
- Lab : Using Group Policy to Manage Group Membership
- Configure the Membership of Administrators by Using Restricted Group Policies
- Lab : Manage Security Settings
- Manage Local Security Settings
- Create a Security Template
- Use the security Configuration Wizard
- Lab : Audit File System Access
- Configure Permissions and Audit Settings
- Configure Audit Policy
- Examine Audit Results
- Lab : Configure Application Control Policies
- Configure Application Control Policies
Securing Administration
- Delegate Administrative Permissions
- Audit Active Directory Administration
- Lab : Delegate Administration
- Delegate Permission to Create and Support User Accounts
- View Delegated Permissions
- Remove and Reset Permissions
- Lab : Audit Active Directory Changes
- Audit Changes to Active Directory Using Default Audit Policy
- Audit Changes to Active Directory Using Directory Service Changes Auditing
Improving the Security of Authentication in an AD DS Domain
- Configure Password and Lockout Policies
- Audit Authentication
- Configure Read-Only Domain Controllers
- Lab : Configure Password and Account Lockout Policies
- Configure the Domain's Password and Lockout Policies
- Configure a Fine-Grained Password Policy
- Lab : Audit Authentication
- Audit Authentication
- Lab : Configure Read-Only Domain Controllers
- Install an RODC
- Configure Password Replication Policy
- Manage Credential Caching
- Configuring Domain Name System
- Install and Configure DNS in an AD DS Domain
- Integration of AD DS, DNS, and Windows
- Advanced DNS Configuration and Administration
- Lab : Installing the DNS Service
- Add the DNS Server Role
- Configure Forward Lookup Zones and Resource Records
- Lab : Advanced Configuration of DNS
- Enable Scavenging of DNS Zones
- Explore Domain Controller Location
- Configure Name Resolution for External Domains
Administering AD DS Domain Controllers
- Domain Controller Installation Options
- Install a Server Core Domain Controller
- Manage Operations Masters
- Configure Global Catalog
- Configure DFS-R Replication of SYSVOL
- Lab : Install Domain Controllers
- Create an Additional DC with the Active Directory Domain Services Installation Wizard
- Add a Domain Controller from the Command Line
- Create a Domain Controller from Installation Media
- Lab : Install a Server Core Domain Controller
- Perform Post-Installation Configuration on Server Core
- Create a Domain Controller with Server Core
- Lab : Transfer Operations Masters Roles
- Identify Operations Masters
- Transfer Operations Masters Roles
- Lab : Configure the Global Catalog and Universal Group Membership Caching
- Configure a Global Catalog
- Configure Universal Group Membership Caching
- Lab : Configure DFS-R Replication of SYSVOL
- Observe the Replication of SYSVOL
- Prepare to Migrate to DFS-R
- Migrate SYSVOL Replication to DFS-R
- Verify DFS-R Replication of SYSVOL
Managing Sites and Active Directory Replication
- Configure Sites and Subnets
- Configure Replication
- Lab : Configure Sites and Subnets
- Configure the Default Site
- Create Additional Sites
- Move Domain Controllers into Sites
- Lab : Configure Replication
- Create a Connection Object
- Create Site Links
- Designate a Preferred Bridgehead Server
- Configure Intersite Replication
Directory Service Continuity
- Monitor Active Directory
- Manage the Active Directory Database
- Active Directory Recycle Bin
- Back Up and Restore AD DS and Domain Controllers
- Lab : Monitor Active Directory Events and Performance
- Monitor AD DS with Performance Monitor
- Work with Data Collector Sets
- Lab : Manage the Active Directory Database
- Perform Database Maintenance
- Work with Snapshots and Recover a Deleted User
- Lab : Using Active Directory Recycle Bin
- Enable Active Directory Recycle Bin
- Restore Deleted Objects with Active Directory Recycle Bin
- Lab : Back Up and Restore Active Directory
- Back Up Active Directory
- Restore Active Directory and a Deleted OU
Managing Multiple Domains and Forests
- Configure Domain and Forest Functional Levels
- Manage Multiple Domains and Trust Relationships
- Move Objects between Domains and Forests
- Lab : Administer Trust Relationships
- Configure Name Resolution between Contoso.com and Tailspintoys.com
- Create a Forest Trust
