Updating your Active Directory Technology Skills to Windows Server 2008
Class Outline:
Introduction:
This 3 day instructor-led course provides students with an understanding of Active Directory technology in Windows Server 2008. This course is intended to allow individuals who already have experience with Active Directory to upgrade their skills for Windows Server 2008. This course is based on an interim build of Windows Server 2008.
At Course Completion:
After completing this course, students will be able to:
• Describe and configure server roles with Active Directory Services in Windows Server 2008.
• Plan for and deploy Active Directory Domain Services.
• Install, configure, and manage the Server Core role as a domain controller.
• Manage accounts, subnets, Site-Links, Group Policy, and DNS configuration with Active Directory Domain Services.
• Manage new Active Directory services, including Active Directory Federation Services, Active Directory Lightweight Directory Services, and Active Directory Rights Management Services.
• Set up and manage Read-Only Domain Controllers (RODC).
• Use auditing features in Active Directory Domain Services.
• Manage credentials with Active Directory Certificate Services, including Credential Roaming.
Course Outline:
Module 1: Introduction to Active Directory Technology in Windows Server 2008
This module describes and demonstrates improvements to Active Directory in Windows Server 2008, including new server roles and server configuration.
Lessons
• Active Directory Improvements
Lab 1: Introduction to Active Directory Technology in Windows Server 2008
• Use Three Phases to Configure a Server
• Deploy New Server Roles and Features
• Change a Server’s Role
• Change Role Services and Features
After completing this module, students will be able to:
• List improvements in Active Directory roles.
• Describe how to configure roles on Windows Server 2008.
Module 2: Planning for Windows Server 2008 Active Directory Services
This module explains how to install and configure the Active Directory Domain Services (ADDS) server role and administering it with Server Manager. It also explores planning for deploying an Active Directory Domain Services infrastructure.
Lessons
• Planning for ADDS Deployment
• Upgrade Considerations
Lab 1: Installing a Windows Server 2008 Forest
• Install a New Forest
Lab 2: Installing Windows Server 2008 in an Existing Forest
• Install a Windows Server 2008 DC in an Existing Forest
• Install a RODC in an Existing Forest
• Verify Active Directory InstallationInstall a New Forest
After completing this module, students will be able to:
• Plan for a Windows Server 2008 Active Directory Domain Services deployment.
• Identify considerations when upgrading from a Windows Server 2003 to a Windows Server 2008 Active Directory infrastructure.
• Install Windows Server 2008 AD DS.
Module 3: Server Core Domain Controllers
This module explains how to install and configure the Server Core role in Windows Server 2008 as a domain controller. It also covers adding roles and features and managing Server Core.
Lessons
• Server Core Domain Controllers
Lab 1: Server Core Domain Controller
• Installing Server Core
• Configure Server Core
• Adding Roles and Features
• Managing Server Core
After completing this module, students will be able to:
• Describe Server Core.
• List Server Core benefits.
• Add Server Core roles.
• Configure a Server Core Domain Controller.
Module 4: Active Directory Domain Services
This module explains how to create and manage accounts, subnets, Site-Links, and Group Policy with new features in Active Directory Domain Services.
Lessons
• What’s New in AD DS
• Improved Security
• Manageability and Reliability
Lab 1: Exploring Active Directory Domain Services
• Create Accounts
• Review Operations Masters Role
• Review Sites
• Working with Subnets
• Working with Site-Links
• AD DS and Group Policy
• Review DNS Configuration
After completing this module, students will be able to:
• Identify new features of AD DS with Windows Server 2008
• Use all Active Directory Domain Services management consoles
• Describe how Read-Only Domain Controllers and Server Core work with Active Directory
• List reliability and manageability improvements with AD DS
Module 5: Active Directory Federation Services, Active Directory Lightweight Directory Services, Active Directory Rights Management Services
This module introduces Windows Server 2008's new Active Directory Services:
• Active Directory Federation Services for identity access solution
• Active Directory Lightweight Directory Services (replaces Active Directory Account Management with Windows Server 2003), providing directory services for applications.
• Active Directory Right Management Services, enabling the creation of information-protection solutions.
Lessons
• Active Directory Federation Services
• Active Directory Lightweight Directory Services
• Active Directory Rights Management Services
Lab 1: Active Directory Federation Services
• Install AD FS
• Configure Web Server
• Configure Federation Server
• Access Application from Client Computer
Lab 2: Active Directory Rights Management Services
• Install and Configure AD RMS
• Add New AD RMS Cluster
• Register the Service Connection Point in Active Directory
• Verify AD RMS Functionality
After completing this module, students will be able to:
• Use Active Directory Federation Services
• Explain Active Directory Lightweight Directory Services
• Use Active Directory Rights Management Services
Module 6: Read-Only Domain Controllers
This module explains how to set up and manage a read-only domain controller.
Lessons
• Read-Only Domain Controllers
• Read-Only Domain Controller Operation
Lab 1: Read-Only Domain Controllers
• Deploying an RODC
• Administering an RODC
After completing this module, students will be able to:
• Describe the role of Read-Only Domain Controllers.
• List the prerequisites for RODC deployment.
• Describe how the RODC can be used to achieve Administrator role separation.
• Describe scenarios in which RODC usage is recommended.
Module 7: Auditing Active Directory Domain Services Changes
This module explores new auditing features in Active Directory Domain Services and how to set up and manage auditing events.
Lessons
• What’s new in AD DS auditing
• Who should use this new feature
• Benefits of auditing changes in AD DS
• Summary of new AD DS auditing events
• Summary of attribute syntaxes
Lab 1: Auditing Active Directory Domain Services Changes
• Prerequisites
• Steps to set up auditing
• Example audit events
After completing this module, students will be able to:
• Describe the new auditing features in Active Directory Domain Services.
• Set up auditing events.
Module 8: Enterprise PKI (PKIView) Active Directory Certificate Services (ADCS)
This module explains how to set up and manage Active Directory Certificate Services using PKIView.
Lessons
• Certificate Authority
• Certificate Policy Settings
• Microsoft Simple Certificate Enrollment Protocol
• Online Revocation Services
• Network Device Enrollment Services
• Web Enrollment Services
Lab 1: Enterprise PKI (PKIView) Active Directory Certificate Services (ADCS)
• Add a Certificate Server Role
• Exploring the PKIView UI
• Introducing Expiry Notifications
• Introducing Credential Roaming
• Introducing CA performance monitors
• Exploring delegated enrollment
• Introducing OCSP configuration
• Revocation
After completing this module, students will be able to:
• Describe Active Directory Certificate Services management with PKIView.
• Set up and revoke certificates.
• Use Credential Roaming.