Configuring Windows Server 2008 Active Directory Domain Services
(Microsoft Training Course: 6425) - 5 days - £1640 exc VAT

This course provides students with the knowledge and skills to configure Active Directory Domain Services in a distributed environment, implement Group Policies, perform backup and restore, and monitor and troubleshoot Active Directory related issues. It is intended for Active Directory Technology Specialists, Server Administrators, and Enterprise Administrators who want to learn how to implement Active Directory in a distributed environment.

1. Introducing Active Directory Domain Services (AD DS)
2. Secure and Efficient Administration of Active Directory
3. Manage Users
4. Manage Groups
5. Support Computer Accounts
6. Implement a Group Policy Infrastructure
7. Manage Enterprise Security and Configuration with Group Policy Settings
8. Secure Administration
9. Improve the Security of Authentication in an Active Directory Domain Services (AD DS) Domain
10. Configure Domain Name System (DNS)
11. Administer Active Directory Domain Services (AD DS) Domain Controllers
12. Manage Sites and Active Directory Replication
13. Directory Service Continuity
14. Manage Multiple Domains and Forests

---

Supplementary Information This course has recently been updated to a B version, so it may differ in content slightly from the previous A version.

---

Module 1: Introducing Active Directory Domain Services (AD DS)

• This module explains how to install and configure Active Directory Domain Services.
• Active Directory Components and Concepts
• Install Active Directory Domain Services
• Extend IDA with Active Directory Services

Skills

• Position the strategic role a directory service in an enterprise in relation to identity and access.
  
• Explain authentication and authorization processes.
  
• Understand the requirements for installing a domain controller to create a new forest.
  
• Identify the roles of and relationships between ADDS, ADLDS, ADRMS, ADFS, and ADCS.
  

top

---

Module 2: Secure and Efficient Administration of Active Directory

• This module explains how to work securely and efficiently in Active Directory.
• Work with Active Directory Snap-ins
• Custom Consoles and Least Privilege
• Find Objects in Active Directory
• Use DS to Administer Active Directory

Skills

• Install, locate, and describe the snap-ins used to administer AD DS.
  
• Perform basic administrative tasks with the Active Directory Users and Computers snap-in.
  
• Create a custom MMC.
  
• Control the view of objects in the Active Directory Users and Computers snap-in.
  
• Identify the distinguished name (DN), relative distinguished name (RDN), and common name (CN) of an Active Directory object.
  
• Use the DS commands to administer Active Directory from the command line.
  

top

---

Module 3: Manage Users

• This module explains how to manage and support user accounts in Active Directory.
• Create and Administer User Accounts
• Configure User Object Attributes
• Automate User Account Creation

Skills

• Create and configure the account-related properties of a user object.
  
• Perform administrative tasks to user accounts.
  
• View and modify attributes of user objects.
  
• Modify attributes of multiple users.
  
• Export user attributes with CSVDE.
  
• Import users with CSVDE and LDIFDE.
  

top

---

Module 4: Manage Groups

• This module explains how to administer group objects in Active Directory.
• Manage an Enterprise with Groups
• Administer Groups

Skills

• Create well-documented, secure, delegated groups.
  
• Understand group types, scope, and nesting.
  
• Create, delete and manage groups with DSCommands, CSVDE and LDIFDE.
  
• Understand Default (Built In) groups.
  
• Understand Special Identities.
  

top

---

Module 5: Support Computer Accounts

• This module explains how to create and configure computer accounts.
• Create Computers and Join the Domain
• Administer Computer Objects and Accounts

Skills

• Understand the relationship between a domain member and the.
  
• Identify the requirements for joining a computer to the domain.
  
• Implement best practice processes.
  
• Secure AD DS to prevent the creation of unmanaged computer accounts.
  
• Manage computer objects and their attributes using the Windows Interface and command line tools.
  
• Administer computer accounts.
  

top

---

Module 6: Implement a Group Policy Infrastructure

• This module explains what Group Policy is, how it works, and how best to implement Group Policy in your organization.
• Explore Group Policy Settings and Features
• Manage Group Policy Scope
• Group Policy Processing
• Troubleshoot Policy Application

Skills

• Identify the business drivers for configuration management.
  
• Manage Group Policy objects.
  
• Scope GPOs using links, security group, WMI filters, loopback processing, and Preference targeting.
  
• Explain GPO storage, replication, and versioning.
  
• Administer a Group Policy infrastructure.
  
• Evaluate GPO inheritance, precedence, and Resultant Set of Policy (RSoP).
  
• Locate the event logs containing Group Policy related events.
  

top

---

Module 7: Manage Enterprise Security and Configuration with Group Policy Settings

• This module explains how to manage security and software installation and how to audit files and folders.
• Manage Security Settings
• Manage software with GPSI
• Auditing

Skills

• Use Restricted Groups policies to modify or enforce the membership of groups.
  
• Use Group Policy Preferences to modify the membership of groups.
  
• Configure security settings using the Local Security policy.
  
• Analyze security configuration based on security templates.
  
• Create, edit, and apply security policies using the Security Configuration Wizard.
  
• Deploy security configuration with Group Policy.
  
• Deploy software using GPSI.
  

top

---

Module 8: Secure Administration

• This module explains how to administer Active Directory Domain Services securely.
• Delegate Administrative Permissions
• Audit Active Directory Changes

Skills

• Assign permissions to Active Directory objects using the security editor user interfaces and the Delegation of Control Wizard.
  
• Describe the relationship between delegation and OU design.
  
• Configure Directory Service Changes auditing.
  
• Identify event log entries created by Directory Access and Directory Service Changes auditing.
  

top

---

Module 9: Improve the Security of Authentication in an Active Directory Domain Services (AD DS) Domain

• This module explains the domain-side components of authentication.
• Configure Password and Lockout Policies
• Configure Read-Only Domain Controllers

Skills

• Implement your domain password and account lockout policy.
  
• Configure fine-grained password policies.
  
• Identify authentication-related events in the Security log.
  
• Install an RODC.
  
• Monitor the caching of credentials on an RODC.
  

top

---

Module 10: Configure Domain Name System (DNS)

• This module explains how to implement DNS to support name resolution both within your AD DS domain and outside your domain and intranet.
• Review DNS Concepts, Components, and Processes
• AD DS,DNS, and Windows
• Advanced DNS Configuration and Administration

Skills

• Describe client and server name resolution processes.
  
• Manage DNS records.
  
• Configure DNS server settings.
  
• Describe the integration between AD DS & DNS.
  
• Create a zone delegation for a new Active Directory domain.
  
• Configure replication for Active Directory integrated zones.
  
• Describe the purpose of SRV records in the domain controller location process.
  
• Configure advanced DNS server settings.
  
• Maintain and troubleshoot the DNS server role.
  

top

---

Module 11: Administer Active Directory Domain Services (AD DS) Domain Controllers

• This module explains how to add Windows Server 2008 domain controllers to a domain.
• Domain Controller Installation Options
• Install a Server Core DC
• Manage Operations Masters
• Configure DFS Replication of SYSVOL

Skills

• Install a standard or read-only domain controller into new or existing domains or trees.
  
• Add and remove domain controllers using a variety of GUI or command-line methods.
  
• Configure a domain controller on Server Core.
  
• Understand and identify operations master roles.
  
• Manage the placement, transfer, and seizure of operations master roles.
  
• Migrate SYSVOL replication from FRS to DFS-R.
  

top

---

Module 12: Manage Sites and Active Directory Replication

• This module explains how to create a distributed directory service that supports domain controllers in portions of your network.
• Configure Sites and Subnets
• Configure the Global Catalog and Application Partitions
• Configure Replication

Skills

• Configure sites and subnets.
  
• Understand domain controller location and manage domain controllers in sites.
  
• Configure replication of the partial attribute set to global catalog servers.
  
• Implement universal group membership caching.
  
• Configure replication topology with connection objects, bridgehead servers, site links, and site link bridges.
  
• Report, analyze, and troubleshoot replication with repadmin.exe and dcdiag.exe.
  

top

---

Module 13: Directory Service Continuity

• This module explains about the technologies and tools that are available to help ensure the health and longevity of the directory service.
• Monitor Active Directory
• Manage the Active Directory Database
• Back Up and Restore AD DS and Domain Controllers

Skills

• Monitor real-time performance and events with Task Manager, Event Viewer, and Windows Reliability and Performance Monitor.
  
• Monitor real-time and logged performance with Performance Monitor, data collection sets, and reports.
  
• Identify sources of performance and event information for AD DS domain controllers.
  
• Create alerts based on events and performance metrics.
  
• Back up and restore AD DS and domain controllers.
  

top

---

Module 14: Manage Multiple Domains and Forests

• This module explains how to raise the domain and forest functionality levels within your environment.
• Configure Domain and Forest Functional Levels
• Manage Multiple Domains and Trust Relationships

Skills

• Understand domain and forest functional levels.
  
• Identify capabilities added by each functional level.
  
• Design an effective domain and tree structure for AD DS.
  
• Identify the role of the Active Directory Migration Tool.
  
• Understand trust relationships.
  
• Configure, administer, and secure trust relationships.
  

top

---

Before attending this course, students must have the following prerequisites:

• Basic understanding of networking.
• Intermediate understanding of network operating systems.
• An awareness of security best practices.
• Basic knowledge of server hardware.
• Some experience creating objects in Active Directory.
• Basic concepts of backup and recovery in a Windows Server Environment.
• Completed Course 6424, or have equivalent knowledge.

After completing this course, students will be able to implement and configure Active Directory domain services in their enterprise environment.

This course has recently been updated to a B version, so it may differ in content slightly from the previous A version.