Managing and Maintaining Windows Server 2008 Active Directory Servers
(Microsoft Training Course: 6432) - 2 days - £955 exc VAT

This course provides students with the knowledge and skills to manage and maintain Windows Server 2008 Active Directory servers. It is intended for Server Administrators who are familiar with Windows Server 2008 and who are, or will be, responsible for the daily management and maintenance of Windows Server 2008 Active Directory servers.

1. Managing an Active Directory Server Lifecycle
2. Creating Baselines for Active Directory Servers
3. Monitoring the System Health of Active Directory Servers
4. Managing Active Directory Domain Services
5. Maintaining Security for Active Directory Servers
6. Managing Active Directory Service Roles

---

---

Module 1: Managing an Active Directory Server Lifecycle

• This module explains how to support and maintain Active Directory servers to meet changing business requirements in an enterprise environment.
• Planning an Active Directory Server Deployment
• Using Active Directory Server Deployment Technologies
• Adding AD DS Server Roles
• Removing AD DS Server Roles
• Lab: Managing and Maintaining a Windows Server 2008 Domain Controller

Skills

• Plan an Active Directory server deployment.
  
• Identify different approaches to Active Directory server deployment.
  
• Add an AD DS server role.
  
• Remove an AD DS server role.
  

top

---

Module 2: Creating Baselines for Active Directory Servers

• This module explains how to create baselines using the WRPM and through analysis, make decisions to improve server performance.
• Baseline Methodologies for Active Directory Servers
• WRPM Overview
• Using Metrics to Create Baselines for Active Directory Servers
• Lab: Creating Baselines for Active Directory Servers

Skills

• Define strategies for developing baselines.
  
• Explain the use of the WRPM as a baseline creation and revision tool.
  
• Describe some of the specific metrics that may be relevant for the different Active Directory roles.
  

top

---

Module 3: Monitoring the System Health of Active Directory Servers

• This module explains how to create and evaluate a monitoring plan based on business needs and environments. It also explains how to determine the health of Active Directory servers using performance monitoring and even log triggers.
• System Health Overview
• Using Long-Term Monitoring to Identify Trends
• Setting Thresholds and Alerts for Short-Term Monitoring
• Choosing the Appropriate Windows Server 2008 Monitoring Tools
• Lab: Monitoring the Active Directory Server Roles

Skills

• Define system health, server health, and Active Directory health.
  
• Define the best procedures to ensure system health and optimal performance for Active Directory servers.
  
• Set thresholds and alerts that are used for short-term monitoring.
  
• Describe the Windows Server 2008 monitoring tools and how to decide when the different tools are appropriate in different business situations.
  

top

---

Module 4: Managing Active Directory Domain Services

• This module explains how to implement the methodology of maintaining Windows Server 2008 AD DS.
• Restarting and Restoring Active Directory
• Overview of the Flexible Single Master Operations (FSMO) Roles
• Planning Sites and Replication
• Managing RODCs
• Methods of Managing Windows Server Core
• Best Practices for GPOs and Links
• Delegating Active Directory Administration
• Lab: Managing AD DS

Skills

• Describe the impact of Windows Server 2008 methods for restarting Active Directory without rebooting.
  
• Define the FSMO roles and the Global Catalog pseudo-role.
  
• Explain the importance of site definitions and how to optimize the AD DS replication activity.
  
• Explain the functionality of RODCs and the key benefits with RODCs deployed.
  
• Explain the methods of managing Windows Server Core.
  
• Identify the best practices for Group Policy Objects (GPOs) and links.
  
• State the pros and cons of delegating administration of Active Directory.
  

top

---

Module 5: Maintaining Security for Active Directory Servers

• This module explains how to deploy proven methods to harden the Active Directory servers.
• Server Hardening Techniques
• Using the MBSA to Discover and Remove Security Holes
• Using Fine-Grained Password Policies to Simplify Network Organization
• Planning Security Auditing
• Enhancing Physical Security
• Lab: Maintaining Security for the Active Directory Servers

Skills

• Describe the techniques used for manual server hardening.
  
• Use the MBSA to discover and remove security holes.
  
• Explain why you would use fine-grained password policies and how to maintain them.
  
• Explain when to perform security auditing and how to define a proper security baseline.
  
• Explain how to solve physical security problems and the ramifications of lax security policies.
  

top

---

Module 6: Managing Active Directory Service Roles

• This module explains how to add non-AD-DS service roles to a Windows Server 2008 network and manage those roles with supplied tools.
• Using Windows Server 2008 Tools for AD CS
• Implementing AD LDS
• AD FS Overview
• AD RMS Overview
• Lab: Managing Active Directory Service Roles

Skills

• Use the Windows Server 2008 tools to operate Certificate Services.
  
• Explain when to use AD LDS.
  
• Identify management concerns with Active Directory Federation Services (AD FS).
  
• Identify management concerns with Active Directory Rights Management Services (AD RMS).
  

top

---

Before attending this course, students must have the following pre-requisites:

• Attended Course 6424: Fundamentals of Windows Server 2008 Active Directory.
• Attended Course 6425: Configuring Windows Server 2008 Active Directory Domain Services.
• Attended Course 6426: Configuring Identity and Access Solutions with Windows Server 2008 Active Directory.
• Attended Course 6430: Planning and Administering Windows Server 2008 Servers.

After completing this course, students will be able to plan an Active Directory server deployment; add and remove an AD DS server role; identify strategies for developing, monitoring, and reviewing baselines; create baselines for different Active Directory roles; create and evaluate a monitoring plan based on business needs and environments; determine the health of Active Directory servers; configure effective alerts and responses as well as evaluate alternative recommendations for AD DS servers to meet a business goal; perform AD DS maintenance and administrative tasks; harden the Active Directory servers; decide which Windows Server 2008 security features can address a given business situation; add service roles to a Windows Server 2008 network; operate an Active Directory Lightweight Directory Services (AD LDS) server role.