|
|
|
Windows Server 2008 Active Directory Domain Services |
|
You Will Learn How To
- Install, manage and secure Active Directory Domain Services (AD
DS)
- Restructure existing domains and migrate to Windows Server 2008
Active Directory
- Troubleshoot domain creation and manage Flexible Single Master Operation
(FSMO) failures
- Configure Active Directory replication topology with sites
- Leverage Read-Only Domain Controllers (RODC) to implement database
security
- Lessen the server attack surface with Windows Server Core
Course Benefits
Windows Server 2008 Active Directory Domain Services includes features that allow
organizations to simplify and secure deployment, and to administer AD DS more efficiently.
In this comprehensive hands-on course, you gain the essential skills required to
effectively manage and secure a high-availability AD enterprise and ensure a successful
migration to Windows Server 2008 Active Directory.
Who Should Attend
IT professionals who want to enhance their skills to support a Windows Server 2008
Active Directory. A working knowledge of Windows Server 2003 AD or Course 960, "Windows Server 2008 Comprehensive Introduction,"
is assumed.
Hands-On Training
Practical hands-on exercises provide experience installing, troubleshooting and
securing the Active Directory. Exercises include:
- Revealing the AD infrastructure with DNS
- Upgrading a Windows Server 2003 Active Directory
- Troubleshooting domain controller creation
- Removing superfluous domain and DC objects
- Correcting Active Directory service failures
- Configuring a reliable replication topology
- Creating and managing a RODC
- Installing domain services on Server Core
- Establishing a DFS replication group
Course Content
- Exploring the AD infrastructure
- The role of DNS in an AD environment
- Planning and preparing for the upgrade
- Analyzing supported paths
- Modifying the Active Directory with ADPREP
- Adding and removing server roles
- Enhancing server functionality with features
- Analyzing security logs with Event Viewer
- Monitoring current server status
- Troubleshooting domain creation
- Working with new DCPROMO features
- Properly retiring domains and domain controllers
- Removing unwanted objects with NTDSUTIL
- Documenting the role holders
- Transferring roles between domain controllers
- Recovering from FSMO failures
- Creating sites to delineate the replication topology
- Defining site properties to control replication traffic
- Assigning clients to sites dynamically
- Assessing the impact of Global Catalog availability
- Analyzing the role of DNS
- Building a Kerberos time convergence hierarchy
- Identifying the Update Sequence Numbers (USN)
- Monitoring replication data with administrative tools
- Resolving data collision issues
- Analyzing the role of the Knowledge Consistency Checker (KCC)
- Monitoring intra- and inter-site replication
- Troubleshooting replication failures
- Controlling replication with site-links and site-link bridges
- Configuring site-link transitivity
- Minimizing the impact on network traffic with Remote Differential
Compression (RDC)
- Optimizing SYSVOL replication
- Backing up and restoring the database
- Comparing authoritative and non-authoritative restores
- Configuring security settings
- Utilizing inheritance to control object access
- Monitoring object access
- Screening logs with Event Viewer
- Diagnosing AD service failures
- Identifying AD service malfunctions with operating system tools
- Recovering from AD service failures
- Developing a consistent troubleshooting technique
- Setting a password replication policy
- Adding DNS and the Global Catalog to an RODC
- Delegating RODC management
- Adding supported roles
- Building a domain controller on Server Core
- Setting the domain functionality
- Analyzing features at various domain functionality modes
- Forest functionality requirements
- Setting the functionality of the forest
|
|
|
|