Book your MS6432 Managing and Maintaining Windows Server 2008 Active Directory Servers Training Course

Module 1: Managing an Active Directory Server Lifecycle

This module explains how to support and maintain Active Directory servers to meet changing business requirements in an enterprise environment.

Lessons

• Planning an Active Directory Server Deployment
• Using Active Directory Server Deployment Technologies
• Adding AD DS Server Roles
• Removing AD DS Server Roles

Lab : Managing and Maintaining a Windows Server 2008 Domain Controller

• Evaluating the Need for AD DS Promotion
• Meeting the Need by Adding a Role
• Managing a Change Request for an RODC by Using the Command Line
• Developing a Management and Maintenance Plan
• Evaluating the Management and Maintenance Plan

After completing this module, students will be able to:

• Plan an Active Directory server deployment.
• Identify different approaches to Active Directory server deployment.
• Add an AD DS server role.
• Remove an AD DS server role.

Module 2: Creating Baselines for Active Directory Servers

This module explains how to create baselines using the WRPM and through analysis, make decisions to improve server performance.

Lessons

• Baseline Methodologies for Active Directory Servers
• WRPM Overview
• Using Metrics to Create Baselines for Active Directory Servers

Lab : Creating Baselines for Active Directory Servers

• Involving Users in Baseline Development
• Choosing Relevant WRPM Counters and Durations
• Evaluating and Revising a Baseline Document in the Face of Business Changes

After completing this module, students will be able to:

• Define strategies for developing baselines.
• Explain the use of the WRPM as a baseline creation and revision tool.
• Describe some of the specific metrics that may be relevant for the different Active Directory roles.

Module 3: Monitoring the System Health of Active Directory Servers

This module explains how to create and evaluate a monitoring plan based on business needs and environments. It also explains how to determine the health of Active Directory servers using performance monitoring and even log triggers.

Lessons

• System Health Overview
• Using Long-Term Monitoring to Identify Trends
• Setting Thresholds and Alerts for Short-Term Monitoring
• Choosing the Appropriate Windows Server 2008 Monitoring Tools

Lab : Monitoring the Active Directory Server Roles

• Setting a Performance Alert to Meet a Business Goal

Discussing Alert Response Strategies

• Building a Case for Configuration Change

After completing this module, students will be able to:

• Define system health, server health, and Active Directory health.
• Define the best procedures to ensure system health and optimal performance for Active Directory servers.
• Set thresholds and alerts that are used for short-term monitoring.
• Describe the Windows Server 2008 monitoring tools and how to decide when the different tools are appropriate in different business situations.

Module 4: Managing Active Directory Domain Services

This module explains how to implement the methodology of maintaining Windows Server 2008 AD DS.

Lessons

• Restarting and Restoring Active Directory
• Overview of the Flexible Single Master Operations (FSMO) Roles
• Planning Sites and Replication
• Managing RODCs
• Methods of Managing Windows Server Core
• Best Practices for GPOs and Links
• Delegating Active Directory Administration

Lab : Managing AD DS

• Offline Defragging of the Active Directory Database
• Evaluating an RODC with Read-Only DNS Solution
• Making Site Replication Decisions

(Group Policy Link Strategies

After completing this module, students will be able to:

• Describe the impact of Windows Server 2008 methods for restarting Active Directory without rebooting.
• Define the FSMO roles and the Global Catalog pseudo-role.
• Explain the importance of site definitions and how to optimize the AD DS replication activity.
• Explain the functionality of RODCs and the key benefits with RODCs deployed.
• Explain the methods of managing Windows Server Core.
• Identify the best practices for Group Policy Objects (GPOs) and links.
• State the pros and cons of delegating administration of Active Directory.

Module 5: Maintaining Security for Active Directory Servers

This module explains how to deploy proven methods to harden the Active Directory servers.

Lessons

• Server Hardening Techniques
• Using the MBSA to Discover and Remove Security Holes
• Using Fine-Grained Password Policies to Simplify Network Organization
• Planning Security Auditing
• Enhancing Physical Security

Lab : Maintaining Security for the Active Directory Servers

• Manually Implementing AD DS Server Hardening
• Assessing Ongoing Security Requirements
• Deploying Fine-Grained Password Policies

After completing this module, students will be able to:

• Describe the techniques used for manual server hardening.
• Use the MBSA to discover and remove security holes.
• Explain why you would use fine-grained password policies and how to maintain them.
• Explain when to perform security auditing and how to define a proper security baseline.
• Explain how to solve physical security problems and the ramifications of lax security policies.

Module 6: Managing Active Directory Service Roles

This module explains how to add non-AD-DS service roles to a Windows Server 2008 network and manage those roles with supplied tools.

Lessons

• Using Windows Server 2008 Tools for AD CS
• Implementing AD LDS
• AD FS Overview
• AD RMS Overview

Lab : Managing Active Directory Service Roles

• Installing the AD LDS Role
• Identifying Ongoing Management Concerns
• Using Windows Server 2008 Tools for Managing AD LDS

After completing this module, students will be able to:

• Use the Windows Server 2008 tools to operate Certificate Services.
• Explain when to use AD LDS.
• Identify management concerns with Active Directory Federation Services (AD FS).
• Identify management concerns with Active Directory Rights Management Services (AD RMS).