Microsoft Windows Server 2008: Active Directory Domain Services

Course Overview

Windows Server 2008 Active Directory Domain Services includes features that allow organisations to simplify and secure deployment, and to administer AD DS more efficiently. In this comprehensive four day course, you will gain the essential skills required to effectively manage and secure a high availability AD enterprise and ensure a successful migration to Windows Server 2008 Active Directory.

Have you tried to search our certifications? Use the menu bar to navigate your way around.

Related Courses

• Microsoft Windows Server 2008 Active Directory:Managing & Maintaining Windows Server 2008 Active Directory Servers
• Microsoft Active Directory 2008: Design and Implementation
• Configurer les domaines Services Active Directory dans Microsoft Windows Server 2008

Audience

IT professionals who want to enhance their skills to support a Windows Server 2008 Active Directory. A working knowledge of Windows Server 2003 AD or Course 960, "Windows Server 2008 Comprehensive Introduction," is assumed.

Skills Gained

By completeing this course delegates will benefit from "hands on" exercises, to include:

• Installing, troubleshooting and securing the Active Directory
• Revealing the AD infrastructure with DNS
• Restructuring the AD with ADMT
• Troubleshooting domain controller creation
• Removing superfluous domain and DC objects
• Correcting Active Directory service failures
• Configuring a reliable replication topology
• Creating and managing a RODC
• Installing domain services on Server Core
• Establishing AD RMS and ADFS technologies

Prerequisites

A working knowledge of Windows Server 2003 AD or Course 960, "Windows Server 2008 Comprehensive Introduction," is assumed.

Course Outline

Windows Server 2008 AD Fundamentals

• Exploring the AD infrastructure
• The role of DNS in an AD environment

Deploying a Windows Server 2008 AD

Upgrading existing AD environments

• Planning and preparing for the upgrade
• Analysing supported paths
• Modifying the Active Directory with ADPREP

Restructuring the Active Directory

• Advantages and disadvantages of migration
• Constructing the new AD environment
• Migrating users, groups, computers and resources
• Reorganising AD with the Active Directory Migration Tool (ADMT)

Creating the Active Directory Forest

Building domain controllers and domains

• Troubleshooting domain creation
• Working with new DCPROMO features

Cleaning up metadata from the AD

• Properly retiring domains and domain controllers
• Removing unwanted objects with NTDSUTIL

Managing Flexible Single Master Operation (FSMO) roles

• Documenting the role holders
• Transferring roles between domain controllers
• Recovering from FSMO failures

Planning and configuring Active Directory sites

• Creating sites to delineate the replication topology
• Defining site properties to control replication traffic
• Assigning clients to sites dynamically

Enumerating domain logon service requirements

• Assessing the impact of Global Catalog availability
• Analysing the role of DNS
• Building a Kerberos time convergence hierarchy

Managing Active Directory Replication

The fundamentals of multimaster replication

• Identifying the Update Sequence Numbers (USN)
• Monitoring replication data with administrative tools
• Resolving data collision issues

Creating and customising replication topology

• Analysing the role of the Knowledge Consistency Checker (KCC)
• Monitoring intra- and inter-site replication
• Troubleshooting replication failures
• Controlling replication with site-links and site-link bridges
• Configuring site-link transitivity

Distributed File System Replication (DFSR)

• Minimising the impact on network traffic with Remote Differential Compression (RDC)
• Optimising SYSVOL replication

Recovering from Active Directory disasters

• Backing up and restoring the database
• Comparing authoritative and non-authoritative restores

Securing the Active Directory

Enforcing object security

• Configuring security settings
• Utilising inheritance to control object access

Leveraging AD auditing to aid the delegation of administration

• Monitoring object access
• Screening logs with Event Viewer

Installing a Read-Only Domain Controller (RODC)

• Setting a password replication policy
• Adding DNS and the Global Catalog to an RODC
• Delegating RODC management

Windows Server Core benefits

• Adding supported roles
• Building a domain controller on Server Core

Enhancing the Interoperability of the AD

AD Lightweight Directory Services (AD LDS)

• Extending the AD to applications
• Determining when to use AD LDS

Protecting data with Active Directory Rights Management Service (AD RMS)

• Deploying an RMS solution
• Distributing protected files and containers

Implementing AD Federated Services (ADFS)

• Establishing Federated Trusts
• Sharing user identities across forests
• Supporting Single-Sign-On (SSO)